Snapshot 253503
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to main content RAIDS Privacy Policy Introduction RAIDS AI LTD (“RAIDS” or “we” or “us”) has created this Privacy Policy in order to disclose its processing, collection, use and disclosure of personal information and other data about you by RAIDS, its employees, affiliates, and successors and assigns, in connection with its website, applications, software, services, including the service that allows monitoring of other AI systems for rogue behaviour, the RAIDS browser extension (currently offered in beta) described in the section “RAIDS Browser Extension (Beta)” below and other RAIDS properties or technology displaying or referencing this Privacy Policy (collectively, the “Services”). If you use the Services, you acknowledge this policy and the collection, use and sharing of your personal information and data as described herein, and in accordance with the applicable agreements with RAIDS, including but not limited to any applicable terms of service. It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them. The Services are not intended for children and we do not knowingly collect data relating to children. Please read the following carefully to understand our practices regarding your personal data and how we will treat it. Who we are We are RAIDS AI Ltd, a limited liability company registered in the Republic of Cyprus under company number HE 466437. Our registered office is at Nikis 26, TRANSAFRICA, Floor 3, Flat/Office 301, 1086 Nicosia, Cyprus. Our email is info@raidsai.ai. We are the controller responsible for your personal data. In some cases, we may process your personal data based on an agreement with a third party. In those cases, that third party is a data controller, and we are a data processor. In relation to the Services, we may act as the data processor of business customers that may provide personal information in their feedback to us. In such instances, we will only process your data to provide the Services based on a relevant data processing agreement, in accordance with applicable law. This Privacy Policy covers our processing as a controller. If you have any questions about this Policy or how we process your personal data or our privacy practices, please contact us at info@raidsai.ai. What personal information we collect about you RAIDS only collects the most relevant, proportionate to each purpose and necessary personal information from you in the course of our business when you use the Services. RAIDS may collect or receive information about each person who visits, utilizes or interacts with the Services. RAIDS collects, uses, stores and transfers personal data about you as follows: Identity Data that includes your first name, last name, username or similar identifier, Contact Data that includes but is not limited to billing address, delivery address, email address, telephone numbers Financial Data that includes but is not limited to bank account and payment card details Transaction Data that includes but is not limited to details about payments to and from you and other details of products, services you have purchased from us Technical Data: When you visit any Services, we may automatically collect certain information, including information about your device such as your web browser, IP address, time zone, and other information on your device in connection with our site and Services. Additionally, we collect information as you browse the website, including the web pages you view, the referral source (such as the page, website or search terms that brought you to the site), and other information about your interactions with our Sites (Usage Data). Such information may or may not be considered personal information. To the extent they are considered personal data, we will process them in accordance with this Privacy Policy. Extension Data: where you use the RAIDS Browser Extension, the prompts and responses described in the section “RAIDS Browser Extension (Beta)” below. Account and authentication data: the email address and password you provide for RAIDS registration and login, and authentication tokens used to maintain your session. We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature of our Sites. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy. The Services do not require you to include sensitive information (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union memberships, genetic data, biometric data, data concerning health or data concerning sexual orientation). We do not seek to obtain such information. Where we process it, we do so only on a lawful basis under Article 9(2) of the GDPR, including, where applicable, your explicit consent given separately at the time of collection, as described in the section “RAIDS Browser Extension (Beta)” below. In any case, we advise you not to use Sensitive Information. If you fail to provide information Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time. How we obtain your personal information We use different methods to collect data from and about you including through: Information you give us. This is information you consent to giving us about you by filling in forms on Services, including by opening an account, or by corresponding with us (for example, by email or any other form we have on our website). It includes information you provide when you register to use the Services, sign up or make an account with us, subscribe to any of our Services, subscribe to our publications, apply for our services, share data via social media functions of the Services, request marketing to be sent to you, enter a competition, promotion or survey, give us feedback, and when you report a problem with our Services, or when Services send us error reports. If you contact us, we will keep a record of that correspondence. Additionally, we may collect information about you when you include it as part of your feedback and input to our AI service that monitors the performance of AI systems. We also collect information from you when the RAIDS Browser Extension collects it from the AI systems you use while the Extension is enabled in your browser’s extension settings. Information we collect about you via automated technologies or interaction. Each time you visit or use our website and Services, we will automatically collect personal data including Technical Data about your equipment, browsing actions and patterns, and Usage Data. We collect this data using cookies and other similar technologies. Please see our cookie policy at https://www.raidsai.ai/legal/cookie-policy for further details. Information we collect as described to you at or before the time of collection Information we receive from other sources including third parties and publicly available sources. We will receive personal data about you from various third parties as set out below: analytics providers, such as Google Analytics. advertising networks, search information providers. Contact, Financial and Transaction Data from providers of payment services our affiliates, organizations with a relationship with RAIDS (such as customers, prospects and suppliers), social media sites, organizations providing marketing contacts, publicly available databases, other third-party services and organizations to supplement information provided by you. Some personal information may also be collected by a third-party such as a customer, service provider, or social networking site. If you interact with these third-parties or other third-party services, such as social media companies, particularly where you have an account with the third party, they may collect additional information separate from RAIDS. Use and Disclosure of Personal Information Purposes for which we will use your personal data We will use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: When we have your consent, Where we need to perform the contract we are about to enter into or have entered into with you. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Where we need to comply with a legal obligation. We shall not carry out any automated decision-making activities, including profiling, using your personal information which produce legal effects concerning you or similarly significantly affect you. RAIDS Browser Extension (Beta) This section applies to your use of the RAIDS browser extension distributed through the Microsoft Edge Add-ons store for Microsoft Edge (the “Extension”). It supplements the rest of this Privacy Policy. If there is a conflict, this section prevails in relation to the Extension. RAIDS acts as controller of the personal data processed through the Extension. If we introduce organisational deployment under a separate agreement, that agreement and any applicable Data Processing Agreement will specify the parties’ roles. What the Extension collects. While the Extension is enabled in your browser’s extension settings, it collects the prompts you enter into, and the responses you receive from, the AI systems listed in the Extension as well as feedback you provide regarding the service’s scoring of submitted samples, including whether you agree or disagree with a score and any optional written feedback (“Extension Data”). The Extension does not collect content from other websites or your wider browsing activity, and it collects no new Extension Data while it is disabled. We also collect your email address and password for RAIDS signup and login and the Technical Data necessary to operate the Extension, such as Extension version, browser type and error logs. After login, we store a signed authentication token (a JSON Web Token or JWT) locally on your device to keep you signed in and authenticate requests without asking you to enter your password each time. Personal data of other people and limits of de-identification. We transmit Extension Data to our servers and store raw prompt and response content in our database, together with the analysis results generated from it, so that you can review each sample and give us feedback on it, as on the RAIDS platform. Extension Data may contain personal data about you and about other people you mention in your conversations with AI systems. Before processing, the Extension automatically masks certain identifiers, such as email addresses. Because of technical limitations during the beta, the Extension cannot reliably detect or remove other personal data, such as names, or references that could identify a person from context. Extension Data should therefore be treated as containing personal data. Authorised personnel can technically access the actual content, although we do not routinely review it. We ask that you avoid including other people’s personal data, or special categories of personal data (such as information about health) or confidential information, in your conversations while the Extension is enabled. Purposes and lawful bases. To create and administer your RAIDS account, authenticate your login and provide the Extension, including monitoring and evaluating the behaviour of the AI systems you use and displaying the results to you, and storing each prompt and response with its results so that you can review the sample and give us feedback on it. Lawful basis: performance of our contract with you (Article 6(1)(b) GDPR). To test, secure, troubleshoot and improve the operation and reliability of the Extension during the beta. Lawful basis: our legitimate interests in developing and maintaining a safe and reliable product (Article 6(1)(f) GDPR), subject to balancing those interests against your rights. You must not include personal data about other people in conversations while the Extension is enabled unless you have obtained their express written consent to its collection, use and disclosure through the Extension as described in our Privacy Policy. They must be able to withdraw that consent at any time by contacting info@raidsai.ai. If you do not have that consent, disable the Extension before the conversation. Where you choose to include special categories of personal data, we process it only with your explicit consent given in the Extension (Article 9(2)(a) GDPR). We do not seek special categories of personal data and do not select them for training. However, because the Extension cannot reliably detect them, any such data you include may be reflected in the embeddings or numerical vectors used for model training described below. Such data is used for the Service and model training only if you have given the optional explicit consent accordingly. If you do not want this, please do not include such data, do not give (or withdraw) your consent to model training in Settings, or disable the Extension before the conversation. Model training. We use Extension Data to train, evaluate and improve our own models that support the Extension’s AI monitoring function. We convert prompts and responses, as received, into numerical representations and train our models on those representations rather than on the text itself. Where masking has been applied, whether by you or by the Extension, the embeddings are derived from the masked content. We do not otherwise remove names or other identifiers before conversion, so any personal data remaining in Extension Data, including personal data about other people, is reflected in the embeddings. We therefore treat those embeddings as personal data and do not regard them as anonymous. Lawful basis: your consent (Article 6(1)(a) GDPR) and, to the extent your Extension Data contains special categories of personal data, your explicit consent (Article 9(2)(a) GDPR), given in the Extension at registration or in Settings. Model training is optional: we use your Extension Data for training only while your consent is in place, and refusing or withdrawing consent does not affect your use of the Extension. Where the consent wording shown to you says so, your consent also covers Extension Data you provided before giving it, including while training was off, provided we still lawfully hold that data. Personal data of other people contained in Extension Data is used for training on the basis of our legitimate interests, as described above. We apply the following safeguards: masking of certain identifiers before processing; training on embeddings rather than on text; no routine human review; restricted access as described in “Human access to AI Service data” below; and no use of Extension Data to train third-party generative AI models. Withdrawing your consent to model training You can withdraw your consent to the use of your Extension Data for training our general AI model at any time by switching off training in Settings (Article 7(3) GDPR). Withdrawal does not affect the lawfulness of training carried out before it. Anyone whose personal data appears in Extension Data, other than the account holder, may object to its use for model training at any time (Article 21 GDPR) by emailing support@raidsai.ai. Following a withdrawal or a successful objection, we will promptly exclude the relevant Extension Data from future training. Data already used in models trained before then cannot be removed from those models. We will not delete Extension Data we still need to provide the service to you (for example, your review history), but we will no longer use it for training. You can continue using the Extension after withdrawing consent. Information for individuals mentioned in Extension Data. If you believe that your personal data has been processed through the Extension because another person mentioned you in a conversation with an AI system, you may exercise your rights described in this Privacy Policy, including your right to object to the use of that data for model training, by contacting us at info@raidsai.ai. We publish this section so that such individuals can be informed, as contacting them directly would be impossible or would involve disproportionate effort (Article 14(5)(b) GDPR). Retention. Extension Data in its original form, as raw data, is retained in our database together with the analysis results generated from it, so that you can review give us feedback. Embeddings derived from Extension Data are retained for as long as they are needed to generate analysis results and to train and evaluate our models. We retain personal data only for as long as necessary for the disclosed purposes, taking account of the sensitivity and volume of the data, the need to investigate errors or security incidents, and applicable legal obligations or claims. Data that is no longer necessary must be deleted or genuinely anonymised through our retention process, even if no user requests deletion. You may request deletion as described below. When we receive a deletion request, we delete your stored Extension Data and the embeddings derived from it and stop using them for model training. Models already trained before your request are not automatically retrained as a result of it . Enabling, disabling and deletion requests. There is no switch on/off inside the Extension to enable or disable the Extension itself (your consent to model training is managed in Settings, as described above). In Microsoft Edge, go to Extensions, then Manage extensions, to enable or disable RAIDS. Disabling or uninstalling stops new collection but does not delete information already held on our servers or automatically close your RAIDS account. There is currently no self-service deletion feature. To request deletion of your account and/or personal data, or to object to the use of your personal data for model training, email support@raidsai.ai to open a support ticket; you may also use info@raidsai.ai. Tell us which account and data your request concerns. Microsoft Edge Add-ons developer policies. Our handling of Extension user data complies with, and is subject to, the Microsoft Edge Add-ons developer policies. This applies to raw data and to aggregated, anonymised, de-identified and derived data. We do not sell Extension Data, use it for personalised advertising or to determine creditworthiness or for lending purposes, or transfer it to third parties except as necessary to provide or improve the Extension, to comply with applicable law, to protect against malware, spam, phishing or other fraud or abuse, or as part of a merger, acquisition or sale of assets after obtaining your explicit prior consent. each time as permitted by the applicable store policies and applicable law. Sharing under Microsoft Edge requires your prior opt-in consent in the Extension, disclosure of the use and recipient types, and an in-Extension withdrawal mechanism that immediately and fully stops collection, transmission and processing of user data. Any transfer involving a merger, acquisition or sale of assets also requires your explicit prior consent. Before any such third-party sharing begins, we will provide the required disclosures, obtain your opt-in consent, and make the withdrawal mechanism available within the Extension. Age. The Extension is intended only for users aged 18 or over. Change of Purpose We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the rules in these policy, where this is required or permitted by law. Purposes and lawful basis for processing We use and disclose your personal information for the following purposes: To provide, deliver, and improve the Services, including: registering you as a new customer or onboarding you, creating and administering your account generating outputs and reports based on your feedback and input regarding performance of AI systems Lawful Basis for Processing: Performance of a contract with you To allow you to submit payment for our products and services, and process and deliver your order, including: Managing payments, fees, and charges, Collecting and recovering money owed to us Note: We store limited payment-related data. Most such data is transferred to our payment processor. Please review our payment processor’s Privacy Policy for details on their data usage. By using our site and services, you agree to be bound by our provider’s Privacy Policy. Lawful Basis for Processing: Performance of a contract with you Necessary for our legitimate interests (to recover debts due to us) To manage our commercial relationship with you, including: Notifying you about changes to our terms or privacy policy Notifying you about changes to our website, or Services Asking you to leave a review or take a survey Providing customer support, answering and managing your support requests, including fixing errors or bugs related to your use of our Services Performing functions as instructed by you or otherwise described to you at the time of collection Responding to requests, inquiries, and questions made by you, and providing requested information Lawful Basis for Processing: Performance of a contract with you Necessary to comply with a legal obligation Necessary for our legitimate interests (to keep records updated and study how customers use our products/services) To administer and protect our business and website, including: Managing the Security of our Services Troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data Auditing and monitoring the Services Providing and maintaining the Services Providing analysis and insights to improve the Services Protecting the rights, property, or safety of the company or third parties Detecting, preventing, resolving, and addressing technical issues Lawful Basis for Processing: Necessary for our legitimate interests (for running our business, administration, IT services, network security, fraud prevention, and in the context of a business reorganization or group restructuring exercise) Necessary to comply with a legal obligation To deliver marketing, including Sending newsletters with updates and information about the Services Inviting you to our events and webinars Developing leads and business opportunities Lawful Basis for Processing Your consent for sending you our newsletters. You can withdraw your consent at any time by unsubscribing or contacting us at info@raidsai.ai To conduct a sale of all or substantially all of our business or assets, including the sale, assignment, or transfer of your personal information in connection with such a transaction Lawful Basis for Processing: Necessary for our legitimate interests (to enable a potential sale or reorganization of our business) To comply with any applicable law, court order, judicial process, or regulatory requirements, including: Fulfilling legal, compliance, regulatory, and risk management obligations Identity verification, auditing transactions, and other compliance activities Using data as otherwise required or permitted by law Lawful Basis for Processing: Necessary to comply with a legal obligation To enforce our legal rights, terms and conditions, and other agreements, including Monitoring breaches of our Terms or Acceptable Use Policy Managing requests of our customers seeking to enforce part of the Terms Establishing, exercising, or defending legal claims Responding to investigation, court orders, legal process, or investigating, preventing or taking action regarding illegal activities, suspected fraud, security of systems or data, or situations involving potential threats to the physical safety of any person, or as otherwise required by law. Lawful Basis for Processing: Performance of a contract with you Necessary to comply with a legal obligation Necessary for our legitimate interest (ensure security) To resolve disputes and defend ourselves, including Investigating and resolving any disputes that may arise out of your use of the Services, including defending against potential claims Enforcing our contract, including actions such as suspending your account Lawful Basis for Processing: Legitimate interest (protecting and exercising our legal rights) Performance of a contract with you To reply to your requests about your personal data We use your personal data to reply to your requests to exercise your rights on your personal data Lawful basis: Our legal obligation to reply to your requests Who we share your personal information with We may share personal information the following categories of third parties as necessary: Service providers who provide IT, system administration services and customer screening services. Our payment processors in order to allow them to carry out and process your payments for the purchase of our products/services/content. Please make sure to review the payment processor’s Privacy Policy to determine how they use, disclose and protect the relevant payment data. Third parties to whom we outsource certain support services such as, without limitation, IT systems and/or software and/or storage providers, IT Support service providers, document and information storage providers. Professional advisers including lawyers, bankers, auditors, insurers and other professionals who provide consultancy, banking, legal, insurance, corporate, administration and accounting services. Government or governmental agencies, regulatory authorities, courts and law enforcement agencies, registries. We may be required to disclose your information to comply with legal or regulatory requirements. We will use reasonable endeavours to notify you before we do this, unless we are legally restricted. Appropriate parties in the event of emergencies. Advertising networks: to support and display ads on our Services, and other social media tools. (this does not apply to Extension Data). Third party service providers to assist us with client insight analytics, such as Google Analytics. Please note the following: This list is non-exhaustive and there may be other examples where we need to share with other parties in order to provide our services as effectively as we can. We do not sell, rent or otherwise make personal information commercially available to any third party, except with your prior permission. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. Cookies We use cookies and/or other tracking technologies to distinguish you from other users of the Services, or any other relevant services sites and to remember your preferences. This helps us to provide you with a good experience when you use the Services and also allows us to improve the Services. For detailed information on the cookies we use, the purposes for which we use them and how you can exercise your choices regarding our use of your cookies, see our cookie policy. Data Retention We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Specific retention periods for Extension Data are set out in the section “RAIDS Browser Extension (Beta)” above. We may retain your personal data for longer if we are required to do so based on our regulatory, compliance, or professional indemnity obligations or in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. We may remove your personal information based on our retention policies in compliance with our security standards without further notice or liability. In some circumstances you can ask us to delete your data: see Your legal rights below for further information. In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. How we protect your personal information We use a variety of technical and organisational measures to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with the applicable data protection laws including the EU General Data Protection Regulation. We have also implemented appropriate information security policies, rules and technical measures to secure your personal information collected by us. Your personal information is saved in an encrypted form. All of our partners, employees, consultants, workers and data processors (i.e., those who process your personal information on our behalf), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of such personal information, keep it secure and protect it. Human access to AI Service data. Input, output, feedback and other data processed by the RAIDS AI Service, including raw prompts and responses stored by the RAIDS Browser Extension, are processed through automated evaluation, and there is no routine human review of such data. Authorised RAIDS personnel may access such data only where strictly necessary, on a need-to-know basis, subject to internal authorisation controls, confidentiality obligations and audit logging, and solely: to respond to your support request or feedback, where you have asked us to review specific data; to prepare AI safety or performance reports forming part of the Services; for Extension Data, human review for this purpose is limited to aggregated and anonymised data used for internal operations, unless another permitted ground in this list applies; to investigate security incidents, fraud, abuse, or suspected misuse of the Services, including breaches of our Acceptable Use Policy; or to comply with applicable law. Where we process such data as a processor on behalf of a business customer, human access is governed by our Data Processing Agreement and that customer’s instructions. Please do not submit personal data that is not necessary for your use of the Services, in particular personal data relating to other people or special categories of personal data We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator when we are legally required to do so. Please note that certain data uploaded to enable the operation of our Services is stored temporarily for user validation purposes and deleted after analysis. This does not apply to raw Extension Data, which is stored as described in “RAIDS Browser Extension (Beta)” above. Other data may be stored to enable the operation, maintenance, and provision of Services. We implement security measures to protect the confidentiality of such data. International Transfers In order to provide our services, we may need to transfer your personal information to locations outside Cyprus. This may entail a transfer of your information from a location within the European Economic Area (the “EEA”) to outside the EEA, or from outside the EEA to a location within the EEA. For any transfer of data outside the EEA, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws and the EU General Data Protection Regulation. Your rights regarding your personal information You have the following rights in relation to the personal information we hold about you in the EU and the UK. Please note that some of these rights will only apply in certain circumstances and some of them may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure due to reasons of confidentiality obligations. Access: you are entitled to ask us if we are processing your data and, if we are, you can request access to your personal data. This enables you to receive a copy of the personal data we hold about you and certain other information about it; Correction: you are entitled to request that any incomplete or inaccurate personal data we hold about you is corrected; Erasure: you are entitled to ask us to delete or remove personal data in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with claims; Restriction: you are entitled to ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy or the reason for processing it; Transfer: you may ask us to help you request the transfer certain of your personal data to another party; Objection: where we are processing your personal data based on legitimate interests (or those of a third party) and you may challenge this. However, we may be entitled to continue processing your information. You also have the right to object where we are processing your personal information for direct marketing purposes; Automated decisions: you may contest any automated decision made about you where this has a legal or similar significant effect and ask for it to be reconsidered. Consent: where we are processing personal data with consent, you can withdraw your consent. In certain states in the United States, you have the following rights: Access. You may have the right to access your personal data or the categories of personal data that our Company processes. Correct/Update. You may have the right to correct and/or update your personal data. Erasure. You may have a broader right to erasure of personal data that we hold about you. For example, if it is no longer necessary in relation to the purposes for which it was originally collected. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions or to comply with our legal obligations, among other things. Data portability. In certain circumstances, you may have the right to be provided with your personal data in a structured, machine readable and commonly used format and to request that we transfer the personal data to another data controller without hindrance. Confirm processing. You may have the right to confirm our processing of your personal data. Transparency. You may have the right to request additional information not contained in this Privacy Policy. Note: if your US state requires specific privacy disclosures, please see our disclosures above concerning our collection, use and disclosure of personal information as well as the information contained in the California privacy rights section below. Cross-contextual behavioral advertising. You may have the right to opt out of the “sharing” of personal data in connection with cross-contextual behavioral advertising. Restrict processing. You may have the right to request that we restrict processing of your personal data in certain circumstances. For example, where you believe that the personal data we hold about you is inaccurate or unlawfully held. You may also be able to opt-out of targeted advertising, processing of sensitive data, and profiling in furtherance of law. Accessibility: You may have the right to additional assistance with your privacy rights. If you are unable to reasonably access this Privacy Policy due to a disability, please contact us via the contact information below so that we may determine how to provide you with alternate notice. If you would like to exercise any of the above rights, please contact us by email (see our contact details in the “Contacts” Section below). Extension users currently request deletion through a support ticket. You can withdraw your consent to model training in Settings or contact us as described in “RAIDS Browser Extension (Beta)” above. We will consider your request in accordance with applicable laws. To protect your privacy and security, we may take steps to verify your identity before complying with the request. Where our services are made available to you through an organization (e.g. your employer), that organization is the administrator of the services and is responsible for the accounts and/or service over which it has control. Please direct your data privacy questions to your administrator, as your use of the services is subject to that organization's policies. We are not responsible for the privacy or security practices of an administrator's organization, which may be different from this policy. RAIDS will not discriminate against a data subject for exercising any of its data protection rights. For reconsideration of our response to your request under any applicable law that provides for an appeal, please request an appeal within the time frame for the appeal notice set forth in the applicable law (or in the event no time frame is provided, then fifteen days) by utilizing the contact information published below. If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. There may be exceptions to the foregoing rights and some or all of the above rights may not apply to you. Where a privacy law permits an organization to continue to maintain and/or use personal information for a particular purpose, despite receiving your request, we reserve the right to utilize your personal information for such purpose. In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal data for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request. If you are an individual in the EU / EEA, you have the right to make a complaint to the relevant Supervisory Authority. A list of EU / EEA Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html. If you are in the UK, you have a right to make a complaint to the UK Information Commissioner's Office. You can visit their website at www.ico.org.uk. If you live in a different country, state or other jurisdiction that provides for additional rights or disclosures regarding your personal information, and you wish to exercise those rights or receive those disclosures, please contact us using the contact information below. Our Marketing Policy We will only process your personal data for marketing purposes once we have your consent. You have the right to object where we are processing your personal information for direct marketing purposes. This means you can opt-out from receiving direct marketing from us at any time. You can opt-out of receiving direct marketing from us at any time. You can do this by clicking on the "unsubscribe" link included at the end of any marketing email we send to you, or by contacting us at info@raidsai.ai. You have the right to ask us not to continue to process your personal data for marketing purposes. Links to third party websites or apps Our Services, email updates and other communications may, from time to time, contain links to and from the websites or apps of others. The personal data that you provide through these websites or apps is not in any case subject to this Privacy Policy and the treatment of your personal data by such websites is not our responsibility. You should consult the third parties’ Privacy Policy notices which will set out how your information is collected and processed when visiting those websites or apps, as we have no control over information that is submitted to, or collected by, these third parties. This includes the providers of the AI systems you use with the RAIDS Browser Extension, whose own terms and privacy policies apply to your use of their systems. Children We do not knowingly collect information from children or other persons who are under 16 years old without the consent and acceptance by any of their parent and/or guardian. If you are under 16 years old, you may not submit any personal data to us without the consent and acceptance by any of your parent and/or guardian. The RAIDS Browser Extension is intended only for users aged 18 or over. Changes to this Policy We may make changes to this Privacy Policy from time to time. To ensure that you are always aware of how we use your personal information we will update this Privacy Policy from time to time to reflect any changes to our use of your personal information. We may also make changes as required to comply with changes in applicable law or regulatory requirements. Where it is practicable, we will notify you by email of any significant changes. However, we encourage you to review this Privacy Policy periodically to be informed of how we use your personal information. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. Contact us Notwithstanding any other specific provision in this Privacy Policy, you can contact us at info@raidsai.ai to: See what data we have about you, Change or correct any data we have about you, Request us to delete any data we have about you, Opt-out of receiving promotional communication and content from us, Ask questions, make inquiries, complaints, or claims, or provide feedback. California Privacy Rights and Disclosures Below is a list of categories of personal data (from the California Consumer Privacy Act) we have collected and disclosed about consumers for a business purpose in the past 12 months: Category A: Identifiers; Category B: Personal Data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)); Category C: Protected classification characteristics under California or federal law; Category D: Commercial information; Category F: Internet or other electronic network activity; Category G: Geolocation data; Category I: Professional or employment-related information; Category K: Inferences drawn from other Personal Data to create a profile about a consumer. The above list does not include information about personal information collected and disclosed while operating as a service provider to our customers. Personal information may be used and disclosed for business purposes such as ensuring the security of the Sites, performing services on our behalf, short-term transient use, providing advertising and marketing services, technological research and development, and other business purposes. Service providers and other categories of third parties that may receive personal information under a business purpose include advertising networks, affiliates, data analytics providers, email providers, government entities, internet and other technology service providers, lendors or other financing, payment processors, and social networks. If the California Consumer Privacy Act, as amended (“CCPA”) applies to your personal information, please also see the section titled “Your Privacy Rights” above. If you are a California resident, California Civil Code Section 1798.83 permits you to request certain information regarding our disclosure of personal information to third parties for the third parties’ direct marketing purposes. To make such a request, please contact us by sending an e-mail to support@raidsai.ai. Our website and/or application are not intended to appeal to minors. However, if you are a California resident under the age of 18, and a registered user of our website and/or application, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please send an e-mail with a detailed description of the specific content or information to support@raidsai.ai. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested. Under California law, California residents who have an established business relationship with us may opt-out of our disclosing personal information about them to third parties for their marketing purposes. Last updated: 10/11/2026