Laurl Inc. Privacy Policy

1. PURPOSE OF POLICY

We are committed to protecting your privacy as you use our Service! We created this Privacy Policy (“Policy”) to give you confidence as you use our website, laurl.ai (the “Website”), our software (“Software”), as well as any other related services provided by us (collectively, the “Service”). This Policy covers how we collect, use, store, and share various information that, on its own or in combination with other information, may be used to identify individuals (“Personal Data”). All references to “we”, “us”, “our”, or “Laurl” refer to Laurl Inc., a Delaware corporation. All references to “Company” refer to your employer in such cases where Laurl has entered into a contract with such Company to provide the Service to the Company’s employees and other personnel. All references to “you”, “your”, or “Authorized User” refer to the individual agreeing to this Policy and to whom the Company has granted administrative access to the Service. For the sake of clarity, this Policy does not apply to the Company. Do not hesitate to contact us at [email address] if you have any questions or want to discuss this Policy.

This Policy also describes our practices related to information of individuals with whom we communicate for marketing or promotional purposes but who may not otherwise be users of the Software (“Marketing Recipients”). By using the Software and agreeing to this Policy, or by agreeing to this Policy as a Marketing Recipient, you consent to the privacy practices described in this Policy.

2. SOFTWARE

The Software is a proprietary software that helps the Company and users manage HR-related disputes and other workplace concerns involving the Company’s employees (the “Employees”).

3. INFORMATION WE COLLECT AND HOW WE USE IT

Required Information You Voluntarily Provide Us.
When you begin using the Software, you will be required to provide us with various information that, on its own or in combination with other information, can be used to identify you as an individual (“Personal Data”) for the purposes of creating an account on the Software (your “Account”). Such Personal Data includes your first and last name, phone number, the name of the Company, your title or role at the Company, the department you work at in the Company, and your e-mail address.

Personal Data We Collect from Marketing Recipients.
In addition to the Personal Data we collect from users of the Service, we collect Personal Data from Marketing Recipients who are interested in learning more about our products and services. This Personal Data consists of basic contact information such as the Marketing Recipient’s name and email address. This Personal Data is collected by us when Marketing Recipients sign up for commercial emails from us via online or offline sign up forms, and through other means such as email. For Marketing Recipients who are not otherwise users of the Service, we only use your Personal Data to send communications, including updates on promotions and events, relating to products and services offered by us and by third parties we work with that are related to the Service.

Optional Information You Voluntarily Provide Us.
In addition to the required information that you provide to us in order to use the Service, there are various pieces of information you can, or may in the future be able to, choose to provide as part of your use of the Service. Further, now or in the future, we may allow you to provide us with access to additional information and data through integrations with third party goods and services. The various categories of information in this subsection is, or may be, considered Personal Data, and is used for the purpose of providing you with the Service’s functionality. While all of the information described here may not be required to use the Service, some aspects of the Service may not be available if you choose not to provide us with such information.

Laurl may also have message boards and/or chat areas, where users can exchange ideas and communicate with one another. When posting to a message board or chat area, please be aware that the information is being made publicly available online and the user does so at his or her own risk.

Special Information.
Although you, as an Authorized User, will not be required to submit Special Information to us, you may, from time to time, submit Employees’ Special Information as part of your use of the Services. “Special Information” means Personal Data of Employees, including, without limitation, Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, or data concerning a natural person's sex life or sexual orientation. The Company is responsible for obtaining all legally required consent to collect, input, and transmit such Special Information into and through the Software.

Information Collected Automatically As You Use The Service.
In addition to the information that you provide to us voluntarily, Laurl may, now or in the future automatically collect information through the Service about how you use and interact with the Service and other similar activities in order to better understand our users and how they use the Service, and to improve the Service.

Cookies.
A cookie is a small text file that can be stored on and accessed from your device when you visit and use our Service. Cookies enable us to “personalize” the Service for users by remembering information about our users. The Service uses cookies to store your preferences, display content based upon what users view to personalize your visit, analyze trends, administer the Website, and track users' movements around the site. We use cookies on our Website and our Software.

Please review your web browser settings to modify your cookie settings, to disable the use of cookies, or to delete cookies. Please note that if you delete, or choose not to accept, cookies from the Service, you may not be able to utilize the features of the Service to their fullest potential. In addition, please note that third parties such as advertisers or analytics providers may also use cookies and similar technologies while you are browsing or using the Service. We unfortunately have no control over such third parties’ use of these technologies.

Cookies can be categorized in different ways:

First Party vs. Third Party Cookies: As the name implies, first party cookies are put on your device by Laurl. Third party cookies are placed on your device not by Laurl, but by a third party. The Service uses both first party and third party cookies.

Purpose:

Necessary - These cookies are necessary to allow us to operate Service so you may access it as you have requested. These cookies, for example, enable us to remember your previous actions within the same browsing session and secure our Service.

Analytical - These cookies are used by third party service providers (i.e. third party cookies) to analyze how the Service is used and how the Service is performing. These cookies include, for example, Google Analytics cookies.

Functionality – these cookies let us operate the Service in accordance with the choices you make. These cookies permit us to "remember" you in-between visits. For instance, we will recognize your user name and remember how you customized the Service, and allow us to provide you with the same customizations during future visits.

Third-Party Advertising – These third-party cookies collect information about your activities to provide you targeted advertising and to measure the effectiveness of our marketing campaigns. The third-party service providers that generate these Cookies, such as Facebook, have their own privacy policies, and may use their Cookies to target advertising to you on other websites, based on your visit to our Service.

First Party Cookies
We use our cookies for security purposes of customizing your experience with our Service, improving our Service, and tailoring our messaging. Below are some examples of how we use first party cookies.

Log & Device Data – These cookies help us determine what type of devices you use, so that we know which environments to prioritize building features and workflows for.

Analytics Data – These cookies help us understand how you use the Service so that we can improve the Service.

Security Data – These cookies help us determine whether to log you out of inactive sessions, which devices you are logged into, and from where.

Third Party Cookies

Google Analytics Cookies - We use Google Analytics to analyze our web traffic and improve user experience. Google Analytics uses cookies to generate statistical information about how our Website is being used. For more information on these cookies, please see here.

Other Anonymous Data We Collect.
When you use and visit the Service, we may also use third-party services, such as Google Analytics and others, which use cookies to collect generic, anonymous information that does not identify you (see above for more information on cookies). We use this information to better understand how users interact with the Service and to improve your user experience while using the Service.

Do Not Track Signals.
We do not track you or collect your information across third party websites or online services. Thus, we do not receive Do-Not-Track signals, or other similar signals. To the extent that we do receive any such signals, we will not comply with them as it is not an aspect of the functionality of our Service.

4. PURPOSES OF COLLECTION AND LEGAL BASES FOR USE

We use the Personal Data described above primarily for providing you with the core aspects of the Service, namely to provide you with the Software and its functionality.

However, we may also use your Personal Data, or aggregated and/or anonymized Personal Data (but not Personal Data that can be used to identify users), for our own purposes of understanding our users and how they use the Service, as well as improving the Service over time. By using the Service, you consent to these additional uses.

The legal grounds for our processing your Personal Data for the purposes above are: first and foremost, you provided your consent by agreeing to this Policy, which you may withdraw at any time by notifying us at the email listed below; it is necessary for our contractual relationship; the processing is necessary for us to comply with our legal or regulatory obligations; and/or the processing is in our legitimate interest as a provider of the Service (for example, to protect the security and integrity of our systems and to provide you with customer service and the core functionality of the Service).

5. HOW WE SHARE YOUR INFORMATION

First of all, we do not sell or share your Personal Data with advertisers. We also do not share your Personal Data with other third parties except to the extent that it is in furtherance of the Service.

Information Shared By You Through The Service.
You may, now or in the future, be able to choose to voluntarily share information collected through the Service through email, or other means of communication.

Your Company may have access to your Personal Data. Laurl acts at the direction of your Company with regards to sharing your Personal Data with your Company.

Our Personnel And Vendors.
To be able to effectively provide you with the Service, and to improve the functionality of the Service, we may disclose your Personal Data to our employees, contractors, agents, vendors, and other similar persons or entities to the extent that such persons or entities have a need-to-know such Personal Data in furtherance of the Service. Our third-party vendors (“Third-Party Vendors”) provide us with various types of services, including without limitation, hosting services, payment services, marketing software services, and customer relationship management software services to name a few. We may share your Personal Data, including Employees’ Special Information, with our Third-Party Vendors.

Sale of Company or Assets.
In the event that we sell all or substantially all of our company or its assets, including the Personal Data collected through the Service, we may transfer your information, upon reasonable notice to you, to the acquiring company.

Other Third Parties.
In addition to our practices described above, we may share your Personal Data if we have a good-faith belief that such action is necessary to (1) comply with the law (see the section below on “Government Requests”), (2) protect and defend the rights or property of Laurl, or (3) prevent an emergency involving danger of death or serious physical injury to any person. We will only share your Personal Data for the foregoing reasons to the extent permitted by EU General Data Protection Regulation (“GDPR”).

6. STORING YOUR INFORMATION

Duration of Storage of Personal Data.
We will store your Personal Data for as long as it is needed to provide the Service, however, we may not know if you have stopped using the Service so we encourage you to contact us if you are no longer using the Service. However, if required by applicable law, we may retain your Personal Data for such period as may be required by such law. To continue to provide an effective service, we may store non-Personal Data perpetually and may anonymize your Personal Data and store that anonymized information perpetually.

Additionally, as described in this Policy, we use third parties to provide the Service and do not have full control over their practices related to storage and retention of your Personal Data. However, we will work with such third parties to delete or modify your Personal Data to the extent required by GDPR and the European Commission’s model contracts for the transfer of personal data to third countries (i.e., the standard contractual clauses pursuant to Decision 2010/87/EU) (the “SCCs”).

Security.
We use reasonable efforts to secure your Personal Data and to attempt to prevent the loss, misuse, and alteration of the information that we obtain from you. For example, we require our personnel to sign confidentiality agreements that extend to your Personal Data; we informally review the privacy practices of new products and services that we integrate into our Service; and we restrict access to your Personal Data to individuals within and outside of Laurl who need access to such information to provide the Service. In addition, we rely on the technical safeguards provided by the third party vendors we use to host, store, and process your Personal Data. However, you acknowledge and agree that loss, misuse, and alteration may occur despite our efforts to protect your Personal Data. We are not responsible to our users or to any third party due to any such loss, misuse, or alteration, except to the extent required by GDPR, the SCCs, or other applicable law.

7. CALIFORNIA USERS

For purposes of this Section 7 only, the terms “personal information,” “collection,” “sell,” “business purpose” and “commercial purpose” have the meaning given to them under the California Consumer Privacy Act of 2018 (the “CCPA”).

If you reside in California, may you have certain rights as set forth below. These rights are in addition to any other rights you may have under this Policy. If you have any questions about these rights or how to exercise them, please contact us as described below. Please note that we may disclose your personal information for business or commercial purposes as described in this Policy. For more information about the categories of personal information we collect, the sources from which we collect personal information and how we use, disclose and share such information, please see Sections 3, 4, 5 and 6 of this Policy.

Disclosure and deletion requests.
You may have the right to request that we disclose to you what personal information about you we collect, use, disclose and sell. Subject to certain limitations in the CCPA, you also may have the right to request that we delete your personal information. You may submit such a request by contacting us as described below. If you submit a request by email, your email must include “California Request” in the subject line. We will not discriminate against you for exercising your rights under the CCPA.

In addition, you may have the right to ask us one time each year if we have shared personal information with third parties for their direct marketing purposes. Please note that we do not disclose your personal information to any third parties for their direct marketing purposes. To make a request, please send us an email or letter at the address listed below. Indicate in your writing that you are a California resident making a “Shine the Light” inquiry.

Right to opt out.
The CCPA also provides California consumers the right to opt out of the sale of their personal information. As explained in this Policy, we do not sell the personal information of our users.

Verification.
We reserve the right to verify any request made under the CCPA by asking you to provide supporting documentation that the request is submitted by you, although we are not obligated to verify a request. You may also choose to have an agent submit a request on your behalf, in which case we may, but are not obligated to, verify that the agent is authorized to act on your behalf. We assume no responsibility for responding to any consumer requests.

8. YOUR CHOICES

You can change some of your Personal Data through the account settings provided on the Service. In addition, if you wish to access, receive a copy of, change or delete the Personal Data we hold about you, you may contact us as described at the end of this Policy.

You may withdraw the consent granted in this Policy for us to use the Personal Data described in this Policy by contacting us as described at the end of this Policy. Please note that if you do so, it will not affect the lawfulness of the use of your Personal Data based on your prior consent.

In addition, you may contact us as described at the end of this Policy to request that we do not disclose your Personal Data to third parties (other than those that are acting as our agent to perform tasks on our behalf, such as data processors) or to request that your Personal Data not be used for a purpose that is materially different from the purposes for which it was originally collected or for purposes subsequently authorized by you.

Upon receipt of any of the above request(s), we will use reasonable efforts to reflect any changes you request in our databases to the full extent required by GDPR, the SCCs, the CCPA (if applicable), or other applicable law.

If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority.

9. INTERNATIONAL VISITORS AND DATA TRANSFERS

The Service is hosted in the United States and is intended for visitors located within the United States as well as users located outside of the United States. If you choose to use the Service from the European Economic Area (“EEA”), Switzerland, or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your Personal Data outside of those regions to the United States for storage and processing. By providing any information, including Personal Data, on or to the Service, you consent to such transfer, storage, and processing.

Information collected in the EEA may be transferred, stored and processed by us or third parties (as provided in this Policy) in the United States and other countries whose data protection laws may be different than the laws of your country. Whenever we transfer your Personal Data out of the EEA, we ensure a similar degree of protection is afforded to it by entering into SCCs with the relevant third party.

As described in this Policy, we may share Personal Data with third parties and may be required to disclose information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

10. GOVERNMENT REQUESTS

From time to time, we may receive requests from government agencies to obtain information about our users. In handling such government requests, we greatly value the privacy of Personal Data. While we may be required to turn over user information at times, we will strive to notify users when we receive government requests about their data.

11. THIRD PARTY SERVICES AND PRACTICES ARE BEYOND OUR CONTROL

The Service may utilize numerous third party services as part of the functionality of the Service, such as hosting services, analytics providers, communications services, and other vendors; and we may share your Personal Data with third parties to the extent explained in this Policy. We have no control over such third parties, except to the extent required by GDPR and the SCCs. Thus, we make no guarantees about, and assume no responsibility for the information, services, or data/privacy practices of third parties, except to the extent required by GDPR and the SCCs. We encourage you to review the privacy practices of such third parties.

12. CHANGES TO THIS POLICY

Laurl reserves the right to change this Policy from time to time, with reasonable notice to you. Any changes to this Privacy Policy will become effective on the “Effective Date” indicated above. If you continue to use the Service after the Effective Date, you consent to the new Policy. Laurl will always have the latest Policy posted on the Service.

13. CONTACT US

If you have any questions about this Privacy Policy, you may contact us by email at privacy[at]laurl.ai or by mail at 6595 Roswell Rd. Ste G2296 Atlanta, GA 30328.

14. DATA PROTECTION OFFICER

In addition, we have appointed a Data Protection Officer (“DPO”). Our DPO can be contacted at privacy[at]laurl.ai.