GC AI Privacy Policy

1. Personal Information We Collect

We collect the following categories of personal information for the purposes described below:

• Contact information, e.g., your email address, first name, last name, address, city, state, and ZIP code: To communicate with you and provide access to the Service.
• Customer Support and website chat interactions, e.g., data you share when you contact us for help: To resolve issues, improve our Service or Site, respond to your inquiries, provide information about our Service, and connect you with our sales or support team. Chat interactions may be processed using artificial intelligence, including large language models, to generate responses.
• Social Media Information, e.g., interactions on LinkedIn, X, or YouTube: To engage with users and promote the Service.
• Payment and Transaction Data, e.g., credit card information: If you sign up and pay for the Service online, we will collect payment and transaction data. GC AI's payment processor for the Services is Stripe. See Stripe Privacy Policy.
• Google Sign-In Services: If you choose to sign into the Service using Google sign-in services, then Google shares with us certain information, such as your full name, language preference, nickname, e-mail address and picture.
• Voice Recording and Audio Data, e.g., audio recorded when you opt to use our voice transcription features: To convert speech to text for your convenience. Our voice recording feature is entirely optional and only activates when you explicitly initiate it. We do not record audio in the background or without your knowledge. We process voice recordings solely for the purpose of transcribing speech to text, and your audio data is processed to generate text transcriptions that you can use within the Service.
• Usage Information, e.g., IP address, browser type: We use third-party web analytics services to collect and analyze information about how you interact with our Service or Site. Our service providers may use cookies or similar technologies to collect this information. You can prevent analytics tracking on return visits by disabling cookies in your browser or by using opt-out mechanisms provided by these services, which we can direct you to upon request. We have configured our analytics implementation to anonymize IP addresses and comply with applicable privacy laws. This means we have enabled IP anonymization (also known as IP masking), which removes identifying portions of your IP address before it is processed by our analytics providers.
• Business Visitors, e.g., IP address, pages visited: We also use B2B visitor identification services to identify companies that visit our Site to help us understand which organizations are interested in the Service. This information is used to identify the company or organization you are associated with. For business visitors, our visitor identification tools may de-anonymize Site visitors for marketing purposes. If you wish to opt out of business visitor tracking, you can do so by adjusting your cookie preferences in our cookie banner or by using your browser's privacy settings to block cookies.
• For Job Candidates: We collect additional categories of personal information from job candidates during our recruitment process:
  • Candidate Identifying Information: Full name, name pronunciation, pronouns, date of birth, and signature
  • Candidate Contact Information: Home address, telephone numbers, and email addresses specific to your application
  • Educational History and Qualifications: Academic qualifications, educational records, academic references, and interview notes
  • Employment History and Qualifications: Current and previous employment information, including job titles, positions, hire dates, compensation, employment references, referrals, and work samples
  • Background Check Information: Where applicable and with your consent, information from employment verification, reference checks, and background screenings
  • Demographic Data: Where voluntarily provided or required by law, information such as gender, race, ethnic origin, disability status, and veteran status for equal opportunity monitoring

2. Cookie Policy

We use cookies and similar technologies to enhance your experience with our Service and Site. These technologies include:

• Web Beacons, Tracking Pixels, and Tags: These technologies collect data like your device's IP address, the page URL, and the time the page was viewed. These files allow GC AI to count visitors, track email engagement, and enable remarketing functionality by tracking your interactions with our Site for targeted advertising purposes.
• Cookies: Cookies are small files on your device, categorized as first-party (set by our Site) or third-party cookies (set by others). You can manage cookies through your browser settings. Note, some features may not work without cookies. Persistent cookies stay until they expire; session cookies are deleted when you close your browser.
• Necessary / Essential Cookies. These session cookies are necessary for core functions such as security and authentication.
• Acceptance Cookies: These remember your cookie preferences to avoid repeated prompts. They last as per your browser settings or until cleared.
• Functionality Cookies: These remember your choices, like login details, to enhance personalization and enable targeted advertising based on your interactions with our Site. They may be used to build audience segments for remarketing purposes and to deliver relevant advertisements on third-party websites and platforms. They last as per your browser settings or until cleared.
• Do Not Track: You can set your browser to signal that you don't want to be tracked. Currently, our Site does not respond to DNT signals and operates as described in this Privacy Policy.

You can opt-out or manage cookies and remarketing technologies in a number of ways. Your options for controlling what information cookies, tracking technologies, and remarketing tools collect about you include:

• Your cookie settings. When you visit our Service or Site, depending on where you are located, we may show you a notice which tells you how and why we use certain cookies and provide you the ability to opt out of certain cookie use (other than necessary/essential cookies).
• Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings.

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

3. GC AI's Use of Your Personal Information

We use your personal information for the following purposes:

• To provide and maintain the Service or Site, including monitoring usage.
• To provide voice transcription services when you use our voice transcription feature. We process your audio data to convert it to text.
• To manage your account and access to different functionalities.
• To complete your order when you complete transactions and deliver the Service or Site.
• To contact you and for marketing purposes:
  • Updates about our terms of service, subprocessors or other pertinent information.
  • Marketing communications, including offers, newsletters, event invitations, product updates, and information about our goods and services. We may use your contact information, browsing behavior on our Site, and information about your interactions with our services to personalize these communications, create audience segments for targeted advertising, and deliver remarketing advertisements on third-party websites and platforms to make them more relevant to you.
  • We may also use information about your company to target marketing messages to your organization even if you personally have not provided your contact information.
  • You can opt out of receiving marketing communications at any time by clicking the 'unsubscribe' link in any marketing email we send, or by contacting us at privacy@gc.ai.
• To manage and respond to your requests to us for customer support or other information.
• For business transfers: we may share your information with potential acquirers in the event of a merger, acquisition, or asset sale.
• For data analysis and improvement purposes: we may analyze data to identify usage trends or enhance user experience.
• For online educational content and registration information:
  • When you register for or participate in our online classes, webinars, or educational events, we collect information that you provide during the registration process, such as your name, email address, job title, company name, and other contact details. We also collect information about your participation, such as attendance records, questions asked, survey responses, and interaction with the content.
  • This information is used to:
    • Provide you with the educational content you requested
    • Improve our offerings based on participant feedback and engagement
    • Send you relevant marketing communications about future educational opportunities or related services
    • Understand which topics are of interest to you and your organization
• To operate AI-powered chat features on our Site, including responding to visitor inquiries in real time, providing information about our Service, qualifying interest in our products, and scheduling meetings with our team. Chat interactions may be processed using artificial intelligence technologies provided by our third-party service provider to generate contextual responses.
• For Job Candidates, we use your personal information for:
  • Recruitment and Evaluation: Identifying and evaluating job applicants, including assessing skills, qualifications, and interests to determine suitability for positions
  • Verification and Background Checks: Verifying your information and conducting employment, background, and reference checks where applicable, subject to your consent where required by law
  • Communication: Communicating with you about the recruitment process and your application
  • Record Keeping: Maintaining records related to our hiring processes for appropriate periods
  • Legal Compliance: Creating and submitting reports as required by applicable employment laws or regulations
  • Process Improvement: Analyzing and improving our application and recruitment processes
  • Future Opportunities: With your consent, retaining your information to consider you for other suitable positions that may become available

4. Sharing of Your Personal Information

We may share your personal information with others in the following situations:

• With service providers: We may share your personal information with service providers who perform services on our behalf, such as delivering communications, operating cloud services, providing analytics, supporting IT functions, providing AI-powered chat and engagement features on our Site, and providing advertising and remarketing services. This includes sharing information about your interactions with our Site, device information, and general location data with advertising technology providers to deliver targeted advertising on third-party websites and platforms. These providers are bound by confidentiality obligations and comply with applicable privacy laws.
• With affiliates: We may share your personal information with our affiliates (entities that we control or that we are under common control with), which will honor this Privacy Policy.
• With other users: if you interact with other users through the Service or Site who are part of your organization or through our Slack community, your personal information may be viewed by the users you send it to or to the public.
• With your consent: We may disclose your personal information for purposes you consent to, such as linking your account with another company's product or service.
• Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, as necessary for their services to us.
• Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above. If reasonable and allowable, we will do our best to notify you in advance.
• For Job Candidates, we may additionally share your information with:
  • Recruitment Service Providers: Third-party recruitment platforms, applicant tracking systems, interviewing tools, background check providers, and recruitment analytics services
  • Background Check Providers: Third-party services that conduct employment verification and background screening, subject to your consent where required by law

5. Retention of your Personal Information

GC AI will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy and retain and use it to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. When you use our voice transcription feature, your audio is temporarily processed by our systems to generate the text transcription. By default, we do not retain your audio recordings after transcription is complete. GC AI will also retain Usage Data for internal analysis purposes. When you interact with the AI-powered chat feature on our Site, your chat messages and any contact information you provide are processed and retained by the third-party service provider for the duration of our service relationship with such provider and as reasonably necessary to provide the chat service, respond to your inquiries, improve Site functionality, and comply with applicable legal obligations.

For job candidates, we retain candidate personal information for up to three (3) years following the conclusion of the recruitment process. This retention period allows us to comply with employment law requirements, consider you for future opportunities (with your consent), defend against potential employment-related claims, and maintain recruitment process records for audit purposes. If you are hired, your candidate information becomes part of your employment record and is governed by our employee privacy policies.

6. Transfer of your Personal Information

Your information, including personal information, is processed at GC AI's operating offices and other places where the parties involved in the processing are located. It means that this information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. See Subprocessor List showing the subprocessors GC AI uses to process personal information and User Data as defined in this Privacy Policy. Your consent to this Privacy Policy followed by your submission of such information, represents your agreement to that transfer.

GC AI will take all steps reasonably necessary to ensure that your data is treated securely and per this Privacy Policy and that no transfer of your personal information will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

Data Privacy Framework (DPF)

GC AI complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. GC AI has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. GC AI has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, GC AI commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact GC AI at privacy@gc.ai.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, GC AI commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) and the Gibraltar Regulatory Authority (GRA) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. Individuals have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. See Annex I of the DPF Principles for additional information: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.

GC AI has responsibility for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. GC AI shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless GC AI proves that it is not responsible for the event giving rise to the damage.

The Federal Trade Commission has jurisdiction over GC AI's compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). GC AI may disclose personal information in response to lawful requests by US public authorities, including to meet national security or law enforcement requirements.

7. How to Delete your Personal Information

You have the right to delete or request that we assist in deleting the personal information we have collected about you. The Service may allow you to delete certain information about you from within the Service.

You may update, amend, or delete your information anytime by signing in to your account if you have one, and visiting the account settings section. You may also contact us at privacy@gc.ai to request access to, correct, or delete any Personal Information. Please note, however, that we may need to retain certain information when we have a legal obligation or lawful basis to do so.

8. Security of your Personal Information

The security of your personal information is important to us. However, no method of transmission over the internet or method of electronic storage is 100% secure.

9. No Children

The Service and Site are not intended for use by anyone under 18 years of age. If we become aware that we have collected Personal Information from anyone under the age of 18 without verification of parental consent, we will delete that information.

10. Links to Other Websites

The Service and Site may link to websites and services we don't operate. We don't control those third-party sites and aren't responsible for their content, privacy policies, or practices.

11. Supplemental notice to authorized users

Where our Service is made available to you through an organization (e.g., your employer), that organization is the administrator of the Service and responsible for the accounts and/or services over which it has control. For example, administrators can access and change information in your account or restrict and terminate your access to the Service. We are not responsible for the privacy or security practices of an administrator's organization. Please contact your organization or refer to your organization's policies for more information.

For US Residents

Under applicable state privacy law, you have the following rights regarding personal information that we have collected and process about you:

• Right to know. You have a right to know categories of personal information that we process and the purpose of such processing. We do not “sell” or “share” personal information, as we understand sale to be defined under state privacy law.
• Access. You have the right to obtain a copy, in a portable format, of personal information that we collect, use, disclose, share, and sell about you.
• Correct. You have a right to make us update or correct inaccuracies in your personal information.
• Deletion. You can ask us to delete the personal information that you have provided to us or that we maintain about you.
• Transfer. You have a right to make us transfer a machine-readable copy of your personal information to you or a third party of your choice.
• Opt-out. You have the right to opt-out of the sale of your personal information. If you are a California resident, please see this listing of additional notices related to your privacy under California law, which forms part of this Privacy Policy. This notice for California residents supplements the information contained here, and it applies solely to all visitors, users, and others who reside in the State of California.

12. For EEA, Switzerland and UK Residents

International users using our Service or Site governed by this Privacy Policy or applying to jobs, you understand and acknowledge that your personal information will be transferred from your location to our facilities and servers in the United States and possibly from your location to other countries where our service providers operate. A list of the Subprocessors GC AI uses to process personal information may be found on the Subprocessor List.

Privacy frameworks: We employ appropriate safeguards for cross-border transfers of Personal Information, including compliance with certain privacy frameworks relating to the transfer of data. For example, we comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), as described in Section 6 above. Where applicable, we also use Standard Contractual Clauses approved by the European Commission, the UK, and Switzerland.

Your rights. Data protection laws give you certain rights regarding your personal information. If you are located in Europe, you may ask us to take the following actions in relation to your personal information that we hold:

• Access. Provide you with information about our processing of your personal information, including the categories of personal information we collect, the sources from which personal information is collected, the business purpose for collecting and sharing personal information, and the categories of third parties to whom we disclose personal information, and give you access to your personal information.
• Correct/rectification. Update or correct inaccuracies in your personal information.
• Delete/erasure. Delete your personal information.
• Transfer/portability. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
• Restrict. Restrict the processing of your personal information.
• Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.
• Withdraw consent. If we collected and processed your personal information with your consent, where required by law, you may withdraw your consent. Withdrawing your consent does not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

You may submit these requests by email to privacy@gc.ai or our postal address provided below. You are not required to pay any charge for exercising your rights.

13. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions about this Privacy Policy, You can contact us:

By email: privacy@gc.ai

By US mail: General Counsel AI, Inc., 2261 Market Street STE 10388, San Francisco, CA 94114