Policy last updated 25 August 2023
We at Erudit, INC. (“Erudit.ai.”, “us”, “our”, or “we”) are strongly committed to transparency, and we want you (“you” or “your”) to understand how we collect, use, store, share and protect (“process”) your personal information, as well as how you can manage the personal information we collect. This Privacy Policy applies to your interactions with us or your use of our website (www.erudit.ai) products, services, apps, or features, either online or offline (collectively, our “Services”).
- Personal Information We Collect
We process information about you while providing the Erudit.ai Services. We process the following types of data:
Provided Information
We process information about you when you, or your Employer, provide it to us directly in any form, whether that be via email, videoconference, our website, or any tools, dashboard, or webportal we provide as part of our service.
- Personnel Data. We collect information about you when you or your Employer submit it through the use of Erudit.ai Services, including when you or your Employer create or maintain an account with us, or when you or your Employer authorize us to process data from other services. This may include the following types of data:
- Name
- Gender
- Email addresses
- Profile picture
- Employer
- Position in Company
- The names or any channels or threads subscribed, or belonged to in the Communication Application / Communication Platform
- Tenure at the company
- Salary range
- Support. We collect information you provide to us when you open a support request or otherwise communicate with us (such as through third-party social-media sites). This may include any personnel data.
- Other information submitted by you or your Employer. We collect information about you submitted to us through the Erudit.ai Services, such as participation in any interactive features of the Erudit.ai Services or form filled out on one of our websites. This information may include your name, email address, and any other information provided to us.
Information We Collect Automatically
We automatically collect information about you when you or your Employer access or use the Erudit.ai Services.
- Your use of the Erudit.ai Services. We collect information about how you use the Erudit.ai Services, such as your session date, time, and duration; the pages you viewed; and the page you visited before navigating to the Services or websites.
- Device information. We collect information about your computer or device when you access any of the Erudit.ai Services, such as the type of browser you use, your IP address, your device’s ID, and the location of your device.
- Cookies and similar technologies. We use cookies and similar technologies to collect information about your interactions with the Erudit.ai Services. For further details about how we use Cookies, and how you can view or modify your consent to our use of cookies visit our Cookies Policy.
- Communication Application Data / Communication Platform Data. We process text-based data generated from the use of any of the Communication Applications or Communication Platforms, which may include sent instant messages and sent emails. By default this data is not stored or retained by the Service.
- Personnel data. We may process all types of personnel data referred to in Provided Information.
- Interaction data. We may process interaction data from usage patterns, device information, browsing behavior, internations with the service and other user-generated data based on various interactions that you have with the service generally, and with any tool, dashboard, portal, interface or application that we provide during the service.
- Usage data. We may process usage data generated by, or input during, the use of any feature, tool, or interface incorporated into the dashboard by any Authorized Users.
Information We Collect elsewhere
We may also process information about you from other sources.
- Other services linked to your account. We may collect information about you when you link your Erudit.ai account with other services. For example, if you create or log into an Erudit.ai account using an existing account you hold.
- Affiliates. We may receive information about you from one of affiliates if you interact with them directly, for example through a support request.
- Third parties. We may receive information about you from third parties that provide business information to us or from public sources. We may combine this information with information we collect through other means described above.
- How We Use Personal Information
We use information about you for the following purposes.
- To provide Services. We use information about you to provide you or your Employer with access to the Erudit.ai Services, including to create and manage accounts.
- To improve Services. We use information including analytics to continually improve our Services. We may also link or combine information about you with information we get from others to help understand your needs and provide you with better service.
- To communicate with you. We use information about you to communicate with you, including to send you technical notices, product updates, support communications, and administrative messages about the Erudit.ai Services (including important changes to the Erudit.ai Services). This also includes sending you information about your account and data, such as when we update our terms or when we materially change how we use your data.
- For security. We may use information about you to maintain and increase the security of the Erudit.ai Services, including to detect, investigate, and prevent fraud and other illegal activities from occurring, as well as to protect the rights and property of Erudit.ai, our clients, and third parties.
- To market and promote our Services. We use information about you to send you promotional messages and to show you advertisements. This may also include using information about you to create more personalized advertising and suggest Erudit.ai Products that may be of interest to you. We may also use information about you to facilitate contests, sweepstakes, and promotions, and to process and deliver your entries and rewards.
- To comply with our legal obligations. We may use information about you to comply with our legal requirements. For example, we may process and retain information about your payments to us for tax and accounting purposes.
- With your consent. We may use information about you for any other purposes that you have consented to. For example, if you agree to be named as a Featured Client, we might post information about you on one of our public websites.
- How We Share Personal Information
We may share your personal information as follows.
- Service providers. We use third-party service providers who work on our behalf, including to provide hosting services, authentication services, cybersecurity and anti-fraud services, and advertising, which may require us to share your personal information.
- Legal. We may share information about you in response to a request for information if we believe disclosure is permitted or required by an applicable law, regulation, or legal process, including to comply with a court order. Further, we may share your personal information with any person to whom disclosure is necessary to enable us to enforce our rights under this Privacy Policy or under any agreement we enter with you or to protect the rights, property, or safety of Erudit.ai or third parties.
- Business transfers. We may share your information in connection with, or during negotiations of, any merger, sale of Erudit.ai assets, financing, or acquisition of all or a portion of our business by another company.
- Affiliates. We may share your personal information with our affiliate companies who may act for us for any of the purposes set out in this Privacy Policy, including our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership.
- Marketing and analytics. We may share your personal information with analytics and search-engine providers that assist us in the improvement and optimization of our websites. See our Cookie Policy for further information.
- Social Media. Some of our websites may contain social-sharing widgets or features that let you share information you find on our websites on third-party sites, including, for example, Twitter, LinkedIn, and YouTube. By doing so, you authorize us to facilitate this sharing of information, and you understand that the use of shared information will be governed by the social media provider’s privacy notice.
- Consent. We may share your personal information with your consent or at your direction.
- Security
The security of all data we collect, use, or process is incredibly important to us. We have implemented and maintain a variety of measures to protect your data from unauthorized access and against unlawful processing, accidental loss, destruction, and damage.
- Retention
We keep your personal information for as long as necessary to fulfill the purposes we collected for. To determine the appropriate retention period for personal information, we consider several factors, any agreements with you or your Employer, our legitimate interests (as outlined in this Privacy Policy), our legal obligations, and the nature of your personal information.
In some cases, we may anonymize your personal information so that you are no longer identifiable, in which case we may use the anonymised information as we see fit.
- Children
The Erudit.ai Services are not directed to individuals under the age of 16, and we do not knowingly process the personal information of children under 16.
- Your Choices
You have choices about how Erudit.ai collects and uses your personal information.
- Account information. Authorized Users may access, update, or change personal information they have provided to us by logging into the relevant Erudit.ai application.
- We may retain certain personal information as necessary to comply with our legal obligations or for legitimate business purposes, such as to resolve disputes or enforce our agreements.
- We may also retain cached or archived copies of personal information for a certain period.
- Advertising. You may opt out of receiving such emails by following prompts in the emails.
- Our relationship with your personal information
Our relationship to your personal data may change depending on the context in which we process your personal data, and this influences how you can control or exercise your rights related to your personal information.
Controller of Your Information
If you’ve been informed that Erudit provides its Services to your employer, then your Employer is the controller of any of your personal information that we may process. This means that you must contact your Employer, rather than us, in order to control or exercise your any rights related to your personal information.
If we process your personal information from your interaction with our Services and your interactions with us:
- Do not occur as part of performing your duties and responsibilities associated with your Employment; OR
- Occur as part of performing your duties and responsibilities associated with your Employment, but your Employer does not receive our Services (and has not received our Services at any time since your interactions).
then we act as the controller of your personal data and you should contact us directly in order to control or exercise your rights related to your personal information.
If you are unsure, you can contact us in the first instance. In the instance we are not the controller of the data in which your request relates, we will reply to your request redirecting you to the data controller.
Any requests to exercise or control your rights related to your personal information should be sent via email to privacy@erudit.ai.
- Supplemental Notice for the European and UK residents
Controller of Your Information
Erudit.ai, Inc. is the data controller of your personal information unless otherwise stated in this Privacy Policy. Data controllers are responsible for providing you the following rights with respect to your personal data:
- Right to access. You have the right to access your personal information that the data controller holds, and receive it in a portable way.
- Right to update. You have the right to request that the data controller updates your personal information.
- Right to delete. You have the right to have your personal information deleted by the data controller.
- Right to restrict processing. You have the right to request the data controller to restrict or suppress the processing of your personal information where the data controller’s processing is inappropriate.
- Right to object. You have the right to object to the processing of your personal information.
- Right to withdraw consent. You have the right to withdraw your consent at any time where the data controller is processing your personal information based on your prior consent.
Legal Bases for Processing Personal Information
We process your personal information on one or more of the following legal bases:
- where necessary to enter into or perform under a contract with you, including to provide the Erudit.ai Services;
- where necessary for us to comply with a legal obligation;
- for our legitimate interests, as outlined in this Privacy Policy;
- with your consent;
- where necessary to enter into or perform under a contract with your Employer, including to provide your Employer the Erudit.ai Services; or
- with your Employer’s consent
International Data Transfers
Your personal information may be collected in, transferred to, accessed from, or stored in a country other than the one you are in which may have data protection rules that are different from those of your country.
Complaints
You may lodge a complaint with a data protection authority for your country or region where you have you reside or work, or where an alleged infringement of applicable data protection law occurs.
- Additional Notice for Residence of California
Residents of California may have additional rights afforded under the California Consumer Privacy Act, as amended (CCPA).
Your Rights
Subject to applicable law, as a resident of California you may have the following rights with respect to your personal information:
- Right to access. You have the right to request that we disclose to you what personal information we collect, use, disclose, share, and sell about you.
- Right to delete. You have the right to request that we delete your personal information that we’ve collected.
- Right to update. You have the right to request that inaccurate personal information we hold about you be corrected.
- Right to restrict the use and disclosure of your sensitive information. You have the right to request that we limit our use and disclosure of your sensitive personal information.
- Right to nondiscrimination. You have the right not to receive discriminatory treatment because you’ve exercised any of your rights under the CCPA.
We note that in the event that we provide our Services to your employer, your employer is responsible for handling any data privacy rights requests.
If you contact us with a request to exercise one of the above rights and you disagree with our decision regarding your request, you may appeal our decision by replying to our response.
Categories of Personal Information Collected
The personal information that we’ve collected in the past 12 months fall into the following categories specifically established under the CCPA:
- Identifiers such as a real name, postal address, unique personal identifier, online identifier, internet protocol address, and email address.
- Information under Cal. Civ. Code §1798.80(e), such as your name, address, telephone number, or any financial information.
- Commercial information, such as information related to products or services you’ve purchased.
- Internet or other electronic network activity information, such information regarding your interaction with the Erudit.ai Products.
- Geolocation data.
- Audio, electronic, visual, or similar information, such as audio recordings of calls with you.
- Inferences drawn on the information above, such as aggregated metrics.
Categories of Personal Information Disclosed for a Business Purpose
The personal information that we’ve disclosed for a business purpose (including to our service providers) in the past 12 months fall into the following categories specifically established under the CCPA:
- Identifiers such as a real name, postal address, unique personal identifier, online identifier, internet protocol address, and email address.
- Information under Cal. Civ. Code §1798.80(e), such as your name, address, telephone number, or any financial information.
- Commercial information, such as information related to products or services you’ve purchased.
- Internet or other electronic network activity information, such information regarding your interaction with the Erudit.ai Products
- Geolocation data.
- Audio, electronic, visual, or similar information, such as audio recordings of calls with you.
- Inferences drawn on the information above, such as aggregated metrics.
Cross-context behavioral advertising
We do not sell or share your personal information as defined by the CCPA for cross-contextual behavioral advertising.
- Additional Notice for Residence of Virginia
Residents of Virginia may have additional rights afforded under the Virginia Consumer Data Protection Act (VCDPA).
Your Rights
Subject to applicable law, as a resident of Virginia you have the following rights with respect to your personal information.
- Right to access. You have the right to access your personal information and obtain a copy of it in a portable and readily usable format.
- Right to correct. You have the right to correct errors in your personal information.
- Right to delete. You have the right to have your personal information deleted.
- Right to opt out. You have the right to opt out of behavioral advertising, automated profiling, and sales of personal information.
We note that in the event that we process your personal information as part of our Services to your employer, your employer is responsible for handling any data privacy rights requests.
If you contact us with a request to exercise one of the above rights and you disagree with our decision regarding your request, you may appeal our decision by replying to our response.
- Using Google Workspace Marketplace Application to process data from Google Workspace
Erudit’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
13. Data processed from Google Workspace
In order to facilitate the processing of Communication Application Data we offer a Google Workspace Marketplace Application in which a Google Workspace Administrator can provide Erudit access to Google Workspace data, which may include up to domain-wide access.
Domain-wide access means that, depending on configuration chosen by the Google Workplace Administrator, the Administrator may authorize Erudit to process data on individual users within the workspace, on the individual users behalf.
The purpose of the Google Workspace Marketplace Application is solely for existing clients of the Erudit service to enable the processing of Google Workspace data, and does not provide a path for individuals or organizations which are not existing clients to become clients or functionality for those who are not clients.
By installing the Erudit Google Workspace Marketplace Application, Erudit may receive permissions to process the following types of data, as defined by Google:
- see info about users on your domain;
- view your email messages and settings;
- view messages and reactions in Google Chat.
These categories of data are considered ‘Personnel Data’ or ‘Communication Application Data’ / ‘Communication Platform Data’ under this Privacy Policy.
The processing of such data (which may include personal data) obtained from Google Workspace is done in accordance with this privacy policy, and according to any contractual arrangements between Erudit and client. Contractual arrangements mean either the Free-Trial Agreement, or Master Services
Agreement, and any associated Data Processing Addendum and Service Order with Client.
In the event a Google Workspace Administrator wishes to revoke any authority or permission granted to Erudit via the Google Workspace Marketplace Application, the administrator may use the ‘revoke access’ feature or uninstall the application in the organization’s Google Workspace Admin Console by accessing “Apps List” under “Google Workspace Marketplace apps” or via https://admin.google.com/ac/apps/gmail/marketplace/apps
14. Changes to this Privacy Policy
We will make updates to this policy as and when required. At the top of this policy document is the date this policy was last updated.
15. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at privacy@erudit.ai