Privacy Policy

I. Introduction

A. Purpose of the Privacy Policy

B. Scope of the Privacy Policy

C. Definition of Key Terms

‍

II. Data Collection

A. Types of Data Collected

B. Sources of Data Collection

C. Purpose of Data Collection

D. Data Retention

‍

III. Data Use

A. Use of Personal Data

B. Use of Non-Personal Data

C. Sharing of Data with Third Parties

D. Data Processing

‍

IV. Data Security

A. Technical Measures

B. Organizational Measures

C. Measures to Protect Data in Transit

D. Incident Management

‍

V. User Rights

A. Right to Access Personal Data

B. Right to Correction

C. Right to Deletion

D. Right to Object

‍

VI. Data Controller and Data Processor

A. Responsibility of the Data Controller

B. Responsibility of the Data Processor

C. Sub-Processors

‍

VII. Changes to the Privacy Policy

A. Notification of Changes

B. Effective Date of Changes

‍

VIII. Contact Information

A. Contact for Privacy-Related Issues

B. Contact for Data Protection Authority

‍

IX. Conclusion

A. Importance of Privacy

B. Commitment to Protect User Data.

‍

Section 1A: Purpose of the Privacy Policy

The purpose of this Privacy Policy is to outline the manner in which the Slack AI Haly (“Haly”) collects, uses, and protects the personal and non-personal data of its users. Haly is committed to protecting the privacy of its users and ensuring that their personal data is handled in a manner that is compliant with applicable privacy laws and regulations.

This Privacy Policy sets out the expectations for the handling of personal data by Haly and provides users with information about their rights and choices regarding the use of their data. The policy also serves to inform users of the measures taken to ensure the security of their personal data and how they can contact Haly with any privacy-related concerns.

Section 1B: Scope of the Privacy Policy

The scope of this Privacy Policy applies to all personal data collected, used, and processed by Haly. This includes data collected through Haly's website, Slack platform, and any other means by which Haly interacts with its users.

This Privacy Policy does not apply to any third-party websites, services, or applications that users may access through links or integrations provided by Haly. Haly is not responsible for the privacy practices of any third parties and users are encouraged to review the privacy policies of such parties before providing any personal data. This Privacy Policy applies to all users of Haly, including individuals, organizations, and other legal entities. By using Haly and providing personal data, users acknowledge and agree to the terms of this Privacy Policy.

Section 1C: Definition of Key Terms

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below:

"Personal Data" refers to any information that can be used to identify an individual, such as name, email address, or other contact information."Non-Personal Data" refers to information that does not personally identify an individual, such as demographic data, aggregated data, or technical data such as IP addresses or browser types."Data Controller" refers to the entity that determines the purposes and means of processing personal data."Data Processor" refers to the entity that processes personal data on behalf of the Data Controller."User" refers to any individual, organization, or legal entity that uses Haly and provides personal data."Slack Platform" refers to the communication and collaboration platform provided by Slack Technologies, Inc."Data Processing" refers to any operation performed on personal data, including but not limited to collection, storage, use, and transfer.

Section 2A: Types of Data Collected

Haly collects the following types of data from its users:

Personal Data: Haly collects personal data from users, including but not limited to, names, email addresses, and profile information.

Non-Personal Data: Haly also collects non-personal data, such as IP addresses, browser types, operating systems, page views, and the dates and times of access.Slack Data: Haly collects data from the Slack platform, including but not limited to, user IDs, usernames, and profile information.It is important to note that users have control over the personal data they provide to Haly and can choose not to provide certain data, but this may limit Haly's ability to provide certain services or features. Haly takes the privacy of its users seriously and will only collect the minimum amount of personal data necessary to provide its services and features.

Section 2B: Sources of Data Collection

Haly collects data from various sources, including but not limited to:Direct Input from Users: Haly collects personal data directly from users when they interact with Haly, such as when they create an account, use Haly's features or services, or provide feedback. This data may include, but is not limited to, names, email addresses, and profile information.Slack Platform: Haly collects data from the Slack platform, including but not limited to, user IDs, usernames, and profile information.Log Data: Haly may collect log data, such as IP addresses, browser type, operating system, page views, and the dates and times of access.

Third-Party Sources: Haly may also collect data from third-party sources, such as social media platforms, in accordance with their respective terms of use and privacy policies.It is important to note that users have control over the personal data they provide to Haly and can choose not to provide certain data, but this may limit Haly's ability to provide certain services or features.

Section 2C: Purpose of Data Collection

Haly collects personal and non-personal data for the following purposes:

To provide its services and features: Haly collects personal data, such as names and email addresses, to create user accounts and provide its services and features.

To improve the user experience: Haly may collect log data and usage information to better understand how users interact with Haly and to improve its services and features.

To comply with legal obligations: Haly may collect personal data to comply with legal obligations, such as responding to requests from law enforcement or complying with court orders.

To send promotional and marketing materials: With user consent, Haly may use personal data to send promotional and marketing materials, such as newsletters and updates on new services and features.

It is important to note that Haly will only collect and use personal data for the purposes outlined in this Privacy Policy and will not use personal data for any other purposes without obtaining prior consent from the user.

Section 2D: Data Retention

Haly will retain personal data for as long as necessary to fulfill the purposes for which it was collected and processed, in accordance with this Privacy Policy and applicable laws and regulations.Once the personal data is no longer needed for the purposes for which it was collected, Haly will securely delete or anonymize the data, unless otherwise required by law to retain the data.

Haly will regularly review and assess its data retention practices to ensure that personal data is not retained for longer than necessary. Haly will also take into account its legal obligations, such as those related to data preservation or document retention, when determining the appropriate retention period for personal data.Users have the right to request the deletion of their personal data at any time, subject to Haly's legal obligations and the purposes for which the data was collected. Haly will respond to such requests in accordance with applicable laws and regulations.

Section 3A: Use of Personal Data

Haly will use personal data for the following purposes:To provide its services and features: Haly uses personal data, such as names and email addresses, to create user accounts and provide its services and features.To improve the user experience: Haly may use log data and usage information to better understand how users interact with Haly and to improve its services and features.

To comply with legal obligations: Haly may use personal data to comply with legal obligations, such as responding to requests from law enforcement or complying with court orders.To send promotional and marketing materials: With user consent, Haly may use personal data to send promotional and marketing materials, such as newsletters and updates on new services and features.It is important to note that Haly will only use personal data for the purposes outlined in this Privacy Policy and will not use personal data for any other purposes without obtaining prior consent from the user. Haly takes the privacy of its users seriously and will use personal data in a manner that is consistent with applicable privacy laws and regulations.

Section 3B: Use of Non-Personal Data

Haly may use non-personal data for the following purposes:To improve the user experience: Haly may use log data, such as IP addresses and browser types, to better understand how users interact with Haly and to improve its services and features.For research and analysis: Haly may use aggregated and anonymized data for research and analysis purposes, such as to understand user demographics and trends.To comply with legal obligations: Haly may use non-personal data to comply with legal obligations, such as responding to requests from law enforcement or complying with court orders.For marketing and promotional purposes: Haly may use non-personal data for marketing and promotional purposes, such as to understand user interests and preferences.Haly will not use non-personal data in a manner that personally identifies an individual, unless otherwise required by law. Haly takes the privacy of its users seriously and will use non-personal data in a manner that is consistent with applicable privacy laws and regulations.

Section 3C: Sharing of Data with Third Parties

Haly may share personal and non-personal data with third parties for the following purposes:

Service Providers: Haly may share personal and non-personal data with third-party service providers to assist with the provision of its services and features. Service providers are required to maintain the confidentiality and security of the data and to use the data only as necessary to perform their services.

Business Partners: Haly may share non-personal data with business partners for research and analysis purposes, such as to understand user demographics and trends. Business partners are required to maintain the confidentiality and security of the data and to use the data only as necessary for the agreed-upon purposes.

Legal Obligations: Haly may be required to disclose personal and non-personal data in response to a subpoena, court order, or other legal obligation. Haly will only disclose the minimum amount of data necessary to comply with the legal obligation and will take appropriate steps to ensure the confidentiality and security of the data.Mergers and Acquisitions: In the event of a merger or acquisition, Haly may transfer personal and non-personal data to the new owner or successor entity. The new owner or successor entity will be required to use the data in accordance with this Privacy Policy and applicable privacy laws and regulations.

Haly will not sell or rent personal data to third parties. Haly takes the privacy of its users seriously and will only share personal and non-personal data with third parties in accordance with this Privacy Policy and applicable privacy laws and regulations.

Section 3D: Data Processing

Haly will process personal data in accordance with applicable privacy laws and regulations and in a manner that is consistent with the following principles:Lawfulness: Haly will process personal data in accordance with applicable privacy laws and regulations and will only process personal data for the purposes outlined in this Privacy Policy.

Fairness: Haly will process personal data in a manner that is fair and transparent to the user, and will provide users with information about the purposes for which their personal data will be used.Purpose Limitation: Haly will only process personal data for the purposes for which it was collected and will not use personal data for any other purposes without obtaining prior consent from the user.Data Minimization: Haly will only collect and process the minimum amount of personal data necessary to fulfill the purposes for which it was collected.Accuracy: Haly will take reasonable steps to ensure that personal data is accurate, up-to-date, and relevant to the purposes for which it was collected.Confidentiality: Haly will maintain the confidentiality and security of personal data and will implement appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure.Haly takes the privacy of its users seriously and will process personal data in a manner that is consistent with applicable privacy laws and regulations.Section 4A: Technical Measures

Haly implements the following technical measures to ensure the security of personal data:

Encryption: Haly uses encryption to protect personal data in transit and at rest. Haly uses industry-standard encryption protocols, such as SSL/TLS, to protect personal data from unauthorized access, use, or disclosure.

Access Controls: Haly implements access controls to limit access to personal data to authorized personnel only. Access to personal data is granted on a need-to-know basis and is subject to strict access controls, such as passwords and two-factor authentication.

Firewalls: Haly implements firewalls to protect its systems and personal data from unauthorized access, use, or disclosure.

Network Security: Haly implements network security measures, such as segmentation and monitoring, to protect its systems and personal data from unauthorized access, use, or disclosure.Haly regularly reviews and updates its technical measures to ensure the security of personal data and to respond to evolving security threats. Haly takes the privacy of its users seriously and implements technical measures to ensure the security of personal data in accordance with industry standards.

Section 4B: Organizational Measures

Haly implements the following organizational measures to ensure the security of personal data:

Privacy Policy: Haly has a comprehensive Privacy Policy that outlines its practices and procedures for collecting, using, and protecting personal data. The Privacy Policy is made available to all users and is regularly reviewed and updated to ensure its compliance with applicable privacy laws and regulations.

Data Protection Officer: Haly has designated a Data Protection Officer (DPO) who is responsible for overseeing its privacy and data protection practices. The DPO is available to answer any privacy-related questions or concerns from users and to ensure Haly's compliance with applicable privacy laws and regulations.

Privacy Training: Haly provides privacy training to its employees to ensure that they are aware of their obligations and responsibilities with respect to personal data. Haly also requires its employees to sign confidentiality agreements to ensure the protection of personal data.

Incident Response Plan: Haly has an incident response plan in place to respond to any privacy-related incidents, such as data breaches or unauthorized access to personal data. The incident response plan outlines the procedures for reporting, investigating, and mitigating any privacy-related incidents.

Haly takes the privacy of its users seriously and implements organizational measures to ensure the security of personal data in accordance with industry standards.

Section 4C: Data Transfer

Haly may transfer personal data to other countries for the purposes of providing its services and features and in accordance with applicable privacy laws and regulations.

Haly implements appropriate measures to ensure that personal data is protected when transferred to other countries, including but not limited to, using standard contract clauses approved by the European Commission, relying on the EU-U.S. Privacy Shield Framework, or obtaining the user's explicit consent.

Users have the right to request information about the measures Haly implements to protect personal data when transferring it to other countries. Haly will provide this information upon request.

Haly takes the privacy of its users seriously and implements appropriate measures to ensure the protection of personal data when transferring it to other countries.

Haly recognizes the following rights of its users with respect to their personal data:

Right to Access: Users have the right to access their personal data and to request information about the purposes for which their personal data is being processed, the categories of personal data being processed, and the recipients of their personal data.

Right to Correction: Users have the right to request the correction of their personal data if it is inaccurate or incomplete. Haly will take reasonable steps to correct any inaccuracies or errors in personal data.

Right to Deletion: Users have the right to request the deletion of their personal data, subject to Haly's legal obligations and the purposes for which the data was collected. Haly will respond to such requests in accordance with applicable laws and regulations.

Right to Restrict Processing: Users have the right to request that Haly restrict the processing of their personal data, such as by temporarily suspending the use of their personal data.

Right to Data Portability: Users have the right to receive their personal data in a structured, commonly used, and machine-readable format and to request the transfer of their personal data to another data controller.

Right to Object: Users have the right to object to the processing of their personal data, such as for the purposes of direct marketing.

Users may exercise their rights by contacting Haly's Data Protection Officer at the email address provided in this Privacy Policy. Haly will respond to such requests in accordance with applicable laws and regulations.

Haly takes the privacy of its users seriously and recognizes and respects their rights with respect to their personal data.

Section 5A: Changes to Privacy Policy

Haly reserves the right to update and modify this Privacy Policy from time to time to reflect changes in its practices or to comply with changes in applicable privacy laws and regulations.

Haly will provide notice of any material changes to this Privacy Policy by posting the updated Privacy Policy on its website or by providing notice through Haly's services or by other means.

Users are encouraged to regularly review this Privacy Policy to stay informed of Haly's privacy practices and to be aware of any changes. By continuing to use Haly's services after changes to this Privacy Policy have been posted, users are deemed to have accepted the updated Privacy Policy.

Haly takes the privacy of its users seriously and will provide notice of any changes to this Privacy Policy in a timely and transparent manner.

Section 5B: Contact Information

Users who have questions or concerns about this Privacy Policy or Haly's privacy practices are encouraged to contact Haly's Data Protection Officer at the following email address: raj@upmortem.com.

Haly will respond to all privacy-related inquiries in a timely and professional manner and will take appropriate steps to resolve any privacy-related issues.

Users also have the right to file a complaint with the relevant data protection authority if they believe that their privacy rights have been violated. Haly will cooperate with the relevant data protection authority to resolve any privacy-related issues.

Section 5C: Limitation of Liability

Haly makes reasonable efforts to ensure the accuracy and completeness of the information contained in this Privacy Policy. However, Haly makes no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to this Privacy Policy or the information, products, services, or related graphics contained in this Privacy Policy for any purpose.

To the maximum extent permitted by applicable law, Haly will not be liable for any direct, indirect, incidental, special, consequential or punitive damages, including but not limited to, loss of profits, data, or goodwill, arising out of or in connection with the use or inability to use this Privacy Policy or the information, products, services, or related graphics contained in this Privacy Policy.

This limitation of liability applies to all damages of any kind, including but not limited to, compensatory, direct, indirect, or consequential damages, loss of data, income, or profit, loss of or damage to property, and claims of third parties.

Haly takes the privacy of its users seriously and will make reasonable efforts to ensure the accuracy and completeness of this Privacy Policy. However, Haly will not be liable for any damages arising from the use or inability to use this Privacy Policy or the information, products, services, or related graphics contained in this Privacy Policy.

Section 5D: Governing Law

This Privacy Policy and Haly's privacy practices are governed by the laws of US and California. Any disputes arising out of or in connection with this Privacy Policy will be resolved in accordance with the laws of US and California.

Haly operates in accordance with applicable privacy laws and regulations and will take appropriate steps to resolve any privacy-related disputes in accordance with the governing law.

Users who reside in the European Union may also have additional rights under the General Data Protection Regulation (GDPR) and are encouraged to familiarize themselves with their rights under the GDPR. Haly will take appropriate steps to comply with the GDPR and to respect the privacy rights of its users who reside in the European Union.

Section 6A: Children's Privacy

Haly does not knowingly collect or process personal data from children under the age of 18. If Haly becomes aware that it has collected personal data from a child under the age of 18, it will take appropriate steps to delete such personal data in accordance with applicable privacy laws and regulations.

Parents or guardians who believe that Haly has collected personal data from a child under the age of 18 are encouraged to contact Haly's Data Protection Officer at the email address provided in this Privacy Policy. Haly will respond to such inquiries and will take appropriate steps to delete any personal data collected from children under the age of 18.

Haly takes the privacy of children seriously and will not knowingly collect or process personal data from children under the age of 18. If Haly becomes aware that it has collected personal data from a child under the age of 18, it will take appropriate steps to delete such personal data.

Section 6B: Cookies and Other Tracking Technologies

Haly may use cookies and other tracking technologies, such as pixels, web beacons, and local storage, to collect information about its users and to provide its services and features.

Cookies are small text files that are stored on a user's device when they visit a website. Cookies are used to remember a user's preferences and to understand how they interact with Haly's services.

Users have the right to control the use of cookies and other tracking technologies. Most web browsers allow users to manage their cookie preferences, such as by disabling or deleting cookies. However, disabling cookies may affect the functionality of Haly's services and features.

Haly uses cookies and other tracking technologies for the following purposes:

To improve the user experience: Haly may use cookies and other tracking technologies to remember a user's preferences and to understand how they interact with Haly's services.

For research and analysis: Haly may use cookies and other tracking technologies for research and analysis purposes, such as to understand user demographics and trends.

For marketing and promotional purposes: Haly may use cookies and other tracking technologies for marketing and promotional purposes, such as to understand user interests and preferences.

Haly takes the privacy of its users seriously and will use cookies and other tracking technologies in a manner that is consistent with applicable privacy laws and regulations.

Section 6C: Third-Party Services

Haly may use third-party services, such as analytics providers, to provide its services and features. These third-party services may collect personal data on behalf of Haly and may use cookies and other tracking technologies to provide their services.

Haly takes the privacy of its users seriously and will use third-party services in a manner that is consistent with applicable privacy laws and regulations. Haly will implement appropriate measures to ensure the security of personal data when using third-party services and will regularly review the privacy policies of its third-party service providers to ensure their compliance with applicable privacy laws and regulations.

Users are encouraged to review the privacy policies of any third-party services used by Haly to understand their privacy practices and to be aware of any third-party tracking technologies that may be used. Haly will provide information about its use of third-party services upon request.

Section 7A: Data Retention

Haly will retain personal data for as long as necessary to fulfill the purposes for which it was collected, including but not limited to, providing its services and features, complying with legal obligations, resolving disputes, and enforcing its agreements.

Haly will regularly review its data retention policies and will delete personal data that is no longer necessary for the purposes for which it was collected. Haly will also delete personal data upon request, subject to its legal obligations and the purposes for which the data was collected.

Haly takes the privacy of its users seriously and implements appropriate data retention policies to ensure the protection of personal data in accordance with applicable privacy laws and regulations.