Legal
Privacy Policy
Effective date: January 1, 2025
1. Introduction
This Traza AI Privacy Policy (“Policy”) describes how Echo AI Technologies, Inc. (“Traza AI,” “Traza,” “we,” “us,” or “our”) collect, use, process, and share the information of users of our Sites and Services (“you” or “your”), your rights and choices with respect to your information, and how you can contact us if you have any questions or concerns.
This policy should be read in conjunction with our Terms of Service, which contain additional important information about how we handle your data and content.
2. Scope of this Privacy Policy
This Privacy Policy applies to Traza AI’s platform that enables Customers and their Authorized Users to build, deploy, and utilize AI workers for supply chain operations (individually and collectively, the “Services”); our website (the “Website”); and other interactions you may have with Traza AI.
We are committed to protecting your personal information and your right to privacy. If you have any questions about this policy or our practices, please contact us at the information provided at the end of this Policy.
In this Privacy Policy, “you” and “your” refer to the person or entity visiting our Website or using our Services. If you purchase our Services, you are referred to as a “Customer.” If you are authorized by a Customer to access and use our Services, you are an “Authorized User.”
Where Traza AI collects information that is associated with an identified or identifiable individual and protected as personal data under applicable data protection laws, it is referred to as “Personal Data.” Personal Data that has been de-identified or aggregated to the extent that it is no longer reasonably associated with an identified or identifiable natural person may be used by Traza AI for any lawful purpose.
3. Third-Party Services
This Privacy Policy applies only to Traza AI’s Services and Website. It does not cover Non-Traza Products, third-party websites, services, or applications (“Third-Party Services”), even if they are accessible through our platform. Such Third-Party Services operate under their own terms of use and privacy policies.
Where applicable, a separate master subscription agreement may govern the Customer’s access to and use of the Services. The Customer — such as your employer or the organization that subscribed to Traza AI — controls its use of the Services and the associated Customer Data. If you have questions about specific configurations, data practices, or privacy settings, please contact the Customer whose service you use.
4. Information We Collect
4.1 Account Information
We collect information that you or our Customers provide when creating and managing accounts on the Services. Information collected may include:
- Name and email address
- Company name and contact details
- Account credentials and preferences
- Billing and payment information for paid plans
- Organizational roles and permissions (e.g., administrators, users, contributors)
- Optional profile information, such as phone number or additional contact methods
4.2 Service Usage Data
We collect information related to how you and other Authorized Users interact with the Services. This includes:
- User-generated content, such as workflows, AI configurations, prompts, and operational data
- Activity and usage data, including device information, IP address, browser type, and interaction logs
- Session data, cookies, and similar tracking technologies
- Technical logs, such as error reports, crash logs, and debugging information
4.3 Automatically Collected Information
When you use our Services, we automatically collect certain technical and usage information, including:
- IP address
- Browser type and version
- Device type, model, and identifiers
- Operating system and version
- Usage information and interaction data (e.g., features used, time spent)
- Access timestamps (e.g., login times, session durations)
- Pages and content viewed within the platform
4.4 Sensitive Personal Information
Traza AI does not knowingly collect sensitive personal information as defined under applicable data protection laws (such as information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, or biometric data).
4.5 Analytics and Tracking
We use analytics and tracking tools to better understand how users interact with our Services. These tools collect information such as device type, browser information, pages visited, time spent on pages, and user interactions. You can opt out of certain analytics through browser settings or opt-out mechanisms provided by the analytics providers.
4.6 Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. Cookies help us maintain secure sessions, remember user preferences, analyze how the Services are accessed, and improve functionality. You can manage your cookie preferences through your browser settings or via our Cookie Policy.
5. How We Use Your Information
5.1 Service Delivery and Improvement
- To provide, operate, and maintain the Services, including AI Solutions and workflows
- To enable authorized account access, roles, and permissions management
- To personalize your experience and remember user settings and preferences
- To improve platform functionality, performance, and reliability
- To analyze feature usage and user interactions for product development
5.2 Customer Support and Communication
- To provide technical support and respond to inquiries
- To send administrative communications such as service notifications, account updates, and security alerts
- To process billing, payments, and manage subscription accounts
- To conduct user feedback surveys to improve the Services
5.3 Security and Risk Prevention
- To detect, investigate, and prevent fraudulent transactions and other illegal activities
- To monitor, audit, and secure the platform against unauthorized access and abuse
- To conduct debugging, troubleshooting, and service diagnostics
- To maintain logs and perform system backups to protect against data loss
5.4 Compliance and Legal Requirements
- To comply with applicable laws, regulations, and valid legal processes
- To enforce our Terms of Service, Subscription Agreements, and other policies
- To protect the rights, safety, and property of Traza AI, our Customers, Authorized Users, and the public
5.5 Events, Marketing, and Promotions
Where required by applicable laws, such as the GDPR, we obtain your explicit consent before sending you marketing communications. You may withdraw your consent or opt out at any time by following the unsubscribe link in the emails or by contacting us.
6. Data Sharing and Processing
6.1 Third-Party Service Providers
We may share information with trusted third-party service providers that support the delivery of our Services (payment processing, data hosting, analytics, customer support tools). We require all service providers to maintain the confidentiality and security of the information they process on our behalf.
6.2 Customer's Instructions and Authorized Users
We process and share information according to the Customer’s instructions, including enabling Authorized Users to collaborate on AI Solutions, configure user roles, and integrate with third-party services as permitted by the Customer.
6.3 Third-Party Integrations
At the Customer’s or Authorized User’s request, Traza AI may enable integrations with third-party services. When you connect to these services, certain information may be shared according to the third party’s own terms and privacy policies. Traza AI is not responsible for the privacy practices of Third-Party Services.
6.4 Enterprise Plan Protections
Enterprise Customers may benefit from additional data protection terms, including restrictions on how Customer Data is processed, training exclusions for AI models, and enhanced confidentiality commitments.
6.5 Affiliates and Business Changes
We may share information with corporate affiliates consistent with this Privacy Policy. In the event of a merger, acquisition, reorganization, or sale of assets, information may be transferred to the involved parties.
6.6 Aggregated or De-Identified Information
We may use or share aggregated or de-identified information (information that cannot reasonably identify you) for any purpose, including business analysis, research, or product development.
6.7 Legal Requirements and Protection
We may disclose information if required to comply with a legal obligation, enforce our Terms of Service, protect Traza AI’s rights or safety, or detect and prevent fraud or security issues.
7. International Data Transfers
We may transfer your Personal Data to countries outside of your country of residence, including the United States, to support the operation of our Services. Where required by applicable law, we ensure appropriate safeguards are in place, such as the use of European Commission Standard Contractual Clauses (SCCs) for international data transfers.
8. Liability Protection
We implement industry-standard technical and organizational measures to protect the privacy and security of user content within our Services. However, no system is completely secure, and we cannot guarantee absolute protection against unauthorized access or misuse.
Users are responsible for maintaining the confidentiality of their account credentials and for all activities that occur under their account. Traza AI disclaims any liability for damages, loss of profits, or other harm resulting from unauthorized access to your content due to your actions or negligence.
9. Security
At Traza AI, protecting your data is a top priority. Our security practices include:
- Encryption of data in transit and at rest
- Secure user authentication and access controls
- Continuous monitoring and system auditing
- Data center security standards with redundancy and failover capabilities
- Regular vulnerability assessments and security reviews
While we take strong measures to protect your information, no method of transmission over the internet is 100% secure. We encourage Customers to configure their accounts responsibly and follow best practices for securing access credentials.
10. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy, or as required by law. When Personal Data is no longer needed, we securely delete, anonymize, or de-identify it in accordance with applicable laws and best practices.
11. Legal Basis for Processing
When we process your Personal Data, we do so based on one or more of the following legal bases:
- Performance of a contract: To provide and operate the Services you or your employer have requested.
- Legitimate interests: To operate our Services efficiently, prevent fraud, ensure security, and improve user experience, provided these interests are not overridden by your rights.
- Compliance with legal obligations: To comply with applicable laws, regulations, and lawful requests.
- Consent: Where required by law, we obtain your consent before processing your Personal Data for specific purposes, such as direct marketing communications. You have the right to withdraw your consent at any time.
12. Your Privacy Rights
12.1 EEA, United Kingdom, and Brazil residents
You have the right to:
- Access, correct, or delete your personal data
- Restrict or object to our processing of your personal data
- Request data portability (receive a copy of your data in a usable format)
- Withdraw your consent at any time, where we rely on consent for processing
- Lodge a complaint with a supervisory authority
12.2 California residents (CCPA/CPRA)
You have the right to:
- Request to know the categories and specific pieces of personal information we collect, use, and disclose
- Request deletion of your personal information, subject to legal exceptions
- Request correction of inaccurate personal information
- Opt out of the sale or sharing of your personal information
- Limit the use of sensitive personal information (where applicable)
- Not be discriminated against for exercising any of your rights
Categories of personal information we may collect include: identifiers (name, email, company information), commercial information (billing details), internet or electronic network activity (platform usage data), geolocation information (IP-based), and professional or employment-related information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will notify you by updating the date at the top of this page, and where required, by providing additional notice through our Services or via email.
14. Contact Us
If you have any questions or comments about this Policy, how we collect and use your information, or wish to exercise your rights, please contact us:
Email: contact@traza.ai
Echo AI Technologies, Inc.
2261 Market Street STE 86852
San Francisco, CA 94114
United States