This Privacy Policy (“Privacy Policy”) explains how information is collected and used in the customer knowledge platform (the “Platform”) developed and operated by Deeto, Inc. (“Deeto” or “we”, “us”, “our”).
Our Platform helps companies (each, an “Organization”) to develop business deals with prospective customers (each, a “Prospect”) by leveraging client-references and potential leads provided by the Organization’s existing customers (each, a “Customer”).
We are committed to protecting and respecting data privacy. Please read this Privacy Policy carefully.
When we set up the Organization’s environment on the Platform, the Organization provides us with the name, email address, and optional profile image of its sales staff members that will use the Platform. We refer to this data as “Organization Set-Up Information”.
The Organization provides us with the name, email address, job title, and company name of the representative of the Organization’s Customers. The Organization can also optionally provide us with the phone number of these representatives. We refer to this information as “Customer Invitation Information”.
Additionally, the Organization can choose to provide any additional information it chooses, about the representatives of the Organization’s customers. Deeto does not determine or control this additional information. Deeto is therefore merely a processor for that additional information.
When the representative of the Organization’s Customer onboards to the Platform, they provide a written testimonial describing their experience with the Organization. We also document whether they prefer not to participate in reference calls with Prospects, willingness to participate in activities such as webinars, social hosting, and rewards earned for the participation in activities through the Platform.
Additionally, the representative of the Organization’s Customers can provide their responses to questions determined by the Organization, and they can record a video or audio testimonial.
We refer to this entire data as “Customer Onboarding Information”.
We process personal information of representatives of an Organization’s Prospects.
The Organization provides us with the name, email address, job title, and company name of the representative of the Organization’s Prospects. We refer to this information as “Prospect Invitation Information”.
Additionally, the Organization can choose to provide any additional information it chooses, about the representative of the Organization’s Prospects. Deeto does not determine or control this additional information. Deeto is therefore merely a processor for that additional information.
We process personal information of representatives of an Organization’s leads.
The representatives of the Organization’s Customers can choose to provide the name, email address, job title, and company name of potential leads for the Organization. We refer to this data as “Lead Information”.
We process personal information relating to reference calls between a Customer representative and a Prospect representative.
When a Prospect representative wishes to schedule a reference call with a Customer representative through the Platform, we process the scheduling information for the call. These are the emails exchanged between them to schedule the call, and the calendar invitation for the scheduled call. Once the call takes place, we process the date and time of the call, who participated in the call, and how long the call was. We refer to this information as “Reference Call Information”.
We process personal information when users of the Platform contact us with technical or service support inquiries regarding the Platform.
When a user of the Platform contacts us with a technical or service support inquiry regarding the Platform, we process their name, email address, and the content of technical support or service inquiry.
We refer to this type of data as “Inquiry Information”.
We process information when representatives of an Organization or representatives of an Organization’s Customers respond to our surveys about the Platform.
When representatives of an Organization or representatives of an Organization’s Customers respond to our surveys about the Platform, we collect and process the survey responses which provide details about the person's use, satisfaction with and comments regarding the Platform,
We refer to this type of data as “Platform Survey Information”.
We also collect analytics information about how a user uses our Platform.
We record and collect certain information about user interaction with the Platform, including the IP address from which you access the Platform, time and date of access, type of browser used, language used, links clicked, and actions taken while using the Platform. We refer to this as “Analytics Information".
We will not share your information with others, except in the events listed below or when you provide us with your explicit and informed consent.
We will process information with our service providers helping us to operate our business and the Platform.
We will process personal information with the assistance of our service providers who assist us with the internal operations of the Platform. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their own promotional purposes. These service providers include Amazon Web Services, Sendgrid, OpenAI, Zoom, LiveChat, Amplitude and HotJar.
We share information with the Organization.
We share Lead Information and Reference Call information with the Organization.
We share information with the Organization’s Customer
If a Prospect indicates they wish to contact a Customer’s representative, we share the Prospect Invitation Information with the Customer.
We also share with the Customer the scheduling information for a reference call.
We share information with the Organization’s Prospect
We share the Organization’s representative’s name, profile image, job title, company name, and other optional fields determined by the Organization, with the Prospect.
We also share with the Prospect the name, job title, company name, testimonials, case-study, and the description of the user experience of the Customer’s representative.
If the Prospect indicated they wish to schedule a reference call, we share the scheduling information for the reference call with the Prospect.
If the representative of the Organization’s Customer agrees, we will publicly share their testimonial
We ask for the consent of the representative of the Organization’s Customer to publicly share their text, audio and video testimonials, as well as their name, position their company name. If they agree, we will provide the testimonials, as well as their name, position their company name, to the Organization so they can publish it on their websites. We will also share the testimonial (ourselves or through the Organization) on social media channels (for example, LinkedIn), and in emails, newsletters, and communication platforms such as Slack, together with their name, position their company name.
We will share information with competent authorities, if you abuse your right to use the Platform, or violate any applicable law.
If you have abused your rights to use the Platform, or violated any applicable law, we will share information with competent authorities and with third parties (such as legal counsels and advisors), for the purpose of handling of the violation or breach.
We will share your Information if we are legally required.
We will share information if we are required to do so by a judicial, governmental, or regulatory authority.
We will share your Information with third parties in any event of change in our structure.
If the operation of our business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition), we will share information only as required to enable the structural change in the operation of the business.
Information about our use of cookies is available in the cookie selection and consent tool on the Platform.
We will retain the information for as long as we need it for business purposes, and thereafter as needed for record-keeping matters.
We will retain the information for the duration needed to support our ordinary business activities operating the Platform. Thereafter, we will still retain it as necessary to comply with our legal obligations, resolve disputes, establish, and defend legal claims and enforce our agreements.
We implement measures to secure your Information.
Deeto and the Organization as data controllers.
Deeto is the data controller for the Organization Set-Up Information, Customer Invitation Information, Customer Onboarding Information, Prospect Invitation Information, Lead Information, Reference Call Information, Inquiry Information, and Analytics Information.
The Organization is a separate and independent controller for the Customer Invitation Information, Customer Onboarding Information, Prospect Invitation Information, Lead Information and Reference Call Information.
Here is Deeto’s contact information:
39 Mellon Lane Tenafly, NJ 07670, United States
Email: support@deeto.ai
Legal basis for processing personal data.
The legal basis for processing Organization Set-Up Information is our legitimate business interest in performing the Terms of Service agreement with the Organization, and providing the services agreed-to with the Organization.
The legal basis for processing Customer Invitation Information is the legitimate business interest of the Organization to have client-references.
The legal basis for processing Customer Onboarding Information is the explicit consent of the representative of the Organization’s Customer.
The legal basis for processing Prospect Invitation Information is the legitimate business interest of the Organization in developing business opportunities with Prospects.
The legal basis for processing Lead Information is the legitimate interest of the Organization in business opportunities with leads.
The legal basis for sharing information with the Organization’s Prospect is the legitimate business interest of the Organization in developing business opportunities with prospects.
The legal basis for publicly sharing the testimonials of the representatives of the Organization's Customer (with their name, position and their company name), is the consent of the representatives of the Organization's Customer.
The legal basis for processing Reference Call Information is the legitimate business interest of the Organization in developing business opportunities with Prospects and understanding more about business opportunities that have developed with Prospects.
The legal basis for processing Customer Invitation Information and Organization Set-Up Information to invite the data subject to onboard to the Platform is the consent that the Organization has obtained from the data subject to receive invitations to the Platform. It is the Organization's responsibility to obtain this consent, and if the Organization has not obtained the consent of the data subject, the Organization must not enter the data subject's contact information in the Platform.
The legal basis for processing Customer Invitation Information and Organization Set-Up Information to request their participation in surveys about the Platform is our legitimate business interest in expanding the Platform's user-base and developing an understanding of how users use the Platform so that we can plan and execute the continued development of the Platform.
The legal basis for processing Inquiry Information is our legitimate business interest in addressing questions, comments and troubleshooting requests that users send us.
The legal basis for processing Analytics Information and Platform Survey Information is our legitimate business interest in developing an understanding of how users use the Platform so that we can plan and execute the continued development of the Platform.
The legal basis for processing information for the purpose of handling instances of abusive use of the Platform is our legitimate interest in defending and enforcing against violations and breaches that are harmful to our business.
The legal basis for processing information where we are legally required to share it, is our legitimate interest in complying with mandatory legal requirements imposed on us.
The legal basis for processing your information in the event of a change in our corporate structure is our legitimate interest in our business continuity.
We will internationally transfer information in accordance with applicable data protection laws.
If we transfer your personal data for processing at locations outside your jurisdiction, we will abide by data transfer rules applicable to these situations.
You have certain rights to access, update or delete information, obtain a copy of your information, withdraw your consent, and object or restrict certain data processing activities.
If you are in the EU or UK, you have the following rights under the GDPR:
Right to Access your personal data that we process and receive a copy of it.
Right to Rectify inaccurate personal data we have concerning you and to have incomplete personal data completed.
Right to withdraw your consent, if you are a representative of the Organization’s Customer that has previously provided consent to process Customer Onboarding Information, or to publicly share your testimonials. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Once consent is withdrawn, no new Prospects will receive the Customer Onboarding Information, but Prospects that have already received it will continue to be able to view it. Once consent is withdrawn to publicly share your testimonials, we will remove the testimonials from public channels that allow us to do so, and we will inform the Customer that you have asked to remove your testimonial from their websites.
Right to Data Portability, that is, to receive the personal data that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another service provider. Where technically feasible, you have the right that your personal data be transmitted directly from us to the service provider you designate.
Right to Object, based on your particular situation, to using your personal data on the basis of our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or for the establishment, exercise of defense of legal claims.
Right to Restrict the processing your personal data (except for storing it) if you contest the accuracy of your personal data, for a period enabling us to verify its accuracy; if you believe that the processing is unlawful and you oppose the erasure of the personal data and request instead to restrict its use; if we no longer need the personal data for the purposes outlined in this Policy, but you require them to establish, exercise or defense relating to legal claims, or if you object to processing, pending the verification whether our legitimate grounds for processing override yours.
Right to be Forgotten. Under certain circumstances, such as when you object to us processing your data and we have no compelling legitimate grounds to override your objection, you have the right to ask us to erase your personal data. However, we may still process your personal data if it is necessary to comply with a legal obligation, we are subject to under laws in EU Member States or the UK or for the establishment, exercise, or defense of legal claims.
If you wish to exercise any of these rights, contact us at support@deeto.ai
We reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with the information that you have asked for, we will explain the reason for this.
You have a right to submit a complaint to the relevant supervisory data protection authority.
Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the UK or EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or place of alleged infringement of the GDPR.
In the United Kingdom, this is the Information Commissioner’s Office (ICO)
Water Lane, Wycliffe House, Wilmslow - Cheshire SK9 5AF
Tel. 0303 123 1113.
Website: https://ico.org.uk/
For a list of national supervisory authorities in the member states of the European Economic Area and their contact information, click here: https://edpb.europa.eu/about-edpb/about-edpb/members_en
If we change this Privacy Policy, we will make efforts to proactively notify you of the changes.
From time to time, we may change this Privacy Policy. If we do so, we will make efforts to proactively notify you of such changes if we have your email address. In any event, the latest version of the Privacy Policy will always be accessible at https://www.deeto.ai/legal/platform-privacy-policy .
Last Update: February 15, 2024