Privacy Policy

Introduction

At AIPS, Inc. ("AIPS"), we prioritize your privacy and are dedicated to protecting it. This Privacy Policy outlines our practices regarding the collection, use, processing, and disclosure of your information through your use of our Services. This policy is in accordance with the General Data Protection Regulation (GDPR) effective from May 25, 2018. If you do not agree with our policies and practices, please do not use our Services. If you have questions or concerns regarding this policy, please contact us at

support@aips.ai

Definitions

"We", "Our", and "Us" refer to AIPS, Inc., the provider of the Services.

"You", "Your", "Yourself", and "User" refer to both individuals and entities that use our Services.

"Personal Data" means any information that can be used to identify you, either alone or in combination with other information.

"Service Data" refers to electronic data, text, messages, or other materials submitted to or collected through our Services by Users, including Personal Data.

"Third Parties" refer to any website, company, or individual apart from the User and AIPS, Inc.

Scope

This Privacy Policy applies to all Personal Data processed by us through your use of our Services, including data collected as a data controller from:

Customers who have subscribed to our Services and agreed to the Terms.

Individuals from whom we collect data as a data controller.

1. Information We Collect

a. When You Visit Our Website: We automatically collect certain information, which may include Personal Data, to improve our Services. We act as a data controller for this information.

b. When You Sign Up for Our Services: We collect details such as your name, email address, mailing address, IP address, geographic location, phone number, billing information (including credit card details), and any feedback provided within the Services.

c. Marketing and Promotions: If you engage with our promotional activities, such as newsletters, webinars, or events, we collect your contact details to send you requested information and marketing communications, provided you have opted in.

d. Social Media Interactions: Features like the Facebook “Like” button on our websites may collect your IP address and page visit information. The processing of this information is governed by the privacy policy of the respective social media platforms.

e. Cookies and Similar Technologies: We use cookies to analyze user activity to improve the Website. You can control the use of cookies at the individual browser level. Disabling cookies may limit your use of certain features on our website.

f. Analytics: We collect data related to your device, browser, and usage patterns to understand better and serve your needs, and to improve our Services.

2. How We Use Your Information

We use the information we collect to:

  • (a) Deliver and improve our Services.
  • (b) Communicate with you about the Services you are using, including updates and troubleshooting.
  • (c) Conduct marketing and sales activities, where you have given your consent.
  • (d) Understand and analyze how you use our Services for development and enhancement purposes.

2A. Camera and Receipt Data

When you use receipt scanning or upload features, the app may request access to your camera and, where applicable, photos/media files you select for upload.

Why we request this permission: to let you scan or upload receipts for transaction-related and user-visible receipt processing features in the app.

What data may be collected: receipt images and receipt-derived fields, such as merchant name, date, line items, totals, taxes, and other extracted text or amounts when OCR is used.

How this data is used: to process your transaction flow, classify receipt details, populate receipt-related fields, and provide the feature output you requested in the app.

Sharing: we may share receipt images or extracted receipt data with trusted service providers that help us provide these features (for example, cloud hosting, OCR processing, and API infrastructure providers), subject to contractual confidentiality and security obligations.

Retention and deletion: we retain receipt data only as long as needed to provide the feature, maintain your account records, resolve disputes, and meet legal obligations. You can request deletion of receipt-related personal data by contacting

support@aips.ai

. We will process valid deletion requests in accordance with applicable law.

3. Processing Service Data:

We process Service Data according to the instructions provided by our customers, who act as data controllers. Our role is limited to a data processor, and we do not control or own the Service Data.

4. Your Rights as a Data Subject:

If you are within the European Economic Area (EEA) or Switzerland, you have the right to access, correct, delete, or restrict the processing of your Personal Data. You can also object to the processing of your Personal Data and, where applicable, request data portability. For any such requests, please contact us at

support@aips.ai

5. Consent and Communication

By using our Services, you consent to the collection, use, and sharing of your information as outlined in this Privacy Policy. We may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services.

6. Retention of Personal Data:

We retain Personal Data as long as necessary to provide the services you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Specific retention periods depend on the nature of the data and the reasons for which it is processed.

7. Security Measures:

We implement robust security measures to protect your Personal Data from unauthorized access, alteration, or destruction. These include physical, managerial, and technical safeguards designed to protect the security and confidentiality of your data.

8. Sharing Personal Data:

We may share your data with third parties in the following situations:

  • Service Providers: We engage third parties to assist in providing our Services, such as payment processing, data analysis, email delivery, hosting services, and customer service.
  • Legal Requirements: We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). We reserve the right to disclose your information as necessary to comply with our legal obligations, enforce our policies, or protect the rights, property, or safety of others.

9. Accessing and Updating Your Personal Data:

You have the right to access, update, and correct inaccuracies in your Personal Data in our custody and control, subject to certain exceptions prescribed by law. You can help us maintain the accuracy of your information by notifying us of any changes to your Personal Data.

10. California Privacy Rights:

If you are a California resident, you have specific rights regarding access to your Personal Data. California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your Personal Data by AIPS to third parties for the third parties' direct marketing purposes.

11. Contact Us:

If you have any questions about this Privacy Policy or our treatment of your Personal Data, please write to us by email at

support@aips.ai

or by mail at 8 The Green, Suite 16391, Dover, DE 19901.

Cookies and Tracking Technologies

12. Use of Cookies:

We use cookies and similar tracking technologies to track activity on our Services and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. We use cookies to enhance your experience, gather general visitor information, and track visits to our website. You have the option to accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Services.

13. Protection of Children’s Privacy:

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you become aware that a child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

14. International Transfer of Data:

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

For the storage and processing of your data, it may be necessary to transfer your data to locations outside the European Economic Area (EEA). In these cases, we transfer personal data only to countries that have been deemed to provide an adequate level of data protection by the European Commission, or we use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

15. Security Measures:

We strive to use commercially acceptable means to protect your Personal Data, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information.

16. Amendments to This Privacy Policy:

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

17. GDPR Rights for European Union Residents:

AIPS acknowledges the protection of personal data as a fundamental right under the GDPR. As such, we have implemented data protection measures that comply with European Union data protection law. Here are your rights under the GDPR:

  • (a) Right to Access: You have the right to request copies of your personal data that we hold. We will provide this information to you within one month of your request at no charge.
  • (b) Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete any information you believe is incomplete.
  • (c) Right to Erasure (“Right to be Forgotten”): You may request that we erase your personal data, under certain conditions.
  • (d) Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • (e) Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
  • (f) Right to Object: You have the right to object to our processing of your personal data, under certain conditions, including your right to object to direct marketing.
  • (g) Right to Withdraw Consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • (h) Automated Decision-Making and Profiling: You have the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

18. Data Protection Officer (DPO):

To ensure ongoing compliance with the GDPR, we have appointed a Data Protection Officer (DPO). Our DPO is responsible for overseeing our data protection strategies and implementation to secure compliance with GDPR requirements. You can contact our DPO at

support@aips.ai

19. GDPR Compliance Measures:

Our GDPR compliance includes data protection impact assessments, enhanced data protection features in our IT infrastructure, and regular GDPR training for our staff. We have implemented safeguards and data handling procedures that meet GDPR standards. This includes using encryption for data at rest and in transit, conducting regular security assessments, and maintaining comprehensive data logs to monitor access and alterations to your data.

20. Legal Basis for Processing Personal Data Under GDPR:

We process your personal data based on the following legal grounds:

Consent: We may process your data if you have given us explicit consent to use your personal data for a specific purpose.

Contract: Processing your data is necessary for a contract you have with us, or because you have asked us to take specific steps before entering into a contract.

Legal Obligations: Processing your data is necessary for compliance with a legal obligation to which we are subject.

Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

21. How to Exercise Your GDPR Rights:

You can exercise any of your GDPR rights by contacting us directly through our designated channels. We will respond to all requests from individuals wishing to exercise their data protection rights in accordance with GDPR requirements.