Customer Data and AI/ML Privacy Policy
How personal information is processed in connection with Batoi artificial-intelligence and machine-learning activities.
At a glance
Explains personal-information processing associated with Batoi artificial-intelligence and machine-learning activities.
- The applicable service information must identify authorized data use, Batoi’s role, relevant providers, human access, retention, output handling, and any model- or service-improvement use.
- Applicable privacy rights depend on the individual, jurisdiction, processing context, and Batoi role.
- Customer-controlled data and service operations may also be governed by the Services Privacy Policy and customer agreement.
This summary helps you navigate the document. The complete policy text and any controlling agreement remain authoritative.
On this page
Introduction
Scope
This Privacy Policy applies to Batoi’s processing of personal information obtained from a Batoi customer when that customer has contractually agreed to its use for the AI/ML purposes described in this policy.
Who is Responsible for Processing Your Personal Information?
The applicable customer agreement, order, service description, or privacy notice identifies the responsible Batoi entity and whether it acts as controller, processor, or subprocessor for the relevant AI/ML processing. Authorized affiliates and providers may participate only for the documented purpose and under the applicable safeguards.
Which Categories and Specific Pieces of Personal Information Do We Process?
Personal information that can directly or indirectly identify you may include, for example:
Batoi may also collect customer and systems operations data, which may incidentally contain personal information:
For What Commercial or Business Purpose Do We Use Your Personal Information?
In cases where the processing of personal information is not central to the purposes of processing for the below AI/ML activities, Batoi will limit the use of personal information when technically possible or feasible. ‘Dataset’ refers to a set of data that may contain this limited personal information.
We use personal information for the following business purposes:
These purposes are described below in further detail.
To analyze, develop, improve, and optimize the use, function and performance of Batoi products and services to provide our customers with a more intelligent experience
Batoi will use these datasets for internal research for technological development and demonstration and to improve, upgrade, or enhance Batoi products and services to provide more intelligent, automated and predictive functionalities.
To manage the security of our sites, networks and systems and the products and services Batoi provides to our customers
Batoi processes datasets to detect, prevent, or predict malicious, deceptive, fraudulent, or illegal activity on Batoi sites, networks, and systems, as well as on Batoi products and services used by our customers. AI/ML activities, subject to this policy, allow Batoi to provide more intelligent and predictive functionalities to investigate, prevent, or predict malicious activity, fraud, or bad actors.
To comply with applicable laws and regulations and to operate our business
In some cases, we may process personal information to comply with applicable laws and regulations. For example, to respond to a request from a regulator or to defend a legal claim. We may also process personal information in the operation of our business. For example, Batoi may process the datasets to conduct audits and investigations, for finance and accounting, archiving and insurance purposes, or to process individual rights requests.
Categories of Sources of Personal Information
Personal information subject to this Privacy Policy is provided to Batoi from Batoi customers when agreed to by contract with the customer.
For Information About You Collected in the EU/EEA, What Is Our Legal Basis?
For What Period Do We Retain Information About You?
Retention depends on the applicable service, dataset, purpose, customer instructions, provider configuration, agreement, deletion workflow, and legal requirements. Service-specific information or the applicable order should state any fixed input, output, model-improvement, safety, or audit retention period. Batoi retains request and compliance evidence only for as long as reasonably necessary to demonstrate handling and meet applicable obligations.
When And How Can We Share Your Personal Information?
Sharing within Batoi
Sharing with, or sale to, third parties
Batoi does not sell personal information processed under this policy for monetary consideration. An approved provider or subprocessor may process information for the documented service purpose, but not for its own independent commercial purpose unless the customer and applicable law permit that use.
We may also share such personal information with the following third parties for a business purpose:
How Is Personal Information Protected Globally?
Batoi entities and approved providers may process personal information in more than one country where required for the documented purpose. Cross-border transfers use the safeguard required for the relevant transfer and processing relationship, which may include the European Commission’s Standard Contractual Clauses or another lawful mechanism.
How Is Information About You Secured?
Batoi has implemented appropriate technical, physical and organizational measures designed to protect personal information against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access, as well as all other forms of unlawful processing.
What Are Your Privacy Rights?
Pursuant to the E.U. General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Brazilian General Data Protection Law (LGPD) and other applicable laws and regulations, individuals in certain jurisdictions may have data subject rights enabling them to opt-out of third party sharing or selling, delete or remove, or request to access and receive a copy of their personal information in Batoi’s possession or for which Batoi is otherwise responsible. Batoi provides rights to individuals to access, amend, correct, or delete data for personal information that directly identifies such individuals, such as their name or email address.
We will respond to your request consistent with applicable law. Batoi will not discriminate against consumers who have exercised the deletion, opt-out, or access rights provided to them in this Privacy Policy.
What Are Your Rights under the California Consumer Privacy Act (CCPA)?
If you are a California resident, you may request that we:
- disclose to you the following information:
- the categories and specific pieces of personal information we collected about you and the categories of personal information we sold (see section 4)
- the categories of sources from which we collected such personal information (see section 6);
- the business or commercial purpose for collecting or selling personal information about you (see section 5); and
- the categories of third parties to whom we sold or otherwise disclosed personal information, if applicable (see section 9).
- delete personal information we collected under this Privacy Policy (see section 12); or
- opt-out of any future sale of personal information about you, if applicable (see section 12).
We will respond to your request consistent with applicable law. If you are an authorized agent making an access or deletion request on behalf of a Californian resident, submit the request through Batoi Contact and indicate that you are acting as an authorized agent. We will provide instructions for the verification and submission process.
Does Batoi Process Personal Information From Children or Other Sensitive Personal Information?
This policy does not authorize processing personal information of children or sensitive or “special” personal information merely because an AI/ML feature is available. Any such processing requires an applicable service purpose, customer authority and instructions, a lawful basis, safeguards appropriate to the data and risk, and any required consent, age assurance, or impact assessment.
Batoi will not use the personal information processed under this policy to make decisions related to an individual’s eligibility for employment, credit, healthcare, or insurance purposes or to make decisions solely by automatic means where the decision has a legal or significant effect on the individual, or in any way that may or does discriminate against any person or promote bigotry, racism or harm.
How to Contact Batoi if You Have Questions, Comments or Complaints?
If you believe personal information has been used inconsistently with this policy or your choices, wish to exercise an applicable privacy right, or have a question or complaint, submit a request through Batoi Contact. Batoi will route it to the responsible privacy function.
Dispute Resolution or Filing a Complaint
If you have a complaint regarding this Privacy Policy, please contact us first through Batoi Contact. We will investigate and attempt to resolve the matter in accordance with this policy and applicable law.
Available escalation, dispute-resolution, arbitration, court, and regulatory-complaint rights depend on the applicable agreement, processing role, jurisdiction, and mandatory law. You may contact the competent data-protection authority where applicable.