Privacy Policy

Last Updated: May 15, 2025

UnleashX Technologies Private Limited ("we," "our," "us," or "UnleashX"), prepared this Privacy Policy to help you understand our practices with respect to the collection, use, and disclosure of information we collect from you through: (i) unleashx.ai, its subdomains, and any other website where our Terms of Service are posted; (ii) our online hosted services; and (iii) our "Software," meaning, collectively, our browser extensions, mobile applications, other downloadable apps, application programming interfaces ("APIs"), and tools and documentation ((i) through (iii) collectively, our or the "Services").

Who This Policy Covers

This policy applies to people who interact with UnleashX worldwide. UnleashX Technologies Private Limited is based in India. We act as a controller or data fiduciary when we decide how to use personal information, such as account, billing and website information. When we process personal data on a business customer's instructions, our role and obligations are set out in that customer's Data Processing Agreement (DPA).

If your information was supplied by one of our customers, contact that organization first about your privacy rights. We assist it as required by our agreement and applicable law. A DPA governs customer-instructed processing if it conflicts with this policy.

What Information We Collect and How

We collect information from you when you:

• Create or register an account, or administer your account
• Input, post, or upload information, data, or other content through the Services
• Submit questions, requests, or other communications to us via various communication channels
• Contact us for customer support or technical support
• Visit any of our websites or download any of our applications
• Participate in promotions, user conferences, webinars, demonstrations, contests, sweepstakes, surveys, or other marketing events
• Participate in research activities
• Interact with other users of the Services and guests on our community forums
• Integrate third-party products and services with your account on our Services ("UnleashX Account")

We also collect information about you from our business partners, including referral partners and resellers, and third parties that help us with sales and marketing efforts, such as prospecting. We may also obtain publicly-available business contact information.

Below is additional information about what we collect, depending on how you interact with the Services:

Your Content

"Content" includes all information, data, and other content, in any form or medium, that is collected, downloaded, or otherwise received, directly or indirectly, from you (or on your behalf) by or through the Services. It also includes information you provide when connecting a third-party account, product, or service to the Services. You (and anyone who can interact with your use of the Services) own and control the nature of any Content, subject to any applicable terms and conditions including our Terms of Service and this Privacy Policy. Our collection, use, and disclosure practices with respect to Content are distinct from those with respect to other sorts of information, as explained in Section 2.a. below.

We may upload Content automatically with your authorization from third-party services (such as from your Google Drive). See Section 1.c. below.

Customer Information

"Customer Information" consists of information related to your access or use of our Services, the creation of accounts, or that otherwise identifies you as a customer or end user of the Services. Customer Information includes:

Identifiers. This includes your name, mailing address, email address, postal code, telephone number, and other similar identifiers.

Customer Records. This includes username and password, payment information, company name, job title, business email address, and department.

Protected Classification Characteristics. This includes age and gender.

Commercial Information. This includes information about products or services purchased, obtained or considered.

Internet/Network Activity Information. This includes your browsing history, log and analytics data, information about the device(s) used to access the Services, domain server, search history and information regarding your interaction with our Services, and other usage data.

Audio/Visual Information. This includes pictures you provide or upload in connection with our Services, and the content and audio or video recordings of phone or video calls between you and us that we record where permitted by law.

Profession/Employment Information. This includes your current employer, title, and location.

Other Personal Information. This includes personal information you provide to us in relation to a survey, comment, question, request, or inquiry, and information you provide when you connect a third-party account, product or service to the Services.

Inferences. This includes inferring your location using your IP address, or using data from your use of our Services to make predictions about your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

If you are an end user using the Services through an account created on your behalf by another of our customers (such as an employer, an organization of which you are a member, or another individual that uses our Services), we may collect and process Customer Information about you on behalf of the customer with whom your use of the Services is associated.

Third-Party Integrations

If you create your account using a service provided by a third party such as Google or Apple, or a single-sign-on service provided by a third party such as Okta, we may collect Customer Information about you from the third-party service (such as your username or user ID associated with that third-party service). If you create your account using such a third-party service, or if you give us permission by changing the settings on your UnleashX Account, we may also collect, and you authorize us to collect, information about your personal contacts as may be stored within that third-party service, which we may use to facilitate your invitation of collaborators to our Services. By choosing to create an account using a third-party service, you also authorize us to collect Customer Information necessary to authenticate your account with the third party.

Certain aspects of the Services allow you to link or integrate third-party products and services to enable certain features and functionalities with the Services. For example, you can connect your Google Drive account to generate Content in the Services from information and data contained in your Google Drive or integrate with third-party services using our applications or extensions. If you choose to use these features or functionalities, you may be asked to create an account with a third party that provides such features or functionalities or link your existing third-party service account with the Services (and, by doing so, agree to the privacy policy and/or terms and conditions of that third party). You may also be asked to authorize the Services to collect information from the third party on your behalf. We will then collect information (such as your username or user ID associated with that third-party service) from you and/or that third party as necessary to enable the Services to access your data and content stored with that third-party service. Once the authentication is complete, we have the ability to access information you provided to us or was otherwise collected by the third-party service in accordance with the privacy practices of that third party. We will store the information and data we collect and associate it with your UnleashX Account, and we will use that information and data to enable the integration of the Services with the third-party service and to perform actions requested or initiated by you, or that are reasonably necessary to carry out instructions provided by you.

Automatically-Collected Information

We collect information about how you use the Services and your actions on the Services, including your IP addresses, browser types, operating systems, ISPs, platform types, device types, and mobile device identifiers such as make and model, and mobile carrier. We may also use tools, including third-party tools, to collect analytics data. Some of this information is collected through the use of cookies and other tracking technologies, such as web beacons, pixels, session replay scripts, and similar technologies. Please see our Cookie Policy for more information about our use of cookies and similar tracking technologies.

How We Use the Information We Collect

Use of Content

Notwithstanding anything to the contrary in this Privacy Policy, we will not use or access your Content except: to provide, maintain, improve, or optimize use of the Services; where you (or the organization through which you have an account) explicitly approve access (e.g., during a customer support inquiry or when participating in beta testing); in response to lawful requests by law enforcement or government authorities; in response to subpoenas, court orders, or other legal process or requests, as required by applicable law as determined in our discretion; where necessary (in our sole discretion) to ensure the stability and security of the Services and our systems (e.g., where we have reason to believe specific Content is degrading server stability); and where necessary (in our sole discretion) to protect the rights, privacy, safety, or property of you, us, or others. Notwithstanding the foregoing, you acknowledge and agree that we may retain, take possession of, delete, or deny you access to your Content if we believe, in our sole discretion, that some or all of your Content, or your use of the Services, violates our Terms of Service. We also may analyze metadata related to Content (such as total number of records, file size, API volume, access logs, etc.).

Use of Other Information

We use the information we collect for a variety of purposes, and how we use it depends on what we collect and which Services (or features of the Services) you use. These purposes may include:

Fulfilling our Contract with You and Providing the Services to You. This includes use for the purpose of: (i) responding to requests or inquiries from you; (ii) providing customer support or technical assistance; (iii) contacting you to provide product updates or information about products you have requested or purchased; (iv) creating, managing, or administering your information and account, including identifying you with your UnleashX Account or the account of another UnleashX customer; and (v) auditing relating to interactions, transactions, and other compliance activities.

Analyzing and Improving our Services Pursuant to our Legitimate Interest. This includes use for the purpose of: (i) deriving market insights, ways to improve the Services, and performing other business analysis or research; (ii) customizing existing and future product offerings and other aspects of the Services to you and other users; (iii) securing the Services and our systems, and protecting your information and data; (iv) detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; and (v) measuring interest in and engagement with our Services and short-term, transient use, such as contextual customization of ads.

Marketing Our Products and Services. This includes use for the purpose of: (i) tailoring and providing you with information about UnleashX products, services, or events that you may be interested in, including by email or phone, (ii) monitoring the performance of our advertisements and marketing efforts, and (iii) communicating with you about your engagement with our Services.

Legal Obligations and Rights. This includes use for the purpose of: (i) establishing, exercising, investigating, prosecuting, or defending against legal claims; (ii) complying with laws or responding to lawful requests and legal process; (iii) protecting our rights and property, and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, or Terms of Service; (iv) detecting, suppressing, or preventing fraud; (v) reducing credit risk and collecting debts owed to us; (vi) protecting our health and safety, or the health and safety of our Services, our customers, or any person; or (vii) fulfilling other requirements under applicable law.

Participation in any UnleashX partner program. This includes use for the purpose of enabling or supporting participation in any such program, which may involve the provision by UnleashX partners of implementation, training, app-building, base-building, or other similar services.

Consent. This includes use for other purposes that are clearly disclosed to you at the time you provide personal information, or with your consent.

Aggregated or De-Identified Data. This includes use of aggregated or de-identified information for a wide variety of statistical, analytical, and service improvement purposes. The aggregation or de-identification process prevents the information from being reassociated or identified with any one customer account, user, or individual.

Other Purposes. This includes use for our other, legitimate business purposes, or as permitted by applicable law.

How We Disclose Information

We disclose information we collect for specific purposes, including:

• When you ask us to, or otherwise give your specific consent (for example, by posting Content using the Universe feature), you consent to our making that Content visible to users of our Services or website guests;
• With affiliates and subsidiaries to provide you with aspects of the Services, such as customer support;
• With vendors that help us provide you with aspects of the Services, such as data storage, hosting, customer support, and payment processing, or that help us with marketing and email campaigns, to advertise, gain insights, and perform analytics into how the Services are used and how they might be improved;
• With third parties who enable certain features or functionalities of the Services that you've requested (for example, by installing extensions in the Services);
• With an employer or other organization (or employees or other users of the Services associated with such an employer or other organization) on whose behalf you use the Services, that created an UnleashX Account on your behalf, or that owns, manages, or is associated with the email domain for an email address on your account;
• With the owner or collaborator of a workspace on the Services to which you have access or on which you are a collaborator as necessary to identify you to such owner or collaborator or enable you to collaborate as intended;
• With partners in any UnleashX partner program, when you elect to work with one of our partners for implementation, training, app-building, base-building, or other similar services.
• As necessary to comply with applicable law, including governmental requests and law enforcement requests, and otherwise to protect the rights, privacy, safety, or property of you, us, or others;
• As necessary in the event of a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer, financing, or other disposition of all or any portion of our business, assets, or stock;
• With others for any legitimate business purpose that does not conflict with the statements made in this Privacy Policy.

Transfers of Information

UnleashX uses third-party providers to deliver certain services, including AI processing. Depending on the services and deployment configuration, these providers may process customer data outside the customer's country. Applicable processing locations, safeguards and residency commitments are set out in the relevant customer agreement and subprocessor information.

Storage locations, processing locations and provider retention are separate considerations. Before sending data subject to location restrictions, contact us to confirm the relevant providers and deployment. A hosting location alone is not a guarantee that every provider processes or retains data in that location.

We may transfer to and process your personal information in countries outside of the jurisdiction where you are located for the various purposes described above. When required by law, we will ensure that we rely on an appropriate legal mechanism for the transfer, such as your consent, standard contractual clauses (or their equivalent), or adequacy decisions. You may ask us, using the contact information in Section 9 of this policy, for more information about the specific basis we use for transferring your data.

Retention of Information

We keep personal information only as long as needed for the purposes we collected it for, including legal and reporting requirements, and in line with our legal obligations and legitimate business interests. We consider the amount, type and sensitivity of the data, the risk of unauthorized use or disclosure, why we process it and the applicable legal requirements.

Managing Your Information

Content

You may access, correct, amend, or delete Content within the Services. You own all Content you upload provided you have a lawful title thereto. Content you delete (including Content containing personal information) may be retained in archived or backup copies to enable you to use certain features like revision history and base snapshots. For instructions on how to permanently delete Content from your UnleashX Account, please contact us at privacy@unleashx.ai. Please note that permanent deletion of Content through this process may impair or disable some features of the Services (such as revision history and base snapshots) with respect to that Content.

Other Information

We may use some of the information we collect for marketing purposes, including to send you promotional communications about new Services features, products, events, or other opportunities. If you wish to stop receiving these communications or to opt out of use of your information for these purposes, please follow the opt-out instructions by clicking "Unsubscribe" (or similar opt-out language) in those communications. You may also contact us at privacy@unleashx.ai to opt out.

Information from Children

Our Services are not intended for use by children under the age of 18 and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take reasonable steps to delete such information from our files as soon as reasonably possible. If you learn that your child has provided us with personal information without your consent, you may contact us at privacy@unleashx.ai.

Changes to Privacy Policy

Any information that we collect is subject to the Privacy Policy in effect at the time such information is collected. We may, however, revise the Privacy Policy from time to time. If a revision is material, as determined solely by us, we will notify you via email. The current version will always be posted to our Privacy Policy page.

Contact Us

If you have any questions about our privacy practices, including this policy, you may contact us by email at privacy@unleashx.ai.

Regional Privacy Rights

Your rights depend on the laws applicable to you and our processing. The rights below are subject to the conditions and exceptions in those laws; not every right applies in every country. Our Indian location does not remove mandatory rights that apply to you elsewhere.

Lawful Basis of Processing

We process personal data for the purposes described in this policy using a basis permitted by the applicable law. Where the GDPR or UK GDPR applies, this may include performing a contract, meeting legal obligations, consent, or legitimate interests that are not overridden by your rights. A basis allowed in one country does not automatically apply in another. Contact us for the basis used for a specific processing activity.

Marketing and Advertising

From time to time we may contact you with information about our products and services, including sending you marketing or advertising messages and asking for your feedback on our products and services. For some marketing or advertising messages, we may use personal data we collect about you to help us determine the most relevant marketing or advertising information to share with you. You can unsubscribe at any time from our marketing or advertising emails by clicking on the unsubscribe link (or similar opt-out language) at the bottom of the email or by contacting us at privacy@unleashx.ai.

Your Privacy Rights

Depending on applicable law, you may have the following rights over your personal data:

• Right to Access: You have the right to obtain confirmation of whether we process your personal data and to access such data.
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw such consent at any time.
• Right to Grievance Redressal: You have the right to lodge a complaint with the appropriate authorities regarding any breach of your rights under applicable data protection laws.
• Deletion and Restrictions: Request deletion, object to processing or ask us to restrict it, where the applicable law provides these rights.

EEA and UK. Where the GDPR or UK GDPR applies, you may also have rights relating to decisions based solely on automated processing that have legal or similarly significant effects. You can complain to the relevant supervisory authority. Withdrawing consent does not affect processing lawfully carried out before withdrawal.

United States. Where state privacy laws apply, you may have rights to access, correct or delete data, obtain a copy, and opt out of certain sales, sharing, targeted advertising or profiling. California law may also provide a right to limit certain uses of sensitive information. You may use an authorized agent where allowed and appeal a denied request where the applicable law provides that right. We will not unlawfully discriminate against you for exercising these rights.

India and other regions. The rights and request procedures required by the laws applicable to you remain available, including applicable Indian data protection provisions as they come into force.

If you wish to exercise one of these rights, please submit a request by:

• Email privacy@unleashx.ai with the subject "Privacy Rights Request". Tell us your country or state, your relationship with UnleashX and the right you wish to exercise. Do not send passwords or identity documents unless we request them through a suitable channel.

We may need to verify your identity or an agent's authority. We will respond within the time required by applicable law and explain any permitted extension or refusal. To appeal a refusal where that right applies, reply to our decision at the same email address.

Grievance Officer

In accordance with the Information Technology Act, 2000, we have appointed a Grievance Officer to address any discrepancies and grievances you may have relating to the processing of your information. You may contact the Grievance Officer at:

Email: grievances@unleashx.ai

We will address grievances or complaints within one month of receiving them.

Sensitive Personal Data

Under Indian law, certain categories of personal data are considered "sensitive personal data or information." This includes:

• Passwords
• Financial information such as bank accounts, credit/debit card details
• Physical, physiological, and mental health condition
• Sexual orientation
• Medical records and history
• Biometric information

We collect and process sensitive personal data only with your explicit consent and for legitimate purposes related to providing our Services. We implement appropriate security measures to protect such data.

Cookie Policy

We use cookies and similar tracking technologies to enhance your experience with our Services. For detailed information about the types of cookies we use, their purposes, and your options for managing them, please visit our Cookie Policy at Cookie Policy.

Protecting Sensitive Data

We take the security of sensitive personal data seriously and implement appropriate technical and organisational measures to protect it. Sensitive data, including passwords, financial information, health and biometric data, and related categories, is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Access to such data is restricted on a strict need-to-know basis through role-based access controls, and all access is logged and audited regularly. We apply pseudonymisation and data minimisation principles wherever feasible, ensuring we collect and process only what is necessary for the stated purpose. Sensitive data is stored in isolated environments, protected against unauthorised access through multi-factor authentication, and securely deleted when no longer required. In the event of a data breach involving sensitive personal data, we will notify affected users and relevant authorities in accordance with applicable law. To exercise your rights or raise concerns regarding your sensitive data, please contact us at privacy@unleashx.ai.

Data Processing Agreement (DPA)

If you are a business customer using UnleashX's services to process personal data on behalf of your organisation or end users, you are required to enter into a Data Processing Agreement with UnleashX Technologies Private Limited. The DPA sets out processing instructions, security obligations, subprocessor terms and assistance with individual rights. Where required, it must include the applicable international transfer terms, such as EU Standard Contractual Clauses and an appropriate UK transfer mechanism. These safeguards must be agreed and implemented for the relevant transfer; mentioning them here does not put them in place. After you submit the form, an executable version of the DPA will be routed to your designated signatory via DocuSign. You can access the DPA form Data Processing Agreement form