Our privacy policy was updated on November 14

Our Privacy Policy

At Colossyan, we are committed to maintaining robust privacy protections for our customers, users andwebsite visitors. This notice summarizes how we collect, use and safeguard the information you provide to usand what choices you have with respect to your privacy.

This notice applies to the data processing of Colossyan Inc, and its relevant Affiliates (as specified below) inrelation to the Colossyan Services and the Colossyan websites (such as colossyan.com and app.colossyan.com). This notice does not apply to any third-party applications or software integrated with the Services ("Third-Party Services"), or to the privacy practices of any other third-party products, services or businesses. Unlessdefined otherwise, capitalized terms in this notice will have the same meaning as in the Terms of Service.

What type of personal data do we process?

A) Information that you provide to us, including when you register and communicate with us directly

● Registration data: When you register to our Services, you need to provide us with your email address,password and username. The data that we request at the time of registration is necessary for theprovision of our Services.

● Billing information: If you subscribe to a paid Service, you also need to provide certain billinginformation (such as your name, address and VAT number). You might also provide paymentinformation, such as payment card details, which we collect via a secure payment processing service,Stripe Inc. This data is necessary to provide you with the Colossyan Services.

● Additional data provided by you: You may decide to share further information, including personaldata, with us when you contact us, provide feedback to us regarding the Services or otherwisecommunicate with us. It is solely your decision to share any other data with us during suchcommunications, so our processing of such data will be based on your consent.

B) Content that you upload to our Services

● If you decide to get a Custom Avatar and your Service Plan allows it, you may upload CustomerMaterials including personal data (such as your voice or picture).C) Information that we collect about you when you use our Services, including technical information aboutyour interactions

● Logs: As most websites and services provided through the Internet, we gather certain information andstore it in log files when you interact with our Services. This information includes internet protocol (IP)address, as well as browser type and online identifiers.

● Data on how you use Colossyan: When you visit our websites or Services, we collect informationabout your URL clickstreams (the path you take through our site), products/services viewed, how andhow often certain functions are used, etc.

D) Information that we collect about you when you visit our websites

● Cookie information: When you access our websites and Services, we use cookies and otherinformation gathering technologies for a variety of purposes. These technologies may provide us withpersonal data, information about devices and networks you utilize to access our website, and otherinformation regarding your interactions. For detailed information about the use of cookies, please seeour Cookie Notice.

E) Information that we collect from third-parties

Our partners: We receive information about you and your activities on our website from third-partypartners, such as advertising partners. Upon your consent, such partners provide us with informationabout your engagement with our website and online advertisements. If you want to learn more, pleasesee section about “Why and how do we use cookies?”.

Why do we process your data?

We may process your personal data for several purposes. How we use your personal data depends on your onhow you use the Colossyan Services and your preferences you have communicated to us.

● Services: We will use some of your personal data for the provision and maintenance of your account,and for authentication purposes. E.g. We use your email address to enable you to login to ourServices.

● Billing: We will process certain information, such as financial data for billing purposes, i.e. tocomplete transactions, and send you purchase confirmations and invoices.

● Communication: We will send you information regarding the Services, such as administrativemessages, to your email address provided to us. Please be aware that you cannot opt out of receivingcertain service messages from us, including necessary security alerts and legal notices.

● Customer support: If needed, we may connect personal information to information gathered in ourlog files as necessary to provide better customer experience and to improve our services.

● Developing Services: We use analytics to better understand the behavior of our users to grow ourbusiness. For this purpose, we collect certain information, such as how often our Services are used,and the events that occur while using our websites. We use this aggregate information to identifyusage patterns and trends.

● Marketing: Upon your consent, we may use your email address to send you marketingcommunications. In order to understand how our users interacts with our Services, and to measureand understand how well an online marketing or email campaign performed, we perform analyses.

● Security: We use information about you to secure your profile, verify accounts, to monitor suspiciousor fraudulent activity and to identify violations of our Terms of Service or Acceptable Use Policy.

● Protecting our legitimate business interests and legal rights: Where required by law or where webelieve it is necessary to protect our legal rights, interests and the interests of others, we useinformation about you in connection with legal claims, compliance, regulatory, and audit functions,and disclosures in connection with the acquisition, merger or sale of our business.

● Other: We may also process your data for any other purposes for which we obtain your consentwhere necessary or otherwise in accordance applicable law and this policy.

What is the legal basis of our data processing? (for EEA users)

If you are an individual in the European Economic Area (EEA), we collect and process information about youonly where we have legal bases for doing so under applicable EU laws. This means we collect and use yourinformation only where:

● It is necessary in order to provide you the Services, including to set up and maintain an account foryou, to provide customer support;

● It satisfies a legitimate interest (which is not overridden by your data protection interests), such as forresearch and development, and to protect our legal rights and interests;

● You give us consent to do so for a specific purpose;

● It is needed to comply with a legal obligation.

How do you use your personal data?

In connection with certain Service Plans, you may decide to upload Customer Materials used in your CustomerCreated Videos that may include personal data (such as your voice or picture). Please remember that if you useour Service to share your Customer Created Videos with someone, your personal data might be shared withsuch third party.If your account is part of a business plan, our Services are provided to your organization, the ultimate decisionsregarding your personal data will be made by your company that qualifies as “Customer”. In such case, yourcompany will be considered as a controller and Colossyan will act as a processor, acting upon the instructionsof such organization.

How long will we process your data?

We will retain your personal data as long as it is needed to fulfil the purposes specified above (for example, toprovide you with our Services), unless a longer retention period is required or permitted by law (such as tax,accounting or other legal requirements). When we have no ongoing legitimate business need to process yourpersonal data, we will either delete or anonymize it in accordance with our deletion policy.

Do we share your data with third parties?

We never sell your personal data to third parties. However, in certain cases we need to share your personaldata with our Affiliates and third parties. In any case, we will share your personal data only in accordance withapplicable laws and this notice, and in the following cases:

● Legal compliance: We may transmit personal data if the applicable legal provisions so require, or whensuch action is necessary to comply with any laws, e.g. with criminal authorities if we are required tocooperate for such purposes. We may also need to share personal data for the protection of our rightsand interests, to protect your safety or the safety of others or to investigate fraud, in accordance with theapplicable laws.

● Third-party service providers: In certain cases, we use Colossyan affiliates and third parties as serviceproviders or business partners to process personal data and support our business. These services may helpus keep Colossyan running by storing or processing your data on our behalf. We use third-party serviceproviders to assist in providing the Colossyan services, for example to provide infrastructure, or to providetechnologies integrated with our services, , and to help us provide customer support and emailnotifications. We may also contract with companies to provide certain services, such as authentication,analytics, and marketing services. If you purchase through our website, your payment and subscriptioninformation will be processed by Stripe Inc, a payment processing service, in accordance with its PrivacyPolicy.

We may share your data with professional advisers acting as service providers, processors, controllers, or jointcontrollers - including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal,insurance and accounting services, and to the extent we are legally obliged to share or have a legitimateinterest in sharing your data.

Data transfers

Our website and Services are hosted in the United States. If you access our website or Services from any otherregion of the world with laws or other requirements governing personal data collection, use, or disclosure thatdiffer from applicable laws in the United States, then through your continued use of our sites and Services, youare transferring your data to the United States, and you agree to have your data transferred to and processedin the United States.

How do we protect your data?

We implement security measures designed to protect your information from unauthorized access. Youraccount is protected by your account password. You should never disclose your password to others and it isrecommended that you log out of your account after each use. We also protect your information frompotential security breaches by implementing certain technological security measures including encryption,firewalls and secure socket layer technology. However, these measures do not guarantee that yourinformation will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure serversoftware. By using our Service, you acknowledge that you understand and agree to assume these risks.

Your privacy rights

You may ask us to:

● provide information to you about the personal data that we or our processors process about you,

● correct inaccuracies or amend your personal data,

● stop processing your personal data and/or to stop sending you marketing communications,

● delete your personal data.

If you are from a country where the EU GDPR applies, you may have additional rights such as:

● In certain circumstances, you may have a broader right to erasure of your personal data. For example,if it is no longer necessary in relation to the purposes for which it was originally collected. Please note,however, that we may need to retain certain information for record keeping purposes, to completetransactions or to comply with our legal obligations.

● You may have the right to request that we restrict processing of your personal data in certaincircumstances (for example, where you believe that the personal data we hold about you isinaccurate or unlawfully held).

● In certain circumstances, you may have the right to be provided with your personal data in astructured, machine readable and commonly used format and to request that we transfer thepersonal data to another data controller without hindrance.

You can request this by send an email to info@colossyan.com. We will respond to your request within thirtycalendar days. Please note that, we may ask you to verify your identity before complying with the request.

You also have the right to complain to a data protection authority or claim damages before the court ifnecessary. A list of contact details for the EU data protection authorities is available here.

Children’s privacy

Our Site and the Service are not directed to anyone under the age of 13. The Site does not knowingly collect orsolicit information from anyone under the age of 13, or allow anyone under the age of 13 to sign up for theService. In the event that we learn that we have gathered information from anyone under the age of 13without the consent of a parent or guardian, we will delete that information as soon as possible. If you believewe have collected such information, please contact us at support@colossyan.com.


We reserve the right to change this notice from time to time. If there are any material changes to this policy,you will be notified by sending a notice to the primary email address specified in your account or by placing aprominent notice on our site. Any material changes will go into effect 30 days following such notification. Weencourage you to periodically review this page for the latest information on our privacy practices. Yourcontinued use of our website or our Services constitutes your agreement to be bound by such changes to thisnotice. Your only remedy, if you do not accept the terms of notice, is to discontinue use of our Website andServices.

Any further questions?

If you have any further questions in relation to the processing of your data, please contact support@colossyan.com.