Service Data Privacy Statement

Last Updated January 1, 2025

1. Introduction

Number AI, Inc. ("Number™", "we", "us", or "our") provides a Software as a Service (SaaS) based "Customer Communication Software" that allows our customers to store, manipulate, analyze and transfer messages between Number™ and their business systems and their customers on a variety of Number™-provided and third party messaging channels (the "Service"). This document is intended to supplement and clarify the Number™ Privacy Policy with regard to Personal Data processed on behalf of our Customers during provision of the Service ("Service Data"). This Privacy Statement for Service Data represents an Agreement between Number™ and the Customer and governs the use of Service Data. If there is any inconsistency between this Agreement and any negotiated Agreement between Number™ and the Customer, the terms of the negotiated agreement will prevail.

2. Definitions

The following terms are used as defined in the EU General Data Protection Regulation (GDPR):

3. Data We Process

This document is intended to supplement and clarify the Number™ Privacy Policy with regard to Personal Data processed on behalf of our Customers during provision of the Service ("Data Subject") Number™ may collect and process Personal Data about individuals for the purposes of account creation, billing, usage tracking, recruiting, and marketing. These data types and processing activities are governed instead by the Number™ Privacy Policy. Data that is not related to an identified or identifiable natural person, including aggregated or de-identified data, is not Personal Data and is not addressed by this document. Number™ Services are not directed to children under 16. If you learn that a child under 16 has provided us with Personal Data without consent, please contact us.

4. Types of Service Data

Number™ may process the following types of Service Data on behalf of Customers:

User Profile Information

The Number™ API, wep application or mobile application enables Agents to communicate with Users via multiple platforms such as social media (e.g., WhatsApp Messenger), email, SMS, and web apps ("Messaging Channels"). Each Channel transmits certain data about the User. Some examples include: First Name, Last Name, Email Address, Phone Number, IP Address, Location, Avatar/Image, Username/Handle, Linked IDs, and others. The types of Personal Data transmitted in the User profile depend on the data collected by the Controller, and the User’s privacy settings and preferences. The Controller may be the Messaging Channel (e.g. WhatsApp Business API); or the Customer, when messages are received via [technology platform] (e.g. SMS, email), or web apps created using Number™’s Software Development Kit.

Agent Profile Information

Customers may enable the configuration of profiles for their Agents, including details such as Name and Image.

Message Content

Message content may be structured or unstructured, and may or may not contain Personal Data. Number™ handles all messages in the Customer Service Software as Personal Data.

Metadata

Number™ servers automatically record some information when Services are used, including information sent by browsers or mobile apps. Number™ may collect information about the devices Services are being used on, including what type of device it is, operating system, device settings, application IDs, unique device identifiers, and crash data.

5. Purposes for Processing

Number™ processes the Personal Data types outlined above for the following purposes:

6. How We Protect Data

With regard to the Service and Service Data, Number™ acts as a Processor on behalf of Customers. Customers have primary responsibility for interacting with Data Subjects, and the role of Number™ is generally limited to assisting Customers as needed. Number™ processes Service Data only upon a Customer’s instruction and shall have a duty to respect the security and confidentiality of Personal Data, pursuant to the measures outlined in agreements with Customers and as required by applicable law.

Privacy Program

Number™ maintains a managed privacy program to identify risks and implement preventative measures. The privacy program is and will be reviewed on a regular basis to provide for continued effectiveness. Personal Data collected and processed by Number™ is governed by the Number™ Data Privacy Policy. Employees with access to Personal Data are trained on the Policy and their responsibility to protect the data, and they are bound by confidentiality agreements. Number™ has implemented a Privacy by Design (PbD) approach, and our development team receives specific training related to their job responsibilities.

Information Security

Number™ takes security seriously. We take various steps to protect information you provide to us from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the information we collect, process and store, and the current state of technology.

7. Transparency and Cooperation with Customers

Number™ undertakes to be transparent regarding its Personal Data processing activities and to provide Customers with reasonable cooperation to help facilitate their respective data protection obligations regarding Personal Data.

Data Breach Notification

In the event that Number™ becomes aware of any unauthorized access to or disclosure of Personal Data, Number™ will promptly notify affected Customers to the extent such notification is permitted by applicable law.

Customer Audits

Upon a Customer’s request, and subject to appropriate confidentiality obligations, Number™ shall make available to the Customer (or such Customer’s independent, third-party auditor) information regarding Number™ and third-party sub-processors’ compliance with the data protection requirements set forth in our agreements.

Obligations Upon Termination

Upon termination of the Services, Number™ shall, at the request of the Customer, delete, render un-identifiable, or return all Personal Data to the Customer. Number™ will certify that it has done so, unless legislation prevents it from returning or destroying the data. In that case, Number™ will protect the data in accordance with its commitments and will not actively process the personal data transferred anymore.

8. Sharing and Disclosure

There are times when information described in this privacy statement may be shared by Number™. This section discusses how Number™ may share such information. Customers determine their own policies for the sharing and disclosure. Number™ reserves the right to disclose or use aggregate or de-identified information for any purpose. For example, we may share aggregated or de-identified information with our partners or others for business or research purposes like telling a prospective Number™ Customer the average number of messages sent within a day.

Sub-processing by Third Parties

Number™ may retain third party sub-processors, and depending on the location of the third-party sub-processor, processing of Personal Data by such sub-processors may involve transfers of Personal Data. Such third-party sub-processors shall process Personal Data only in accordance with the Customer’s instructions. As of the date hereof, these third party providers include technical operations such as database monitoring, data storage and hosting services and customer support software tools. Such third-party sub-processors have entered into written agreements with Number™ in accordance with the applicable requirements.

Compliance with Laws

Number™ may share or disclosed data to comply with legal or regulatory requirements and to respond to lawful requests, court orders and legal process.

Enforcing Our Rights, Preventing Fraud, and Safety

Number™ may share or disclose data to protect and defend the rights, property, or safety of us or third parties, including enforcing contracts or policies, or in connection with investigation and preventing fraud.

Changes to our Business Structure

Number™ may share or disclose data if we engage in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of Number™’s assets, financing, acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities (e.g. due diligence).

9. Data Subject Rights

Number™ shall promptly notify a Customer if Number™ receives a request from a Data Subject for access to, correction, amendment or deletion of that person’s Personal Data. Number™ shall not respond to any such Data Subject request without the Customer’s prior written consent except to confirm that the request relates to that Customer. Senbdee shall provide Customers with cooperation and assistance in a reasonable period of time and to the extent reasonably possible in relation to any request regarding Personal Data to the extent Customers do not have access to such Personal Data through their respective uses of the Services.

Handling of Complaints

Data Subjects may lodge a complaint about processing of their respective Personal Data by contacting the relevant Customer or the Number™ Privacy department at the email address privacy@Number™.io Number™ shall promptly communicate the complaint to the Customer to whom the Personal Data relates. Customers shall be responsible for responding to all Data Subject complaints forwarded by Senbdee, except in cases where a Customer has disappeared factually or has ceased to exist in law or become insolvent. Where Number™ is aware of such a case, it undertakes to respond directly to Data Subjects’ complaints within thirty (30) days, including the consequences of the complaint and further actions Data Subjects may take if they are unsatisfied by the reply.

Regulatory Inquiries and Complaints

Number™ shall, to the extent legally permitted, promptly notify a Customer if it receives an inquiry or complaint from a data protection authority in which that Customer is specifically named. Upon a Customer’s request, Number™ shall provide the Customer with cooperation and assistance in relation to any regulatory inquiry or complaint involving Number™’s processing of Personal Data.

10. Changes to this Statement

We may change this statement from time to time, and if we do we will post any changes on this page. If you continue to use the Services after those changes are in effect, you agree to the revised policy.

11. Contacting Number™

Please feel free to contact us if you have any questions about Number™’s Privacy commitments or practices. You may contact us at support@number.tm.