PRIVACY POLICY

Last Updated: [April 21st]

INTRODUCTION

SandAI Pte. Limited (“SandAI,” “Company,” “we,” “us” or “our”) respect your privacy and are committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy describes how we process personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including, as applicable, the Magi image-to-video generator platform, our website https://magi.sand.ai, mobile and desktop applications, social media pages, marketing activities, live events, etc.) and other activities described in this Privacy Policy (collectively, the “Services”). Capitalized terms not defined in this Privacy Policy are defined in our Terms of Services.

This Privacy Policy does not apply to personal data about SandAI employees and candidates, and certain contractors and agents acting in similar roles.

Please read carefully and fully this Privacy Policy before using or continuing to use our Services and, if necessary, make appropriate choices in accordance with the guidelines in this Privacy Policy. If you do not provide certain personal data to us, we may not be able to provide the Services to you, or the use of the Services may be restricted, or the Services may not function to achieve the results we intend to provide.

Changes

We may update this Privacy Policy from time-to-time to reflect changes in legal, regulatory, operational requirements, our practices, and other factors. Please check this Privacy Policy periodically for updates. If any of the changes are unacceptable to you, you should cease interacting with us. When required under applicable law, we will notify you of any changes to this Policy. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Services after the effective date of any modified Privacy Policy indicates your acknowledgment that the modified Privacy Policy applies to your interactions with the Services and our business.

INFORMATION WE COLLECT

Information You Provide to Us

Certain features of our Services may necessitate the provision of specific information. While you have the option not to provide this information, doing so might restrict your ability to use or access these features. The types of information you may directly provide to us through the Services or other means include:

  • Contact Information: such as your first and last name, email address, billing and mailing addresses, and phone number.
  • Demographic Information: such as your city, state, country of residence, postal code, and age.
  • Profile Information: such as the username and password you create to register an Account on our Services, the date of Account registration, redemption codes, biographical details, photographs or pictures, links to your social media profiles, interests, preferences, information about your participation in our contests, promotions, or surveys, and any other details you add to your Account profile.
  • Communication Information: based on our exchanges with you, including when you contact us through the Services or communicate with us via social media or otherwise.
  • Marketing Data: such as your preferences for receiving our marketing communications and details about your engagement with them.
  • User-Generated Content (“UGC”): such as photos and videos you post on the Services, likes of content posted by other users, comments, questions, messages, and any public or private chats you initiate or participate in through the Services. We or others may store, display, reproduce, publish, or otherwise use UGC, with or without attribution to you. Other users may also access your UGC and potentially share it with third parties. If you submit UGC to any “public” area of the Services, it will be considered “public” and accessible to anyone, including us.
  • Biometric Data: such as voice data and facial scans you submit when using certain product features to create videos and audio using voice and facial characteristics. These characteristics may be classified as biometric identifiers or biometric information under certain laws, including applicable privacy laws. When you use these features, we use any biometric data you submit solely to provide the requested Services.
  • Networks and Connections: such as information about the people and accounts you are connected to and how you interact with them on the Services, such as the accounts of other users that you follow.
  • Inputs and Outputs: such as text, images, and video inputs and other prompts you provide, and the videos and other outputs you create. We also collect certain metadata, such as keywords, geographical or location information, and other similar data that users can add to their content. Depending on the content and its association with your account, this information and metadata may constitute personal information.
  • Payment and Subscription Information: necessary to complete transactions and process your subscription, such as your payment card or bank account information (collected by our payment processors on our behalf) and transaction history.
  • Other Information: any additional data you provide to us, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-Party Sources

We may collect or receive personal information from sources other than you directly, including:

  • Marketing and Event Partners: such as joint marketing partners and event co-sponsors.
  • Login Integration Partners: when you choose to access our Services through third-party platforms, these partners may provide us with data like your name, username, email address, profile picture, and other publicly accessible account information.
  • Other Sources: such as social media services, public records, service providers, and other publicly available sources.

Automatic Data Collection

We, along with our service providers and business partners, may automatically gather information about you, your computer or mobile device, and your interactions over time with our Services, communications, and other online services. This includes:

  • Device Information: This includes details about your computer or mobile device, such as the operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G/4G/5G), and approximate location information like city, state, or geographic area.
  • Online Activity Information: This includes information about your interactions with our Services, such as the pages or screens you viewed, the duration of your visits to each page or screen, the website you visited before coming to our Services, navigation paths between pages or screens, details about your activities on a page or screen, access times and duration, and whether you have opened our emails or clicked on links within them.
  • Communication Interaction Data: This includes information about your interactions with our emails, texts, or other communications, such as whether you open and/or forward emails. We may use pixel tags (also known as clear GIFs) to track these interactions.

Cookies and Similar Technologies

Some of the automatic collections described above are facilitated by the following technologies:

  • Cookies: These are small text files that websites store on user devices. They allow web servers to record users’ web browsing activities and remember their submissions, preferences, and login status as they navigate a site. The cookies used on our sites include: “session cookies” that are deleted when a session ends, “persistent cookies” that remain longer, “first party” cookies that we place, and “third party” cookies that our third-party business partners and service providers place.
  • Local Storage Technologies: Technologies like HTML5 provide functionality similar to cookies but can store larger amounts of data on your device outside of your browser, in connection with specific applications.
  • Web Beacons: Also known as pixel tags or clear GIFs, these are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

Data About Others

We may provide features that allow users to invite others to use the Services. In such cases, we may collect contact information about the invitees to send them the invitations. Please ensure that you have obtained the invitee’s permission before referring them to us or sharing their contact details with us.

HOW WE USE YOUR PERSONAL INFORMATION

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Services Delivery and Operations

We may use your personal information to:

  • Provide, operate, and improve the Services (including training our artificial intelligence models) and our business.
  • Personalize our products and services, such as remembering the devices you have previously logged in from and retaining your selections and preferences as you navigate the Services.
  • Establish and maintain your user profile on the Services.
  • Facilitate your invitations to contacts you wish to invite to join the Services and enable you to connect with and interact with content posted by other users.
  • Communicate with you about the Services, including sending service-related announcements, updates, security alerts, and support and administrative messages.
  • Enable security features, for example, by sending you security codes via email or SMS and remembering devices from which you have previously logged in.
  • Inform you about events or contests in which you participate.
  • Provide support for the Services and respond to your requests, questions, and feedback.

Research and Development

We may use your personal information for research and development purposes, including to analyze and improve the Services and our business and to develop new products and services.

Marketing and Advertising

We, our service providers, and our third-party advertising partners may collect, receive, and use your personal information for marketing and advertising purposes.

  • Direct Marketing: We may send you direct marketing communications, which may be personalized based on your needs and interests. You have the option to opt-out of our marketing communications, as described in the Opt-out of communications section below.
  • Interest-Based Advertising: Our third-party advertising partners may use cookies and similar technologies to collect information about your interactions with the Services, our communications, and other online services over time (including the data described in the Automatic data collection section). They use this information to serve online ads that they believe will interest you. This practice is known as interest-based or targeted advertising. Additionally, we may share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms.

Improvement and Analytics

We may utilize your personal information to conduct analyses on your usage of the Services. This helps us enhance the Services and other aspects of our business. Specifically, it enables us to gain insights into user activity, such as identifying which pages are most and least visited, understanding how visitors navigate through the Services, and examining user interactions with our emails. Additionally, this information is instrumental in aiding us to develop new products and services.

Compliance and Protection

We may use your personal information to:

  • Comply with applicable laws, lawful requests, and legal processes: This includes responding to subpoenas, investigations, or requests from government authorities.
  • Protect rights, privacy, safety, or property: This extends to safeguarding the rights, privacy, safety, or property of ourselves, you, or others (including by making and defending legal claims).
  • Audit internal processes: To ensure compliance with legal and contractual requirements or our internal policies.
  • Enforce terms and conditions: To enforce the terms and conditions that govern the Services.
  • Prevent, identify, investigate, and deter fraudulent or harmful activities: This includes addressing unauthorized, unethical, or illegal activities, such as cyberattacks and identity theft.

To Create Aggregated, De-Identified, and/or Anonymized Data

We may also aggregate, de-identify, and/or anonymize your personal information so that it no longer identifies you and use this information for the purposes described above, such as to analyze the way our Services are being used, to improve and add features to them, to train our proprietary algorithms and other machine learning purposes, to promote our business, and to conduct research. We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law.

Cookies and Similar Technologies

In addition to the other uses included in this section, we may use the Cookies and similar technologies described above for the following purposes:

  • Technical Operation: To facilitate the technical operation of the Services, such as remembering your selections and preferences as you navigate the site, and to determine whether you are logged in when you visit password-protected areas of the Services.
  • Functionality: To enhance the performance and functionality of our Services.
  • Advertising: To assist our third-party advertising partners in showing you ads on other online services that they believe will interest you, and to measure and analyze the performance of these ads.
  • Analytics: To help us understand user activity, including which pages are most and least visited, how visitors move around the Services, and user interactions with our emails. For example, we may use Google Analytics for this purpose. If you wish to learn more about Google Analytics and how to prevent its use in relation to your use of our sites, you can visit the https://tools.google.com/dlpage/gaoptout?hl=en.

Retention

We generally retain personal information for as long as necessary to fulfill the purposes for which it was collected. This includes meeting any legal, accounting, or reporting requirements, establishing or defending legal claims, and preventing fraud. When determining the appropriate retention period for personal information, we consider several factors, such as: (i) the amount, nature, and sensitivity of the personal information; (ii) the potential risk of harm from unauthorized use or disclosure of your personal information; (iii) the purposes for which we process your personal information and whether we can achieve those purposes through other means; (iv) the applicable legal requirements. We may store aggregated, de-identified, and/or anonymized data for as long as needed to support our lawful business purposes. Regarding biometric data, we will retain it only for as long as necessary to fulfill the initial purpose for which it was collected or until three years after the deletion of your account, whichever comes first.

HOW WE DISCLOSE YOUR PERSONAL INFORMATION

We may disclose your personal information with the following parties and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection.

Other Users and the Public

Your profile, UGC, and Inputs and Outputs data may be visible to other users of the Services and the public. For instance, if you choose to make your profile and Outputs (such as photos or videos you upload) available to others through the Services, this information can be accessed by other users and the public. This means that others, including search engines, may see, collect, and use this information. They may also cache, copy, screen capture, or store it elsewhere. We are not responsible for any such use of this information.

Affiliates

Our corporate parent, subsidiaries, and affiliates.

Service Providers

Third parties that provide services on our behalf or help us operate the Services or our business (such as artificial intelligence providers, hosting, information technology, customer support, email delivery, marketing, consumer research, cookie providers, and website analytics).

Payment Processors

Any payment card information you use to make a purchase on the Services is collected and processed directly by our payment processors.

Advertising Partners

Third-party advertising companies for the interest-based advertising purposes described above.

Third Parties Designated by You

Where you have instructed us or provided your consent or authorization to do so, or as otherwise necessary to provide the Services. We will disclose personal information that is needed for these third parties to provide the services that you have requested.

Business and Marketing Partners

Third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you.

Professional Advisors

Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.

Authorities and Others for Legal, Compliance, and Security Purposes

Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above. We may also disclose information for fraud detection or prevention, such as to determine whether UGC and Inputs and Outputs violate our terms of use or applicable laws.

Business Transferees

In the context of actual or prospective business transactions (e.g., investments in or financings of SandAI, public stock offerings, the sale, acquisition, transfer, or merger of all or part of our business, assets, or shares, or similar transactions) and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets). For example, we may need to share certain personal information with prospective counterparties and their advisers, an acquirer, successor, or assignee of SandAI.

OTHER SITES AND SERVICES

Our Services may include links to websites, mobile applications, and other online services operated by third parties. Additionally, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations do not imply endorsement or affiliation with any third party.

We do not control third-party websites, mobile applications, or online services, and we are not responsible for their actions or content. We encourage you to review the privacy policies of any third-party websites, mobile applications, or online services you use to understand their data practices and how they protect your information.

SECURITY

We implement a variety of commercially reasonable technical, administrative, and organizational measures designed to protect personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or electronic storage is ever fully secure or error-free. Therefore, you should take special care in deciding what information you provide to the Services. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Services, or third-party websites.

INTERNATIONAL DATA TRANSFER

SandAI is headquartered in Singapore and may use service providers that operate in countries other than the United States. Your personal information may be transferred to Singapore or other locations where privacy laws may not be as protective as those in your state, province, or country.

CHILDREN

Our Services do not address anyone under the age of 16. If you are under the age of 16, please do not use any of the Services and do not provide any information, including without limitation, your name, address, contact information, email address, username, etc., to us.

We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with personal data in a manner prohibited by law, please contact us. If we learn that we have unknowingly collected personal information through the Services from a minor under the age of 16, we will comply with applicable legal requirements and make commercially reasonable efforts to delete their personal information.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent’s consent before we collect and use that information.

RESIDENTS OF CERTAIN U.S. STATES

This section applies if you are a resident of California, Colorado, or another U.S. state that has passed a privacy law similar to the California Consumer Privacy Act, as amended (“CCPA”) and requires specific privacy notice disclosures. For purposes of this section, references to “personal information” shall also include “sensitive personal information” as those terms are defined under the CCPA.

Categories of Personal Information Collected

We collect, and in the preceding 12 months we collected, the following categories of personal information and sensitive personal information (denoted by *):

  1. Identifiers, such as name, email address, IP address, other device identifiers.
  2. Personal information listed in the California Customer Records statute, such as name and billing address.
  3. Commercial information, such as subscription status and history.
  4. Internet and similar network activity information, such as information regarding your interaction with the Services and personal information contained in user input and UGC.
  5. Geolocation information, such as IP address and billing address.
  6. Visual information, such as images that you upload to the Services.
  7. Account access credentials, such as username and password*.

For details on the purposes for collecting and disclosing your information, and the sources from which we collect it, refer to the “How we use your personal information” and “How we disclose your personal information” sections. Our personal information retention practices are outlined in the “Retention” section. We handle sensitive personal information as specified by the CCPA or with your consent.

Selling or Sharing Personal Information

We do not “sell” or “share” (as those terms are defined under the CCPA) personal information, nor have we done so in the preceding 12 months. Further, we do not have actual knowledge that we sell or share personal information of residents under 16 years of age. California residents under the age of 18 who have registered and posted content to the Services can request its removal by contacting us at support@sand.ai. They must verify their authorship of the content and specify where it is posted. We will make reasonable good faith efforts to remove or anonymize the content so the minor is not individually identifiable in relation to the content, but we cannot guarantee complete or comprehensive removal. For instance, third parties may have copied or republished the content (and any user output generated as a result), and it may remain in archives beyond our control.

YOUR CHOICES

In this section, we describe the choices available to all users of the Services.

Opt-Out of Communications

You can opt-out of marketing-related emails by following the opt-out or unsubscribe instructions provided at the bottom of the email, or by contacting us directly. Please be aware that opting out of marketing emails will not affect the receipt of service-related and other non-marketing communications.

Cookies and Web Beacons

Most browsers are set to accept cookies by default, but you can remove or reject cookies by following the instructions in your browser settings. However, please note that disabling cookies may affect the proper functioning of the Services. For more information on cookies, including how to view, manage, and delete them, you can visit www.allaboutcookies.org. Additionally, you can configure your device to prevent images from loading, which can help prevent web beacons from functioning. Some internet browsers allow you to send “Do Not Track” signals to the online services you visit. Please be aware that we currently do not respond to “Do Not Track” signals.

Advertising Choices

You may be able to limit the use of your information for interest-based advertising through the following settings, options, and tools:

  • Browser Settings and Privacy Browsers/Plug-ins: Block third-party cookies via your web browser settings or by using privacy-focused browsers or ad-blocking plugins.
  • Platform Settings: Opt out of ad personalization on Google and Discord through their respective websites. You may be able to exercise this option for Google at https://adssettings.google.com/ and for Discord at https://support.discord.com/hc/en-us/articles/360004109911-Data-Privacy-Controls.
  • Ad Industry Tools: Opt out of interest-based ads from companies that participate in the following industry opt-out programs:
    • Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
    • Digital Advertising Alliance: https://optout.aboutads.info/
    • AppChoices: https://www.youradchoices.com/appchoices
  • Mobile Settings: Adjust your mobile device settings to restrict the use of your advertising ID.

You will need to apply these opt-out settings on each device and browser from which you wish to limit the use of your information for interest-based advertising purposes. We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.

Linked Third-Party Platforms

If you choose to connect to the Services through your social media account or other third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.

Close Your Account

If you wish to request to close your account, please contact us at support@sand.ai.

YOUR RIGHTS

Depending on your location, you may have certain rights in...