Privacy Policy

Scope and Exclusions

To ensure complete regulatory and contractual clarity, this Privacy Policy applies exclusively to website visitors, prospective enterprise buyers, and business inquiries. It does not apply to:

• Freelance Contributor & Annotator Applicants: If you register for our talent network or submit an application through our Careers portal, your personal information, resumes, and test benchmarks are governed exclusively by our Contributor Talent Pool Privacy Notice.
• Enterprise Client AI Data: Datasets, prompt repositories, proprietary software code, or model responses provided to Josisoft by enterprise clients under commercial agreements are governed strictly by bilateral Master Services Agreements (MSAs), Non-Disclosure Agreements (NDAs), and Data Processing Agreements (DPAs). In handling client AI workflows, Josisoft operates solely as a Data Processor (or Service Provider). We never use client training datasets or proprietary prompt traces to train, fine-tune, or validate our own internal models or any third-party public models.

1. Information We Collect

We collect information directly from your voluntary submissions, as well as technical telemetry captured automatically when you navigate our site.

Information You Provide to Us

• Enterprise Inquiries & RFPs: When you request a consultation, submit a Request for Proposal (RFP), or reach out through contact forms, we collect your full name, business email address, company name, job title, phone number, and project scope requirements.
• Direct Communications: Any information, feedback, or correspondence you provide when communicating directly with our solutions architects, sales engineers, or administrative team.

Information Collected Automatically

• Device & Log Data: Your Internet Protocol (IP) address, browser type and version, operating system, referring and exit pages, requested URLs, and date/time stamps.
• Usage Telemetry: Clickstream paths, dwell time across capability sections (e.g., Red Teaming, Chain-of-Thought, Factuality), and page interaction sequences.
• Cookies & Persistent Identifiers: Standard functional cookies and analytical tags used to recognize returning sessions and ensure fast page rendering.

2. Cookies and Analytics

We use standard cookies and tracking mechanisms to maintain site functionality and evaluate aggregate visitor patterns.

• Essential Cookies: Necessary for core website operations, routing, and secure form submissions. You cannot disable essential cookies without degrading site functionality.
• Performance & Analytics Cookies: We utilize analytics services (such as Google Analytics) to understand how enterprise visitors navigate our site. These tools generate aggregated, statistical reports using masked IP addresses. They do not correlate your personal identity or business contact records with third-party analytical profiles.
• Browser Management: You can block, disable, or delete cookies via your browser settings at any time.

3. How We Use Your Information

We process personal information only for legitimate commercial and operational purposes, including:

• Responding to enterprise inbound inquiries, delivering capability overviews, and issuing commercial Statements of Work.
• Operating, securing, and optimizing the performance and reliability of our web infrastructure.
• Monitoring traffic volume to prevent denial-of-service attacks, automated bot scraping, and fraudulent submissions.
• Evaluating aggregate technical interest in our AI evaluation services to refine our service documentation.
• Complying with statutory audits, financial accounting obligations, and applicable legal mandates.

4. Legal Bases for Processing

If you are located in the European Economic Area (EEA), the United Kingdom, or comparable jurisdictions, our legal grounds for processing personal data under the General Data Protection Regulation (GDPR) and UK GDPR include:

• Legitimate Interests: Operating our commercial digital presence, protecting website security, and communicating with prospective B2B enterprise clients.
• Pre-Contractual Steps: Evaluating project scopes and delivering formal proposals at your direct request prior to contract execution.
• Consent: Where you have explicitly opted into specific analytical tracking cookies or voluntary marketing communications.
• Legal Compliance: Fulfilling binding regulatory, corporate governance, or legal record-keeping obligations.

5. Information Sharing and Disclosure

Josisoft does not sell, rent, lease, or monetize personal information to data brokers, marketing intermediaries, or ad networks. Disclosures are limited strictly to the following scenarios:

• Infrastructure Vendors: Trusted sub-processors who provide hosting, database infrastructure, enterprise CRM, and web monitoring services. These providers operate under written agreements binding them to strict data security and confidentiality standards.
• Legal & Protective Obligations: When disclosure is required by enforceable law, court subpoena, regulatory warrant, or to protect the safety, rights, and intellectual property of Josisoft, our clients, or the public.
• Business Reorganization: In connection with any merger, divestiture, acquisition, or sale of corporate assets, subject to the successor entity maintaining data protection terms consistent with this policy.

6. International Data Transfers

As an AI data provider serving global technology clients, our infrastructure and operational personnel operate across international jurisdictions, including India and the United States. Consequently, website contact records may be stored and accessed outside your jurisdiction of residence.

When transferring personal data originating in the European Economic Area (EEA), the United Kingdom, or Switzerland across borders, we implement recognized transfer mechanisms, including European Commission Standard Contractual Clauses (SCCs), accompanied by robust technical encryption safeguards to guarantee equivalent protection.

7. Data Retention and Security

• Retention Standards: Business inquiry records and correspondence are retained only for as long as necessary to facilitate enterprise business engagements or to satisfy mandatory commercial, tax, and statutory auditing periods.
• Technical Safeguards: We employ enterprise-grade technical and organizational controls to protect personal records against unauthorized access, loss, alteration, or disclosure. All web traffic is encrypted using modern Transport Layer Security (TLS/HTTPS), and internal access to inquiry systems is restricted via multi-factor authentication and role-based access controls (RBAC).

8. Your Privacy Rights

Depending on your jurisdiction (including rights provided under the GDPR, UK GDPR, the California Consumer Privacy Act / CPRA, and India's Digital Personal Data Protection Act), you may have the right to:

• Access: Request verification of whether we hold personal records about you and receive an electronic copy.
• Rectification: Request correction of inaccurate, incomplete, or outdated personal information.
• Erasure: Request the permanent deletion of your business contact information from our active systems.
• Restriction & Objection: Object to or request limitations on specific data processing activities based on legitimate interests.
• Withdraw Consent: Revoke previously granted consent for analytics or direct communications at any time.

To submit a request regarding your personal records, contact us at privacy@josisoft.com. We verify the identity of each requester in accordance with statutory requirements before processing modifications or deletions.

9. External Links

Our website may reference external technical whitepapers, research benchmarks, or partner resources. Josisoft exercises no operational control over external websites and is not responsible for the privacy practices, code integrity, or content of third-party domains.

10. Modifications to This Policy

We review and update this Privacy Policy periodically to reflect technological adjustments, operational developments, or regulatory changes. Any modifications will be posted directly to this URL with an updated "Last Updated" date. Continued use of our website following the publication of revisions constitutes acknowledgment of the updated policy.

11. Contact Us

For questions, comments, or data privacy requests regarding this Privacy Policy, contact our governance desk:

• Email: contact@josisoft.com