This Privacy Policy describes how Socero Inc. ("attention labs", "we", "us", or "our") collects, uses, and discloses personal information across the attention labs website, the SAA Cloud API, and related developer services. It applies to visitors, registered users, and organizations that integrate our services, and to email and other communications you send us.
We aim to comply with applicable privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other applicable US state privacy laws.
Information we collect
Information you give us directly, and information generated automatically when you use our site or API:
- Contact information: name, company, work email, and any message you submit through our forms.
- Account and credential data: API credentials and account details created when you register.
- API usage data: request metadata, session identifiers, and technical diagnostics.
- Website usage data: pages visited, referrer URL, browser type, OS, and IP address.
- Communications: email and other correspondence, including support and partnership enquiries.
We do not retain raw audio or video submitted through the API beyond the time needed to process each request.
How we use your information
We use collected information to:
- Operate, secure, and improve our services, and authenticate API requests.
- Respond to enquiries, manage access requests, and provide support.
- Send account communications and opt-in product updates.
- Understand website usage so we can improve it.
- Comply with legal obligations.
Aggregate and de-identified usage data may be used to improve service reliability. We do not sell personal information, and we do not train models on customer data submitted through the API.
Sharing and disclosure
We share personal information only in limited circumstances:
- Service providers: vendors acting as processors on our behalf, including cloud infrastructure, communications, and analytics providers listed on our sub-processors page. Each is bound by data processing terms.
- Legal requirements: when required by law, subpoena, court order, or other legal process, or to protect the rights and safety of attention labs, our users, or the public.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate notice.
We do not share personal information for third-party advertising.
International transfers
We operate from Canada and the US. If you are located in the European Economic Area or the UK, personal information may be transferred to and processed in Canada or the US, under safeguards including Standard Contractual Clauses where required.
Our Data Processing Addendum details these arrangements for enterprise and commercial customers.
Cookies and tracking
We use website analytics, with IP anonymisation enabled, which sets analytics cookies. No advertising cookies, retargeting pixels, or cross-site tracking.
Opt out anytime with browser tracking protection or your analytics opt-out settings.
Your rights and choices
Depending on your jurisdiction, you may access, correct, delete, or restrict processing of your data, object to certain uses, or request portability.
CCPA-covered individuals may also request our data categories and opt out of sale. We do not sell data.
Contact [email protected] to exercise these rights. We respond within 30 days and may verify your identity first.
Data retention
We keep personal information only as long as needed to fulfill this policy's purposes, maintain your account, meet legal obligations, and resolve disputes.
Contact and email records last for the active relationship plus a reasonable period after, or as required by law. API session metadata is retained per our sub-processors' retention schedules. Analytics data is aggregated for up to 26 months. Request deletion anytime.
Security
We implement technical and organizational measures appropriate to the risk, including encryption in transit and at rest, access controls, and regular security reviews. Our Security and Trust Center covers our current posture and responsible disclosure process.
No transmission method is fully secure. Contact us immediately if you believe your information was compromised.
Children
Our services are intended for adults, not children under 13. We do not knowingly collect their data, and delete it promptly if we learn we have.
Changes to this policy
We post policy updates at this URL with a revised date, and give additional notice, such as email, for material changes.
Contact
Questions about this policy or your data: email [email protected].
Socero Inc., Privacy Team, Toronto ON, San Francisco CA, and Memphis TN.
For the complete current text, contact [email protected].