Last revised: April 2023
PRIVACY POLICY
Introduction
Welcome to Niko AutoML Platform Privacy Policy. This Privacy Policy (the “Policy“), as amended from time to time, sets out the basis on which AND Solutions Pte. Ltd. and its subsidiaries (“we”, “us”, “our” or “AND Solutions”) may collect, use, share or otherwise process Personal Information of our customers. Please carefully review this Policy to comprehend our practices and views with regards to your Personal Information and how we will handle it.
Who is responsible for your information?
The company responsible for your information is:
AND Solutions Pte. Ltd.
160 Robinson Road
#14-04 Singapore 068914
Unless otherwise noted in this policy, we act as the “controller” of personal data that we collect and process.
Scope of this Policy
This Policy applies to information we collect whenever you use our (a) websites (any page on the nikoscoring.ai domain and its subdomains) and (b) the Platform or otherwise interact with us as described below.
Content
By using the Platform, you understand and agree that we are providing a platform for you to upload data, numbers, text, graphics, photos, videos, audios or other materials (collectively referred to as “Content“), to the Platform and to build and deploy your scoring models within the Platform.
Collection of information
We collect Contents, communications and other information you provide when you use the Platform, including when you sign up for an account, upload or share Contents, and message or communicate with others. Depending on the nature of your interaction with the Platform, some examples of Personal Information which we may collect from you include:
(a) Information you choose to provide to us directly:
(i) When you create an account, you may, at your sole discretion, choose to provide us with at least the following information necessary for the Platform to work:
- your name
- login credentials
- company name
- job title
- your industry
- email address
- phone number
(ii) When you subscribe to our service, you provide our payment service provider with your payment card information. We will never receive or store your full payment card information.
(iii) When you participate in surveys or market studies, you give us your insights into the Platform, responses to our questions and testimonials.
(iv) If you contact our customer care team, with the sole purpose of resolving your complaints, we may collect the information you choose to send to us. We also may keep records of our communications with you, including any complaints that we receive from you about other users within the Platform.
(b) Other sources: We may also obtain information from other sources. We protect this information according to the practices described in this Policy, plus any additional restrictions imposed by the source of the data. These sources vary over time, but could include:
(i) payment service providers who provide us with payment or balance information, or updates to that information, based on their relationship with you;
(ii) security service providers who provide us with information to secure our systems, prevent fraud and help us protect the security of accounts in the Platform; and
(iii) online and offline data providers, from which we obtain aggregated demographic, interest based and online advertising related data.
(c) Technical information: When you use the Platform, we may collect information from and about the device(s) you use to access the Platform, including hardware and software information such as IP address, device type, device-specific settings and characteristics, browser type, version, language, operating system, time zones, identifiers associated with cookies or other technologies that may uniquely identify your device or browser.
(d) Analytics information: We may use third-party analytics tools to help us measure traffic and usage trends for the Platform. These tools collect information sent by your device or the Platform, including the sections of the Platform that users visit, duration of use and other statistical data that assists us in continuously improving the Platform. We collect and utilize this analytics information in the aggregate as it pertains to all of our users. As such, the analytics insights that we derive from our analytics data cannot be used to identify any particular individual user.
Cookies and other tracking technologies
We may use web beacons (tracking pixels), cookies, and other tracking technologies to collect information about you when you interact with our emails or the Platform, including information about your browsing behavior on the Platform. We use this information to make improvements to the Platform and your experience, to observe features and areas of the Platform that are more popular, understand the effectiveness of marketing campaigns, count visits, and determine whether an email sent by us was opened and if hyperlinks contained in the email were clicked.
The legal basis for collecting and processing information
We use the following legal bases for collecting Personal Information:
(a) We may collect or process information with your consent, such as when you ask for information.
(b) We may collect or process information we need to provide our services or fulfill a contractual obligation.
(c) We may collect or process information to fulfill a legal obligation.
(d) We may collect information when we have a legitimate interest to do so, such as for marketing, as long as our legitimate interests are not outweighed by your rights.
(e) We may collect or process information if necessary to protect the vital interests of the user or another individual.
Use of information
In addition to some of the specific uses of information we describe in this Policy, we collect, use and/or share your Personal Information for any or all of the following purposes:
(a) To manage your account, including creation and maintenance of your account in the Platform.
(b) To secure our systems, prevent fraud and help us protect the security of accounts on the Platform.
(c) To prevent, detect and investigate potentially prohibited or illegal activities, including fraud, and to enforce our Terms of Use.
(d) To develop, test and improve the Platform, including by conducting surveys and research, and testing and troubleshooting new products and features of the Platform.
(e) To analyze and understand our audience, develop and test new features of the Platform, improve our service (including our user interface experiences and service performance), diagnose or fix technology problems, and optimize delivery.
(f) To process payment transactions.
(g) To comply with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority.
(h) To communicate with you concerning our service so that we can send you news about the Platform, details about new features and content available on the Platform, special offers, promotional announcements, consumer surveys, and to assist you with operational requests such as password reset requests. These communications may be by various methods, such as email or online messaging channels.
Sharing of information
We share your information for certain purposes and to third parties, as described below:
(a) Service Providers: We may use other companies, agents or contractors (“Service Providers“) to perform services on our behalf or to assist us with the provision of services to you. For example, we may engage Service Providers to provide marketing, advertising, communications, security, infrastructure and IT services, to customize, personalize and optimize our service, to provide bank account or balance information, to process credit card transactions or other payment methods, to provide customer service, to analyze and enhance data (including data about users’ interactions with our service), and to process and administer consumer surveys. In the course of providing such services, these Service Providers may have access to your personal or other information. We do not authorize them to use or disclose your Personal Information except in connection with providing their services (which includes maintaining and improving their services).
(b) Business transfers: In connection with any reorganization, restructuring, merger or sale, or other transfer of assets, we will transfer information, including Personal Information, provided that the receiving party agrees to respect your Personal Information in a manner that is consistent with this Policy.
(c) Compliance: We may share and otherwise use your personal and other information where we reasonably believe such disclosure is needed to (a) satisfy any applicable law, regulation, legal process, or governmental request, (b) enforce applicable terms of use, including investigation of potential violations thereof, (c) detect, prevent, or otherwise address illegal or suspected illegal activities (including payment fraud), security or technical issues, or (d) protect against harm to the rights, property or safety of the Platform, its users or the public, as required or permitted by law.
Storage of information
(a) We keep your Personal Information only as long as we need it for legitimate business purposes as laid out in the “Use of Information” section and as permitted by applicable law.
(b) We delete or anonymize your information upon deletion of your account in the Platform or 12 (twelve) months after the end of your subscription, unless:
(i) we must keep it to comply with applicable law;
(ii) we must keep it to evidence our compliance with applicable law;
(iii) there is an outstanding or potential issue, claim or dispute requiring us to keep the relevant information until it is resolved; o
(iv) the information is kept for our legitimate business interests, such as fraud prevention and enhancing users’ safety and security. For example, information may need to be kept to prevent a user who was banned for unsafe behavior or security incidents from opening a new account.
Your rights regarding access to and control over Personal Information
If you reside in the European Economic Area (EEA) or the United Kingdom (UK), you may have the following rights with regard to your Personal Information:
- Right of information and access: You have the right to access your Personal Information we have about you and to be provided with a copy of your Personal Information.
- Right to rectification: You have the right to correct or update your inaccurate or out of date Personal Information.
- Right of erasure: You have the right to request that your Personal Information be permanently erased/deleted.
- Right to restrict processing: You have the right to restrict the processing of your Personal Information.
- Right to object to processing: You have the right to object to specific types of processing of your Personal Information.
- Right to portability: You may ask to receive a portable copy of your Personal Information in a format that may be transferred to another organization.
- Right not to be subject to decisions based solely on Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing.
- Right to complain to a data protection authority: You have the right to complain to a supervisory authority in the country in which you reside, details of which can be provided upon request or to our lead supervisory authority: Data Protection Commission, 21 Fitzwilliam Square, South Dublin 2 D02 RD28, Ireland.
- Right to withdraw consent: If you have given us consent to collect or process your Personal Information, you may withdraw that consent at any time.
- Right to non-discrimination: We may not discriminate against you if you exercise your privacy rights.
If you wish to exercise any of these rights, please refer to the “Contact us” section of this policy.
Data Protection Representative
We have appointed DataRep as our Data Protection Representative in the European Union so that you can contact them directly in your home country. DataRep has locations in each of the 27 EU countries, the UK, and Norway & Iceland in the European Economic Area (EEA), so that our customers can always raise the questions they want with them.
If you wish to raise a question regarding your personal data or otherwise exercise your rights in respect of your personal data, please refer to the “Contact us” section of this policy.
International data transfers
Personal Information may be transferred from users residing in the EEA to our servers, partners, or vendors located in the United States of America (USA) and other non-EU countries where there may not be an adequacy opinion issued with respect to that country. We have taken appropriate safeguards to ensure that Personal Information remains protected wherever it is transferred. When we transfer Personal Information of individuals in the EEA or the UK to the USA, we make use of the Standard Contractual Clauses and the UK Addendum as well as additional safeguards where appropriate.
Security
We take all reasonable steps to protect the information we receive from you from accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access. We have put in place appropriate physical, technical, and administrative measures to safeguard and secure your information, but no security measures are perfect. the risk of a data breach is possible.
- AND Solutions has obtained ISO/IEC 27001 Information Security Management certifications in September 2021.
- Personal data is encrypted during transmission.
- Personal Information is encrypted at rest at our data centers.
- Employees are given access to users’ Personal Information only on a “need to know” basis.
- All employees are required to receive training on information security.
- All employees with access to Personal Information are subject to background checks.
- All employees with access to Personal Information are required to sign a binding confidentiality agreement.
- Before sharing Personal Information with our vendors, we make sure they have implemented security procedures to protect your data. Our vendors and partners are not permitted to use or share your information for any purpose other than to provide the services for which they have been contracted.
Automated decision making and profiling
We do not perform any solely automated decision making or profiling.
Children’s privacy
We do not knowingly collect or solicit Personal Information from children under age 13 without parental consent, unless permitted by law. If we become aware that we have collected Personal Information from children under the age of 13 without parental consent (or as permitted by law), we will delete it. If you believe that a child may have provided us with Personal Information without such parental consent, please contact us.
California consumers: We will not sell the information of California consumers who are 16 years old or younger unless we have prior parental authorization. If a California consumer is under the age of 13, a parent or guardian must consent to the sale of such minor’s Personal Information. If the California consumer is between the ages of 13 and 16 years old, the minor may consent on an opt-in basis to the sale of their Personal Information.
EU residents: We do not collect or process Personal Information of data subjects in the EU under the age of 16 without explicit consent from a parent or guardian.
Sensitive information
Unless specifically requested, we ask that you not send us, and you not disclose on or through our websites or otherwise to us sensitive Personal Information unless specifically requested by us or required by law.
Contact us
If you wish to raise a question regarding your personal data or otherwise exercise your rights in respect of your personal data, you may contact our Data Protection Representative by
- sending an email to DataRep at datarequest@datarep.com quoting <AND Solutions Pte. Ltd.> in the subject line,
- contacting DataRep through the online form at datarep.com/data-request, or
- mailing your inquiry to DataRep at the most convenient of the addresses listed here: andsolutions.net/datarep-representative-contacts/.
If your request is not valid under applicable law, repetitive or excessive, we may charge you a reasonable fee. We may also request additional information from you in order to verify your identity before processing your request.
For other non-privacy related communications, please use our contact form at at nikoscoring.ai/#contact.
Niko AutoML Platform California Consumer Privacy Notice
Last revised: 28 October 2022
The California Consumer Privacy Act of 2018 (“CCPA”) became effective on 1 January 2020 and creates a variety of privacy rights for California consumers. This California Consumer Privacy Notice (this “CCPA Notice”) supplements the information contained in our general Privacy Policy and applies solely to all visitors, users and others who reside in the State of California. This CCPA Notice is provided to inform you, as a California resident, of your rights with respect to information collected by AND Solutions Pte. Ltd. and subsidiaries (collectively, “AND Solutions” or “we”).
Right to know
(a) Collection of information
You have the right to know what type of your Personal Information AND Solutions is collecting and our business purposes for that collection.
We make this information available to our consumers in the “Collection of information” section of our general Privacy Policy.
(b) Use of information
You have the right to know how your Personal Information is obtained, how it is used, and our business purposes for that use.
We make this information available to consumers in the “Use of information” section of our general Privacy Policy.
(c) Sharing of information
You have the right to know if your Personal Information is shared with any third parties. We may share your Personal Information to have Service Providers, as defined by the CCPA, perform services specified by written contract. In addition, we may share Personal Information with third parties for other notified purposes, as permitted by the CCPA.
We make this information available to consumers in the “Sharing of information” section of our general Privacy Policy.
(d) Sale of information
You have the right to know whether your Personal Information is being sold. Your Personal Information is sold when it is shared with a third party for monetary or other valuable consideration for a purpose that is not a “business purpose” as set forth in the CCPA.
AND Solutions does not sell your Personal Information.
Right to control
(a) Categories of information
You have the right to request, twice in a twelve-month period, the following about the Personal Information we have collected about you during the past twelve (12) months:
(i) the categories and specific pieces of Personal Information we have collected about you;
(ii) the categories of sources from which we collected the Personal Information;
(iii) the business or commercial purpose for which we collected or sold the Personal Information;
(iv) the categories of third parties with whom we shared the Personal Information; and
(v) the categories of Personal Information about you that we sold or disclosed for a business purpose, and the categories of third parties to whom we sold or disclosed that information for a business purpose.
If you wish to submit this request, please contact our customer care team via email at support@nikoscoring.ai. To help protect your privacy and maintain security, we take steps to verify your identity before granting you access to your Personal Information or complying with your request.
Right to Receive
You have the right to receive a copy of your Personal Information.
If you wish to submit this request, please contact our customer care team via email at support@nikoscoring.ai. To help protect your privacy and maintain security, we take steps to verify your identity before granting you access to your Personal Information or complying with your request.
Right to Delete
You have the right to delete your Personal Information.
If you wish to submit this request, please contact our customer care team via email at support@nikoscoring.ai. To help protect your privacy and maintain security, we take steps to verify your identity before granting you access to your Personal Information or complying with your request.
Right to “Opt-out” of “Sale”
AND Solutions does not sell your Personal Information, so we do not offer an opt out. What this means is that we do not sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate in any way your Personal Information to another company for monetary or other valuable consideration.
Non-Discrimination
The CCPA prohibits businesses from discriminating against you for exercising your rights under the law. Such discrimination may include denying a good or service, providing a different level or quality of service, or charging different prices. The CCPA permits businesses to provide differing levels or quality or different prices where the business can demonstrate that the difference is reasonably related to the value to the business of the consumer’s Personal Information.