Privacy Policy

1. Introduction

CollectivAI Inc ("Collectiv.AI", "We", "Us", "DoWhile.AI" or "Our") is a technology company dedicated to safeguarding the personal data of its users. We are the owner and operator of DoWhile.AI and DoWhile Chat. This Privacy Policy outlines how We collect, use, store, share, and protect your personal information when you access or use our websites, products, services, and applications (collectively, the "Services"). By using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.

We are committed to complying with applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Digital Personal Data Protection Act 2023 (India), and other relevant privacy legislation. This Privacy Policy applies to all users of our Services globally.

2. Collection and Use of Personal Information

2.1 What Information We Collect

We may collect the following categories of personal information from you in connection with your use of our Services:

• Identity Information: Your full name, username, and any other identifiers you provide during registration or account creation.
• Contact Information: Your email address, phone number, mailing address, and other contact details.
• Company Information: Your company name, job title, company size, and industry, where applicable.
• Billing Information: Payment card details, billing address, and transaction history necessary to process payments for our Services.
• Message Contents: The content of messages, prompts, code snippets, and other inputs you submit through DoWhile Chat, as well as the corresponding outputs generated by our Services.
• Web Forms: Information you voluntarily submit through web forms on our websites, including contact forms, feedback forms, and survey responses.
• Social Media Information: Information from your social media profiles when you interact with us through social media platforms or use social sign-on features (such as GitHub SSO).
• Non-Identifying Information: Aggregated or de-identified data that does not directly identify you, including usage statistics, general demographic data, and anonymized behavioral data.
• Third-Party Information: Information received from third-party sources such as business partners, analytics providers, advertising networks, and public databases, to the extent permitted by applicable law.
• Automatically Collected Information: Device information (including device type, operating system, and browser type), IP address, geolocation data, access times, pages viewed, referring URLs, and other technical data collected automatically when you access our Services.

We do not knowingly collect personal information from children under the age of 18. If you are under 18 years of age, please do not use our Services or provide any personal information to us. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

2.2 How We Collect Information

We collect personal information through the following means:

• Cookies: We use cookies and similar tracking technologies to collect information about your browsing activity, preferences, and interactions with our Services. Cookies are small data files stored on your device that help us recognize you, remember your preferences, and improve your experience. You may manage your cookie preferences through your browser settings, though disabling cookies may affect your ability to use certain features of our Services.
• Web Beacons: We may use web beacons (also known as pixel tags or clear GIFs) in our emails and on our websites to track engagement, measure the effectiveness of our communications, and gather usage statistics.
• Web Forms: We collect information that you voluntarily provide through web forms, registration pages, and other interactive features on our websites.
• Input/Output: We collect the inputs (prompts, code, queries) that you provide to DoWhile Chat and the corresponding outputs generated by the service. This data is used to provide the service, improve performance, and for the purposes described in this Privacy Policy.

2.3 Purpose of Collection

We use the personal information we collect for the following purposes:

• Business Management: To manage and administer your account, process transactions, provide customer support, and fulfill our contractual obligations to you.
• Personalization: To personalize your experience with our Services, including tailoring content, recommendations, and features to your preferences and usage patterns.
• Improving Site Usage: To analyze how our Services are used, identify trends, diagnose technical issues, and improve the functionality, performance, and user experience of our websites and applications.
• Research and Analysis: To conduct research, analysis, and development activities aimed at improving our products and services, developing new features, and advancing the state of AI-assisted software development.
• Law Enforcement: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests; to enforce our terms and conditions; and to protect the rights, property, and safety of CollectivAI Inc, our users, and the public.

2.4 Security

We implement reasonable technical, administrative, and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training on data protection practices. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your personal information.

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

3. Third-Party Links

Our Services may contain links to third-party websites, services, and applications that are not owned or controlled by CollectivAI Inc. We collaborate with advertising agencies, analytics providers, and other third-party service providers who may collect information about your interactions with our Services and other websites and online services. These third parties may use cookies, web beacons, and other tracking technologies to collect information about you.

We are not responsible for the privacy practices, content, or security of any third-party websites or services. We encourage you to review the privacy policies of any third-party websites or services before providing them with any personal information. Your interactions with third-party websites and services are governed by their respective privacy policies and terms of service, not by this Privacy Policy.

4. Your Rights

Depending on your location and applicable law, you may have certain rights with respect to your personal information. Users in the European Economic Area (EEA), the United Kingdom (UK), and the United States may have the following rights:

• Right of Access: You have the right to request access to the personal information we hold about you, including a copy of your data and information about how it is processed.
• Right to Erasure: You have the right to request the deletion of your personal information, subject to certain exceptions such as compliance with legal obligations or the establishment, exercise, or defense of legal claims.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal information that we hold about you.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to request that we transmit such data to another controller, where technically feasible.
• Right to Limit Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances, such as when you contest the accuracy of your data or object to our processing activities.
• Right to Withdraw Consent: Where our processing of your personal information is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Object: You have the right to object to the processing of your personal information where we rely on legitimate interests as the legal basis for processing, including profiling based on such interests.
• Right to File a Complaint: You have the right to lodge a complaint with a supervisory authority or data protection authority in your jurisdiction if you believe that our processing of your personal information violates applicable data protection laws.

To exercise any of these rights, please contact us using the details provided in Section 10 of this Privacy Policy. We will respond to your request within the timeframe required by applicable law.

5. Data Sharing and Disclosures

5.1 General Principles

We will not sell or lease your personal information to third parties. We may anonymize and aggregate your data for statistical, research, and analytical purposes, in which case such data will no longer be considered personal information. We may use conversations, feedback, and interactions with DoWhile Chat to enhance and improve the performance, accuracy, and capabilities of DoWhile Chat. This may include human review of conversations and feedback to identify areas for improvement, train our models, and ensure quality and safety of our Services.

5.2 Disclosures

We may disclose your personal information to the following categories of recipients:

• Service Providers: We share personal information with trusted third-party service providers who assist us in operating our Services, including but not limited to cloud hosting providers, payment processors, and AI model providers (e.g., Open AI). These service providers are contractually obligated to use your personal information only for the purposes of providing services to us and in accordance with this Privacy Policy.
• Legal Purposes: We may disclose your personal information where required or permitted by law, including in response to lawful requests by public authorities, court orders, subpoenas, or other legal processes, or to protect the rights, property, or safety of CollectivAI Inc, our users, or others.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or other similar corporate transaction, your personal information may be transferred to the successor entity or acquiring party as part of the transaction, subject to the commitments made in this Privacy Policy.
• Human Reviewers: Authorized personnel and contractors may review your conversations, inputs, and outputs for the purposes of improving our Services, ensuring quality and safety, investigating potential violations of our terms, and complying with legal obligations. Human reviewers are bound by strict confidentiality obligations.

6. Using DoWhile Chat in Other Jurisdictions

Our Services are operated globally, and your personal data may be processed and stored on servers located outside your jurisdiction. Currently, data is primarily processed and stored on AWS servers located in India. By using our Services, you consent to the transfer of your personal information to India and other jurisdictions where we or our service providers operate, which may have different data protection laws than your country of residence.

6.1 California (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Opt Out: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information, but you may exercise this right at any time.
• Right to Disclosure: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for the collection, and the categories of third parties with whom we share the information.
• Right to Deletion: You have the right to request the deletion of your personal information, subject to certain exceptions.
• Right to Notice: You have the right to receive notice at or before the point of collection about the categories of personal information being collected and the purposes for which they will be used.
• Right to Equal Services: We will not discriminate against you for exercising any of your CCPA rights. You will receive equal service and pricing from us regardless of whether you exercise your privacy rights.

6.2 India

If you are located in India, your personal data is protected under the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000 (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011). You have the right to access, correct, and request the deletion of your personal data in accordance with these laws. We implement reasonable security practices and procedures as required under Indian law to protect your sensitive personal data.

6.3 UAE

If you are located in the United Arab Emirates, your personal data is protected under Federal Decree Law No. 45 of 2021 on the Protection of Personal Data. We process your personal data in compliance with the requirements of this law, including obtaining appropriate consent, implementing adequate security measures, and ensuring that any cross-border transfers of personal data comply with the applicable requirements.

6.4 UK/EEA

If you are located in the United Kingdom or the European Economic Area, your personal data is protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (for UK residents), and the General Data Protection Regulation (GDPR) (for EEA residents). We process your personal data on the basis of legitimate interests, contractual necessity, consent, or legal obligation, as applicable. Where we transfer personal data outside the UK or EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities, to protect your personal data.

7. Procedure for Communication

We may communicate with you via email, in-app notifications, or other means regarding updates to our Services, changes to this Privacy Policy, security alerts, and other service-related information. We may also send you marketing communications, newsletters, and promotional materials, subject to your preferences and applicable law.

You have the option to update your communication preferences at any time. You may opt out of marketing communications by following the unsubscribe instructions included in each marketing email, by adjusting your notification settings in your account, or by contacting us directly. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related communications that are necessary for the operation of your account.

8. Closing Your Account

You may access and correct your personal information through your account settings at any time. If you wish to close your account and request the deletion of your personal information, you may do so by contacting us at the email address provided in Section 10 of this Privacy Policy. Upon receiving your request, we will take reasonable steps to delete your personal information from our active systems, subject to any legal or regulatory obligations that require us to retain certain data. Please note that some information may persist in our backup systems for a limited period and that anonymized or aggregated data derived from your personal information may be retained indefinitely.

9. Changes to This Policy

We may revise this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes to this Privacy Policy, we will notify you by posting the updated policy on our website with a revised "Last revised" date, and where required by applicable law, by sending you a notification via email or through our Services. We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your personal information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

10. Grievance Redressal

If you have any questions, concerns, or complaints about this Privacy Policy or our data processing practices, or if you wish to exercise any of your rights under applicable data protection laws, please contact our Grievance Officer:

Grievance Officer: Naman Jain
Email: team@collectivai.com

We will acknowledge your complaint or request within a reasonable timeframe and endeavor to resolve your concern in accordance with applicable law. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.