Información que Recopilamos

Recopilamos información que nos proporcionas directamente e información sobre cómo usas nuestros servicios.

• •Información de cuenta (nombre, correo, organización)
• •Datos de uso y análisis
• •Contenido que subes para procesamiento
• •IP addresses, browser type, device information, and approximate location
• •Cookies and similar tracking technologies (see our Cookie Policy)
• •Audio recordings submitted through our careers application form

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• •Contract: Processing necessary to perform our services as agreed with you or your organization.
• •Consent: Where you have given explicit consent, such as for analytics cookies or audio recordings in job applications.
• •Legitimate Interest: For product improvement, security monitoring, and fraud prevention, where our interests do not override your rights.
• •Legal Obligation: Where processing is required to comply with applicable laws or regulations.

Cómo Usamos Tu Información

Usamos la información recopilada para proporcionar, mantener y mejorar nuestros servicios.

• •Proporcionar y entregar los servicios solicitados
• •Enviarte avisos técnicos y mensajes de soporte
• •Mejorar y desarrollar nuevas funciones
• •Process job applications, including reviewing audio responses
• •Comply with legal obligations and respond to lawful requests

Third-Party Data Sharing

We may share your data with the following categories of third parties, solely for the purposes described in this policy:

• •Cloud Infrastructure Providers: For hosting and data storage (encrypted at rest and in transit).
• •AI Model Providers (OpenAI Enterprise): For processing data as part of our services. Your data is not used for model training under our enterprise agreement.
• •Analytics Providers: Only with your consent, for understanding site usage patterns.

We do not sell your personal data to any third party. A complete list of our sub-processors is available upon request.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on adequacy decisions where applicable.

Retención de Datos

Retenemos tus datos solo el tiempo necesario para proporcionar nuestros servicios y cumplir con los propósitos descritos en esta política. Puedes solicitar la eliminación en cualquier momento.

• •Account data: Retained for the duration of your account plus 30 days after deletion.
• •Customer data processed by our services: Retained per your data processing agreement; deleted upon contract termination unless legally required.
• •Job application data (including audio): Retained for up to 2 years. You may request deletion at any time.
• •Analytics data: Aggregated and anonymized within 26 months.

Tus Derechos

Tienes derechos respecto a tus datos personales:

• •Acceder a tus datos personales
• •Corregir datos inexactos
• •Solicitar la eliminación de tus datos
• •Exportar tus datos en un formato portátil
• •Object to processing based on legitimate interest
• •Withdraw consent at any time (without affecting lawfulness of prior processing)
• •Lodge a complaint with a supervisory authority

To exercise any of these rights, email privacy@embeddinglabs.com. We will respond within 30 days.

Audio Recording & Biometric Data

Our careers application form may collect audio recordings. This data is treated with heightened protection:

• •Audio is collected only with your explicit, informed consent before recording begins.
• •Recordings are stored in encrypted cloud infrastructure accessible only to authorized recruiting team members.
• •Audio data is retained for up to 2 years and may be deleted upon request at any time.
• •Audio recordings are not used for biometric identification or profiling purposes.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• •Right to know what personal information is collected, used, shared, or sold.
• •Right to delete personal information held by us and by extension our service providers.
• •Right to opt out of the sale or sharing of personal information. We do not sell personal information.
• •Right to non-discrimination for exercising your privacy rights.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or through a prominent notice on our website. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

Contacto

Para preguntas sobre esta política de privacidad o nuestras prácticas de datos:

privacy@embeddinglabs.com

Embedding Labs, Inc.
885 2nd Ave
New York, NY 10017