In this Privacy Policy, the terms “Entropik” or “Entropik Technologies” or “AffectLab” or “Chromo” or “We” or “Us” or “Our” refer to all websites (including but not limited to // www.entropik.io // www.affectlab.io // www.chromo.io and all the associated sub-domains and domains) along with products and services owned or operated by Entropik and its subsidiaries.

This Privacy Policy shall be read along with our Terms of Use (“Terms”) set out at https://www.entropik.io/terms-of-use/. Any capitalized term used but not defined in this Privacy Policy shall have the meaning attributed to it in the Terms.

This Privacy Policy explains how and when Entropik collects information from its end users, clients or from Entropik  Registered Users (collectively, “You”), which may include information that personally identifies You (“Personally Identifiable Information”), how we use such information, and the circumstances under which we may disclose such information to others. This policy applies to (a) users who visit Entropiks’ websites; (b) users signing up to Entropik’s SaaS platform; or (c) users using one of Entropik services/products (including participating in an electroencephalogram (“EEG”), facial coding, touch tracking, eye tracking or survey study).Please note that this Privacy Policy does not cover the practices of Entropik’s approved clients or partners who may use Entropik’s services. For information about third party privacy practices, please consult their privacy policies.

Consent

You will be deemed to have read, understood and agreed to the terms as provided in this Privacy Policy. By granting your assent to this Privacy Policy, You provide consent to such use, collection and disclosure of Personally Identifiable Information as prescribed in this Privacy Policy.

You have the right to opt out of Entropik Technolgies’ services at any moment. In addition, You can, by sending an email to info@entropik.io, inquire whether the We are in possession of your Personally Identifiable Information, and you may also request Us to delete and destroy all such information.

In the event the Entropiks services are used on behalf of any other individual (such as a child/ parent etc.), or on behalf of any entity, You hereby represent that You are authorised to accept this Privacy Policy and share such data as required on behalf of such person or entity.

In case of any questions, legal, discrepancies, or grievances, please contact the below-mentioned grievance officer email, who shall redress the issues within one month from the date of receipt of the grievance:

• Grievance Officer: Bharat Singh Shekhawat
• Grievance Query E-mail ID: grievance@entropik.io
• Legal Query  E-mail ID: legal@entropik.io
• Telephone: +91-8043759863

Information we collect and how we use it

Contact Information: You might provide Us with your contact information (such as email address, phone number, and country of residence), whether through the use of Our service, a form on our website, an interaction with Our sales or customer support team, or by way of a response to an Entropik study.

‍Usage information: We collect usage information about You, including the webpages You visit, what You click on, and the actions You perform, via tools such as Google Analytics or other tools whenever You interact with our website and/ or service.

‍Device and browser data: We collect information from the device and application You use to access Our services. Device data mainly means your IP address, operating system version, device type, system and performance information, and browser type.

‍Log Data: Like most websites today, Our web servers store log files that record data each time a device accesses those servers. The log files contain data about the nature of each access, including originating IP addresses, internet service providers, the resources viewed on Our site (such as the HTML pages, images, etc.), operating system versions, device type, and timestamps.

‍Referral information: If You arrive at an Entropik website from an external source (such as a link on another website or in an email), We record information about the source that referred you to Us. Information from third parties and integration partners: We collect your Personally Identifiable Information or data from third parties if You give permission to those third parties to share your information with Us or where You have made that information publicly available online.

‍Account information: When You register on Our online platform, You become a registered user (“Entropik  Registered User”). During such registration, We collect your first and last name (together called full name), username, password, and email address.

‍Billing information: The company ((“Entropik ") does not solicit or collect any user credit card data as a part of the market research or consumer research services. However, for processing payments related to billing, our billing partner Stripe or other similar services might require entering the credit card information for processing the payment, and the data is not stored with Entropik.

Information Collected during the use of Our services If you participate in an EEG and/ or eye tracking and/ or facial coding and/ or survey study conducted by Entropik, You may be required to provide access to the webcam and consent to your face video being recorded. Explicit consent must be provided by You to enable the webcam to collect video(s) of your face. Consent may be retracted at any time during the session by canceling the session. Face videos are analyzed by our computers to calculate eye-gaze tracks (a series of x,y coordinates) and facial coding algorithms to determine emotion. The videos are not associated with you except via the information you enter to participate in the study (such as answers to survey questions). By participating in the AffectLab EEG study, You consent to Our collection of your raw brainwaves using AffectLab or its associated partner(s) headsets to determine cognitive and affective parameters.

Other services you link to your account We receive information about you when you or your administrator integrate or link a third-party service with our Services. For example, if you create an account or log into the Services using your Google credentials, we receive your name and email address as permitted by your Google profile settings to authenticate you. You or your administrator may also integrate our Services with other services you use, such as to allow you to access, store, share and edit certain content from a third-party through our Services. The information we receive when you link or integrate our Services with a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in these third-party services to understand what data may be disclosed to us or shared with our Services

How long is your information stored? We store your Personally Identifiable Information for as long as it is required for Our research and business purposes and as required by law or until we receive a request from You to delete the same. When We no longer require such Personally Identifiable Information, We will delete it from our systems.

Facial videos are permanently deleted within 30 days once You provide Us a written request to delete the video(s) post the survey. Facial images will not be associated with any Personally Identifiable Information and will be stored only to improve the accuracy of the AffectLab or Entropik models.

EU GDPR – Rights Identification Key Even though Entropik is processing data at the request of the data controller (being the Entropik Registered User), We want to ensure that You can execute your rights under the European Union General Data Protection Regulation (“EU GDPR”). At the start and end of a session, we provide You with a key tied to your face video or brainwave data (even after deletion). In the event You contact Us and provide Us with this key, We may provide You with the status of the face video data collected. Entropik has also provided Entropik  Registered Users with a range of tools to help them manage their rights when they participate in Our sessions.

Use of Cookies We may use first-party cookies (small text files that Our website(s) store/s locally on your computer) on Our websites for one or more of the following purposes: to help identify unique and returning visitors and/or devices; conduct A/B testing; or diagnose problems with Our servers. Browsers do not share first-party cookies across domains. Entropik does not use methods such as browser cache, Flash cookies, or ETags, for acquiring or storing information about end users’ web browsing activity. You can set your browser preferences to refuse all cookies should You wish to prevent cookies from being used.

Disclosure of Information to Third Parties We do not share your Personally Identifiable Information with third parties other than as follows.

(1) Service Providers Information, including Entropik’s user information, and any Personally Identifiable Information contained therein, may be shared with certain third-party companies and individuals that help facilitate technical and administrative aspects of Entropik’s services (e.g., email communications) or perform functions related to the administration of Entropik  (e.g., hosting services). These third parties perform tasks on Our behalf and are contractually obligated not to disclose or use Entropik’s user information for any other purpose and to employ adequate security measures to prevent unauthorized access to such data. However, Entropik shall not be responsible in the event that Personally Identifiable Information is disclosed as a result of a breach or security lapse by any such third party.

We use the lead generation service provided by Leadfeeder, which recognizes visits of companies to our website based on IP addresses and shows us related publicly available information, such as the company’s names or addresses. Additionally, Leadfeeder places first-party cookies to provide transparency on how Our visitors use Our website, and the tool processes domains from provided form inputs (e.g., “leadfeeder.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadfeeder.com. You can object to the processing of your personal data at any time. For any requests or concerns, please contact Our Data Protection Officer at privacy@leadfeeder.com.

(2) Law Enforcement and Legal Process Entropik also reserves the right to disclose any client user information (including Personally Identifiable Information) to: (i) comply with laws or to respond to lawful requests and legal processes, a judicial proceeding, or court order; or (ii) to protect the rights and property of Entropik, our agents, clients and others including to enforce our agreements, policies, and terms of use; or (iii) in an emergency to protect the personal safety of Entropik, its clients, or any person.

(3) Business Sale If Entropik, or substantially all of its assets, is acquired by another company or successor entity, Entropik’s client information will be one of the assets transferred or acquired by the purchaser or successor. You acknowledge that such transfers may occur and that any purchaser of or successor to Entropik or its assets may continue to collect, use and disclose your information acquired prior to such transfer or acquisition as set forth in this policy.

Security of your Personally Identifiable Information The security of your Personally Identifiable Information is important to us. We follow generally accepted industry standards to protect the Personally Identifiable Information submitted to us, both during transmission and once we receive it. Examples of these include limited and password-protected access, high-security public/private keys, and SSL encryption to protect the transmission. However, remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee the absolute security of your Personally Identifiable Information.

Third-Party Disclaimer Entropik’s website(s) may contain links to other websites. Please note that when You click on one of these links, You will be entering another website over which We have no control and for which We will bear no responsibility. Often these websites require You to enter your Personally Identifiable Information. We encourage hereby encourage You to read the privacy policies of all such websites, as their policies may differ from our Privacy Policy. You hereby agree that We shall not be liable for any breach of your privacy or Personally Identifiable Information or for any loss incurred by Your use of such websites or services. The inclusions or exclusions are not suggestive of any endorsement by Entropik of the website or its contents of the website. You may visit any third-party website linked to the Entropik website at your own risk.

Additionally, the Entropik website may allow for certain content generated by You, which can be accessed by other users. Such users, including any moderators or administrators, are not authorized representatives or agents of Entropik, and their opinions or statements do not necessarily reflect those of Entropik, and We are not bound thereby to any contract to that effect. Entropik expressly disclaims any liability for any reliance or misuse of such information that is made available by You.

Website policy copy

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout .

Provisions Specific to EU Residents

Rights of EU residents under the EU GDPR If You are a citizen of the European Union (“EU”), You have certain rights under the EU GDPR relating to how others handle your personal data. These rights are:

1. The right to be informed how your personal data is being used.
2. The right to access your personal data and how it is processed.
3. The right to rectify inaccurate or incomplete personal data.
4. The right to the erasure of all or any personal data.
5. The right to restrict processing, that is, the right to block or suppress processing of your personal data.
6. The right to data portability – this allows individuals to retain and reuse their personal data for their own purpose.
7. The right to object, in certain circumstances, to the use of your personal data in a manner different from the purpose for which it was provided.
8. Right to prevent automated decision-making or profiling based on your data without human intervention.

If You wish to exercise these rights, contact us at gdpr@entropi.io.