SUMMARY OF KEY POINTS

This summary highlights key points from this Privacy Notice. Please review the full notice for complete details.

What personal information do we process? We may process account information, web-app usage data, customer-submitted content, prompts, and outputs, depending on how you use the Services.

Do we process sensitive personal information? We do not request sensitive personal information for ordinary use of the Services. Customer-submitted content may incidentally contain such information, which we process on the customer’s behalf.

Do we collect information from third parties? We may receive limited business contact or account information from our customers and service providers.

How do we process your information? We process information to provide, improve, secure, and administer our Services; communicate with you; prevent fraud; comply with law; and, where applicable, for other purposes with your consent.

When and with whom do we share personal information? We may share information in specific situations and with defined categories of service providers and other third parties.

How do we keep your information safe? We use organizational and technical safeguards designed to protect personal information. However, no electronic transmission or storage method can be guaranteed to be completely secure.

What are your rights? Depending on where you live, applicable privacy laws may provide you with rights regarding your personal information.

How do you exercise your rights? Submit a request at https://forms.gle/499SQ8qjnRMyxgoc9 or contact us using the details in this Notice. We will process requests in accordance with applicable law.

TABLE OF CONTENTS

1. What Information Do We Collect?

2. How Do We Process Your Information?

3. When and With Whom Do We Share Your Personal Information?

4. Do We Use Cookies and Analytics Technologies?

5. Do We Offer Artificial Intelligence-Based Products?

6. How Do We Process Information on Behalf of Customers?

7. How Long Do We Keep Your Information?

8. How Do We Keep Your Information Safe?

9. Do We Collect Information From Minors?

10. What Are Your Privacy Rights?

11. Controls for Do-Not-Track Features

12. Do United States Residents Have Specific Privacy Rights?

13. Do We Make Updates to This Notice?

14. How Can You Contact Us About This Notice?

15. How Can You Review, Update, or Delete the Data We Collect From You?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you voluntarily provide to us.

We collect personal information that you voluntarily provide when you register for the Services, express an interest in obtaining information about us or our products and Services, participate in activities through the Services, or otherwise contact us.

Personal Information Provided by You. The personal information we collect depends on the context of your interactions with us, the choices you make, and the products and features you use. It may include:

·       Names

·       Email addresses

·       Usernames

·       Passwords or other authentication credentials

Sensitive Information. We do not request sensitive personal information for ordinary use of the Services. Customer Content may incidentally contain sensitive information, which we process on behalf of the relevant customer.

Customer Content. We collect files, documents, project information, prompts, instructions, queries, comments, and other content submitted through the Services, together with information extracted from or generated in response to that content.

You are responsible for ensuring that the personal information you provide is true, complete, and accurate and for notifying us of any changes.

Information automatically collected

In Short: Certain technical, device, and usage information is collected automatically when you use our Services.

We automatically collect limited technical and usage information when you use our website or web application, such as IP address, browser and device type, operating system, timestamps, pages or screens viewed, features used, and error or performance data. We use this information to operate, secure, troubleshoot, and analyze the Services.

Like many businesses, we also collect information through cookies and similar technologies.

Log and Usage Data. Service-related, diagnostic, usage, and performance information, including IP address, browser and device type, timestamps, pages or screens viewed, features used, system activity, and error reports.

Device Data. Limited information about the device used to access the Services, such as browser type, operating system, device type, IP address, and basic configuration information.

Approximate Location. We may infer an approximate location, such as city or country, from an IP address. We do not collect precise GPS location through the Services.

Information collected from other sources

In Short: We may receive limited business contact and account information from customers and service providers.

We may receive limited business contact and account information from a customer organization, an authorized administrator, or a service provider that supports account creation, authentication, communications, or analytics.

We use information received from third parties only for the purposes described in this Privacy Notice or as otherwise disclosed when the information is collected.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process personal information to provide, improve, secure, and administer our Services; communicate with you; prevent fraud; comply with law; and, where applicable, for other purposes with your consent.

We may process your personal information for the following purposes:

·       To facilitate account creation, authentication, and account administration.

·       To provide and operate the Services and respond to user requests.

·       To evaluate and improve our Services and user experience.

·       To analyze web-app usage, performance, reliability, and feature adoption.

·       To protect the security and integrity of the Services, prevent fraud, and investigate misuse.

·       To comply with legal obligations and enforce our agreements.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share personal information in the situations described below and with defined categories of third parties.

Vendors, Consultants, and Other Service Providers. We may share personal information with third-party vendors, service providers, contractors, and agents that perform services for us or on our behalf and need access to the information to perform that work. We use contractual and other safeguards designed to require these parties to process information only as instructed, protect it appropriately, and retain it only as necessary.

Categories of third parties may include:

·       Cloud computing and hosting providers

·       Data analytics providers

·       Authentication and database service providers

·       Error monitoring and security providers

·       Customer support, communications, and business operations providers

Business Transfers. We may share or transfer information in connection with, or during negotiations concerning, a merger, financing, acquisition, reorganization, sale of company assets, or transfer of all or part of our business.

4. DO WE USE COOKIES AND ANALYTICS TECHNOLOGIES?

In Short: We may use cookies and similar technologies to collect and store information.

We use cookies and similar technologies for authentication, security, preferences, product analytics, feature management, troubleshooting, and service performance.

We may allow analytics service providers to process limited identifiers and web-app usage data solely to provide analytics and related operational services to us. We do not use the Services for third-party behavioral advertising.

Additional details, including how to refuse certain cookies, may be provided in a separate Cookie Notice.

Google Analytics

We may use Google Analytics to measure and analyze use of our website and web application. We use this information for internal analytics and service improvement, not for third-party behavioral advertising.

5. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: Some of our products, features, or tools use artificial intelligence, machine learning, or similar technologies.

As part of the Services, we may provide features powered by artificial intelligence, machine learning, or similar technologies ("AI Products"). These features are intended to automate or assist with preconstruction workflows and related tasks. This Privacy Notice applies to personal information processed through the AI Products.

Our AI Products

Our AI Products may support AI-assisted automation and analysis.

How we process data using AI

Personal information processed through AI Products is handled in accordance with this Privacy Notice and our agreements with relevant service providers. We apply technical, organizational, and contractual safeguards designed to protect information throughout processing.

6. HOW DO WE PROCESS INFORMATION ON BEHALF OF CUSTOMERS?

In Short: We process certain information as a service provider or processor on behalf of our business customers.

Our customers may submit personal information and Customer Content to the Services or direct us to process it on their behalf. For that information, the customer generally determines the purposes of processing, and Publish AI, Inc. acts as a service provider or processor.

If your personal information was submitted by one of our customers, direct your request to that customer. We will assist the customer as required by applicable law and our agreement with the customer.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain personal information for as long as necessary for the purposes described in this Notice, unless a longer period is required or permitted by law.

We retain personal information only for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Privacy Notice, unless a longer period is required or permitted by law.

Unless a different period is stated in an applicable agreement, we generally retain account information and Customer Content during the customer relationship and for up to one year after termination or expiration. Certain legal, security, billing, and backup records may be retained longer where reasonably necessary or required by law.

After the applicable retention period, we delete or anonymize information. Residual copies may remain temporarily in backup systems and will be protected and deleted in accordance with our backup procedures.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use reasonable technical and organizational measures designed to protect personal information.

We have implemented technical and organizational safeguards designed to protect the personal information we process. However, no method of internet transmission or electronic storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee that unauthorized third parties will never defeat our safeguards or improperly access, collect, steal, or modify information.

You are responsible for using the Services through a secure environment and for protecting your login credentials.

9. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect personal information from or market to children under 18.

We do not knowingly collect or solicit personal information from, market to, or sell the personal information of children under 18 years of age. By using the Services, you represent that you are at least 18 years old or that you are the parent or guardian of a minor whose use you have authorized.

If we learn that we have collected personal information from a person under 18 without appropriate authorization, we will take reasonable steps to deactivate the account and delete the information. To report a concern, contact compliance@muro.ai.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your place of residence, you may have rights to access, correct, delete, or otherwise control your personal information.

Withdrawing consent. Where we rely on consent, you may withdraw it at any time by using the contact details in Section 14. Withdrawal will not affect the lawfulness of processing that occurred before withdrawal and may not affect processing based on another lawful ground.

Account information

You may review or update certain account information through your account settings. You may also request termination of your account.

Following an account termination request, we may deactivate or delete the account and related information from active systems. We may retain limited information where reasonably necessary to prevent fraud, troubleshoot issues, support investigations, enforce our legal terms, or comply with law.

Cookies and similar technologies

Most browsers accept cookies by default. You can generally configure your browser to remove or reject cookies. Doing so may affect the availability or operation of some Service features.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Some browsers, operating systems, and applications offer a Do-Not-Track (DNT) setting. Because no uniform industry standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals unless required by applicable law.

Global Privacy Control. We do not sell personal information or use it for third-party targeted advertising. Where applicable law requires us to recognize a qualifying opt-out preference signal, we will honor it.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Residents of certain U.S. states may have rights to access, correct, delete, obtain a copy of, or opt out of certain uses of their personal information. These rights vary by state and may be subject to exceptions.

Depending on your state of residence and the applicability of state privacy law, you may have specific rights regarding personal information. States with comprehensive privacy laws may include California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

Categories of personal information we collect

The table below summarizes categories of personal information that may have been collected during the preceding twelve months. Examples are illustrative and should be read together with Section 1.

We may also collect other personal information when you interact with us in person, online, by phone, or by mail, including in connection with:

·       Customer support requests;

·       Customer surveys, promotions, or contests; and

·       Delivery of the Services and responses to inquiries.

We retain the categories marked “YES” as described in Section 7.

Sources of personal information

See Section 1 for information about the sources from which we collect personal information.

How we use and share personal information

See Sections 2 and 3 for information about how we use and disclose personal information.

We may disclose personal information to service providers under written agreements that restrict how the information may be used and require appropriate safeguards.

We may use personal information for internal business purposes such as service operation, security, analytics, product improvement, and testing, subject to this Privacy Notice and applicable agreements.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for third-party targeted advertising. We disclose limited personal information to service providers only for the business purposes described in this Privacy Notice.

Your rights

Subject to applicable law and exceptions, rights may include:

·       The right to know whether we process your personal data;

·       The right to access personal data;

·       The right to correct inaccuracies;

·       The right to request deletion;

·       The right to obtain a portable copy of personal data previously provided;

·       The right not to be discriminated against for exercising privacy rights;

·       The right to opt out of the sale, sharing, targeted advertising, or certain profiling, where applicable;

·       The right to obtain information about categories or specific third parties to which data was disclosed, where provided by state law;

·       The right to review or challenge certain profiling decisions, where provided by state law; and

·       The right to limit certain uses of sensitive personal information, where provided by state law.

How to exercise your rights

To exercise applicable rights, submit a request at https://forms.gle/499SQ8qjnRMyxgoc9, email compliance@muro.ai, or use the contact details in Section 14.

Where required by applicable law, we will honor qualifying opt-out preference signals.

You may designate an authorized agent to submit a request on your behalf. We may require proof of the agent’s authority and may require you to verify your identity directly.

Request verification

We may need to verify your identity or authority before completing a request. We will use information submitted for verification only for identity, authority, security, or fraud-prevention purposes. If existing records are insufficient, we may request additional information.

Appeals

Where applicable law provides an appeal right, you may appeal a decision by emailing compliance@muro.ai. We will respond in writing and explain the action taken or not taken. If an appeal is denied, you may have the right to contact your state attorney general.

California "Shine the Light" law

California Civil Code Section 1798.83 permits California residents, under certain circumstances, to request information once per year about categories of personal information disclosed to third parties for their direct marketing purposes and the names and addresses of those third parties. Submit such requests using the contact information in Section 14.

13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: We may update this Notice as necessary to reflect legal, technical, or business developments.

We may update this Privacy Notice from time to time. The revised version will be identified by an updated “Last updated” date. If we make material changes, we may provide notice by prominently posting the revised Notice or by sending a direct notification where appropriate. We encourage you to review this Notice periodically.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

For any questions, comments, privacy requests, or appeals concerning this Privacy Notice, email compliance@muro.ai or contact us by post at:

Publish AI, Inc.
1 South Park St
San Francisco, CA 94107
United States

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Subject to applicable law, you may request access to personal information we collect, details about how it has been processed, correction of inaccuracies, deletion, or withdrawal of consent. These rights may be limited by legal exceptions.

To submit a request, visit https://forms.gle/499SQ8qjnRMyxgoc9 or email compliance@muro.ai.