Privacy Policy

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Business, for the purpose of CCPA/CPRA, refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing of Consumers' personal information, or on behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing of consumers' personal information, that does business in the State of California.
• CCPA and/or CPRA refers to the California Consumer Privacy Act (the "CCPA") as amended by the California Privacy Rights Act of 2020 (the "CPRA").
• Company (referred to as either the Company, We, Us or Our in this Agreement) refers to Akademische Unterstutzung GmbH, Nottwil, Lucern, Kantonsstrasse 34, 6207.
• For the purpose of the GDPR, the Company is the Data Controller.
• Consumer, for the purpose of the CCPA/CPRA, means a natural person who is a California resident.
• Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
• Country refers to Switzerland.
• Data Controller, for the purposes of the GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
• Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities for the Internet industry to develop and implement a mechanism allowing internet users to control tracking of their online activities across websites.
• GDPR refers to the EU General Data Protection Regulation.
• Personal Data is any information that relates to an identified or identifiable individual. For the purposes of GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or factors specific to Your identity. For the purposes of the CCPA/CPRA, Personal Data means any information that identifies, relates to, describes or could reasonably be linked, directly or indirectly, with You.
• Service refers to the Website.
• Service Provider means any natural or legal person who processes the data on behalf of the Company. For the purpose of the GDPR, Service Providers are considered Data Processors.
• Third-party Social Media Service refers to any website or social network website through which a User can log in or create an account to use the Service.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself, for example the duration of a page visit.
• Website refers to Draftout, accessible from draftout.ai.
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. Under GDPR, You can be referred to as the Data Subject or as the User.

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City
• Usage Data

Usage Data is collected automatically when using the Service and may include information such as Your Device's Internet Protocol address, browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Information from Third-Party Social Media Services

The Company allows You to create an account and log in to use the Service through Google, Facebook, Instagram, Twitter and LinkedIn. If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal Data already associated with that account, such as Your name, email address, activities or contact list.

If You choose to provide such information during registration or otherwise, You are giving the Company permission to use, share, and store it in a manner consistent with this Privacy Policy.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Technologies used may include Cookies, browser cookies, web beacons, tags, and scripts. Cookies can be Persistent or Session Cookies.

Unless You have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies. For more information about the cookies we use and Your choices regarding cookies, please visit our Cookies Policy or the cookies section of this Privacy Policy.

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities.

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation.
• Protect and defend the rights or property of the Company.
• Prevent or investigate possible wrongdoing in connection with the Service.
• Protect the personal safety of Users of the Service or the public.
• Protect against legal liability.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service, including Google Analytics and Amplitude. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. You can opt-out by installing the Google Analytics opt-out browser add-on. More information is available at https://policies.google.com/privacy. Amplitude's Privacy Policy is available at https://amplitude.com/privacy.

Payments

We may provide paid products and services within the Service. In that case, we may use third-party services for payment processing. We will not store or collect Your payment card details. Those details are provided directly to third-party payment processors whose use of Your personal information is governed by their Privacy Policy and industry PCI-DSS standards.

Legal Basis for Processing Personal Data under GDPR

We may process Personal Data under the following conditions:

• Consent.
• Performance of a contract.
• Legal obligations.
• Vital interests.
• Public interests.
• Legitimate interests.

Your Rights under the GDPR

The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights. Under this Privacy Policy, and by law if You are within the EU, You have the right to:

• Request access to Your Personal Data.
• Request correction of the Personal Data that We hold about You.
• Object to processing of Your Personal Data.
• Request erasure of Your Personal Data.
• Request the transfer of Your Personal Data.
• Withdraw Your consent.

Exercising of Your GDPR Data Protection Rights

You may exercise Your rights of access, rectification, cancellation and opposition by contacting Us. We may ask You to verify Your identity before responding. You also have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data.

Introduction

In this notice, the terms we, our, and us refer to Akademische Unterstutzung GmbH, Swiss limited company, number CHE-375.454.013, its subsidiaries and affiliates (together Draftout, individually a Draftout), and it is committed to protecting your privacy.

This Privacy Notice covers information collected through these websites: draftout.com. We are a personal information handler of your information which means that we are responsible for looking after it. We will use your personal information fairly, lawfully and in a transparent manner, and in accordance with China's data protection laws including PIPL.

If the purposes are modified, Draftout will take the necessary measures as required by the PIPL, including obtaining separate consent. Draftout uses software as a service provided by third parties to make secure transfers of personal information so we can ensure our communications to you are managed effectively, and any online applications you submit are processed securely.

You can contact us by email via help@draftout.ai to obtain details of the current providers used by Draftout to transfer your personal information out of China, the services they provide for us, as well as their contact information. You can also read more about your personal information rights in the section dealing with Your rights under our Privacy Notice.