1. Who we are and what this Policy covers
Yodal, Inc. ("Yodal," "we," "us," or "our"), a Delaware corporation with its principal place of business in Boulder, Colorado, is the controller of personal information collected through yodal.ai and the other online services we operate and control, including our interactive demonstration environment (together, the "Services").
This Policy describes the personal information we collect through the Services, how we use and share it, and the rights and choices available to you.
This Policy does not apply to third-party websites, products, or infrastructure that we do not control — even where we link to them or rely on them to provide the Services (for example, our hosting, database, and compute providers). Those third parties handle information under their own terms and privacy policies. By using the Services or submitting information through them, you acknowledge the practices described here.
2. Information we collect
Information you provide. We collect information you choose to give us, including when you:
- register interest in Yodal or contact us through a form on the Services;
- complete a questionnaire or request access to non-public materials; or
- express interest in a pilot or similar engagement.
Depending on what you submit, this may include your name, email address, employer or affiliation, and any other information you choose to include, as well as background and eligibility information you provide when requesting access to non-public materials.
Information collected automatically. Our general website pages are designed to operate without setting non-essential cookies. When you use our interactive demo or sign in to access materials, we and our providers collect technical and usage information — such as IP address, device and browser type, authentication and session identifiers, features used, and dates and times of access — through server logs and cookies or similar technologies necessary for those features to function. See "Cookies and similar technologies" below.
3. How we use personal information
We use the information we collect to:
- respond to your inquiries and communicate with you;
- review and act on requests to access non-public materials, and evaluate eligibility for access;
- evaluate, set up, and communicate about pilots and similar engagements with interested participants;
- provide, operate, secure, and improve the Services, including the demo and authentication;
- with your consent where required, send updates you have asked to receive (each with an option to opt out); and
- comply with legal obligations and enforce our terms.
We do not sell your personal information, and we do not use it to serve targeted advertising. We do not currently display advertising on the Services.
4. How we share personal information
We do not sell your personal information. We disclose it only as described here:
- Service providers (processors). Vendors that host and secure the Services and process data on our behalf — including web hosting and content-delivery and edge security, database, authentication, and storage, and compute for the interactive demo. These providers may use the information only to provide services to us, under contractual confidentiality and data-protection obligations.
- Professional advisors. Our attorneys, accountants, and similar advisors, where appropriate.
- Legal, safety, and government requests. As described in "Government and law enforcement requests" below.
- Business transfers. In connection with, or during negotiations for, a corporate transaction such as a financing, merger, acquisition, reorganization, or sale of assets, we may disclose personal information where permitted by applicable law, subject to appropriate confidentiality protections.
5. Cookies and similar technologies
Our general marketing pages are intended to function without non-essential cookies. Our interactive demo and authenticated areas use cookies and similar technologies that are necessary to run the demo, keep you signed in, maintain session security, and remember basic preferences. Because these deliver features you request, they are generally treated as strictly necessary or functional. We do not use cookies for advertising or cross-site tracking. Where required, we will present a cookie notice or controls and honor applicable opt-out preference signals (see "Your privacy rights").
6. Data retention
We keep personal information only as long as it is needed for the purposes described in this Policy. In practice:
- If you join a mailing list or ask to be kept informed, we keep your contact information and your indication of interest until you ask us to remove you or to delete your information — even if long periods pass between our communications.
- Information tied to a specific request or engagement is kept for as long as needed to handle it and to meet our legal, recordkeeping, and dispute-resolution obligations, and is then deleted or de-identified.
- Cookies and session data expire according to their normal lifespans (see "Cookies and similar technologies").
You can ask us to delete your personal information at any time, as described in "Your privacy rights."
7. How we protect personal information
We maintain administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including access controls and reliance on reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your privacy rights
The rights available to you depend on where you live. To exercise any right, contact us at privacy@yodal.ai. We may need to verify your identity, and authorized agents may submit requests with proof of authority. We will not discriminate against you for exercising your rights.
8.1 California residents
Under the California Consumer Privacy Act (as amended by the CPRA), you may request to know or access the personal information we have collected, request deletion, request correction, and opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined, and we do not use or disclose sensitive personal information beyond the purposes permitted without a right to limit. We also do not disclose personal information to third parties for their own direct marketing (California's "Shine the Light" law).
Categories of personal information we collect are identifiers (such as name and email), professional or employment information, internet or network activity relating to the demo and authentication, and any information you voluntarily provide. We collect it from you and from your device, use and disclose it for the purposes described above, and retain it as described in "Data retention."
8.2 Colorado residents
Under the Colorado Privacy Act, you may request to access, correct, delete, or obtain a portable copy of your personal data, and opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects. We will respond within 45 days (extendable as the law permits). If we decline a request, you may appeal by contacting us at the address below; if we deny the appeal, you may contact the Colorado Attorney General. Where the Act applies, we honor recognized universal opt-out mechanisms, including the Global Privacy Control (GPC).
8.3 EEA and UK residents
Where the EU or UK GDPR applies, Yodal, Inc. is the controller of your personal data. Our legal bases for processing are:
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and access requests | Steps taken at your request; our legitimate interests |
| Evaluating access and pilot interest | Our legitimate interests (and your consent where applicable) |
| Operating, securing, and improving the Services | Our legitimate interests |
| Sending updates you asked to receive | Your consent |
| Legal compliance and enforcing our terms | Legal obligation; our legitimate interests |
You have the rights to access, rectification, erasure, restriction, data portability, and to object to processing, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with your local supervisory authority (EEA) or the Information Commissioner's Office (UK). We process personal data in the United States; where required, we rely on appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses and the UK Addendum.
9. Do Not Track and Global Privacy Control
Some browsers offer a "Do Not Track" setting, but there is no common industry standard for how to respond, so we do not respond to those signals except as otherwise described. Where required by law (for example, in Colorado), we honor recognized universal opt-out mechanisms such as the Global Privacy Control.
10. Government and law enforcement requests
We disclose personal information to government or law enforcement authorities only where we believe in good faith that doing so is required by law or legal process, or is necessary to protect the rights, property, or safety of Yodal or others. Where we are legally permitted to do so, we will make reasonable efforts to notify affected individuals before disclosure.
11. Children's privacy
The Services are intended for a professional audience and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, please contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new effective date and, where required, provide additional notice.
13. Contact us
Yodal, Inc.
Boulder, Colorado, USA
Email: privacy@yodal.ai
EEA and UK residents may contact us at the same email address.