DataSelf Corporation Privacy Policy

DataSelf Corporation (“DataSelf,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information and customer data entrusted to us.

This Privacy Policy describes how DataSelf collects, uses, discloses, and protects information when you visit our websites, communicate with us, attend our events, or use DataSelf products and services, including cloud-hosted, analytics, data warehousing, artificial intelligence (“AI”), and related services.

If you or your organization has entered into another agreement with DataSelf, such as a subscription agreement, End-User License Agreement, Data Processing Agreement, or other contract, that agreement may contain additional or different terms governing Customer Data and will control with respect to the subject matter it covers.

1. Information We Collect

The information we collect depends on how you interact with DataSelf and may include:

Contact and Account Information

We may collect your name, employer, job title, business address, email address, telephone number, username, account information, and similar information needed to communicate with you or provide our products and services.

Billing and Transaction Information

We may collect billing contacts, subscription and purchase information, and transaction records. Payment card and banking details may be submitted directly to our payment-processing providers. DataSelf does not generally store complete payment card information in its systems.

Product and Service Information

When you register for or use DataSelf products and services, we may collect information such as your organization, product registrations, subscriptions, licenses, configurations, user roles, support information, and product usage.

Website and Usage Information

When you visit our websites or use our products and services, we may automatically collect information such as:

• IP address and approximate location derived from it;
• browser, operating system, device, and network information;
• pages, features, and services accessed;
• referring websites;
• dates, times, and duration of activity;
• application and system logs;
• cookie and similar technology information; and
• diagnostic, performance, security, and usage information.

We use this information to operate, secure, support, analyze, and improve our websites, products, and services.

Event and Communication Information

If you register for a DataSelf event, webinar, training session, or other activity, we may collect registration and scheduling information and information you voluntarily provide regarding dietary, accessibility, or similar requirements.

DataSelf may photograph or record certain events, meetings, webinars, or training sessions. When appropriate, we will provide notice that recording is taking place.

Information from Third Parties

We may receive information from DataSelf partners, resellers, service providers, social media platforms, publicly available sources, and other third parties. We may combine this information with information we already maintain where permitted by law.

2. Customer Data Processed Through DataSelf Services

DataSelf products may connect to business systems such as ERP, CRM, accounting, e-commerce, operational, database, data warehouse, and other systems.

Information extracted, loaded, stored, modeled, analyzed, or otherwise processed through DataSelf products and services on behalf of a customer is referred to in this Policy as “Customer Data.” Customer Data may include business transaction records and, depending on the systems and fields selected by the customer, personal information relating to the customer's employees, customers, suppliers, or other individuals.

How DataSelf stores Customer Data depends on the customer's deployment model:

DataSelf-hosted deployments. When a customer uses DataSelf-hosted services, Customer Data and related metadata may be stored and processed on cloud infrastructure managed by DataSelf using providers such as Amazon Web Services (AWS) and Microsoft Azure. DataSelf retains this information as necessary to provide the subscribed services and in accordance with the retention terms described in this Policy and the customer's applicable agreements with DataSelf.

Customer-hosted deployments. When a customer hosts its own data infrastructure, DataSelf does not retain the customer's transaction data in DataSelf's cloud infrastructure. DataSelf may retain metadata necessary to provide, operate, manage, secure, and support the DataSelf services.

Customers control the systems, entities, tables, fields, and other information they make available to DataSelf services, subject to the configuration of the applicable product or service.

When DataSelf processes Customer Data on behalf of a customer, the customer is responsible for determining what data is made available to DataSelf and for ensuring that its collection and use of that data complies with applicable law.

DataSelf uses Customer Data and related metadata only as necessary to provide, operate, secure, maintain, support, and improve the subscribed services and as otherwise permitted by the customer's agreements with DataSelf.

3. How We Use Personal Information

We may use personal information to:

• provide, operate, maintain, and improve DataSelf products and services;
• create and administer accounts;
• authenticate users and manage access;
• process purchases, subscriptions, and renewals;
• provide customer service, training, and technical support;
• communicate service announcements, updates, security notices, invoices, and administrative information;
• communicate information about DataSelf products, services, events, and promotions;
• understand how our websites, products, and services are used;
• improve performance, usability, reliability, and security;
• personalize communications and experiences;
• prevent, detect, and investigate fraud, security incidents, abuse, or unlawful activity;
• protect DataSelf, our customers, users, partners, and others;
• enforce agreements and policies;
• comply with applicable legal and regulatory requirements; and
• establish, exercise, or defend legal claims.

Where applicable law requires a legal basis for processing, DataSelf processes personal information as necessary to perform a contract, comply with legal obligations, pursue legitimate business interests, protect DataSelf or others, and, where required, based on your consent.

4. Artificial Intelligence and Automated Features

DataSelf products and services provide customers with control over whether and how artificial intelligence (“AI”) capabilities are used. Depending on the product, configuration, and customer selections, DataSelf services may operate without AI or may provide one or more of the following AI capabilities:

No AI. Customers may use DataSelf without enabling AI functionality. In this configuration, Customer Data and metadata are not submitted to AI or large language model (“LLM”) services by DataSelf.

AI for Metadata Assistance. Customers may enable AI features that use metadata to assist with activities such as understanding data structures, documentation, mappings, modeling, reporting, and other metadata-related tasks. In this configuration, DataSelf does not submit the customer's underlying transaction data to the AI/LLM as part of the metadata-assistance functionality.

AI for Data Analysis Assistance. Customers may enable AI features that analyze authorized Customer Data to answer questions, perform analyses, create or assist with reports and visualizations, and provide other data-related assistance. Information necessary to perform the requested task may be submitted to the applicable AI/LLM service, subject to the customer's configuration, user permissions, and applicable security controls.

Agentic AI. Customers may enable AI capabilities authorized to perform or initiate actions within DataSelf, such as assisting with data extraction, data warehousing, data modeling, refresh processes, reporting, or other supported workflows. Agentic capabilities operate within the permissions, configurations, and controls provided by the applicable DataSelf product and customer.

AI/LLM Providers

Depending on the DataSelf product and customer configuration, AI functionality may use either:

• an AI/LLM service account provided and managed by DataSelf; or
• an AI/LLM service account provided, connected, and managed by the customer.

When DataSelf provides the AI/LLM service, DataSelf selects and manages the applicable AI provider and uses the service subject to DataSelf's agreements and data-protection arrangements with that provider.

When a customer connects its own AI/LLM account, information submitted to that service is processed under the customer's relationship and agreements with the applicable AI provider, including that provider's privacy, security, retention, and data-use terms.

The information made available to an AI/LLM depends on the AI capabilities enabled by the customer, the task being performed, the customer's deployment and configuration, and the permissions of the applicable user.

DataSelf does not sell Customer Data. DataSelf does not use Customer Data to train public or general-purpose AI models unless expressly agreed with the customer.

5. How We Disclose Information

DataSelf does not sell Customer Data.

We may disclose personal information or Customer Data in the following circumstances:

Service Providers and Subprocessors

We may use service providers and subprocessors to help us provide and operate our business and services. These may include providers of:

• cloud infrastructure and hosting;
• data storage and backup;
• authentication and identity services;
• security and monitoring;
• communications and email services;
• customer support and CRM services;
• payment processing;
• website analytics; and
• AI services where applicable.

These providers may process information only as necessary to perform services for DataSelf or our customers and are subject to contractual and other appropriate safeguards.

At Your or Your Organization's Direction

We may disclose information when you or your organization requests, enables, authorizes, or directs the disclosure, including through integrations with third-party applications and services.

Business Transactions

Information may be disclosed as part of a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction, subject to appropriate confidentiality and legal requirements.

Legal and Security Requirements

We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law, regulation, subpoena, court order, or other legal process; respond to lawful government requests; protect the rights, property, or safety of DataSelf or others; investigate fraud or security incidents; or enforce our agreements.

6. Sale and Sharing of Personal Information

DataSelf does not sell Customer Data.

DataSelf also does not sell personal information for monetary consideration.

Certain website advertising, analytics, or marketing technologies may involve disclosure of identifiers or online activity to third parties. Under some privacy laws, certain disclosures for cross-context behavioral or targeted advertising may be considered a “sale” or “sharing” even when no money is exchanged.

Where required by applicable law, DataSelf provides mechanisms for users to exercise applicable opt-out rights.

7. Cookies and Similar Technologies

DataSelf websites may use cookies, pixels, web beacons, and similar technologies to:

• provide essential website functionality;
• remember preferences;
• understand website usage and performance;
• improve our websites and services;
• measure communications and campaigns; and
• support advertising and marketing where applicable.

Some cookies and similar technologies may be provided by third-party analytics, advertising, or service providers.

You may control cookies through your browser settings and, where available, through cookie or privacy controls provided on DataSelf websites. Disabling certain cookies may affect website functionality.

Where required by applicable law, DataSelf honors applicable opt-out preference signals, such as Global Privacy Control, for activities legally considered the sale or sharing of personal information.

8. Data Retention

DataSelf retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing products and services, maintaining business and transaction records, meeting contractual obligations, supporting customers, maintaining security, resolving disputes, enforcing agreements, and complying with legal requirements.

Retention periods vary depending on the type of information, the service involved, contractual requirements, customer instructions, legal obligations, and legitimate business needs.

Other information, such as account, billing, contractual, security, audit, and support records, may be retained for longer periods where reasonably necessary for legitimate business purposes or to comply with legal obligations.

When information is no longer required, DataSelf may delete, anonymize, or securely dispose of it in accordance with applicable retention and deletion procedures.

Customer Data: Following the expiration or termination of a customer's subscription where DataSelf hosts the client’s data, DataSelf may retain the customer's transaction and other Customer Data for up to 21 days to support data recovery, account reactivation, or other authorized transition activities. After this retention period, DataSelf purges the customer's transaction data from its systems in accordance with its data deletion procedures, subject to any longer retention required by applicable law.

9. Security

DataSelf uses reasonable and appropriate administrative, technical, and physical safeguards designed to protect personal information and Customer Data against unauthorized access, disclosure, alteration, loss, or misuse.

These safeguards may include access controls, authentication, encryption, monitoring, logging, network and infrastructure security, backups, and other security measures appropriate to the applicable service.

DataSelf uses established cloud infrastructure providers and other vetted service providers to support its services.

No system or method of transmission or storage can be guaranteed to be completely secure. Customers and users are also responsible for protecting their credentials, using appropriate access controls, and maintaining the security of systems they connect to DataSelf.

10. International Data Transfers

DataSelf is based in the United States and may process information in the United States and other countries where DataSelf or its service providers operate.

Where required by applicable law, DataSelf uses appropriate safeguards for international transfers of personal information, which may include contractual protections or other legally recognized transfer mechanisms.

11. Your Privacy Rights

Depending on where you live and applicable law, you may have rights regarding your personal information, including the right to:

• request information about personal information we maintain about you;
• access or obtain a copy of your personal information;
• correct inaccurate personal information;
• request deletion of personal information;
• restrict or object to certain processing;
• request portability of certain personal information;
• withdraw consent where processing is based on consent; and
• opt out of certain marketing or advertising uses.

These rights may be subject to exceptions and limitations under applicable law.

To exercise a privacy right, contact DataSelf at info@dataself.com. We may need to verify your identity before completing certain requests.

If DataSelf processes your personal information solely on behalf of one of our customers, we may direct your request to that customer because the customer controls the relevant information.

You may unsubscribe from DataSelf marketing emails using the unsubscribe link contained in those communications. Even if you opt out of marketing, DataSelf may continue to send transactional, account, security, support, or other service-related communications.

12. California Privacy Rights

To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to DataSelf's processing of your personal information, California residents may have the right to:

• know the categories and specific pieces of personal information DataSelf has collected about them;
• know the categories of sources from which personal information was collected;
• know the purposes for collecting, using, or disclosing personal information;
• know the categories of third parties to whom personal information is disclosed;
• request deletion of personal information, subject to legal exceptions;
• request correction of inaccurate personal information;
• opt out of the sale or sharing of personal information;
• limit certain uses or disclosures of sensitive personal information where applicable; and
• receive equal service and not be discriminated against for exercising privacy rights.

DataSelf does not sell Customer Data and does not sell personal information for monetary consideration.

California residents may submit applicable privacy requests by contacting info@dataself.com or 888-910-9802.

Where required, DataSelf will recognize applicable browser-based opt-out preference signals, including Global Privacy Control, as a request to opt out of activities considered a sale or sharing under California law.

An authorized agent may submit a request on your behalf as permitted by applicable law. DataSelf may request information necessary to verify your identity, the request, or the agent's authority.

13. European Economic Area, United Kingdom, and Similar Privacy Laws

Where the European Union General Data Protection Regulation (“GDPR”), UK GDPR, or similar privacy laws apply, individuals may have additional rights, including rights of access, correction, deletion, restriction, objection, portability, and withdrawal of consent.

Where DataSelf relies on legitimate interests to process personal information, you may have the right to object to that processing in circumstances provided by law.

You may also have the right to lodge a complaint with the data protection or supervisory authority in your country or region.

Where DataSelf processes personal information on behalf of a customer, DataSelf generally acts as a processor or service provider and the customer determines the purposes and means of processing.

14. Children's Privacy

DataSelf products and services are designed for businesses and organizations and are not directed to children.

DataSelf does not knowingly collect personal information directly from children under 13 through its websites or services. If you believe a child has provided personal information directly to DataSelf without appropriate authorization, please contact us so that we can take appropriate action.

Customer Data processed through DataSelf services is controlled by DataSelf customers and may be subject to separate contractual and legal requirements.

15. Third-Party Websites and Services

DataSelf websites and products may contain links to or integrations with third-party websites, applications, AI services, or other services.

This Privacy Policy does not govern the privacy practices of third parties. We encourage you to review the privacy and security policies of third-party services before providing information to or enabling integrations with them.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our products, services, business practices, technologies, or legal requirements.

When we make material changes, we will update the effective date above and may provide additional notice where appropriate or required by law.

We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have questions about this Privacy Policy, DataSelf's privacy practices, or would like to exercise an applicable privacy right, please contact:

DataSelf Corporation
PO Box 551
Santa Clara, CA 95052
United States

Email: info@dataself.com
Phone: 888-910-9802
Website: www.dataself.com

Revision Date: August 2026