1. Information We Collect 

Account Information 

• Contact details (name, email, phone, address) 

• Professional background and company information 

• Payment information and billing details 

• Account preferences and settings 

Usage Data 

• API requests and responses 

• Model inputs and outputs 

• Usage patterns and performance metrics 

• Error logs and debugging information 

Technical Information 

• IP addresses and device information 

• Browser type and operating system 

• Cookies and tracking technologies 

• Network connection details 

AI Training Data 

• User prompts and queries (with permission) 

• Generated outputs for model improvement 

• Fine-tuning datasets uploaded by users 

• Custom model parameters and configurations 

2. How We Use Information 

We use collected information to: 

• Provide and improve AI services 

• Process payments and manage accounts 

• Provide customer support 

• Ensure platform security and prevent abuse 

• Comply with legal obligations 

• Improve our AI models (with permission) 

3. Data Usage for AI Training 

Free Accounts 

• We may use your data to improve our services 

• You can opt-out in your account settings 

• Data used for training is anonymized 

Business Accounts 

• We will NOT use your data without explicit permission 

• Training data usage requires separate consent 

• Full control over data retention periods 

Enterprise Accounts 

• Zero data retention options available 

• No training data usage without written agreement 

• Custom data handling agreements 

4. Information Sharing 

Service Providers We share information with: 

• Cloud hosting and infrastructure providers 

• Payment processors and billing services 

• Customer support and analytics tools 

• Security and fraud prevention services 

Legal Requirements We disclose information when required by: 

• Valid legal process or court orders 

• Government investigations 

• Protecting rights and safety 

• Compliance with regulations 

Business Transfers Information may be transferred in connection with mergers, acquisitions, or asset sales. 

With Your Consent We may share information for other purposes with your explicit consent. 

5. Data Security 

We implement industry-standard security measures: 

• Encryption of data in transit and at rest 

• Multi-factor authentication 

• Regular security audits and assessments 

• Access controls and employee training 

• Incident response procedures 

6. Data Retention 

Account Data Retained until account deletion plus 30 days for operational purposes. 

Usage Data 

• Free accounts: Up to 2 years for service improvement 

• Business accounts: 30 days unless training permission granted 

• Enterprise accounts: Per customer agreement 

Training Data Only retained with explicit user permission, typically 2-5 years. 

Legal Requirements Some data retained longer to comply with legal obligations. 

7. Your Rights 

You have the right to: 

• Access your personal information 

• Correct inaccurate information 

• Delete your personal information 

• Export your data 

• Opt-out of data processing for AI training 

• Withdraw consent at any time 

Exercising Rights Contact us at Legal@carousellabs.ai to exercise these rights. 

8. California Privacy Rights 

California residents have additional rights under CCPA: 

• Right to know what personal information is collected 

• Right to delete personal information 

• Right to opt-out of sale (we do not sell personal information) 

• Right to non-discrimination 

9. International Transfers 

We operate globally and may transfer data internationally. We ensure appropriate safeguards through: 

• Standard Contractual Clauses 

• Adequacy decisions 

• Other approved transfer mechanisms 

10. Cookies and Tracking 

Essential Cookies Required for basic functionality and security. 

Analytics Cookies Help us understand usage patterns and improve services. 

Preference Cookies Remember your settings and preferences. 

You can control cookies through your browser settings. 

11. Third-Party Services 

Our platform may integrate with third-party AI services. Each has separate privacy practices we don't control. 

12. Children's Privacy 

We do not knowingly collect information from individuals under 13 (or 16 in Europe). 

13. Changes to Policy 

We will notify you of material changes via email or prominent website notice at least 30 days before changes take effect. 

14. Contact Information 

For privacy-related inquiries: 

Email: Legal@carousellabs.ai 

15. Data Protection Officer 

For EU data subjects, contact our Data Protection Officer at dpo@carousellabs.ai. 

This policy complies with GDPR, CCPA, and other applicable privacy laws. For specific compliance questions, consult legal counsel.