Privacy Notice
About this notice
Canopy Labs AI Inc is committed to protecting the privacy of your personal information. This privacy notice describes how we collect, use and share personal information about you, including when you use our mobile apps and other online services. Please read it carefully.
If you have any questions about this Privacy Notice, please contact us as described below.
Information about us
We are Canopy Labs AI Inc. Our registered office is at 300 Brannan Street, San Francisco, CA 94107 and our file number is 3052855.
This privacy notice also applies to the activities of our group company, Canopy Labs AI Ltd, an English company with company registration number 16991041. Information about you may be shared within our group for operational purposes. Canopy Labs AI Ltd also acts as our nominated representative in the UK for the purposes of data protection law. Their address is 3rd Floor 1 Ashley Road, Altrincham, Cheshire, United Kingdom, WA14 2DT.
If you have any questions, our contact details are:
300 Brannan Street, San Francisco, CA 94107
Information you provide
If you are an individual, when you audition to provide recordings, or enter into a contract with us to provide recordings (or someone does so on your behalf), we obtain certain personal information about you, such as:
- your name and contact details;
- your gender, where you choose to provide it (you may also select "Prefer not to say");
- details of the contract we have with you (including signed copies of contracts and metadata about your agreement to the contract such as timestamps, device ID and IP address);
- age verification information, such as government-issued identifier and date of birth;
- correspondence with us and details about that correspondence (for example, phone numbers used to call us and the date, time and duration of any calls);
- the audition recording and any other recordings you submit, including a reference photo of your face and environment;
- social media details, such as social media handle and profile information, if you choose to engage with us on social media;
- payment details; which are collected by our third-party payment processor on our behalf; and
- other information you provide in correspondence or interactions with us (for example by email, telephone, post, SMS or via our website or app).
In addition, if you use our mobile apps, you may choose to provide access to your device’s camera and microphone to enable you to engage with the app’s features and functionality, and your device’s speech recognition service to detect your spoken language. We also may use your device operating system’s framework to analyze photos and recordings for purposes of filtering and blurring sensitive content (e.g., nudity). This analysis is conducted locally on your device.
If you are an individual, we need certain information to carry out our contract with you and you must provide this in order to enter into a contract with us (or as required under that contract). If you do not, we may not be able to carry out our contract with you. Mandatory information fields are generally set out when you are entering into the contract, but in particular, you must provide the following information:
- your name and contact details;
- your payment details; and
- information to verify your age.
Automated Data Collection
We and our third-party vendors on our behalf may obtain information about you by automated means when you interact with our mobile apps and other online services, such as:
- Cookies, which are small text files that websites send to a visitor’s internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser.
- Pixels, also known as a web beacon or clear GIF, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed, clicked or forwarded.
- Local storage technologies, like HTML5, which provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
We use these automated technologies on our online services to collect information about your equipment and online activity (e.g., browsing actions and usage patterns). This automated data may include your IP address, device identifiers (such as your device's vendor identifier and push notification token), login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our app or website (such as battery level and Wi-Fi speed) as well as the date and time of your interaction, what you interact with on our app or website, and timestamps for recordings and disconnections.
On this website, Google Analytics and Google Ads cookies are not set until you accept them. A banner asks on your first visit. You can change your mind at any time using Cookie settings on the cookie policy page. The website itself works without those cookies. Which cookies are used, how long they last, and that they involve a transfer of information to Google in the United States, are also set out there.
Your browser may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. Please note, however, that without these technologies, you may not be able to use all of the features of our mobile apps. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device. We do not respond to “do not track” signals received from browsers.
Information we receive from third parties
We may also receive information about you from the following sources:
- Our service providers. We work closely with third parties (including, for example, talent agencies, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and credit reference agencies) who may provide us with information about you, to be used as set out in this privacy notice.
- Businesses we have bought. If we have acquired another business, or substantially all of its assets, which originally held your information, we will hold and use the information you provided to them, or which they otherwise held about you, in accordance with this privacy notice. If we are reviewing whether to acquire a business, or substantially all of its assets, which holds your personal data (whether you are a customer or employee of that business or otherwise) we may receive limited personal data about you from that business or professional advisers involved in the transaction, as necessary for our legitimate interests in making decisions about that acquisition. If we do not acquire that business, any information we receive about you will be deleted as soon as practicable following the decision not to acquire.
How we use your information
Common uses of your information. Although in limited circumstances we may use your information because you have specifically consented to it, we generally use your information because (1) we need to perform a contract we have entered into with you; or (2) it is necessary for our legitimate interests.
We use the information we obtain about you to perform our contract with you, including to:
- Provide our services;
- Establish and manage your account and profile;
- Manage the contractual relationship we have with you or take steps prior to entering into a contract with you (for example, deciding whether to pay you for a recording);
- Process transactions and billing inquiries; and
- Provide support.
We also use the information we obtain as necessary for our legitimate interests, including to:
- Evaluate our candidates and monitor our actor engagement process;
- Operate, evaluate, develop, manage and improve our business (including operating, administering, analyzing and improving our products and services; conducting research and developing new products and services; managing and evaluating the effectiveness of our communications; performing troubleshooting, accounting, auditing, billing, and other internal functions);
- Perform analytics (such as market research, data and trend analysis, and anonymization of personal information);
- Train, refine, develop and otherwise create and improve AI models, systems and other technologies;
- Manage inquiries and complaints;
- Send promotions, offers or other marketing communications and measure the effectiveness of our marketing efforts (to the extent required by applicable law we will obtain your consent to send you such communications);
- Protect against, identify and prevent fraud and other criminal activity, claims and other liabilities;
- Increase and maintain the safety and security of our services, and prevent misuse (for example, to keep sessions safe, we run automated analysis on your device during live video sessions, and recording sessions may otherwise be reviewed by our moderation team); and
- Exercise and defend legal rights and claims.
We otherwise may use your information (1) to comply with our legal obligations; (2) as necessary to protect your interests (or someone else's interests) or where it is needed in the public interest (although these circumstances are likely to be rare); or (3) in other ways for which we provide specific notice and, where required by law, obtain consent at or before the time of collection.
You may "opt out" of receiving our marketing communications at any time by contacting us or, for emails, using the unsubscribe option. Even if you opt out of our marketing emails, we may still need to contact you for administrative or operational purposes.
Sharing your information
What is shared with another actor when you're paired in a session? When you join a paired recording session, your call partner will see and hear you live for the duration of the session, and their device will see your first name only. We do not give your call partner any way to contact you outside the Earn With Aloe app. We process this disclosure on the basis of performance of our contract with you (the Data Collection Agreement). You can choose not to participate by not joining a session.
Which third-party service providers process your personal information? We share your personal information with third-party service providers (including contractors and designated agents) so that they can carry out their services, including for legal advice, contract administration, administration, IT services, and payment processing.
When might we share your personal information with other entities in the group? We may share your personal information with other entities in our group as part of our regular reporting activities on company performance, in the context of a proposed or actual business reorganisation or group restructuring exercise, and for system maintenance support and hosting of data.
What about other third parties? We may share your personal information with other third parties, for example with potential buyers and professional advisers in the context of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of an actual or anticipated merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation).
We may also need to share your personal information (1) to enforce or carry out our agreements with you; (2) if we are required or permitted to do so by applicable law, regulation, or legal process (such as a court order or subpoena); (3) in response to requests by government officials and agencies, such as law enforcement authorities; (4) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss, or to protect the rights, property, or safety of us, our customers, or others; (5) in connection with an investigation of suspected or actual fraud, illegal activity, security, or technical issues; or (6) otherwise with your consent.
Where we store your information
Our office headquarters are based in the USA and we also have a group company established in the UK. Where required to perform our contract with you or for our wider business purposes, the information that we hold about you may be transferred to, and stored at, other destinations outside the UK and the EU.
Some countries or organisations outside of the UK and the EU which we may transfer your information to will have an "adequacy decision" in place, meaning the EU considers them to have an adequate data protection regime in place. These are set out on the European Commission website: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en.
If we transfer data to countries or organisations outside of the UK and the EU which the EU does not consider to have an adequate data protection regime in place, we will ensure that appropriate safeguards (for example, standard contractual clauses or other transfer safeguards approved under applicable data protection law) are put in place where required by law.
Data security
We have put in place internal security measures designed to protect your personal information against accidental or unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.
How long will we keep your information for?
We will keep your personal information for the time period necessary to achieve the purposes outlined in this Privacy Notice, taking into account applicable statute of limitation periods and records retention requirements under applicable law.
Your rights
Under applicable data protection laws, you may have certain rights when it comes to personal information we process about you. Please be aware that these rights are not always absolute and there may be some situations in which you cannot exercise them or they are not relevant. In particular, where you have been paid for services and executed a contract with us for the collection of your face and voice data, this may have an effect on your entitlement to exercise certain rights.
If you are a UK resident, more information about your rights can be obtained from the Information Commissioner's Office (ICO).
Depending on your jurisdiction of residence, you may have the right to:
- Be informed about how we use your personal information and about your rights. This is why we are providing you with the information in this notice. If you require any further information about how we use your personal information, please let us know.
- Request access to your personal information, which may enable you to receive a copy of the personal information we hold about you and to confirm that we are lawfully processing it.
- Request correction of any incomplete or inaccurate personal information we hold about you.
- Request deletion of your personal information. You also may have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to the processing of your personal information on grounds relating to your particular situation and, in any event, to the processing of your personal information for direct marketing purposes.
- Request the restriction of processing of your personal information under certain circumstances.
- Request the transfer of your personal information to another party under certain circumstances.
- Withdraw consent to the extent we rely on your consent to process your personal information.
- Lodge a complaint with your relevant data protection supervisory authority (if you are in the UK, this will be the ICO).
If you want to exercise the rights available to you under applicable law, please contact us as described in this Privacy Notice.
We may need to request specific information from you to help us understand the nature of your request and to confirm your identity. If we request any identification from you for this purpose, it is on the basis that it is necessary to comply with our legal obligations.
We reserve the right to charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may deny the request in such circumstances.
Other online services and third-party features
For your convenience and information, our online services may provide links to other online services, and may include third-party features such as apps, tools, widgets and plug-ins. These online services and third-party features may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, are subject to the privacy statements of these parties, which we strongly suggest you review. To the extent any linked online services or third-party features are not owned or controlled by us, we are not responsible for these third parties’ information practices.
Changes to this privacy notice
Any changes we make to our privacy notice in the future will be posted on this page and, where appropriate, notified to you by e-mail or otherwise. Please check back frequently to see any updates or changes to our privacy notice.