Privacy Policy

Your privacy is important to us. Therefore, we (Cinteraction d.o.o., Novi Sad, Nikolajevska 2 I/7.) comply with the General Data Protection Regulation (GDPR) and relevant local legislative and we are taking required technical and organizational measures to protect your personal data. This privacy policy explains what personal data Cinteraction processes, how it processes it and for what purposes.

Please read this policy carefully, as it provides additional relevant information and applies to the interactions between Cinteraction and the customer (“you”) while using the services and products we provide. By accepting the privacy policy, you give your consent for Cinteraction to collect and process your data as further described.

What personal data is COLLECTED?

Cinteraction collects data through interactions with the customers. Some of it is provided directly, and some is collected from customer interactions, use, and experiences. The data we collect depends on the context of customer interactions with Cinteraction and the choices customers make, including privacy settings, the products and features used. All data is collected in a lawful, fair and transparent manner and only for the specified and explicit purposes. Data collection is limited to only relevant and adequate data, which is kept accurate and up to date and retained only for as long as it is needed (or until the right to be forgotten is exercised by the customer), while ensuring its security and integrity.

We may collect, or process on behalf of you, the following categories of personal data when you use or interact with Cinteraction services:

• Users account information: Information associated with your account, which may include administrator name, contact information, account ID, billing information, and account plan information.
• Profile information: Information associated with the platform profile if user has account, or if it is provided by an unlicensed participant joining a meeting, which may include name, display name, picture, email address, phone number, job information, stated locale, user ID, or other information provided by the user or their account owner.
• Device information: Information about the computers and mobile devices that are used for interacting with Services. That may include information about the camera, speakers, microphone, OS version, hard disk ID, PC name, MAC address, IP address (which may be used to infer general location at a city or country level), device attributes (like operating system version and battery level), WiFi information, and other device information (like Bluetooth signals).
• Settings information: Information associated with the account settings and preferences of user profile, which may include video and audio settings, recording file location, screen sharing settings, and other settings and configuration information.
• Registration information: Information people provide when registering for a call, webinar or recording, which may include name and contact information, responses to registration questions, and other registration information requested by the host.
• Contacts information: Contact information added by accounts users, which also may include contact information a user took from a third-party app (such as when users integrate their calendars from other services with their profile or account).
• Meeting, Webinar, and Messaging Content and Context: Content generated in meetings, webinars, or messages that are hosted on the platform, which may include audio, video, chat messaging content, transcriptions, written feedback, responses to polls and Q&A, and files, as well as related context, such as invitation details, meeting or chat name, or meeting agenda. Content may contain your voice and image, your settings, and your activities on the platform.
• Product/ Services: Information about how people and their devices interact with Cinteraction services, such as: when participants join and leave a meeting; whether participants sent messages and who they message with; performance data; mouse movements, clicks, keystrokes or actions (such as mute/unmute or video on/off), and other user inputs that help Cinteraction to understand feature usage, improve product design, and suggest features; features used (such as screen sharing, emojis, or filters); and other usage information and metrics. This also includes information about when and how people visit and interact with other users.
• Communications with Cinteraction: Information about your communications with Cinteraction, including those relating to your account, support questions and other inquiries.

How is personal data USED?

Cinteraction collects and uses the data for:

I - Product Development and Research. We use data to continually improve our products, and to add new features or capabilities.
II - Providing improved Products and Services which includes updating, securing, providing support and troubleshooting when necessary. Data is used to customize product features and recommendations for account owners, their users, and those who will join meetings by request, as well as to route the messages and call invitations to their recipients. It also includes using and sharing data, when it is required to manage customer relationships and provide the service for account owners.
III - Communication with the customers, Personalization and Recommendations. This requires using your personal information to contact you and offer better features, and services, including product updates to your account, and changes to our policies and terms.
IV - Providing Security, Safety and Integrity of user accounts, which includes authentication of accounts and their activity. That also implies activities of detection, investigation, and prevention of malicious conduct or unsafe experiences to be able to address security threats and protect public safety and security.
V - Legal compliance. We process data to comply with applicable law or respond to valid legal processes.
VI - Advertising and Marketing, which includes sending promotional communications, targeting advertising, and presenting you with relevant offers that may improve your experience.

Processing of personal data, for purposes stated above, is performed automatically and manually. Automated methods include artificial intelligence (AI), which we think of as a set of technologies that enable computers to perceive, learn, reason, and assist in decision-making to solve problems in ways that are similar to what people do. In particular, we use audio-visual data to automatically assess engagement levels and emotional states of participants during calls. To build, train, and improve the accuracy of our automated methods of processing (including AI), we manually review some of the predictions and inferences produced by the automated methods against the underlying data from which the predictions and inferences were made.

How and why is personal data SHARED?

Personal data is shared with our partners and service providers when it is necessary to complete a specific transaction or provide a product or a service you have requested or authorized. In particular, we use Amazon Web Services (AWS) for all call analytics, data transfer and storage related tasks. To this end, we use computing resources provided by AWS that are hosted geographically within EU. We also offer integration with Google Calendar for the purposes of scheduling meetings, for users who already own a Google account.

Personal data also might be shared when implicit consent for it is implied, such as in cases when it is necessary for us to:

• investigate potential violations of Terms of Service or policies;
• detect, investigate and prevent potential fraud, abuse and threats to public safety and security
• comply with applicable law, investigate, or participate in valid legal process and proceedings, including from law enforcement or government agencies;
• meet corporate and social responsibility commitments;
• protect our and our customers’ rights and property;
• resolve disputes and enforce agreements;

In other cases and for other purposes personal data is not shared with third parties without your explicit consent.

Data subjects rights

Under GDPR and relevant local legislation, users can invoke their:

• right to be informed - right to be told what personal data our organisation collects about them, the lawful basis that applies, how their data will be used, and who else it will be shared with, in order to exercise transparent flow of data usage,
• right of access - right to obtain a copy of personal information that is held about them,
• right of rectification - right to have personal data rectified if it is inaccurate or incomplete,
• right to erasure - right to be forgotten, this refers to an individual's right to have their personal data deleted or removed in certain circumstances,
• right to restrict processing - right to block or suppress the processing of their personal data,
• right to data portability - right to move and copy their personal data from one IT environment to another, if they show a need for such transfer,
• right to object - right to object to their personal data being processed,
• right to restrict an automated individual decision-making.

If you wish to exercise any of your above mentioned rights or if you have any privacy related questions, please write to us at office@cinteraction.com and we will respond within 25 calendar days. Please bear in mind that complying with some of your requests might require actions from us that incur costs or fees, in which case you agree to cover them in full.

Changes and updates to this policy

Please revisit our Privacy Policy section from our website https://www.cinteraction.com to check for updates to the current policy. Latest versions of this policy will be presented here.