Overview
Alcatraz is committed to protecting your privacy and complying with all applicable data protection laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the EU General Data Protection Regulation (GDPR), and the Biometric Information Privacy Act (BIPA). This policy explains how we collect, use, and safeguard the personal data of individuals who interact with our business website, channel partner portal, and related business communications.
As a business-to-business company, this policy applies primarily to website visitors and business contacts, not to end users of our facial authentication solution. If you are an employee or end user of an organization that uses Alcatraz, that organization's privacy policy controls, and you can learn how we process your data in our Rock privacy policy.
Privacy at a glance
We want to make it easy to see how we collect and use your information. As an overview:
- We do not sell your personal information.
- We only collect the personal data necessary to support business needs.
- We use cookies to improve your experience, and you can manage your preferences.
- You can access, update, or delete your information at any time.
- Our facial authentication privacy practices are governed by a separate policy.
Why we collect your data
Alcatraz collects personal information from and about you when you visit our websites, based on your consent, our legitimate interests, or as necessary to fulfill contractual obligations. We use it to tailor your experience, respond to your questions, communicate with you when necessary, direct you to an Alcatraz partner to fulfill your orders and process payments, address problems or improve our services, and protect the security and integrity of our business.
What information we collect
We may collect personal information when you engage with us on social platforms such as Facebook and LinkedIn, particularly if you sign up for webinars, events, or marketing updates using your individual profile. While our services are business-focused, some information you provide, such as social media handles or form submissions, may be tied to your individual capacity, not just your business role. We treat this information with the same care and privacy protections outlined in this policy. You can opt out of social integrations or request removal of social platform data by emailing privacy@alcatraz.ai.
Generally, you are not required to provide us with any information to use our websites. However, you may need to provide certain personal information to obtain support, research products, submit comments, or access services, such as creating an account or signing up for a newsletter. Unless otherwise specified, we retain your personal information only as long as necessary to fulfill the associated business purposes.
We may also collect business location data relevant to channel partner territory management and regional deployment support, which helps ensure you receive appropriate regional support for your business needs.
Data we collect and legal basis
We process EU residents' personal data under one of the following legal bases:
- Contractual necessity. To fulfill orders or deliver services via channel partners.
- Legitimate interests. For B2B communications, fraud prevention, or improving our services.
- Consent. For marketing emails or non-essential cookies, which you may withdraw at any time.
How we disclose your data
We may disclose personal information only on a need-to-know basis to our authorized channel partners, third-party service providers, consultants, advisers, or processors, including hosting companies and analytics providers who help us deliver and improve our services. We may also share it with current and future parent entities, affiliates, and subsidiaries to the extent necessary for the purposes permitted under this policy.
If we share personal information with third parties, we require them to protect it at least as well as we do, including compliance with applicable data protection laws and confidentiality obligations. Alcatraz may also disclose personal information in response to a lawful request from law enforcement, to enforce its contracts or property rights, or when otherwise required by law. We do not collect or process sensitive personal information as defined under the CPRA, such as government identifiers, precise geolocation, or financial account logins, unless required by law or specifically provided by you for business purposes.
Children's privacy
Alcatraz's products and services are designed exclusively for business use and are not directed to children under 18. Parents or guardians who believe their child has provided us with personal information may email privacy@alcatraz.ai to request deletion.
Automated decision-making and profiling
Alcatraz does not use your personal information to make decisions with legal or similarly significant effects, and we do not engage in automated decision-making, scoring, or profiling that could impact your rights. We may analyze high-level business insights, such as product interest or deployment region, to better tailor our communications and support.
Your rights
You have the right to access, correct, delete, or restrict the processing of your personal data. You may also have the right to data portability, to object to certain processing, or to withdraw consent at any time. To exercise any of your rights, email privacy@alcatraz.ai. We may verify your identity before responding, and we will respond within the legally required timeframe. We will not discriminate against you for exercising your privacy rights.
If you have signed up for newsletters or marketing emails, you may opt out at any time by clicking the unsubscribe link in our emails, by emailing us directly, or by changing your browser settings. We honor opt-out requests promptly.
European Economic Area and United Kingdom residents
If you are located in the EEA or UK, the GDPR grants you the following rights regarding your personal data:
- Right of access. Request confirmation of whether we process your data and receive a copy.
- Right to rectification. Update inaccurate or incomplete personal data.
- Right to erasure. Request deletion of your data under specific circumstances.
- Right to restrict processing. Limit how we use your data, for example if you dispute its accuracy.
- Right to data portability. Receive your data in a structured, machine-readable format.
- Right to object. Object to processing based on legitimate interests, direct marketing, or research.
You may also have the right to complain to the competent supervisory authority. Our EU privacy representative is Alcatraz Bulgaria EOOD, Mladost, 8 Dimitar Mollov, 1750 Sofia, Bulgaria. For UK matters, contact Keely Masterson, Unified Law Group, PB LLC.
State-specific disclosures
- California. You have the right to opt out of the sale or sharing of personal information, even in a B2B context. Alcatraz does not sell personal data, but we do share business contact information with channel partners to fulfill customer interest and support.
- Virginia, Colorado, Connecticut, Utah. You may opt out of targeted advertising or profiling. Alcatraz does not profile individuals in a way that has legal effects.
- Nevada. You may opt out of the sale of covered information. Alcatraz does not sell covered information as defined under Nevada law.
- Canada. You may access, correct, or delete personal data under PIPEDA, and challenge compliance through the Privacy Commissioner of Canada.
International data transfers
Your personal information may be transferred to or accessed by Alcatraz subsidiaries and third parties globally. We comply with laws on the transfer of personal information between countries, and we have implemented safeguards including Standard Contractual Clauses (SCCs) and Data Protection Agreements to ensure an adequate level of protection. You can request a copy of our EU SCCs by emailing privacy@alcatraz.ai.
Third-party sites
Our websites may embed content provided by others or include links to other websites and applications. These companies may collect information about you when you interact with their content or services. We are not responsible for the collection of data by these third parties, so please consult their privacy policies to learn about their practices.
Cookies
We use cookies and similar tracking technologies for analytics, personalization, and marketing. Information collected with these technologies may be necessary to operate the website, improve performance, understand how our services are used, or determine the interests of our users. You can accept or decline cookies. Most browsers accept them automatically, but you can usually modify your settings to decline them. If you decline cookies, you may not be able to fully experience the interactive features of our services. You can adjust your cookie preferences at any time through your browser settings.
Security
We use commercially reasonable physical, administrative, and technical security measures to protect your data, such as encryption, multi-factor authentication, and access control. We also require our channel partners, suppliers, and third parties to implement appropriate safeguards, such as contract terms and access restrictions, to protect information from unauthorized access, use, and disclosure. To protect our customers and company assets, Alcatraz has achieved ISO 27001 certification.
Data retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including complying with legal, regulatory, accounting, or reporting requirements. Below is a summary of our standard retention periods:
Once the applicable retention period expires, we securely delete or anonymize the data, unless we must retain it longer to comply with legal obligations.
Changes to this policy
We may update this policy to reflect changes in technology, law, and our practices. The updated version will be posted on this page with a revised effective date. We encourage you to review this page periodically.
Contact us
If you have questions or requests related to this policy, you may contact us at privacy@alcatraz.ai, or by mail at Alcatraz AI, Inc., 10061 Bubb Rd, Cupertino, CA 95014.
Our EU privacy representative is Alcatraz Bulgaria EOOD, Mladost, 8 Dimitar Mollov, 1750 Sofia, Bulgaria.