This privacy policy ("Privacy Policy") describes the privacy practices of Infinity AI, Inc. dba Lemon Slice ("Company," "Lemon Slice," "us," "we," or "our") regarding how we handle personal information that we collect from our customers and website visitors through our website, applications, and through other interactions and correspondence with you (collectively, the "Services"). If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), "personal information" means any information relating to an identified or identifiable individual. This Privacy Policy is provided for transparency and information only. It does not create a contract with you. Your use of our Services is governed by our Terms of Service.

Personal information we collect:

We may collect a variety of personal information from or about you or your devices from various sources, as described below.

If you do not provide your personal information when requested, you may not be able to use our Services if that personal information is necessary to provide you with our Services or if we are legally required to collect it.

Information you provide to us:

Contact details, such as your first and last name, and email address.
Authentication Credentials, that let you access your accounts and your information via other service providers.
Pictures, which may contain an image of your face or other identifying features.
Communications that we exchange with you, including when you contact us via our website, applications, or on our community Discord or Slack with questions, feedback, or otherwise.
Payment information required by our payment processor, Stripe, Inc., needed to complete your transactions to use our Services, including name, payment card information, and billing information. We do not store payment card numbers.
Marketing information, such as your preferences for receiving our marketing communications, and details about your engagement with those communications.
Microphone/Camera recordings that may be collected with your consent during interactive video calls within our Services.
Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Information we obtain from third parties:

Social media information. We may maintain pages on social media platforms, such as Facebook, LinkedIn, Instagram, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider's privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.
Third-party login information. When you link, connect, or login to the Services with a third party service (e.g. Google, Facebook, or Apple), you direct the service to send us information such as your registration, friends list, and profile information as controlled by that service or as authorized by you via your privacy settings at that service.
Other Sources. We may obtain your personal information from other third parties, such as marketing partners, publicly-available sources and data providers.

Automatic data collection.

We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications and other online services, such as:

Device data, such as your computer's or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G), and general location information such as city, state or geographic area.
Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, browsing history, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them.

We use the following tools for automatic data collection:

Cookies and similar technologies, which store information on your device to run the site, remember preferences, and, if you allow them, understand how the site is used and measure our ads. The cookies we use, and how to accept or reject them, are described in our Cookie Policy.
Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

How we use your personal information:

To operate our Services:

Provide, operate, and improve our Services and our business;
Process your payments and complete transactions with you;
Communicate with you about our Services, including by sending announcements, updates, security alerts, and support and administrative messages;
Provide support, and respond to requests, questions, and feedback.

For research and development.

We use personal information to understand how the Services perform and to improve them and develop new ones. We may retain content you submit, such as images and audio, and use it to evaluate and improve our models. We do not use your name, email address, or account identifiers for that purpose. The content itself may still relate to an identifiable person. For this use, we rely on our legitimate interest in improving and developing the Services. You may object as described under Your European Privacy Rights.

For marketing.

We may send you direct marketing communications as permitted by law, including promotions, offers, and events by email and in-app notifications. You may opt out as described in the "Opt out of marketing communications" section below.

To comply with law.

As we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

For compliance, fraud prevention, and safety.

To: (a) protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims); (b) enforce the terms and conditions that govern our Services; and (c) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.

To create anonymous data.

To create anonymous data from your personal information and other individuals whose personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve our Services, conduct research, and promote our business.

Legal Bases for Processing European Personal Information:

If you are located in the European Economic Area or the United Kingdom, we only process your personal information when we have a valid "legal basis," including as set forth below.

Consent. We may process your personal information where you have consented to certain processing of your personal information. We use analytics and advertising cookies only where you have consented to them.
Contractual Necessity. We may process your personal information where required to provide you with our Services. For example, we may need to process your personal information to respond to your inquiries or requests.
Compliance with a Legal Obligation. We may process your personal information where we have a legal obligation to do so. For example, we may process your personal information to comply with tax, labor and accounting obligations.
Legitimate Interests. We may process your personal information where we have a legitimate interest in doing so. Specifically, we have a legitimate interest in using your personal information to improve the safety, security, and performance of our Services, and to improve and develop the Services, including by retaining content you submit to evaluate and improve our models. We only rely on that interest when it is not overridden by your rights and interests.

How we share your personal information:

Service providers.

We may share your personal information with third party companies and individuals that provide services on our behalf or help us operate our Services (such as customer support, hosting, analytics, email delivery, marketing, payment processing, and database management services). We share personal information with providers that host, store, deliver service email, process payments, or support the Services because that sharing is necessary to provide the Services. We share personal information with analytics and advertising providers only where you have consented.

Professional advisors.

We may disclose your personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.

For compliance, fraud prevention and safety.

We may share your personal information for the compliance, fraud prevention and safety purposes described above.

Business transfers.

We may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution. In such a case, we will make reasonable efforts to require the recipient to honor this Privacy Policy.

How you share personal information:

The public.

You may choose to export output based on the data you submit to us and use it for any purpose, including for display on the website of an online retailer or on social media.

Your choices:

Access or update your information. To keep your information accurate, current, and complete, please contact us as specified below. We will take reasonable steps to update or correct information in our possession that you have previously submitted via the Services.
Opt out of marketing communications. You may opt out of marketing-related emails or texts by following the opt-out or unsubscribe instructions at the bottom of the marketing communication we send you, or by contacting us at support@lemonslice.com. Even if you opt out of marketing-related communications, you may continue to receive service-related and other non-marketing communications.

Do Not Track.

Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

Your European Privacy Rights

If you are located in the EEA or the UK, you have additional rights described below. You may request access to the personal information we maintain about you, update and correct inaccuracies in your personal information, restrict or object to the processing of your personal information, have your personal information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your personal information to another company. You may also object to a decision based solely on automated processing, without human involvement, and to processing of your personal information for the purpose of evaluation, including profiling. In addition, you have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.

You may withdraw any consent you previously provided to us regarding the processing of your personal information at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy. We will respond within 30 days. Where needed, we may extend that period by up to two additional months. If we extend it, we will tell you within the first 30 days and explain why. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), provides you with additional rights regarding your personal information. This section describes those rights and how to exercise them, and supplements the rest of this Privacy Policy. The disclosures below cover personal information we have collected about California consumers in the preceding 12 months.

Categories of personal information we collect

We collect the following categories of personal information, as described in more detail in "Personal information we collect" above:

Identifiers, such as your name, email address, IP address, account credentials, and unique device or cookie identifiers.
Personal information described in Cal. Civ. Code § 1798.80(e), such as your name and billing information. Some of this information is also included in other categories.
Commercial information, such as records of products or services purchased and your engagement with our marketing communications.
Internet or other electronic network activity information, such as browsing history on our Services, pages or screens viewed, interactions with our emails, and other usage data collected through cookies and similar technologies.
Geolocation data, such as general location inferred from your IP address (for example, city, state, or geographic area). We do not collect precise geolocation.
Audio, electronic, visual, or similar information, such as photos you upload or otherwise provide to use the Services, which may include an image of your face, and microphone or camera recordings collected with your consent.
Inferences drawn from the information above, such as preferences or usage patterns used to operate, improve, or market our Services.
Sensitive personal information, such as account log-in credentials; payment information processed by our payment processor; and photos you upload that may include your face.

Categories of sources

We collect personal information from the following categories of sources:

Directly from you, when you create an account, use the Services, make a purchase, or contact us.
Automatically from your browser or device, including through cookies, pixels, and similar technologies.
From third-party services you choose to connect, such as Google, Apple, or Facebook login.
From social media platforms if you interact with our pages on those platforms.
From service providers that help us operate the Services, such as payment, analytics, and communications providers.
From other third parties, such as marketing partners, publicly available sources, and data providers.

Business or commercial purposes for collecting personal information

We collect and use personal information for the business and commercial purposes described in "How we use your personal information" above, including to:

Provide, operate, secure, and improve the Services, including generating user-requested content and processing payments.
Communicate with you about your account, transactions, support requests, and (where permitted) marketing.
Analyze use of the Services, debug, and develop new products and features.
Personalize the Services and send our own marketing communications where permitted.
Detect, investigate, and prevent fraud, abuse, and security incidents, and to protect our rights and comply with law.
Create de-identified or aggregated data that does not identify you.

We do not collect personal information in order to sell it for money. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA (for example, to provide the Services you request, to resist malicious or illegal actions, or to verify or maintain the quality of our Services).

Categories of third parties with whom we share personal information

We may disclose personal information to the following categories of third parties:

Service providers and contractors that host, process, analyze, deliver email, provide customer support, process payments, or otherwise help us operate the Services.
Advertising platforms we use to run or measure our own marketing.
Professional advisors, such as lawyers, bankers, auditors, and insurers.
Authorities and other parties when we believe disclosure is necessary for legal compliance, fraud prevention, or safety.
Parties to a business transfer, such as a merger, acquisition, or sale of assets.

Personal information disclosed for a business purpose

In the preceding 12 months, we have disclosed the following categories of personal information for a business purpose (for example, to service providers that process information on our behalf):

Identifiers
Personal information described in Cal. Civ. Code § 1798.80(e)
Commercial information
Internet or other electronic network activity information
Geolocation data (general location)
Audio, electronic, visual, or similar information
Inferences
Sensitive personal information, limited to what is reasonably necessary to provide the Services (for example, payment information to our payment processor, or images you upload)

The categories of third parties to whom we disclose personal information for a business purpose are service providers, professional advisors, authorities, and parties to a business transfer, as listed above.

Personal information sold or shared

We do not sell personal information for money, and we do not sell personal information as a product. We do not sell or share the personal information of consumers we know are under 16 years of age.

In the preceding 12 months, we have not sold personal information for money. We may disclose the following categories to advertising platforms so we can run or measure our own marketing. California law may treat that as a "sale" or "share," even though we are not paid for the data:

Identifiers, such as cookie identifiers and IP address
Internet or other electronic network activity information, such as interactions with our Services

You may opt out of this sale or sharing as described below.

Your rights

Subject to legal exceptions, California residents may:

Know and access. Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting, selling, or sharing it, the categories of third parties to whom we disclose it, and the categories of personal information we sold, shared, or disclosed for a business purpose.
Delete. Request that we delete personal information we have collected from you, subject to certain exceptions (for example, where we need the information to complete a transaction, detect security incidents, or comply with law).
Correct. Request that we correct inaccurate personal information we maintain about you.
Opt out of sale or sharing. Direct us not to sell or share your personal information.
Limit use of sensitive personal information. Request that we limit use and disclosure of sensitive personal information to what is necessary to perform the Services. We already limit our use of sensitive personal information to permitted CCPA purposes.
Non-discrimination. Not be discriminated against for exercising these rights. We will not deny goods or services, charge a different price, or provide a different level of quality because you exercised a CCPA right, except as permitted by law (for example, a reasonably related difference if you opt out of a financial incentive).

How to submit a request, including for a copy of your information

To obtain a copy of the specific pieces of personal information we have collected about you, or to submit an access, deletion, correction, do-not-sell-or-share, or limit-sensitive-information request, use one of the methods below. Please say that you are making a California privacy request and include:

Your name and the email address associated with your Lemon Slice account (if you have one).
The type of request (for example, "access / copy of my personal information," "delete," "correct," or "do not sell or share").
Enough detail for us to locate your information and complete the request.

Method 1 — Email: support@lemonslice.com, with the subject line "California Privacy Request."

Method 2 — Mail: Lemon Slice, 2108 N St, Ste N, Sacramento, CA 95816, Attn: Privacy Request.

We will acknowledge requests and respond within the time required by the CCPA (generally 45 days, or longer if reasonably necessary and as permitted by law). Before fulfilling a request, we will take steps to verify your identity. That may include matching information you provide with information we already maintain, or asking you to verify access to the email address on your account. If we cannot verify your identity, we may be unable to complete the request. We will not provide sensitive personal information such as full payment card numbers in response to an access request.

You may designate an authorized agent to submit a request on your behalf. The agent must provide proof of authorization (such as a signed permission or power of attorney), and we may still need to verify your identity directly with you unless the agent has a valid power of attorney.

If you have an account, you can also review or update certain profile information by signing in to the Services. You may opt out of marketing emails at any time as described in "Your choices" above.

Do Not Sell or Share My Personal Information

We do not sell personal information for money. To opt out of any sale or sharing described above, including disclosures to advertising platforms that California law may treat as a sale or share, email support@lemonslice.com with the subject line "Do Not Sell or Share My Personal Information," or send a written request to the mailing address above. Please include the email address associated with your account.

Shine the Light

California's "Shine the Light" law (Cal. Civ. Code § 1798.83) permits California residents to request certain information about our disclosure of personal information to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. To make a request, contact us at support@lemonslice.com.

How to Block Cookies

How we use cookies, and how to accept, reject, or change that choice, is described in our Cookie Policy. You can also block cookies in your browser. Blocking essential cookies can sign you out or break parts of the site.

Other sites, mobile applications and services

Our Services may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party.

In addition, our content may be included on web pages or in mobile applications or online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. Other websites and services follow different rules regarding the collection, use and sharing of your personal information. We encourage you to read the privacy policies of the other websites and mobile applications and online services you use.

Data Retention

We take measures to delete your personal information or keep it in a form that does not permit identifying you when this personal information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this personal information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, the impact on the Website we provide to you if we delete some personal information from or about you, mandatory retention periods provided by law, and any relevant statute of limitations.

Security practices

We use reasonable organizational, technical and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee the security of personal information.

Children

Lemon Slice accounts are only for people who are 18 or older, and we do not offer the Services directly to children. Some of our business customers may use the Services in their own products for younger users. In that case the business customer decides how that information is used, is responsible for obtaining any parental consent the law requires, and we process the information only on the business customer's behalf. We do not use content that we reasonably believe depicts or relates to a minor to train or develop our models. If we learn that we have collected personal information from a child without the consent of the child's parent or guardian as required by law, we will delete it.

International Visitors

Our Services are hosted in the United States ("U.S.") and intended for visitors located within the U.S. If you use our Services from the EEA, the UK, or other regions of the world with laws governing data collection and use that may differ from U.S. law, your personal information is stored and processed in the U.S. We transfer personal information from the EEA or the UK to the United States and other third countries on the basis of European Commission-approved or UK Government-approved Standard Contractual Clauses, or otherwise in accordance with applicable data protection laws. We may also transfer your personal information from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating our Services.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on our Services.

Data Privacy Framework (DPF) – Notice of Intended Participation

We intend to comply with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF") as set forth by the U.S. Department of Commerce. Upon certification, we will adhere to the EU-U.S. Data Privacy Framework Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Upon certification, Lemon Slice will be subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

In compliance with the DPF Principles, Lemon Slice will commit to resolve complaints about our collection or use of personal data. Individuals located in the European Union with inquiries or complaints should first contact Lemon Slice at: support@lemonslice.com.

If a complaint cannot be resolved through Lemon Slice, Lemon Slice will commit to cooperate with the panel established by the EU data protection authorities (DPAs) and comply with the advice given by such authorities.

Lemon Slice will remain responsible and liable under the DPF Principles if third-party agents that it engages to process personal data on its behalf do so in a manner inconsistent with the Principles, unless Lemon Slice proves that it is not responsible for the event giving rise to the damage.

Under certain conditions, individuals will be able to invoke binding arbitration to resolve complaints regarding Lemon Slice's compliance with the DPF Principles not resolved by other means, as described in the Data Privacy Framework.

How to contact us

Please direct any questions or comments about this Policy or privacy practices to support@lemonslice.com. You may also write to us via postal mail at: Lemon Slice, 2108 N St, Ste N, Sacramento, CA 95816

EU representative

Under Article 27 of the GDPR, we have appointed Instant EU GDPR Representative Ltd to act as our representative in the European Union. You may contact them at:

Adam Brogden
contact@gdprlocal.com
Tel +353 1 554 9700
Instant EU GDPR Representative Ltd
Office 2, 12A Lower Main Street, Lucan, Co. Dublin
K78 X5P8
Ireland

UK representative

Under Article 27 of the UK GDPR, we have appointed GDPR Local Ltd to act as our representative in the United Kingdom. You may contact them at:

Adam Brogden
contact@gdprlocal.com
Tel +44 1772 217800
GDPR Local Ltd
1st Floor Front Suite
27-29 North Street, Brighton
England