1. Introduction
- Welcome to Altibbe, Inc. (“Company,” “we,” “our,” or “us”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered transparency and governance infrastructure, including Hedamo (“the Services”).
- By using the Services, you consent to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Product details, sourcing information, and compliance documents
- Responses to validation questions
- Account registration information
- Communication with our team
2.2 Information Collected Automatically
- Log Data: IP address, browser type, timestamps, interactions
- Usage Data: Features accessed, actions taken, time zone, country
- Device Information: Device type, operating system, unique identifiers
- Location Information: General location estimated from IP address
- Cookies: See our Cookie Policy for details
3. How We Use Your Information
We use your information to:
- Provide, operate, and improve our Services
- Process assessments and generate reportsCommunicate updates and relevant information
- Ensure security and prevent fraud
- Comply with legal obligations
- Create aggregated, anonymized data for research and improvement
4. Information Sharing
We may share your information with:
- Service Providers: Third parties who assist our operations (hosting, security, analytics)
- Government Authorities: When required by law or to protect rights and safety
- Affiliates: Entities under common ownership, subject to this Privacy Policy
We do not sell your personal information.
5. Data Security
We implement industry-standard security measures including technical, administrative, and organizational safeguards. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your Personal Data only as long as necessary to provide our Services, comply with legal obligations, and protect our legal interests. When no longer needed, we delete, erase, or anonymize your data.
7. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access your Personal Data
- Request correction of inaccurate data
- Request deletion of your data
- Data portability
- Restrict or object to processing
- Withdraw consent
To exercise these rights, contact us at corp@altibbe.com.
8. International Data Transfers
Your data may be transferred to countries with different data protection laws. We implement appropriate safeguards, including Standard Contractual Clauses where required.
9. Jurisdiction-Specific Rights
European Union & United Kingdom
We comply with GDPR and UK GDPR, processing data on legal bases including contractual necessity, legitimate interests, legal compliance, and consent.
United States
We comply with applicable state laws including CCPA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), and TDPSA (Texas).
Other Jurisdictions
We comply with applicable laws in Canada (PIPEDA), Australia (Privacy Act 1988), Brazil (LGPD), India (DPDP Act 2023), Saudi Arabia (PDPL), UAE (Federal Decree-Law No. 45), South Africa (POPIA), and GCC countries.
10. AI-Generated Content
Our Services utilize AI technologies. AI-generated outputs:
- Are provided “as-is” without warranties
- May contain errors or inaccuracies
- Should be independently verified before relying on them for decisions
11. Children’s Privacy
We do not intentionally collect information from individuals under 16. If we become aware of such collection, we will take steps to delete the data.
12. Changes to This Policy
We may update this policy periodically. Changes will be posted with an updated effective date.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us at corp@altibbe.com.