Privacy Policy

We collect information in these categories, depending on how you use the Services:

We receive information directly from you, from your organization and its administrators, from the identity provider used to sign in, from services you authorize us to connect, and automatically when you use our websites and Services. We collect only the information relevant to the feature or interaction involved, subject to the settings and agreements that apply to your organization.

We use personal information to:

• provide and operate the Services, including authentication, workspace administration, data ingestion, analysis, support, and requested integrations;
• maintain security, prevent abuse, diagnose errors, and protect our rights and users;
• communicate about accounts, service changes, support, and transactions;
• understand how the Services perform and improve their reliability and usability; and
• comply with law, enforce our terms, and respond to valid legal requests.

Where law requires a legal basis, these purposes may rely on performance of a contract, our legitimate interests in operating and securing the Services, compliance with legal obligations, or your consent when required. You may withdraw consent where processing is based on it, without affecting earlier lawful processing.

Some Virgo features send selected Customer Content to model or other service providers to perform the function your organization enables. The data involved depends on the feature, source settings, and any applicable agreement. When an organization selects a redacted ingestion mode, selected unredacted text may first be sent to a redaction provider for filtering before Virgo stores the returned version. Other source settings may allow metadata-only or full-content storage. Automated filtering can miss sensitive details. Your organization should choose appropriate content and retention settings before submitting data.

We and our providers may use cookies, session storage, and similar technologies to keep you signed in, remember preferences, secure the Services, measure usage, and diagnose performance. Browser settings may let you block or clear these technologies, although some features may then stop working. Where applicable law requires consent for nonessential technologies, we will request it before using them. We do not treat a browser’s general privacy setting as a substitute for any legally required choice mechanism.

We may disclose personal information to:

• service providers that help us host, secure, authenticate, analyze, support, and operate the Services, including providers used for model inference when an enabled feature requires it;
• integrations and other third parties that you or your organization choose to connect or direct us to use;
• your organization’s administrators and authorized users, according to workspace permissions;
• professional advisers, auditors, and authorities when reasonably necessary to comply with law, protect rights, or address security and fraud; and
• a successor in a merger, acquisition, financing, or sale of assets, subject to applicable confidentiality and legal requirements.

We require service providers that process information for us to protect it and use it for the services they provide. Third parties you connect may process information under their own terms and privacy notices. We do not disclose Customer Content to advertisers for their independent advertising purposes.

We keep personal information for as long as reasonably needed for the purposes described here, including to provide the Services, satisfy the settings and agreements that apply to a workspace, maintain security records, resolve disputes, and meet legal obligations. Retention for Customer Content can vary by source, workspace configuration, and feature. An organization’s administrator may request deletion using available product controls or by contacting us. Deletion requests may require an asynchronous process, and limited records may remain where law or a legitimate operational need requires them. Backup copies may persist for a limited period under our recovery procedures.

Service providers may have separate retention periods for information processed on our behalf. Any specific retention commitment in a separate written agreement controls where it differs from this Policy.

We use technical and organizational measures designed to protect personal information, including access controls and safeguards for data in transit and storage. No method of transmission or storage is completely secure. Information may be processed in the United States and other countries where we or our providers operate. When applicable law requires protections for a transfer, we use an appropriate legal mechanism.

You can update some account information and preferences in the Services. You may also contact us to request access to, correction of, deletion of, or a copy of personal information that we control. Depending on your location, you may have additional rights to object to or limit processing, withdraw consent, or appeal a denied request. We may need to verify your identity and may decline or limit a request where the law permits. We will explain the reason when required.

If your information was submitted by an organization as Customer Content, please contact that organization. We will assist it with requests as required by our agreement and applicable law. You may also have the right to complain to a privacy or data protection authority in your jurisdiction.

We do not use Customer Content for cross-context behavioral advertising. If a law gives you a right to opt out of other sale, sharing, targeted advertising, or certain profiling involving your personal information, you can contact us at the address below. We will provide any additional choice mechanism required by applicable law.

The Services are intended for business users and are not directed to children under 18. If you believe a child has provided us personal information, contact us so we can review and address it.

We may update this Policy as our practices or legal requirements change. We will post the updated version with a new effective date and provide additional notice when required by law. Material changes will apply prospectively.

For privacy questions or requests, contact GAIA REAL ESTATE AI INC. d/b/a Proper Motion at hello@propermotion.ai. Our mailing address is [street address], [city], New York [ZIP code], USA.