Privacy Policy
This privacy policy describes how Royall.ai collects, uses, and shares data. It also describes your rights to control data about you. Legally speaking, Royall Labs, Inc. (“we”, “our”, or “us”) is the “data controller” of this data and is primarily responsible for how it is collected, used, and shared.
The disclosures in this privacy policy cover our collection and use of data for its own purposes and the administration and management of customer accounts. We refer to all these together as our “Sites”. Our customers are typically data controllers for data they collect from fans or consumers using the Royall.ai platform. The privacy policy that applies to that data will be displayed on the customer’s page or form used to collect data.
Some platforms or partners we use or link to from the Sites may collect data for their own purposes as controller or joint controller. Those platforms or partners will provide their own privacy policy, which will apply to their collection and use of data collected for their own or joint purposes. We do our best to partner with companies we trust to responsibly handle data about you, but please have a look at these other privacy policies so you understand how those partners will use your data.
How to contact us
If you have questions or concerns about this privacy policy or our data practices, contact us at privacy@royall.ai.
Information we collect and how we use it
We collect and use data about you as described here. Some data may be optional. The uses described here may be subject to your consent or other choices as required by privacy laws or other legal requirements.
| If you: | We may collect: | And use it to: |
| Visit our Sites. | IP address or similar network information, browser information, device identifiers information, cookie or similar identifiers, location based on IP address, language and time zone settings, and page interactions (such as scrolling, clicks, length of visits, pages viewed). | Understand traffic volume and use of our Sites, understand user demographics, identify and resolve technical issues, develop and personalize new features, and protect the Sites against fraud or security threats. |
| Create an account and verify your ID | Name, email address, short bio, style tag, preferred pronouns, languages, social links/handles, website, headshot. | Facilitate account creation and login experience, allow you to manage your account, provide our services, secure the Sites and protect your account. |
| Verify your ID | Photograph of you, photograph of your government ID. | Verify your identity, secure the Sites and protect your identity and likeness. |
| Create your likeness vault | Biometric data you choose to contribute to your vault, including recordings of your voice, face, and body movements. | Operate aspects of the service you choose and consent to participate in, including our radar and licensing features. |
| Sign up for our mailing list, book a demo, or otherwise interact with our sales teams. | Email address, name, and in some cases city/country. We also collect information about how often emails are opened and links clicked from our emails. | Operate our mailing list, understand and improve the performance of our mailing list, and maintain records of our fans. |
| Contact us with a question or customer service request. | Name, email address, order information, and any information you provide about your question or concern. | Respond to your questions or concerns, research and address product or service issues. |
In addition to the above, we may use any data collected about you to manage your rights and choices, comply with legal or regulatory obligations, resolve disputes and enforce our agreements, secure our Sites, prevent fraud or other misuse, and protect the safety of our customers.
For individuals in the European Economic Area or United Kingdom, our legal bases of processing are:
- Consent for use of biometric data as well as direct marketing such as sending you emails and any online advertising or tracking where consent is required.
- Necessary for performance of a contract with you for performing our services.
- Necessary for compliance with legal obligations where the data processing is required by law.
- Legitimate interest for other uses.
How we share information about you
We may share information about you in the following ways:
- With vendors who provide services on our behalf. These vendors will only use data about you for the purpose of providing services and not for their own benefit.
- With your consent or upon notice and opportunity to opt out, according to legal requirements.
- In response to a legally enforceable subpoena, court order, government inquiry, or other binding legal process.
- With an acquiring company as part of a sale, merger, or other business transfer where our company or its assets are purchased.
- Where necessary to protect the rights, safety, or security of you or others.
If our company or assets are sold, merged, or transferred, your information (including your phone number) may be transferred to the new owner as part of that transaction. In that case, your information will remain protected and subject to the same privacy commitments in place at the time it was collected, unless you are notified otherwise and given the opportunity to opt out.
Use of Biometric Data
Royall.ai includes features that detect and protect your likeness on the Internet and offer you opportunities to license your likeness for authorized uses. Biometric information and biometric identifiers (your “Fingerprint”), such as your voiceprint, facial geometry, and posture/gait, are necessary for these features to function. In this privacy policy we use the term “Biometric Data” to cover both biometric information and biometric identifiers/Fingerprint as those terms are defined under applicable laws.
With your consent, we use Biometric Data to detect uses of your likeness on the Internet and to offer you opportunities to license your Fingerprint to partners for their authorized use, including to train AI models. We will not sell or share your Biometric Data except as necessary for uses authorized by you and with your consent.
Retention of Biometric Data. We retain Biometric Data for as long as necessary to provide services you request or up to three years after your last interaction with us unless you revoke your consent for our use of your Biometric Data. Please note that use of Biometric Data is necessary for our services and we will not be able to provide our services to you without your consent.
You can revoke your consent for our use of your Biometric Data by using the option available in the Royall platform or by contacting us at privacy@royall.ai. Please note that if you revoke your consent we will remove your Biometric Data from future licensed data sets but are unable to remove it from data sets already licensed and shared with third parties.
Your rights
You may have the right to control how we collect, use, or share information about you, including rights to access, correct, delete, obtain copies of, withdraw consent for, or opt out of online advertising or other processing of data about you.
To exercise these rights, please contact us as described in the “How to contact us” section above. We will respond as quickly as we can within the time periods required by applicable laws, which in most cases is between 30 and 45 days.
Storage and retention of data
Our default rule is that we keep information about you as long as it is needed for the purpose it was collected or for a use disclosed above. We will use reasonable security measures to protect your data.
We may use service providers that store data in different parts of the world, including the United States. We take steps to ensure our service providers comply with international data transfer requirements, usually through approved data transfer agreements.
Children
Our Sites are not directed to children. If you believe we have collected data about your child, please contact us and we will either delete that data or obtain your parental consent for its use.
Analytics, cookies, and tracking
We use analytics to better understand how our Sites are used. We do not track your use of the Site for advertising purposes.
Changes to this privacy policy
Any material changes we make to our privacy policy in the future will be posted here. We will also notify you of privacy policy changes through email, login notifications, or other mechanisms reasonably designed to provide notice of the changes. We encourage you to check our privacy policy periodically to refresh your understanding of our data practices.
Local rights and disclosures
Certain local laws require specific disclosures related to our data practices.
US State Disclosures
Residents of certain US states (including California, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia) may have some or all of the following rights, which can be exercised by contacting us as described in the “How to contact us” section above:
- Access and obtain a copy of personal information about you.
- Confirm the categories and/or specific pieces of personal information about you we have collected, used, disclosed, or shared with third parties.
- Correct inaccuracies or delete personal information about you.
- Opt out from profiling that may produce legal or other significant effects.
- Opt out from targeted advertising and/or the sale or sharing of personal information about you.
- Request a list of categories, or for Oregon residents specific names, of third parties to which we have disclosed personal information about you.
- Non-discrimination for the exercise of your privacy rights.
If you are a resident of California, you may opt out of having your personal information shared with third parties for the third party’s direct marketing purposes.
The California Consumer Privacy Act requires specific disclosures about how personal information is shared or sold. Note that the definition of “sale” includes almost any sharing of information to third parties who are not service providers. Selling personal information does not mean it was given to a third party in exchange for monetary compensation.
| Category | Categories of third parties receiving personal information for business purposes | Categories of third parties to whom personal information was “sold” as defined by the CCPA, including for targeted advertising purposes |
| Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. | Business partners, service providers. | N/A |
| Characteristics of protected classifications under California or federal law, such as gender. | N/A | N/A |
| Commercial information, including products or services purchased obtained, or considered, or other purchasing or consuming histories of tendencies. | Service providers. | N/A |
| Biometric information. | Service providers. | N/A. Data may be disclosed to business partners the direction of a user. |
| Internet or other electronic network activity information, including browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement. | Business partners, service providers. | N/A |
| Geolocation data. | Service providers. | N/A |
| Audio, electronic, visual, thermal, olfactory, or similar information. | Service providers. | N/A |
| Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Service providers. | N/A |
| Other information about you that is linked to the personal information above. | Business partners, service providers. | N/A |
| Sensitive personal information. | N/A | N/A |
We collect personal information from:
- Individuals directly.
- Business partners.
- Service providers.
If you are not satisfied with the results of a privacy rights request you can contact us to appeal our decision as described in the "How to contact us" section above. Please include "Appeal" in the subject line of your message.
We may require validation of your identity before fulfilling your privacy rights request. Validation will vary depending on the type of request and risk of disclosure to an unauthorized person. Validation steps may include providing a copy of a government-issued identification or similar, logging in with an account, or providing other details that support the authenticity of the request.
You may designate a third party as an agent to make privacy rights requests on your behalf. An agent must be designated in writing or through a power of attorney. We will require a designated agent to validate their authority prior to fulfilling requests made on your behalf.
EEA and UK disclosures
If you are located in the European Economic Area or United Kingdom, you may have additional rights regarding our processing of personal data about you.
You may the right to:
- Access and obtain a copy of personal data about you.
- Confirm the categories and specific pieces of personal data about you that we have collected, used, disclosed, or shared with third parties.
- Correct inaccuracies or delete personal data about you.
- Object to or restrict processing of personal data about you.
- Opt out from direct marketing, profiling, and/or targeted advertising.
If you believe our processing of personal data about you does not comply with applicable laws, you may also have the right to lodge a complaint with your local supervisory authority.
We do not process your personal data for automated decision-making.
Our processing of your personal data may require transfer of your personal data outside of the European Economic Area and United Kingdom. In these cases we will take steps to apply approved safeguards, usually through approved data transfer agreements.
In some cases you may have the right to request a copy of these safeguards, which you can do by contacting us as described in the "How to contact us" section above.