Alcatraz Website Privacy Policy

At Alcatraz AI, Inc. (Alcatraz), we are committed to protecting your privacy and ensuring compliance with all applicable data protection laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the EU General Data Protection Regulation (GDPR), and the Biometric Information Privacy Act (BIPA). This policy outlines how we collect, use, and safeguard the personal information (Personal Data) of individuals who interact with our business website, Channel Partner portal and related business communications. 

As a business-to-business (B2B) company, this Privacy Policy primarily applies to website visitors and business contacts who interact with our corporate website and marketing materials, not to end-users of our facial authentication solution.

If you are an employee, or end user of an organization that uses the Alcatraz facial authentication solution, that institution’s privacy policy controls, you can learn how we process your data in our Facial Authentication Privacy Policy.

Privacy Matters at a Glance 

We understand that your privacy is important, and we want to make it as easy as possible for you to see how we collect and use your information. Your trust matters to us, and we’re here to be transparent every step of the way. As an overview:

• We don’t sell your personal information.
• We use cookies to improve your experience you can manage your preferences.
• We only collect Personal Data necessary to support business needs.
• You can access, update, or delete your information at any time.
• Our facial authentication solution processing privacy practices are governed by a separate policy.

Why Do We Collect Your Personal Data?

Alcatraz collects personal information from and about you when you visit our websites. This information is collected based on your consent, our legitimate interests, or as necessary to fulfill contractual obligations. It helps us provide the most useful information. We may use the information you share with us on our websites or services to tailor your experience, respond to your questions, contact and communicate with you, when necessary, direct you to an Alcatraz Partner to fulfill your orders and process payments, address any problems with or improve the services, or protect the security or integrity of our business.

What Type of Information Do We Collect?

We may also collect personal information when you engage with us on social platforms such as Facebook and LinkedIn, particularly if you sign up for webinars, events, or marketing updates using your individual profile. While our Services are business-focused, some of the information you provide—such as social media handles or form submissions—may be tied to your individual capacity, not just your business role. We treat this information with the same care and privacy protections outlined in this Policy. You can opt out of social integrations or request removal of social platform-related personal data by contacting us at:  privacy@alcatraz.ai

We may also collect personal information when you engage with us on social platforms such as Facebook and LinkedIn, particularly if you sign up for webinars, events, or marketing updates using your individual profile. While our Services are business-focused, some of the information you provide—such as social media handles or form submissions—may be tied to your individual capacity, not just your business role. We treat this information with the same care and privacy protections outlined in this policy.

Generally, you are not required to provide us with any information about using our websites or services. However, you may need to provide certain personal information to obtain support, research products, submit comments, or access the services (e.g., create an account, sign up for an email newsletter, or use our mobile application). Unless otherwise specified, we maintain your personal information as long as necessary to fulfill any associated business purposes.

We may also collect business location data relevant to Channel Partner territory management and regional deployment support, which helps us ensure you receive appropriate regional support for your business needs.

Data We Collect, Why We Collect It, and Legal Basis

We process EU residents’ personal data under one of the following legal bases:

• Contractual Necessity. To fulfill orders or deliver services via Channel Partners.
• Legitimate Interests. For B2B communications, fraud prevention, or improving our services.
• Consent. For marketing emails or non-essential cookies (you may withdraw consent anytime 

Do We Disclose Your Personal Data?

We may disclose personal information only on a need-to-know basis to our authorized Channel Partners, third-party service providers, consultants, advisers, or processors, including hosting companies, analytics providers, and other essential service providers who help us deliver and improve our services. 

We may share your personal information with our current and future parent entities, affiliates and subsidiaries, and other entities under common control and ownership to the extent necessary to fulfill the purposes permitted under this Policy.

The information we share may include what you give to us and what we collect about you, as noted above. If we share personal information to third parties, we require them to protect your personal  information in at least the same way that we do, including compliance with applicable data protection laws and confidentiality obligations.

Alcatraz may also disclose personal information in response to a lawful request from a law enforcement activity to enforce its contracts or property rights, or when otherwise required by law.

We do not collect or process sensitive personal information as defined under the California Privacy Rights Act (CPRA), such as government identifiers, precise geolocation, or financial account logins, unless required by law or specifically provided by you for business purposes.

Children's Privacy

Alcatraz’s products and services are designed exclusively for business use and are not directed to children under 18 Parents or guardians who believe that their child has provided us with personal information without their consent may contact us at privacy@alcatraz.ai to request deletion. 

Automated Decision-Making and Profiling

Alcatraz does not use your personal information to make decisions with legal or similarly significant effects. We do not engage in automated decision-making, scoring, or profiling that could impact your rights. We may analyze high-level business insights—such as product interest or deployment region—to better tailor our communications and support.

Individual Rights

You have the right to access, correct, delete, or restrict the processing of your personal data. You may also have the right to data portability, to object to certain processing, or to withdraw consent at any time. Alcatraz respects all applicable jurisdictional rights. You may also have the right to complain to the competent supervisory authority.

If you have signed up to receive newsletters, marketing emails, or participated in social sign-up forms, you may opt out of such communications at any time. You can unsubscribe by clicking the link provided in our marketing emails, by contacting us directly at privacy@alcatraz.ai or by changing your browser’s settings. We honor opt-out requests promptly.

To exercise any of your rights, email privacy@alcatraz.ai. We may verify your identity before responding to requests.

We will respond within the legally required timeframe. We will not discriminate against you for exercising your privacy rights. 

For European Economic Area (EEA) and United Kingdom Residents

If you are located in the EEA or UK, the applicable General Data Protection Regulation (GDPR) grants you the following rights regarding your personal data:

• Right of Access. Request confirmation of whether we process your data and receive a copy.
• Right to Rectification. Update inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): Request deletion of your data under specific circumstances (e.g., if it is no longer necessary for the purpose it was collected).
• Right to Restrict Processing. Limit how we use your data (e.g. if you dispute its accuracy).
• Right to Data Portability. Receive your data in a structured, machine-readable format.
• Right to Object. Object to processing based on legitimate interests, direct marketing, or research.

To exercise these rights for EEA, contact: 

EU Representative:

Alcatraz EU Privacy Representative:
Alcatraz Bulgaria EOOD
1Mladost, 8 "Dimitar Mollov"
1750 Sofia
Bulgaria
Email: privacy@alcatraz.ai

For UK contact:

Keely Masterson
Unified Law Group, PB LLC
Email: k.masterson@unified.law

You may also have the right to complain to the competent supervisory authority. Contact details of Data Protection Authorities in the European Economic Area can be found on the website of the European Data Protection Board (EDPB) here, and in the UK on the website of the Information Commissioner’s Office (ICO) here.

States Specific Disclosures

• California. You have the right to opt out of the “sale” or “sharing” of personal information, even in a B2B context. Alcatraz does not sell personal data, but we do share business contact information with Channel Partners to fulfill customer interest and support.
• Virginia/Colorado/Connecticut/Utah. You may opt out of targeted advertising or profiling. Alcatraz does not profile individuals in a way that has legal effects.
• Nevada. You may opt out of the sale of covered information. Alcatraz does not sell covered information as defined under Nevada law.
• Canada. You may access, correct, or delete personal data under PIPEDA. You also have the right to challenge compliance through the Privacy Commissioner of Canada.

Worldwide Data Privacy Legislation

Information about applicable data privacy legislation per country can be found here.

International Data Transfers 

Your personal information may be transferred to or accessed by Alcatraz AI subsidiaries and third parties globally. We comply with laws on the transfer of personal information between countries to keep your personal information protected.

We have implemented various safeguards including Standard Contractual Clauses (SCCs), Data Protection Agreements to ensure adequate level of protection. 

You can request a copy of our EU SCCs by contacting us at privacy@alcatraz.ai.

Third Party Sites 

Our websites may embed content provided by others or include links to other websites and applications. These companies may collect information about you when you interact with their content or services. We are not responsible for the collection of fata by these third parties. Please consult their privacy policies to learn about their privacy.

Cookies 

We use cookies and similar tracking technologies for analytics, personalization, and marketing purposes. Information that is collected with these technologies may be necessary to operate the website or service, to improve performance, to help us understand how our online services are used, or to determine the interests of our users. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Alcatraz services or websites you visit. You can adjust your cookie preferences at any time by using browser settings, you can see how at https://www.allaboutcookies.org/.  

For more information, please visit our Cookie Policy.

Security 

We use commercially reasonable physical, administrative, and technical security measures to protect your data such as encryption multi-factor authentication, access control. . We also require our Channel Partners, suppliers, and third parties to implement appropriate safeguards, such as contract terms and access restrictions, to protect information from unauthorized access, use, and disclosure. In order to protect our customers and company assets, information and systems, Alcatraz has achieved ISO 27001 certification, for more information visit our press release.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including complying with legal, regulatory, accounting, or reporting requirements. Below is a summary of our standard retention periods:

Once the applicable retention period expires, we securely delete or anonymize the data, unless we must retain it longer to comply with legal obligations. 

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in technology, law, and our practices. The updated version will be posted on this page with a revised “Effective Date.” We encourage you to review this page periodically.

Contact Us

If you have questions or requests related to this Privacy Policy, you may contact:

Alcatraz AI, Inc.10061 Bubb Rd
Cupertino, CA 95014
Email: privacy@alcatraz.ai

or

EU Legal Representative:

Alcatraz EU Representative under art. 27 GDPR
Alcatraz Bulgaria EOOD
1Mladost, ul. "Dimitar Mollov" 8
1750 Sofia
Bulgaria