1. Introduction

DigiRiskAsses ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application (the "Service").

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Service includes:

• Personal Data: Personally identifiable information, such as your name, employee number, and contact details, that you voluntarily give to us when you register with the Service.
• Biometric Data: Facial geometry data, which is converted into a secure, non-reversible template for identity verification purposes. We do not store raw images of your face for authentication.
• Assessment Data: Text descriptions, photographs, and videos you upload as part of a risk assessment. This may include images of your workplace and tools.
• Derivative Data: Information our servers automatically collect when you access the Service, such as your IP address, browser type, and operating system.

3. Use of Your Information

Having accurate information permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your account.
• Provide and improve the AI-powered risk assessment services.
• Use uploaded images and text to train and refine our AI models to improve safety detection capabilities. All data used for training is anonymized where possible.
• Monitor and analyze usage and trends to improve your experience with the Service.
• Perform other business activities as needed.

4. Disclosure of Your Information

We do not share your personal information with third parties except as described in this policy. We may share information we have collected about you in certain situations:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.
• Third-Party Service Providers: We may share your information with third-party vendors, service providers, or agents who perform services for us or on our behalf, such as cloud hosting (Google Cloud) and AI model providers (Google AI).
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

6. Your Rights

Depending on your jurisdiction (e.g., GDPR in Europe, POPIA in South Africa), you may have the following rights regarding your personal data:

• The right to access – You have the right to request copies of your personal data.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

To exercise these rights, please contact us at the contact information below.