Privacy Policy

1. Introduction

Precise.ai, Inc. (“Precise,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website at precise.ai (the “Site”) or interact with us, such as when you request a demo or contact our sales team.

Precise also operates a media economics platform (the “Service”) in which we process data on behalf of our clients. Our handling of that data is addressed separately in Section 4 below and governed by our Data Processing Agreements with each client.

2. Information We Collect Directly

2.1 Information You Provide

The personal information we collect directly from individuals is limited. We may collect:

• Name and business email address, provided when you request a demo, fill out a contact form, or correspond with us.
• Company name and job title, if you choose to provide them.
• The content of communications you send us (emails, support requests, feedback).

We do not collect payment card information directly. If billing is required, it is handled through our invoicing process or a third-party payment processor.

2.2 Information Collected Automatically

When you visit the Site, we automatically collect certain technical information:

• Device and browser information (IP address, browser type, operating system).
• Usage data (pages visited, time on site, referring URL).
• Approximate geographic location derived from IP address (city or region level only).

2.3 Cookies and Analytics

We use a limited set of cookies on the Site:

• Strictly Necessary Cookies: required for site functionality, such as session management. These cannot be disabled.
• Analytics Cookies: we use Google Analytics to understand how visitors interact with the Site. Google Analytics collects data such as page views and session duration. Google’s use of this data is governed by its own privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.

We do not use advertising, retargeting, or behavioral tracking cookies. You may control cookie preferences through your browser settings.

3. How We Use Your Information

We use the personal information we collect directly (names, email addresses, and related contact information) for the following purposes:

• To respond to your inquiries, demo requests, and support questions.
• To send administrative communications related to our Service (e.g., service updates, security notices).
• To send marketing communications about Precise products and services. You may opt out at any time by clicking the “unsubscribe” link in any marketing email or by emailing privacy@precise.ai.
• To analyze Site traffic and improve the Site experience (using aggregated, non-identifying analytics data).
• To detect, prevent, and address security threats and fraudulent activity.
• To comply with applicable laws and legal obligations.

4. Client Data and Our Role as Sub-Processor

Precise provides media economics services to clients who are data controllers (or processors acting on behalf of controllers). In this capacity, Precise acts as a sub-processor, processing data solely on behalf of and under the documented instructions of our clients.

4.1 What Is Client Data

“Client Data” means any data that a client uploads to, transmits through, or processes via the Service in connection with our media economics platform. This may include campaign performance metrics, media spend data, audience information, and related records.

4.2 How We Handle Client Data

• We process Client Data only as instructed by the client and as set forth in our Data Processing Agreement (DPA) with each client.
• We do not sell, rent, share, or use Client Data for any purpose other than providing the Service to the client.
• Client Data is logically segregated on a per-client basis.
• We do not access Client Data except as necessary to provide the Service, to respond to technical issues, or as required by law.

4.3 AI and Machine Learning

Our platform uses artificial intelligence and machine learning capabilities to deliver media economics insights. These AI/ML features process Client Data as part of the Service. Specifically:

• AI/ML processing is performed solely to deliver the analytics and insights that form part of the Service.
• We do not use one client’s data to train models that benefit other clients unless the data has been fully anonymized and aggregated such that it cannot be re-identified.
• AI/ML outputs are provided to the client as part of the Service and are treated as Client Data.
• Our AI/ML features do not make decisions that produce legal or similarly significant effects on individuals. The outputs are analytical tools provided to the client, who retains decision-making authority.

Precise does not independently verify the accuracy or completeness of Client Data and is not responsible for errors, omissions, or limitations in data provided by the client or third-party platforms.

4.4 Client Responsibilities

Our clients are responsible for ensuring they have the appropriate legal basis to share Client Data with us and for providing any required privacy notices to their own end users or data subjects. If you have questions about how your data is handled by one of our clients, please contact that organization directly.

4.5 Data Processing Agreements

Our obligations regarding Client Data, including security requirements, sub-processor disclosures, data breach notification procedures, and data return/deletion, are governed by our DPA with each client. A copy of our standard DPA is available upon request at privacy@precise.ai.

5. Data Sharing and Disclosure

5.1 We Do Not Sell Personal Information

Precise does not sell or share (as those terms are defined under applicable state privacy laws) personal information for monetary or other valuable consideration. This applies to both the personal information we collect directly and to Client Data.

5.2 Service Providers

We may share personal information with third-party service providers who assist us in operating the Site and Service. These providers are bound by contractual obligations to protect your information and to use it only for the purposes for which it was disclosed. Categories include:

• Cloud infrastructure and hosting providers
• Analytics services (Google Analytics)
• Email delivery services
• Customer relationship management platforms

A list of sub-processors involved in the processing of Client Data is maintained and made available to clients as required by our DPA.

5.3 Professional Advisors

We may share information with our lawyers, accountants, and auditors as necessary for them to provide professional services, subject to confidentiality obligations.

5.4 Legal Requirements

We may disclose personal information when we believe in good faith that disclosure is necessary to comply with applicable law or legal process, enforce our agreements, protect the rights, safety, or property of Precise or others, or detect and prevent fraud or security issues.

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of the transaction. We will provide notice before your information becomes subject to a different privacy policy.

6. Data Security

We implement and maintain reasonable administrative, technical, and organizational security measures to protect information against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access controls and least-privilege access principles.
• Multi-factor authentication for administrative and platform access.
• Regular vulnerability assessments and penetration testing.
• Employee security awareness training.
• Documented incident response procedures.

Precise maintains SOC 2 Type II compliance, validated through annual independent audits. Additional detail on our security practices is available on our Data Governance page.

No method of transmission or storage is completely secure. While we strive to protect information, we cannot guarantee absolute security.

7. Data Breach Notification

In the event of a security breach involving personal information, we will notify affected individuals and applicable regulatory authorities as required by law. Our breach notification process includes:

• A description of the incident and the types of information involved.
• The steps we are taking in response.
• Guidance on how affected individuals can protect themselves.
• Notification within the timeframe required by applicable state breach notification laws.

For Client Data breaches, we will notify the affected client without undue delay and in accordance with our DPA, enabling the client to fulfill its own notification obligations to data subjects and regulators.

8. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected:

• Prospect contact information (name, email) is retained for the duration of the business relationship or active sales engagement, and for up to 2 years following last contact unless you request deletion sooner.
• Site analytics data is retained in aggregated, non-identifying form.
• Client Data is retained in accordance with the applicable DPA. Upon contract termination, Client Data is deleted or returned to the client within 30 days, unless retention is required by law.

When information is no longer needed, we securely delete or anonymize it.

9. Your Rights and Choices

9.1 All Individuals

Regardless of where you are located, you may:

• Opt out of marketing emails at any time by using the “unsubscribe” link or emailing privacy@precise.ai.
• Request access to, correction of, or deletion of the personal information we hold about you.
• Control cookies through your browser settings.

9.2 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), provides you with additional rights:

• Right to Know: request disclosure of the categories and specific pieces of personal information we have collected, the sources, the purposes, and the third parties with whom we have shared it.
• Right to Delete: request deletion of your personal information, subject to certain legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell or share personal information for cross-context behavioral advertising, so no opt-out is necessary.
• Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights.

To exercise these rights, submit a request to privacy@precise.ai. We will verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf.

Note: If your personal information was provided to us by one of our clients as part of Client Data, please direct your privacy request to the client (the data controller). We will cooperate with the client in responding to your request as required by our DPA.

9.3 Other State Privacy Laws

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Texas, Oregon, and others, may have similar rights to access, correct, delete, and port their personal information, and to opt out of targeted advertising and certain profiling.

To exercise these rights, contact us at privacy@precise.ai. If we deny your request and your state law provides an appeal right, you may appeal by contacting us with the subject line “Privacy Appeal.” If your appeal is denied, you may contact your state’s attorney general.

10. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. There is no universally accepted standard for responding to DNT signals. At this time, we do not respond to DNT signals. We will update this Policy if a uniform standard is established.

11. Children’s Privacy

The Site and Service are business-to-business services not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at privacy@precise.ai and we will promptly delete it.

12. Third-Party Links

The Site may contain links to third-party websites or services not operated by Precise. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated Policy on this page with a revised effective date.
• Notify known contacts via email at least 30 days before material changes take effect.

Your continued use of the Site or Service after the effective date of a revised Policy constitutes acceptance of the changes.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint, please contact us:

Precise.ai, Inc.
Email: privacy@precise.ai