Last Updated: June 3, 2024
This Privacy Policy describes how Atypical AI Corp. ("Atypical AI," "we", "us" or "our") handles personal information that we collect through our websites that link to this Privacy Policy and the Atypical AI application (collectively, the “Service”), as well as through our marketing and other activities described in this Privacy Policy.
For details regarding data collection through cookies and other technologies, see our Cookie Notice.
Individuals in the EEA/UK: See our Notice to European users for information about your personal information and data protection rights.
If you have any questions or concerns about our use of your personal information, please contact us.
Scope of this Privacy Policy
Atypical AI provides educational publishers with an AI infrastructure for their textbooks, enabling teachers and students to have an AI-powered teaching and learning experience. This Privacy Policy does not apply to personal information that Atypical AI processes on behalf of customers in our capacity as a processor or service provider pursuant to our contracts with those customers, which restrict how we handle that personal information.
Personal information we collect
The personal information we collect from you, either directly or indirectly, will depend on how you interact with us and with our Service. In general, we collect personal information about you from the following sources:
Information you provide to us. Personal information you may provide to us through the Service, at our events or otherwise includes:
If we collect personal information from you not specifically listed above, we will use it consistent with this Privacy Policy or as otherwise explained at the time of collection.
Information automatically collected. As you navigate the Service, our communications, and other online services, we and our service providers may automatically collect information about you, your computer or device, and your browsing actions and use patterns, such as:
Cookies and similar technologies. Some of the information we collect automatically is captured using cookies and similar technologies as described in our Cookie Notice.
Third party sources. We combine personal information we receive from you or collect automatically when you use the Service with personal information we obtain from other sources, such as:
How we use your personal informationWe use your personal information for the following purposes or as otherwise described in this Privacy Policy or at the time of collection:
Service delivery. We use your personal information to register your account on our Service, to manage and administer your Service account, and to provide the Service, including providing personalized educational experiences based on inferences derived from the personal information we collect, facilitating user interaction, and tracking learning progress. We use your personal information to communicate with you about our Service (including via support and administrative messages).
Business operations. We use your personal information to administer and maintain our Service and our IT systems (including monitoring, troubleshooting, data analysis, testing, system maintenance, repair and support, reporting and hosting of data) and to operate our business.
Research and development. As permitted by applicable law, we use your personal information for research and development purposes, including to analyze and improve the Service and our educational products and services in an informed way. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze, improve and promote the Service and our business. We may use students’ or teachers’ input data to improve our Services and train our proprietary machine learning models. We do not use students’ or teachers’ input data to train third-party AI models without consent.
Direct marketing. As permitted by applicable law, we may collect and use your personal information to send you marketing emails we think may interest you. We do not send marketing emails to K-12 students or teachers or use their personal information to target them with ads. You may opt-out of our marketing communications as described in the Opt-out of Marketing section below.
Compliance and protection. We use your personal information to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities. We also use your personal information to protect our, your or others’ rights, privacy, safety, or property (including by making and defending legal claims), including by conducting internal audits against our policies; enforcing the terms and conditions that govern the Service; and taking steps to prevent, investigate and deter fraud, cyberattacks or other unauthorized, unethical, or illegal activity.
How we share your personal informationWe may share your personal information with the following categories of recipients and as otherwise described in this Privacy Policy or at the time of collection. We do not sell teachers’ or students’ personal information, or share it with third parties for their own marketing purposes.
Educational institution members. If you are in the same educational institution, we share personal information that you authorize us to share with other members of that institution. We share personal information of students, such as communications with a chatbot or assignments, with teachers.
Service providers. Third parties that provide services on our behalf or help us operate the Service or our business (such as business applications, hosting, content delivery network, other information technology, customer support, email delivery, marketing, payment processing, chatbot, session replay, artificial intelligence, customer research, and analytics). We do not permit these service providers to train on personal information.
Authentication services. When you log into the Service by using your credentials on a third party service, such as Google and Microsoft, or a textbook publisher’s platform, that service may collect your credentials and other data to facilitate the authentication. You can read Google’s privacy policy here: https://policies.google.com/privacy and Microsoft's privacy policy here: https://privacy.microsoft.com/en-us/privacystatement.
Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
Business transferees. Parties (and their advisors) to business transactions (or negotiations of or due diligence for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Atypical AI (including, in connection with a bankruptcy or similar proceedings).
Your choicesThis section applies to all users. Some users may also have additional rights under applicable privacy laws, as described in the relevant region-specific sections below. If you do not provide information we identify as required or mandatory, we may not be able to provide features or services that require that information.
Access or update your information. You may review and update certain Service account information by logging into your account.
Opt-out of marketing communications. You may opt-out of marketing emails at any time by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us with your request. Please note that if you opt-out of marketing emails, you may continue to receive service-related and other non-marketing emails.
Cookies. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. See our Cookie Notice for more information about how to control cookies.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Other sites and services
The Service may contain links to or integrations of websites and other online services operated by third parties. In addition, the Service and our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or other online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.
Security
We use technical and organizational safeguards designed to protect the personal information we process. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.
Retention
We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for the compliance and protection purposes described above. Factors determining the appropriate retention period for personal information include the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we process the personal information, whether we can achieve those purposes through other means, and the applicable legal requirements.When we no longer require the personal information, we have collected about you, we will either delete or anonymize it (so that it is no longer personally identifiable with you) or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will isolate your personal information from any further processing, employing security safeguards designed to protect it, until deletion is possible.
International data transfers
We are headquartered in the United States and may use service providers that operate in the United States and other countries other than the country in which you are resident. These countries may have data protection laws that differ from those of your country (and, in some cases may not be as protective as those in your state, province, or country). Individuals in the United Kingdom and the European Economic Area should read the information provided below about transfer of personal information outside of those locations.
Children
For children between 13 and 18 years of age, see our Privacy Policy for Children. The Service is not intended for use by children under 13 years of age. If you are a parent or guardian of a child under 13 from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child under 13 without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledgment that the modified Privacy Policy applies to your interactions with the Service and our business.
How to contact us
If you have questions or concerns about this Privacy Policy or our practices, please contact us at privacy@atypicalai.com or by mail at 608 Upson Street, Austin, TX 78703, USA.
Notice to European users
The information provided in this notice applies only to individuals in the United Kingdom (“UK”), the European Economic Area (“EEA”) and Switzerland (we collectively refer these countries as “Europe”).The personal information that we collect from you is identified and described in greater detail in the section of the Privacy Policy entitled Personal information we collect.
Controller. Atypical AI Corp. is the controller of your personal information described in this Privacy Policy. See the How to contact us section above for contact details.
Legal bases for processing. European data protection law requires that we have a “legal basis” for each purpose for which we process your personal information. Depending on the purpose for collecting your information, we may rely on one of the following legal bases:
The table below identifies the legal bases we rely on in respect of the relevant purposes for which we use your personal information. For more information on these purposes and the categories of personal information involved, see the section in the Privacy Policy entitled How we use your personal information.
| Processing purpose | Types of personal information processed | Legal basis |
|---|---|---|
| Service delivery |
|
Contractual Necessity. If we have not entered a contract with you, we process your personal information based our Legitimate Interests (in providing the Services you access or request) |
| Business operations |
|
Contractual Necessity. If we have not entered a contract with you, we process your personal information based our Legitimate Interests (in providing the Services you access or request) |
| Research and development |
|
Our Legitimate Interests (in analyzing and improving our educational services and our business). |
| Marketing |
|
Our Legitimate Interests (in promoting our products and services through marketing communications). In circumstances or in jurisdictions where consent is required under applicable data protection laws, we rely on your Consent to send direct marketing communications. |
| Sharing your personal information as described in this Privacy Policy |
|
We use the original legal basis relied upon if the relevant further use is compatible with the initial purpose for which the personal information was collected. Otherwise, we rely on your Consent. |
| Compliance and Protection |
|
Compliance with Law (where processing is necessary to comply with our legal obligations). Otherwise, we rely on our Legitimate Interests (in protecting our, your or others’ rights, privacy, safety or property). |
Use for new purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.
Sensitive personal information. We do not collect sensitive personal information (e.g., government-issued ID numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) and ask that you do not provide us with any such information. Examples of personal information that you should not provide include your address, medical information, and financial information.
Your rights. European data protection laws give individuals in Europe the following rights regarding their personal information:
Exercising those rights. Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the personal information or where certain exemptions apply. If we decline your request, we will tell you why, subject to legal restrictions.
To exercise any of these rights, please contact us. We may request specific information from you to help us confirm your identity and process your request.
Your right to lodge a complaint with your supervisory authority. If you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.
For users in the EEA: The contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en
For users in the UK: The contact information for the UK data protection regulator is below: The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow - Cheshire SK9 5AF
Tel. +44 303 123 1113
Website: https://ico.org.uk/make-a-complaint/
International data transfers. We are headquartered in the United States and may use service providers that operate in the United States and other countries. Therefore, we may transfer your personal information to recipients outside of the European Economic Area and/or the UK. Some of these recipients are located in countries which have been formally recognized as providing an adequate level of protection for personal information by the European Commission and Secretary of State in the UK, in which case, we rely on the relevant "adequacy decisions".
Where the transfer is not subject to an adequacy decision or regulations, we take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy and applicable laws by entering into appropriate data transfer mechanism permitted under Article 46 of the GDPR / UK GDPR (as applicable), such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum (as applicable). A copy of our data transfer mechanism can be provided on request.