HUMAIN - WEBSITE PRIVACY NOTICE

This Privacy Notice describes how we collect and use information about you when you use our website https://www.humain.ai (and any components thereof, the “Site”), applications, services, tools and features, or otherwise interact with us (collectively, the “Services”).

We are a joint stock company established in the Kingdom of Saudi Arabia (“KSA”) with our full name Al-Mustaqbal Lil-Thaka Al-Istinai Company, also known as Future Artificial Intelligence Company (“HUMAIN”), registered under commercial registration number 1009089438, with our office located at King Fahad District 3254, King Fahad Branch Road 7295, Post Code 12262, Riyadh, KSA, and we are the data controller for the processing of your information.

Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not use or access the Services.

The Site and Services are not intended for children under the age of 18, (or another age of legal capacity in the appropriate jurisdiction), and we do not knowingly collect data relating to children. Children must not use the Services, except where their parent or guardian has provided consent, if this option is available in your location.

We may modify this Privacy Notice from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Notice. If we make material changes to the way in which we use information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not access or continue to use the Services.

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

Information You Provide to Us

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. You may provide some or all of the following information to us when you apply or subscribe to and use the Site and Services, set up a profile on our Services, sign up for our newsletters or alerts, or contact us via the Site, our Services, or by telephone, text/SMS, email, social media, instant chat, our “contact us” page, or otherwise:

• Basic contact details, such as full name, address (including city and country of residence), phone number, and email.
• Payment-related information, including (but not limited to) bank account, credit or debit card information, which will be collected if you subscribe to a paid functionality in connection with the Services.
• Account information, such as username, password, and security questions that you select and the answers you provide. If you choose to use the Services and register an account, additional data may be required. You are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.
• User-generated content, such as messages, photos, and recordings, submitted by you through the Site and in connection with your use of our Services (“UGC”). We or others may store, display, reproduce, publish, or otherwise use UGC, and may or may not attribute it to you. Others may also have access to UGC and may have the ability to share it with third parties. If you choose to submit UGC to any public area of the Services, your UGC will be considered “public” and will be accessible by anyone, including us.
• Audio data and conversation data, which may be collected when you interact with our Services through voice-enabled features or customer support channels.
• Data through third-party authentication providers, which may include information such as your profile details, when you choose to log in or interact with our Services using third-party authentication services.
• Any other information you choose to include in communications with us, for example, when sending a message through the Services.

Information We Collect Automatically

When you visit the Site and use our Services we automatically collect the information sent to us by your computer, mobile phone or other device. This information includes: (i) your IP address; (ii) device information including, but not limited to, name and type of operating system; (iii) mobile network information; (iv) standard web information such as your browser type and the pages you access on our Site; (v) transaction information (but not payment card or account details), including device information, transaction details, and IP address; (vi) security information including a list of certain installed software, device and internet connection information, and available space on the device.

We process your information in order to perform our agreement with you, such as:

• Provide you with our Services, other content and Site functionality (including answering requests for customer and technical support).
• Register and maintain your account with us.
• Answering requests for customer or technical support.
• Processing your financial information and other payment methods for products or Services purchased.
• Communicating with you about your account, activities on our Services, and policy changes.

We obtain your consent to process your information for the following reasons:

• Sign you up for our newsletters or alerts.
• Personalise our Services for you.
• If you opt-in to marketing, to communicate with you about products, services, marketing, promotions, events and other news and information we think will be of interest to you.
• Enhance and improve our Services, including the refinement and development of our artificial intelligence models (including but not limited to HUMAIN Chat), ensuring better accuracy and user experience.

In order to be responsive to you, to provide effective services to you, and to maintain our business relationship, as a matter of our legitimate interests, we will use your information to:

• Administer the Site and Services, and for internal operations, in order to conduct troubleshooting, data analysis, testing, research, statistical and survey analysis.
• Maintain the safety and security of our users, the Site, our Services, and business.
• Send you announcements in relation to security, privacy or administrative related communications (these communications are not marketing orientated, and we do not rely on consent, so you may not opt-out).
• Personalize the Site and our Services to ensure content is presented in the most effective manner for you and your device.
• Improve and develop our products.

In addition, we will use some or all of the above information to comply with applicable legal obligations, to enforce our contractual arrangements and our policies, and to protect or defend the Services, our rights, the rights of our users, or others.

We disclose your information with third parties in certain circumstances, subject to this Privacy Notice, including:

• With service providers and vendors (including data analytics vendors, security vendors, and website hosting vendors) that assist us to provide the Site and Services to you.
• When you request us to share certain information with third parties (including through your use of social media widgets or login integrations) with your consent or to perform a contract with you.
• With professional advisors (including auditors, law firms, or accounting firms) in our legitimate interests or as required by applicable law.
• For legal and security reasons and to protect the Site, our Services, our other assets, services and business, in our legitimate interests or as required by applicable law. We will share your information with regulators, law enforcement agencies, public authorities, or any other relevant organisations: to comply with applicable law or obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries; to protect the interests of, and ensure the safety and security, of us, our users, a third party or the public; to exercise or defend legal claims; and to enforce our terms and conditions or other agreements.
• With our affiliates or otherwise within our corporate group, in our legitimate interests.
• With a prospective buyer, seller, new owner, or other relevant third party in connection with or anticipation of an asset sale or purchase, a share sale, purchase or merger, bankruptcy, or other business transaction or re-organisation (including while negotiating or in relation to a change of corporate control), in our legitimate interests.

The information that we collect from you may be accessed from, transferred to, and stored and used in countries outside the country in which you are located or the KSA (if different), by us and by our third party service providers or partners. We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this Privacy Notice.

Where legally required, transfers of personal data outside the KSA will take place to jurisdictions deemed to provide an adequate level of protection for personal data by the relevant competent authority in the KSA, or alternatively will take place on the basis of an appropriate safeguard or exception.

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We will retain and use your information as long as necessary based on our consideration of various criteria, including whether we need the information to continue providing you the Services, comply with our legal obligations, resolve disputes, enforce our contractual agreements and our policies, prevent harm, promote safety, security and integrity, and to protect or defend the Services, our rights, the rights of our users, or others. We may also store your information in an aggregated and anonymized format; we may use this information indefinitely without further notice to you.

Under data protection laws, you may have several rights regarding the processing of your personal data. These rights may vary depending on the purpose of data collection and processing:

• Right to Be Informed: You have the right to be informed about how we collect, process, store, and destroy your personal data, as well as the legal basis for these activities and to whom your data may be disclosed. This information is available in this Privacy Notice. Note that there may be certain restrictions to this right, such as when disclosure would compromise the privacy of others or when legal obligations prevent full disclosure.
• Right of Access to Your Personal Data: You are entitled to request access to your personal data in a clear and readable format. Please be aware that there may be restrictions to this right, such as when access would reveal personal data about another individual or when access is restricted by applicable law.
• Right to Request Correction of Your Personal Data: If you believe that any personal data we hold about you is inaccurate, incorrect, or incomplete, you have the right to request its correction.
• Right to Request Destruction of Your Personal Data: In certain circumstances, you have the right to request the destruction of your personal data. This right is subject to legal bases and obligations that may require us to retain certain data.
• Objection to Marketing: You can object to marketing at any time by opting-out using the unsubscribe/opt-out function displayed in our communications to you.
• Right to Withdraw Your Consent for Processing Your Personal Data: Where you have provided your consent for processing, you may withdraw your consent for the processing of your personal data at any time.

To exercise any of these rights, please contact [email protected].. We will respond to requests to exercise these rights in accordance with the timelines set out in the applicable law.

In addition, you may make a complaint to us (using the contact details above) if you have concerns regarding how we process your personal data. You may also make a complaint to the competent authority, which for the Kingdom of Saudi Arabia is the Saudi Data and AI Authority (contactable via www.sdaia.gov.sa).

Please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by applicable law. For example, if fulfilling your request would adversely affect other individuals or if we are required by applicable law to retain your information.

10.1 Cookies and Other Technologies

A "cookie" is a small text file that a website downloads onto your web browser or internet-connected devices, like a mobile phone or tablet, when you visit a website. The purpose of these cookies is to help the website identify and remember your device for your future visits.

Cookies serve a wide range of functions, including remembering your preferences, monitoring your online activities, and enhancing your overall user experience. They empower the website's owner to distinguish between the actions taken by your device and those of other website users on the same website.

It is important to note that the majority of cookies do not gather information that directly identifies you as an individual. Instead, their focus is on collecting more generalized data, such as your approximate location or how you find and utilize websites.

While cookies are the most well-known tracking technology, there are others, which function in a similar fashion. These alternative methods could encompass technologies like web beacons, pixel tags, and local storage (“ Other Technologies”). Their collective aim is to gather data about your online behaviour, offering websites insights into how you interact with their content.

The objective of employing these cookies and Other Technologies is to gather information about your Site usage patterns. This encompasses the pages you visit, the duration of your visits, and how you engage with the content. This data is invaluable for our Site to optimize our Services and cater to your user preferences, it also helps improve Site performance and enhance security.

10.2 First-Party Cookies and Third-Party Cookies

“First-party cookies" are cookies that are directly associated with and placed on your device by Humain, the entity responsible for this Site. Conversely, "third-party cookies" are cookies that are placed on your device through our Site by a different party.

The utilization of first-party and third-party cookies serves specific functions. First-party cookies are employed for our own Site's needs, whereas third-party cookies, placed by external entities, come into play when we partner with these service providers for tasks like analytics and performance evaluation. It is important to note that these cookies are valuable tools for optimizing and personalizing the online experience for our Site users.

We employ different types of cookies on our Site, depending on its specific requirements:

• Persistent Cookies: These cookies are used for the long term to enhance your experience on our Site. For instance, they record your agreement with our cookie policy, allowing us to remove the initial cookie message that appears when you first visit our site. Persistent cookies will be retained by your web browser and remain valid until a predetermined expiration date unless you manually delete it before that date.
• Session Cookies: Session cookies are temporary in nature and are automatically deleted from your device as soon as you close your web browser. We utilize these cookies to track your internet usage, as described earlier. Session cookies has a shorter lifespan and expires at the conclusion of your web session, specifically when you close your web browser.

We are committed to ensuring that the data collected by our Site and/or through cookies is not retained longer than necessary to fulfil the purposes mentioned earlier. In any case, this information will not be retained for a period exceeding one year. This approach aligns with our commitment to safeguarding your privacy and data.

Our Cookies are used for the following purposes:

• Strictly Necessary/Technical Cookies: These cookies are essential for the basic functioning of our Site, allowing you to access the content you have requested. They are responsible for recognizing when you have created an account and logged in. These cookies also remember your previous actions during your browsing session, enhancing security and the seamless operation of our Site. We do not need to obtain your consent to use these cookies and these cookies cannot be turned off as we cannot provide the Site without them.
• Analytical/Performance Cookies: We, along with third-party service providers, use these cookies to analyze how our Site is used and assess their performance. For instance, these cookies track which pages are most frequently visited and the geographical locations of our visitors. If you subscribe to a newsletter or register with our Site, these cookies might be associated with your profile. Examples of such cookies include Google Analytics Cookies. These cookies gather information in a way that maintains anonymity. This information includes the Site visitor count, the sources from which visitors originate, and the specific pages they have viewed.
• Functionality Cookies: Functionality cookies adapt our Site to your preferences and choices. They help us "remember" you between visits. For instance, these cookies recognize your username and recall how you have customized our Site and Services, such as adjusting text size, fonts, language settings, and other alterable aspects of our Site. These customizations are then seamlessly applied during your future visits.
• Third-Party Advertising Cookies: These cookies are employed to gather information about your activities on our Site and other websites. Their purpose is to provide you with targeted advertising. Additionally, we may permit third-party service providers to use cookies for similar purposes. They collect data about your online activities over time and across various websites. These third-party providers have their own privacy policies and may employ their cookies to target advertising on other websites based on your interactions with our Site.

To view an entire list of the cookies that are used by our Site, click on the following link: [“Manage cookies preferences”]

Website Cookies

Google Analytics is a web analytics tool that helps us understand how users engage with our Services. Like many providers, Google Analytics tracks user interactions on websites. This information is used to compile reports and to help us improve our Services. The reports disclose trends on our Services without identifying individual visitors. For more information on Google Analytics, see: https://marketingplatform.google.com/about/analytics You can opt out of Google Analytics without affecting how you engage with our Services – for more information on opting out from Google Analytics tracking across all Services you use, visit this Google page: https://tools.google.com/dlpage/gaoptout..

10.3 How to Decline or Revoke Your Cookie Consent

• Browser Settings: If you prefer not to have cookies stored on your device, you can modify your internet browser settings to either reject cookies or permit only certain types. Additionally, you can configure your browser to notify you when a cookie is being placed on your device. However, it's important to note that if you choose to block all cookies, even those that are strictly necessary for the Site's operation, it may limit your ability to access and use all or certain features and functions on our Site. If you wish to delete cookies that were previously stored on your device, you can manually remove them at any time. Keep in mind that doing so will not prevent our Site from placing additional cookies on your device unless you adjust your internet browser settings as described above.
• Preference Centre: Where available, you may also be able to change your cookie settings at any time in our preference centre, available via the cookie banner. In essence, you have the option to control and manage cookies, but this may impact your experience on our Site, especially if you block all cookies, including those necessary for the Site's basic functionality.

10.4 Utilizing Other Tracking Technologies in our Communications:

At Humain, we employ additional tracking technologies to enhance our understanding of your interaction with the knowledge, research, or event communications we send you. These technologies enable us to gather information about whether you have opened our messages or clicked on any embedded links. One of these technologies, known as a web beacon, plays a pivotal role in this process.

A web beacon is a small graphic image that can be placed within a website or an email. It functions alone or in conjunction with cookies to collect data about how you use or engage with the Site or email.

The analysis generated from these tracking technologies aids us in refining the effectiveness of our Site and email communications. By understanding how you engage with our content and the format of our messages, we can tailor our communications to better suit your preferences and needs.

You can prevent web beacons from being activated by configuring your email reader program to disable the feature that loads remote images. Additionally, you can avoid interacting with any links included in email messages to ensure that web beacons are not triggered. This way, you have control over the information gathered through these tracking technologies when you access and read your emails.

We welcome your questions and feedback about our privacy practices and this Privacy Notice. You can contact us at [email protected].

Except as otherwise prescribed by applicable law, in the event of any inconsistency between the English language version and local language version of this Privacy Notice, the Arabic language version (once available) will prevail.