Privacy Policy.

Across AI, Inc.

Across AI, Inc. ("Across AI", "we", or "us") respects and values your privacy. In this Privacy Policy, we describe how we handle, collect, process, use, disclose and secure your personal information when you visit our website or use our applications, Product or services (collectively, the "Services").

By accessing and using our Services, you acknowledge that you have read and understood the content of this Privacy Policy. Accordingly, if you do not agree to the terms of this Privacy Policy, do not use the Services.

Please note that this Privacy Policy does not apply to any personal information we collect in connection with providing our enterprise customers with Across AI's AI driven sales engagement platform ("Product"), other than certain personal contact data that we process as a controller, such as account information and payment information. Our enterprise customers are the controllers because they decide the purposes and means of processing the personal information and Across AI has the role of a service provider and processor. Where our enterprise customers process personal information through the Product, they retain full accountability for any data they choose to upload to the Product, and are responsible for ensuring that the personal information they provide is accurate and up to date. If you have any questions regarding how your personal information is processed within the Product or you wish to exercise your rights (if any) with respect to that personal information, please visit the enterprise customer's privacy policies and contact them directly. Our processing activities as a service provider and processor (or as to contact data, such as account information and payment information, as a controller) is governed by Across AI contracts we have with our enterprise customers, such as a Data Protection Addendum ("DPA") and a subscription agreement.

1. Updates

We reserve the right to update this Privacy Policy from time to time. If we make changes, we will revise the date at the top of the Privacy Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access our Services or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy.

2. What Information We Collect

We collect the following categories of personal information:

• Identifiers, such as a real name, unique personal identifier, online identifier, IP address, email address, or account name
• Personal information such as a name, telephone number or email address
• Internet or other similar network activity, such as browsing history or information on a user's interaction with our website
• Commercial information, such as account records, and billing information
• Professional or employment-related information, such as when you apply to jobs on our website or from third parties that provide employment data to us
• Inferences drawn from other personal information, such as profile information reflecting a person's preferences

We may also collect the following information, which does not constitute personal information, that we use under this Privacy Policy:

• Publicly available information from government records.
• Deidentified or aggregated personal information.
• Certain other information that is already regulated by other laws or regulations.

We will not collect additional categories of personal information (including sensitive personal information) or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

We do not collect protected classifications characteristics under applicable privacy laws, such as biometric information, sensory data, or non-public education information.

3. How We Collect Your Information

We may collect personal information directly from you when you provide it to us, visit or use our Services or contact us through our email at [email protected].

We may also collect personal information automatically when you use our Services through cookies, pixels and similar tracking technologies such as your log data, browser type, device information, and Internet Protocol address.

We may also obtain personal information about you through from publicly available sources, external databases or third-party providers and integrations ("Third Party Provided Data").

4. How We Use Your Information

We use your personal information for the following purposes to:

• Provide and support our Services: Delivering the Services and improving our offerings.
• Communicate with you: Providing updates, support, and important notices.
• Improve our Services: Analyzing usage data to enhance functionality and user experience.
• Security: Implementing measures designed to ensure our Services are secure.
• Marketing and Promotional: Contacting you about our Services or other information we think may interest you and we may use your email address to send you newsletters.

5. Data Disclosures

We may disclose your personal information to:

• Service Providers: We may disclose your personal information with our service providers who will only access your personal information as necessary to deliver and support our Services.
• Business Transfers: If we are going to be, or are, acquired by or merged with another company, if substantially all of our assets or stock are going to be or are transferred to another company, or as part of a bankruptcy proceeding, we may transfer the personal information we have collected from you to the other company or as part of that proceeding.
• Legal: Pursuant to regulatory or legal requirements, safety, rights of others, and to enforce our rights or our terms or agreements and Privacy Policy, we may disclose personal information to governmental regulatory authorities as required by law, including for legal, tax or accounting purposes, in response to their requests for such information or to assist in investigations.
• Our enterprise Customers: We correlate Third Party Provided Data with personal information that we process on behalf of our enterprise customers and we provide that Third Party Provided Data as part of our Services to our enterprise customers.

Please note that we do not currently sell your personal information within the scope of, and according to the defined meaning of "sale" under the Nevada Revised Statutes Chapter 603A.

6. Lawful Basis for Processing

We will only process your personal information if we have a lawful basis for processing. Where your prior consent is required, we will obtain and rely on your consent in relation to the processing concerned. We may process your personal information where processing is necessary for compliance with legal obligations, contractual necessity or for legitime interests pursued by Across AI.

7. Cookies

This website sets the following cookies and similar technologies, and no others:

We do not set analytical, functionality, or advertising cookies beyond what is listed above. Our site-statistics tool (described below) works without cookies.

Analytics and visitor tools on across.ai

This section explains the analytics and visitor tools we use on our website, what they collect, and the choices you have. It applies to this website only — not to the Product, which is covered by our agreements with enterprise customers as described at the top of this Privacy Policy.

1. Vercel Web Analytics — basic site statistics (always on). We use Vercel Web Analytics, a privacy-focused measurement tool served from our own domain, to understand aggregate site traffic: page views, the pages visitors read, the sites that referred them, country-level location, and browser/device type. This tool does not use cookies, does not store personal identifiers, and cannot identify you — it is not consent-gated for that reason. Provider: Vercel Inc.

2. Apollo visitor identification — business visitor insights (consent-gated per region). We use a tool from Apollo.io that helps us understand which companies and organizations visit our site, so our team can follow up with businesses that show interest in Across AI. When enabled, it collects your IP address and sets a cookie, and matches that information against Apollo's business database to infer the organization a visit comes from, along with the pages viewed and visit frequency. For visitors in the United States, this tool may in some cases also identify the individual business contact (such as name, title, and business email) associated with the visit; outside the United States, identification is at the company level only and we do not identify individual visitors. Provider: Apollo.io (ZenLeads, Inc.), which processes this data under a data processing agreement with us and participates in the EU-U.S. Data Privacy Framework. Visitor data is visible to us in Apollo's website-visitors feature for the most recent 90 days; Apollo otherwise retains personal data as set out in our data processing agreement with them.

We do not use advertising pixels, cross-site tracking, or social-media tracking tags on this website.

Your choices

• Visitors in the European Union, United Kingdom, and Switzerland — and anywhere we cannot determine location: on your first visit, a banner asks whether to accept or reject the optional visitor-identification cookie. Nothing non-essential loads before you choose.
• Visitors in the United States: the visitor-identification tool may run by default, and you can opt out at any time using the "Your Privacy Choices" control available on every page from your first visit.
• You can change your mind anytime using the "Your Privacy Choices" control; an explicit choice is remembered for 12 months (after which we ask again) and always overrides the defaults above.
• Global Privacy Control: if your browser sends a GPC opt-out signal, we treat it as a valid opt-out automatically — the tool stays off even where it would otherwise run by default, and even if you click Accept.
• Consent receipts: when you make an explicit choice, we record a minimal receipt of it — the choice, its time, the notice version, and a random receipt code; never your IP address, name, or a profile — so we can demonstrate your consent where the law requires us to.
• You can also block or delete cookies in your browser settings at any time.

California residents

Under the California Consumer Privacy Act, our use of the Apollo tool may be considered a "sale" or "sharing" of personal information. You may opt out at any time using the "Your Privacy Choices" control on any page or by enabling a Global Privacy Control signal in your browser, which we honor automatically.

Summary

8. Marketing

We may use your email to send you marketing and promotional emails. You can opt-out of this at any time by clicking the "unsubscribe" link at the end of all our marketing and promotional update communications to you to remove yourself from the mailing list or you can contact us at [email protected].

9. Social Media Plugins

We use social media plug-ins (e.g., LinkedIn, X formerly known as Twitter, and Bluesky). These features may collect your IP address and/or other information as set forth in each social platform's privacy policy, which page you are visiting our website or using our Services and may set a cookie to enable the feature to function properly. We have a presence on some social media platforms, including LinkedIn, X, Bluesky and others. Through our accounts on social media platforms, we may in some instances collect personal information when you interact with our social media accounts or otherwise communicate with us through those accounts. Any information that you post on social media is governed by each social platform's privacy notices, and any personal information that we collect via our social media accounts will be processed in accordance with this Privacy Policy.

10. We Do Not Collect Personal Information Of Children

We do not knowingly collect, maintain, or use personal information from children under the age of 18, and no part of our Services is targeted or directed to children. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we may delete such information. We encourage parents and legal guardians to monitor their children's internet usage and to help enforce our Privacy Policy by instructing their children never to provide personal information on our website and/or our Services without their permission. If you learn that a child under the age of 18 has provided us with personal information in violation of this Privacy Policy, then you may contact us at [email protected]. We will take reasonable steps to delete that information as quickly as possible.

11. Your Privacy Rights

You may have the right to submit certain requests relating to your personal information as described below based on applicable laws. Please email us at [email protected] to submit data requests.

• Right to access and data portability. You can request and receive a copy of the personal information we have collected, used, or otherwise processed and you can confirm what personal information has been collected.
• Right to correct inaccuracies. You can request that we correct any inaccurate personal information we may have.
• Right to delete. You can request deletion of your personal information.
• Right to appeal. At times we may be unable to process requests relating to your personal information, in which case, your request will be denied. If your privacy rights request has previously been denied by us and you believe we denied it in error, you may appeal for reconsideration of your request via emailing [email protected].

Please note that we may need to authenticate your identity before your request can be processed. For authentication, you may be asked to provide certain personal information that we will match against our records. You may designate an authorized agent to make a request on your behalf; however, you will still need to verify your identity directly with us before your request can be processed.

12. Non-Discrimination

We will not discriminate against you in a manner prohibited by the applicable laws because you exercise your privacy rights. While you may request to delete your personal information, such deletions may affect our ability to offer the Services to you.

13. California Shine the Light Law

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to request information once a year and free of charge about our disclosure of personal information of a California resident to third parties (if any) for such third parties' direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar. In order to submit such a request, please contact us at [email protected].

14. International Transfers (GDPR)

We are located in the United States, and the personal information that we collect is stored on servers hosted by us or our authorized third-party service providers located in the United States and elsewhere. This means that your personal information will be collected, processed, and stored in the United States or other countries, which may have data protection laws that are different from (and sometimes less protective than) the laws of your country or region, such as the EU's General Data Protection Regulation and the UK General Data Protection Regulation ("GDPR").

Where we transfer personal information originating from the European Union, the United Kingdom, or Switzerland to the United States or other countries that have not received an adequacy decision, we rely on appropriate safeguards recognized under the GDPR — such as the European Commission's Standard Contractual Clauses (and the UK equivalent), or a recipient's certification under the EU-U.S. Data Privacy Framework — together with supplementary measures where appropriate. For example, Apollo.io, the visitor-identification provider described in Section 7, participates in the EU-U.S. Data Privacy Framework and processes data under a data processing agreement with us.

Further details of the safeguards applied to a particular transfer, including a copy of the relevant contractual clauses where applicable, can be requested at [email protected].

15. EU and UK Data Subject Rights

European Union and UK data subjects may have certain rights under the GDPR:

Right to be Informed

You may have a right to be informed about what personal information we collect from you and how it is used, as well as our purposes for processing your personal information, how long we retain your data, and who we share it with. This Privacy Policy lays out that information in general; please contact us for details specific to you.

Right of Access

You may have the right to know what data has been collected about you and how such data has been processed. If you would like to know exactly what information we have collected about you and how it has been used, please contact us.

Right of Rectification

You may have a right to correct any incorrect or incomplete information we have about you. To request a correction, please contact us.

Right to Erasure

In certain circumstances, you may have the right to request that we delete your Personal Information.

Right to Restrict Processing

In certain circumstances, you may have the right to restrict the processing of your Personal Information.

Right to Data Portability

If our lawful basis for processing your data is consent or performance of a contract, you may have the right to receive personal information we have collected from you in an accessible format. You may also have the right to have the personal information we have collected from you transferred to another controller.

Right to Object

You may have the right to object to the processing of your personal information for direct marketing purposes.

Rights Related to Automated Decision-Making Including Profiling

You may have the right to not be subject to a decision based solely on an automated process (no human involvement) which produces legal effects or significantly affects you in a similar way. We will not make these types of decisions by solely automated processes. If you believe that an automated decision-making process was applied to you, please contact us.

An individual who seeks to exercise any of these rights with respect to their personal information in the Product will be directed to the appropriate enterprise customer to address the request.

16. Security and Data Retention

We take reasonable steps, including physical, technical and organizational measures, designed to protect your personal information from unauthorized access and against unlawful processing, accidental loss, destruction and damage. Unfortunately, the transmission of information via the internet is not completely secure. We cannot guarantee the security of your personal information submitted to us.

We store all personal information for as long as necessary to fulfill the purposes set out in this Privacy Policy, or for as long as we are required to do so by law or in order to comply with legal or regulatory obligations.

17. Contact Us

For any questions or concerns regarding this Privacy Policy, please contact [email protected]

275 Battery St, Unit 480
San Francisco, CA 94111