Ipso AI

Ipso AI operates in a complex landscape of data collection, processing, and privacy regulations. As the company processes extensive personal information about individuals, including their professional details and online behavior, it must navigate multiple legal frameworks, from GDPR to international privacy standards. This article examines Ipso AI's data practices, from how they collect information to how they protect it, and what rights individuals have over their own data.

Data Collection Methods

Ipso AI collects personal data through formal agreements with vendors, including data processing agreements and standardized model clauses. The company processes information received from third parties, combining it with details from sources like LinkedIn and additional information about employers and industries.

The company employs comprehensive cookie controls and tracking technologies on its website, collecting information automatically about user behavior, including IP addresses, browser types, operating systems, and specific page views. This data helps optimize website functionality and gather broad demographic insights.

All personal information is stored in databases hosted by third-party providers in the United States. These cloud-based systems store data for either business relationship duration or until the information becomes less valuable, at which point it is securely purged. Personal data can be requested for deletion upon verification of identity.

Data Subject Rights and Compliance

The company complies with the General Data Protection Regulation (GDPR) and other international privacy laws, providing data subjects with a wide range of rights. These rights include the right to be informed, right of access, right to rectification, right to erasure, right to restrict processing, right of data portability, and the right to object. Additionally, the company recognizes rights related to automated decision-making and profiling.

To exercise these rights, data subjects can contact Ipso AI via email at [email protected]. The company requests specific information to process requests, including details about the purpose of processing, categories of personal data, recipients outside the company, and the source of information (if not provided directly). Personal data is retained for different durations: business relationship duration for service data and until no longer valuable for prospect data, which is then purged.

Ipso AI has appointed an internal Data Protection Officer (DPO) to address privacy concerns. For inquiries, complaints, or further information, data subjects can contact the DPO at Austin Tackaberry, located at 1120 Mariposa St, Suite 5, San Francisco, CA, 94107. The company provides detailed guidance for exercising rights through its privacy policy, which is available online.

The company implements rigorous data protection measures, particularly when processing information in the United States. Since its founding, Ipso AI has not received any government requests for personal data. The company maintains that it does not knowingly solicit or receive information from children. All personal data transfers to the US are governed by GDPR Article 46 requirements, with appropriate safeguards in place. These safeguards are based on European Data Protection Board guidance and will be updated when new draft model clauses are approved.

Data Storage and Retention

Data storage and retention at Ipso AI is governed by specific guidelines to ensure the security and proper handling of personal information. The company utilizes both its own servers and cloud-based database management services located within the United States for data storage. This infrastructure supports efficient data management while maintaining appropriate geographic controls for privacy compliance.

For service data, personal information is retained throughout the duration of the business relationship and after. This ensures continuity of service and enables historical analysis where relevant. Prospect data, however, receives different treatment. Once an individual's information no longer proves valuable for business development purposes, it is securely purged from the systems. This approach focuses data retention on active prospects while cleaning out outdated information to minimize storage requirements and security risks.

The company's data handling processes include safeguards to protect information throughout its lifecycle. Personal data can be requested for deletion by individuals upon verification of their identity. To process these requests, the company requires specific information about the purpose of processing, categories of personal data, recipients outside the company, and the source of information (if not provided directly). This approach helps ensure that data retention matches the actual needs of both the company and its customers.

Ipso AI maintains a clear policy regarding data sharing and third-party processing. Information is only shared under specific conditions, including at the request or authorization of the individual, for company-hosted and co-sponsored conferences, in response to legal requirements, to comply with agreements with the individual, to address emergencies or acts of God, or to resolve disputes. While the company recognizes the need to process data in the United States, where the country has not been deemed "adequate" by the European Union under GDPR Article 45, it implements robust safeguards to protect personal information. These include binding, standard data protection clauses enforceable by data subjects in the European Economic Area and the United Kingdom. The company regularly updates these safeguards based on guidance from the European Data Protection Board.

Third-Party Sharing and Security

Ipso AI shares personal information under specific conditions that protect both user rights and company interests. The company only discloses data when requested or authorized by the individual, necessary for Ipso AI-hosted or co-sponsored events, required by legal process, essential for contractual fulfillment, or needed to address emergencies.

For technical processing in the United States, where the country has not been deemed "adequate" by the European Union under GDPR Article 45, Ipso AI implements robust safeguards based on European Data Protection Board guidance. These safeguards include binding, standard data protection clauses enforceable by data subjects in the European Economic Area and the United Kingdom. The company regularly updates these measures to align with approved draft model clauses.

Third-party sharing occurs strictly for service delivery purposes, with all recipients bound by similar privacy commitments. When sharing information with third parties, Ipso AI requires explicit consent to perform a contract or to fulfill a compelling legitimate interest. The company maintains strict controls over data transfers, ensuring that all third parties adhere to comprehensive privacy and security protections.

All personal data transfers to the US are governed by GDPR Article 46 requirements, with appropriate safeguards in place. The company maintains a detailed policy that requires all data processing agreements and model clauses to be implemented when feasible and appropriate. Since its founding, Ipso AI has maintained rigorous compliance standards, receiving no government requests for personal data and demonstrating a strong commitment to both user privacy and data protection standards.

User Information and Tracking

Ipso AI collects both personally identifiable information and non-identifiable data from website users through comprehensive cookie controls and tracking technologies. This information typically includes name, job title, employer name, work address, work email, and work phone number. The company uses Google API Services and adheres to the Limited Use requirements when processing data received from Google APIs.

Automatically collected information encompasses IP addresses, region or general location, browser type, operating system, and detailed usage patterns. This data helps the company understand user behavior and improve website functionality. Collected information is stored in databases hosted by third-party providers in the United States, used solely for cloud storage and retrieval purposes.

The company implements strict controls on third-party sharing, disclosing information only under specific conditions: at the request or authorization of the individual, for Ipso AI-hosted or co-sponsored events, in response to legal requirements, to comply with contractual obligations, to address emergencies, or to resolve disputes. All data processing agreements and model clauses are implemented when feasible and appropriate to ensure privacy and security protections.

For technical processing in the United States, where the country has not been deemed "adequate" by the European Union under GDPR Article 45, Ipso AI implements robust safeguards based on European Data Protection Board guidance. These safeguards include binding, standard data protection clauses enforceable by data subjects in the European Economic Area and the United Kingdom. The company maintains rigorous compliance standards, having received no government requests for personal data since its founding.