CCPA Privacy Notice
for California residents.

This CCPA Privacy Notice describes how Revalytics Corporation, doing business as Revalytics.AI ("Revalytics," "we," "us," or "our") collects, uses, processes, retains, and discloses personal information in accordance with the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"). Any terms defined in the CCPA or CPRA have the same meaning when used in this notice.

CATEGORIES OF PERSONAL INFORMATION COLLECTED

In the preceding twelve (12) months, Revalytics may have collected the following categories of personal information:

Revalytics does not knowingly collect: biometric information for identification purposes; precise geolocation information; or sensitive personal information beyond what is reasonably necessary to provide the Services.

SOURCES OF PERSONAL INFORMATION

We may collect personal information from:

• direct interactions with customers and users;
• website activity and analytics technologies;
• customer-provided operational and business data;
• communications and recordings processed through the Services;
• authorized integrations and third-party systems;
• infrastructure and service providers;
• marketing and communications activities;
• and fraud prevention, security, and analytics providers.

PURPOSES FOR COLLECTING & USING PERSONAL INFORMATION

Revalytics may collect, process, use, retain, disclose, or analyze personal information for business and operational purposes including:

• providing, maintaining, securing, and improving the Services;
• generating analytics, forecasting, reporting, and operational intelligence;
• analyzing communications, operational activity, workforce performance, marketing activity, and revenue trends;
• supporting customer onboarding and account management;
• developing, training, maintaining, improving, supporting, and enhancing internally developed artificial intelligence, analytics, machine learning, and operational intelligence systems;
• improving reliability, functionality, and security;
• research, testing, debugging, auditing, and troubleshooting;
• detecting fraud, abuse, unlawful activities, and security incidents;
• complying with legal obligations;
• enforce agreements;
• and supporting legitimate operational and business purposes.

We will not use personal information for materially different purposes without additional notice where required by law.

AI PROCESSING & MODEL TRAINING

Revalytics may use Customer Data, communications, recordings, transcripts, analytics inputs, operational information, and related platform data to: develop; improve; train; maintain; support; and enhance its internally developed artificial intelligence, analytics, machine learning, forecasting, and operational intelligence systems.

Revalytics applies administrative, technical, and organizational measures designed to reduce unnecessary exposure of customer information during model development and platform improvement activities, including: aggregation; anonymization; de-identification; minimization; and related privacy or security safeguards.

Revalytics does not sell Customer Data and does not share Customer Data with unrelated third-party commercial AI providers for independent model training purposes.

MARION's foundation model architecture is described in our Responsible AI & Acceptable Use Policy.

DISCLOSURE OF PERSONAL INFORMATION

In the preceding twelve (12) months, Revalytics may have disclosed personal information for business purposes to:

• cloud hosting and infrastructure providers;
• communications providers;
• analytics and technology providers;
• security and fraud prevention providers;
• payment and billing providers;
• professional advisors and auditors;
• legal authorities where required by law;
• and authorized service providers supporting operation of the Services.

For a current list of certain third-party service providers authorized to process personal information in connection with the Services, please review our Subprocessor List.

Revalytics does not sell personal information. Revalytics does not share personal information for cross-context behavioral advertising purposes as defined under applicable California privacy laws. We do not knowingly sell or share personal information of consumers under 16 years of age.

To exercise the right to opt out of sale or sharing, please review our Do Not Sell or Share My Personal Information notice.

USE OF SENSITIVE PERSONAL INFORMATION

Revalytics does not use or disclose sensitive personal information for purposes other than those permitted under applicable California law.

YOUR RIGHT TO LIMIT USE OF SENSITIVE PERSONAL INFORMATION

California residents have the right to limit the use and disclosure of sensitive personal information, including audio recordings and transcripts processed through the Services, to specific purposes permitted under California law.

Revalytics uses audio recordings, transcripts, and related Sensory Information solely to:

• provide the Services;
• generate analytics and operational intelligence;
• train and improve internally developed artificial intelligence and analytics systems;
• support platform functionality;
• support security and fraud prevention;
• and support legitimate operational, compliance, and business purposes.

California residents who wish to exercise this right may submit a request as described in the "How to Exercise Privacy Rights" section below.

CALIFORNIA PRIVACY RIGHTS

California residents may have the following rights under applicable law:

• Right to Know and Access;
• Right to Correct Inaccurate Information;
• Right to Delete Personal Information;
• Right to Data Portability;
• Right to Opt Out of Sale or Sharing;
• Right to Limit Certain Uses of Sensitive Personal Information;
• Right to Appeal Certain Privacy Decisions;
• and Right to Non-Discrimination.

HOW TO EXERCISE PRIVACY RIGHTS

California residents may submit verifiable consumer requests by contacting: privacy@revalytics.ai (Subject Line: "CCPA Request").

Authorized agents may submit requests on behalf of California residents in accordance with applicable California law. Authorized agents must provide written authorization, and Revalytics may request additional verification.

Revalytics takes reasonable steps to verify the identity of requestors and the authority of authorized agents before processing. Revalytics processes verified requests within forty-five (45) days, with an additional forty-five (45) day extension where reasonably necessary and permitted under California law. Where additional time is required, Revalytics will notify the requestor.

California residents may also submit written requests by mail to:

Revalytics Corporation
500 W 2nd St Suite 1900
Austin, TX 78701

APPEALING DENIED PRIVACY REQUESTS

If Revalytics denies a privacy rights request, the requestor may appeal that decision by emailing privacy@revalytics.ai, including the original request reference, and providing the reason for appeal.

Revalytics will respond to appeals within the timeframes required under applicable California law.

GLOBAL PRIVACY CONTROL (GPC)

Certain browsers and browser extensions may transmit Global Privacy Control ("GPC") signals or similar browser-based privacy preference signals. Where applicable under California privacy law, Revalytics processes qualifying GPC signals as requests to opt out of the sale or sharing of personal information associated with the browser or device transmitting the signal.

RETENTION OF PERSONAL INFORMATION

Revalytics retains personal information for as long as reasonably necessary to:

• provide the Services;
• fulfill contractual obligations;
• support operational functionality;
• maintain security and platform integrity;
• support analytics and artificial intelligence development;
• comply with legal obligations;
• resolve disputes;
• enforce agreements;
• and support legitimate operational and business purposes.

Examples of retention practices may include:

• account and billing records retained during the customer relationship and for applicable legal, tax, audit, and operational retention periods thereafter, which may typically extend up to seven (7) years following account closure;
• communications, call recordings, transcripts, analytics inputs, and operational information retained during the customer relationship and for up to twenty-four (24) months thereafter unless otherwise required by customer agreements, legal obligations, deletion requests, litigation preservation requirements, or security obligations;
• website analytics retained for operational, security, fraud prevention, and performance measurement purposes;
• and certain logs, backups, archives, and security records retained for limited operational, legal, disaster recovery, or security-related periods.

Retention periods may vary depending on: customer configurations; contractual requirements; legal obligations; security considerations; dispute resolution requirements; and operational needs.

Certain information may remain in: logs; archives; backups; or security systems for limited periods consistent with operational, legal, and security requirements.

NON-DISCRIMINATION

Revalytics will not discriminate against California residents for exercising applicable privacy rights. Unless permitted by law, Revalytics will not: deny goods or services; charge different prices; provide different levels of service; or impose penalties because an individual exercised applicable privacy rights.

CHANGES TO THIS NOTICE

Revalytics may update this CCPA Privacy Notice periodically to reflect changes in: legal requirements; technology; operational practices; platform functionality; security practices; or business activities. Updated versions will be posted with a revised effective date.

CONTACT INFORMATION

Questions regarding this notice or California privacy rights may be directed to:

privacy@revalytics.ai
Revalytics Corporation
500 W 2nd St Suite 1900
Austin, TX 78701