Privacy Policy

The HumAIn Impact (and HumAIn Change Engine), a product of HumAIn Impact ACN 9341 308 15 (The HumAIn Impact, our, we, us) offers a variety of tools and resources for enterprise change management (collectively, the Service). These tools are accessible via our websites, including but not limited to www.humainimpact.com (the Website).

This Privacy Policy explains how HumAIn Impact Pty Ltd collects, uses, discloses, stores and protects personal information through its advisory services, HumAIn Change Engine platform, AI-enabled tools and websites.

We take our privacy obligations seriously. For the purposes of applicable data protection law, (in particular, the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK Data Protection Act 2018), your data will be controlled by us.

This Privacy Policy describes how The HumAIn Impact processes your information and explains the choices available to you with respect to your information.

If you don't agree to this Privacy Policy, you must refrain from using our products and services.

We may change this Privacy Policy at any time by posting a modified version on our website and we encourage you to check our website regularly to ensure that you are aware of our most current privacy policy.

Identity data, contact details, account credentials, billing information, survey responses, change management data, AI diagnostic data, customer content, support requests, device information, usage analytics and cookies.

The HumAIn Impact processes information we receive directly from you, automatically collected when you use our products and services, and collected by The HumAIn Impact from third parties. However, please note that this Privacy Policy does not apply to the processing of your information by third parties through your use of any third-party integrations available via our Service. Please visit those third-party websites directly for more information on their privacy and data protection practices.

Information The HumAIn Impact Receives Directly From You

Information needed to create an account

This includes information that is needed for The HumAIn Impact to create an account for you and manage your ability to log in and out of The HumAIn Impact:

• Identifiers, such as first name, last name, email address and organisation name
• Your password for The HumAIn Impact (hashed)
• Information related to a third-party authentication identity provider, such as Microsoft Authenticator

If you upgrade your account to a paid account, The HumAIn Impact may collect:

• Billing information, such as name, address, and telephone number
• Financial information, such as credit card information collected by our payment processors on our behalf
• Information about your chosen The HumAIn Impact plan

Information you provide through your use of The HumAIn Impact

• Information you provide in projects and releases
• Information uploaded to The HumAIn Impact, such as attachments
• Any other information you choose to provide while using The HumAIn Impact that identifies or can be reasonably associated with you

Other information you may provide to us

You may voluntarily provide us with information when you interact with us in other ways. If you directly interact with The HumAIn Impact staff, such as our sales, user research, or user operations groups, or if you become a The HumAIn Impact Champion, The HumAIn Impact may process:

• Your requests, questions, and responses to us via forms or email
• Information you provide in connection with sweepstakes, contests, or research studies, if you choose to participate
• Information to verify your identity
• Geographic information, such as region and country
• Social media information
• Your date of birth
• Your audio and video, if you participate in a sales call or user research study and do not opt out of call recording, which also involves the collection of biometric information associated with the call recordings

Information Automatically Processed When You Visit The HumAIn Impact

We may also collect the following:

• Metadata and inference information related to your use of The HumAIn Impact, our websites, and third-party integrations, including actions you take such as the number of workspaces, tasks assigned, features used, and third-party integrations
• Internet network activity, cookies, and similar tracking technologies, including IP address, browser type and settings, referring/exit pages and URLs, date and time stamp information, and language preferences
• Information collected as a result of participation in beta testing, such as error reports or feedback provided by you
• Information about how you interact with our marketing websites, such as clicks, time on page, scrolling, and mouse hovers
• Device information when you use The HumAIn Impact via a mobile device, such as device type, device IDs, operating system version, and mobile network information
• Derived device geolocation information, such as approximate geographic location inferred from an IP address

Information The HumAIn Impact Receives from Other Sources

Sometimes The HumAIn Impact receives your information from third parties (other individuals, marketing services, third-party integrations), which may include:

• Information processed from third-party integrations you set up with The HumAIn Impact
• Name, email, and business contact information
• Information about you provided to us from other individuals or users of The HumAIn Impact

To provide services, improve products, deliver diagnostics, support customers, monitor security, conduct analytics, provide training and comply with legal obligations. Specifically, we may process your information to:

• Provide services to you and operate our business
• Maintain, provide, and improve our products and services
• Help us better understand user interests and needs, and customise The HumAIn Impact for you
• Analyse and research how you interact with our website and applications
• Secure our systems and products against fraud or unauthorised activity
• Identify, troubleshoot, and fix bugs and errors
• Comply with global laws and regulations
• Investigate in good faith alleged violations of our Terms of Service
• Comply in good faith with a valid legal subpoena, request, or other lawful process that meets the requirements of law enforcement or that we otherwise determine is necessary to respond to

If you use The HumAIn Impact as part of an organisation, company, or academic institution, The HumAIn Impact will process your information as required by our contract with your organisation or academic institution. Those contractual terms may differ from, and, in the event of a conflict, take precedence over, the uses described in this Privacy Policy.

In addition, we use information about your use of The HumAIn Impact, account information (such as your email address and name), and information related to third-party integrations to:

Communicate with you:

• About The HumAIn Impact by phone, text, email, or chat
• Provide important notices and updates, product changes, and security and fraud alerts
• Advertise or market The HumAIn Impact services to you (you may unsubscribe from promotional communications at any time)
• Facilitate reporting and analyse platform performance
• Provide webinars or public presentations
• Demonstrate The HumAIn Impact or provide access to a demo instance
• Provide cross-device management of your account
• Provide you with support and respond to your requests for information
• Resolve support requests and troubleshoot account issues
• Survey your opinions through surveys, research studies, and questionnaires

Combined information

Unless otherwise prohibited by law, we may combine the information that we collect through your use of our products and services with information that we receive from other sources, both online and offline, and use that combined information as set out above.

Aggregated and de-identified data

We may aggregate and/or de-identify information related to your use of The HumAIn Impact so that such information can no longer be linked to you or your device. We may use such aggregated and de-identified data for any purpose, including but not limited to research and marketing purposes, and may also disclose such data to third parties, including advertisers, promotional partners, sponsors, and event promoters.

Information may be disclosed to subprocessors, advisers, auditors, regulators, courts and law enforcement where legally required. Specifically, we may disclose your information under the following conditions:

• Service providers and subprocessors. We may provide access or disclose your information to select third parties that use the information on our behalf to assist in providing our products and services, including sales, marketing, analytics, research, data storage, security, and fraud prevention.
• Because you ask us to disclose. We may disclose your information to third parties when you ask us to do so, including when you connect The HumAIn Impact with other tools via available integrations.
• Consistent with your settings. Information you submit through and post to The HumAIn Impact may be viewable by other users in your workspace, team, division, or organisation, depending on the specific settings you have selected.
• Business transfers. If the ownership of all or substantially all of our business changes, we may transfer your information to the new owner so that the services can continue to operate, subject to the promises contained in this Privacy Policy.
• Compliance with legal obligations. To comply in good faith with a valid legal subpoena, request, or other lawful process. We will notify individuals or customers of that request unless prohibited by law or court order, or where exceptional circumstances apply.
• Your company's administrator. If you're using The HumAIn Impact in connection with an organisation or company domain, your account administrator can export data associated with the domain they manage if their subscription plan allows it.
• Public forums. Our public forums make it possible for you to upload and post comments or feedback publicly. Any information submitted through such public forums is not confidential and may be available to the public at large.

We do not disclose your information to third parties for their own direct marketing purposes.

Information may be processed outside Australia where appropriate safeguards are implemented.

To provide our products and services, we may transfer the personal data we collect to countries outside of the UK or EEA which do not provide the same level of data protection as the country in which you reside and are not recognised by the European Commission as providing an adequate level of data protection. When we do this, we will put in place appropriate safeguards to protect your data, which may include standard contractual clauses.

Information is retained only as long as required to provide services, comply with legal obligations and resolve disputes.

Storage

When you use The HumAIn Impact, your information will be stored in Australia, unless alternative storage options have been requested and agreed.

Data Retention

We will retain your information for the period necessary to fulfil the purposes outlined in this Privacy Policy, to make our products and services available to you, or as instructed by you, unless a longer retention period is required or permitted by law.

The HumAIn Impact users from around the world use our products and services to manage organisational change.

Regardless of what country you're located in, we respect your ability to know, access, correct, export, restrict the processing of, and delete your information, and have extended those rights globally. We will not discriminate against you for exercising your privacy rights.

Information about your rights

Upon your request, and subject to applicable legal exceptions, we will:

• Provide access to and/or a copy of certain information we hold about you
• Provide you with information about categories of information we collect or disclose about you, the categories of sources of such information, the business or commercial purpose for collecting your information, and the categories of third parties to which we disclose your information
• Prevent the processing of your information for promotional purposes (including any direct marketing processing based on profiling)
• Update information which is out of date or incorrect
• Delete certain information which we have about you
• Restrict the way that we process and disclose some of your information
• Transfer your information to a third party provider of services
• Revoke your consent for the processing of your information

If you request these rights, we will need to verify your identity and may need to verify your relationship with The HumAIn Impact (for example, if you're an administrator of an The HumAIn Impact organisation, division, or workspace and you're making a request on behalf of another individual) for security and to prevent fraud.

We may take additional steps to verify that you are authorised to make the request. If you are an end user of The HumAIn Impact’s services and not a direct customer of The HumAIn Impact (for example, your company uses The HumAIn Impact and you're an employee or authorised representative of that company), you should direct requests relating to your information to the administrator of your company's The HumAIn Impact account. We will redirect you to your administrator or notify the administrator directly.

Please note, however, that certain information may be exempt from such requests in some circumstances (for example, if we need to keep processing your information for our legitimate interests or to comply with a legal obligation). Depending on applicable law, you may have the right to appeal our decision to deny your request.

Users may opt out of marketing communications at any time.

If you receive email from us, we may use certain analytics tools, such as clear GIFs, to capture data such as when you open our message or click on any links or banners within our emails.

You may instruct us not to use your contact information to contact you by email, postal mail, or phone regarding products, services, promotions, and special events that might appeal to your interests. In commercial email messages, you can also opt out by following the instructions located at the bottom of such emails.

Please note that, regardless of your request, we may still use and disclose certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain transactional, operational, or service-related emails, such as those reflecting our relationship or transactions with you.