INOSCOPE PRIVACY STATEMENT

1. Who This Statement Applies To

This Statement applies to users of the Service and visitors to the Site worldwide, except where regional supplements in Section 13 provide additional or different terms for specific territories.

2. Information We Collect

We collect and process the following categories of personal information:

• - Account Information – name, email address, password, organisation, role, subscription details.
• - Content & Uploads – photos, images, documents, voice recordings, metadata, and any text or prompts you submit.
• - Usage Data – log files, device identifiers, IP address, browser type, referring pages, timestamps, clicks, and navigation patterns.
• - Payment & Billing Data – transaction amount, billing address, and limited card details (processed by our PCI-compliant payment provider; we do not store full card numbers).
• - Support & Communications – messages, emails, and recordings of calls or meetings with our team.
• - Cookies & Similar Technologies – see Section 7.

We collect information directly from you, automatically through your device, and from third-party sources (e.g., single-sign-on providers, analytics partners, and publicly available data).

3. How We Use Personal Information

We use personal information to:

1. 1. Provide and operate the Service (authenticate users, generate Outputs, store data, process payments).
2. 2. Improve and develop the Service and our AI models, including by using photos, scope files, and other content you upload and by tracking aggregate usage patterns (train, fine-tune, validate, debug, conduct analytics).
3. 3. Communicate with you about updates, security alerts, and administrative or marketing messages (where permitted).
4. 4. Personalise content and features.
5. 5. Detect, prevent, and investigate fraud, abuse, or security incidents.
6. 6. Comply with legal obligations and enforce our Terms.

4. Legal Bases for Processing (EEA/NZ/AU)

We rely on one or more of the following bases:

• - Contract – processing necessary to perform our agreement with you;
• - Legitimate interests – e.g., securing and improving the Service, marketing similar products (balanced against your rights);
• - Consent – for certain analytics, cookies, or marketing (you may withdraw consent at any time);
• - Legal obligation – where laws require processing (e.g., tax, regulatory reporting).

5. Automated Decision-Making & AI Outputs

Inoscope uses machine-learning models to generate measurements, scopes of work, and other content. Outputs are produced automatically based on your inputs and training data.

We do not make decisions that have legal or similarly significant effects solely by automated means without human review. You remain responsible for independently verifying any Output before relying on it.

6. How We Share Information

We share personal information only as necessary:

• - Service Providers & Sub-processors – cloud hosting, payment processors, analytics, support tools (bound by confidentiality and data-processing obligations).
• - Professional Advisers – lawyers, accountants, insurers, where necessary for our business.
• - Corporate Transactions – in connection with a merger, acquisition, or sale.
• - Legal & Safety – to comply with law, enforce our Terms, or protect rights, property, or safety.

We do not sell personal information for monetary consideration.

7. Cookies & Tracking Technologies

We use cookies, pixels, and local storage to recognise you, remember preferences, measure engagement, and improve the Service. You can control cookies through your browser settings. Some cookies are essential and disabling them may affect site functionality.

8. International Data Transfers

We operate globally and may transfer personal information to countries other than your own, including to the United States and Australia. Where required, we use appropriate safeguards such as standard contractual clauses or rely on adequacy decisions.

9. Security

We implement organisational and technical measures designed to protect personal information, including encryption in transit, access controls, and regular security audits. No system is 100% secure, so we cannot guarantee absolute security.

10. Data Retention

We keep personal information only for as long as necessary to fulfil the purposes outlined in this Statement, comply with our legal obligations, resolve disputes, and enforce agreements. User-generated content may be retained in backups for up to 90 days after deletion.

11. Your Rights & Choices

Depending on your location, you may have rights to:

• - Access and receive a copy of your personal information;
• - Correct inaccurate or incomplete information;
• - Delete personal information or restrict processing;
• - Object to processing based on legitimate interests or direct marketing;
• - Port data to another service; and
• - Withdraw consent at any time.

You can exercise these rights by contacting us (see Section 14). We will respond in accordance with applicable law. We may need to verify your identity before fulfilling your request.

12. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected a child's data, please contact us so we can delete it.

13. Regional Supplements

14. Contact Us

Questions, requests, or complaints regarding this Privacy Statement? Email contact@traftai.com or write to:

Traft NZ Limited, Kahukura Building, Moorhouse Avenue (between Madras & Barbadoes), Christchurch 8011, New Zealand.

15. Changes to This Statement

We may update this Privacy Statement periodically. Material changes will be notified through the Service or by email where required by law. The revised version becomes effective on the "Last updated" date shown above.