Privacy Policy

This policy further details your rights and choices regarding the processing of your personal data, including your ability to access, update, or object to certain uses of your information. By accessing or using any of our Services, you acknowledge and agree to the terms outlined in this Privacy Policy between you and us. If you do not agree with this Privacy Policy, you must refrain from accessing or using our Services. Where we provide the Services under contract with an organization (for example, your employer), that organization controls the information processed by the Services. This policy does not apply to the extent we process personal information in the role of a processor on behalf of such organizations. For more information, please see “Notice to End Users” below.

Information we collect

We collect information about you when you provide it to us, when you use our Services, and when other sources provide it to us, as further described below.

Information You Provide to Us

Account and Profile Information. Bekind Labs collects information directly from you when you input data into our Services or otherwise provide it through interactions with our platforms. When you register for an account, update your profile, configure preferences, subscribe to services, or make purchases, we collect personal details such as your name, email address, company information, and payment-related information if applicable. Account credentials, such as registration details, passwords, and authentication tokens, are also collected to ensure secure access to our Services. If you subscribe to paid services, we collect billing information, including designated billing representatives and payment details, which are processed securely through third-party payment gateways. Additionally, users may choose to provide optional profile details such as a display name, profile photo, or job title, which may be displayed within the Services. User preferences, including selected settings and configurations, may be tracked to personalize the experience within our Services.

Content You Provide Through Our Products & Services. Bekind Labs collects and stores content that you create, save, or share within the Services. This includes, but is not limited to, project management data, task descriptions, comments, attachments, and collaboration updates. Any files uploaded within the Services, as well as feedback or reports submitted through our platforms, are also collected.

AI Features: Inputs, Outputs, and Interaction Data. When you use AI-assisted features within our Services (e.g., story review/refinement, story splitting suggestions, analytics interpretation, and semantic search), we collect and process: (i) inputs you submit to the AI, including prompts, pasted story text, acceptance criteria, and other project content you choose to provide; (ii) outputs generated by the AI, such as review findings, suggested edits, split previews, summaries, and explanations; and (iii) interaction data and operational telemetry, including timestamps, feature or action type, selection signals such as “Apply,” “Ignore,” “Save,” or “Dismiss,” token usage, and certain latency, performance, and error-related events, to support the operation, security, monitoring, troubleshooting, and improvement of the AI features.

To support continuity of the AI experience and related workflows, we may store conversation history associated with your use of AI-assisted features, including submitted prompts and AI-generated outputs, in our systems. AI-assisted features are powered by Anthropic models accessed through Amazon Bedrock. Bekind Labs may use Amazon Bedrock Cross-Region Inference profiles, which may automatically route inference requests to other AWS Regions included in the applicable inference profile for processing. Accordingly, prompts, model inputs, and model outputs may be processed outside the Asia Pacific (Tokyo) region. Retrieval, indexing, and storage components used for AI-assisted features are maintained within Bekind Labs’ AWS environment in the Asia Pacific (Tokyo) region, and data remains stored in the source region unless otherwise stated.

Where applicable, we apply masking or redaction controls to certain highly sensitive credentials, such as API keys or access tokens, before storage or logging. However, certain account-associated identifiers, such as user names or email addresses, may remain associated with records where necessary to provide, secure, maintain, or administer the Services.

AI-generated outputs are suggestions only and may be inaccurate, incomplete, biased, or unsuitable for your specific context. You are solely responsible for reviewing and validating any AI-generated output before applying changes to your backlog or relying on such output for planning, prioritization, estimation, analytics, or other business decisions. We strongly recommend that you do not include sensitive personal information or confidential or proprietary business information in AI prompts (including source code, credentials such as API keys or access tokens, customer lists, financial data, contracts, or internal strategy documents) unless doing so is strictly necessary for your intended use of the AI feature and explicitly authorized by your organization.

Content You Provide Through Our Websites. Bekind Labs collects content that you submit through our websites, our owned and operated platforms and social media channels. This includes any information provided when submitting feedback, filling out forms, responding to surveys, participating in contests, promotions, or events, or engaging in interactive features such as forums and blogs.

Information You Provide Through Our Support Channels. When you engage with Bekind Labs’ customer support services, we collect details necessary to provide assistance. This includes your contact information, descriptions of the issue encountered, and any documentation, screenshots, or other supporting materials that facilitate resolution. Whether through support tickets, email correspondence, or direct conversations with representatives, the information provided is used solely for troubleshooting and improving service quality.

Payment Information. Bekind Labs collects and processes billing and payment details when you register for paid services. This includes the name and contact information of designated billing representatives, invoice details, and payment transaction data. Payments are securely handled through third-party financial service providers, and while we do not store complete payment card details on our servers, we retain transaction records for accounting, dispute resolution, and compliance purposes.

Information We Collect Automatically When You Use the Services

Your use of the Services. Bekind Labs automatically collects certain technical and usage data when you access, browse, or interact with our Services. This includes tracking your engagement with features, links clicked, search queries, file uploads, and collaboration activities. We analyze data related to project activity, task progress, and interactions with team members to enhance the functionality of our Services. We may also collect AI feature usage telemetry, such as request type (e.g., story review, analytics, search), performance signals (e.g., latency), and technical logs (e.g., error codes). Where applicable, we may record usage estimates (such as token counts) to measure service usage, enforce rate limits, and improve reliability.

Device and Connection Information. Bekind Labs collects details about the devices and networks used to access our Services. This includes information about your operating system, browser type, IP address, referring URLs, device identifiers, and connection status. Crash reports and diagnostic logs may also be collected to improve service reliability and address technical issues. We may infer general location from IP address or similar connection information where reasonably necessary for security, service delivery, analytics, or compliance purposes. The extent of data collected depends on the type of device and the settings configured by the user.

Cookies and Other Tracking Technologies. Bekind Labs employs cookies, tracking pixels, and analytics tools such as Google Analytics to monitor site traffic, enhance user experience, and improve overall service efficiency. These tracking technologies help us understand how users navigate our platforms and interact with content. Users may manage or disable cookies through their browser settings. For more information about how we use cookies and your options to manage them, please refer to our Cookie Policy.

Information We Receive from Other Sources

Bekind Labs may receive additional information about users from various sources, including other Service users, third-party integrations, business partners, and publicly available records. Other users may provide information about you when they invite you to collaborate, mention you in a project, or designate you as a billing or technical contact. If you integrate third-party services such as Google, GitHub, or Slack, we receive relevant account details and content necessary to facilitate these integrations. The information shared depends on the privacy settings and permissions granted within those third-party services.

Other Users of the Services. Other users of our Services may provide information about you when they submit content through the Services. For example, you may be mentioned in a project or user story update, invited to collaborate on a backlog, or included in communications regarding a shared project. Bekind Labs may receive your contact details from other users who provide them when designating you as a collaborator, team member, or administrator.

Other Services You Link to Your Account. Bekind Labs may receive information when you or your administrator integrate third-party applications or link external services to your account. Additionally, if you log into our Services using Google credentials, which is a login method provided by Bekind Labs, we may receive your name and email address based on your Google profile settings. Likewise, integrations with productivity tools, calendar applications, or cloud storage services may involve data exchanges necessary to enable these connections. The extent of shared information depends on the permissions configured in the respective third-party services.

Bekind Labs Partners and Affiliates. Bekind Labs collaborates with industry partners and affiliates who provide consulting, implementation, and training services. Some partners also assist in marketing, lead generation, and reselling our Services. As part of these business relationships, we may receive billing details, contact information, event participation records, and insights regarding product interest.

Advertising and Market Research Partners. Bekind Labs does not collect information from advertising networks for targeted advertising or cross-context behavioral advertising. We may receive limited business contact information from partners (e.g., resellers or event hosts) for purposes such as service delivery coordination and communications, where permitted by applicable law.

How we use the information we collect

Bekind Labs processes the information we collect based on the specific Services you use, how you interact with them, and any preferences you have communicated. The following section details the purposes for which we utilize your data.

Providing and Personalizing the Services

We use the collected information to operate, maintain, support, and improve our Services, including processing transactions, verifying accounts, providing customer support, and enabling collaboration features. For example, your name, display name, profile photo, and similar account information may be displayed to other users within the Services where necessary to support collaboration and project functionality. We may also use information about how you interact with the Services to provide relevant search results, notifications, recommendations, and other service-related functionality within the applicable project scope. If your account is managed by an organization, certain settings and controls may be administered by that organization or its administrator.

Research and Development

Bekind Labs continuously works to improve the Services, including by using aggregated insights, product interaction patterns, and behavioral trends to troubleshoot technical issues, optimize functionality, identify usage patterns, and develop new features and technologies. Our systems may also aggregate search queries to enhance the accuracy of auto-suggestions. In some instances, these insights are applied across multiple Services to refine interconnected experiences. Certain new features may be tested with a limited group of users before being released to all customers.

This also includes AI-assisted features. We may analyze product interaction patterns, feature usage, and quality or safety signals (such as abuse prevention, error monitoring, and performance trends) to maintain, secure, and improve the reliability of these features. We do not use customer content to train the underlying foundation models used to provide the AI features. We process customer content only as necessary to provide the Services and to support the security, safety, and operational reliability of the AI features, consistent with this Privacy Policy and applicable agreements.

To avoid ambiguity, the AI features are powered by Anthropic models accessed through Amazon Bedrock. Bekind Labs may use Amazon Bedrock Cross-Region Inference profiles, which may automatically route inference requests to other AWS Regions included in the applicable inference profile for processing. Accordingly, prompts, model inputs, and model outputs may be processed outside the Asia Pacific (Tokyo) region. Retrieval, indexing, and storage components used for AI-assisted features are maintained within Bekind Labs’ AWS environment in the Asia Pacific (Tokyo) region, and data remains stored in the source region unless otherwise stated. Any AI-related service providers involved in delivering these features are engaged as service providers or sub-processors subject to appropriate contractual data protection obligations. Customer content is not made available to such providers for training their foundation models, except where expressly agreed in writing and permitted by applicable law.

Details regarding our subprocessors and applicable data processing terms are set out in our Data Processing Addendum and Sub-processor List.

Communication Regarding the Services

We use your contact details to send essential communications via email, in-app notifications, or other channels, including confirmations of purchases, reminders of subscription expirations, responses to inquiries, and updates related to service maintenance, security alerts, and administrative notices if applicable. Notifications are also sent when you or others interact within the Services, such as when you are mentioned in a user story, assigned work, or added to a collaborative project. We may also provide onboarding assistance, usage guidance, and service-related recommendations within the Services.

These transactional communications are an integral part of the Service and, in most cases, cannot be opted out of. Where an opt-out option is available, it will be provided within the communication itself or in your account settings.

Marketing, Promotion, and User Engagement

Bekind Labs may use your contact details to send product updates and promotional communications via email or other communication channels, such as announcements about new features, events, or service-related updates. You can opt out of promotional communications by following the unsubscribe instructions in our emails. Bekind Labs does not use your personal information to deliver targeted advertising based on your activity across third-party websites or services.

Customer Support and Service Improvement

We use collected information to diagnose and resolve technical issues, address user concerns, analyze service failures, and enhance platform reliability. In cases where you grant us explicit permission, we may share relevant details with external technical specialists to assist with complex support inquiries.

Security and Fraud Prevention

Bekind Labs processes information to verify accounts, maintain the security and integrity of the Services, monitor for unauthorized access, investigate suspicious activity, enforce our terms and policies, and detect and prevent fraud, abuse, and other harmful or unlawful activity. This includes detecting and preventing misuse of AI-assisted features, such as prompt injection attempts, requests for prohibited content, or attempts to access data outside an authorized project scope, and enforcing access controls consistent with user roles and permissions.

We also analyze service usage as reasonably necessary to maintain security, prevent abuse, and enforce compliance with our terms and policies. In the event of a Security Incident, Bekind Labs will notify the Customer without undue delay and, where feasible, within seventy-two (72) hours after becoming aware of the incident, with notice sent to the relevant contacts designated by the Customer.

Legal and Business Protections

Where necessary, we use personal data to comply with legal obligations, regulatory requirements, and audit functions. This includes responding to lawful government requests, protecting our intellectual property rights, enforcing contract terms, and ensuring compliance with applicable data protection laws. If Bekind Labs is involved in a corporate transaction such as a merger, acquisition, or sale, user data may be transferred to the acquiring entity as part of the business operation.

Processing with User Consent

Where specific consent is required, we use your data for purposes explicitly agreed upon by you. This may include publishing customer testimonials, featuring user stories in marketing campaigns, or participating in research studies. Users retain the right to withdraw consent at any time by contacting info@bekindlabs.com.

Legal Bases for Processing (Applicable to EEA Users)

For individuals residing in the European Economic Area (EEA), our data processing activities are conducted under lawful bases outlined in the General Data Protection Regulation (GDPR). The specific legal grounds on which we process personal data include:

• Contractual Necessity – Processing is required to deliver the requested Services, including account management, authentication, support, and security.
• Legitimate Interests – Processing supports essential business functions such as improving product usability, enhancing security, conducting research and development, and marketing new features, provided that such interests are not overridden by your privacy rights.
• Legal Compliance – We process personal data as required to fulfill legal obligations, including regulatory compliance, taxation, and law enforcement cooperation.
• User Consent – In cases where explicit consent is required (e.g., for marketing communications or non-essential data collection), users have the right to withdraw consent at any time without affecting prior lawful processing.

If you object to data processing based on legitimate interests, your ability to use certain features of the Services may be impacted. Users may submit requests to exercise their data protection rights, including access, correction, restriction, and deletion, by contacting info@bekindlabs.com. Bekind Labs remains committed to upholding international data privacy standards, including the Act on the Protection of Personal Information (APPI) in Japan, Personal Information Protection Act (PIPA) in South Korea, and the California Consumer Privacy Act (CCPA) in the United States.

How we disclose information we collect

Bekind Labs provides collaboration tools designed to enhance productivity and teamwork. To ensure the functionality of the Services, we may disclose information to certain third parties under limited circumstances, including service providers, subprocessors, and in connection with a business transfer. We and our service providers may also collect information through cookies, pixels, tags, and similar technologies, including online identifiers, device information, and usage data, for purposes such as service functionality, analytics, security, and performance monitoring, as further described in our Cookie Policy. Bekind Labs does not sell or share personal information for cross-context behavioral advertising. Where required by applicable law, we comply with our legal obligations regarding the collection, use, and disclosure of personal information.

Disclosures to Other Service Users

When you use our Services, certain information about you may be disclosed to other users of the Service.

For Collaboration Purposes. Tracker Boot and other Services allow users to create, share, and collaborate on content, which may contain personal information. Depending on the configured settings, you may grant permissions to other users to view, edit, share, or download content. Some collaboration features display portions of your profile information to other users when you engage with content within the Services. For instance, if you comment on a Tracker Boot user story, your name will be displayed alongside your comment, allowing other authorized users to recognize the contributor. Similarly, when you participate in a project, your name will be listed as a project member, and users with the appropriate permissions can view your profile details.

Managed Accounts and Administrators. If you register for or access our Services using an email address associated with an organization (such as your employer) and that organization owns the domain, certain information about you—including your name, profile picture, contact details, content contributions, and account usage history—may become accessible to the organization’s administrator and other authorized users within the same domain. If your organization establishes an account or site, administrators may manage and oversee user activity within the Services. Additionally, if you are an administrator responsible for managing a site or a group of users, we may disclose your contact details to other Service users to facilitate Service-related inquiries and requests.

Disclosure of Information to Third Parties

Bekind Labs may disclose information to third parties that support the operation, provision, enhancement, integration, customization, support, and, where applicable, marketing of our Services, subject to appropriate contractual, confidentiality, security, and data protection obligations.

Service Providers. We engage third-party service providers to assist with various operational functions, such as website and application development, hosting, maintenance, backup, storage, virtual infrastructure, payment processing, analytics, marketing, and other essential services. In performing these functions, such service providers may access, use, or process information about you on our behalf. Service providers may also include providers supporting AI functionality, such as infrastructure hosting and model execution services used to deliver AI-assisted features within the Services. Where this occurs, such providers act under our instructions and are subject to appropriate contractual confidentiality, security, and data protection obligations designed to protect your information.

Bekind Labs Partners. Bekind Labs collaborates with third parties that provide consulting, sales, support, and technical services to help implement and deliver customer solutions within the Services. We may disclose your information to these third parties as necessary for specific services, such as billing and collections, localized support, and customized solutions. Additionally, we may share information with these partners when you have explicitly agreed to such disclosure.

Disclosure to Third-Party Applications, Services, and Legal Authorities

Third-Party Applications. Users, administrators, or other Service users may choose to enhance functionality or customize the behavior of the Services by integrating third-party applications. Such integrations may grant third-party applications access to your account and associated information, including your name, email address, and any content you utilize within those applications. If you are listed as an administrator, technical contact, or billing contact for an account, Bekind Labs may disclose your details to the third-party application provider at the time of installation. Bekind Labs does not control the policies or procedures of third-party applications, and this Privacy Policy does not extend to their handling of your information. We strongly recommend reviewing the privacy policies of third-party providers before connecting or using their applications and services to understand their data collection and usage practices. If you do not wish to share your information with a third-party application, you should refrain from installing or should uninstall the application.

Links to Third-Party Websites. Our Services may contain links to third-party websites or external services with privacy practices distinct from those of Bekind Labs. If you choose to submit personal information to any of these third-party websites, your data will be subject to their privacy policies, not ours. We encourage you to carefully review the privacy policies of any external websites or services you access.

Third-Party Services. Bekind Labs may provide opportunities for users to interact with or disclose information to third-party services through our platform. For example, users may have the option to log into the Services using authentication from a third-party service, such as Google. When you actively engage with these third-party services, we may disclose certain information, including contact details, identification, demographic data, and device-related information, in accordance with your privacy settings on the respective third-party service. We strongly encourage you to review the privacy policies and settings of such services to understand how your information may be used.

Disclosure with Your Consent. Bekind Labs may disclose your information to third parties when you have provided explicit consent for such disclosure. For instance, we may feature personal testimonials from satisfied customers on our public websites. With your prior approval, we may include your name alongside the testimonial.

Compliance with Legal Obligations and Enforcement of Rights. In certain circumstances, Bekind Labs may be required to disclose your information to third parties if we determine, in good faith, that such disclosure is reasonably necessary to:

• (a) comply with applicable laws, regulations, legal processes, or government requests, including those related to national security;
• (b) enforce our agreements, policies, and terms of service;
• (c) protect the security, integrity, or functionality of our products and services;
• (d) safeguard Bekind Labs, our customers, or the public from harm, fraudulent activity, or illegal conduct; or
• (e) respond to an emergency where disclosure is necessary to prevent death or serious bodily harm to an individual.

Bekind Labs takes the protection of user data seriously and only discloses information when legally required or when it is essential to ensure compliance and security.

Disclosure to Affiliated Companies and Business Transfers

Affiliated Companies. Bekind Labs may share the information it collects with its affiliated companies and, where applicable, with prospective affiliates. Affiliated companies are entities that are owned, controlled, or operated by Bekind Labs. Any such disclosures will be conducted in accordance with this Privacy Policy, ensuring consistent data protection and compliance with applicable privacy laws.

Bekind Labs Corporate Affiliates. We may disclose information about you to other Bekind Labs affiliates for the purpose of operating, enhancing, and improving our products and services, including Tracker Boot. This enables us to provide you with access to additional Bekind Labs-affiliated services that may be relevant to your needs. Such disclosures are made solely to facilitate a seamless and integrated user experience across our affiliated services while maintaining the same level of data protection and privacy.

Business Transfers. Bekind Labs may share or transfer information collected under this Privacy Policy in connection with a merger, acquisition, corporate financing, restructuring, bankruptcy, sale of assets, or transition of the Services to another provider or operator. Where required by applicable law, we will provide notice of such transfer and any choices you may have.

How we store and secure collected information

Information Storage and Security

Bekind Labs employs industry-standard technical and organizational measures to safeguard the information we store. Users of Tracker Boot and other Bekind Labs services can refer to the Tracker Boot Agreement’s applicable Data Processing Addendum for further details on data storage and handling practices. While we implement security measures designed to protect your information, no system is entirely immune to security threats. Due to the inherent risks associated with the Internet, absolute security of data transmitted online or stored within our systems cannot be guaranteed. Despite our best efforts, there remains a possibility of unauthorized access, intrusion, or data exposure.

Data Retention Policy

The retention period for your information depends on the type of data and the purposes for which it is processed. Once the applicable retention period expires, we will either delete or anonymize your information. If immediate deletion is not technically feasible (such as in the case of data stored in backup archives), we will securely isolate and store the data until deletion is possible.

Account Information. We retain your account information for as long as your account remains active, and for a reasonable period thereafter in case you choose to reactivate your Services. Certain data may also be retained as necessary to comply with legal obligations, resolve disputes, enforce agreements, support business operations, and enhance our Services. When information is retained for service improvement, analytics, security, or development purposes, we take steps designed to minimize the use of directly identifying information and to retain such information only as reasonably necessary for the relevant purpose.

Content Shared Within the Services. If your account is deactivated or disabled, certain content and contributions you have made within the Services may remain accessible to team members or other users to ensure continuity and collaboration. For instance, user stories you have created, backlogs you have contributed, or comments you have made will still be displayed to relevant users. However, where required by applicable law and technically feasible, we may remove or anonymize identifying details associated with such content upon request, subject to our legal obligations and legitimate business needs.

AI Interaction Data Retention. We may retain AI interaction data, including AI inputs, AI outputs, conversation history associated with AI-assisted features, and related technical logs, for limited periods as reasonably necessary to operate the Services, maintain security, prevent abuse, debug issues, and improve reliability. Where appropriate and feasible, we minimize retention and apply redaction measures, such as masking sensitive information, to reduce exposure of personal or confidential data in logs.

AI agent traces, errors, transactions, and performance data related to AI-assisted features are retained for up to thirty (30) days. Certain infrastructure or service logs, including CloudWatch logs for the gen-ai-service, may be retained until deleted or until a different retention period is specified. Where applicable, accounting or billing records may be retained for longer periods as required by tax, accounting, or other legal obligations.

We may retain such data for longer where necessary to respond to security incidents, prevent or investigate abuse, resolve disputes, comply with legal holds, or satisfy other legal or regulatory obligations, in each case only to the extent required or permitted by applicable law and only for as long as reasonably necessary for the relevant purpose.

Managed Accounts. If your access to the Services is provided through an organization, such as your employer, your information will be retained as required by the administrator of your account. For further details, please refer to the section on Managed Accounts and Administrators.

Marketing Information. If you have opted in to receive marketing communications from Bekind Labs, we will retain your marketing preferences for a reasonable period, measured from the date of your last recorded interaction with our Services—such as opening an email from us or logging into your Bekind Labs account. Additionally, we retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such data was collected.

Accessing and managing your information

Bekind Labs provides users with various options to access, control, and manage personal information. The rights available to you depend on applicable laws and the jurisdiction in which you reside. These rights may include requesting details about how we process your data, obtaining a copy of your information we hold, objecting to the use of your data for certain purposes such as marketing, requesting deletion or restriction of your data, receiving your data in a structured, electronic format, requesting corrections or updates, and opting out of certain profiling activities. Some of these options can be exercised directly within the Services through your account settings. If the Services are managed on your behalf by an administrator, you may need to contact them for assistance. Your ability to exercise these rights may be subject to certain restrictions. We may be unable to fulfill a request if it involves disclosing another individual’s personal information or if we are required to retain certain data for legal or legitimate business interests. If you have authorized us to share your data with third-party service providers, such as by installing third-party apps, you will need to contact those providers directly to request deletion or restriction of your information. If you have unresolved concerns, you may have the right to file a complaint with the appropriate data protection authority in your country of residence, place of work, or where you believe your privacy rights have been violated. Where permitted under applicable laws, you may also appeal any decision we make regarding your request by contacting us at info@bekindlabs.com.

Accessing and Updating Your Information

Bekind Labs allows users to access and modify certain personal details within the Services. Profile information can be updated through the account settings within the platform.

Deactivating Your Account

If you no longer wish to use our Services, you or your administrator may deactivate your account. If this option is available to you, it can be found in your account settings. Otherwise, you may need to contact your administrator. If you are an administrator and are unable to deactivate an account through the provided settings, you may reach out to info@bekindlabs.com for assistance. Deactivating your account does not automatically delete your personal information. Some of your past activity and content contributions may remain visible to other users. For information on permanently removing your data, please refer to the next section.

Deleting Your Information

Users have the ability to delete certain personal data directly within the Services. Specific content containing personal information can be removed through the platform’s editing and deletion functions. Profile information can also be modified or deleted within the account settings. However, certain records may need to be retained to comply with legal obligations, complete transactions, or fulfill regulatory requirements.

Request to Restrict Use of Your Information

In certain circumstances, you may request that we cease accessing, storing, using, or otherwise processing your information if you believe we lack the appropriate legal basis to do so. For instance, if a Tracker Boot account was created without your authorization or you are no longer an active user, you may request the deletion of your account in accordance with this policy. If you previously provided consent for the use of your information for a specific purpose, you may withdraw that consent by contacting us. However, this withdrawal will not affect any processing that has already taken place prior to your request. Please note that processing such requests may require time for verification and execution. In cases where there is a delay or a dispute regarding our right to process your information, we will suspend further processing until the request is honored or the dispute is resolved, unless otherwise instructed by your administrator. If you object to the disclosure of your information to a third-party application, please disable the application or request your administrator to do so.

Opting Out of Communications

You have the option to opt out of receiving promotional communications from Bekind Labs. This can be done by selecting the unsubscribe option in our emails or by directly contacting us to request removal from our promotional mailing list or registration database. However, even if you opt out of promotional communications, you may still receive transactional, administrative, security, or other service-related communications.

Managing Cookie Preferences

You can control certain cookies and similar technologies through your web browser settings, which may allow you to manage, limit, or disable such technologies based on your preferences. For more information about how we use cookies and your available choices, please refer to our Cookie Policy.

Data Portability

Data portability allows you to obtain certain personal data in a structured format that can be transferred to another service provider. While this applies to some categories of information, it does not cover all data types. If you request data portability, we will provide an electronic file containing your basic account details and any content you have created within the spaces under your sole control.

How we transfer information

International Data Transfers

How We Transfer and Process Information Globally. Bekind Labs operates internationally, and as part of our global business operations, we may transfer, process, and store your information in countries outside of your country of residence, including locations where we or our third-party service providers operate. Whenever we transfer your information across borders, we implement appropriate safeguards to ensure compliance with applicable data protection regulations and to protect your personal data.

Transfers Within Bekind Labs Companies. To facilitate operation of the Services, Bekind Labs may transfer personal information among its affiliates and related entities in jurisdictions where we operate, such as Japan, South Korea, and India. This helps ensure that authorized personnel in those locations can access information as reasonably necessary to provide, maintain, secure, and improve the Services. Because data protection laws differ across jurisdictions, some countries may not provide the same level of protection as your country of residence. Where required by applicable law, Bekind Labs implements appropriate safeguards for such transfers, such as Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.

Transfers to Third Parties. Bekind Labs may transfer personal information to third-party service providers that support our operations, including cloud hosting, payment processing, analytics, customer support, and AI-related infrastructure or model execution services. When such transfers are subject to applicable cross-border transfer restrictions, we implement appropriate safeguards, such as Standard Contractual Clauses or other legally recognized transfer mechanisms, as required by law.

Additional privacy considerations

Notice to End Users

Certain services offered by Bekind Labs, including Tracker Boot, are designed for use by organizations. If you access the Services through an organization (for example, your employer), that organization may act as the administrator of the Services and may control the accounts, projects, and/or Service sites associated with your use. In such cases, privacy, security, access, and related requests should generally be directed in the first instance to your organization’s administrator, as your use of the Services may be subject to that organization’s policies and administrative controls. Bekind Labs does not control, and is not responsible for, the privacy or security practices of your organization, which may differ from those described in this Privacy Policy.

AI-assisted features within organizational accounts operate within the applicable project scope and are designed to respect applicable role-based access controls. Depending on administrator settings, service configuration, and user role, certain AI capabilities or actions may be unavailable, limited, or configured differently.

Administrator Capabilities

Member Administration: Administrators can add or remove members, assign roles, and adjust permissions within the account. This ensures that only authorized individuals have access to specific projects and resources.

Account Settings Configuration: They have the authority to modify account details, manage billing information, and oversee subscription plans, ensuring the account aligns with organizational requirements.

Project Settings Control: Administrators can edit project settings, including iteration length, point scales, and integration configurations, tailoring each project to its specific workflow.

Member Role Assignment: They can designate project roles such as Owner, Member, or Viewer, controlling the level of access and permissions each user has within a project.

Even if your current use of the Services is not managed by an administrator, an organization may still assume administrative control over your account at a later date. For instance, if you use an organization-issued email address (such as your work email) to register for Tracker Boot, the owner of the email domain (e.g., your employer) may claim administrative control over your account and its associated data. Should this occur, you will receive notification of the change.

If you do not wish to be subject to an organization’s administrative control, you should consider:

• Using a personal email address to register for or access the Services instead of a work-issued email;
• Deactivating your membership with any Tracker Boot project, team, or enterprise account that is administered by an organization;
• Updating the email address associated with your account (provided an administrator has not yet assumed control).

Once an administrator takes control over your account, you will no longer be able to change your email address or access permissions without the administrator’s approval.

For further information, please refer to your organization’s IT or administrative policies or contact your administrator directly.

Additional Disclosures for California Residents

This section applies to residents of California and supplements this Privacy Policy to the extent required by the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Depending on how you use the Services, we may collect and process the following categories of personal information from California residents, as permitted by applicable law:

• Identifiers: Name, email address, IP address, and unique identifiers associated with a user account.
• Commercial Information: Records of transactions, purchase history, and billing details.
• Internet or Other Electronic Network Activity: Information related to the use of our Services, including device details, browser type, and interactions with our websites.
• Professional or Employment-Related Information: Job title, company name, and industry affiliation.
• Geolocation Data: Approximate location derived from IP addresses.
• Inferences Drawn from Other Personal Information: User preferences, behavioral patterns, and interests based on interactions with our Services.

Bekind Labs does not sell or share personal information for cross-context behavioral advertising.

Sensitive Personal Information. Bekind Labs does not use or disclose sensitive personal information for purposes other than those permitted by applicable law.

Data Retention. We retain personal information for the periods described in the “Data Retention Policy” section of this Privacy Policy, or for such longer period as required or permitted by applicable law. The duration of retention depends on several factors, including compliance with recordkeeping requirements, the need to address inquiries or disputes, and whether there is an ongoing relationship with you.

Exercising Your Rights. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). These rights may include the right to request information about how we process your personal information, the right to request deletion, and the right to request access to the categories and specific pieces of personal information we have collected about you, subject to applicable law. For instructions on how to exercise these rights, please refer to the section “How to access and control your information.” We encourage you to manage your personal data and take advantage of the privacy controls provided in our Services. Bekind Labs does not discriminate against users who exercise their CCPA privacy rights. To ensure the security of your data, we may require identity verification before processing requests to access, correct, or delete your information. If we cannot verify your identity, we may be unable to fulfill such requests.

We may disclose personal information to service providers and subprocessors that perform services on our behalf, subject to appropriate contractual and data protection obligations. Details regarding applicable service providers and subprocessors are described in this Privacy Policy, our Data Processing Addendum, and our Sub-processor List.

Authorized Agents. You may appoint an authorized agent to submit requests on your behalf. To do so, you must provide the agent with written permission, and we may request a copy of this authorization when processing their request. In addition, we may require you to verify your own identity and confirm that you have granted permission to the authorized agent.

Age Restrictions and Children’s Privacy

Tracker Boot is intended for users aged 16 and above. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will take steps to delete it as required by applicable law.

International Data Transfers

Bekind Labs operates globally and may transfer, process, and store personal information in countries outside your country of residence, including where Bekind Labs or its third-party service providers operate, in order to provide, maintain, secure, and improve the Services. Where required by applicable law, Bekind Labs implements appropriate safeguards for such transfers, such as Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.

Bekind Labs may also transfer personal information among its affiliates and related entities in jurisdictions where we operate, including Japan, South Korea, India, and the United States, as reasonably necessary to support business operations and service delivery. Where such transfers are subject to applicable cross-border data transfer requirements, Bekind Labs implements appropriate safeguards in accordance with applicable law.

Bekind Labs may also transfer personal information to third-party service providers that support our operations, such as cloud hosting, payment processing, analytics, customer support, and AI-related infrastructure or model execution services. When such transfers are subject to applicable cross-border transfer restrictions, Bekind Labs implements appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms. Further information regarding applicable cross-border transfer safeguards may be obtained by contacting info@bekindlabs.com.

Changes to our privacy policy

Bekind Labs may update this privacy policy from time to time. Any changes will be posted on this page, and if significant modifications are made, we will provide additional notice through:

• Announcements on our Services’ homepages or login screens
• Direct email notifications

We will also maintain an archive of previous versions of this Privacy Policy for your reference. We encourage you to review this policy regularly to stay informed about how we handle personal information. If you do not agree with any changes to this Privacy Policy, you may stop using the Services and deactivate your account as outlined in this policy.