Data Protection and Privacy Policy

A. Introduction

1. Purpose

The purpose of Cursory Technologies’ AI and Data Regulation governance is to establish a comprehensive framework for protecting client data and ensuring adherence to data privacy regulations. It outlines our commitment to safeguarding client information, detailing the measures in place to prevent the misuse of data, particularly with respect to its use in training or enhancing artificial intelligence (AI) capabilities. By clearly defining our policies and procedures, we aim to foster trust with our clients and uphold the highest standards of ethical data usage and AI responsibility.

2. Scope and Applicability

This policy applies to all employees, contractors, and third-party vendors engaged with Cursory Technologies who handle, process, or have access to client data. It covers all types of client data collected, processed, and stored by Cursory, as well as data shared with or accessed by our AI and Insight Engine. The policy is designed to ensure that all activities related to client data are conducted in accordance with legal and regulatory requirements, as well as Cursory’s internal standards for data protection.

3. Definitions and Terminology

To ensure clarity and consistency throughout this document, the following definitions are provided:

• Client Data: Any data provided by or collected from clients, including but not limited to personal information, business information, and any other data necessary for delivering services or conducting business operations.

• Respondent Data: Any information collected from individuals (respondents) who participate in surveys, research studies, or any data collection activities conducted by or on behalf of Cursory Technologies.

• AI Training: The process of using data to improve or develop artificial intelligence models, including machine learning algorithms and other related technologies.

• Data Privacy: The protection of personal and business data from unauthorized access, use, or disclosure.

• Compliance: Adherence to relevant data protection laws, regulations, and standards that govern the handling of client data.

B. Data Privacy and Usage Policy Clauses

1. Statement of Commitment

1.1 Commitment to Data Privacy

Cursory Technologies (hereinafter referred to as “Company”) is dedicated to maintaining the highest standards of data privacy and security. The Company is committed to ensuring that all client data is handled with the utmost care, confidentiality, and respect.

1.2 Purpose of Data Use

Client data shall be used exclusively for the specific purposes for which it was collected, as outlined in the project or service agreement. The Company will adhere strictly to all applicable data protection laws and regulations to ensure compliance.

1.3 Non-Usage of Client Data for AI Training

The Company unequivocally pledges that client data will not be used to train or enhance its artificial intelligence (AI) models or insight engine capabilities. The data shall remain isolated from any AI training or enhancement processes.

2. Data Usage Limitations

2.1 Specific Use of Data

Client data will be utilized solely for the execution of agreed-upon projects and services. It will not be employed to enrich or train the Company’s AI systems or for any purposes beyond those explicitly stated in the project or service agreement.

2.2 Operational Efficiency

The Company’s AI and Insight Engine capabilities are designed to operate efficiently without requiring additional client data for training or enhancement. Client data will be used only for immediate business processes necessary for fulfilling the project or service.

2.3 Data Confidentiality

The Company ensures that client data remains isolated from any AI training activities. This measure is implemented to safeguard the confidentiality and integrity of client information.

C. Cursory’s Insight Engine & AI Capabilities

1. Description of AI Capabilities

Cursory Technologies’ Insight Engine leverages AI to enhance the efficiency and effectiveness of market research processes through sophisticated technologies. Our AI systems utilize advanced natural language processing (NLP) models and generative capabilities created from broader knowledge bases. These capabilities are combined with rigorously developed statistical analysis methods and automation workflows, ensuring a seamless market research process. The Insight Engine optimizes workflows, enabling the extraction of actionable insights without relying on client data for training.

2. Statement on Non-Usage of Client Data for AI Training

Cursory Technologies maintains a strict policy ensuring client data is not used for AI training. Our AI systems operate independently of client data, maintaining strict segregation and data protection standards. Our AI-driven processes are built on fundamental principles of market research, ensuring intelligence, accuracy, and efficiency without requiring project-specific data for model improvements.

3. Optimization and Maintenance of AI Models

Our AI models are optimized and maintained using proprietary techniques and methodologies that do not involve training with client data. System efficiency is enhanced through internal optimizations rather than external data input, ensuring robust performance while upholding data privacy commitments.

D. What Data Do We Collect?

At Cursory Technologies, data collection is conducted with a clear purpose and strict adherence to privacy and compliance standards. Data is collected primarily to deliver and improve market research services. Transparency is maintained regarding data types collected and their specific use cases. Secure transmission methods, including encryption, are utilized to ensure data security.

E. How Do We Protect Your Data?

Cursory Technologies is committed to stringent data protection measures, including:

1. Compliance with Global Data Privacy Regulations

   • GDPR (General Data Protection Regulation)

   • CCPA (California Consumer Privacy Act)

   • PIPA (Personal Information Protection Act – Japan)

   • LGPD (Lei Geral de Proteção de Dados – Brazil)

   • PIPEDA (Personal Information Protection and Electronic Documents Act – Canada)

2. Data Encryption

   • Encryption in Transit (HTTPS, TLS)

   • Encryption at Rest (Advanced Encryption Standards)

3. Access Controls

   • Role-Based Access Control (RBAC)

   • Multi-Factor Authentication (MFA)

4. Data Anonymization and Pseudonymization

   • Removing personally identifiable information where possible

   • Utilizing pseudonymization techniques to minimize breach risks

5. Secure Data Storage

   • Secured servers with updated security patches

   • Database encryption and access restrictions

6. Audit Trails and Continuous Monitoring

   • Detailed logging of data access and modifications

   • Real-time monitoring to detect and mitigate potential security threats

7. Vendor and Third-Party Management

   • Conducting due diligence on third-party vendors

   • Enforcing contractual data protection obligations

8. Employee Training and Awareness

   • Regular training programs on data privacy and security best practices

9. Incident Response Plan

   • Clear protocols for identifying, reporting, and mitigating security incidents

   • Timely notification to affected clients and regulatory authorities in the event of a data breach

Cursory Technologies ensures that client data remains confidential and is never used for secondary purposes such as algorithm enhancement. Our commitment to data privacy and ethical data use underpins our dedication to delivering reliable and trustworthy solutions. For more information about data usage and protection, reach out to us at support@cursory-tech.com.