Privacy Policy

Last updated: August 20, 2024

eggheads helps organisations inform, educate, engage and support their employees and customers with chat-based learning nuggets and digital assistants, designed for onboarding, training and performance support. 

To achieve this, we provide:

  • Website: A website that provides information about our service, accessible at https://eggheads.ai.
  • Service: A cloud-based Software as a Service (SaaS) accessible at https://app.eggheads.ai or through a dedicated Microsoft Teams app (called egghead), where:
    • Registered users can create, distribute, and analyze chatbased learning nuggets (chats) and digital assistants.
    • Registered users can access chats using a secure login.
    • Any user can access public chats without logging in (this applies only to the web-based SaaS, not the Microsoft Teams app)

We are committed to protecting your privacy and ensuring that your personal data is handled safely and responsibly. This Privacy Policy outlines how we collect, use, and protect your personal information when you visit our website or use our services for employee onboarding, training, and performance support.

By using our services, you agree to the collection, use, and disclosure of your personal information as described in this policy.

2. Data Processor and Data Controller Roles

When you register for our service, Eggheads AG acts as a Data Processor, processing personal data on your behalf according to your instructions. As the customer, you act as the Data Controller, responsible for determining the purposes and means of processing the data. As a Data Processor, we strictly adhere to your instructions and comply with all relevant data protection regulations.

 

3. Integration with Third-Party Platforms

Our service offers the option to integrate with and utilize data from third-party online platforms, such as Microsoft Teams (collectively referred to as “Platforms”). When you choose to add our service to these Platforms, we may request permissions that allow the sharing of information such as account details, profile information, and settings from the respective Platform. As a user of these Platforms, their terms and conditions, privacy policies, and data handling practices will apply to your use of our services within those Platforms, and by using them, you acknowledge that you have agreed to and accepted these terms.

4. Security of Your Personal Data

We prioritize the security of your personal data and employ commercially acceptable means to protect it from unauthorized access, use, or disclosure. However, please be aware that no method of data transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Information We Collect

We may collect and process different types of personal information depending on whether you are visiting our website or using our service as a registered or unregistered user:

When You Visit Our Website:

  • Personal Data: Information that identifies you, such as your name and email address, if you provide them through forms or other interactions on the website.
  • Technical Data: Information such as your IP address, browser type, operating system, and other technical details that are automatically collected when you browse our website.

When You Use Our Service (SaaS):

  • Personal Data: Information that identifies you, such as your name, email address, and any other details you provide during registration or use of our services.
  • Usage Data: Information about how you interact with our service, including data on clicked buttons, entered information, and other interaction data.
  • Technical Data: Information such as your IP address, device type, and other technical details collected automatically when you access and use our services.

6. How We Use Your Information

We use your personal data for the following purposes:

  • Service Provision: To provide, maintain, and improve our service, including processing your requests and managing your account.
  • Service Monitoring and Analysis: We use Microsoft Azure, hosted redundantly in the EU, and associated services like Application Insights to monitor and analyze service usage to ensure stability and performance.
  • Customer Support: To respond to your inquiries, provide technical support, and improve our services based on your feedback.
  • Data Aggregation and Participation Tracking: Our service allows customers to analyze aggregated user data, such as button clicks and data entries, to enhance training and performance support. Additionally, paying customers have the option to track their employees’ participation in training modules, including whether an employee has been invited, is actively completing a module, or has finished it. In this context, Eggheads AG acts as a Data Processor, processing data on behalf of our customers, who are the Data Controllers and responsible for ensuring compliance with applicable data protection regulations.
  • Marketing, Advertising, and Remarketing: We may use your personal data for marketing and advertising purposes, including sending you promotional materials, offers, and updates about our services. We also use remarketing techniques to target advertisements to you on third-party websites based on your interactions with our service. You have the right to opt-out of these communications and activities at any time. You can do this by following the unsubscribe instructions provided in our marketing communications, adjusting your browser settings to block cookies, or managing your preferences through our Cookie Policy (below), which allows you to control cookie usage via CookieYes, our Consent Management Platform (CMP).

7. How We Share Your Information

Your personal data may be shared with third parties in the following circumstances:

  • Service Providers: We work with trusted third-party service providers who assist us in delivering our services. These providers have access to your personal data only to perform specific tasks on our behalf and are contractually obligated to protect your data and use it solely for the purposes we specify. Additionally, we use these services to monitor the requests and health of our Service, ensuring its stability, performance, and reliability.
  • Legal Compliance: We may disclose your personal data if required by law, regulation, court order, or other legal processes.
  • Business Transfers: In the event of a merger, acquisition, or sale of our company, your personal data may be transferred to the new owner.

Subprocessors

To deliver our services efficiently and securely, we work with the following trusted third-party service providers (subprocessors):

  • Microsoft (Azure)
  • Twilio/SendGrid
  • OpenAI
  • Cloudflare
  • Help Scout
  • ReportURI

For more detailed information about each subprocessor’s privacy practices, you may visit their respective privacy policies available on their websites.

8. Cookies and Tracking Technologies

Effective Date: 20-Aug-2024
Last Updated: 20-Aug-2024

 
What are cookies?
 
How do we use cookies?
 
Types of Cookies we use
 
Manage cookie preferences
Cookie Settings

You can change your cookie preferences any time by clicking the above button. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.

In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers.

Chrome: https://support.google.com/accounts/answer/32050

Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US

Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc

If you are using any other web browser, please visit your browser’s official support documents.

 

9. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy. Specifically:

  • Active Accounts: Personal data associated with active accounts will be retained for the duration of the account’s activity.
  • Terminated Accounts: Personal data will be retained for 30 days after account termination, unless longer retention is required for legal compliance or legitimate business purposes.

10. Your Rights

Depending on the jurisdiction in which you reside, you may have certain rights regarding your personal data, including:

  • Access: The right to request access to your personal data.
  • Rectification: The right to request corrections to any inaccuracies in your personal data.
  • Erasure: The right to request the deletion of your personal data, subject to certain conditions.
  • Restriction: The right to request the restriction of processing of your personal data, subject to certain conditions.
  • Objection: The right to object to the processing of your personal data for certain purposes, subject to certain conditions.
  • Withdrawal of Consent: The right to withdraw your consent to the processing of your personal data at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable data protection laws.

11. Exercising Your GDPR Data Protection Rights

If you are located in the European Economic Area (EEA), you have specific rights under the General Data Protection Regulation (GDPR), including the rights of access, rectification, cancellation, and opposition regarding your personal data.

You may exercise these rights by contacting us. Please note that we may ask you to verify your identity before responding to such requests. We will try our best to respond to your request as soon as possible.

If you believe that our processing of your personal data violates your rights under GDPR, you have the right to lodge a complaint with a Data Protection Authority in the EEA. For more information, please contact your local data protection authority in the EEA.

We have appointed the following data protection representative pursuant to Article 27 GDPR in the European Economic Area (EEA), including the European Union (EU) and the Principality of Liechtenstein, as an additional point of contact for supervisory authorities and data subjects:

VGS Datenschutzpartner GmbH
Am Kaiserkai 69
20457 Hamburg
Germany
[email protected]

12. Children's Privacy

Our Website and Service are not intended for anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you become aware that your child has provided us with personal data, please contact us immediately. If we discover that we have collected personal data from a child under 13 without verification of parental consent, we will take steps to delete that information from our servers.

For users between the ages of 13 and 18, we may limit the collection, use, and storage of their information to ensure compliance with applicable laws. In some cases, this means certain functionalities of the Service may not be available to these users.

If we rely on consent as a legal basis for processing your information, and your country requires parental consent, we may need your parent’s consent before we can collect and use that information.

13. Third-Party Links

Our website may contain links to third-party websites. Please be aware that we are not responsible for the privacy practices of these third-party websites. We encourage you to read the privacy policies of any website you visit.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with the updated effective date. We recommend that you review this Privacy Policy periodically to stay informed about how we are protecting your data.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at:

Eggheads AG
Rosenhof 5,
8808 Pfäffikon,
Switzerland

Contact: [email protected]
+41445082708

Get your AI-Chatbot for employee onboarding, training and performance support.

How to get started

Explore on your own

Are you a business or training professional? Request your free account below.

Already have an account? Log in