Privacy Policy

Playtag Inc. (“Playtag,” “we,” “our,” or “us”) values and respects your privacy. This Privacy Policy explains how we collect, use, disclose, store, retain, transfer, secure, and otherwise process personal information in connection with:

1. the monoxyz website located at monoxyz.ai;
2. the monoxyz web application and demonstration environment;
3. related software, enterprise deployments, application programming interfaces, tools, documentation, and features that we provide;
4. customer support, sales, marketing, research, events, and other interactions with Playtag; and
5. any other monoxyz products or services that refer to this Privacy Policy.

These are collectively referred to as the “monoxyz Services” or the “Services.”

For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable individual.

By accessing or using the monoxyz Services, you acknowledge the practices described in this Privacy Policy. Your use of the monoxyz Services may also be subject to our Terms of Use, customer agreement, data processing agreement, or another applicable agreement with Playtag.

1. Our Role in Processing Personal Information

Playtag’s role depends on how and why personal information is processed.

1.1 Information Playtag Processes for Its Own Purposes

Playtag generally acts as a data controller, business, or similar responsible entity, as those terms may be defined under applicable privacy laws, when we process personal information relating to:

• monoxyz account registration and administration;
• billing and subscription management;
• website visitors;
• demonstration and sales requests;
• customer support;
• marketing communications;
• service security and fraud prevention;
• employment applications; and
• Playtag’s internal business operations.

1.2 Information Processed on Behalf of Customers

Customers may upload or otherwise provide videos, images, audio, questions, prompts, labels, metadata, files, and other materials to the monoxyz Services for analysis. These materials are collectively referred to as “Customer Data.”

When Playtag processes Customer Data on behalf of an organization, the customer generally determines why and how the Customer Data is processed. In that context, the customer generally acts as the applicable data controller, business, or responsible organization, while Playtag generally acts as the customer’s processor, service provider, contractor, or similar processing partner.

Our processing of Customer Data is governed by:

• the applicable customer agreement;
• any applicable data processing agreement;
• customer instructions;
• account settings; and
• this Privacy Policy.

Where an applicable customer agreement or data processing agreement conflicts with this Privacy Policy regarding Customer Data, the applicable contractual terms will control.

Individuals who have questions about footage or other Customer Data submitted by a Playtag customer should ordinarily contact that customer first. For example, an employee appearing in workplace footage should generally direct a privacy request to the employer or organization that collected and uploaded the footage.

2. Personal Information We Collect

2.1 Account Information

When you register for, access, or administer a monoxyz account, we may collect:

• first and last name;
• email address;
• password or authentication credentials;
• telephone number;
• company, institution, or organization;
• job title or professional role;
• country or region;
• account preferences;
• subscription and account status; and
• communications relating to your account.

We use this information to create, authenticate, maintain, secure, and administer your account and to provide access to the monoxyz Services.

You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying Playtag if you suspect unauthorized access to or use of your account.

2.2 Customer Video Data

When you use monoxyz, you may upload or otherwise provide:

• video files;
• image files;
• audio contained in video files;
• footage metadata, including file name, recording time, duration, or camera information;
• descriptions, labels, identifiers, or contextual information;
• customer-defined behavioral criteria;
• selections, corrections, and feedback; and
• related files or supporting materials.

These materials are collectively referred to as “Customer Video Data.”

Depending on the uploaded content, Customer Video Data may contain:

• faces;
• voices;
• movements;
• physical characteristics;
• locations;
• activities;
• interactions;
• routines;
• behaviors; and
• other information relating to identifiable individuals.

monoxyz may distinguish, follow, or analyze different people within a video to provide person-level analysis. The ability to distinguish individuals within footage does not necessarily mean that Playtag knows those individuals’ names or real-world identities.

2.3 Questions, Prompts, and User Inputs

When using monoxyz, users may submit:

• questions about uploaded footage;
• analysis instructions;
• prompts;
• search requests;
• descriptions;
• labels;
• behavioral criteria; and
• other text or instructions.

These inputs may contain personal information or sensitive contextual information depending on what a user chooses to submit.

Users should avoid including personal information in questions or prompts unless the information is reasonably necessary for the requested analysis and the user has the legal right to provide it.

2.4 Analysis Results and Outputs

monoxyz may generate information from Customer Data, including:

• answers to customer questions;
• behavioral observations;
• time codes and timestamps;
• counts and durations;
• movement paths;
• dwell times;
• event detections;
• interaction patterns;
• matching scenes or clips;
• captions and summaries;
• reports;
• structured datasets;
• technical features or representations required to process footage; and
• other analytics requested by the customer.

These materials are collectively referred to as “Outputs.”

Outputs may constitute personal information when they relate to an identified or identifiable individual.

2.5 Contact and Demonstration Requests

When you request a demonstration, contact us, or submit an inquiry, we may collect:

• your name;
• email address;
• telephone number;
• organization;
• job title;
• industry or operating environment;
• information about your video-analysis needs;
• intended use case;
• messages and attachments; and
• other information you voluntarily provide.

We use this information to respond to your inquiry, evaluate your needs, provide demonstrations, and communicate with you about potential use of the monoxyz Services.

2.6 Payment and Transaction Information

If you purchase a subscription or another service, we or our payment providers may collect:

• billing name and address;
• transaction amount;
• subscription plan;
• payment status;
• tax information;
• invoice information; and
• limited payment-method information.

Payment card information is generally processed directly by a third-party payment processor. Playtag does not ordinarily receive or store complete payment card numbers or payment-card security codes.

2.7 Communications and Customer Support

When you communicate with us, we may collect your contact information and the contents of your communication, including:

• support requests;
• troubleshooting information;
• feedback;
• survey responses;
• technical information;
• screenshots or files you provide; and
• records of our correspondence.

We may retain this information to respond to your request, provide customer support, maintain business records, improve the monoxyz Services, and investigate technical or security issues.

2.8 Marketing, Events, and Professional Interactions

We may collect personal information when you:

• subscribe to marketing communications;
• attend a conference, webinar, trade show, or other event;
• interact with Playtag through social media;
• participate in a survey or research activity;
• participate in a beta or pilot program; or
• communicate with us regarding a partnership or business opportunity.

2.9 Employment Information

When you apply for employment with Playtag, we may collect information contained in your:

• employment application;
• résumé or curriculum vitae;
• cover letter;
• portfolio;
• references;
• interview records; and
• other employment-related materials.

2.10 Information Collected Automatically

When you visit or use the monoxyz Services, we may automatically collect:

• IP address;
• device identifiers;
• browser type;
• operating system;
• language and regional settings;
• referring and exit pages;
• pages and features viewed;
• dates and times of access;
• approximate location derived from IP address;
• session and interaction information;
• diagnostic, performance, and error information;
• login and authentication records; and
• security and operational information.

We use this information to operate, secure, troubleshoot, analyze, maintain, and improve the monoxyz Services.

2.11 Information From Third Parties

We may receive information from:

• an organization that creates or manages your account;
• an authorized account administrator;
• authentication or identity-management providers;
• payment processors;
• analytics providers;
• service providers and business partners;
• professional databases or publicly available sources; and
• individuals who refer or introduce you to Playtag.

3. How We Use Personal Information

We may use personal information to:

• provide, operate, maintain, and administer the monoxyz Services;
• upload, store, process, index, analyze, and retrieve Customer Data;
• generate Outputs requested by users;
• distinguish people within footage for the requested analysis;
• authenticate users and manage account permissions;
• personalize account settings and user experiences;
• process purchases and subscriptions;
• respond to inquiries, support requests, and demonstration requests;
• communicate about accounts, transactions, security, and service updates;
• send marketing communications where permitted by law;
• conduct surveys, product testing, research, and service evaluation;
• analyze aggregated or de-identified service usage;
• monitor service reliability and performance;
• diagnose and resolve technical issues;
• detect, investigate, and prevent fraud, misuse, security incidents, and illegal activity;
• enforce our agreements and acceptable-use requirements;
• comply with legal and regulatory obligations;
• establish, exercise, or defend legal claims;
• protect the rights, safety, property, and security of Playtag, our customers, users, and others; and
• carry out other purposes disclosed when information is collected or with your permission.

4. Storage, Encryption, and Processing of Customer Data

4.1 Amazon Web Services Storage

Customer Video Data uploaded to monoxyz is stored using Amazon Web Services, including Amazon Simple Storage Service, commonly referred to as Amazon S3.

The Amazon S3 storage currently used for monoxyz is located in the us-east-1 AWS Region in the United States.

Playtag may change or supplement its cloud infrastructure as the monoxyz architecture and Services evolve. If a material change affects where or how personal information is processed, Playtag will update this Privacy Policy or provide another notice where required by applicable law.

4.2 Encryption in Transit

Video files uploaded through the monoxyz Services are transmitted using HTTPS.

HTTPS uses Transport Layer Security, commonly referred to as “TLS,” to encrypt video data while it is transmitted between the user’s device and the monoxyz Services.

Encryption in transit is designed to reduce the risk that uploaded video data will be intercepted or accessed by unauthorized parties while it is being transmitted.

Users should access monoxyz using supported browsers, secure devices, and trusted networks.

4.3 Encryption at Rest

Objects stored in Amazon S3 are encrypted at rest using server-side encryption with Amazon S3-managed encryption keys, commonly referred to as “SSE-S3.”

Encryption at rest is intended to protect information while it is stored. It does not mean that Customer Data is end-to-end encrypted or technically inaccessible to all authorized Playtag personnel.

4.4 Public Access Restrictions

Amazon S3 Block Public Access is enabled for the storage used by monoxyz.

This setting is designed to prevent Customer Video Data stored in the applicable Amazon S3 bucket from being made publicly accessible through public bucket policies, access control lists, or similar Amazon S3 configurations.

Customer Video Data is not intended to be publicly accessible through Amazon S3.

Enabling S3 Block Public Access does not replace account security, authentication, administrative access restrictions, or other security controls.

5. Access to Customer Data

5.1 User Access

Customer Data is associated with the applicable user or customer account.

Ordinary users cannot access videos, questions, prompts, or Outputs belonging to unrelated users through the standard monoxyz user interface.

Users may access Customer Data only through accounts and permissions they are authorized to use.

5.2 Playtag Administrative Access

Authorized Playtag personnel with administrative privileges may be technically able to access Customer Data associated with different user accounts.

Administrative access may include access to:

• uploaded videos and images;
• questions and prompts;
• associated metadata;
• analysis results;
• generated clips;
• reports; and
• other Outputs.

Playtag limits administrative access to circumstances in which access is reasonably necessary to:

• provide customer support;
• respond to a user request;
• diagnose or resolve a technical issue;
• investigate suspected misuse or unauthorized activity;
• maintain the availability, integrity, or security of the Services;
• verify that the Services are functioning properly;
• comply with applicable law or valid legal process;
• enforce an applicable agreement; or
• protect the rights, safety, and property of Playtag, our customers, users, or others.

Administrative access does not mean that Customer Data is publicly available or accessible to other monoxyz users.

Authorized Playtag personnel are expected to access only the Customer Data reasonably necessary for the relevant operational, support, technical, security, compliance, or legal purpose.

5.3 Administrative Access Logging

At present, monoxyz does not maintain a dedicated audit log recording each instance in which an authorized Playtag administrator views a user’s video, question, prompt, or Output.

Other general system, authentication, or infrastructure records may exist, but they should not be understood as a complete record of every administrative viewing of Customer Data.

Playtag may introduce additional administrative access logging as the monoxyz architecture and security requirements develop.

6. Use of Customer Data and Model Training

Customer Data is processed to provide the analysis, Outputs, support, security, storage, and related functionality requested by the customer.

Playtag does not use Customer Data to train artificial-intelligence models.

This restriction applies to:

• uploaded videos;
• uploaded images;
• audio;
• questions;
• prompts;
• labels;
• metadata; and
• Outputs.

Playtag does not authorize its service providers to use Customer Data to train generalized or publicly available artificial-intelligence models.

Customer Data may be processed by Playtag or its service providers only as reasonably necessary to:

• provide the analysis requested by the user;
• generate and deliver Outputs;
• store and retrieve Customer Data;
• provide customer support;
• diagnose technical issues;
• maintain or secure the Services;
• investigate suspected misuse;
• comply with applicable law; or
• enforce applicable agreements.

Customer Data will not be used in public demonstrations, promotional materials, case studies, publications, sample analyses, or marketing materials without the customer’s separate authorization.

Playtag does not use Customer Data for targeted advertising.

Playtag may use aggregated or de-identified information that cannot reasonably be linked to an identifiable individual or customer to:

• understand service performance;
• improve reliability;
• identify technical errors;
• evaluate system performance; and
• develop or improve the monoxyz Services.

Playtag will not attempt to reidentify properly de-identified information except where reasonably necessary to verify that the de-identification process is effective or where otherwise permitted by law.

7. Customer Responsibilities for Uploaded Footage

Customers are responsible for the Customer Data they submit to the monoxyz Services.

Before uploading footage or other personal information, customers must ensure that they:

• have the legal right and authority to collect, upload, disclose, store, and analyze the information;
• provide all notices required by applicable law;
• obtain valid consent where consent is required;
• comply with applicable video-surveillance, workplace-monitoring, biometric, wiretapping, child-privacy, educational-privacy, health-information, and other privacy laws;
• respect the rights and reasonable expectations of individuals appearing in the footage;
• implement appropriate account and access controls;
• avoid uploading information that is not reasonably necessary for the intended analysis;
• use Customer Data only for lawful and disclosed purposes; and
• respond to privacy requests from individuals whose information the customer controls.

Customers must not use monoxyz to engage in:

• unlawful surveillance;
• unlawful profiling;
• discrimination;
• harassment;
• stalking;
• infringement of privacy rights; or
• other unlawful or prohibited activity.

If Customer Data includes children, patients, employees, residents, students, research participants, or other individuals who may require heightened privacy protection, the customer is responsible for establishing an appropriate legal basis and obtaining any required authorization or consent from the:

• individual;
• parent or guardian;
• employee representative;
• institution;
• institutional review board or ethics committee; or
• other legally authorized person.

8. Disclosure of Personal Information

We do not disclose personal information to third parties except as described in this Privacy Policy, as directed by a customer, with your permission, or as otherwise permitted or required by law.

8.1 Amazon Web Services

Playtag uses Amazon Web Services, including Amazon S3, to store Customer Data and related service information.

Customer Video Data is currently stored in the us-east-1 AWS Region.

Amazon Web Services processes this information as a cloud infrastructure and storage provider to Playtag.

Customer Video Data stored in Amazon S3 is encrypted at rest using SSE-S3, and S3 Block Public Access is enabled for the applicable storage.

8.2 Other Service Providers

We may disclose personal information to vendors that provide services on our behalf, including:

• cloud infrastructure;
• data storage;
• video processing;
• content delivery;
• artificial-intelligence infrastructure;
• authentication and account management;
• cybersecurity and fraud prevention;
• payment processing;
• customer support;
• email and business communications;
• website hosting and maintenance;
• analytics and performance monitoring;
• professional consulting;
• legal services;
• accounting services;
• insurance services; and
• compliance services.

Service providers are authorized to process personal information only as reasonably necessary to provide their contracted services to Playtag and subject to applicable contractual, confidentiality, security, and data-protection obligations.

8.3 Artificial-Intelligence and Computing Providers

Playtag may use third-party artificial-intelligence, video-processing, or computing providers to support portions of the monoxyz Services.

Depending on the requested analysis, these providers may process:

• videos;
• extracted images or frames;
• audio;
• transcripts;
• metadata;
• questions;
• prompts; or
• other Customer Data.

Playtag does not authorize these providers to use Customer Data to train generalized or publicly available artificial-intelligence models.

The particular service providers and technical architecture used by monoxyz may change as the Services develop.

Where required by applicable law or contract, information about relevant subprocessors may be made available to customers upon request or through an applicable data processing agreement.

8.4 Business Partners

We may disclose information to business partners when reasonably necessary to provide a product, integration, demonstration, pilot, or service requested by a customer.

We may also disclose business contact information in connection with jointly offered events, partnerships, or services where permitted by law.

8.5 Affiliates

We may disclose information to Playtag’s current or future subsidiaries, parent entities, or affiliated companies for the purposes described in this Privacy Policy.

8.6 Legal, Safety, and Compliance Purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law, regulation, subpoena, court order, warrant, or other valid legal process;
• respond to a lawful request from a government or law-enforcement authority;
• investigate suspected fraud, misuse, or unlawful activity;
• protect the safety, rights, or property of Playtag, our customers, users, or others;
• enforce our agreements;
• establish, exercise, or defend legal claims; or
• prevent, investigate, or respond to a security incident.

Where legally permitted and reasonably practicable, we may notify the affected customer before disclosing Customer Data in response to legal process.

8.7 Corporate Transactions

Personal information may be disclosed or transferred in connection with a proposed or completed:

• merger;
• financing;
• acquisition;
• corporate reorganization;
• sale of assets;
• insolvency proceeding; or
• other change in ownership or control.

Any successor will be required to process personal information consistently with applicable law and the commitments applicable to the transferred information.

8.8 With Consent or at Your Direction

We may disclose information when you or the applicable customer authorizes or directs us to do so.

9. Retention and Deletion

9.1 Retention Until Deletion

Unless a user deletes the information, Playtag may retain:

• original uploaded videos;
• uploaded images;
• questions;
• prompts;
• associated metadata;
• analysis results;
• generated clips;
• reports; and
• other Outputs

for an indefinite period.

This means that Customer Data does not automatically expire or become automatically deleted after a fixed retention period.

Customers should not rely on Playtag to automatically delete Customer Data after a specific number of days, months, or years.

Users are responsible for deleting Customer Data that they no longer want Playtag to retain, subject to the functionality available through their accounts and any applicable contractual or legal requirements.

9.2 User-Initiated Deletion

Users can delete uploaded videos through the monoxyz Services.

Deleting a video may also result in deletion or loss of access to related questions, prompts, analysis results, clips, or Outputs, depending on how the relevant information is associated within the Services.

Where the user interface does not permit deletion of a particular item, users may contact Playtag at info@playtag.ai to request deletion.

Playtag may need to verify the requester’s identity and authority before completing a deletion request.

9.3 No Separate Backup Retention

Playtag does not maintain a separate backup copy of deleted Customer Video Data.

When Customer Video Data is deleted from the applicable active Amazon S3 storage, Playtag does not retain a separate backup copy for later restoration.

Subject to any necessary technical processing time and applicable legal obligations, deletion is intended to be permanent, and deleted Customer Video Data ordinarily cannot be restored by Playtag.

9.4 Information Retained After a Deletion Request

Playtag may retain limited information after a deletion request where reasonably necessary to:

• comply with applicable law;
• preserve transaction or accounting records;
• prevent fraud or misuse;
• maintain security records;
• resolve disputes;
• enforce agreements; or
• establish, exercise, or defend legal claims.

Any information retained for these purposes will not be used for unrelated marketing or model-training purposes.

9.5 Account Closure

Closing an account does not necessarily result in immediate deletion of all Customer Data unless:

• the user deletes the relevant data;
• the user submits a deletion request;
• the applicable customer agreement requires deletion; or
• applicable law requires deletion.

Customers should review and delete Customer Data before closing an account where possible.

10. Sale and Targeted Advertising

Playtag does not sell Customer Video Data.

Playtag does not sell personal information for monetary consideration and does not share Customer Video Data for cross-context behavioral advertising.

Playtag does not use uploaded videos, questions, prompts, or Outputs to present targeted advertisements based on individuals appearing in uploaded footage.

If our practices change in a manner that creates a legally recognized sale or sharing of personal information, we will provide any notice and opt-out mechanism required by applicable law before engaging in that activity.

11. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, software development kits, and similar technologies to operate, secure, and understand the monoxyz Services.

11.1 Strictly Necessary Technologies

These technologies support essential functions such as:

• authentication;
• security;
• account access;
• session management; and
• service availability.

11.2 Functional Technologies

These technologies may remember preferences such as:

• language;
• region;
• login status; and
• account settings.

11.3 Analytics and Performance Technologies

These technologies help us understand how visitors use the monoxyz Services, identify errors, measure performance, and improve the user experience.

11.4 Advertising Technologies

Where enabled, advertising technologies may help us measure marketing campaigns or provide information about monoxyz to potentially interested business users.

We do not use Customer Video Data for advertising.

You may control cookies through your browser, device settings, or any cookie-preference tool we make available.

Disabling certain technologies may affect the availability or operation of some features.

Where required by law, we obtain consent before placing non-essential cookies.

12. Marketing Communications

We may send communications about monoxyz, Playtag, events, research, and related products or services where permitted by law.

You can unsubscribe from promotional emails by using the unsubscribe mechanism included in the message or by contacting us at info@playtag.ai.

Even after you unsubscribe from marketing communications, we may continue sending non-promotional communications relating to:

• your account;
• transactions;
• subscriptions;
• customer support;
• security;
• legal notices;
• service availability; or
• your use of the Services.

13. Legal Bases for Processing

Where the laws of the European Economic Area, United Kingdom, Switzerland, or another jurisdiction require us to identify a legal basis, we may process personal information under one or more of the following bases.

13.1 Performance of a Contract

Processing may be necessary to:

• create or administer an account;
• provide the monoxyz Services;
• store and analyze Customer Data;
• generate requested Outputs;
• process payments;
• provide customer support; or
• respond to service requests.

13.2 Legitimate Interests

We may process information where reasonably necessary for legitimate interests such as:

• operating and improving the Services;
• securing accounts and systems;
• preventing fraud and misuse;
• communicating with business customers;
• understanding service performance;
• diagnosing technical issues; and
• protecting our legal rights.

We rely on legitimate interests only where those interests are not overridden by the rights and interests of affected individuals.

13.3 Consent

We may rely on consent for:

• marketing communications;
• certain cookies;
• optional research activities;
• public use of Customer Data;
• case studies; or
• other processing where consent is legally required.

Consent may be withdrawn at any time, without affecting the lawfulness of processing that occurred before withdrawal.

13.4 Compliance With Legal Obligations

We may process personal information to comply with applicable:

• privacy;
• tax;
• accounting;
• employment;
• security;
• regulatory; and
• other legal obligations.

13.5 Protection of Vital Interests

In limited circumstances, we may process information where necessary to protect an individual’s life, health, or safety.

14. Security

Playtag uses administrative, technical, organizational, and physical measures designed to protect personal information.

14.1 Storage Security

• Customer Video Data uploaded through monoxyz is stored using Amazon S3 in the us-east-1 AWS Region.
• Objects stored in Amazon S3 are encrypted at rest using SSE-S3.
• Amazon S3 Block Public Access is enabled for the applicable storage.

14.2 Transmission Security

Video files uploaded to monoxyz are transmitted using HTTPS and protected in transit through TLS encryption.

This transport encryption is designed to protect uploaded video files while they are transferred from the user’s device to the monoxyz Services.

After transmission, uploaded videos are stored in Amazon S3 and encrypted at rest using SSE-S3.

14.3 Account Access Controls

Users are limited to accessing Customer Video Data, questions, prompts, and Outputs associated with accounts they are authorized to use.

Ordinary users cannot use the standard monoxyz interface to view videos, questions, prompts, or Outputs belonging to unrelated users.

14.4 Administrative Access

Authorized Playtag personnel with administrative privileges may be technically able to access information belonging to different user accounts.

Administrative access is limited to legitimate operational, support, technical, security, compliance, or legal purposes.

The Services do not currently maintain a dedicated audit log recording each administrative viewing of Customer Data.

14.5 Administrative and Organizational Measures

Our administrative and organizational measures may include:

• internal privacy and security policies;
• access authorization procedures;
• confidentiality obligations;
• personnel training;
• vendor risk management;
• incident-response procedures; and
• periodic risk assessments.

14.6 Technical Measures

Our technical measures may include:

• HTTPS and TLS encryption for video uploads;
• SSE-S3 encryption at rest;
• S3 Block Public Access;
• authentication and account-access controls;
• administrative permission controls;
• network and infrastructure protections;
• vulnerability management;
• deletion procedures; and
• security testing.

14.7 Physical Measures

Our physical measures may include:

• physical access restrictions;
• secured office and equipment areas; and
• controls relating to devices and storage media.

No electronic transmission, processing environment, cloud service, or storage system can be guaranteed to be completely secure.

Users are also responsible for maintaining secure credentials, devices, networks, account settings, and access permissions.

If you become aware of a suspected security incident involving monoxyz, contact us promptly at info@playtag.ai.

15. International Transfers

Customer Data stored through monoxyz is currently stored in the United States using the AWS us-east-1 Region.

Playtag and its service providers may also process personal information in the Republic of Korea, the United States, and other jurisdictions in which Playtag, its affiliates, customers, or service providers operate.

These jurisdictions may have privacy laws that differ from those in your home jurisdiction.

Where required by applicable law, Playtag may use safeguards for international transfers, including:

• contractual protections;
• European Commission Standard Contractual Clauses;
• an applicable United Kingdom international data-transfer addendum;
• adequacy decisions;
• consent where legally permitted; and
• other transfer mechanisms recognized by applicable law.

Information may also be transferred where necessary to:

• perform a contract;
• provide the Services;
• respond to a customer request;
• establish, exercise, or defend legal claims; or
• comply with applicable law.

You may contact us to request additional information about safeguards applicable to an international transfer.

16. Privacy Choices and Rights

Depending on your location and applicable law, you may have the right to:

• request access to personal information;
• receive information about how personal information is processed;
• request correction of inaccurate information;
• request deletion of personal information;
• request restriction or suspension of processing;
• object to certain processing;
• withdraw consent;
• request data portability;
• opt out of certain sales, sharing, or targeted advertising;
• limit certain uses of sensitive personal information;
• request information about qualifying automated decisions;
• request human review where required;
• appeal the denial of a privacy request; and
• lodge a complaint with a privacy or data-protection authority.

To exercise a right relating to information Playtag controls, contact us at info@playtag.ai.

To exercise a right relating to Customer Data controlled by a Playtag customer, contact the applicable customer.

Where required by law or contract, Playtag will reasonably assist customers in responding to verified privacy requests.

We may request information reasonably necessary to verify:

• your identity;
• your authority;
• your account; or
• your relationship to the relevant information.

We will use verification information only to process and protect the request.

You may authorize an agent to submit a request where permitted by law. We may require evidence that the agent is authorized to act on your behalf.

Applicable rights are subject to legal exceptions and limitations.

We will not unlawfully discriminate against you for exercising a privacy right.

17. Additional Information for Residents of the United States

Where applicable U.S. state privacy laws apply, the categories of personal information Playtag may collect include:

• identifiers, such as name, email address, IP address, and account identifiers;
• customer-record information, such as contact and billing information;
• commercial information, such as subscriptions and transaction history;
• internet or electronic-network activity;
• approximate geolocation information derived from an IP address;
• audio, electronic, visual, and similar information, including Customer Video Data;
• professional or employment-related information;
• inferences or analytics generated from information provided to monoxyz; and
• sensitive personal information when included in Customer Data or account information.

We collect these categories from:

• users;
• customers;
• devices;
• service providers;
• business partners; and
• publicly available sources.

We use and disclose these categories for the purposes described in this Privacy Policy.

Playtag does not use or disclose sensitive personal information for the purpose of inferring characteristics about individuals outside the context of providing the Services requested by the customer.

Subject to applicable law, residents may request:

• access;
• correction;
• deletion;
• portability;
• information about collection and disclosure; or
• an appeal of a denied request.

Playtag does not sell personal information or share Customer Video Data for cross-context behavioral advertising.

18. Additional Information for Residents of the EEA, UK, and Switzerland

Individuals in the European Economic Area, United Kingdom, and Switzerland may have rights to:

• access their personal information;
• correct inaccurate information;
• request deletion;
• restrict processing;
• object to processing based on legitimate interests;
• object to direct marketing;
• receive portable information;
• withdraw consent; and
• lodge a complaint with the competent supervisory authority.

When Playtag acts as a processor on behalf of a customer, requests concerning Customer Data should generally be directed to that customer.

19. Additional Information for Residents of the Republic of Korea

Individuals in the Republic of Korea may exercise rights provided under the Personal Information Protection Act and other applicable laws, including the right to:

• request access to personal information;
• request correction or deletion;
• request suspension of processing;
• withdraw consent;
• object to or request an explanation concerning qualifying automated decisions; and
• seek assistance or dispute resolution from an appropriate privacy authority.

Requests may be made through the contact information in the “Contact Us” section below.

Playtag will take reasonable steps to verify the requester’s identity and respond within the period required by applicable law.

20. Additional Information for Residents of Canada

Subject to applicable Canadian privacy law, individuals may request:

• access to personal information held by Playtag;
• correction of inaccurate information;
• information about how personal information is used or disclosed; and
• withdrawal of consent, subject to contractual and legal limitations.

Individuals may also contact the applicable federal or provincial privacy regulator regarding unresolved concerns.

21. Children’s Information

monoxyz accounts and the monoxyz website are intended for adult users and business, institutional, academic, or professional use.

Children should not create monoxyz accounts or directly submit personal information to Playtag.

The monoxyz Services may, however, process footage involving children when it is uploaded by an authorized:

• adult;
• parent or guardian;
• educational institution;
• childcare provider;
• researcher;
• healthcare provider; or
• other authorized customer.

Customers uploading footage involving children are responsible for:

• providing legally required notices;
• obtaining verifiable parental, guardian, institutional, or other required consent;
• obtaining any required institutional or research approval;
• limiting access to authorized users;
• using the footage only for lawful and disclosed purposes; and
• complying with applicable child-privacy, educational-privacy, research, and video-recording laws.

If you believe that a child provided personal information directly to Playtag without appropriate authorization, or that footage involving a child was submitted unlawfully, contact us at info@playtag.ai.

We will review the matter and take appropriate action, including deletion where required by law.

22. Automated Processing and Human Review

monoxyz uses automated technologies to analyze footage and generate:

• behavioral information;
• time codes;
• counts;
• durations;
• clips;
• summaries;
• observations; and
• other Outputs.

Automated Outputs may be incomplete, inaccurate, or affected by:

• video quality;
• camera placement;
• lighting;
• image obstruction;
• audio quality;
• environmental conditions;
• available context; or
• other technical factors.

Outputs should be reviewed by an appropriately qualified human before they are used to make important decisions.

monoxyz Outputs are intended to support human understanding and should not be used as the sole basis for decisions that produce legal or similarly significant effects on an individual, including decisions concerning:

• employment;
• education;
• healthcare;
• housing;
• insurance;
• credit; or
• access to essential services.

Customers are responsible for determining whether their use of monoxyz involves regulated automated decision-making and for providing any legally required:

• notice;
• explanation;
• human review;
• safeguards;
• appeal process; or
• opportunity to contest a decision.

23. Third-Party Links and Services

The monoxyz Services may contain links to third-party websites, integrations, applications, or services that Playtag does not control.

Those third parties have their own privacy policies and terms.

Playtag is not responsible for the privacy, security, or content practices of unaffiliated third parties.

We encourage you to review the applicable third-party policies before providing personal information.

24. Changes to Architecture, Service Providers, and This Privacy Policy

The monoxyz technical architecture, security controls, service providers, storage configurations, and product features may change as the Services develop.

Changes may include:

• use of additional AWS services or Regions;
• adoption of different encryption methods;
• changes to data-retention practices;
• introduction of additional access controls;
• introduction of administrative access logging;
• use of different video-processing or artificial-intelligence providers; and
• changes to deletion procedures.

Playtag will periodically review this Privacy Policy and update it to reflect material changes to our actual practices.

The “Last updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.

Where required by law, we will provide additional notice of material changes through:

• the monoxyz Services;
• email;
• an account notification; or
• another appropriate method.

Continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised policy to the extent permitted by applicable law.

25. Contact Us

Playtag Inc. is responsible for the processing of personal information described in this Privacy Policy, except where Playtag processes Customer Data solely on behalf of a customer.

Questions, concerns, complaints, security reports, and privacy-rights requests may be directed to:

When contacting us, please describe your request and your relationship to the monoxyz Services.

Do not send sensitive personal information or copies of identification documents unless Playtag specifically requests them through an appropriate secure method.