Privacy Policy

Thank you for taking the time to read the Gaya Technologies Inc. (“Gaya”, “we”, “our”, or “us”) Privacy Policy. We help our customers—insurance brokers (“Customers”)—reduce time-consuming data entry with Gaya’s Google Chrome Browser Extension that scans and extracts consumers’ insurance information from one page or system and autofills it into insurance quotes (the “Services”). This Privacy Policy, together with our Terms of Service, explains how we collect, use, process, store, and disclose personal information in providing the Services.

1. Personal Information We Collect

Customer Information

• Employee details: name, title, company email, company name, company website URL, and login info.
• Correspondence shared during email, sales, or support engagements.
• Billing, payment, and administrative finance information.
• Automated usage information (e.g., time spent in applications, behavioral activity, interaction metadata).

End Consumer Information via Chrome Extension

When Customers use our Services, they enable Gaya to process personal information of consumers seeking insurance quotes (“End Consumers”). The information is processed and stored in the End Consumer’s web browser and is not hosted or controlled by Gaya. Because Gaya may access End Consumer data for technical support and product improvement, categories that may be collected by Customers and made available to Gaya include:

• Contact info (name, email, address, phone).
• Personal details (age, gender, marital status, income, home/car ownership, etc.).
• Information needed to provide quotes (e.g., property, vehicle, health, or business data; potentially financial or health history; and government-issued identifiers).

Note: the above is a non-exhaustive sample of categories.

2. How We Use Personal Information

• To provide, operate, and improve our software and Services.
• To deliver customer support.
• To authenticate, verify, and ensure compliance with written instructions; to mitigate fraud risk.
• For legal purposes (including IP protection) and to comply with court orders or legal/regulatory processes.
• To use aggregated/anonymous data for service efficacy and product improvements.

We do not control how our business Customers use personal information collected through our Services to fulfill End Consumer requests. Please review the applicable Customer’s privacy policy for details.

3. How We Disclose Personal Information

Our Services allow certain synchronizations with external software or data applications (e.g., customer support tools, CRM platforms like Salesforce and HubSpot). Subject to Customer agreements, we may disclose personal information to:

• Maintain/operate our software and Services.
• Protect the legal rights of our company, employees, agents, and affiliates.
• Protect the safety and security of users.
• Detect and protect against fraud.
• Comply with law or legal process.
• Complete a corporate transaction (e.g., sale of business/assets).

We may share aggregate or anonymous information for any purpose.

4. Privacy Choices

For business Customers, we provide choices to:

• Access, delete, or correct personal information we maintain about you.
• Opt out of certain uses of your personal information, including:
  • Marketing emails: click the “unsubscribe” link in marketing emails.
  • SMS: reply STOP to opt out.

To exercise these rights, contact us at [email protected].

If you are an End Consumer whose data was processed by a Gaya Customer, please contact that Customer directly. We cannot provide End Consumer data without the Customer’s express written instructions.

5. Security

We prioritize data security with continuous monitoring, regular vulnerability assessments, and penetration testing by a trusted third-party partner. Data is encrypted at rest (AES-256) and in transit (TLS/SSL). Systems undergo routine audits and follow industry-standard practices. However, no method is 100% secure—please keep your credentials safe and sign out on shared computers.

6. Retention

We do not collect, store, or retain end-user personal information unless a business Customer specifically directs us to do so; they may delete it at any time. We retain Customer personal information per our written agreements.

7. U.S. State-Specific Notice

Certain states (e.g., California under the CCPA/CPRA) provide additional rights. We’ve listed categories of personal information collected, processed, and disclosed in the sections above.

Additional Privacy Rights

• Opt out of the “sale or sharing” of personal information for cross-context or targeted advertising. We do not “sell” or “share” personal information as defined by state privacy laws.
• Limit the use/disclosure of Sensitive Personal Information. Where applicable, any limited access is performed only under Customer instructions or for a recognized “Business Purpose” (e.g., fraud detection).

To exercise enhanced rights, contact the Customer using Gaya directly.

Appeal

If we deny your request, you may appeal by emailing [email protected]. If unsatisfied with our decision after the appeal, you may be able to contact your state attorney general.

Business/Controller Designation

• For Customer personal information, Gaya acts as a “Controller” and “Business”.
• For End Consumer information, Gaya acts as a “Processor” and “Service Provider”.