beneAI ("we," "our," or "us") is committed to protecting your privacy and maintaining your trust. We value transparency in all our operations, which means we want you to understand exactly what happens to your data - no hidden algorithms or opaque processes.

This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or use our services. We treat your data with the same level of care and security that we advise our clients to implement. We are the "Data Controller" for the information you provide to us.

We use Google Workspace for Small Business.

We collect information to provide our services and improve our offerings. This may include (upon request/permission):

• Identity Data: Name, username, or similar identifier.

• Contact Data: Email address, telephone number, and mailing address.

• Professional Data: Job title, organization name, sector, and staff size (relevant to our assessments).

• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, and operating system (automatically collected via cookies).

• Usage Data: Information about how you use our website and services, including responses provided in surveys or forms.

We respect your personal data and use it only in the following ways:

• Service Delivery: To generate AI capability assessment reports, scorecards, and/or consulting deliverables you have requested.

• Communication: To manage our relationship with you, including notifying you about changes to our terms or privacy policy.

• Improvement: To use data analytics (anonymized where possible) to improve our assessments, products, and user experiences.

• Legal Compliance: To comply with legal or regulatory obligations.

Under the General Data Protection Regulation (GDPR), we rely on the following lawful bases for processing your data:

• Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., submitting an assessment, inquiring to learn more about us, etc.).

• Contract: Processing may be necessary for a contract we have with you (e.g., a consulting agreement).

• Legitimate Interests: Processing may be necessary for our legitimate interests (e.g., running our business) unless your rights override those interests.

beneAI is based in Colorado, in the United States. If you are accessing our services from the European Economic Area (EEA) or UK, note that your data will be transferred to and processed in the United States. We safeguard your data by utilizing service providers (currently Google for Business) that adhere to robust security standards and data privacy frameworks. We are happy to provide these security standard and data privacy frameworks details upon request.

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data (a "data subject access request").

• Request correction of the personal data that we hold about you.

• Request erasure of your personal data ("the right to be forgotten").

• Object to processing of your personal data.

• Request restriction of processing of your personal data.

• Request the transfer of your personal data to you or a third party (data portability).

• Withdraw consent at any time where we are relying on consent to process your data.

 To exercise any of these rights, please contact us.

We use cookies to distinguish you from other users of our website. This helps us provide you with a good experience and allows us to improve our site.

You can set your browser to refuse all or some browser cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

If you have any questions about this privacy policy or our privacy practices, please contact us in any of the following ways:

• Email: info@beneai.co

• Phone: +1 (720) 515-7539

• Mail: 1500 N. Grant St. Ste. R, Denver, CO 80203 USA