How we work?

1. Introduction

This Privacy Policy aims to establish the terms and conditions under which Demandu LLC, headquartered at 8 The Green, STE A, Dover, DE 19901, United States of America, collects, stores, uses, and protects the personal information of its users and clients. This policy complies with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) of the European Union, as well as the privacy policies and guidelines of Google LLC and Meta Platforms, Inc. By using our services, you agree to the practices described in this policy.

2. Scope

This Privacy Policy applies to all personal data processing operations carried out by Demandu LLC, its affiliates, business partners, service providers, and other related parties. This includes, but is not limited to, the collection, use, storage, transmission, transfer, disclosure, and deletion of personal data from users and customers obtained through our applications, websites, and technology platforms, including data obtained through integrations with Google and Meta.

3. Definitions

• Personal Data: Any information related to an identified or identifiable natural person, such as names, identification numbers, location data, online identifiers, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

• Processing: Any operation or set of operations performed on personal data, whether by automated or manual means, such as collection, recording, organization, structuring, storage, adaptation, modification, consultation, use, disclosure, deletion, or destruction.

• Data Controller: A natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

• Data Processor: A natural or legal person who processes personal data on behalf of the Data Controller.

• Data Subject: A natural person whose personal data is subject to processing.

• Sensitive Data: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data intended to uniquely identify a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

• Google and Meta User Data: Information obtained through integration with Google and Meta services, including authentication data, user profiles, and any other data necessary for the provision of integrated services.

4. Data Controller

Demandu LLC acts as the Data Controller for personal data collected in the context of its business and operational activities. For the purposes of this policy, Demandu LLC is the entity responsible for determining the purposes and means of processing personal data and can be contacted at:

• Email: contact@demandu.tech

• Postal Address: Demandu LLC, 8 The Green,STE A, Dover, DE 19901, United States of America.

5. Collection and Processing of Personal Data

Demandu LLC collects and processes personal data for the following purposes:

• Registration and Authentication: For the creation, management, and administration of user accounts on our platforms.

• Service Provision: To provide, maintain, protect, and improve our services, including integration with Google and Meta platforms.

• Communications: To send notifications, newsletters, promotional offers, security alerts, and transactional messages related to the use of our services.

• Compliance with Legal Obligations: To comply with legal, regulatory, and contractual obligations, as well as to respond to requests from competent authorities and prevent fraud and illegal activities.

6. Use of Google and Meta User Data

Demandu LLC accesses and uses Google and Meta user data in accordance with the policies and guidelines established by these entities. The data is used solely for:

• Provision of Integrated Services: Facilitating the integration and use of our services with Google and Meta platforms.

• Improvement of User Experience: Analyzing and optimizing the functionality of our services based on user behavior.

• Prohibition of Additional Use: We do not use Google and Meta user data for any purpose other than the provision and improvement of our services.

7. International Data Transfers

Personal data collected may be transferred to and processed in countries that do not offer a level of data protection equivalent to the jurisdiction of the data subject. Demandu LLC is committed to ensuring that such transfers comply with applicable legal requirements.

8. Implementation of Standard Contractual Clauses

To ensure adequate protection of data transferred internationally, Demandu LLC will use standard contractual clauses approved by the European Commission or equivalent recognized mechanisms.

9. Retention of Personal Data

Personal data will be retained only for the time necessary to fulfill the purposes for which it was collected, or as required by applicable law. Subsequently, the data will be securely deleted.

10. Data Retention Policy for Client Users

Personal data collected from end-users through our clients' platforms will be retained for a maximum of 3 months from the last interaction. After this period, the data will be automatically deleted unless there is a legal or contractual requirement for its retention.

11. Client Responsibility for Data Use

Demandu LLC is not responsible for the use that clients make of the databases they build through our services. Each client is responsible for complying with applicable data protection laws and obtaining the necessary consents from their end-users. Demandu LLC does not have access to or control over the data managed by its clients outside of our platform and will not be liable for any misuse or illegal use of such data.

12. Payment Data

Payment data provided by users is managed and securely processed through Stripe, an internationally recognized payment service provider. Stripe complies with the highest security standards, including PCI-DSS (Payment Card Industry Data Security Standard) certification. Demandu LLC does not directly store information related to users' credit cards or bank accounts.

13. Data Subject Rights

Data subjects have the right to:

• Access: Obtain confirmation as to whether Demandu LLC is processing their personal data and, if so, access such data.

• Rectification: Request the correction of inaccurate or incomplete personal data.

• Erasure: Request the deletion of their personal data when there is no legitimate basis for its processing.

• Restriction of Processing: Restrict the processing of their personal data under certain circumstances.

• Data Portability: Receive their personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

• Objection: Object to the processing of their personal data unless there are compelling legitimate grounds for the processing.

• Withdrawal of Consent: Withdraw their consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.

14. Exercising Rights and Handling Requests

Data subjects may exercise their rights by submitting a written request to our Data Protection Officer at contact@demandu.tech. The request must include:

• Full name and contact details of the data subject.

• A clear description of the rights they wish to exercise and the personal data in question.

• Documentation that proves the data subject's identity or legal representation.

Demandu LLC will respond to requests within a maximum period of 30 business days from receipt, in accordance with applicable law.

15. Information Security

Demandu LLC adopts appropriate technical, administrative, and physical security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of data in transit and at rest.

• Implementation of firewalls, intrusion detection systems, and two-factor authentication.

• Restriction of access to personal data only to authorized employees and contractors who need to know such information to process it on our behalf.

16. Security Breach Notification

In the event of a security breach compromising personal data, Demandu LLC will notify the relevant authorities and affected data subjects within the legally established timeframes, providing relevant information about the nature of the incident and the measures taken.

17. Use of Cookies and Similar Technologies

Demandu LLC uses cookies and similar technologies to improve the user experience on its platforms, analyze trends, and administer the site. Users can manage their cookie preferences through their browser settings.

18. Advertising and Notifications via WhatsApp

Demandu LLC may send promotional messages and general notifications through WhatsApp or other instant messaging services to users who have consented to receive such communications. Users may opt-out of receiving these messages at any time by sending their exclusion request to contact@demandu.tech.

19. Privacy Policy for Minors

Demandu LLC's services are not intended for individuals under the age of 18. We do not knowingly collect or solicit personal data from minors. If we become aware that we have collected information from a minor without verifiable parental consent, we will promptly delete such information.

20. Modifications to the Privacy Policy

Demandu LLC reserves the right to modify this Privacy Policy at any time to reflect changes in legislation, regulations, or business practices. Modifications will be posted on our website and, where necessary, notified to data subjects by email or other registered contact means.

21. Applicable Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Delaware, United States. Any dispute arising in connection with this policy shall be submitted to the exclusive jurisdiction of the competent courts in that jurisdiction.

22. Contact for Inquiries and Complaints

For inquiries, complaints, or requests related to the processing of personal data, data subjects may contact us at any time through:

• Email: contact@demandu.tech

• Postal Address: Demandu LLC, 8 The Green, STE A, Dover, DE 19901, United States of America.