Privacy Policy

Duo Labs Inc. (also known as "Pinch") ("Duo Labs" or "Pinch") provides products, services, and machine learning models that enable AI-powered interaction with websites, audio, video, text, and other systems, including real-time translation and transcription of phone calls and meetings (such as through our Pinch Calls and Pinch desktop applications), and that can perform various tasks on a user's behalf. This Privacy Policy explains how we collect, use, and protect personal information when you use our services—including our products, services, and models, visit our website (the "Site"), or access any other applications or services that reference this Privacy Policy (collectively, the "Services").

This Privacy Policy also describes your privacy rights. More information about your rights, and how to exercise them, is set out in the "Privacy Rights and Choices" section.

Please see our Notice at Collection below for an overview of our privacy practices.

This Privacy Policy does not apply to our handling of personal information that we process on behalf of our customers as a service provider or processor. Our processing of that information is governed by our agreements with our customers.

Personal Information We Collect

Personal information you provide to us directly

Contact and account credentials, such as your name, email address, phone number, and password when you sign up for an account or request information about our Services.

User Content and Data: When you use our Services, we collect the data and content you provide, including audio, video, text, files, and other materials you submit or that are processed through our Services ("User Data"). This may include voice recordings, speech data, translations, and other content processed by our models and APIs. User Data is determined solely by you and may, at your discretion, include personal or sensitive information. You are responsible for ensuring that any data you provide or process through our Services complies with applicable laws. When providing data, please be respectful of the rights, including privacy, of others.

Processed Content: Our Services process your User Data to provide features such as real-time translation, speech recognition, and other functionality. This processed content may include, reflect, reproduce, or infer information from your User Data.

Calling, meeting, and translation information (Pinch Calls and Pinch Desktop)

When you use our calling, meeting, and real-time translation or transcription features, including the Pinch Calls application and our Pinch desktop applications (macOS and Windows), we collect and process the following:

• Phone number and contacts: your phone number, and, where you grant permission, contacts you choose to call. You can decline or revoke contacts access at any time in your device settings.
• Audio of all participants: to translate or transcribe a call or meeting in real time, the Service processes the speech and audio of all participants, including the people you call and other participants in a meeting, and not only you. On our desktop applications, this may include system audio captured from third-party meeting or conferencing tools (for example, Google Meet, Zoom, or similar) that you choose to translate or transcribe. An automated notice may be played to participants informing them that a call is being translated.
• Call and meeting metadata: such as the phone numbers involved, date, duration, and the languages selected for translation.
• Caller ID verification: if you verify a phone number to use as your outbound caller ID, we process that number and its verification status.
• Device permissions: the calling and meeting features require access to your device microphone and/or system audio, and, optionally, your contacts. We use these permissions only to provide the features you request.

How audio and transcripts are handled: Audio is processed in real time using our own models on our own cloud infrastructure to provide translation and transcription. We do not send your audio or transcripts to any third-party artificial intelligence or translation provider. For the Pinch Calls mobile application, call audio is not stored or retained on our servers after the call, and call transcripts are stored locally on your device, are not uploaded to us, and can be deleted by you at any time. For our other applications, audio, transcripts, and notes are handled as described in the "Data Retention" section below and the settings made available to you.

Payment information, needed to complete any transactions with us, including your name, payment card details, and billing address. Depending on how you purchase, this information is processed by our third-party payment processors, which may include Stripe, Inc., and, for purchases made through our mobile applications, the Apple App Store, Google Play, and our subscription management provider RevenueCat, Inc. Please refer to the relevant provider's privacy policy for more information about how it handles your information.

Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.

Marketing information, such as your preferences for receiving communications about our Services, and details about how you engage with our communications.

Information we obtain from third parties

Social media information: We maintain pages on social media platforms, such as Facebook, X, Instagram, YouTube, and others. When visiting or interacting with our pages on those platforms, the platform provider's privacy policy will apply to such interactions and their collection, use and processing of personal information. We may also receive information that you or the platform provide us and we will treat such information in accordance with this Privacy Policy.

Third-party Log-in: If you create an account or log into the Services using third-party services, such as Google or GitHub, we will receive your name and email address and/or phone number as permitted by your profile settings on the third-party service in order to authenticate you. The information we receive when you authenticate through a third-party service depends on the settings, permissions and privacy policies of the third-party service. You should always check the privacy settings and notices in the relevant third-party services to understand what data may be disclosed to us or shared with our Services.

Automatic data collection

When you visit, use, or interact with the Services, we automatically log certain information about your visit, use, or interactions. This information includes:

Usage data, such as how you use the Services, usage history, feature usage, API calls, account and profile settings, information about activity on the Services, access times, duration of access, and whether marketing emails were opened or links within them clicked.

Device data, such as the computer or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers, language settings.

General location information, such as city, state or geographic area. We may determine the general area from which your device accesses our Services based on information like its IP address for security reasons and to make your product experience better, for example to protect your account by detecting unusual login activity or to provide more accurate responses.

Cookies and similar technologies: We and our third-party providers use cookies and other similar technologies to collect information automatically. These technologies may store information on your device or in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns. These technologies include:

• Cookies, which are text files that websites store on a visitor's device to uniquely identify the visitor's browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

How We Use Personal Information

We use personal information for the following purposes:

To operate our Services

We use your information, including any personal information in User Data, to provide, operate, maintain, and secure our Services in accordance with our Terms of Service. This includes using your personal information to:

• Create, maintain, and administer your account on the Services and manage your subscriptions, transactions, and payments.
• Provide the features of the Services you use, including real-time speech translation, voice processing, and other functionality.
• Process your User Data to deliver the Services, such as translating speech, recognizing audio, or providing other requested features.
• Communicate with you about our Services, including by sending you announcements, updates, security alerts, and support and administrative messages.
• Respond to your requests, questions, and feedback.

To develop and improve our Services

It is in our legitimate business interests to improve and keep our Services safe for our users, which includes:

• Model Training: We may use User Data to train and improve our machine learning models in order to enhance the Services.
• Troubleshooting and Enhancement: To monitor how the Services are used, troubleshoot issues, and improve functionality. This may include analyzing usage patterns and performance.
• Product Development: To identify opportunities for new features or products and to enhance the performance of our products, services, and models.
• Aggregate Analysis: To create aggregated, de-identified, or anonymous data which we may use and share for our lawful business purposes, including to analyze and improve the Services, and promote our business.

For direct marketing

We may from time-to-time send you direct marketing communications as permitted by law. You may opt out of our marketing communications as described in the "Opt out of marketing communications" section below. Except where consent is required by law, we undertake such marketing on the basis of our legitimate business interests. Where we seek your consent, you may withdraw your consent at any time.

Compliance and protection

We may use your personal information to comply with legal obligations, and it is in our legitimate business interests to use your personal information to defend us against legal claims or disputes, including to:

• protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);
• audit our internal processes for compliance with legal and contractual requirements and internal policies;
• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft; and
• comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.

How We Use Your Content

You control what data and content you provide to or process through the Services. The data you submit determines what the Services can do for you.

If you do not want the Services to process certain content, you should not provide it. You are also responsible for any content about other people that you process through the Services. Please do not use the Services to process other people's private information without appropriate authorization.

We use the content you provide only to operate, develop and improve the Services, to send you relevant information about your use of the Services, and, where necessary, for compliance and protection purposes, each as explained further above.

How We Disclose Personal Information

Service providers: Your data, including User Data, may be disclosed to third-party service providers that help us operate the Services, including providers of cloud computing and hosting services, telephony and communications services (to place and carry calls), database and authentication services, information technology services, email communication software and email newsletter services, marketing services, payment processors, user relationship management and user support services, and web analytics services. We do not share your call audio or call transcripts with any third-party artificial intelligence or translation provider; that content is processed using our own models on our own infrastructure.

Professional advisors: We may disclose personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.

For compliance, fraud prevention and safety: We may disclose personal information for the compliance, fraud prevention, and safety purposes described above.

Business transfers: We may sell, transfer or otherwise share some or all of our business or assets, including personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.

SMS and Text Messaging

If you provide your mobile phone number, we may send you text (SMS) messages, such as one-time passcodes and account verification codes, security alerts, and other service-related messages. Message frequency varies and depends on your use of the Services. Message and data rates may apply. You can opt out of non-essential text messages at any time by replying STOP to a message, and you can reply HELP for help. Note that opting out may prevent us from delivering verification codes or other messages needed to access certain features.

We do not sell, rent, or share your mobile phone number or any SMS opt-in or consent information with third parties or affiliates for their own marketing or promotional purposes. Mobile information may be shared only with the service providers (such as our SMS messaging provider) that we use to deliver these messages to you, and only as needed to provide that service.

Your Rights and Choices

Access or update account information: Users who have registered for an account with us may review and update certain personal information in their account profile by logging into the account.

Opt out of marketing communications: Recipients of marketing emails may opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email or by contacting us as provided below. Even if you opt out, you will continue to receive service-related and other non-marketing emails.

Personal Information requests

Depending on your location and the nature of your interactions with our Services, you may request the following in relation to your personal information:

• Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
• Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
• Correction of personal information that is inaccurate or out of date.
• Deletion of personal information that we no longer need to provide our Services or for other lawful purposes.
• Opt out of the sale of your information or sharing of your information for interest-based advertising. We do not engage (and have not in the past 12 months engaged) in the sale of your personal information, or the sharing of your personal information for interest-based advertising.
• Opt out of "profiling" in connection with decisions that produce legal or similarly significant effects. We do not engage in profiling in connection with decisions that produce legal or similarly significant effects.
• Appeal our denial of your personal information request.
• Right to complain: Depending on where you reside, such as if you reside in the European Economic Area (EEA) or United Kingdom, you may have the right to complain to a data protection regulator where you live or work, or where you feel a violation has occurred.
• Additional rights, such as to object to our processing of your personal information where we rely on our legitimate business interest to do so, request that we restrict our use of personal information, and where applicable, withdraw your consent to our processing of your personal information. This won't affect anything we have used your personal information for before you withdraw your consent.

To make a request, please email us or write to us as provided in the "How To Contact Us" section below. We may ask for specific information from you to help us confirm your identity. Depending on where you reside, you may be entitled to empower an authorized agent to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination.

Limits on your privacy rights and choices: In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. If you are not satisfied with how we address your request, you may submit a complaint by contacting us as provided in the "How To Contact Us" section below.

Choosing not to share your personal information: Where we are required by law to collect your personal information, or where we need your personal information to perform our contractual obligations, if you do not provide this information when requested (or you later ask to delete it), we may not be able to fulfill our obligations. We will indicate any required information at the time of collection or through other appropriate means.

Limit Online Tracking

There are a number of ways to limit online tracking, which we have summarized below. Please note that these tools are not associated with us and we cannot guarantee that they work as their providers advertise them:

Blocking cookies in your browser: Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://www.allaboutcookies.org/.

Using privacy plug-ins or browsers: You can block our websites from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt out of Google Analytics by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout.

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

Do Not Track: Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

Security

We use organizational, technical and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect personal information, we cannot guarantee its security.

Children

The Services are not directed to children under 13 years of age (or under 16 in jurisdictions, such as parts of the European Economic Area, where a higher minimum age applies). If we learn that we have collected personal information from a child without the consent of the child's parent or guardian as required by law, we will delete it.

Data Retention

We retain personal information for as long as necessary in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information (such as whether we need to retain the data to provide our Services), and whether we can achieve those purposes through other means, and the applicable legal requirements.

For the Pinch Calls mobile application, call audio is processed only in real time and is not stored on our servers after the call ends, and call transcripts are stored locally on your device under your control and may be deleted by you at any time. For our other calling, meeting, and translation features, retention of any audio, transcripts, or notes is governed by the general principles described above and the settings made available to you. In all cases, we may retain limited call or meeting metadata (such as date, duration, and languages) as needed to operate the Service, support billing, and meet our legal obligations.

International Data Transfers

Duo Labs Inc. is incorporated in the United States, and we process personal information in the United States and potentially in other countries where we or our service providers operate. If you access the Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. Where required by applicable law (for example, for transfers from the European Economic Area, the United Kingdom, or Switzerland), we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect such transfers.

Changes To This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the website. If you are a registered user, we will notify you using the email address you gave us when you signed up if we make material changes made to the Privacy Policy.

How To Contact Us

Responsible entity: Duo Labs Inc. is the entity responsible for the processing of personal information under this Privacy Policy (as a controller or business, where provided under applicable law).

Please direct any questions or comments about this Privacy Policy to support@startpinch.com.

Notice At Collection

Here is a high-level snapshot of our privacy practices. Please read the entire Privacy Policy for complete information.

*As described further in our Privacy Policy, we also may disclose personal information to professional advisors, authorities and others for legal and compliance purposes, and to business transferees in the context of an acquisition or the sale of our business or another corporate transaction.