Incanto Privacy Policy

Our Policy

Cr3a8, LLC and any of its affiliates or related entities ("Cr3a8," "we," "us," and/or "our") is committed to protecting your privacy and earning your trust. Incanto is a product of Cr3a8, LLC. This Privacy Policy discloses our privacy practices for personal information we collect when you use or access our products, services, features, or content, including the Incanto platform and consulting offerings, provided directly or under the name "Cr3a8" or "Incanto," whether through any Cr3a8 website (the "Site") or any Cr3a8 application or service ("Services").

Please review this Privacy Policy carefully. By accessing the Cr3a8 website, submitting our intake form, or engaging us for the Services, you signify acceptance of this Privacy Policy.

If you do not agree with this Privacy Policy, please do not access the Site or any application.

Changes To Our Policy

We may, in our sole discretion, change this Privacy Policy from time to time by posting a revised version at incanto.app/privacy. If we make any material change to this Privacy Policy, we will notify you by posting a notice at the same URL prior to the change becoming effective and may also elect to send you an email notifying you of the modifications.

Information We Collect

When you interact with us through the Services, we may collect personal and other information from you, as further described below. This includes information you provide to us, information which is collected about you automatically, and information we obtain from third parties.

Cr3a8 may collect the following information from you:

• Identifiers, such as name, email, online identifier, Internet Protocol (IP) address, device information, business details, information collected from cookies or other tracking technology, and other similar identifiers.
• Commercial information, such as purchase history and engagement with the Services.
• Information from third parties, such as personal information stored with third parties that you choose to provide to us. By linking your third-party accounts to workflows we build for you, you authorize Cr3a8 to access this information and you agree that Cr3a8 may collect and use it in accordance with this Privacy Policy.
• Internet, device and browsing activity, such as browser type and settings, device type and settings, operating system, and application version number.
• Usage data, such as the interaction of your apps, browsers, and devices with our Services, including IP address, crash reports, system activity, and the date, time, and referrer URL of your request.
• Information you provide to us when interacting with our team via email or other correspondence, including the business problems and operational details you share with us in the course of an engagement.
• Inferences, including information about your interests and preferences.

We collect personal data directly from you.

When you interact with Cr3a8 through the Site and Services, we receive and store certain personally non-identifiable information. Such information, which is collected passively using various technologies, cannot presently be used to specifically identify you. Cr3a8 may store such information itself or such information may be included in databases owned and maintained by Cr3a8 affiliates, agents, or service providers. The Services may use such information and pool it with other information to track, for example, the total number of visitors to our Site, the number of visitors to each page of our Site, and the domain names of our visitors' Internet service providers. It is important to note that no personal information is available or used in this process.

How We Use Your Information

Cr3a8 collects your personal information as reasonably necessary and proportionate to provide you with the Site and Services. Your personal information is used for the following specific purposes:

• Provide the Services to you, including designing, building, and maintaining AI-assisted workflows on your behalf.
• Provide notifications to you about your activity within the Services, including alerts when an automation we manage encounters an issue.
• Provide customer support when you contact us to resolve any questions or issues.
• Notify you about important changes to the Site, Services, and/or changes to Cr3a8's Terms of Use or Privacy Policy.
• Monitor and improve your experience with the Site and Services.
• Engage in marketing activities, based on your communication preferences, and as permitted by applicable law.
• Ensure network and information security and prevent other abusive or illicit activity of the Site or Services.
• Process payments and collect fees.
• For any other purpose we disclose to you in the course of providing the Site or Services to you.
• To fulfill our contractual obligations, maintain communication with service providers, and adhere to legal and record-keeping requirements.

Lawful Basis for Processing

Cr3a8 processes personal information under the following legal bases:

Contractual Necessity

We process your personal information to perform the contract we have with you, including:

• Providing the Services you've requested
• Processing payments
• Sending service notifications
• Responding to your inquiries

Legitimate Interests

We process your personal information for our legitimate interests, including:

• Improving and developing our Services
• Protecting against fraud and abuse
• Marketing our Services to existing customers
• Analyzing usage patterns to enhance user experience

Consent

Where required by law, we process your personal information based on your consent, including:

• Marketing communications to prospective customers
• Collection and use of certain cookies
• Processing of sensitive personal information

You may withdraw your consent at any time by contacting us at privacy@incanto.app.

Legal Obligation

We process your personal information to comply with legal obligations, including:

• Tax and accounting requirements
• Data protection laws
• Government requests and court orders

How We Share Your Information

Cr3a8 may share your personal information for the following purposes:

• With Cr3a8 subsidiaries and affiliates to help us improve the content and functionality of the Services and better understand our users.
• With service providers to provide, maintain, and improve the Services, including hosting and infrastructure providers, AI providers, automation platforms, analytics and marketing services, information technology and network services, and payment processors. These companies are authorized to use your personal information only as necessary to provide these services to us.
• Cr3a8 may disclose your personal information if required to do so by law or in the good-faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Cr3a8, (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public, or (iv) protect against legal liability.
• Cr3a8 may also share aggregated, non-personally identifiable information with third parties for auditing, analytics, maintenance, security, or other related business purposes as determined appropriate by Cr3a8.
• As Cr3a8 develops our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution, or similar event, your personal information may be part of the transferred assets.

Other than as stated in this Privacy Policy, Cr3a8 does not disclose or sell any of your personal information to third parties without your consent. Notwithstanding anything in this Privacy Policy to the contrary, Cr3a8 reserves the right to collect, use, retain, or sell de-identified or aggregated non-personally identifiable information and data obtained from use of the Site and Services.

Exclusions

This Privacy Policy does not apply to any personal information collected by Cr3a8 other than personal information collected through the Services. This Privacy Policy shall not apply to any unsolicited information you provide to Cr3a8 through the Services or through any other means. All unsolicited information shall be deemed to be non-confidential, and Cr3a8 shall be free to reproduce, use, disclose, and distribute such information to others without limitation or attribution.

Children's Personal Information

Cr3a8's Site is a general-audience website and is not designed for persons under the age of 16. We do not knowingly collect personal information or provide Services to any person under the age of 16. If a user submits personal information and is suspected of being younger than the age of 16, Cr3a8 will terminate Services to that user and take steps to delete the information as soon as possible.

How We Use Cookies

When you access our Site, we, or companies we hire to track how our website is used, may place small data files called "cookies" on your computer. We and our service providers also use cookies to customize the Services, content, and advertising; measure promotional effectiveness; and promote trust and safety.

A cookie is a small piece of data that a website asks your browser to store on your computer or mobile device. The cookie allows the website to "remember" your actions or preferences over time. Most browsers support cookies, but you can set your browser to decline them and can delete them whenever you like.

Overall, cookies help us provide you with a better Site by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can obtain more information about cookies by visiting allaboutcookies.org.

What Types of Cookies We Use

We may use the following types of cookies to provide our Site and Services:

• Functionality Cookies, which include preference and user-experience related cookies, are used to provide services or to remember choices you make so we can personalize our content for you (for example, by remembering your username or choice of language). These cookies last until removed by your browser.
• Analytical Cookies are used to analyze user activity in order to improve the Site and Services. For example, we can use Analytical Cookies to look at the use of different sections of the Site and aggregate patterns based on actions you might perform.
• Testing and Performance Improvement Cookies are used to ensure users receive a consistent user experience, such as conducting A/B testing on certain aspects of our Site, in order to improve our product offerings. We also use these cookies to improve the performance and reliability of our Site.
• Marketing Cookies may be used from third-party service providers such as Google and Meta for marketing purposes. Marketing Cookies allow us to display promotional material to you on other sites you visit across the Internet. We may also share information about your behavior on the Site with third parties (including operators of third-party websites and/or social networking sites) in order to show you targeted advertisements and other content that has been customized for you.

Opting Out of Cookie Usage

If you want to control which cookies you accept, you can configure your browser to accept all cookies or to alert you every time a cookie is offered by a website's server. Most browsers automatically accept cookies. You can set your browser option so that you will not receive cookies and you can also delete existing cookies from your browser. You may find that some parts of the Site will not function properly if you have refused cookies. On most web browsers, you will find a "help" section on the toolbar. Please refer to this section for information on how to receive notification when you are receiving a new cookie and how to turn cookies off. We recommend that you leave cookies turned on because they allow you to take advantage of some features of the Site and Services.

Opting Out of Marketing Communications

If at any time you wish not to receive any future marketing communications, or you wish to have your name deleted from our mailing lists, please contact us at privacy@incanto.app or use the unsubscribe link in any of our marketing emails.

Aggregated Personal Information

In an ongoing effort to better understand and serve the users of the Services, Cr3a8 often conducts research on its customer demographics, interests, and behavior based on the personal information and other information provided to us. This research may be compiled and analyzed on an aggregate basis, and Cr3a8 may share this aggregate data with its affiliates, agents, and business partners. This aggregate information does not identify you personally. Cr3a8 may also disclose aggregated user statistics in order to describe our Services to current and prospective business partners, and to other third parties for other lawful purposes.

How We Protect Your Information

The security of your personal information is important to us, and we implement and maintain reasonable, commercially acceptable security procedures and practices in order to protect it from unauthorized access, use, modification, or disclosure. Our measures include firewalls, data encryption, SSL encryption, physical and electronic access controls, and strict rules regarding the access and use of data on our system. However, please be aware that no method of transmission over the Internet, or method of electronic storage, is 100% secure, and we are unable to guarantee the absolute security of information we have collected from you.

Data Retention and Disposal

We will retain your personal information for as long as it is necessary to fulfill the purposes we collected it for, including to fulfill your requests or inquiries or provide Services. Your personal information may be stored for longer periods where required by legal, regulatory, business compliance, account owner, tax, or accounting requirements; to maintain accurate records of your dealings with us in case of complaints or challenges; or if we believe there is a prospect of litigation relating to your personal information or dealings.

Subprocessor Usage

Cr3a8 engages the following categories of subprocessors to help provide our Services:

• Hosting and infrastructure
• Database and storage
• Authentication
• AI service providers (e.g., OpenAI, Anthropic, Google)
• Automation platforms (e.g., n8n, Zapier)
• Payment processing
• Email and notification delivery

How To Update Your Information

You may update, correct, or delete information you have shared with us at any time by contacting us at privacy@incanto.app. Please note that while any changes you request will be reflected in active databases instantly or within a reasonable period of time, we may retain information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

Declining To Share Your Information

You may decline to share certain personal information with us, in which case we may not be able to provide to you some of the features and functionality of the Service enabled by the provision of such personal information. Cr3a8 will not discriminate against you for exercising any rights you may have under applicable federal or state law.

Rights for California Residents

In addition to the rights provided for above, if you are a California resident, you have the following additional rights:

The right to know:

• The categories of personal information we have collected about you;
• The categories of sources from which the personal information was collected;
• The categories of personal information about you we disclosed for a business purpose or sold;
• The categories of third parties to whom the personal information was disclosed for a business purpose or sold;
• The business or commercial purpose for collecting or selling the personal data; and
• The specific pieces of personal data we have collected about you.

The right to request we delete personal information we have collected about you. In certain instances, Cr3a8 may have legal requirements which require we keep such data.

The right to opt out of the sharing of your personal information with third parties providing cross-context behavioral advertising. We will not share any personal information with third parties for their direct marketing purposes to the extent prohibited by California law. If our practices change, we will do so in accordance with applicable law and will notify you in advance.

To exercise any of these rights, please submit a request at legal@incanto.app. In the request, please specify which right you are seeking to exercise and the scope of the request. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your requests to know or delete. Once we have received a verifiable request, we will respond in a timely manner consistent with applicable law.

Authorized Agent

You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent's permission to do so and verify your identity directly.

Right of No Retaliation

Cr3a8 will not retaliate against you should you choose to exercise your rights. Specifically, Cr3a8 will not charge you different prices for services, provide a different level or quality of services, or deny you services, except where such exercise would prevent Cr3a8 from obtaining, using, or sharing personal information which is necessary to perform the services reasonably expected.

Links to Other Websites

This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by Cr3a8 (the "Third-Party Sites"). The policies and procedures we describe here do not apply to the Third-Party Sites. The links from the Services do not imply that Cr3a8 endorses or has reviewed the Third-Party Sites. We suggest contacting those sites directly for information on their privacy policies.

Contacting Cr3a8

Please feel free to contact us if you have any questions about Cr3a8's Privacy Policy or the information practices of the Services.

You may contact us at legal@incanto.app.