Privacy Policy

1. Introduction

Viable Works, Inc. ("Viable Works, Inc.," "we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our websites, applications, and services (the "Services").

‍Our Role. This Policy applies where Viable Works acts as a "controller" of personal information — for example, information about account holders, website visitors, and prospective customers. Where our business customers upload content or data to the Services ("User Content"), we process that data as a "processor" or "service provider" on the customer's behalf, and the customer's own privacy practices and our agreement with the customer (including a Data Processing Addendum, available upon request at info@getviable.ai) govern that data.

2. Information We Collect

Information you provide: name, email address, payment information, business details (such as company name and role), communications with us, and content you upload to the Services.

‍Automatically collected information: IP address, device type, operating system, browser information, usage data (pages viewed, features used, timestamps), and information collected via cookies and similar technologies (see Section 5).

‍Information from third parties: authentication providers (e.g., Google sign-in), payment processors, and analytics providers.

3. How We Use Information

We use personal information to: (a) provide, maintain, and improve the Services; (b) process payments; (c) communicate with you about your account, support requests, and Service updates; (d) send marketing communications, subject to your right to opt out (Section 11); (e) analyze usage trends; (f) detect and prevent fraud, abuse, and security incidents; and (g) comply with legal obligations.

‍Artificial Intelligence. We may use data derived from your use of the Services in aggregated, de-identified form that does not identify you or any individual, for analytics, benchmarking, and product improvement.

We may create aggregated or de-identified data from your use of the Services. Such data does not identify you and may be used for any lawful purpose. We commit to not re-identifying de-identified data.

4. Legal Bases for Processing (EEA/UK)

If you are located in the European Economic Area or United Kingdom, we process personal data on the following legal bases: (a) contract performance — to provide the Services you request; (b) legitimate interests — including securing the Services, preventing fraud, improving our products, and marketing to business contacts, in each case balanced against your rights; (c) legal obligations; and (d) consent, where required (for example, for non-essential cookies), which you may withdraw at any time. Where we rely on legitimate interests, you have the right to object (Section 10).

5. Cookies and Tracking Technologies

We use the following categories of cookies and similar technologies: (a) essential cookies required to operate the Services (e.g., authentication, security); (b) analytics and performance cookies that help us understand how the Services are used; and (c) advertising cookies used for marketing purposes.

Where required by law, we obtain consent for non-essential cookies through our cookie banner. You can also manage cookies through your browser settings, though disabling essential cookies may impair the Services.

‍Global Privacy Control and Do Not Track. We honor Global Privacy Control (GPC) browser signals as a valid opt-out of the sale or sharing of personal information where required by law. Because there is no industry standard for "Do Not Track" signals, we do not currently respond to them.

6. How We Share Information

We do not sell personal information for money. We may share personal information with: (a) service providers that support our operations (hosting, payment processing, analytics, customer support), under contracts limiting their use of the data; (b) legal authorities when required by law, subpoena, or to protect our rights, users, or the public; (c) successors in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy; and (d) other parties with your direction or consent.

We do not 'sell' or 'share' personal information as those terms are defined under applicable U.S. state privacy laws.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy. In general: (a) account information is retained for the life of your account and for 90 days after closure; (b) billing and transaction records are retained as required for tax and accounting purposes (typically seven years); (c) User Content is retained per our agreement with the customer and deleted following termination as described in our Terms of Service; and (d) usage logs are retained for 24 months. When retention is no longer necessary, we delete or de-identify the data.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. However, no system is 100% secure, and we cannot guarantee absolute security. We will notify affected users and regulators of data breaches as required by applicable law.

9. International Data Transfers

We are based in the United States, and personal information may be processed in the United States and other jurisdictions that may not provide the same level of data protection as your home jurisdiction. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and, for UK transfers, the UK International Data Transfer Addendum), which are incorporated into our Data Processing Addendum, available upon request at support@getviable.ai. You may request a copy of the relevant safeguards by contacting us.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you and obtain a copy in a portable format; (b) correct inaccuracies; (c) request deletion; (d) restrict or object to certain processing, including processing based on legitimate interests; (e) opt out of targeted advertising, "sales," or "sharing" of personal information and certain profiling; and (f) withdraw consent where processing is based on consent.

‍How to exercise your rights. Contact us at support@getviable.ai. We will verify your identity using the email address associated with your account or other reasonable means, and respond within the timeframe required by applicable law (generally 45 days for U.S. state law requests, extendable once where reasonably necessary). You may use an authorized agent to submit requests where permitted by law. We will not discriminate against you for exercising your rights.

‍Appeals. If we decline your request, you may appeal by replying to our decision with the word "Appeal." If your appeal is denied, you may contact your state Attorney General (for U.S. state law requests) or your data protection supervisory authority (for EEA/UK requests).

11. U.S. State Privacy Rights

Residents of California, Colorado, Connecticut, Delaware, Indiana, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Rhode Island, Texas, Utah, Virginia, and other states with comprehensive privacy laws have the rights described in Section 10, subject to the conditions and thresholds of each state's law.

‍California residents. Under the California Consumer Privacy Act (as amended by the CPRA), you have the right to know what categories of personal information we collect (described in Section 2), the purposes of collection (Section 3), and the categories of third parties with whom it is shared (Section 6); the right to delete, correct, and port your data; the right to opt out of "sale" or "sharing" of personal information; the right to limit use of sensitive personal information (we do not use sensitive personal information for purposes requiring a limitation right); and the right to non-discrimination. We honor GPC signals as described in Section 5. We do not knowingly sell or share the personal information of consumers under 16 years of age.

12. Marketing Communications

You may opt out of marketing emails at any time by using the "unsubscribe" link in any marketing message or by contacting us at info@getviable.ai. We will continue to send transactional and account-related communications (e.g., billing notices, security alerts) as needed to provide the Services.

13. Children's Privacy

The Services are intended for business use and are not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us personal information, contact us at support@getviable.ai and we will delete it.

14. Third-Party Links and Services

The Services may link to or integrate with third-party websites and services. Their privacy practices are governed by their own policies, and we are not responsible for them.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services at least fifteen (15) days before the changes take effect, and we will update the Effective Date above. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy.

16. Contact Information

Viable Works, Inc.
648 N Madison Street, #102
Bloomington, IN 47404
support@getviable.ai