Privacy Policy

Personal Information Collected from You

We may collect the following categories of personal information submitted to us by individuals through the Services:

• Contact Information, including first and last name, business email address, job title and phone number. We use this information to fulfill your request, to communicate with you directly, and to send you marketing communications in accordance with your preferences.
• Account Information, including first and last name, business email address, user ID and password, payment information, and any other information you provide to us. For some of our Services, we may also collect your attorney bar number and membership information for the American Immigration Lawyers Association (AILA), where needed. We use this information to administer your account, provide you with the relevant service and information, communicate with you regarding your account and your use of the Services, and for customer support purposes. Please note we use Stripe, a third-party provider, to process payments on our behalf and do not accept payment directly through our Services. The payment processor’s use of your personal information is governed by their privacy policy. To view Stripe’s privacy notice, please click here.
• Inquiry and Communications Information, including information provided in custom messages sent through the forms, in chat messages or to one of our email addresses. We use this information to investigate and respond to your inquiries, and to communicate with you, to enhance the services we offer to our users and to manage and grow our organization.
• Newsletter and Marketing Emails Information, including email address and applicable interests and communication preferences. We use this information to manage our communications with you and send you information about products and services we think may be of interest to you. If you wish to stop receiving email messages from us, simply click the “unsubscribe link” provided at the bottom of the email communication.
• Event and Webcast Information, including registration information, call-in details and contact information. We use this information to administer and facilitate the Services and improve and grow our business.
• Information Collected Through the Use of the Services, including any files, documents, videos, images, natural language descriptions, data, or information you choose to upload, submit or otherwise transmit through your communications with us or your use of the Services (collectively, “User Content”). User Content and any information contained in the User Content, including personal information you may have included, is stored and collected as part of the Services. We use the User Content to provide you with the Services. For example, some of our Services may use artificial intelligence to generate content such as research memos, draft emails, or other legal documents, summarizations, or provide you with responsive search results based on natural language queries or prompts that you provide to us. If those queries or prompts include personal information, then that personal information will be used in order to provide you with the applicable content.
• Feedback - We may also collect feedback and ratings you provide relating to our services or products. We use this information to communicate with you, to conduct market research, inform our marketing and advertising activities and improve and grow our business.
• Business Representative Contact Information - If you are a business representative, we collect your information in connection with our business relationship with you. This information may include your first name, last name, company contact information (e.g., email, phone, address), job title, and any other information related to the business relationship.
• Personal Information Automatically Collected - As is true of many digital properties, we and our third-party partners may automatically collect certain information from or in connection with your device when visiting or interacting with our Services or website, such as the list below and in the sub-sections here:

1. Log Data, including internet protocol (IP) address, operating system, device type and version, browser type and version, browser id, the URL entered and the referring page/campaign, date/time of visit, other user agent string data, the time spent on our Services, and any errors that may occur during the visit to our Services). Log data may overlap with the other categories of data below.
2. Analytics Data, Including the electronic path you take to our services, through our services and when exiting our services, UTM source, as well as your usage and activity on our services, such as the time zone, activity information (first and last active date and time), usage history (flows created, campaigns scheduled, emails opened, total log-ins) as well as the pages, links, objects, products and benefits you view, click or otherwise interact with.
3. Location Data (such as approximate geographic location based on your IP address).

We and our third-party providers may use (i) cookies or small data files that are stored on your computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”) to automatically collect this personal information. We may also use this information to distinguish you from other users of our Services. This helps us monitor and analyze how you use and interact with our Services. It also helps us and our partners to determine products and services that may be of interest to you. Please refer to our Cookie Policy for more details. For more information about these practices and your choices regarding cookies, please see the Control Over Your Information section.

Personal Information from Third Parties

We also obtain personal information from third parties. We may combine this information with personal information we collect either automatically or directly from you.

We may receive the same categories of personal information as described above from the following third parties:

• Your Employer / Company: If you interact with our Services through your employer or company, we may receive your information from your employer or company, including another representative of your employer or company. We use this information to operate, maintain, and provide to you the features and functionality of the Services.
• Other Users or Individuals who Interact with our Services: We may receive your information from other users or other individuals who interact with our Services. For example:
• 1. We may receive information about you if User Content containing personal information about you is created or uploaded through our Services, such as a contract that includes your name and contact information.
  2. If you discuss Visalaw.Ai or GEN on a third party social media platform, then we will be able to see any public communications made using that platform.
  3. Individuals may share your contact information with us in order to share materials with you or if they think you may be interested in using our Services. In these instances, we will use this information to provide you with access to the materials, communicate with you about our Services and to provide you with promotions and other offers.
• Social Media: When you interact with Visalaw through social media networks, such as when you “Like” us on Facebook or follow us or share our content on Instagram, Facebook, Twitter, LinkedIn or other social networks, we may receive some information about you that you permit the social network to share with third parties. The data we receive is dependent upon your privacy settings with the social network, and may include your profile information, profile picture, gender, username, user ID associated with your social media account, age range, language, country, and any other information you permit the social network to share with third parties. You should always review and, if necessary, adjust your privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information to operate, maintain, and provide to you the features and functionality of the Services, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.
• Service Providers: Our service providers that perform services solely on our behalf, such as survey and marketing providers and payment processors, collect personal information and often share some or all of this information with us. The information may include contact information, information about your communications and related activities, and information about your use of the services. We may use this information to administer and facilitate our services, your orders, and our marketing activities.
• Business Partners & Collaborators: We may receive your information from our business partners and collaborators, such as organizations that offer their products and/or services on our Services. We may use this information to administer and facilitate our services and our marketing activities.
• Other Sources: We may also collect Personal Information about individuals that we do not otherwise have from, for example, publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions. We use this information to operate, maintain, and provide to you the features and functionality of the Services, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.

Additional Uses of Personal Information

We may use personal information we collect to:

• Fulfill or meet the reason the information was provided, including to deliver the Services you have requested, including providing you with access to a training you have requested or an online product demonstration or to verify your eligibility to receive certain Services (such as services that are specifically intended for licensed attorneys);
• Manage our organization and its day-to-day operations;
• Register you for and provide you access to events and webcasts;
• Communicate with you, including via email, live chat and social media and/or telephone calls, video chat and live webinars including through the use of Zoom and Google Meet;
• Request you to complete surveys about our organization;
• For marketing and advertising purposes, including to market to you or offer you through email information and updates on products or services we think that you may be interested in;
• Process payment for our Services;
• Conduct research and analytics on our customer and user base and our Services;
• Improve and customize our Services to address the needs and interests of our user base and other individuals we interact with;
• Test, enhance, update and monitor the Services;
• Diagnose or fix technology problems;
• Help maintain the safety, security and integrity of our property and Services, technology assets and business;
• To enforce our contractual rights (such as the rights in our Terms of Service), to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
• Prevent, investigate or provide notice of fraud or unlawful or criminal activity;
• Comply with contractual and legal obligations and requirements;
• To fulfill any other purpose for which you provide personal information; and for any other lawful purpose, or other purpose that you consent to.

Where you choose to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide you with additional privacy-related information where the scope of the inquiry/request and/or personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy notice will govern how we may process the information provided at that time.

California Privacy Notice

If you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g., backups, etc.).

CCPA Privacy Notice

The California Code of Regulations defines a "resident" as:

1. every individual who is in the State of California for other than a temporary or transitory purpose and
2. every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose

All other individuals are defined as "non-residents."

If this definition of "resident" applies to you, we must adhere to certain rights and obligations regarding your personal information.

How do we use and share your personal information?

More information about our data collection and sharing practices can be found in this privacy notice and our Cookie Notice: http://www.visalaw.ai/cookies.

You may contact us by email at support@visalaw.ai, or by referring to the contact details at the bottom of this document.

If you are using an authorized agent to exercise your right to opt out we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Each service provider is a for-profit entity that processes the information on our behalf, following the same strict privacy protection obligations mandated by the CCPA.

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your rights with respect to your personal data

• Right to request deletion of the data — Request to deleteYou can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation, or any processing that may be required to protect against illegal activities.
• Right to be informed (Request to know) - Depending on the circumstances, you have a right to know:
• 1. whether we collect and use your personal information;
  2. the categories of personal information that we collect;
  3. the purposes for which the collected personal information is used;
  4. whether we sell or share personal information to third parties;
  5. the categories of personal information that we sold, shared, or disclosed for a business purpose;
  6. the categories of third parties to whom the personal information was sold, shared, or disclosed for a business purpose;
  7. the business or commercial purpose for collecting, selling, or sharing personal information; and
  8. the specific pieces of personal information we collected about you.
• 1. By applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.
• Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights - We will not discriminate against you if you exercise your privacy rights.
• Right to Limit Use and Disclosure of Sensitive Personal Information - We do not process consumer's sensitive personal information.

Verification process

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g., phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use personal information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

Other privacy rights

• You may object to the processing of your personal information.
• You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information.
• You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
• You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.

To exercise these rights, you can contact us by email at support@visalaw.ai, or by referring to the contact details at the bottom of this document. If you have a complaint about how we handle your data, we would like to hear from you.

Virginia Privacy Notice

If you are a resident of Virginia, you may be granted specific rights regarding access to and use of your personal information.

Under the Virginia Consumer Data Protection Act (CDPA):

• "Consumer" means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.
• "Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information.
• "Sale of personal data" means the exchange of personal data for monetary consideration.
• If this definition "consumer" applies to you, we must adhere to certain rights and obligations regarding your personal data.

The information we collect, use, and disclose about you will vary depending on how you interact with us and our Services. To find out more, please visit the following links:

• Personal data we collect
• How we use your personal data
• When and with whom we share your personal data

Your rights with respect to your personal data

• Right to be informed whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

We have not sold any personal data to third parties for business or commercial purposes. We will not sell personal data in the future belonging to website visitors, users, and other consumers.

Exercise your rights provided under the Virginia CDPA

More information about our data collection and sharing practices can be found in this privacy notice and our Cookie Notice: http://www.visalaw.ai/cookies.

You may contact us by email at support@visalaw.ai, by submitting a data subject access request, or by referring to the contact details at the bottom of this document.

If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.

Verification process

We may request that you provide additional information reasonably necessary to verify you and your consumer's request. If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request.

Upon receiving your request, we will respond without undue delay, but in all cases, within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary. We will inform you of any such extension within the initial 45-day response period, together with the reason for the extension.

Right to appeal

If we decline to take action regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please email us at support@visalaw.ai. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal if denied, you may contact the Attorney General to submit a complaint.

Supplemental Australia Privacy Notice

Visalaw is providing this supplement privacy notice to give individuals in Australia the additional information required under the Australian Privacy Act 1988 (Commonwealth). Specifically, the Privacy Act establishes the Australian Privacy Principles (“APPs) (effective from March 12, 2014) that set out these key obligations:

• We require our subcontractors to undertake similar obligations.
• We will not use or disclose your personal information for our direct marketing purposes unless:
• You have consented (opted-in) to receive direct marketing
• You would reasonably expect us to use your personal information for marketing; or
• We believe you may be interested in the marketing material, but it is impractical for us to obtain your consent.

You may opt-out of any marketing materials we send you through an unsubscribe mechanism or by contacting us at privacy@visalaw.ai. If you have requested not to receive further direct marketing messages, we may continue to provide you with messages that are not regarded as “direct marketing” under the Australian Privacy Act, including changes to our terms and other information related to your account.

Our data centers are located in the United States. In addition, we or our third party service providers use “cloud” technology to store or process personal information, which may result in storage of data outside Australia.

How to Lodge a Complaint Under the Australia Privacy Act

If you are an Australian resident and have a complaint about a privacy matter, please contact us at privacy@visalaw.ai If your complaint is not resolved to your satisfaction, you can contact the Office of the Australian Information Commissioner (OAIC) at this link: https://www.oaic.gov.au/privacy/privacy-complaints/.

Supplemental Canada Privacy Notice

Visalaw is providing this supplemental privacy notice to give individuals in Canada the additional information required under the Personal Information Protection and Electronic Documents Act (“PIPEDA”). This supplemental notice addresses the transfer of personal information outside of Canada and your rights under Canadian privacy law.

Your Rights

As a Canadian resident, you may ask us to take the following actions in relation to your personal information that we hold, subject to certain conditions:

• Right of Access - You can ask for access to the personal information stored by us.
• Right to Rectification - You have the right to obtain from us the rectification of inaccurate personal information concerning you.
• Right to Erasure - Under certain circumstances, you have the right to obtain from us the erasure of personal information concerning you.
• Right to Restriction of Processing - Under certain circumstances, you can ask us to restrict the processing of your personal information.
• Right to Withdraw Consent - If you gave your consent to the processing of your personal data you can withdraw your consent at any time with future effect.
• Right to Object - Under certain circumstances, you have the right to object to the processing of personal information concerning you.

To exercise your rights, please email us at privacy@visalaw.ai with the subject line, “PIPEDA Rights Request.”

We may request specific information from you to help confirm your identity prior to processing your request.

Note that these rights are subject to exceptions under the applicable Canadian laws. We will attempt to resolve disputes and/or complaints according to this notice and applicable laws.

If you believe that the processing of your personal information violates Canadian privacy law and/or other data protection laws, you may also lodge a complaint to the competent supervisory authority without prejudice to other legal remedies.

If you would like to contact us, you can write to us at:

• Visalaw Ventures, INC
• 1028 Oakhaven Road
  Memphis, TN 38119
• Email: privacy@visalaw.ai