background

Privacy Policy

To-be-registered Govato Pty Ltd Privacy Policy

Last updated 29 Aug, 2023

This Privacy Policy (the "Policy") is provided by to-be-registered Govato Pty Ltd ("Govato", "we", "us", "our", "Platform"). This Policy outlines how we handle your personal information for our services (the "Services") on the Govato Desktop Application (the "Software"). By using the Software, you understand and agree to the terms of this Policy.

1. Digital Properties

Govato deals with the following digital properties:

- Audio recordings, either recorded by the Platform of the ambient of the device where the Service is executed.

- Transcriptions of audio recordings.

- Summaries of transcriptions.

- Scenarios, initially in the form of templated forms or questionnaires with syntax known to the system, populated from transcriptions.

- Ideas or diagnoses generated from transcriptions.

2. Personal Information

Govato does not intentionally record any personal information other than the information of the Platform user that is minimally required to operate the system or as required by law. We do not specifically extract any personal information from the audio recording. If any personal information exists in the audio recording, it is part of the conversation and will be treated as part of that as opposed to being extracted for marketing purposes, sold to third parties, or used in any activity that exploits the existence of such information in the audio recordings.

3. Data Protection

Govato protects data recorded on its Platform using market-best practices.

- Data is stored at Amazon Web Services (AWS).

- All data is encrypted both in transit and at rest.

- Certain users with high levels of access and designated roles, if required, may access personal information for specific job requirements in good faith, with extreme concern for protecting individuals' personal information.

- Data on the Platform is transferred to AssemblyAI and OpenAI ChatGPT in accordance with their privacy policies. Please review the privacy policies at AssemblyAI and OpenAI for more information.

4. Third Parties

We will never sell your data to third parties.

5. Automatically Collected Information

We receive some personal information automatically from your use of the Service. This includes:

- Log Data: Your browser sends information automatically whenever you use our website. This log data includes your IP address, browser type, and settings, the date and time of your request, and how you interacted with our website.

- Usage Data: We may collect information about your use of the Services, such as the types of content that you view or engage with, the features you use, the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, computer connection, IP address, etc.

- Device Information: This includes the name of the device, operating system, and browser you are using. The information collected may depend on the type of device you use and its settings.

- Analytics: We use a variety of online analytics products that use cookies to help us analyse how users use our Services and enhance your experience.

6. Usage of Personal Information

We may use Personal Information of the Platform users for:

- Providing, administering, maintaining, and/or analysing the Services.

- Improving our Services and conducting research.

- Communicating with you.

- Developing new programs and services.

- Preventing fraud, criminal activity, or misuse of our Services, and ensuring the security of our IT systems, architecture, and networks.

- Complying with legal obligations and legal processes and protecting our rights, privacy, safety, or property, and/or those of our affiliates, you, or other third parties.

7. Aggregated or De-Identified Information.

We may aggregate or de-identify Personal Information and use this aggregated or de-identified information to analyse the effectiveness of our Services, to improve and add features to our Services, conduct research, and for other similar purposes. We may share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We maintain and use de-identified information in anonymous or de-identified form and we will not attempt to reidentify the information.

8. Disclosure of Personal Information

We may disclose your Personal Information under the following circumstances:

- Business Transfers: In the event of a merger, acquisition, consolidation, change of control, corporate divestiture, or dissolution where we sell all or a portion of our business or assets, we may disclose Personal Information during the process of negotiation and/or to the subsequent business entity.

- Legal Requirements: We may disclose Personal Information if it is necessary to:

- Comply with a legal obligation or court order;

- Prevent, detect, or investigate possible wrongdoing in connection with the Services;

- Protect the personal safety of users or the public;

- Protect against legal liability.

9. Your Rights Over Your Personal Information

You have the right to:

- Access your data;

- Request deletion or change of your data.

For further information or requests, please contact us at [email protected]

10. Children's Privacy

Our Services are not directed to children under the age of 13 and we do not knowingly collect personal information from children under 13. If you are 13 or older, but under 18, you must have consent from your parent or guardian to use our Services.

11. Security and Retention

We use various technological and procedural security measures to protect the personal information we collect, use, or store. However, please note that no method of transmitting or storing electronic data is ever completely secure, and we cannot guarantee that such information will never be accessed, used, or released in a manner that is inconsistent with this Policy.

12. International Users

As of June 2023, while our efforts are designed to protect your personal information, the Software is intended for use by Australian users. If you use our Services outside Australia, you understand and agree that your information may be transferred to, stored, and processed in Australia where our servers are located and our central database is operated.

13. Diagnostic and Monitoring Logs

During the course of operating the Govato Software, we may inadvertently record personal information within diagnostic and monitoring logs. These logs, predominantly but not exclusively held within AWS CloudWatch, contain text-based data that is utilized for improving the functionality of the Software and ensuring optimal performance.

While we strive to minimize the personal information held within these logs, please be aware that due to the nature of the Software's operation, personal information may occasionally be written into these logs. We use this information strictly for debugging and improving our services, and it is not used for marketing or selling to third parties.

Rest assured, as with all other data collected, these logs are protected with industry-standard security measures including encryption both in transit and at rest, and access is strictly limited to authorized personnel following the 'least privilege' principle.

14. PII Redaction Using AssemblyAI

At Govato, we prioritize the privacy and security of our users' data. To enhance our commitment to data protection, we have integrated with AssemblyAI to redact Personally Identifiable Information (PII) from transcriptions. The following items are targeted for redaction:

  • Email addresses
  • Phone numbers
  • US Social Security numbers
  • Credit card numbers
  • Credit card expiration dates
  • Credit card CVVs
  • Personal names
  • Organizations
  • Driver's license details
  • Banking information

It's important to note that while we aim for comprehensive redaction of these items, the accuracy of the redaction process is not entirely within our control, as it is managed by our third-party service, AssemblyAI. We continuously work with AssemblyAI to enhance the accuracy and efficiency of the redaction process, ensuring the utmost privacy for our users.

15. Changes to the Privacy Policy

We may change this Privacy Policy at any time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law. By continuing to use our Service or providing us with Personal Information after we have posted an updated Privacy Policy, or notified you by other means, you consent to the revised Privacy Policy.

If you have any questions or comments about this Privacy Policy, please contact us at [email protected].

Last updated 29 Aug 2023

Previous update: 19 June 2023

Copyright © 2023 Govato, Inc.

All rights reserved.