Privacy Policy

1. Introduction

Digitals AI Inc. ("we," "our," or "us") operates Digitals.ai, the world's leading unified AI marketplace. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

As a publicly traded company filing with the SEC, we are committed to the highest standards of data protection and transparency. Please read this privacy policy carefully. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when you:

• Register for an account
• Sign up or log in using LinkedIn OAuth
• Make purchases or transactions
• Submit inquiries or contact us
• Subscribe to our newsletter
• Participate in surveys or promotions

This information may include: name, email address, mailing address, phone number, payment information, company name, job title, and any other information you choose to provide.

2.1.1 LinkedIn OAuth Data

When you choose to sign up or log in using LinkedIn OAuth, we collect the following information from your LinkedIn profile:

• Name: Your full name (first and last name)
• Email Address: Your primary email address associated with your LinkedIn account
• Profile Picture: Your LinkedIn profile photo URL
• LinkedIn User ID: A unique identifier from LinkedIn to link your account

We do NOT collect: Your LinkedIn connections, network data, employment history, messages, posts, or any other sensitive LinkedIn data beyond basic profile information.

Minimal Permissions: We request only the minimal necessary OAuth scopes (openid, profile, email) required for authentication and basic profile display. We comply with LinkedIn's API Terms of Use and best practices for secure applications.

LinkedIn OAuth Compliance: Our use of LinkedIn OAuth is governed by the LinkedIn API Terms of Use and we adhere to all data protection requirements including GDPR compliance.

2.2 Automatically Collected Information

When you access our services, we automatically collect certain information about your device and usage patterns:

• IP address and location data
• Browser type and version
• Operating system
• Pages viewed and time spent on pages
• Referring website addresses
• Device identifiers and mobile network information

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. You can control cookie settings through your browser preferences.

3. How We Use Your Information

We use the information we collect for various purposes:

• To provide, maintain, and improve our services
• To authenticate your identity when you log in via LinkedIn OAuth
• To process transactions and send related information
• To send administrative information, updates, and security alerts
• To respond to inquiries and provide customer support
• To personalize your experience and deliver targeted content
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues and fraud
• To comply with legal obligations and SEC reporting requirements
• To send marketing communications (with your consent)

3.1 LinkedIn Data Usage

Information obtained through LinkedIn OAuth is used exclusively for:

• Creating and maintaining your Digitals.ai account
• Providing single sign-on authentication
• Displaying your profile information on our platform
• Communicating with you about your account

We do NOT use your LinkedIn data for advertising purposes, do NOT share it with third parties for marketing, and do NOT scrape or aggregate LinkedIn data beyond what is provided through the OAuth flow.

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.

4.2 Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, your information may be transferred to the acquiring entity.

4.3 Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 With Your Consent

We may share your information for any other purpose with your consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols (TLS 1.3, AES-256)
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Secure data centers with physical access controls
• Secure storage of OAuth tokens with encryption
• HTTPS-only transmission of all OAuth credentials and access tokens
• Confidential storage of LinkedIn Client Secret separate from public code
• Regular token rotation and expiration policies

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5.1 LinkedIn OAuth Security

We follow LinkedIn's best practices for secure OAuth applications:

• All OAuth 2.0 requests are made over HTTPS connections
• Access tokens are never stored in client-side code or publicly accessible locations
• LinkedIn Client Secret is kept confidential and never exposed in URLs, logs, or error messages
• OAuth tokens are transmitted only over secure HTTPS connections
• We request minimal OAuth scopes necessary for functionality
• Regular security audits of our OAuth implementation

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt-out of marketing communications
• Restriction: Request restriction of processing
• Objection: Object to processing of your personal information

To exercise these rights, please contact us at privacy@digitals.ai. We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Types of cookies we use: Essential cookies, Analytics cookies, Functional cookies, and Advertising cookies. You can manage your cookie preferences through your browser settings.

8. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. LinkedIn OAuth Integration

11.1 Purpose

We offer LinkedIn OAuth as a convenient sign-in option to streamline account creation and authentication. This integration allows you to use your existing LinkedIn credentials to access our platform without creating a separate password.

11.2 Data Collection

When you authenticate via LinkedIn, we collect only the following basic profile information:

• Full name (first and last name)
• Email address (primary email verified by LinkedIn)
• Profile picture URL
• LinkedIn unique user identifier

11.3 Data Usage

LinkedIn OAuth data is used exclusively for:

• Creating your Digitals.ai account profile
• Authenticating your identity during login
• Displaying your profile information on our platform
• Communicating with you regarding your account and services

We explicitly do NOT:

• Access your LinkedIn connections, network, or professional relationships
• Read your LinkedIn messages or posts
• Post content to your LinkedIn profile without your explicit permission
• Share your LinkedIn data with third-party advertisers
• Use your data for purposes beyond authentication and account management

11.4 Compliance

Our LinkedIn OAuth integration complies with:

• LinkedIn API Terms of Use
• Additional Terms for LinkedIn Marketing API Program
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• OAuth 2.0 security best practices

11.5 Your Control

You maintain full control over your LinkedIn OAuth connection:

• You can revoke our access to your LinkedIn data at any time through your LinkedIn account settings
• You can disconnect your LinkedIn account from your Digitals.ai profile in your account settings
• You can request deletion of all data collected via LinkedIn OAuth
• Revoking access will not delete your Digitals.ai account, but you'll need to set a password for future logins

11.6 Data Retention

LinkedIn OAuth data is retained only as long as your account remains active. Upon account deletion, all LinkedIn-sourced data is permanently removed from our systems within 30 days, except as required by law or for legitimate business purposes (such as fraud prevention).

11.7 Security Measures

We implement industry-standard security measures for LinkedIn OAuth:

• All OAuth communications occur over encrypted HTTPS connections
• Access tokens are encrypted and stored securely
• Client credentials are kept confidential and never exposed publicly
• Regular security audits of OAuth implementation
• Immediate token revocation upon security incidents

11.8 Third-Party Access

Data obtained through LinkedIn OAuth is never shared with third parties except:

• As required by law or legal process
• To protect our rights, privacy, safety, or property
• In connection with a business transfer (merger, acquisition) with prior notice
• With your explicit consent

12. Contact Us

If you have any questions about this Privacy Policy, including our LinkedIn OAuth integration, please contact us: