Privacy Policy

Effective Date: October 29, 2026

This Privacy Policy (“Privacy Policy”) explains our privacy practices for the activities described herein. We respect your privacy and are committed to protecting it through our compliance with this Privacy Policy. Please read this Privacy Policy carefully to learn how we collect, use, share, and otherwise process information relating to individuals (“Personal Data”), and to learn about your rights and choices regarding your Personal Data.

A reference to “we,” “us” or “our” is a reference to Second Sight Data Discovery, Inc and its relevant subsidiaries or affiliates involved in the collection, use, sharing, or other processing of Personal Data.

Responsible Entity – We are the controller of your Personal Data as described in this Privacy Policy, unless specified otherwise.

Processing Activities Covered – This Privacy Policy applies to the processing of Personal Data collected by us when you visit us on the web or through social media pages; receive communications from us, including emails, phone calls, texts or fax; attend one of our events; use our software or engage us to provide services to you. To the extent we process Personal Data on behalf of a customer in providing our software or services, that processing is governed by the applicable customer agreement and any data processing addendum. This Privacy Policy continues to apply to Personal Data we process for our own purposes, including information concerning website visitors, business contacts, and marketing activities, and does not supersede any applicable customer agreement or data processing addendum.

Our website, software, and services may contain links to other websites, applications, and services maintained by third parties. The information practices of other services, or of social media platforms that host our branded social media pages, are governed by their Privacy Policies, which you should review to better understand their privacy practices.

Personal Data Collected – The Personal Data we collect directly from you may include identifiers, professional or employment-related information, financial account information, commercial information, visual information, and internet activity information. We collect such information in the following situations:

  • If you express an interest in obtaining additional information about our software or services; request customer support; use our “Contact Us” or similar features; sign up for and/or attend an event or webinar; download certain content; or submit a contact form or request a meeting through our website, we collect the name, email address, and any other information you voluntarily provide.

  • If you purchase a subscription for our software or register for a webinar or event, we may require that you provide to us your financial and billing information, such as billing name and address, credit card number or bank account information.

  • When you visit our website, we and our service providers may automatically collect information about your device and use of the website, including IP address, browser and device information, pages visited, and dates and times of access. We use Cloudflare to host, deliver, and support the security of our website. Cloudflare also provides approximate country and state or province information derived from visitors’ IP addresses, which our website uses to determine applicable analytics consent requirements.

We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies, including _ga cookies, to collect website usage information. Google Signals, advertising personalization, and advertising cookies are disabled.

For visitors in the European Union, European Economic Area, United Kingdom, Switzerland, and Quebec, and visitors whose location cannot be determined, Google Analytics is not activated unless the visitor affirmatively accepts analytics cookies. For other visitors, Google Analytics operates by default unless the visitor opts out. Visitors may change their preferences at any time through the “Cookie settings” link on our website. Rejecting analytics cookies stops further Google Analytics tracking and removes Google Analytics cookies set through our website.

We use browser local storage to retain visitors’ analytics preferences for one year and session storage to administer consent requirements during a browsing session. These storage mechanisms are used to manage visitors’ choices and are not analytics cookies. Cloudflare may also use cookies necessary for website security and operation.

We may also collect information about interactions with our emails through web beacons or similar technologies, where applicable.

  • If you use and interact with our software or services, we may automatically collect information about your device and your usage of our services through log files and other technologies, some of which may qualify as Personal Data.

  • If you voluntarily submit certain information to our software or services, such as filling out a survey about your user experience, we collect the information you have provided as part of that request.

  • If you provide us or our service providers with any Personal Data relating to other individuals, you represent that you have the authority to do so, and where required, have obtained the necessary consent, and acknowledge that it may be used in accordance with this Privacy Policy.

If you believe that your Personal Data has been provided to us improperly, or if you want to exercise your rights relating to your Personal Data, please contact us immediately.

Using Personal Data – We may collect and process your Personal Data for a variety of purposes, as described below. Where required by applicable law, we obtain your consent, including for optional website analytics and marketing communications where consent is required. Otherwise, depending on the circumstances, we may rely on our legitimate interests in operating and securing our website, responding to inquiries, and promoting our products and services; the performance of a contract; or compliance with legal obligations. Examples of such reasons include, but are not limited to, the following:

  • Promoting the security of our website, software, and services. We may process your Personal Data by tracking use of our website, software, and services, creating aggregated non-personal data, verifying accounts and activity, investigating suspicious activity, and enforcing our terms and policies to the extent it is necessary for our legitimate interest in promoting the safety and security of the services, systems and applications and in protecting our rights and the rights of others.

  • Reviewing compliance with applicable usage terms. We may process your Personal Data to review compliance with the applicable usage terms in any agreement governing your access to or use of our software or services.

  • Handling contact and user support requests. If you fill out a “Contact Me” web form or request user support, or if you contact us by other means including via a phone call, we may process your Personal Data to address your issue.

  • Providing necessary functionality. We may process your Personal Data to perform our contract with you for the use of our website, software, and services; if we have not entered into a contract with you, we base the processing of your Personal Data on our legitimate interest to provide you with the necessary functionality required for your use of our websites and services.

  • Managing payments. If you have provided financial information to us, we may process your Personal Data to verify that information and to collect payments to the extent that doing so is necessary to complete a transaction and perform our contract with you.

  • Providing, developing and improving our website, software, and services. We may process your Personal Data to perform obligations set forth in any applicable agreement governing our software or services, or for the use of our website, software and services. If we have not entered into a contract with you, we may process your Personal Data to operate and administer our website, software, and services, and to provide you with content you access or request. Such information may also be used to improve our website, software, and services, and to improve functionality.

  • Managing event registrations and attendance. We may process your Personal Data to plan and host events or webinars for which you have registered or that you attend, including sending related communications to you.

  • Assessing opportunities. We may process your Personal Data to assess the requirements of our software and services to ensure that we are meeting the necessary requirements of our service offering and recommending the correct level of engagement.

  • Sending marketing communications. We may use your Personal Data, including contact information submitted through our website, to send marketing information, product recommendations, and other non-transactional communications about us, our subsidiaries, affiliates, and partners, including information about our products, services, and events. We will obtain consent where required by applicable law and honor applicable requests to opt out of marketing communications.

If we need to collect and process Personal Data by law, or under a contract we have entered into with you, and you fail to provide the required Personal Data when requested, we may not be able to perform our contract with you.

Sharing Your Personal Data – While we generally strive to keep your Personal Data private, we may share your Personal Data as necessary for reasons such as those set forth below:

  • To fulfill the purpose for which you provide it. For example, if you request a specialized cyber insurance quote based on the results of our software, we will transmit the Personal Data necessary for the quote to be provided.

  • With our contracted service providers, who provide services such as IT and system administration and hosting, credit card processing, research and analytics, data analysis, marketing, customer support and data enrichment for the purposes set forth above and to fulfill any agreements we may have with you. For our website, these service providers include Cloudflare, which provides website hosting, delivery, security, and approximate location information; Google Analytics, which processes website usage information when analytics is enabled; and Slack and Resend, which may receive or transmit contact-form submissions.

  • If you use our website to register for an event or webinar organized by us or one of our affiliates, we may share your Personal Data with any event sponsors as well as any affiliate to the extent this is required on the basis of the affiliate’s contract with you to process your registration and ensure your participation in the event.

  • We may share your Personal Data with professional advisors acting as service providers, processors, or joint controllers – including, but not limited to, lawyers, bankers, accountants, auditors, and insurers based in countries in which we operate who provide consultancy, banking, legal, insurance and accounting services, and to the extent we are legally obliged to share or have a legitimate interest in sharing your Personal Data.

  • We may share anonymized and aggregated data in the normal course of operating our business; for example, we may share information publicly to show trends about the general use of our services or usage patterns and best practices within a particular industry. We may also share such information with our subsidiaries and affiliates.

  • If we are involved in a merger, reorganization, dissolution or other fundamental corporate change, or sell a business unit, or if all or a portion of our business, assets are acquired by a third party, with such third party. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of Personal Data to an unaffiliated third party.

  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

International transfer of Personal Data – We and our service providers may collect, process, transfer, and store Personal Data in the United States and other countries outside the jurisdiction in which you reside, including countries with different data-protection laws. Where applicable law restricts an international transfer, we will use an appropriate lawful transfer mechanism, which may include an applicable adequacy determination, approved contractual safeguards, or another mechanism or exception permitted by law. You may contact us at privacy@secondsight.ai for information about safeguards applicable to the international transfer of your Personal Data.

Personal Data Retention – We may retain your Personal Data for a period of time consistent with the original purpose of collection or as long as required to fulfill our legal obligations. We determine the appropriate retention period for Personal Data on the basis of the amount, nature, and sensitivity of the Personal Data being processed, the potential risk of harm from unauthorized use or disclosure of the Personal Data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements.

Rights Relating to Your Personal Data – You may have certain rights relating to your Personal Data, subject to local data protection laws. Depending on applicable law, these rights may include the rights to access, correct, or delete your Personal Data; restrict or object to certain processing; receive a portable copy of certain Personal Data; and withdraw consent where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal. You may also have the right to lodge a complaint with the applicable data protection authority. To exercise your rights, please contact us by using the information in the “Contact us” section, below. We try to respond to all legitimate requests within one month and will contact you if we need additional information from you in order to honor your request. Occasionally it may take us longer than a month, taking into account the complexity and number of requests we receive.

Data Security – We take appropriate precautions including organizational, technical, and physical measures to help safeguard against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure of, or access to, the Personal Data we process or use. However, the safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. Although we use safeguards designed to protect Personal Data, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this Privacy Policy – It is our policy to post any changes we make to our privacy policy on this page and to update the “effective date” at the top of the page when we do. If we make material changes to how we treat our users’ personal information, we may notify you prior to the update taking effect or may post a conspicuous notice on our website of the change. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our website and this privacy policy to check for any changes.

Contact – To exercise your rights regarding your Personal Data, or if you have questions regarding this Privacy Policy or our privacy practices, please email us at privacy@secondsight.ai.

Children – Our website is not intended for individuals under 18 years of age, and we do not knowingly collect Personal Data from such individuals. If you believe we have collected Personal Data from an individual under 18, please contact us at privacy@secondsight.ai.

Additional Disclosures for California Residents – If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. California’s “Shine the Light” law (Civil Code Section § 1798.83) permits eligible California customers to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@secondsight.ai or write us at: 509 S. Woodscrest Drive, Bloomington, IN 47401. If you are an authorized agent wishing to exercise rights on behalf of a California resident, please provide us with a copy of the consumer’s written authorization designating you as their agent. We may need to verify your identity and place of residence before completing your rights request. The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), may provide California residents with additional rights, including rights to access, correct, or delete Personal Data; opt out of the sale or sharing of Personal Data for cross-context behavioral advertising; limit certain uses of sensitive Personal Data; and exercise applicable rights without discriminatory treatment. We do not sell Personal Data. We may disclose Personal Data to service providers and other recipients as described in this Privacy Policy. California residents may submit requests to exercise applicable rights using the contact information provided above. California law requires that we detail the categories of Personal Data that we share or disclose for certain “business purposes,” such as disclosures to service providers that assist us with securing our services or marketing our products. We disclose the following categories of Personal Data for our business purposes: identifiers; commercial information; internet activity information; financial information; professional and employment-related information; education information; and inferences drawn from any of the above information categories.

Back to secondsight.ai