‍Introduction and Scope of this Privacy Notice

This privacy notice (“Privacy Notice”) applies to AI RIS Labs Ltd.’s ("Company", "we" or "our") data collection and privacy practice in connection with the access and use of our website available at: www.airis-labs.com (“website”) by any individual, including representatives of prospects and potential business partners, and related interactions with us (“user” or “you”).

This Privacy Notice describes how we collect, use and process Personal Data (as defined below), including information about the types of Personal Data collected, why we collect your Personal Data and the purposes for which we will use it, with whom we share it, how long we will retain it, as well as your right regarding your Personal Data, and how you can exercise these rights.

This Privacy Notice is an integral part of this website’s Terms of Use available at:

https://www.airis-labs.com/information/terms-of-use . Capitalized terms used under this Privacy Notice, however not defined herein shall have their respective meaning assigned to them under the Terms of Use. 

ANY PERSONAL DATA YOU PROVIDE IS MADE AT YOUR FREE WILL AND CONSENT (WHERE REQUIRED UNDER APPLICABLE DATA PROTECTION LAWS), AND YOU ACKNOWLEDGE THAT YOU ARE NOT UNDER ANY STATUTORY OBLIGATION TO PROVIDE US WITH PERSONAL DATA. HOWEVER, IF YOU WILL NOT PROVIDE US WITH CERTAIN PERSONAL DATA, WE WILL NOT BE ABLE TO FULFILL CERTAIN PURPOSES, FOR EXAMPLE, COMMUNICATE WITH YOU REGARDING ANY INQUIRIES YOU SUBMIT - ALL AS DESCRIBED UNDER THE “THE DATA WE COLLECT, PURPOSE OF USE AND LAWFUL BASIS” PARAGRAPH OF THIS PRIVACY NOTICE. 

This Privacy Notice further includes specific information required under applicable data protection laws for residents of certain jurisdictions, among others:

If you are a located in the EEA or UK –this Privacy Notice details information we are required to disclose under the EU and the UK General Data Protection Regulations (collectively “GDPR”), including our lawful basis for processing Personal Data, cross border data transfer and your rights.

Additional Information to certain United States residents, including privacy rights under certain state laws, is further detailed under the “US Residents Notice” paragraph of this Privacy Notice. 

‍

Contact Information and Data Controller Information

AI RIS Labs Ltd is the “data controller” (as such term is defined under applicable privacy and data protection legislation) of the Personal Data collected subject to this Privacy Notice. This means that the Company is responsible for deciding how, and the purposes for which, your Personal Data is processed as well as to enable you to exercise your rights related to your Personal Data processed by the Company. 

For any questions you may have related to our processing of your Personal Data and this Privacy Notice, please contact us at legal@airis-labs.com.

‍

The Data Sets Collected, Purposes of Use and Lawful Basis

Depending on your interaction with us and our website, we may collect certain information that may be classified as follows: 

 “Non-Personal Data” information which is non-identifiable and anonymous. We are not aware of the identity of the individual from whom such data was collected, and we are not able to link between this information and the individual by using reasonable means. Non-Personal Data may include technical information such as type of operating system and type of browser, type of device, your actions on the website - all when collected on an aggregate basis, or otherwise not combined with any identifiers. We may further process and anonymize data in a manner that the data will be Non-Personal Data. 

 “Personal Data” information that identifies an individual or may with reasonable effort identify an individual.

Below we detail the Personal Data we collect and how and for which purposes we process and use your Personal Data, as well as our lawful basis for processing (subject to the GDPR, if applicable).

Please note that, in addition to the purposes set forth below, we may use certain Personal Data to prevent potentially prohibited or illegal activities, fraud, misappropriation, infringements, identity thefts, and any other misuse of the website and to enforce our Terms of Use, as well as to protect the security or integrity of our databases and the website, and to take precautions against legal liability. We will not collect additional categories of Personal Data or use the Personal Data for any purpose that is materially different, unrelated, or incompatible purpose without obtaining your consent unless we are required or permitted by applicable law.

‍

1. Online Identifiers & Device and Usage Data. 

Personal Data Sets: 

When users access or interact with our website, certain information regarding such access and use is processed, including information that is automatically collected and generated through use of our, or our third-party service providers’ and marketing partners’, cookies and tracking technologies (see the “Cookies and Similar Technologies” paragraph of this Privacy Notice below).

These data sets include online identifiers associated or transmitted from the user’s browser and device, such as Internet Protocol (IP) address, Cookie identifiers, user agent, and similar unique online identifiers generated, tags, etc. (“Online Identifiers”). 

Online Identifiers, such as IP address, are further used to generate certain information, for example, extract approximate location (e.g., country). 

In addition, when users access our website, we collect information regarding the user’s browser and device (for example, type of device, operating system, etc.) (“Device Data”), as well as information regarding the user’s use and interactions with the website such as session durations and time and date stamp, the content viewed on our website, interactions within the website (user-interface clicks), crash data, the URL or advertising campaign from which you have reached our website, language preferences, etc. (“Usage Data”). If the Device Data and Usage Data are associated with an Online Identifier, such data sets will be processed by us as Personal Data.

Purpose of Collection and Use: 

We collect and use Online Identifiers, Device Data and Usage Data for the following purposes:  

• Our website’s functionality, operation, security and fraud prevention, debugging and to resolve technical issues and errors. 
• Internal analytics and statistics, used to enhance and improve our website and Content, and the way we offer them, etc. for example, we analyze how users use our website or the most viewed content to improve the way we present such content. 
• To promote, advertise and market our website, products and services. This includes targeted advertisements (which further depend on your cookies’ settings and preferences) on our website or third party’s platforms across the web, and measure effectiveness of our content and advertising campaigns.

Lawful Basis (where the GDPR applies): Processing Online Identifiers, Device Data and Usage Data for security and necessary operational purposes, internal analytics and improvements, is based on our legitimate interests. Processing Online Identifiers, Device Data and Usage Data through our use of cookies for analytic and advertising purposes is based on your consent - where required under applicable laws. You have the right to withdraw consent, opt-out or otherwise change your preferences regarding our use of cookies at any time. 

‍

2. Contact Information & Communications Data. 

Personal Data Sets:

If you contact us with any inquiries or request to connect, be provided with information regarding our business operation, etc., either through an online form available on our website, or by any other means we make available, we will process the contact information you provide, such as, as applicable to the communication, name, business email address and phone number, and the organization you work with (“Contact Information”).  

In addition, we will process and store the contacts of our communications with you, including email correspondence and, where applicable call and meeting recording, and may also process data related to interactions with such communications (such as access time and date for email communications) (“Communications Data”). Note that any recording of calls or meetings shall be made subject to obtaining your consent where required under applicable laws.

Purpose of Collection and Use: 

We collect and use Contact Information and Communications Data for the following purposes:  

• To reponed to your inquiries or request or send you the information and materials you have requested to receive. 
• To send marketing material related to our business operation in which you have shown your interest, or we assume will be relevant to you, and to further promote and enhance our marketing efforts.  
• Communications Data may be processed and stored by us to have records of our interactions, to improve our marketing efforts, and in the event we believe it is required to continue to store it, for example, in the event of claims or in order to provide you with any further assistance (if applicable). 
• Internal analytics and statistics, used to enhance and improve our business operation. 

Lawful Basis (where the GDPR applies): Processing Contact Information and Communications Data to reponed to your inquiry or request in the event you have contacted us or send you information or materials you have requested to receive, is based on your consent. For other purposes set forth above, Contact Information and Communications Data are processed and stored subject to our legitimate interests.   You can opt-out or withdraw consent, as applicable, from receiving our marketing communications, at any time using the “unsubscribe” or other option we provide within the body of the message. 

‍

How Personal Data Is Collected

Depending on the nature of your interaction with the website and with us, we may collect Personal Data: 

By using automated means – we may use cookies or similar technologies to gather some information automatically when you interact with our website. For additional information regarding our use of cookies and the choices you can make, please see the “Cookies and Similar Technologies” paragraph of this Privacy Notice.

When provided by you voluntarily – we will collect Personal Data if you provide us with such information, for example when you submit a “contact us” form.

‍

Cookies and Similar Technologies

We use “cookies” (or similar tracking technologies such as tags and pixels) on our website. The use of cookies is a standard industry-wide practice. Cookies and similar technologies are a small piece of information, text or code that a website assigns and stores on your browser while you access a website. Cookies can be used for various purposes, including for operation and security purposes, to improve website functionality and remember preferences, for statistical purposes, as well as for advertising purposes. 

The information generally collected and stored by cookies includes Online Identifiers, Device Data and Usage Data (as defined under the “The Data Sets Collected, Purpose of Use and Lawful Basis” paragraph of this Privacy Notice above).  

The cookies and tracking technologies can be either placed by us (known as “first party cookies”), or by third parties which their services we use such as our marketing partners, social media, analytic providers, etc. (known as “third party cookies”). The duration of cookies and tracking technologies – meaning the period until such are deleted – can be either when you close your browser (known as “session cookies”) or longer periods according to their purpose and settings (known as “persistent cookies”). 

Cookies and tracking technologies can be classified into certain categories, according to their purpose and use, and in general: 

Strictly Necessary Cookies - these cookies are necessary for the website to function and cannot be switched off. You can set your browser to block or alert you about these cookies, but some parts of the website will not work. 

Performance/Analytic Cookies - these cookies allow us to count visits, traffic sources and actions on our website so we can measure and improve the performance of our website. They help us to know, for example, which pages are the most and least popular and see how users move around the website (mainly on an aggregated basis). 

Functional Cookies - these cookies enable us to provide enhanced functionality. They may be set up by us or by third party providers whose services we have added to our pages (for example, online forms, etc.). If you do not allow these cookies then some or all of these functionalities and features may not function properly.

Advertising/Targeting Cookies - these cookies may be set through our website by advertising partners. Where we use third-party advertising cookies, such third-party may independently collect, through the use of such tracking technologies, Personal Data and may combine such information with other information they have independently collected relating to your online activities across their network of websites, for the purpose of enhanced targeting functionality and delivering personalized ads, as well as providing aggregated analytics related to the performance of our advertising campaign you interacted with. These third parties collect and use this information under their own privacy policies.

In addition, most browsers will allow you to block acceptance of cookies or erase cookies by adjusting the privacy and security settings of your web browser. Please refer to the support page of your browser to learn more. Please note that once you choose to opt out or disable cookies, some features of our website may not operate properly. 

‍

Disclosure of Personal Data

We may disclose Personal Data to third parties, including our affiliated companies, partners or service providers that help us manage our website, business operations and marketing efforts. The categories of such third-party recipients or otherwise events in which we may share Personal Data are as follows: 

Our Service Providers - we share Personal Data with our service providers to perform the requested functions and services on our behalf, for example, cloud providers, analytic tools, security tools, communication management providers, professional advisors, etc. These providers are prohibited from using the Personal Data we share with them for any purpose other than providing us with the requested services and we only share with them the types of Personal Data that is needed for the provisions of the applicable services they provide us.

Marketing Partners – we may share Personal Data with marketing partners we engage with or use their tools and services to market and promote our website, including for targeted advertising campaigns, for example, social media operators. The Personal Data shared may include Online Identifiers and Usage Data (as defined under the “The Data Sets Collected, Purpose of Use and Lawful Basis” paragraph of this Privacy Notice above).  These marketing partners may combine your Personal Data with other data they collect independently from your visits and interactions on other websites where their tools are used or that they otherwise operate.

Our Affiliated Companies and Sharing in the Event of Corporate Transactions - we share Personal Data, internally within our company group to fulfil certain purposes for which Personal Data is collected and retained, and may further share Personal Data in the event of a corporate transaction (for example, sale of our assets or substantial part of our business, merger, consolidation, etc.). The types of Personal Data that will be shared can be any data processed by us, as needed. Our affiliated companies or acquiring company will assume the rights and obligations as described herein.

Sharing with Law Enforcement or Governmental Authorities & to Enforce our Rights or for Security and Fraud Prevention - we may disclose certain Personal Data to law enforcement, governmental agencies, or authorized third parties, to comply with applicable laws or in response to a verified request or order. We may further Personal Data to defend our rights, enforce our agreements or policies, to investigate or prevent potential violations thereof or any alleged illegal activity or any other activity that may expose us, you, or other users to legal liability, however Personal Data will be shared solely to the extent required. 

For the avoidance of doubt, we may transfer and disclose or otherwise use Non-Personal Data or information which is linked to anonymous random identifiers or information that is aggregated in a non-identifiable way, at its own discretion.

‍

Your Rights and Controls Related to Your Personal Data

Depending on your relationship with us, your jurisdiction and the applicable data protection laws that apply to your Personal Data, you have the right to control and request certain limitations or rights to be executed. 

The principal rights that may apply to your Personal Data (subject to your jurisdiction and additional conditions) may include:  

Right to Be Informed – you have the right to be provided with information regarding our privacy practices, including the Personal Data we collect and how we use it – as we detailed under this Privacy Notice. If you have any additional questions, you may contact us as set forth under this Privacy Notice. 

Right to Access/Inspect Your Personal Data – you have the right to ask us to confirm whether or not we collect your Personal Data and which Personal Data we specifically hold about you, and to ask for a copy of your Personal Data or otherwise access it.

Right to Correction/Rectification – you have the right to ask us to correct inaccuracies or update your Personal Data we hold or request deletion for inaccurate Personal Data, considering and subject to the nature and purposes of the processing.  

Right to Deletion/“To Be Forgotten” – you have the right to request the deletion of certain Personal Data we process, if specific conditions are satisfied, for example, if you think  we no longer need it for the purpose we collected it; where we have used it unlawfully; where the collection was based on your consent; or where we are subject to a legal obligation to delete  it.

 Right to Withdraw Consent – where applicable, you have the right to withdraw the consent you provided to our processing of Personal Data for a certain purpose, at any time.

Right to Opt-Out/Opt-Out of “Sale” – you have the right to opt-out from receiving our marketing communications, if applicable, by unsubscribing through the message received. You further have the right to opt out of the “sale” of Personal Data (i.e., to opt out of targeted advertising by us) as further explained under the “US Residents Notice” paragraph of this Privacy Notice below. We do not profile you in a manner that has a significant effect on you or other individuals, therefore we do not provide opt-out option from such use of Personal Data.

Right to Object– you have the right to object to any use of your Personal Data which is based on our legitimate interest if your fundamental rights and freedoms to data protection outweigh our interest.

Right to Restrict Processing– you have the right to ask us to restrict or limit the purpose for which we process your Personal Data, where certain conditions are satisfied.  

Portability Right – the right to request to be provided with a copy of your Personal Data in a portable format and, to the extent technically feasible, readily usable format that allows you to transmit the Personal Data.  

Right to Appeal or Lodge a Complaint – If we decline to take action on your request to exercise your rights, we will inform you within the timeframe under applicable law, and we will explain the justification for declining your request as well as how you may appeal, if applicable. Where applicable, we will inform you of action taken or not taken in response to your appeal, including the reasons for the decision. If the appeal is denied, you may submit a complaint to the applicable authority or Attorney General of your state.

Where the GDPR applies, you have the right to lodge a complaint with the applicable Data Protection Authority in the EU or the Information Commissioner in the UK.

You may submit a request to exercise most of your privacy rights under applicable privacy laws by contacting us at legal@airis-labs.com. We will respond and fulfill your request within the timeframe required under applicable laws.

When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.

For US residents - additional information regarding certain rights is provided under the “US Residents Notice” paragraph of this Privacy Notice below. 

Data Retention

We retain the Personal Data for as long as it is needed for the purposes for which it was collected, in accordance with applicable laws, or, where applicable, until a user expresses a preference to opt-out or delete its Personal Data. There are other circumstances in which we will retain your Personal Data for longer periods, as follows: we are required to retain the Personal Data in accordance with legal, regulatory, tax, or accounting requirements;  where we determine we need to retain records of your dealings with us in the event of any complaints or in the event we reasonably believe there is a prospect of litigation relating to your Personal Data. 

Without derogating from the above, except where we are required to retain Personal Data under applicable law, we may at our sole discretion, delete or amend and data, without notice, once we deem it is no longer needed.

Cross-Border Data Transfer & Data Security

We have implemented physical, technical, and organizational security measures that comply with applicable laws and industry standards intended to protect Personal Data from unauthorized access, alteration, disclosure or destruction. Note however that security incidents cannot always be prevented, and we will not be held responsible for unauthorized or unintended access beyond our control, and we make no warranty, express, implied, or otherwise, that we will always be able to prevent such unauthorized access or use. Please contact us at if you become aware of any attempt to gain unauthorized access to your Personal Data.

We may transfer, store or process your Personal Data in countries outside the country from which you accessed our website. We will take appropriate measures in accordance with applicable laws to ensure that your Personal Data receives an adequate level of data protection upon its transfer. 

‍

Children Privacy 

Our website and business operations are not intended for children, and we do not knowingly collect or maintain information about children. Please contact us at legal@airis-labs.com, if you have reason to believe that a child has shared any information with us. 

US Residents Notice

The below supplements the information contained in this Privacy Notice and applies to residents of certain US states (depending on the applicable state law, acting as an individual or in the household context only and not in a commercial or employment context, as a job applicant or as a beneficiary of someone acting in an employment context or as representative of a business), may have additional rights under applicable privacy laws and be entitled to additional disclosures. 

“Personal Data” under applicable US privacy laws, generally means information that is linked or reasonably linkable to an identified or identifiable individual (and usually does not include publicly available information that is lawfully made available from government records, or that a consumer has otherwise made available to the public; de-identified or aggregated consumer information; or information excluded from the states laws scope) “Sensitive Data” mainly includes data revealing racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life, sexual orientation, citizenship, or immigration status; the processing of genetic or biometric data for the purpose of uniquely identifying an individual; Personal Data collected from a known child; and precise geolocation data.

Categories of Personal Data & Categories of Third Parties with Whom Personal Data is Shared:

The “The Data Sets Collected, Purpose of Use and Lawful Basis” paragraph of this Privacy Notice describes our collection and processing of Personal Data, the categories of Personal Data collected, and the purposes for which Personal Data is collected, stored or used. We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without obtaining your consent, unless we are otherwise entitled, required or permitted under applicable laws. 

The “Disclosure of Personal Data” paragraph of this Privacy Notice describes the categories of third parties we share Personal Data with for a business purpose. 

“Sale” of Personal Data:

Under US privacy laws, in principle, the term “sale” is referring to disclosing or making available Personal Data to a third-party in exchange for monetary or other valuable consideration, including for targeted advertising purposes. We do not “sell” information as this term is commonly understood, meaning - we do not, and will not, disclose your Personal Data in direct exchange for money or some other form of payment. However, subject to the definition of the term “sale” under applicable US privacy laws, our practice of using cookies or other third-party analytics and advertising services and sharing Personal Data for such purpose is considered as a “sale”. 

Such practice includes the sharing of the following Personal Data categories: Identifiers (online identifiers such as IP and Cookie ID); Internet and electronic network activity information (such as your engagement with our website and ads) and; Geolocation data (derived from IP - country level).

Consumer Rights Related to their Personal Data:

Residents of certain U.S. states have the following rights under applicable privacy laws, subject to certain limitations:

• Access Right– the right to confirm whether we are processing their Personal Data and to obtain a copy of their Personal Data in a portable and, to the extent technically feasible, readily usable format.
• Deletion Right – the right to request us to delete their Personal Data provided to or obtained by us.
• Correction Right – the right to request us to correct inaccuracies in their Personal Data, taking into account the nature and purposes of the processing of the Personal Data.
• Opt-Out Right – the right to opt out of certain types of processing, including: to opt out of the “sale” of their Personal Data (as explained above); to opt out of targeted advertising by us; and to opt out of processing of Personal Data for purposes of making decisions that produce legal or similarly significant effects.

The “” paragraph of this Privacy Notice provides additional information regarding your rights.

Exercising Consumer Privacy Rights:

You may submit a request to exercise most of your privacy rights under U.S. state privacy laws by contacting us at legal@airis-labs.com. We will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.

Authorized agents may initiate a request on behalf of another individual, provided that such will be required to provide proof of their authorization, and we may also require that the individual directly verify his/her identity and the authority of the authorized agent.

We will respond to your request within the timeframe required under applicable law, and we reserve the right to extend the response time subject to applicable law requirements. If we refuse to take action on a request, we will notify you and include the justification for declining to take action, as well as instructions on how you may appeal. Within the timeframe under applicable law of our receipt of your appeal, we will inform you of any action taken or not taken in response to the appeal, including the reasons for the decisions. If the appeal is denied, you may submit a complaint to the applicable authority or Attorney General of your jurisdiction. 

‍

Privacy Policy Amendments 

The Company reserves the right to amend this Privacy Notice from time to time, at the Company’s sole discretion. The most recent version of this Privacy Notice will always be posted on our website, and the “Last Update” below reflects the last date of amendments. If these changes are material, and, where required by applicable law, we will provide a notice or obtain consent. Any amendments to the Privacy Notice will become effective immediately, unless we notify otherwise. We recommend to review this Privacy Notice periodically.

‍

Last Update: June 1, 2025