ModelBench Privacy

This Privacy Notice explains how InSiSo Technologies Pvt. Ltd. ("InSiSo", "we") handles personal data when you use InSiSo ModelBench: the hosted service at modelbench.insisotech.com ("ModelBench Cloud") and the installed software ("ModelBench Desktop"). Our website is covered by the separate Privacy Policy. This Notice is part of the ModelBench Terms of Service. Version 1.0.

• Account data (who you are and how you use your account): we decide how it is used, so we are responsible for it (a "controller" or "data fiduciary").
• Customer Content (the images, point clouds and annotations your Organisation uploads): we process it only on your Organisation's behalf and instructions, to provide the Service (a "processor"). Your Organisation decides what to upload and is responsible for its lawfulness. Questions about personal data in Customer Content, for example a person visible in an image, should go to your Organisation first; we will help it respond.

• Account data: username, email address, password (stored only as a one-way hash), role, Organisation, the dates you were invited, signed up, confirmed your email and last signed in, and the version of the Terms you agreed to and when.
• Security and audit records: an audit log of account and administration actions (for example invitations, sign-ups, role changes and agreement to the Terms) with the time and the network address the request came from; sign-in attempts are counted briefly in memory to slow down password guessing.
• Customer Content and Customer Models: what your Organisation uploads and creates, and the models trained from it.
• Usage and billing records: training and export jobs, Credits used, and your Organisation's Edition, trial and seats.
• Communications: emails you exchange with us, for example support requests.

We do not use advertising or analytics cookies or tracking tools in ModelBench. The web app stores in your browser only what it needs to work: your sign-in session and interface preferences such as the colour theme.

ModelBench Desktop runs entirely on your computer. Your images, annotations, models and accounts stay in a local folder and database on that computer, and the application does not send them to InSiSo. Licence activation is handled locally on the machine. If you send us files for support, we handle them as described in this Notice.

• To provide the Service under our contract with your Organisation: creating and securing accounts, sending invitations, confirmations and password resets, running training and other operations, and providing support.
• To keep the Service secure and prevent abuse, and to keep records of agreements and administrative actions: our legitimate interests, and where applicable legal obligations.
• To manage billing, Credits and trials: our contract with your Organisation.
• To tell you about important changes to the Service or these documents.

We do not sell personal data, use it for advertising, or use Customer Content to train models for anyone else.

ModelBench Cloud runs on Amazon Web Services in the Asia Pacific (Mumbai) region, India: the application servers and database, the storage for images, models and exports, and backups. We use these service providers, bound by contract to protect the data and use it only to provide their services to us:

• Amazon Web Services (hosting, storage, backups and email delivery through Amazon SES), Mumbai region, India;
• Google Workspace (our email, including support correspondence).

We will update this list before adding a provider that processes Customer Content. Organisations established in the European Economic Area, the United Kingdom or Switzerland can request a Data Processing Agreement, including appropriate safeguards for transfer of data to India, at contact@insisotech.com.

• Account data: while the account exists; after an account is removed, for up to 12 months, then deleted or anonymised, unless longer retention is required by law.
• Customer Content and Customer Models: as long as your Organisation keeps them in the Service; after access ends, as described in the Terms (30 days for export, then deleted from the live Service within 60 days; backups are overwritten in the normal cycle).
• Audit records, including agreement to the Terms: as long as the Organisation's account exists and afterwards as long as needed to establish or defend legal claims.
• Database backups: up to 14 days on the server and for a limited period in backup storage.

We protect data with encryption in transit (HTTPS), access controls that keep each Organisation's data separate from every other's, hashed passwords, limits on sign-in attempts, an audit log, private storage that is not publicly accessible, and regular backups. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify your Organisation and the authorities as required by law.

Subject to the Digital Personal Data Protection Act, 2023 and, where it applies, the EU or UK GDPR, you may ask to access, correct or delete your personal data, to restrict or object to its use, to receive a copy, or to nominate someone to exercise your rights. You can update some account details yourself, and your Organisation's administrators can manage accounts. For anything else, contact our Grievance Officer below; we will respond within the time the law requires. You may also complain to the Data Protection Board of India or, in the EEA or UK, to your data protection authority.

ModelBench is a business service and is not intended for anyone under 18. We do not knowingly collect their personal data.

We may update this Notice. Each version carries a version number and date, and we will tell you of material changes in advance by email or in the Service.

Grievance Officer, InSiSo Technologies Pvt. Ltd., WeWork Latitude, 10th Floor, RMZ Latitude Commercial, Hebbal Kempapura, Bangalore North, Bangalore - 560024, Karnataka, India. Email: contact@insisotech.com.