5. Your Content and Data Privacy
Ownership of Content: You retain all rights and ownership in the Content (including documents and data) that you or your users upload to LookDesk. We do not claim ownership over your Content. As between you and LookDesk, you own and are responsible for all Content you submit to the Services, including ensuring that you have all necessary rights to use and share such Content.
License to LookDesk: In order for us to operate the Services, you grant LookDesk a non-exclusive, worldwide, royalty-free license to host, store, transfer, process, and display your Content solely for the purpose of providing the Services and as otherwise permitted by our Privacy Policy. This includes the right to analyze and process your documents through our AI features to generate answers or insights for you. We will not use your Content for any purposes outside the scope of delivering and improving the Services without your consent.
User Responsibilities for Content: You are solely responsible for the Content you upload and the legality, reliability, and appropriateness of it. By uploading Content, you represent and warrant that: (a) you have obtained all necessary consents, licenses, or rights to upload the Content and to allow LookDesk to process it under these Terms; (b) the Content does not violate any laws or rights of any third party (for example, you will not upload documents containing personal data of individuals without authorization or in violation of privacy laws); and (c) the Content is free of viruses or malicious code. LookDesk is not responsible for any Content that you or other users provide, and we have no obligation to monitor the Content, though we reserve the right to remove or disable access to any Content that we deem violates these Terms or applicable law.
Privacy and Data Protection: LookDesk is committed to protecting your personal information and Content. We collect and process Personal Data in accordance with applicable data protection laws (such as the EU General Data Protection Regulation GDPR) and our Privacy Policy. By using the Services, you agree to our collection, use, and sharing of information as described in our Privacy Policy, which is hereby incorporated into these Terms. We implement appropriate technical and organizational measures to safeguard your personal data and Content from unauthorized access, loss, or alteration. However, you acknowledge that no method of transmission over the Internet or electronic storage is perfectly secure, and we cannot guarantee absolute security. Similarly, you understand that there is inherent risk in transmitting data online and agree to use the Services at your own risk.
Data Residency: By default, your Content may be stored on servers in the European Union or the United States. If you have specific data residency requirements, please contact us to discuss available options. We will not move your stored Content to a different region without informing you, except as needed to ensure service availability and performance (in compliance with data transfer laws).
Confidentiality: We consider your Content to be confidential to you. We will not disclose your Content to any third party except: (i) as needed to operate or support the Services (for example, using sub-processors under obligations of confidentiality – see below); (ii) if required by law or valid legal process (and in such case we will, where lawful, attempt to provide you notice); or (iii) if you expressly authorize us to do so.
Sub-processors: You acknowledge and agree that we may use trusted third-party service providers (sub-processors) to help us provide certain aspects of the Services (such as cloud infrastructure or AI processing). A list of our major sub-processors is available upon request or on our website (e.g., OpenAI as our AI model provider). We ensure via our agreements with sub-processors that they only access and use your data to provide services to us and under obligations of confidentiality and security. By using LookDesk, you consent to our use of sub-processors in this manner.
Data Processing Agreement: If you are a business customer subject to GDPR or similar laws and require a Data Processing Agreement (DPA) to be in place, we offer a DPA that reflects these Terms and our privacy commitments. Our DPA is available on request and, once executed by both parties, becomes part of this agreement. The DPA outlines how we process personal data on your behalf as a processor, including compliance with GDPR Art. 28 requirements.
User’s Personal Data Obligations: If you upload personal data to LookDesk, you act as the data controller for that data, and LookDesk is a data processor. You are responsible for ensuring that any personal data in your Content is collected and shared with LookDesk in compliance with privacy laws. For instance, you must have a legal basis (like consent or legitimate interest) to process and upload that data. If a data subject (individual) exercises their rights (e.g., deletion or access) with respect to content in our system, you should use the features provided (or contact us) to fulfill those requests. We will assist you with reasonable measures to comply with such obligations, as detailed in the DPA or Privacy Policy.
Retention and Deletion: We do not intend to keep your Content longer than necessary to provide the Services. During your subscription, you will have the ability to delete your documents or data; doing so will typically remove them from active systems immediately and from backups within a reasonable period, except to the extent required to be retained for legal reasons. Upon termination of your Account, we will handle your data as described in Section 11 (Termination).
Aggregate Data: We may aggregate or anonymize data derived from your use of the Services (so it cannot identify you or your users) for the purpose of analytics, improving our services, and benchmarking. Any such aggregated data will contain no personal data and no confidential information identifiable to you.
For more details on how we handle data, please review our Privacy Policy. In the event of any conflict between these Terms and the Privacy Policy regarding personal data, the Privacy Policy will prevail for issues specifically about data protection and privacy.