Privacy Policy

As the operators of the OSStars website, AltusAI Inc registered in Deleware, United States and having its registered office address at Suite B 2, 2035 Sunset Lake Road, Newark, 19702 ("We", "Us", “OSStars”) is committed to protecting and respecting your privacy. This Privacy and Cookies Policy ("Policy") relates to services provided through our website and application (“Services”) and sets out the basis on which the personal data collected from you, or that you provide to us will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purpose of, the General Data Protection Regulation (“GDPR”), from the GDPR implementation date or, until GDPR implementation date, the Data Protection Act 1998 (collectively the “Data Protection Laws”):

• in respect of the personal data of users of the Website and the Services and business contacts and prospects of OSStars, the Data Controller is AltusAI Inc;
• In respect of the personal data of contributors who apply for, or who a Customer of OSStars contacts in respect of, an Opening (as the term is described in OSStars’s Terms) (“contributors”) OSStars shall process personal information as a data processor on behalf of its Customers, who use Our Services to assist with their recruitment processes . Where you apply for a role with one of OSStars’s Customers, our Customer’s privacy policy, rather than this Privacy Policy, will apply to our processing of your personal information.

Information we collect from you

we collect and process some or all of the following types of information from you:

• Information that you provide by filling in forms on the osstars.com website (“Website”). This includes information provided at the time of registering to use the Website, subscribing to our Services, posting material or requesting further information or services. We may also ask you for information when you report a problem with the Website.
• If you contact us, we may keep a record of that correspondence.
• We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
• Details of all actions that you carry out through the Website and of the provision of services to you.
• Details of your visits to the Website including, but not limited to, traffic data, location data, weblogs and other communication data, the site that referred you to our site and the resources that you access.

The provision of your full name and e-mail address, your employer and/or your place of work and the url of the business that you work for is required from you when you register to use our Services we will inform you at the point of collecting information from you, whether you are required to provide the information to us.

Information we collect from other sources

From time to time we also obtain personal data from other sources as follows:

• names and contact details of Customer personnel who will be added as account members for the Customer’s account, may be added by existing account members;
• names and contact details of individual contacts at prospective Customers from third party data providers and/or public sources, such as social networks, company websites and other online sources.

Linkedin Account Authentication

You may connect your Linkedin account to your OSStars account in order to make use of certain OSStars features such as Contacts Imports and Syncing Linkedin Profile Information. This is done through OAuth authentication, a secure mechanism which gives OSStars access to your Linkedin account data without letting OSStars know your password.

In that case, OSStars will require access to your Linkedin account and user data for the following purposes:

• Upon sign-up or sign-in (“Sign in with Linkedin”) and connect with Linkedin through your Personal Profile:
  • To verify your email address and to create your user account on our servers;
  • To access and read your Linkedin account profile information to retrieve, use, and display your Linkedin account name, first name, last name and account photo or image in OSStars;

Facebook Account Authentication

You may connect your Facebook account to your OSStars account in order to make use of certain OSStars features such as Contacts Imports and Syncing Facebook Profile Information. This is done through OAuth authentication, a secure mechanism which gives OSStars access to your Facebook account data without letting OSStars know your password.

In that case, OSStars will require access to your Facebook account and user data for the following purposes:

• Upon sign-up or sign-in (“Sign in with Facebook) and connect with Facebook through your Personal Profile:
  • To verify your email address and to create your user account on our servers;
  • To access and read your Facebook account profile information to retrieve, use, and display your Facebook account name, first name, last name and account photo or image in OSStars;

GitHub Account Authentication

You may connect your GitHub account to your OSStars account in order to make use of certain OSStars features such as Projects and Syncing GitHub Profile Information. This is done through OAuth authentication, a secure mechanism which gives OSStars access to your GitHub account data without letting OSStars know your password.

In that case, OSStars will require access to your GitHub account and user data for the following purposes:

• Upon sign-up or sign-in (“Sign in with GitHub") and connect with GitHub through your Personal Profile:
  • To verify your email address and to create your user account on our servers;
  • To access and read your GitHub account profile information to retrieve, use, and display your GitHub account name, first name, last name and account photo or image in OSStars;

Microsoft Account Authentication

You may connect your Microsoft, Outlook, Live or Office 365 account to your OSStars account in order to make use of certain OSStars features such as Contacts Imports and Syncing Microsoft Profile Information. This is done through OAuth authentication, a secure mechanism which gives OSStars access to your Microsoft account data without letting OSStars know your password.

In that case, OSStars will require access to your Microsoft account and user data for the following purposes:

• Upon sign-up or sign-in (“Sign in with Microsoft) and connect with Microsoft through your Personal Profile:
  • To verify your email address and to create your user account on our servers;
  • To access and read your Microsoft account profile information to retrieve, use, and display your Microsoft account name, first name, last name and account photo or image in OSStars;

Google Account Authentication

You may connect your Google account to your OSStars account in order to make use of certain OSStars features such as Gmail Import and Syncing and scheduling with Google Calendar. This is done through OAuth authentication, a secure mechanism which gives OSStars access to your Google account data without letting OSStars know your password.

In that case, OSStars will require access to your Google account and user data for the following purposes:

• Upon sign-up or sign-in (“Sign in with Google”) and connect with Google through your Personal Profile:
  • To verify your email address and to create your user account on our servers in order to link your Google account with OSStars;
  • To access and read your Google account profile information to retrieve, use, and display your Google account name, first name, last name and account photo or image in OSStars;
• If you choose to connect your Gmail account to your OSStars account:
  • To access your Gmail account in order to send email messages to contributors from your account through OSStars.
  • To access and retrieve your email messages
    • to manually import email messages sent to and received from a specific candidate
    • to sync email messages, sent to and received from contributors, that belong to threads that were initially sent with OSStars or manually imported
    • to mark your inbox items related with email messages as read, unread, archived and unarchived
    • to read, display, retrieve, and download any files attached to your email messages related with contributors
• If you choose to connect your Google Calendar account to your OSStars account:
  • To access your Google Calendar account in order to schedule events from your Google Calendar account through OSStars
  • To access and read your Google Calendar and calendar entries
    • to display the calendar entries of your calendar and calendars of other Google users you have the permission to read
    • to check availability of other event attendees and resources (e.g. meeting rooms)
    • to sync the attendance status of other attendees in OSStars
    • to sync event updates made externally via Google Calendar in OSStars
  • To access and read your Google Contacts in order to suggest email recipients when you compose email messages or events through OSStars
  • To access and read your Google Suite resources in order to suggest meeting rooms when you schedule events through OSStars

Uses made of your information when you request assistance from OSStars Support

If you request assistance by a representative of OSStars, the OSStars representative may obtain access to your OSStars account for the purposes of resolving your inquiry. Under those circumstances, the OSStars representative will assume your role in OSStars and view your account as you would when you log in.

OSStars reserves the right to assume the role of a user in your account without prior notice in certain situations, for example when it is necessary for security purposes (such as investigating a bug or abuse) or when it is necessary to comply with applicable law.

Uses made of your information

Where you are using our Services on behalf of our Customer, we rely on legitimate interests in performing our contract with our Customer as the lawful basis on which we collect and use your personal data.

We use information held about you in the following ways:

• To ensure that content from the Website is presented in the most effective manner for you and for your computer.
• To provide you with information, products or services that you request from us or which we feel may interest you or our Customer.
• To carry out our obligations arising from any contracts entered into between our Customer (on whose behalf you are using the Services) and us.
• To notify you about changes to our Services and provide you with information that is relevant to your use of the Services.
• Where you or your employer are a prospective Customer, to provide you with information about our Services for marketing purposes.

Disclosure of your information

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006 (where applicable). Where any such member of our group is outside the EU this transfer will be on the basis of a contract including the Model Contractual Clauses in accordance with the Data Protection Laws.

We may disclose your personal information to third parties:

• in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
• if we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or in order to enforce or apply our Website Terms and Conditions and other agreements, but we will endeavour to minimise such disclosure to only that reasonably necessary and, where possible, to provide you with notice of such disclosure; and/or
• to protect the rights, property, or safety of AltusAI Inc, the Website, our users and any third party we interact with to provide the Website.

How we store your personal data

Security

We take appropriate measures to ensure that all personal data is kept secure including security measures to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way, for the duration of your use of our Services. we limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Website, therefore any transmission remains at your own risk. Once we have received your information, we will use strict procedures and security features in order to prevent unauthorised access.

Keeping your personal data up to date

If your personal details change you may update them by accessing the relevant page of the Website, or by contacting us using the contact details below.

We will endeavour to update your personal data within thirty (30) days of any new or updated personal data being provided to us, in order to ensure that the personal data We hold about you is as accurate and up to date as possible.

Where we store your personal data

The data that we collect from you and process as a result of your use of the Services may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your orders, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.

In particular, your data may be accessible to i) OSStars’s staff in the USA or ii) may be stored by OSStars’s hosting service provider on servers in the USA as well as in the EU. The USA does not have the same data protection laws as the United Kingdom and EEA. A Data Processor Agreement has been signed between AltusAI Inc and their overseas group companies, and between AltusAI Inc and each of its data processors. These Data Processor Agreements that are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal data. A full list of OSStars's sub-processors can be found here.

If you would like further information please contact us (see ‘Contact’ below). We will not otherwise transfer your personal data outside of the United Kingdom OR EEA or to any organisation (or subordinate bodies) governed by public international law or which is set up under any agreement between two or more countries.

How long we keep your personal data

We will hold all the data for so long as we have an obligation to the Customer to provide the Services, and thereafter until such time as we delete the Customer’s account in accordance with our Customer Terms and Conditions.

Your personal information will be deleted on one of the following occurrences:

• deletion of your personal information by you (or by another person engaged by the Customer); or
• receipt of a written request by you (or another person engaged by the Customer) to us.

Your rights

Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:

• access to your personal data and to certain other supplementary information that this Policy is already designed to address
• require us to correct any mistakes in your information which we hold
• require the erasure of personal data concerning you in certain situations
• receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
• object at any time to processing of personal data concerning you for direct marketing
• object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
• object in certain other situations to our continued processing of your personal data
• otherwise restrict our processing of your personal data in certain circumstances
• claim compensation for damages caused by our breach of any data protection laws.

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.

If you would like to exercise any of those rights, please:

• contact us using our Contact details below
• let us have enough information to identify you,
• let us have proof of your identity and address. Where you are a user of our Services you should email us from the email address that you used to register with OSStars. Receipt of an email from this address will usually be sufficient to confirm your identity. In all other cases we may request one or more identification documents, such as a copy of your driving licence or passport and a recent utility or credit card bill; and
• let us know the information to which your request relates.

Third Party Websites

The Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and terms of use and that we do not accept any responsibility or liability for these policies and terms of use. Please check these policies before you submit any personal data to these websites.

How to complain

We hope that we can resolve any query or concern you raise about our use of your information.

The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/ or telephone: 0303 123 1113.

Changes to our privacy policy

We reserve the right to modify this Privacy Policy at any time. Any changes we may make to our Policy in the future will be notified and made available to you using the Website. Your continued use of the Services and the Website shall be deemed your acceptance of the varied Privacy Policy.

IP Addresses and cookies

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration, customer support and to collect aggregate information for internal reporting purposes.

In addition, our Website uses cookies. A cookie is a small file of letters and numbers that we put on your computer if you select to agree at the banner that is displayed to you during the first time you visit our website. You may accept or decline being tracked by indicating your preference to this banner. You may update your cookie preferences at any time by clearing your browser cookies. These cookies allow us to distinguish you from other users of the Website, which helps us to provide you with a good experience when you browse our Website and also allows us to improve the Website.

The cookies we use are "analytical" cookies. Some of the common uses for our cookies are as follows:

• to recognise and count the number of visitors and to see how visitors move around the site when they are using it. This helps us to improve the way our Website works, for example by ensuring that users are finding what they are looking for easily.
• to identify and authenticate a user across different pages of our Website, within our own Website, in a session or across different sessions. This is so that the user does not need to provide a password on every page the user visits; and
• to be able to retrieve a user’s previously stored data, for example, information that the user previously submitted to the Website, so as to facilitate reuse of this information by the user.

Contact

All questions, comments and requests regarding this Privacy Policy should be addressed to [email protected].