General Information

Privacy Policy

Last Updated: November 28th, 2023

Mizou Privacy Policy
Modified: November 28th, 2023

Definitions

These definitions are applicable to this Privacy Policy:

"AI" refers to artificial intelligence technology.

"Affiliate" refers to any entity that directly or indirectly has control, is controlled by, or is under common control with another entity.

"App" denotes Mizou's software and mobile applications.

"CCPA" stands for the California Consumer Privacy Act of 2018.

"Child" or "Children" refers to individuals under age 13 in the U.S. and under age 16 in other countries.

"Control" signifies an ownership, voting, or similar interest that represents fifty percent (50%) or more of the total interests of the entity in question. "Controlled" is to be interpreted in this context.

"EEA" refers to the European Economic Area.

"EU" indicates the European Union.

"Mizou" represents our organization, operating under the name Mizou, located at our specified address.

"Personal Information" is any data that can identify or be used to indirectly or directly identify a person. This includes names, birth dates, email addresses, gender, occupation, and other demographic details.

"Privacy Policy" pertains to Mizou's privacy policy as outlined in this document.

"School Services" are the products offered by Mizou to schools and teachers, including educational tools and applications.

"Services" encompasses all services offered by Mizou, including software available on our platform.

"Service Usage Data" is the information automatically collected through your use of our Services, as detailed in the "Personal Information we process" section.

"Student Data" is the Personal Information Mizou processes on behalf of schools or teachers for students, as authorized for providing School Services.

"Third Country" is any country outside the EU/EEA.

"Third Party Applications" are external websites and services integrated with our Services to offer features, content, products, or services.

"User", "you", and "your" refer to any individual or entity utilizing our Services.

"Visitor" describes anyone who visits Mizou's websites or offices, or engages with us in events, marketing, or recruitment activities.

1. The Basics

About this Privacy Policy
Mizou is dedicated to protecting the privacy and security of our users and to being transparent about how we handle your information. This Privacy Policy details how we process your Personal Information and your privacy rights.

Mizou's services enable users to create, upload content, interact with AI-powered Chatbots, and invite others to join. Mizou acts as a data processor for user content Personal Information and for Personal Information that we collect and process on the platform. This Privacy Policy does not cover such processing.

Our Service, tailored for Educators and Educational Institutions, complies with federal student privacy laws like FERPA, COPPA and GPDR.

Note that other privacy policies may apply in certain interactions. For details on Mizou's processing of Student Data, refer to our Student Privacy Policy. For information on our collection of data from Children, see below.

About Us

Mizou is an AI educational technology, offering a learning platform to the global educational technology market. We focus on developing engaging AI learning tools for schools, the educational sector, and personal users. The Mizou platform empowers users to realize their full potential through learning. More details about our services and usage can be found on our website.

Data Controller Contact Information:

Mizou SAS, a company with a share capital 1000 €, registered with Paris Trade and Companies Register under number 914172408 shall be the Data Controller of your Personal Data.

You can contact or send your question to the Data Controller by sending email to hello@mizou.com or written notice to 4 avenue Laurent Cély 92600 Asnières-sur-Seine France.

Supervisory Authority:

The French data protection authority (the Commission nationale de l'informatique et des libertés, 'CNIL') shall be the Supervisory Authority subject to Processing of Personal Data by Mizou. CNIL can be contacted:

By sending notice to 3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07 FRANCE
By calling on +33 (0)1 53 73 22 13
By writing at at presse[@]cnil.fr

2. Personal Information We Process

The Personal Information we process varies with your interactions with Mizou, account settings, the products, and features you use, your location, and applicable law. The information we collect generally falls into these categories:

Information you provide: This includes your name, email, mailing address, telephone number, job title, account login credentials, account holder details (like location, interests, picture, organization, position, age, and C interactions), troubleshooting and support data, and payment information.
Information we collect automatically: This may include browser/device information, usage data, log data, cookies, and pixel tags. This information is considered Personal Information in some countries.
User-generated Content: We collect different text, audio, image input such as the questions you ask, the AI's answers, the AI-suggested grading, and your feedback.
Information from student : Refer to our Student Privacy Policy
Information from other sources: Occasionally, we collect Personal Information about you from third parties, like our Partners, integrations, or others, where you've given them permission to share your information with us.

3. Use of Personal Information

We use your Personal Information for various purposes, including :

Providing and Improving our Services: This involves utilizing your Personal Information to deliver and enhance the functionality of our Services. For example, we use your information to enable access to your account, respond to your queries, and facilitate your use of various features of our Services. This might include notifications about updates, new features, or changes to our Services that are relevant to you. Our aim in these activities is to maintain and support our contractual relationship with you, as well as to fulfill any legal obligations. By continually improving our Services, we ensure they remain efficient, user-friendly, and secure, thereby enhancing your overall experience with us.
Enable You to Use Certain Features: This aspect of our service involves using your Personal Information to activate specific functionalities within our platform. For instance, your information may enable you to personalize your user experience, access exclusive features, or set preferences within our Services. This could include creating a tailored dashboard, using advanced search options, or setting up notifications and alerts based on your interests and usage patterns. Our objective in utilizing your information for these purposes is to enhance your interaction with our Services, making them more intuitive and responsive to your individual needs.

Communicating with You: This involves using your Personal Information to stay in touch with you regarding our Services. We may communicate updates, service notifications, security alerts, or changes in our policies to keep you informed. This also includes responding to your inquiries, providing customer support, and sending you information that may be of interest, such as new features, tips, or promotional offers. Our aim in these communications is to ensure you are fully informed about our Services, and to provide assistance as needed. We strive to make our communications as relevant and useful to you as possible, enhancing your overall experience with our platform. This ongoing dialogue is essential for maintaining a transparent and supportive relationship with you, our valued user.
Supporting and Optimizing the Service: This involves using your Personal Information to enhance and streamline the functionality of our Services. We focus on providing support whenever you encounter issues or have questions, ensuring a smooth and efficient user experience. Optimization includes analyzing service usage patterns to identify areas for improvement, making necessary adjustments to improve speed, reliability, and overall performance. This also involves updating and maintaining our infrastructure to ensure it meets current standards and user expectations. Our aim in these activities is to provide a seamless, efficient, and continuously improving service experience, tailored to meet your needs and preferences. By supporting and optimizing our Services, we ensure they remain effective, user-friendly, and up-to-date, thereby enhancing your satisfaction and engagement with our platform.

Purchase and Payment: This aspect of our service involves using your Personal Information to facilitate and manage transactions and payments for our Services. When you make a purchase or subscribe to our services, we process your payment information, such as credit card details, to complete the transaction. This includes sending invoices, processing payments, and providing payment confirmations. We ensure secure processing of your financial information, adhering to industry standards and compliance regulations. Our goal in these activities is to make the purchasing and payment process as smooth and secure as possible, ensuring transparency and reliability in every transaction. We strive to provide a hassle-free payment experience, allowing you to access and enjoy our Services with ease and confidence.

Prevent Abuse and Misuse of the Service: We use your Personal Information as part of our efforts to prevent the abuse and misuse of our Services. This includes monitoring for suspicious or unauthorized activities, enforcing our terms of service, and taking necessary actions to protect our platform and users. By identifying and addressing potential security threats, we maintain a safe and trustworthy service environment. Our commitment in these activities is to safeguard the integrity of our Services and the privacy and security of our users' information. We continuously work to detect and prevent any actions that could compromise the quality, performance, or safety of our Services, ensuring a secure and reliable experience for all users.
Complying with Legal Obligations: We utilize your Personal Information to ensure compliance with legal and regulatory requirements. This involves adhering to laws, court orders, and legal processes that apply to our Services. We may need to use your information for reporting purposes, to respond to lawful requests from authorities, or to fulfill compliance obligations in various jurisdictions. Our commitment in this area is to operate within the legal framework, ensuring that both our services and your use of them meet all relevant legal standards. This helps protect both our platform and our users from legal risks and contributes to a responsible and legally compliant service environment.

Personalizing the Service: We utilize your Personal Information to tailor and enhance your experience with our Services. This personalization process involves adapting the features, content, and interface of our Services based on your preferences, usage patterns, and interactions. For example, we may customize the layout, recommend specific functionalities, or suggest content that aligns with your interests. Our objective is to make our Services more relevant, engaging, and useful to you, providing a unique and individualized experience. By personalizing our Services, we aim to not only meet but exceed your expectations, creating a more enjoyable and intuitive user journey.

Data Analytics: We use your Personal Information for data analytics purposes to understand and improve our Services. This involves analyzing user behavior, preferences, and trends to gain insights that guide our decision-making and strategy. By examining this data, we can enhance service features, develop new products, and customize user experiences. Our analytics help in optimizing functionality, predicting user needs, and identifying areas for innovation. Our goal is to use these insights to better serve you and enhance the overall effectiveness and efficiency of our Services.

Marketing: We utilize your Personal Information to deliver marketing communications, product suggestions, and other non-transactional messages, such as emails, telemarketing calls, SMS, or push notifications, tailored to your marketing preferences and in line with this Privacy Policy. Additionally, we may process your email address, upon your consent, to verify if a multi-user account for your organization (like your employer) is available or can be set up. In such cases, we might contact you to discuss options for accessing your organization's account under your user profile. With your permission for this process, we may inform your organization of your interest in accessing their account by sharing your email domain name with them. We will not send you unsolicited or third party marketing.

Aggregated and Anonymized Data: We use aggregated and anonymized data, which doesn't identify you personally, for improving our Services, identifying trends, and market research. This helps in making informed decisions to enhance user experience without compromising individual privacy.
We do not sell Personal Information and we do not share Personal Information with third parties for marketing purposes. For purposes of the CCPA means the disclosure of Personal Information for monetary or other valuable consideration but does not include, for example, the transfer of Personal Information as an asset that is part of a merger, bankruptcy, or other disposition of all or any portion of our business.

4. Third-Party Applications and Websites

Mizou may utilize the Personal Information collected or received via the Service, in our role as a processor and as described in this Privacy Policy, to facilitate your use of integrations and plugins with your account. For example, connecting a Google integration to your account would require your permission for us to access your Google Sheets, Google Contacts, and Google Drive, enabling us to tailor the integration to your preferences.

We use OpenAI's API to enhance our Services with AI capabilities. Our use of OpenAI's API complies with data protection laws. Notably, we have chosen not to share user data with OpenAI for model training. OpenAI will not utilize data from our API for improving their models. Data shared via the API is kept for a maximum of 30 days for monitoring purposes, then deleted, unless legal requirements dictate otherwise

We also collaborate with third-party entities offering content, products, or services, like YouTube's API for videos. Using these Third-Party Applications is optional, and they have their own privacy policies that apply when you opt to use them. For instance, YouTube's privacy notice can be found on their website.

Although these Third-Party Applications might collect your Personal Information, we do not share your Personal Information with them.

Our Services and Websites incorporate social media functionalities, such as plugins for Twitter, LinkedIn, Instagram, TikTok, and Facebook. Interactions with these features are subject to the privacy policies of the respective companies.

Moreover, our Websites contain links to external sites with privacy practices that may differ from ours. If you provide Personal Information to these sites, their privacy policies govern your information. We advise reading the privacy policy of any website you visit carefully.

5. Your Data Protection Rights

Understanding Your Rights: Your data protection rights vary depending on your location, but generally include the ability to access, correct, update, transfer, delete, restrict, or object to the processing of your Personal Information.
Complaints: You're entitled to file a complaint with your local data protection authority about our handling of your Personal Information. For information on contacting authorities in the EEA, UK, and Switzerland, please refer here.
Withdrawal of Consent: If we've collected or processed your Personal Information based on consent (like for marketing emails), you can withdraw this consent at any time. This withdrawal won't affect the lawfulness of processing before the withdrawal, nor processing based on other lawful grounds.
Support for School Customers: We assist our school clients in providing access to Personal Information for parents and eligible students and in addressing their data-related requests. Further details on processing children's Personal Data are mentioned in the relevant section.
Limitations and Exceptions: Be aware that these rights may have exceptions or limitations. For instance, we can't disclose Personal Information if it breaches confidentiality obligations or legal retention requirements. We'll handle your data protection rights requests in compliance with applicable laws.

Exercising Your Rights

If you wish to exercise your data protection rights under relevant laws, please reach out to us at hello@mizou.com. We are committed to responding to all such requests in line with applicable data protection legislation. For efficient processing, we might need to verify your identity.

You have the ability to adjust your account and profile settings directly in your account. This includes updating contact information, payment details, and preferences. Alternatively, for any specific requests or queries, you can contact us through our Support Contact Form.

6. Sharing Your Personal Information

We do not share Personal Information with third parties, except in the limited following scenarios:

Affiliates: Your Personal Information may be shared within the Mizou Group for legitimate business purposes or to deliver services, potentially involving multiple Group Companies.

Service Providers: We share Personal Information with trusted service providers who perform tasks for us, such as web hosting, technical support, payment processing, analytics, and content delivery. This sharing is solely for executing tasks on our behalf, as outlined in this Privacy Policy.

Social Media Partners: Mizou collaborates with social media platforms to promote our Services on both our and third-party websites. However, we do not share information about children in the contexts described in this section.

Public Institutions: We may disclose Personal Information to law enforcement, regulatory bodies, government agencies, courts, or other third parties when necessary for compliance with the law, to protect legal rights, or to safeguard the interests of you or others.

Business Transfers: In events like a sale, merger, or acquisition, we may share Personal Information with potential buyers and their advisors. Any acquirer would be bound by this Privacy Policy, including your rights concerning your Personal Information.

With Your Consent: Any other person with your consent.

Notably, Mizou does not sell Personal Information nor share or sell student data for marketing purposes.

We may share anonymized, aggregated data with select third parties for statistical analysis.

Mizou ensures that service providers handling your Personal Information adhere to data protection and security standards comparable to our own. These providers are contractually bound to use the information solely for the intended services and to maintain privacy and security at levels consistent with our policies.

7. Our Security

Mizou implements a robust security program to safeguard the security, privacy, confidentiality, and integrity of Personal Information within our organization. We deploy suitable technical and organizational measures to protect against loss, misuse, unauthorized access, disclosure, alteration, and destruction of Personal Information. This takes into consideration the processing risks and the nature of the data. Our security protocols include data encryption, firewalls, restricted data use and access for our staff and service providers, and secure physical access to our facilities. Additionally, our service providers handling payment data adhere to the required Payment Card Industry (PCI) compliance standards.

Should you have any inquiries regarding the security of your Personal Information, feel free to reach out to us at hello@mizou.com.

8. International Transfers

Mizou collects information on a global scale and may transfer, process, and store your data outside your country of residence, wherever our or our third-party service providers' operations are located, to deliver the Services. This can include countries with different data protection and privacy laws, potentially less stringent than those in your country. We implement protective measures to safeguard your Personal Information during these transfers.

For all international transfers, either within the Mizou Group or to our subprocessors, we ensure that your Personal Information receives an adequate level of protection through appropriate agreements. International transfers to countries outside the European Economic Area are based on legal frameworks recognized by the European Commission, such as adequacy decisions or standard contractual clauses (SCCs).

Mizou maintains rigorous organizational and technical measures to protect the Personal Information stored with us and our trusted third parties. We restrict access to Personal Information to those employees who need it to provide Services to you, using measures like login credentials and multi-factor authentication.

For more detailed information about our practices regarding international data transfers and the security measures we employ, please contact us at hello@mizou.com.

9. Retention of Personal Information

Mizou only retains Personal Information for as long as it is necessary for the purposes it was collected for. We hold onto Personal Information if there is a continuing legitimate business need or a legal requirement to do so. The retention period for data varies, based on several criteria:

Legal or contractual obligations to keep the data.
Necessity of the data in providing our Service.
Users' ability to access and delete their data within their Mizou accounts.
User expectations regarding data retention until they choose to remove it or until their Mizou accounts are closed or terminated.

Once there is no longer a legitimate business reason to process your Personal Information, we will promptly delete or anonymize it, in line with relevant laws.

10. Specific States: California, Colorado, Connecticut, Utah, and Virginia

This section enhances our Privacy Policy with additional information specific to consumers in California, Colorado, Connecticut, Utah, and Virginia, covering our practices around collecting, using, and disclosing Personal Information.

In the chart below, we outline the types of Personal Information we have collected and processed, as well as the categories disclosed to third parties for operational business needs, covering the 12 months prior to the latest update of this Privacy Policy.

Categories of Personal Information	Disclosed to Which Categories of Third Parties for Operational Business Purposes	Processing Purposes *(See Section 3, “Use of Personal Information,” above, for a detailed description of each Processing Purpose)*
Identifiers, such as: Contact information: name, mailing address, email address, and telephone number of account holders Identifiers: IP address that can reasonably be linked or associated with a particular device; account name; and cookies used solely to operate the Services, analyze their use, and for other non-marketing internal purposes.	Affiliates; service providers; social media providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Provide the Services Enable you to use certain features Communicate with you Support and improve the Service Purchase and payment Prevent abuse and misuse of the Service Comply with legal obligations Optimization of the Service Data analytics Marketing (using only email address) Allow you to participate in sweepstakes, contests and similar promotions Aggregated and anonymized data
Personal information as defined in the California customer records law, such as Contact Information: name, mailing address, email address, and telephone number of account holders Payment information (collected only by our payment processors and not by us)	Affiliates; service providers; social media providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Provide the Services Enable you to use certain features Communicate with you Support and improve the Service Purchase and payment Prevent abuse and misuse of the Service Comply with legal obligations Optimization of the Service Data analytics Marketing (using only email address) Allow you to participate in sweepstakes, contests and similar promotions Aggregated and anonymized data
Protected class information under California or federal law, such as age	Affiliates; service providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Provide the Services Enable you to use certain features Support and improve the Service Purchase and payment Prevent abuse and misuse of the Service Comply with legal obligations Optimization of the Service Data analytics Marketing (using only email address) Allow you to participate in sweepstakes, contests and similar promotions Aggregated and anonymized data
Commercial information, such as transaction information and purchase history for account holders	Affiliates; service providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Provide the Services Enable you to use certain features Communicate with you Support and improve the Service Purchase and payment Prevent abuse and misuse of the Service Comply with legal obligations Optimization of the Service Data analytics Marketing (using only email address) Allow you to participate in sweepstakes, contests and similar promotions Aggregated and anonymized data
Internet or network activity information, such as browsing history, search history, and interactions with our online properties	Affiliates; service providers; social media providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Provide the Services Enable you to use certain features Communicate with you Support and improve the Service Purchase and payment Prevent abuse and misuse of the Service Comply with legal obligations Optimization of the Service Data analytics Marketing (using only email address) Allow you to participate in sweepstakes, contests and similar promotions Aggregated and anonymized data
Geolocation data at a city-level only, derived from your IP address	Affiliates; service providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Provide the Services Enable you to use certain features Communicate with you Support and improve the Service Purchase and payment Prevent abuse and misuse of the Service Comply with legal obligations Optimization of the Service Data analytics Marketing (using only email address) Allow you to participate in sweepstakes, contests and similar promotions Aggregated and anonymized data
Audio, electronic, visual, and similar information that you choose to upload, such as photographs	Affiliates; service providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Provide the Services Support and improve the Service Prevent abuse and misuse of the Service Comply with legal obligations Optimization of the Service Data analytics Aggregated and anonymized data
Employment information, such as your current employer, business contact information, and job title	Affiliates; service providers; social media providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Provide the Services Enable you to use certain features Communicate with you Support and improve the Service Purchase and payment Prevent abuse and misuse of the Service Comply with legal obligations Optimization of the Service Data analytics Marketing (using only email address) Allow you to participate in sweepstakes, contests and similar promotions Aggregated and anonymized data
Sensitive Personal Information Mizou account credentials Personal Information collected from a known child. With respect to children under age 13, the Personal Information we collect is limited to an email address, which we immediately and permanently hash so that it can be used only as a password reminder (and not to contact the child).	Affiliates; service providers; public institutions, including law enforcement, government authorities and other regulatory bodies; potential buyers; other third parties with your express consent	Please see the section below, entitled “Collection, Processing, and Disclosure of Sensitive Personal Information.”

Collection, Processing, and Disclosure of Sensitive Personal Information

We handle Sensitive Personal Information with your consent where required by law, for specific purposes like providing requested services, ensuring safety and security, countering illegal activities, maintaining and servicing accounts, customer service, order processing, verifying information, analytic services, storage, quality and safety control, and product improvement. We don't use Sensitive Personal Information for character profiling or other purposes beyond these.

Rights and Requests

Under applicable law, you may request to:

Know if we process your Personal Information and access it. California residents can specifically ask for:
- Categories of Personal Information collected and their sources.
- Purpose of collecting Personal Information.
- Categories of Personal Information disclosed and the third parties they are shared with.
Correct inaccuracies in your Personal Information.
Delete your Personal Information.
Obtain a portable copy of your Personal Information.

You have the right not to face discrimination for exercising these rights.

To make a request, contact us at hello@mizou.com. We'll verify and respond as per applicable law, considering the type and sensitivity of the Personal Information. Some requests may be declined based on legal exceptions. For identity verification, we may ask for your email, nickname, or login activity. Password-protected account holders may need to undergo our authentication process.

For services provided as a “service provider” or “processor,” direct any Personal Information requests to the User you have a direct relationship with.

We do not sell Personal Information, including Sensitive Personal Information, nor use it for cross-context behavioral advertising. This also applies to Personal Information of minors under 16 years old, in line with our practices in the past 12 months.

Appeal Process

If you're a consumer from Colorado, Connecticut, or Virginia and we don't act on your request, you can appeal this decision within a reasonable time after receiving our refusal notification. Appeals can be filed by contacting us at hello@mizou.com.

Authorized Agents

Should an authorized agent wish to make a request on your behalf as allowed by law, they can follow the procedures outlined in the “Rights and Requests” section. We'll handle the agent's request according to applicable laws. During verification, we may ask the agent for proof of their authorized status. Additionally, we might require your identity verification as outlined in the “Rights and Requests” section, or confirmation that you authorized the agent to make the request on your behalf.

De-Identified Information

In cases where we handle de-identified information, we commit to maintaining and using this information strictly in its de-identified form. We will not attempt to re-identify such information.

11. Do Not Track

In line with certain U.S. state laws, we're required to clarify our response to "Do Not Track" browser settings. Mizou adheres to the practices set forth in this Privacy Policy and does not track or follow any Do Not Track browser requests.

12. Changes to this Policy

We may update this Privacy Policy periodically. If we make significant changes, especially concerning how we use your Personal Information, we will provide advance notice, such as via email or a pop-up notification. If you do not agree with the changes, you always have the option to delete your account and discontinue using our Services.

13. Collection of Personal Information from Children

Our Service is geared towards educational institutions, educators, and students. Should we find that we have gathered personal information from a child under 13 without the requisite parental consent, we will promptly delete such information.

We may collect certain Personal Information from children through our products for parents or educational settings, acting as a data processor or upon their direction. More details are available in our Student Privacy Policy.

If your child accesses our Services via their school, please direct requests to the school or district. We gather usernames and passwords for child account holders, strictly for login purposes. This, along with other automatically collected information, applies to children as well.

14. Questions & Concerns

For any questions, comments, or concerns about our privacy practices, please contact us at hello@m izou.com. We are committed to addressing any issues regarding the handling of privacy matters.