Privacy Policy

Last revised on August 4, 2026

Consio AI Inc. (“Consio,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how Consio collects, uses, discloses, and secures (“processes”) personal information (“Personal Information”) through consio.ai (“Website”), our computer or mobile applications, our electronic communications (including email and text messages), and other websites and services that we provide that are controlled by us and display this Privacy Policy (collectively, the “Service”).

Please read this Privacy Policy carefully to understand how we handle your Personal Information.

This Privacy Policy contains the following sections:

Consio’s Processing of Personal Information on Behalf of Clients
Personal Information We Collect
How We Use Personal Information
Cookies and Similar Technologies
Online Analytics and Interest-Based Advertising
How We Disclose Personal Information
Onward Transfers
Sensitive Information
Protection of Personal Information
Data Integrity and Purpose Limitation
Retention of Personal Information
Third-Party Links and Features
Children’s Privacy
Privacy Rights and Choices
Data Privacy Framework
Privacy Policy Updates
Contact Us

Consio’s Processing of Personal Information on Behalf of Clients

To the extent Consio processes Personal Information on behalf of organizations (“Clients”) that want to engage with individual consumers (“Client Consumers”) through the Service, Consio acts as a data processor or service provider on behalf of these Clients. Our processing of Client Consumers’ Personal Information is described in this Privacy Policy and is governed by Consio’s agreements with those Clients.

Client Consumers who wish to exercise any privacy rights in connection with their Personal Information that has been submitted to us by a Client should inquire with the Client directly. Because we only process Client Consumers’ data upon instruction from that Client, Client Consumers who make a request directly to us should provide us with the name of the Client who submitted their Personal Information to us. If we are able to verify the Client, we will refer the request to that Client and support them as needed in responding to the request within a reasonable timeframe.

Personal Information We Collect

Personal Information We Collect from Clients’ Representatives and Other Website Visitors. We collect the following categories of Personal Information for our own business purposes, as set out below:

Identifiers, including your first and last name, email address, and phone number;
Preferences for receiving communications about our services and publications, and details about how you engage with our marketing communications;
Information you provide when you interact with content on our Website;
Information you provide in connection with requests to contact us or requests for customer service; and
Information you provide in connection with your participation in a contest, sweepstakes, research study, or email survey.

Personal Information About Client Consumers That Clients Provide to Us. Clients may provide us with information about Client Consumers through the Service or offline for inclusion in the Service. Such information may include Client Consumers’ name, email address, and telephone number. Our Clients are responsible for providing notice and obtaining the appropriate consents necessary for us to process this Personal Information.

Personal Information We Automatically Collect. Like most online services, we may automatically receive and store certain Personal Information about individuals who interact with our Service through their browser or device. As discussed further below, we and our service providers may use a variety of technologies, including cookies, to assist in collecting this information.

Device Information. We collect technical information associated with the device(s) you use to access our Service, including information related to your browser and operating system, IP address (the Internet address of your computer), unique device identifiers, and other information such as your device type.
Usage Information. We collect a variety of information to better understand how individuals use our Service. This may include the webpage that you were visiting before accessing our Service, the pages or features of our Service you use, how much time you spend there, the date and time of use, and information about your usage preferences.
Transaction Information. We also collect information to help us verify transactions completed using our Service. This may include the names and email addresses of parties to a transaction, subject line, history of actions that individuals take on a transaction (for example, reviewing and approving transactions, or providing payment method details), and authentication methods.

Personal Information We Collect from Social Media and Other Content Platforms. When individuals “like” or “follow” us on Facebook, Instagram, X, LinkedIn, or other social media sites, we may collect some Personal Information including your name, email address, and any comments or content you post that is relevant to us. We also collect your Personal Information if you sign up for one of our promotions or submit information to us through social media sites.

Personal Information We Collect from Others. We may also receive Personal Information from service providers, advertisers, business partners, data companies, and other third parties. We may combine this information with other information we receive through the Service.

How We Use Personal Information

We use Personal Information for the following business and operational purposes:

Account Administration. To enter into or perform a contract with our Clients and Website visitors, we use Personal Information for account administration, information verification, payment collection, and invoicing and accounting.
Service Provision. To perform our contract with our Clients and Website visitors, we use Personal Information to provide, manage, support, and improve our Service.
Communications and Customer Support. To perform our contract with Clients and Website visitors, or where it is in our legitimate business interests, we use Personal Information to respond to requests or other communications we receive by email, phone, or otherwise, and to provide more effective and efficient customer service.
Fraud Protection and Security. It is in our legitimate business interests to use Personal Information to conduct internal business operations to keep our Service safe and secure, such as auditing, detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and resolving crashes.
Analytics and Aggregation. It is in our legitimate business interests to monitor use of the Service, analyze trends, and carry out research and development. We may aggregate or anonymize Personal Information in a form that does not allow individuals to be personally identified and use the resulting information for statistical analysis regarding use of the Service, such as to better understand our customer base, or for other purposes.
Marketing. It is in our legitimate business interests to contact Clients and Website visitors regarding Consio and third-party products, services, surveys, research studies, promotions, special events, and other subjects that we think may be of interest to them (in accordance with any privacy preferences they have expressed to us). Where legally required, we will only send marketing communications with prior consent.
Personalization. It is in our legitimate business interests to use Personal Information to customize content, preferences, and advertising on the Service and across the Internet.
Compliance and Legal Reasons. We may use Personal Information to enforce and comply with our terms and policies, to comply with our legal obligations such as applicable laws, regulations, and other legal processes and procedures, or where it is in our legitimate interests to establish, exercise, or defend our legal rights.

We will use Personal Information only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the relevant individual.

Cookies and Similar Technologies

To collect the information in the “Personal Information We Automatically Collect” section above, we and our service providers use Internet server logs, cookies, tags, SDKs, tracking pixels, and other similar tracking technologies. We use these technologies to offer a more personalized experience by understanding and remembering Website visitors’ particular browsing preferences.

A web server log is a file where website activity is stored.
A cookie is a small text file that is placed on your computer or mobile device when you visit a website, that enables us to: (i) recognize your computer; (ii) store your preferences and settings; (iii) understand the web pages of the Service you have visited; (iv) enhance your user experience by delivering and measuring the effectiveness of content and advertising tailored to your interests; (v) perform searches and analytics; and (vi) assist with security and administrative functions.
Tracking pixels (sometimes referred to as web beacons or clear GIFs) are tiny electronic tags with a unique identifier embedded in websites, online ads, and/or emails that are designed to: (i) collect usage information like ad impressions or clicks and email open rates; (ii) measure popularity of the Service and associated advertising; and (iii) access user cookies.

As we adopt additional technologies, we may also gather information through other methods and technologies.

Please note that you can change your settings to notify you when certain cookies are being set or updated, or to block certain cookies altogether. Please consult the “Help” section of your browser for more information (for example, Google Chrome, Mozilla Firefox, or Apple Safari). Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings of the Service, and that Consio does not control the choices that are available through the above third-party offerings.

Online Analytics and Interest-Based Advertising

Analytics. We may use third-party analytics services (such as Google Analytics) on our Service to collect and analyze usage information through cookies and similar technologies; engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to Website visitors. To prevent Google Analytics from using Personal Information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

Interest-Based Advertising. When you visit our Website, Consio may use the information collected from you in order to display advertising to you on other websites, such as Facebook or Google, about products, services, and related features that we think may be of interest to you to improve and personalize your use of the Service. This type of advertising is called retargeting. These ads may be personalized based on various factors such as the features you are using, demographic and geographic data, and other information that we collect about you. This advertising may be based on your current activity or your activity over time and may be tailored to your interests.

In order to provide this interest-based advertising, we may use third-party service providers who, on our behalf, may place cookies or other tracking technologies, such as cookies and SDKs, on your computer browser, mobile phone applications, or other devices to collect information about your use of the Service in order to provide interest-based advertising to you both on the Website and on other websites.

We neither have access to, nor does this Privacy Policy govern, the use of cookies or other tracking technologies that may be placed on your computer, mobile phone, or other device by non-affiliated third parties. As described below, these providers may offer you a way to opt out of the collection of information that is used for our interest-based advertising to you. We cannot guarantee that these instructions will not change, or that they will continue to be available; they are controlled by each non-affiliated third party, not us.

If you are interested in more information about interest-based advertising and how you can generally control cookies and other tracking technologies from being put on your device to deliver such advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s (DAA’s) Consumer Opt-Out link, or the European Interactive Digital Advertising Alliance’s (EDAA’s) Your Online Choices page. To opt out of the display of interest-based advertising from Google, please visit the Google Ads Settings page. Facebook also offers settings that may control what information Facebook uses about you or your device activity for advertising purposes.

Please note that to the extent advertising technology is integrated into the Website, Website visitors may still receive advertising even if you opt out as described above. In that case, the advertising will just not be based on your interests.

Do Not Track. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our Website for third-party purposes, which is why we provide the variety of opt-out mechanisms listed above. However, because of the changing state of technology and the lack of industry consensus regarding the meaning of DNT signals, we currently do not make any guarantee that we will honor DNT signals.

How We Disclose Personal Information

We may disclose Personal Information to the following parties:

Service Providers. We may disclose Personal Information to vendors who provide services to us, such as analytics, payment processing, website management, information technology, security, and other similar services.
Advertising Partners. We may disclose Personal Information pertaining to Clients and Website visitors to third-party advertising companies, including for the interest-based advertising purposes described above.
Our Clients. We may disclose Client Consumers’ Personal Information to the Client with which that Client Consumer engages.
Related Entities. We may disclose Personal Information to our affiliates (entities that control, are controlled by, or are under common control with Consio) for business purposes. We will require these entities to comply with the terms of this Privacy Policy with regard to their use of Personal Information.
State, Federal, and Foreign Courts and Regulatory and Government Authorities. We may disclose Personal Information as we believe to be necessary or appropriate to: (i) comply with applicable law and legal processes; (ii) respond to requests from public and government authorities, including public and government authorities outside your country of residence; (iii) enforce our Terms of Use; (iv) protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and (v) allow us to pursue available remedies or limit the damages that we may sustain.
Prospective Purchasers, Assignees, and Other Parties Involved in Corporate Transactions. We reserve the right to transfer Personal Information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, diligence, or completion of a corporate transaction in which we are acquired by or merged with another company, or in which we sell, liquidate, or transfer all or a portion of our assets.
Other Third Parties as Authorized by You. We may also disclose Personal Information when you have authorized us to do so or at your direction.

From time to time, we may share aggregate or de-identified information about use of the Service and individuals. We may disclose such aggregate or de-identified information to any third party, including advertisers, promotional partners, and sponsors.

Onward Transfers

When we transfer Personal Information that we have received under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, or the Swiss-U.S. Data Privacy Framework (collectively, the “Data Privacy Framework”) to third parties, we comply with the Accountability for Onward Transfer Principle:

Agents (service providers). Where a third party processes Personal Information as our agent on our behalf, we enter into a written contract requiring that agent to provide at least the same level of privacy protection as is required by the Data Privacy Framework Principles, to process the Personal Information only for limited and specified purposes consistent with the consent provided by the individual, and to notify us if it can no longer meet this obligation. If the agent can no longer meet its obligation, we will take reasonable and appropriate steps to stop and remediate unauthorized processing.
Third-party controllers. Where we transfer Personal Information to a third party acting as a controller, we enter into a contract providing that such Personal Information may be processed only for limited and specified purposes consistent with the consent provided by the individual, that the recipient will provide the same level of protection as the Principles, and that the recipient will notify us if it makes a determination that it can no longer meet this obligation.

As described in the Data Privacy Framework section below, Consio remains responsible and liable under the Principles if an agent that it engages to process Personal Information on its behalf does so in a manner inconsistent with the Principles, unless Consio proves that it is not responsible for the event giving rise to the damage.

Sensitive Information

“Sensitive Information” means Personal Information specifying medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, information concerning an individual’s sex life or sexual orientation, or Personal Information received from a third party where that third party treats and identifies it as sensitive.

Consio does not seek to collect Sensitive Information through the Service, and we ask that you not provide Sensitive Information to us unless we specifically request it. Where we receive Sensitive Information that is subject to the Data Privacy Framework, we will obtain affirmative express (opt-in) consent before we: (i) disclose that information to a third party in a way that is not covered by the individual’s original consent; or (ii) use it for a purpose that is materially different from, and incompatible with, the purpose for which the individual originally authorized it. To the extent we process Sensitive Information as a processor on behalf of a Client, the Client is responsible for obtaining any consent required for such processing.

Protection of Personal Information

We maintain reasonable physical, technical, administrative, and organizational security measures that are designed to protect Personal Information against accidental or unlawful destruction or accidental loss, alteration, and unauthorized disclosure or access. These measures are commensurate with the sensitivity of the information that we maintain. While we strive to protect Personal Information against unauthorized use or disclosure, we cannot ensure or warrant the security of any information we maintain.

Data Integrity and Purpose Limitation

Consistent with the Data Integrity and Purpose Limitation Principle, we limit the Personal Information we collect to information that is relevant for the purposes of processing described in this Privacy Policy. We do not process Personal Information in a way that is incompatible with those purposes or with purposes later authorized by the individual. We take reasonable steps to ensure that Personal Information is accurate, complete, current, and reliable for its intended use, and we retain Personal Information in a form that identifies or makes identifiable an individual only for as long as it serves a purpose of processing consistent with this Principle.

Retention of Personal Information

We retain Personal Information for as long as necessary to provide our Service or as needed to comply with applicable legal obligations. We will also retain and use Personal Information as necessary to resolve disputes, protect Consio and our users, and enforce our agreements. When Personal Information is no longer needed for these purposes, we will delete, de-identify, or aggregate it in accordance with applicable law.

Third-Party Links and Features

The Service may contain links to third-party services (for example, social media sites like Facebook and X) and third-party plug-ins (for example, the Facebook “like” button and the X “follow” button). These links and features are provided for your reference and convenience only and do not imply any endorsement of information provided through these third-party links and features, nor any association with their operators. If you choose to use these sites or features, you may disclose your Personal Information not just to those third parties, but also to their users and the public more generally, depending on how their services function. Consio does not control these third parties and is not responsible for the content or data practices of such third-party websites or services. Any information you provide to third parties on their websites or services is covered under their privacy and data collection policies and is not covered by this Privacy Policy. We urge you to review the privacy and security policies of these third parties before interacting with their services.

Children’s Privacy

The Service is intended for general audiences and not for children under the age of 18. If we become aware that we have collected Personal Information from a child under the age of 18 without legally valid parental consent, we will take reasonable steps to delete it as soon as possible. We also comply with other age restrictions and requirements in accordance with applicable local laws.

Privacy Rights and Choices

We respect your right to make choices about the ways we collect, use, and disclose your Personal Information.

Legal Rights. Depending on the laws of their local jurisdiction, and, for individuals whose Personal Information is subject to the Data Privacy Framework, by virtue of the Access Principle, Clients’ representatives and Website visitors may have certain rights and choices with respect to their Personal Information. Client Consumers who wish to exercise any rights in connection with their Personal Information that has been submitted to us by a Client should inquire with the Client directly.

Clients’ representatives and Website visitors may be able to ask us to:

provide access to and/or a copy of certain Personal Information we hold about you;
prevent the processing of your Personal Information for direct-marketing purposes (including any direct-marketing processing based on profiling);
update or rectify Personal Information which is out of date or incorrect;
delete certain Personal Information which we are holding about you;
oppose, cancel, or restrict the way that we process and disclose certain of your Personal Information;
transfer your Personal Information to a third-party provider of services;
revoke your consent for the processing of your Personal Information; or
opt out of sharing your Personal Information for interest-based advertising.

Access under the Data Privacy Framework. If your Personal Information is subject to the Data Privacy Framework, you have the right to access the Personal Information about you that we hold and to require us to correct, amend, or delete that information where it is inaccurate or has been processed in violation of the Principles, except where the burden or expense of providing access would be disproportionate to the risks to your privacy, or where the rights of persons other than you would be violated. This right exists by virtue of the Data Privacy Framework and is not dependent on the laws of your local jurisdiction.

We will consider all requests and provide our response within the time period required by applicable law. Please note that certain Personal Information may be exempt from such requests in some circumstances, which may include if we need to keep processing your Personal Information for our legitimate interests or to comply with a legal obligation. We may request that you provide us with information necessary to verify your identity before responding to your request, as required or permitted by applicable law. Depending on your jurisdiction, you may be entitled to empower an “authorized agent” to submit requests on your behalf. We will require authorized agents to confirm their identity and authority in accordance with applicable laws.

If you consider that we have processed Personal Information in violation of applicable law and failed to remedy such violation to your reasonable satisfaction, you may also lodge a complaint with a competent data protection authority. If you choose to exercise any of these rights, you will not be discriminated against or receive discriminatory treatment.

Marketing Communications. Clients’ representatives and Website visitors may instruct us not to contact them by email, postal mail, or phone regarding products, services, and promotions that might appeal to their interests by following the unsubscribe instructions provided in the promotional email or by contacting us directly at the email address listed below. Individuals who opt out may continue to receive services-related and other non-marketing emails.

Client Consumers who would like to opt out of receiving emails or text messages from our Clients using our Service need to exercise their rights with our Clients, for example by unsubscribing from Client emails or by responding to Client text messages with any of the following replies: STOP, END, CANCEL, UNSUBSCRIBE, or QUIT. If you opt out of receiving emails or text messages from one of our Clients, you may continue to receive emails or text messages from any other Clients’ email or text message programs you have joined until you separately unsubscribe from those programs.

Data Privacy Framework

Consio complies with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Information transferred from the European Union, the United Kingdom, and Switzerland to Consio in the United States.

Consio has certified to the U.S. Department of Commerce that it adheres to the Data Privacy Framework Principles (the “Principles”) with respect to such information. If there is any conflict between the terms in this Privacy Policy and the Principles, the Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the Principles, Consio commits to resolve complaints about our collection or use of your Personal Information. EU, UK, and Swiss individuals with inquiries or complaints regarding this Data Privacy Framework policy should first contact Consio at: privacy@consio.ai.

Consio has further committed to refer unresolved Data Privacy Framework complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

If your complaint is not resolved through these channels, under certain conditions a binding arbitration option may be available before a Data Privacy Framework Panel. For additional information, please visit https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.

Consio is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC) with respect to its compliance with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework.

Consio is responsible for the processing of Personal Information it receives under the Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf. Consio remains liable under the Principles if its agent processes such Personal Information in a manner inconsistent with the Principles, unless Consio proves that it is not responsible for the event giving rise to the damage.

Consio may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Privacy Policy Updates

We may update this Privacy Policy from time to time. If we make a material change to the Privacy Policy, we will notify you as required by applicable law and update the “Last revised” date above.

Contact Us

Consio AI Inc. is the responsible entity (or controller, under applicable law) for Personal Information pertaining to Clients and Website visitors.

If you have any questions or comments about this Privacy Policy or our privacy practices, or if you would like to exercise your rights and choices, please contact our Data Protection Officer at: privacy@consio.ai, or by writing to us at:

Consio AI Inc. Attn: Privacy Dept. 1111B S Governors Ave, STE 20892 Dover, DE 19904