General Data Protection Regulation (GDPR)

At Freeplay, the privacy and security of your customer data is one of our top priorities. GDPR applies not only to EU-based businesses, but also to any business that controls or processes data of EU citizens. Our entire organization is hard at work ensuring that our practices are GDPR-compliant.

Section	Status	Explanation
Individual in Charge of GDPR	Currently Available	Eric Ryan, CTO ([email protected])
Data Protection Officer	Currently Available	Eric Ryan, CTO ([email protected])
Purpose of Processing	Currently Available	Freeplay provides a platform for testing, evaluating, monitoring, and optimizing AI-driven products. We process LLM request and response data to help teams improve their generative AI features. These requests may at times include end user data from our customers’ AI systems. Freeplay processes this data for purposes including assisting our customers with product experimentation, automated testing, LLM observability, and data labeling & curation. The use of the Freeplay application also includes data related to our customers' authorized users of Freeplay, such as names, email addresses, and user IDs. We may engage third-party service providers to assist in providing our services, always in accordance with our data processing agreements and with a focus on data privacy and security.
Lawful Basis of Processing and Consent	Currently Available	Under Article 6 of GDPR, our processing falls under: - Consent: Via Privacy Policy . Removal of consent can be requested by contacting [email protected]. - Contract: Via Terms of Service or Master Services Agreement with business customers, which gives Freeplay permission to manage the Personal Data of our customers' employees.
Withdrawal of Consent (or Opt-Out)	Currently Available	For end users, withdrawal of consent or opting out after initial consent/opt-in is available by emailing [email protected].
Deletion Policy	Currently Available	Deletion of Freeplay Customer Data upon termination, cancellation, or expiration of the agreement. Our customers can also delete any of their end user data via the Freeplay web application or API, in order to honor their own deletion obligations. Data deletion for website visitors can be requested by contacting [email protected] .
Data Access / Modification / Portability	Currently Available	Users can access, modify, and delete their data directly from the Freeplay web application. Website visitors can request a copy or update their data by emailing [email protected] .
Data Protection Information	Currently Available	Freeplay deploys and maintains industry-standard best practices attested to in a SOC 2 Type 2 report covering security, confidentiality, and availability. Further information is contained in Freeplay's Terms of Service and Data Processing Addendum.
Notification of Breach	Currently Available	Freeplay’s breach notification process is outlined within our Terms of Service, Data Processing Addendum, and Incident Response Policy, which is available upon request.