Privacy Policy

This Privacy Policy explains how Transnational AI, a Kolla family enterprise, handles personal information when you visit our website, use our Employment, Invoice, Insurance or Compliance Exchange platforms, submit a form, apply for a role, or access our investor or partner portals.

It applies to prospective and existing customers, platform users, job applicants, investors, partners and anyone who contacts us. Where a customer configures one of our platforms for its own workforce or clients, that customer is the controller of the data it loads and this policy applies to our role as its processor.

We collect only what we need to run the service you asked for.

• Information you give us: name, work email, organization, role, phone number and the content of any message, proposal or application you submit through our forms.
• Account information: login credentials, profile settings and activity within the investor and partner portals.
• Platform data: records that customers and their users load into an Exchange, such as invoices, policies, candidate profiles or compliance evidence, processed on the customer's instructions.
• Technical information: IP address, browser and device type, pages viewed and referring URL, gathered through server logs and privacy-respecting, cookie-free analytics.

We do not buy personal data from third parties, and we do not build advertising profiles.

• To provide, operate and secure the website, platforms and portals.
• To respond to your inquiry, proposal or application and route it to the right team.
• To manage customer, investor and partner relationships, including contracts, billing and support.
• To meet legal, regulatory, tax and audit obligations that apply to a cross-border financial-services business.
• To improve our products using aggregated, de-identified usage information.

Our legal bases under the GDPR and similar laws are performance of a contract, our legitimate interests in running and protecting the business, compliance with law, and, where required, your consent.

We never sell personal information. We share it only with:

• Service providers who host, secure or support our systems under written contracts that restrict their use of the data to our instructions.
• Professional advisers such as auditors, lawyers and regulators where required.
• Counterparties on a platform, when you or your organization chooses to transact with them, limited to what the transaction needs.
• Authorities, when required by law or to protect the rights, safety or property of our users or the company.
• A successor entity in the event of a merger, acquisition or reorganization, under the same protections.

We operate from India and the United States. When personal information moves between these countries or to a service provider elsewhere, we rely on standard contractual clauses, intra-group agreements or another lawful transfer mechanism, and we apply the same safeguards regardless of where data is stored.

We keep personal information only as long as needed for the purpose it was collected. Inquiry and application records are deleted or anonymized within 24 months of the last contact unless a relationship follows. Platform and financial records are retained for the period required by applicable law, typically seven years, then securely destroyed. Server logs are kept for 90 days.

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to restrict or object to certain processing, and to withdraw consent. You also have the right to complain to your local data protection authority.

To exercise any of these rights, use the contact form and choose the General category with the topic Privacy. We respond within 30 days and will verify your identity before acting on a request.

The public website uses only strictly necessary cookies, such as the session cookie that keeps you signed in to a portal. Our analytics are privacy-preserving and do not use cookies, fingerprint devices or track you across other sites. We do not use advertising or social-media tracking pixels.

Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

We will post any changes here and update the effective date. For material changes affecting portal users or customers, we will also notify you directly before they take effect.

Privacy questions and requests are handled by our Data Protection function. Reach them through the contact form on our website, or write to Transnational AI, Attn: Data Protection, at the headquarters address shown on the Contact page.