Privacy Policy

Effective as of August 11th 2025

This Privacy Policy describes how Introvoke Inc. d/b/a Sequel.io (“Sequel,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information. It applies to personal information we collect through our websites, applications, services, events, and marketing activities that link to this policy (collectively, the “Services”), as well as other interactions you may have with us.

This Privacy Policy does not apply to information that we process solely on behalf of our business customers in the course of providing our Services. When acting as a processor or service provider, our collection and use of such data is governed by the Master Services Agreement (MSA) and Data Processing Addendum (DPA) in place with the customer. If you have questions about data handled on behalf of a customer, please contact them directly.

Our Services are designed for business and professional use. We do not target or knowingly collect personal information from individuals for personal, family, or household purposes.

1. Information We Collect

We collect the following categories of personal information:

A. Information You Provide Directly

• Contact details: name, email address, phone number, professional title, company name, mailing address.
• Profile data: account credentials, biographical information, profile photo, social media links, preferences, and participation in events, contests, or surveys.
• Communications: correspondence with us, including support requests and feedback.
• Event participation data: registration details, chat messages, polls, Q&A responses, webinar transcripts, and other engagement data generated during events or recordings. When users connect Sequel to authorized integrations (such as AI assistants or content tools), we may provide limited webinar-related data required to fulfill the request. This may include event metadata (such as event name, event ID, and event date), company identifiers associated with the event organizer, and transcript content from events the authenticated user has permission to access.
• Payment information: collected and processed by our payment processors (Stripe) in accordance with their own privacy policies.

B. Information We Collect Automatically

• Device and technical data: IP address, device type, operating system, browser type, screen resolution, and system activity.
• Usage data: pages visited, features used, time spent, referral URLs, and interactions with our marketing emails.
• Location data: city and country, when enabled.
• Cookies and similar technologies.

C. Information from Other Sources

• Public sources (e.g., social media profiles, business registries)
• Marketing and event partners
• Our authorized subprocessors (listed in our DPA Schedule 2)

2. How We Use Personal Information

We use personal information to:

• Provide, operate, secure, and improve our Services
• Host and facilitate events and related engagement features
• Communicate with you, including service updates and support responses
• Conduct analytics and improve user experience
• Meet contractual, legal, and regulatory obligations
• Enforce agreements, prevent fraud, and ensure security

When processing data as a service provider/processor, we act solely on documented instructions from our customer as outlined in our DPA.

3. How We Share Personal Information

We may share personal information with:

• Authorized subprocessors listed in our DPA Schedule 2
• Service providers supporting our operations (e.g., hosting, analytics, communications)
• Event co-hosts or partners, when you register for joint events
• Professional advisors and legal authorities, when required by law
• Affiliates, in accordance with this Privacy Policy
• Business transferees, in connection with mergers, acquisitions, or similar transactions

We do not sell or share personal information as defined under the California Privacy Rights Act (CPRA) and other applicable privacy laws.

4. International Data Transfers

If personal information is transferred outside of your jurisdiction, we implement safeguards as required by applicable data protection laws, including:

• EU Standard Contractual Clauses (Module 2: Controller to Processor)
• UK Addendum to the Standard Contractual Clauses
• Other legally recognized transfer mechanisms

Details are provided in our DPA, which forms part of our customer agreements.

5. Data Retention

We retain personal information for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal, accounting, and reporting obligations
• Enforce our agreements

Upon request or contract termination, we delete or return personal data as specified in our DPA.

6. Your Privacy Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction or deletion
• Object to or restrict processing
• Request data portability
• Opt out of marketing communications

To exercise your rights, please contact us at security@sequel.io. If we process your information on behalf of a customer, we will direct your request to them.

7. Security

We maintain technical and organizational safeguards consistent with our SOC 2 certification and as described in Schedule 3 of our DPA. These include:

• Network and application security controls
• Access controls and role-based permissions
• Data encryption in transit and at rest
• Ongoing monitoring and vulnerability management

8. Children’s Privacy

Our Services are not directed to children under 13 (or under the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

9. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date and, where appropriate, by additional notice such as email or in-product notification.

10. Contact Us

Introvoke Inc. d/b/a Sequel.io
3031 Tisch Way, 110 Plaza West
San Jose, CA 95128, USA
Email: security@sequel.io