Privacy Policy

Privacy Policy

Effective on: 2025-01-01

1. Introduction and Scope

Sherpa AI (“Sherpa”, “we,” “us,” “our”) takes the protection of personal data (“Personal Data“) very seriously. This Privacy Notice (the “Notice“) describes our processing of Personal Data that we may receive from of our customers (“Customers”) in our Sherpa platform. This Notice does not apply to Personal Data we collect by other means, such as Personal Data that we receive directly through Sherpa’s own publicly accessible websites. This Notice does not apply to Personal Data.

2. Controllership

In the context of this Notice, Sherpa acts as a data processor for the data we process.

3. Categories of Personal Data

We may process the following types of Personal Data:

  1. name;
  2. work email address;
  3. job title;
  4. work address;
  5. the company somebody works for;
  6. interactions with the Customers’ website (for example, visits to a given page);
  7. account score;
  8. work phone number;
  9. geolocation information (city, state, country)
  10. information relevant to sales, such as details about past or scheduled meetings;
  11. web application usage data;
  12. IP address and associated domain; and
  13. any other type of Personal Data our clients may choose to share with us.

4. How we Receive Personal Data

We may receive Personal Data in a variety of ways. For example:

  1. When clients upload Personal Data to us, or when receive access to raw customer data from our clients;
  2. when the users of our services interact with our services;
  3. when our clients enable our programmatic access to Personal Data collected and stored by them;
  4. as otherwise provided by our Customers via technical means and integrations; and
  5. from B2B marketing data engines.

5. Basis of Processing

Within the scope of this Notice, we will only process Personal Data as instructed by our clients (the data controllers). When our engagement with a client ends, we will delete the Personal Data submitted by that client within one month.

6. Purpose of Processing

The purposes for processing Personal Data include:

  1. Account Segmentation, Lookalikes, and Account Scoring which involves taking a list of Customers and assigning an AI model score to each customer based on the available data;
  2. Interacting with Large Language Model platforms not limited to ChatGPT, Llama, DeepSeek, etc.,
  3. topical enrichment; and
  4. providing our Customers with other services that they have specifically requested from us.

7. Sharing Personal Data with Third Parties

We share Personal Data with third-party service providers that process Personal Data on behalf of Sherpa. Such service providers include:

  1. Infrastructure service providers;
  2. B2B marketing data engines;
  3. Large Language Model Platforms; and
  4. Analytics service providers.

Our service providers may be located outside of the United States; however, we will require that those third parties maintain at least the same level of confidentiality that we maintain for such Personal Data. Sherpa remains liable for the protection of Personal Data that we transfer to our service providers, except to the extent that we are not responsible for the event giving rise to any unauthorized or improper processing.

8. Other Disclosure of Personal Data

We may disclose Personal Data:

  1. To the extent required by law or if we have a good-faith belief that such disclosure is necessary in order to comply with official investigations or legal proceedings initiated by governmental and/or law enforcement officials, or private parties, including but not limited to: in response to subpoenas, search warrants, or court orders;
  2. if we sell or transfer all or a portion of our company’s business interests, assets, or both, or in connection with a corporate merger, consolidation, restructuring, or other company change; or
  3. to our subsidiaries or affiliates only if necessary for business and operational purposes as described in the section above.

We reserve the right to use, transfer, sell, and share aggregated, anonymous data, which does not include any Personal Data for any legal business purpose, such as analyzing usage trends and seeking compatible advertisers, sponsors, clients, and customers.

If we must disclose Personal Data in order to comply with official investigations or legal proceedings initiated by governmental and/or law enforcement officials, we may not be able to ensure that such recipients of Personal Data will maintain the privacy or security of said Personal Data.

9. Access & Review

If you are a data subject about whom we store Personal Data, you may have a right to request access to, and the opportunity to update, correct, or delete, such Personal Data. You may also have the right to opt out of having your Personal Data shared with third parties and to revoke your consent to our sharing your Personal Data with third parties. You may also have the right to opt out if your Personal Data is used for any purpose that is materially different from the purpose(s) for which it was originally collected or which you originally authorized. To submit such requests or raise any other questions, the affected data subjects should directly contact our client that submitted the Personal Data to us.

10. Data Integrity & Security

Sherpa has implemented and will maintain technical, administrative, and physical measures that are reasonably designed to help protect Personal Data from unauthorized processing, such as unauthorized access, disclosure, alteration, or destruction.

11. Regulatory Oversight

Sherpa is subject to the investigatory and enforcement powers of the United States Federal Trade Commission.

12. Changes to this Privacy Notice

If we make any material change to this Notice, we will post the revised Notice to this web page and update the “Effective” date above to reflect the date on which the new Notice became effective.

13. Regulatory Oversight

SherpaML is subject to the investigatory and enforcement powers of the United States Federal Trade Commission.

14. Changes to this Privacy Notice

If we make any material change to this Notice, we will post the revised Notice to this web page and update the “Effective” date above to reflect the date on which the new Notice became effective.