Privacy Policy

Last Revised: April 8, 2026

Corsali, Inc. DBA OpenDataLabs ("ODL", "we", "us", or "our") operates the website at https://www.opendatalabs.com and related contact forms, mailing list signups, audit submissions, waitlists, and other public-facing website features (the "Services").

This Privacy Policy explains how ODL collects, uses, shares, and protects personal information in connection with the Services. Questions? Contact us at hello@opendatalabs.com.

By using the Services, you agree to the terms of this Privacy Policy. If you do not agree, you must refrain from using the Services.

Applicability

This Privacy Policy applies to personal information collected by ODL through operation of our public website and related Services, including:

  • personal information voluntarily submitted through website forms, contact requests, and inquiries;
  • information automatically collected when individuals visit our website; and
  • personal information of business contacts and counterparty personnel collected in the course of B2B commercial relationships.

This Privacy Policy does not apply to personal information collected or processed by third-party websites, services, or platforms that we link to or that you access separately from our website.

1. Personal Information We Collect

(i) Information You Provide

  • Contact and business information: name, title, employer, email address, and other identifying details submitted through contact forms, inquiries, or B2B relationship management
  • Feedback and correspondence: comments, suggestions, or other input shared with ODL
  • Marketing preferences: where you subscribe to updates or communications

(ii) Automatically Collected Information

When individuals visit our website, we and our service providers may automatically collect:

  • Device data: operating system, browser type, IP address, and general location (e.g., city or region)
  • Usage data: pages visited, time spent, navigation paths, interaction patterns, and clicks on site elements
  • Communication data: whether emails are opened or links clicked

We use technologies including cookies, local storage (e.g., HTML5), and web beacons. See Section 5 for controls.

(iii) Information from Outside Sources

We may obtain information from public records, data providers, partners, and service providers that support analytics or communications (such as Amplitude) where lawfully permitted.

2. How We Use Personal Information

To operate the Services

  • Provide, maintain, and improve the website and related inquiry, signup, and audit flows
  • Communicate updates, alerts, and support
  • Respond to inquiries and business contact requests

For research and development

  • Analyse usage to improve functionality and develop new features

For marketing and communications

  • Send updates, newsletters, and promotional materials where permitted and where consent has been given

To comply with legal obligations

  • Respond to lawful requests and comply with regulatory requirements

For security and fraud prevention

  • Detect and prevent fraud, abuse, or unauthorized access and enforce our Terms of Service

To create anonymous data

We may transform personal information into non-identifiable data by removing or restructuring identifying elements. We may use and share anonymised data for lawful business purposes including analytics, research, and product development.

3. Legal Basis for Processing (Where Applicable)

ODL is not a consumer-facing business. The personal data we collect is limited to business contact data and information automatically collected from website visitors. To the extent applicable law requires a legal basis, the following apply:

  • Website visitors (analytics and non-essential cookies): Where required, we rely on consent. We rely on legitimate business interests for website security and core functionality.
  • B2B contact data: Legitimate business interests - specifically, managing commercial relationships, communicating about services, and fulfilling contractual obligations.
  • Legal compliance: Processing necessary to comply with applicable laws, regulations, legal process, or governmental requests.
  • Marketing communications: Consent, which may be withdrawn at any time via the unsubscribe link in any marketing email.

4. Sharing of Personal Information

Service Providers

With vendors supporting our operations - including hosting, analytics, communications, infrastructure, and security providers - under appropriate contractual safeguards.

Partners and Integrations

Where necessary to provide the Services or where you choose to connect third-party services.

Professional Advisors

Lawyers, auditors, insurers, accountants, and other advisors where reasonably necessary.

Legal and Safety

To comply with legal obligations or to protect the rights, property, safety, and security of ODL, our users, or others.

Business Transfers

In connection with mergers, acquisitions, financing, due diligence, reorganisations, or asset sales, subject to appropriate confidentiality protections.

International Transfers

ODL is incorporated and operated in the United States. Where we receive personal data originating from jurisdictions with cross-border transfer restrictions - including the European Economic Area or United Kingdom - we use appropriate lawful transfer mechanisms, which may include Standard Contractual Clauses issued by the European Commission or other mechanisms recognised under applicable law. To request further information, contact hello@opendatalabs.com.

5. Privacy Choices

Depending on your location and applicable law, you may have rights to access, correct, delete, or restrict processing of your personal information, and to object to certain uses. To exercise these rights, contact hello@opendatalabs.com.

Marketing Opt-Out

You may unsubscribe from marketing emails at any time via the unsubscribe link in any marketing communication.

Cookies and Tracking Controls

You may control cookies via your browser settings: https://www.allaboutcookies.org

We use analytics tools, including Amplitude, to understand how visitors use the website. You can limit analytics-related storage through your browser settings and device controls.

6. Third-Party Services

Our website and Services may contain links to third-party websites or services. We are not responsible for their privacy practices. Your interactions with third-party services are governed by their respective privacy policies.

7. Children’s Privacy

Our website and Services are not directed at individuals under 18 years of age. If we become aware that we have collected personal information from a minor without legally required consent, we will delete it promptly.

8. Security and Retention

We implement reasonable technical, organisational, and physical safeguards including access controls, encryption where appropriate, and system monitoring. No system is completely secure.

We retain personal data only as long as necessary for:

  • delivery of the website features and related Services or management of the relevant B2B relationship;
  • legal and regulatory compliance;
  • dispute resolution and agreement enforcement; and
  • legitimate business purposes proportionate to the data held.

B2B contact data is generally retained for the duration of the commercial relationship and for a reasonable period thereafter consistent with applicable limitation periods.

9. California Privacy Rights

This section applies only to California residents.

If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”):

  • the right to know what personal information ODL collects, uses, discloses, and retains about you
  • the right to access your personal information
  • the right to correct inaccurate personal information
  • the right to request deletion of personal information, subject to applicable exceptions
  • the right to opt out of the sale or sharing of personal information for cross-context behavioural advertising
  • the right to limit use and disclosure of sensitive personal information
  • the right not to receive discriminatory treatment for exercising CCPA rights

ODL does not sell personal information. If ODL engages in any activity constituting "sharing" under California law, California residents may opt out by contacting hello@opendatalabs.com.

10. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of law principles.

11. Changes to this Privacy Policy

We may update this Privacy Policy at any time. We will update the “Last Revised” date at the top of this policy. For material changes, we will take reasonable steps to notify users where required by applicable law. Continued use of the website or Services after any update constitutes your acknowledgment of the revised Privacy Policy.

12. Contact

For questions, complaints, or claims: hello@opendatalabs.com