We collect information when you access or use AI Risk Database. The types of information we collect depend on how you use AI Risk Database.
We collect information you submit directly to us such as when you register for an account, submit Vulnerability Reports, or otherwise contact us through AI Risk Database. The information we collect directly from you may include:
You are not required to provide us with such information, but certain features of AI Risk Database may not be accessible or available, absent the provision of the requested information.
We, or our third-party providers, may also collect device information, IP addresses, http referrer fields, and other information about your computer or device and your usage of AI Risk Database. We may also collect information that is sent to us automatically by your web browser. We automatically receive information about your interactions with AI Risk Database, such as the pages or other content you view and the dates and times of your visits. We may also collect general information about your location (e.g. inferred from an IP address).
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but your browser may allow you to modify your browser settings to decline cookies if you prefer. If you disable cookies, you may be prevented from taking full advantage of the AI Risk Database, because AI Risk Database may not function properly. As we adopt additional technologies, we may also gather additional information through other methods.
We may collect information about you or others through our affiliates or through non-affiliated parties. For example, you may provide us with Vulnerability Reports by signing in with third-party credentials, such as Github credentials. If you access AI Risk Database through a Third-Party Account, that third party may provide us with access to certain information about you. This may include, without limitation, your Third-Party Account user ID, user name, avatar, name, company, email, and social media handles.
We may also collect information about Models from third-party sources, such as services that market or otherwise make available artificial intelligence models on an open-sourced basis. The information we collect related to the Models may contain identifiable information, such as the source of the Model.
We may combine information that we collect from you through AI Risk Database with information that we obtain from such other parties and information derived from other products or services we provide.
We use the information we collect for business and commercial purposes, such as:
We may aggregate and/or de-identify information collected through AI Risk Database. We may use and disclose de-identified or aggregated data for any purpose, including without limitation for research and marketing purposes.
We may disclose the information we collect in the following situations:
Affiliates: We may disclose the information we collect to our affiliates.
Consent/At Your Direction: We may disclose your information to nonaffiliated third parties based on your consent to do so. For example, if you submit a Vulnerability Report, we may attribute you to that Vulnerability Report and make that information available to users of AI Risk Database.
Publicly-Available Information Available Within AI Risk Database: We may also otherwise disclose information about you that is publicly available, such as identifiable information associated with Models.
Vendors: We may disclose your information to third-party vendors that provide services to us, such as third-party hosting providers.
Legal Requirements: We may share or disclose certain information if we believe in good faith that doing so is necessary or appropriate to comply with any law enforcement, legal, or regulatory process, such as to respond to a warrant, subpoena, court order, or other applicable laws and regulations.
Business Transfer: We may share or disclose certain information in connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
You have certain rights and choices with respect to your information such as:
We maintain administrative, technical, and physical safeguards to protect information that you submit to us. However, no system is completely secure or error-free. We do not, and cannot, guarantee the complete security of your information.
We keep your information for the time necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collect and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
AI Risk Database is intended for users over the age of 18. If we become aware that a child under 13 (or a higher age threshold where applicable) has provided us with personal data, we will take steps to comply with any applicable legal requirement to remove such information.
In addition to those rights described herein, you have the right to lodge a complaint with the relevant supervisory authority. However, we encourage you to contact us first, and we will do our very best to resolve your concern.
Your local law may provide you certain rights with respect to your personal data. Depending on your jurisdiction, you may request that we:
Please note, however, that certain information may be exempt from such requests in some circumstances, which may include needing to continue processing your information for our legitimate interests or to comply with a legal obligation. We may request you provide us with information necessary to confirm your identity before responding to your request. To exercise any of these rights, please contact us as described in the “Contact Us” section below.
We may store and process data in the United States and other countries outside the United States which may have data protection laws that differ from the laws in your country. By using AI Risk Database, you consent to the collection, processing, maintenance, and transfer of such information in and to the United States and other applicable countries in which the privacy laws may not be as comprehensive as, or equivalent to, those in the country where you reside and/or are a citizen.
Please note that AI Risk Database may contain links to third-party websites. Since we do not control third-party sites and are not responsible for any information you may provide while on such sites, we encourage you to read the privacy policies on those websites before providing any of your information on such sites.
AI Risk Database does not recognize or respond to browser-initiated Do-Not-Track signals.