ATT Privacy Policy

Advanced Translations Technology, Inc.

Version October 26, 2026 | Effective upon publication by ATT

1. Company and Purpose

Advanced Translations Technology, Inc., a California corporation (“ATT,” “we,” “us,” or “our”), owns and operates products, services, platforms, and brands including ProCAT, DepoDash, OmniRecord, and OmniScope. These names identify ATT offerings rather than separate contracting parties under this Policy. This Policy describes how ATT collects, uses, discloses, retains, and protects information. ATT’s Customer Data Security Policy explains its safeguards and customers’ shared security responsibilities. The applicable Terms of Service and product agreements govern use and purchase.

2. Company Wide Coverage

This Policy applies to information handled by ATT through ProCAT.com, MyProCAT.com, the DepoDash website and platform, the OmniRecord website and platform, OmniScope, and other ATT websites and offerings that reference this Policy. It includes accounts, online purchases, downloads, licensing, product and warranty registration, support, repairs, training, communications, and information submitted to ATT. Covered offerings include hosted services, Windows applications such as Winner and related features, and hardware such as Xpression, Impression, and Blaze writers, to the extent ATT receives or processes information in connection with them.

This Policy follows information processed by ATT or its providers on ATT’s behalf, regardless of whether the interface runs in a browser or a Windows application. ATT does not govern information that remains entirely on a customer-controlled computer, writer, removable medium, network, or local application and is not made available to ATT. The customer controls security, disclosure, backup, retention, and deletion of those local copies. If a customer enables a hosted transcription or other cloud feature, uploads data, requests remote support, or sends a device containing data to ATT, this Policy applies to the information ATT actually receives or accesses through that activity. Licensing and account communications remain covered even when local work product is not.

Independently operated websites and services selected and controlled by customers have their own privacy practices. That exclusion does not remove ATT’s obligations for providers processing information on ATT’s behalf. Employment and applicant information may be covered by a separate workforce notice.

3. Definitions and Roles

“Personal Information” means information relating to an identified or identifiable person, as further defined by applicable law. “Customer Content” means audio, video, transcripts and drafts, stenographic notes and strokes, dictionaries, exhibits, case files, annotations, corrections, speaker information, messages, metadata, and other work material submitted or made available to ATT. References to protecting Customer Content include confidential nonpersonal material as well as Personal Information.

ATT generally determines how account, transaction, licensing, website, and direct business-contact information is processed. For proceeding content, ATT generally acts on the customer’s behalf as a processor, service provider, or contractor where applicable. The customer determines the proceeding’s purpose and its authorized users and instructions. Actual legal roles depend on the activity and law, not only these labels.

4. Contact and Account Information

ATT may collect names, business and professional details, addresses, email addresses, telephone numbers, account identifiers, authentication information, team memberships, roles, preferences, invitation records, and contact or consent choices. Sources include individuals, their organizations, authorized administrators, and business partners involved in the relationship. Organizations may administer their users’ accounts and see names, contact details, roles, and organizational billing or activity information according to the relevant permissions.

OmniRecord’s account service provides sign-in, team, and billing functions and shares necessary identity and role information with the ATT products the customer uses. Its account information is not used for advertising. OmniRecord passwords are maintained as one-way hashes. Product-specific account safeguards do not imply that every system has an identical architecture.

5. Purchase and Product Information

ATT may collect orders, invoices, billing and shipping details, payment status, subscription and usage records, product models and serial numbers, ownership and registration information, license entitlements, warranty status, repair history, and support eligibility. ATT obtains these from customers, authorized sellers, payment and fulfillment providers, and its own transaction systems. They support fulfillment, tax and accounting, warranty, licensing, fraud prevention, and customer service.

Payment providers process payment-card transactions. ATT ordinarily keeps limited payment information such as tokens, card brand, last digits, expiration information, transaction identifiers, and billing status rather than complete card numbers. In OmniRecord’s hosted payment workflow, card numbers are entered through the processor and do not reach ATT servers. Payment providers may have legal duties and privacy notices applicable to their own processing.

6. Technical and Licensing Information

Websites and services may generate IP addresses, browser and operating-system information, device or hardware identifiers, approximate location derived from IP address, session times, referring pages, feature interactions, download history, authentication and permission events, diagnostics, and security logs. ATT uses this information to operate, secure, troubleshoot, and administer offerings, measure performance, and verify authorized access.

Windows software may communicate limited licensing data such as account and entitlement identifiers, product edition and version, activation and validation events, device identifiers, and licensing-error diagnostics. The License Service is not intended to transmit transcripts, dictionaries, or case files unless the user separately submits content for another feature or support. The applicable software license governs activation and licensed use; this Policy describes the information ATT handles.

7. Customer Content and Sensitive Information

ATT receives content from customers, authorized users, enabled integrations, and requested processing. It may contain testimony, voices, images, legal records, medical or financial information, government identifiers, information about minors, criminal allegations, privileged communications, or other sensitive material concerning people who are not ATT users. Not every service collects every category.

Customers must have authority to record, possess, upload, share, and process the material and provide required notices and permissions. ATT’s technical ability to receive content is not an assurance that upload complies with a protective order, sealing requirement, privilege obligation, professional duty, or recording law. Special handling must be reviewed and expressly accepted in writing before use. Those duties and BAA requirements are further addressed in the Customer Data Security Policy and Terms of Service.

ATT may process speech for recognition, speaker differentiation, alignment, and requested functions. Unless separately disclosed and lawfully authorized, ATT does not use voice recordings to establish biometric voiceprints for uniquely identifying people.

8. Communications and Support Information

ATT may keep inquiries, emails, support tickets, feedback, training registrations, and diagnostic material needed to respond, document service, and improve support. Support sessions or calls are recorded only where permitted and with any required notice or consent. Customers should provide only necessary data, avoid unnecessary sensitive attachments, and authorize any access to confidential work material.

For remote support or repairs, ATT handles only the information made available for the authorized engagement. Customers should close unrelated confidential material, supervise support where appropriate, and back up and remove data from devices before shipment where possible. If malfunction prevents removal, contact ATT before sending the device.

9. Processing Purposes

ATT uses Personal Information as reasonably necessary to provide requested products and services; authenticate and administer accounts and teams; fulfill purchases and deliveries; process subscriptions and storage fees; administer licenses, downloads, warranties, repairs, and training; communicate with customers; protect systems and intellectual property; investigate fraud and misuse; troubleshoot; maintain necessary business records; comply with law; and enforce agreements. Marketing and website analytics are subject to the restrictions and choices below.

ATT processes Customer Content to provide enabled functions, which may include receipt, storage, transmission, conversion, speech recognition, transcription, speaker processing, alignment, comparison, suggested edits, summarization, collaboration, export, and authorized support. No listed function authorizes use unrelated to the requested service or overrides the restrictions in Section 10.

10. AI Processing and Limited Service Improvement

ATT does not permit ASR engines supplied through ATT to retain uploaded Customer Content after completing requested processing or to use it to train or improve their AI models. Temporary handling necessary to perform the requested function is distinct from keeping content for later use. This restriction does not govern a provider account independently selected and controlled by the customer.

ATT may review and process Customer Content when reasonably necessary to debug, troubleshoot, secure, maintain, and improve its services for the exclusive benefit of ATT clients. That permission does not allow sale, unrelated research, advertising, or training general-purpose models. Human review remains subject to authorized access controls, including the DepoDash invitation rule. A support or improvement purpose does not bypass that rule.

ATT may analyze service usage, operational statistics, and system performance for those purposes. Aggregation or de-identification is not independent permission for unrestricted reuse of proceeding content. Legally de-identified information will be maintained with legally required safeguards, and ATT will not attempt re-identification contrary to those safeguards.

The ASR restrictions above are specific commitments for ATT-supplied speech engines. Other AI functions may involve different providers and technical arrangements; this Policy does not represent that every provider has identical retention settings. Such providers remain restricted to authorized purposes. Customers needing an additional contractual exclusion or specific processing configuration must obtain ATT’s written acceptance before submitting affected material.

11. Providers and Processing Locations

ATT’s ASR providers include Speechmatics, AssemblyAI, IBM, and Deepgram. Provider and model selection depend on the product and configuration; each provider does not necessarily receive every customer’s content. Other providers used across ATT operations include Amazon Web Services (AWS), DigitalOcean, Zoom, ZoomInfo, OpenAI, Claude, and Nuvei/Paya. Claude is identified here by its service name. The applicable provider entity and deployment can be requested for the relevant service.

ATT uses providers for hosting, storage, backups, communications, conferencing, authentication, payments, analytics, security, support, and speech or AI processing. A provider list is not a statement that every listed company receives proceeding content. Some handle only website, contact, account, or payment data. ATT limits information to the assigned function and applies appropriate contractual and configuration restrictions.

ATT is based in the United States. Processing, storage, backups, and provider operations may occur in the United States and other locations used for the relevant service. This Policy does not promise exclusive United States processing, a particular model, or a particular region. Customers may request current provider, function, content-access, and location information at privacy@procat.com or webmaster@procat.com. Geographic or special vendor restrictions require an accepted written arrangement. ATT may change providers subject to applicable law and controlling notification rights; this notice does not grant a general veto or audit right.

12. Disclosure of Information

ATT discloses information to necessary providers acting on its behalf; users and recipients selected or invited by customers; organizational administrators within their permissions; authorized dealers, shipping providers, and repair or fulfillment partners for the relevant service; and professional advisers where reasonably necessary and subject to appropriate confidentiality. Customer Content is not made public merely because a customer uploads it.

ATT may preserve, access, or disclose information when legally required or when otherwise lawfully necessary to protect security or safety, address fraud, enforce rights, or establish or defend claims. Disclosures will be limited as appropriate to the purpose and law. ATT is not obligated to challenge every legal demand, incur litigation costs on a customer’s behalf, or provide advance notice unless law or an accepted agreement requires it. ATT may notify a customer when legally permitted and appropriate.

Corporate transactions are addressed in Section 25. ATT does not treat every independent vendor as an affiliate or grant an unrestricted license to Customer Content through a general disclosure clause.

13. Cookies and Website Analytics

ATT websites may use session cookies, device-recognition cookies, local storage, functional technologies, pixels, and analytics to support authentication, shopping carts, preferences, security, website performance, traffic measurement, and usability. Information may include technical data and website interactions. Marketing and analytics tools do not authorize unrelated access to proceeding content.

OmniRecord’s account service does not use advertising cookies or account information for advertising. Other ATT websites may have different configurations. Customers may use browser controls and available website preference mechanisms; blocking necessary technologies may affect functionality. ATT obtains consent and provides choices when legally required. Qualifying Global Privacy Control signals are honored where required by law; an ordinary Do Not Track signal is not treated as an equivalent signal unless required.

ATT does not sell Customer Content for money or use it for cross-context behavioral advertising. ATT does not sell Personal Information for monetary compensation and does not knowingly share it for cross-context behavioral advertising. Where an actual website integration constitutes sale or sharing under applicable law, required notices, opt-outs, and preference signals apply regardless of the label given to the vendor relationship.

14. Confidentiality and Security

Customers and applicable rights holders retain ownership of Customer Content. ATT maintains its confidentiality, limits use to authorized purposes described here, and restricts personnel and provider access as appropriate to assigned duties. Confidentiality does not prevent necessary authorized processing, customer-directed disclosure, or lawful disclosure described in this Policy.

ATT uses administrative, technical, organizational, and physical safeguards reasonably designed for the information and system. Hosted customer data is protected with 256-bit encryption in transit and at rest. This is not a promise of end-to-end encryption preventing authorized processing or protection of a customer’s exported copies, ordinary SMS, or independently controlled devices. ATT is not currently SOC 2 certified and does not hold an ATT SOC 2 report. Provider reports, including AWS reports for applicable services, do not establish an ATT-wide certification.

The Customer Data Security Policy explains access controls, customer responsibilities, nightly backups, seven-day backup retention, incident response, and special-data limitations. No system can eliminate all risks. This qualification does not cancel ATT’s express duties or mandatory legal obligations.

15. Active Storage and Customer Instructions

Customers manage content through the product’s active folders, Archive folder, and recycle bin, where available. Active content remains available under the applicable service and account terms until the owner or authorized administrator archives or deletes it, or another disclosed contractual or legal event permits removal. Any feature-specific processing-only or temporary-storage limit will be disclosed separately.

Customers must maintain independent copies needed for official records, evidence, professional duties, or disaster recovery. An active subscription or a backup does not guarantee perpetual access. Account closure, nonpayment, termination, discontinuation, or an agreed service change may affect storage subject to the Terms of Service, applicable notices, and law.

16. Archive Storage

Content moved to the Archive folder is retained without a fixed time limit until deleted by the data owner or authorized administrator, subject to continuing payment of the prevailing disclosed storage fee, the account and service terms, and legal obligations. The Archive folder is customer-requested storage, not ATT’s rotating disaster-recovery backup. Archiving does not itself delete content or trigger seven-day expiration.

When the owner or authorized administrator deletes content from the Archive folder, it is removed from live archive storage. Any remaining copy in ATT’s ordinary nightly backups expires within seven days after that live deletion, subject to the narrow legal-preservation exception in Section 19. Deleting an archived item does not promise a further recycle-bin recovery period.

17. Recycle Bin and the Original Creation Date

Deleting content from an active user folder moves it to the user’s recycle bin. Recycle-bin retention ends no later than 30 calendar days after the original creation date of the corresponding file or job in the platform, not 30 days after it enters the recycle bin. Moving, editing, deleting, or restoring the same item does not by itself restart that original clock. The platform’s original creation record controls that calculation.

Consequently, an item deleted on day 25 may have no more than five days remaining in the recycle bin, and an item already 30 days old when deleted may have no recovery period there. Customers should not assume a full 30-day grace period or rely on the recycle bin as an archive. Available permanent-deletion controls or an authorized verified request may remove content sooner. Recycle-bin availability does not override a legally required deletion deadline.

While content remains in the recycle bin, it remains stored data and may be included in nightly backups. Its backup-removal period begins when it is permanently removed from live storage, including the recycle bin, rather than when it first leaves an active folder.

18. Nightly Backups and Final Removal

ATT performs a nightly backup and retains ordinary backup data for seven days on a rotating basis. After content is permanently removed from live active, archive, and recycle-bin storage, residual copies in ordinary backups are removed through that rotation within seven days. Removal may therefore occur sooner, but live deletion is not a representation that every backup copy disappears simultaneously. ATT does not retain an ordinary deleted-content backup indefinitely for service improvement or a continuing subscription.

Backups are for operational recovery and do not provide a customer-accessible archive or a guaranteed individual restoration service. Protected residual copies are not used for ordinary customer work or unrelated purposes. If a recovery restores deleted information, ATT will apply applicable deletion instructions and restrictions before returning it to ordinary use. A backup may not contain every change made since the preceding backup, and ATT does not promise a zero-data-loss recovery point.

These storage rules do not extend ASR-provider retention: the processing-only restriction in Section 10 applies separately. Copies downloaded by customers or independently retained by recipients are outside ATT’s deletion control. Providers processing information on ATT’s behalf remain subject to applicable deletion instructions, contracts, and law.

19. Necessary Business Records and Legal Preservation

Account, billing, tax, license, warranty, support-history, security, consent, and transaction records are retained for as long as reasonably needed for their disclosed purposes, legal duties, or legitimate claims. They do not automatically share the content-storage periods. ATT will not routinely evade content-deletion rules by copying entire transcripts or recordings into business records. Unneeded information is deleted, destroyed, or lawfully de-identified.

A binding preservation duty or legally necessary hold may require retaining affected content beyond ordinary deletion or backup periods. Any such copy will be restricted to the preservation purpose and retained only while that exception applies. This narrow exception does not authorize an undisclosed routine backup cycle longer than seven days. Where legally permitted and appropriate, ATT will explain an applicable restriction on a deletion request.

20. Privacy Requests Concerning Customer Content

Customers and authorized administrators may use available controls or contact ATT for deletion and account assistance. Requests may require identity, authority, and record verification. A person whose information appears in testimony or an exhibit should ordinarily contact the organization responsible for the proceeding or submitting the content. ATT may refer the request to that customer or assist as law and contract require.

ATT is not necessarily authorized to alter or delete a legal record merely because a person mentioned in it contacts ATT. Applicable legal holds, third-party rights, and the customer’s lawful instructions may affect a request. Mandatory privacy rights and deletion duties are not displaced by storage fees or a customer’s choice to archive material.

21. Individual Privacy Rights

Depending on applicable law and ATT’s role, individuals may request access, a copy or portability, correction, deletion, information about collection and recipients, restriction or objection to processing, withdrawal of consent, or appeal of a denied request. California rights may include opting out of sale or sharing, limiting qualifying uses of sensitive Personal Information, freedom from unlawful discrimination, and the right to fair treatment. These rights are subject to statutory scope, identity verification where permitted, and exceptions. ATT does not condition an unverified opt-out on submitting unnecessary identity documents.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf under applicable state laws. To protect your information, designated agents must provide signed written proof of authorization (such as a valid Power of Attorney or written permission signed by you), and you must verify your own identity directly with ATT when requested.

Use of Sensitive Personal Information: ATT only uses and discloses sensitive Personal Information for exempt business purposes authorized under applicable law (such as performing requested transcription, legal record processing, and necessary security functions), and therefore does not offer a separate right to limit use beyond these operational purposes.

Submit requests to privacy@procat.com; call (800) 966-1221 or 818-222-5010; or write to ATT, Attn: Privacy Officer, 5115 Douglas Fir Road, Suite L, Calabasas, CA 91302. Authorized agents may act with appropriate documentation as outlined above. ATT will verify identity and authority as reasonably necessary, use request information for appropriate verification and compliance purposes, and respond within applicable legal periods. Do not provide passwords or unnecessary sensitive information. ATT will explain a denial and any applicable appeal route when required. Individuals may contact a competent regulator where applicable.

Where California law applies, ATT will acknowledge and respond to requests within the applicable statutory periods, ordinarily confirming receipt of a request to know, correct, or delete within ten business days and responding within 45 calendar days, subject to lawful extensions with notice. Different periods apply to opt-outs and other requests. Exercising a privacy right will never result in unlawful retaliation, denial of goods or services, or discrimination by ATT.

22. California Collection and Disclosure Summary

The categories ATT may collect include identifiers and account details; customer, commercial, and payment-related records; professional information; internet, device, licensing, and security activity; communications; audio and audiovisual information; transcript and proceeding information; and sensitive Personal Information appearing in submitted material. Sections 4 through 8 identify the associated sources. Section 9 states the business purposes, Sections 10 through 13 describe restrictions and recipients, and Sections 15 through 19 state retention periods or criteria.

These categories may be disclosed for the relevant business purposes to the recipients described in Sections 11 and 12, according to their assigned functions. This does not mean every recipient receives every category. Sensitive content is used for requested services and permitted operational or legal purposes, not to infer unrelated personal characteristics for advertising. ATT does not knowingly sell or share the Personal Information of individuals under 16 for cross-context behavioral advertising.

Where law requires an additional notice at collection, an activity-specific disclosure, a reporting-period account of actual practices, or a separate opt-out link, ATT will provide it. A category list is not permission for excessive collection or an assertion that every category is collected from every individual. ATT will review and update this Policy at least as often as applicable law requires.

23. Marketing and Publicity Choices

ATT may send product announcements and other marketing where permitted by law. Customers may unsubscribe using the message instructions or contact privacy@procat.com. ATT will honor the request within applicable legal periods. Necessary account, billing, service, and security messages may continue. OmniRecord account information and verification phone numbers are not used for advertising or marketing texts.

ATT will not use a customer’s logo, identifying marks, or testimonial for promotion without prior written permission. ATT may include an organization’s name in a general customer list unless it requests exclusion in writing. Email privacy@procat.com with the organization and account details to request exclusion; ATT will record and honor the request. Marketing unsubscribe and public customer-list exclusion are separate choices. Internal records and necessary service communications may remain.

24. Text Messages and Children

Where offered and appropriately authorized, transactional texts may include account, order, or verification notices. OmniRecord verification texts are optional, consent is not a condition of purchase, and alternative sign-in methods are available. Message frequency varies and carrier charges may apply. Reply STOP to stop texts or HELP for help. ATT does not sell or share phone numbers or text consent with third parties for their own marketing. Ordinary SMS should not be used for confidential proceeding content.

Hosted professional accounts are intended for adults. Student purchases or use by minors must be arranged through an authorized parent, guardian, or institution as appropriate. ATT does not knowingly collect online information directly from children under 13 without legally required authorization. Contact ATT if such collection is suspected. A minor’s appearance in customer-submitted testimony does not make that minor an account holder; the content is processed for the submitting customer.

25. International Processing and Business Changes

When a legally regulated international transfer applies, ATT will use the required safeguards or lawful transfer mechanism. Merely using the service does not replace a legally required mechanism or consent. Jurisdiction-specific rights apply to the extent legally required; this Policy does not promise suitability for every country or restricted government workflow.

Information may transfer in a merger, acquisition, reorganization, financing, or sale of the relevant business or assets, subject to law and contractual restrictions. A successor’s policies may govern prospectively. Existing clients will be informed of material changes affecting their accounts or content so they can make informed decisions and exercise available export, deletion, or termination rights. The transaction does not automatically erase existing contracts or authorize unlawful retroactive uses. Required consent and nonwaivable protections remain applicable.

26. Policy Changes and Related Agreements

ATT may update this Policy to reflect changes in offerings, providers, practices, or law. The published version will identify its effective or revised date. ATT will email affected account holders about material changes affecting their accounts or content and provide additional notice or obtain consent when legally required. An update does not independently amend an existing paid software license or waive a nonwaivable privacy right.

This Policy and the Customer Data Security Policy are coordinated statements. Specific signed agreements may impose additional lawful duties. Website terms, purchase terms, and product licenses address their respective subjects, but no priority clause permits ATT to misrepresent actual privacy practices or disregard mandatory law. Security details may be withheld where disclosure would create risk, subject to legally required disclosures. Contact ATT for an accessible alternative format.

27. Contact

Advanced Translations Technology, Inc., Attn: Privacy Officer, 5115 Douglas Fir Road, Suite L, Calabasas, CA 91302, United States. Privacy and customer-list requests: privacy@procat.com. Security and support reports: support@procat.com. Provider inquiries may also go to webmaster@procat.com. Telephone: 818-222-5010 or (800) 966-1221. Identify the relevant offering and account without including unnecessary confidential content.