PRIVACY BY DESIGN
Privacy Policy
Last updated: May 08, 2024
Please see our Privacy Snapshot for a high-level overview of our privacy practices.
Welcome to Optave, an innovative organization striving to revolutionize customer support using advanced AI technology. We believe in a future where support systems are so smart and effective that they can identify and solve problems before they are even noticed. We’re working to create a world where customer support teams take pride and dignity in their work, and businesses of all sizes can maintain a zero-issue backlog. This is our commitment to ushering in a new era of seamless, proactive, and extraordinarily effective customer service.
We take your privacy seriously and are committed to protecting your personal information. This Privacy Policy is designed to help you understand what information we collect, why we collect it, and how we use and safeguard it.
Overview
During the initial stages of Optave’s growth, our focus is on advancing our AI technology, integrating with existing CRM systems, and collaborating with company agents. As we continue our journey, we are harnessing the power of AI and human expertise to fundamentally change how businesses manage their customer support. Our approach synergizes AI technology with human talent to create a customer support experience that is efficient, user-friendly, and financially flexible. In this Policy, we refer to these as our “Services”.
The processing of your data is a crucial part of our operation, as it allows us to improve our service, ensure security, and develop a more personalized experience. We understand that your personal data belongs to you and we aim to be transparent about how and why we collect and use it.
Please take a moment to familiarize yourself with our privacy practices and let us know if you have any questions. By using our services, you acknowledge that you have read and understood this Privacy Policy.
1. Introduction
This Privacy Policy from Optave AI Solutions Inc. (“Optave”, “we”, “us”) outlines the types of information we collect from you when you visit our website and interact with our services, and any other sites or services that link to this Privacy Policy (collectively, the “Services“) and how we use, protect, and disclose that information. By using our services, you agree to the terms of this Privacy Policy.
Optave is a Processor, not a Controller, of personal data that we process on behalf of our Clients when they use Optave products and Services. We are a Controller only in circumstances where we have direct contact with you, for example when you Inquire about or engage in commercial transactions with us or when you register for or participate in our webinars, events, programs, marketing, and promotional activities;
This Privacy Policy does not fully applies to content we process on behalf of Clients of our business offerings, such as our APIs. Our use of that data is governed by our customer agreements covering access to and use of those offerings.
“Client” refers to an individual or entity that has entered into a contractual agreement with Optave to utilize its products and Services. The client is bound by the terms and conditions outlined in the contractual agreement, which governs the rights, obligations, and responsibilities of both parties.
2. Information We Collect
Categories of Personal Data Collected | Disclosures of Personal Data |
|---|---|
Identifiers, such as your name, email address, mailing address, phone number, and identifying details of your devices (such as advertising identifiers and IP address). |
|
Commercial information, including preferences, such as purchasing history or tendencies and transactional information, such as banking information. |
|
Demographic information, such as age, gender, occupation and estimated income. |
|
Internet or other electronic network activity information and device information, such as your browsing history, search history, device information, and other information (whether passive browsing or active engagement) regarding your interactions with us and use of our Services or emails. |
|
Geolocation information, such as an estimated location based on your IP address, the location of your mobile device, or location details you supply to us (like the city and state mentioned in a webform). The collection of this data can potentially be managed via your device's settings. |
|
Audio, electronic, visual, and other sensory information, such as CCTV recordings of our premises if you visit our offices, recordings of your interactions with our sales or advocacy teams for quality assurance or training purposes, in accordance with applicable laws, as well as customer support chat or messaging logs. These measures enable us to enhance security, improve service quality, and provide effective assistance to our customers. |
|
Inferences as defined by California law, such as marketing you are likely to react positively to. |
|
Sensitive Personal Data, such as proof of vaccination or race and ethnicity (optional) (where permissible under applicable law). |
|
Disclosure Details
We do not sell or rent your personal information to third parties. We may share your information with third-party service providers to help us improve our website and services, or to comply with legal requirements. Some further details about it:
Service Providers. We may depend on third-party service providers to support the purposes mentioned above. In these instances, third parties may access and process or store personal data on our behalf. These service providers might include hosting services, cloud computing and storage services, maintenance services, security services, and customer support services. Additionally, we may share encrypted forms of names and phone numbers along with limited device data for ad attribution and measurement services. This allows the recipient to recognize your name and phone number only if they have this information from another source already.
Authorities and Other Entities. If we are legally required or deem it necessary, we may disclose personal data to regulatory bodies, law enforcement agencies, courts, and other governmental authorities. This would include the compliance and protection purposes previously described.
Sensitive Data. You may decide to share sensitive information in your conversations with the Services. This may include but is not limited to, your religious beliefs, sexual orientation, political viewpoints, health, racial or ethnic background, philosophical beliefs, or trade union membership. By sharing sensitive data, you agree to our use of it as outlined in this Privacy Policy.
3. How we process and use your information
We employ personal data for the following aims or as otherwise stated at the point of collection:
Purpose of Processing | Lawful Basis (GDPR/LGPD) |
|---|---|
In order to deliver our Products and Services to you, we engage in the following activities: processing and completing transactions, granting you access to our products and services, operating, maintaining, and enhancing our products and services, communicating with you by addressing your support requests and delivering security updates, as well as diagnosing, repairing, and monitoring service and quality-related matters. This may include sending out reminders, updates, security alerts, and support or administrative messages. | Legitimate interests; Contract; Legal obligations |
For our own business purposes, which include the following: maintaining internal business records and conducting internal reporting, collecting payments and performing accounting and similar business functions, auditing and managing projects related to our services, performing IT security management and related tasks, such as administering our technologies and network, evaluating and enhancing our business, services, and digital platforms, conducting research and development for new products and services, and processing your survey and questionnaire responses. | Legitimate interests; Legal obligations |
For legal, safety, or security purposes, we utilize personal data to comply with legal obligations, assert or defend legal claims, safeguard the well-being, security, and reliability of our assets, as well as protect the rights of individuals interacting with us or others. This includes investigating policy violations, identifying and preventing security incidents, and addressing any malicious, deceptive, fraudulent, or unlawful activities. Additionally, we employ personal data to protect our rights, privacy, safety, and property, conduct internal audits for compliance, enforce service terms and conditions, and comply with applicable laws, lawful requests, and legal processes, including responding to subpoenas or requests from government authorities. | Legitimate interests; Legal obligations; Public interest |
In order to promote our products and services, as well as those of our business partners, we engage in marketing activities that involve the following: soliciting or sharing testimonials and feedback about our products and services, sending marketing and promotional communications or product recommendations (via email, phone, or other online and offline channels) regarding our services or those of third parties, facilitating your participation in contests or events, and evaluating ad impressions or implementing contextual ad customization. | Consent (where required by law); Legitimate interests |
Research and Development. We might employ personal data for research and development purposes in line with our legitimate business interests, including analyzing and improving the Services and our business. As part of these activities, we may create or use aggregated, de-identified, or other anonymized data derived from the personal information we gather. We anonymize personal data by removing information that makes the data personally identifiable to you. We may employ this anonymized data and share it with third parties for our lawful business objectives, including analyzing and improving the Services and promoting our business. | Consent (where required by law); Legitimate interests |
When you utilize our referral service to inform a friend about our services, we utilize the information you provide, such as the name, email address, title, and company name, to fulfill the referral request and contact the individual you are referring. It is important to note that you should only provide personal data of others if you have obtained their consent to do so. | Consent (where required by law); Legitimate interests |
For the purpose of personalization, which includes tailoring our products, services, and communications to better meet your specific needs and preferences. This may involve analyzing your interactions with our offerings, such as your usage patterns and preferences, to provide you with customized experiences, recommendations, and targeted content. Implementing personalization allows us to enhance your overall user experience and ensure that our offerings are relevant and valuable to you. | Consent (where required by law); Legitimate interests |
Diversity, equity, and inclusion, such as promoting diversity, equity, and inclusion initiatives and representation within our business (where authorized by applicable law). | Consent (where required by law); Legitimate interests |
Corporate transactions, such as sales, mergers, acquisitions, reorganizations, bankruptcy, and other corporate events. | Legitimate interests; Legal obligations |
When you have voluntarily agreed to have your personal data processed. | Consent |
4. Sources of Personal Data
- Information you provide to us directly, including when you register and communicate with us directly through our Services, visit our offices, or participate in our events, marketing, and outreach activities.
- Information collected from your employer, colleagues, or acquaintances, including information about representatives or other employees of our current, past, and prospective clients, suppliers, investors, and business partners. We may also receive your information from an acquaintance as part of a referral for our Services.
- Information automatically collected, including technical information about your interactions with our Services (such as IP address, browsing preferences, and usage history). More information is available in Section 5 below and in our Cookie Notice.
- Information from public sources, including information from public records and information you share in public forums, such as social media.
- Information from other third parties, including information from third-party service and content providers, entities with whom we partner to sell or promote products and services, and social media networks (including widgets related to such networks).
Optave may combine information that we receive from the various sources described in this Notice, including third-party sources and public sources, and use or disclose it for the purposes identified above.
5. Cookies and Tracking Technologies
We use cookies and other tracking technologies to collect non-personal information and enhance your experience on our website. You may choose to disable cookies in your browser settings, but this may limit your ability to use certain features of our website.
Further details about these technologies can be found at our Cookies Policy document.
Automated data collection
Our team and our service providers may systematically collect and amalgamate information about you, your computer or mobile device, and your ongoing interaction with our Services, online resources and our communications. This includes:
- Device-specific data such as your computer’s or mobile device’s operating system type and version, maker and model, browser type, screen resolution, type of device (like phone or tablet), IP address, unique identifiers, language settings and general location data such as city, state or geographic area.
- Online behavior data like the pages or screens you browsed, the duration of your visit on a page or screen, the website you visited prior to using the Services, navigation routes between pages or screens, details about your activity on a page or screen, times of access, length of access, and whether you have viewed or interacted with our communications.
6. Data Security
We take data security seriously and have implemented high-level security measures, including encrypted servers, secure databases, and strict access controls, to protect your personal information from unauthorized access, disclosure, alteration, or destruction. This includes in-house measures that restrict personal information access to a select group of specialized employees tasked with enhancing the security or quality of our Services. We also anonymize sensitive data, such as conversational logs, whenever feasible and suitable, to uphold user privacy.
7. Links and Content from Third Parties
Please note that our Services may contain links or content from third parties not owned or controlled by Optave. Any information you provide to these third parties is subject solely to their terms of service, privacy policies, and other applicable terms. We recommend you understand these terms before interacting or sharing your data with these third parties.
8. Privacy Rights and Choices
Account Deletion. Should you wish for us to delete your account, you can make a request by reaching out to us as detailed in the “Contact Us” section below.
SMS Messaging Opt-out. If you prefer not to receive text messages from Optave, respond STOP to any mobile message we send. Please be aware that doing so may prevent us from sending one-time codes to your phone and might limit your user experience. If you wish to only disable all messages except these codes, respond PAUSE to any mobile message from us.
Opting out of Online Tracking Technologies. You have the option to opt out of third-party cookies as outlined in our Cookies Policy.
Requests Regarding Personal Information. We present choices that influence how we manage the personal information under our control. Based on your location and your interaction with our Services, more information about your rights and types of requests can be found at our Data Requests page.
9. Data Retention and Security
In compliance with relevant laws, we store personal data only for the duration necessary to accomplish the purposes for which it was collected and processed, as per our retention policies, and in accordance with legal and regulatory obligations or until your consent is withdrawn (where applicable).
When setting the suitable retention period for personal data, we take into account the quantity, type, and sensitivity of the personal information, the possible risk of damage from unauthorized usage or disclosure of personal data, the reasons for utilizing the personal data and the possibility of fulfilling those reasons through alternative methods, as well as the related legal and regulatory stipulations.
We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email.
10. Sub-processors and International Data Transfers
You will be supplying personal information directly to our Services hosted on servers in the United States. Although our company is based in Canada, we may also move personal data to our affiliates, partners, and service providers in the United States and other jurisdictions.
We utilize sub-processors to provide our Services. To understand our policies regarding sub-processors and who they are, please access our Sub-processor Policy
EEA, Switzerland, and the U.K Data:
Whenever we store or transfer your personal information outside the EEA and the UK, we will do so under applicable law, and we will ensure a similar degree of protection is afforded to it by implementing appropriate safeguards. Transfers of personal information are made:
- To a country recognized by the European Commission as providing an adequate level of protection; or
- To a country which does not offer adequate protection but whose transfer has been governed by the standard contractual clauses of the European Commission or by implementing other appropriate cross-border transfer solutions to provide adequate protection.
11. Job Applicants
When you apply for a job, we gather the information you submit. This includes but is not limited to your professional and personal contact details, professional qualifications and skills, academic background and work experience, and other details typically found in a resume. If you voluntarily provide it, this may also involve diversity-related information. We utilize this data based on our legitimate business interests to streamline our recruitment processes and manage employment applications. This includes evaluating a job applicant for a potential role, tracking recruitment statistics, and responding to surveys. Additionally, we may use this information to enhance the administration of our Services and as required to (i) adhere to relevant laws or respond to subpoenas or warrants served on us, (ii) safeguard and defend our or others’ rights or property, (iii) assist with a legal investigation, and (iv) investigate or help prevent any potential violation of the law, this Privacy Policy or our Terms of Service.
12. Children's Privacy
Our Services are not intended for minors under the age of 18. We do not knowingly collect or solicit personal information from minors under the age of 18. If you are a minor under the age of 18, please do not attempt to use our Services, register an account with us, or send any personal information to us.
If you believe that a minor under the age of 18 has provided personal information to us or is otherwise using our Services, please let us know immediately at one of the contact forms listed in the “Contact Us” section of this term, and we will seek to delete this information and revoke access as quickly as possible.
13. External Links
When interacting with us, you may encounter links to external sites or other online services, including those embedded in third-party advertisements. We do not control and are not responsible for privacy and data collection policies for such third-party sites and services. You should consult such third parties and their respective privacy notices for more information or if you have any questions about their practices.
14. Financial Incentives
Optave may provide benefits or offerings in exchange for your personal data, such as discounts or coupons for individuals who participate in surveys. During these surveys, we may collect personal information, including your name, contact details, preferences, experiences, beliefs, opinions, and responses to survey questions. Your participation in surveys is subject to the specific terms and conditions outlined for each survey, which will explain any associated financial incentives and the process of participation. The value of your data is equivalent to the value of the offered benefit, calculated based on the expenses associated with it. You have the option to withdraw from any financial incentive at any time by sending an email to [email protected]. If we introduce different financial incentives, we will provide you with the relevant details for each offer when inviting you to participate.
15. Supplemental Information for Specific Regions
In the event of any conflict or inconsistency between the other parts of the Notice and the terms of this Section 15, Section 15 shall govern and prevail with regard to the processing of Personal Data for these regions, to the extent applicable.
Australia: Personal data gathered, stored, utilized, and/or processed by Optave, as outlined in this Notice, aligns with the Australian Privacy Act 1988 (Commonwealth) and the Australia Privacy Principles. If you are discontented with our handling of a complaint or disagree with the resolution we propose, you can lodge a complaint with the Office of the Australian Information Commissioner (“OAIC”) by using the methods listed on their website. Alternatively, you can request us to pass on the details of your complaint to the OAIC directly.
Brazil: Personal data gathered, stored, utilized, and/or processed by Optave, as outlined in this Notice, aligns with the Lei Geral de Proteção de Dados (“LGPD”). Individuals using or accessing our Sites or Services give their express consent to the collection, use, storage, and processing of their personal data by us for the purposes described in this Notice.
Canada: Personal data, as defined in the Personal Information Protection and Electronic Documents Act (“PIPEDA”) will be gathered, stored, utilized, and/or processed by Optave in line with our obligations under PIPEDA.
EEA, Switzerland, and the U.K.: Personal data gathered, stored, utilized, and/or processed by Optave, as outlined in this Notice, aligns with the General Data Protection Regulation (GPDR). EEA stands for European Union Member States, Iceland, Liechtenstein, and Norway. Your have rights regarding your data listed at our Data Rights & Requests page, you can exercise these rights at the same page.
Japan: Personal data gathered, stored, utilized, and/or processed by Optave, as outlined in this Notice, aligns with Japan’s Act on the Protection of Personal Information (“APPI”).
Korea: Personal data gathered, stored, utilized and/or processed by Optave, as outlined in this Notice, aligns with PIPA (Personal Information Protection Act). International Transfers and sharing information can be found at our Sub-processor Policy document.
Nevada: We currently do not sell personal data as defined under Nevada law. If you are a Nevada resident, you may still email us using the information above to exercise your right to opt-out of sale under Nevada Revised Statutes §603A et seq.
New Zealand: Personal data gathered, stored, utilized, and/or processed by Optave, as outlined in this Notice, aligns with New Zealand’s Privacy Act 2020 and its 13 Information Privacy Principles (“NZ IPPs”).
Singapore: Personal data gathered, stored, utilized, and/or processed by Optave, as outlined in this Notice, aligns with our obligations under the Personal Data Protection Act 2012 (“PDPA”).
United Kingdom: Personal data gathered, stored, utilized, and/or processed by Optave, as outlined in this Privacy Notice, aligns with our obligations under the UK Data Protection Act 2018, as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019, as amended, superseded or replaced (“U.K. GDPR”).
Virginia, Connecticut and Colorado: This Multi-State Privacy Statement is provided according to applicable state laws and applies to Virginia, Connecticut, and Colorado residents, and supplements our overall Statement with additional disclosures and rights.
16. Supplemental Information for California Residents
Authorized Representatives: Representatives with authorization may invoke data protection rights of Californians, however, we reserve the privilege to confirm the identity of the individual as outlined above. Representatives with authorization must reach out to us by sending a request through our online form and specifying that they are making the request as a representative. We may ask the representative to show proof of their authority to act on your behalf, such as a signed permission from you. Additionally, we may require you to authenticate your identity directly with us or directly affirm to us that you granted the authorized representative permission to make the request.
Data Rights and Requests: California residents have certain rights guaranteed by the California Consumer Privacy Act (“CCPA”) and subject to legal limitations. In order to know and exercise these rights, please consult our Data Rights & Requests page.
Optave does not engage in the intentional sale or sharing of personal data belonging to individuals under the age of 16. We also refrain from collecting or processing “sensitive personal information,” as defined by California law, for the purpose of inferring characteristics about you. Any usage of sensitive personal information by Optave aligns with the exceptions provided under the right to limit sensitive personal information.
Categories of Third Parties to Whom Personal Data is “Sold or Shared”: Optave does not sell personal data or have ever sold in the past, although we share personal data as defined under California law with companies that operate Cookies and Tracking Technologies, described in Section 5, such as marketing and advertising partners from the following categories, described in detail at Section 2: Identifiers, Geolocation Information and Internet or other electronic network activity information and device information.
17. Supplemental Information for Korea
Purpose and Retention of Information Collected
Type of personal data | Purpose and use | Retention Period |
|---|---|---|
Contact Information, including email address, name, postal address, telephone number, username (Optional) | The Contact Information, including email address, name, and username, is collected primarily to identify the user and facilitate communication. This allows us to provide personalized customer support, address inquiries or complaints, deliver service-related notifications, and update users on changes in our services, policies, or terms of use. The information is also used for account creation and management, user authentication, and prevention of unauthorized access or fraud. | The contact information is retained for as long as the user account is active or as needed to provide our services. Post that, it is stored only for the duration required to comply with our legal obligations, resolve disputes, and enforce our agreements. In accordance with PIPA regulations, we will seek renewed consent from the user if the data is required beyond the stipulated period. |
User submitted content ,to the extent that it contains personally identifiable attributes. (Optional) | User submitted content is used to provide and improve our services, respond to user requests or inquiries, provide support, and enhance user experience. This data may also be utilized for community interaction, user engagement, product/service development, and trend analysis. In case the content contains personally identifiable attributes, these may be used for user identification and communication, as well as to provide personalized service. | User submitted content is retained for as long as it is necessary to fulfill the purposes outlined, or for a period specifically required or allowed by applicable regulations or laws. If the user deletes their account or requests the deletion of this content, it will be removed from active databases but may remain in our backups until they are scheduled to be deleted in accordance with our data retention policy. |
IP and/or browser/device data (Mandatory) | IP addresses, browser, and device data are collected primarily to ensure the proper functioning and security of our services. This information helps us understand the user's hardware, software, and network, enabling us to optimize our services for different systems and detect any potential technical issues. It also allows us to provide a personalized user experience, like adjusting the interface based on the user's device or browser. Additionally, IP and device data are crucial in identifying and preventing fraudulent activities and securing users' accounts. | IP and/or browser/device data is retained for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. In line with the principle of data minimization and to protect user privacy, data that is no longer needed for its initial purpose is either deleted or stored in an anonymized form that does not permit identification of users. |
Session and location data and online activity , such as content viewed, how you interacted with our website(s), pages visited and searches. (Mandatory) | Session and location data, along with online activity, are collected to provide a customized and responsive service, enhance user experience, and improve our website and services. This data helps us understand user preferences, behavior, and interaction with our services, which is crucial for feature development, service improvement, and user engagement. Location data can help provide location-based services or content. In addition, these data points are used for analytics, research, and reporting purposes. Lastly, they contribute to the security of the service by helping identify and prevent unauthorized access or potential fraudulent activities. | Session, location data, and online activity are retained for as long as necessary to achieve the purposes for which they were collected. This includes fulfilling legal, contractual, or reporting obligations, or as long as required for business analysis, improving user experience, and maintaining the security of our services. After this period, the data is either deleted or anonymized. |
Location data (Optional) | Location data, when provided by the user, is used to offer personalized services, content, or recommendations based on the user's geographical area. It can help enhance user experience by providing relevant local information or services. This data might also be used for demographic analysis, trend identification, or improving the scope and reach of our services. In addition, in some cases, location data might contribute to maintaining the security of the service by helping identify unusual activities that might indicate potential fraudulent behavior. | Location data is retained for as long as necessary to fulfill the purposes for which it was collected. This includes time required for providing personalized services, for business analysis, or for satisfying any legal, contractual, or reporting obligations. After this period, the data is either deleted or anonymized. |
18. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Any changes will be posted on this page, unless required by law to provide an alternative notice, and we will update the “Last Updated” date at the top of this Privacy Policy. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
19. English Version Translations
Translations of this notice in languages other than English are provided solely for convenience. In case of any uncertainty or discrepancy between translations, the English version takes precedence and governs, being authoritative.
20. Contact Us
Responsible entity. Optave Ai Solutions Inc. is the entity responsible for processing personal information under this Privacy Policy (as a controller, where provided under applicable law).
If you have any questions or concerns regarding this Privacy Policy, please contact us using our contact form.
Data Protection Officer:
Carolina Almeida Bury
[email protected]
Optave AI Solutions Inc.
#500, 602 12 Ave SW, Calgary AB – Canada, T2R 1J3
EU/GDPR Representation Services:
We have data protection representation services located both in Germany and UK, in order to contact them send a message to:
[email protected]
Korean Representation Services:
We have data protection representation services located both in Korea, in order to contact them send a message to:
[email protected]
Privacy Snapshot
The table below gives a quick look at how we handle privacy. But to understand fully, you should read the whole Privacy Policy.
Item | Is collected? | How is collected | Primary purpose of processing | Key recipients / Disclosures | Can you limit sharing? |
|---|---|---|---|---|---|
Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name | Yes | When you visit or use our Services; from third-party sites and services; when you apply for a job with us | To provide our Services; to improve, monitor, and personalize our Services; to communicate with you; to process your job application | Service providers | No |
Characteristics of protected classifications under CA or federal law | Yes | When you apply for a job with us | To process your job application | Service providers | No |
Commercial information, including but not limited to records of personal property, products or services purchased, obtained or considered | Yes | When you visit or use our Services | To provide our Services; to improve, monitor, and personalize our Services | Service providers | No |
Personal information categories listed in the CA Customer Records Statute (e.g., name, contact details) | Yes | When you visit or use our Services; from third-party sites and services; when you apply for a job with us | To provide our Services; to improve, monitor, and personalize our Services; to communicate with you; to process your job application | Service providers | No |
Biometric information | No | N/A | N/A | N/A | N/A |
Internet or other electronic network activity information, including information regarding a consumer’s interaction with a website | Yes | When you visit or use our Services | To provide our Services; to improve, monitor, and personalize our Services | Service providers | No |
Geolocation data | Yes | When you visit or use our Services | To provide our Services; to improve, monitor, and personalize our Services | Service providers | No |
Audio, electronic, visual, thermal, olfactory or similar information | Yes | CCTV recordings of our premises if you visit our offices, recordings of your interactions with our sales or advocacy teams | Quality assurance or training purposes, enhance security, improve service quality. | Service providers | N/A |
Professional or employment-related information | Yes | When you apply for a job with us | To process your job application | Service providers | No |
Education information, defined as information that is not publicly available personally identifiable information as defined in FERPA | No | N/A | N/A | N/A | N/A |
Inferences drawn from information identified to create a profile about a consumer | Yes | When you visit or use our Services | To provide our Services; to improve, monitor, and personalize our Services | Service providers | No |
Sensitive personal information, such as proof of vaccination or race and ethnicity (as defined in CA Civil Code 1798.140 (ae)) | Yes | When you visit or use our Services; when you apply for a job with us | To provide our Services; to improve, monitor, and personalize our Services; to process your job application | Service providers | No |