| Before | After | ||
|---|---|---|---|
| 0 | Heap Trust Center Over 10,000 businesses trust Heap to power their analytics. | 0 | Heap Privacy Policy | Heap Unlock 2026 Benchmark data → Get end-to-end journey insights to stay ahead. |
| 1 | Maintaining that trust is our paramount concern. | 1 | Get the Report skip to content Loading... |
| 2 | This page gives you access to relevant information regarding our approach to privacy, security, and compliance. | 2 | Toggle Main Navigation Why Heap Why Product Analytics And what can it do for you? |
| 3 | Categories Trust Portal Sub-Processors List Privacy Policy Cookie Policy Data Subjet Request Sample Cookie Description Heap's Status Heap Privacy Policy Last Updated: September, 2024 Global Privacy Policy European Privacy Policy Data Privacy Framework Notice California Privacy Notice HEAP GLOBAL PRIVACY POLICY Welcome and thank you for your interest in Heap Inc., a member of the Contentsquare Group of companies, who are listed at this link , (“ Heap ”, “ we ”, “ our ” or “ us ”). | 3 | How Heap Works A video guide How Heap Compares Heap vs. competitors Product Analytics + Digital Experience Analytics A deeper dive Benchmark 2026 Report Explore benchmark data Watch a Demo Platform Data Insights Journeys Visual maps of all user flows Sense AI Analytics for everyone Web Analytics Integrate key web metrics Session Replay Complete context with a single click Heatmaps Visualize user behavior instantly Heap Illuminate Data science that pinpoints unknown friction Data Analysis Segments User cohorts for actionable insights Dashboards Share insights on critical metrics Charts Analyze everything about your users Playbooks Plug-and-play templates and analyses Data Foundation Capture Automatic event tracking and apis Mobile Track and analyze your users across devices Enrichment Add context to your data Integrations Connect bi-directionally to other tools Data Management Governance Keep data clean and trusted Security & Privacy Security and compliance made simple Infrastructure How we build for scale Heap Connect Send Heap data directly to your warehouse Use Cases Solutions Funnel Optimization Improve conversion in user flows Product Adoption Maximize adoption across your site User Behavior Understand what your users do Product Led Growth Manage PLG with data Industries SaaS Easily improve acquisition, retention, and expansion Retail and eComm Increase purchases and order value Healthcare Build better digital patient experiences Financial Services Raise share of wallet and LTV Heap For Teams Product Teams Optimize product activation, conversion and retention Marketing Teams Optimize acquisition performance and costs Data Teams Optimize behavioral data without code Pricing Resources Support Heap University Video Tutorials Help Center How to use Heap Professional Services Resources Down the Funnel Our complete blog and content library Webinars & Events Events and webinar recordings Press News from and about Heap Careers Join us Ecosystem Customer Community Join the conversation Partners Technology and Solutions Partners Developers Customers Stories from over 9,000 successful companies Free Trial Request Demo Log In Free Trial Request Demo Log In This Page Has Moved Heap is now a part of Contentsquare . |
| 4 | Heap is a SaaS product analytics platform. | 4 | To reflect this updated business structure, the Heap Privacy Policy has been consolidated into the Contentsquare Privacy Policy, which is now applicable to the Heap website ( https://heap.io/ ) and SaaS product and related services. |
| 5 | We allow our customers to collect and analyze data about how their visitors are interacting with their website and mobile application to optimize performance of product usage, diagnose problems in our customer’s visitor experience, and correlate our customer’s visitor activity with long-term value. | 5 | You should be redirected to our updated privacy policy automatically. |
| 6 | Heap does this by collecting data on what visitors are doing, including but not limited to what webpages they visit, what visitors click on, where those visitors are located, what browser or platform those visitors are using, and other types of behavioral data. | 6 | If you are not redirected within a few seconds, please visit the Contentsquare Privacy Policy . |
| 7 | When we use the term “ personal information ” in this Privacy Policy, we mean information relating to an identified or identifiable natural person. | 7 | Better insights. |
| 8 | This Privacy Policy explains how information about you is collected, used and disclosed by Heap when you visit our website https://heap.io/ (the “ Site ”), and/or use our SaaS product and related services (collectively, the “ Service ”). | 8 | Faster. |
| 9 | Heap as a Data Controller: For purposes of data protection laws, Heap Inc., a company duly incorporated and organized under the laws of United States of America, having its registered address at 225 Bush St. 2nd Floor, San Francisco, CA 94104, is the “data controller” and is generally responsible for and controls the processing of your personal information collected through your use of our Service. | 9 | Request Demo Platform Capture Enrichment Integrations Governance Security & Privacy Infrastructure Heap Illuminate Segments Charts Dashboards Playbooks Use Cases Funnel Optimization Product Adoption User Behavior Product Led Growth Customer 360 SaaS Retail and eComm Financial Services Why Heap Why Product Analytics How Heap Works How Heap Compares CRO Analyzer Benchmark 2026 Report Resources Blog Content Library Events Topics Heap University Community Professional Services Company About Partners Press Careers Customers DEI Support Request Demo Help Center Contact Us Pricing Social © 2026 Heap Inc. |
| 10 | This Privacy Policy applies only to instances where Heaps acts as a data controller. | 10 | All Rights Reserved. |
| 11 | Heap as a Data Processor: Wherever our customers use our Service to submit, manage, or otherwise use content relating to our customers’ end users during the provision of our Service, we act as a “data processor” and have contractually committed ourselves, including by signing data processing agreements, to only process such information on behalf and under the instruction of the respective customer, who is the data controller, and as provided for under the contractual agreements we sign with them. | 11 | Legal Privacy Policy Status Trust |
| 12 | As such, this Privacy Policy does not apply to such processing. | — | Removed |
| 13 | GLOBAL APPLICABILITY AND REGION-SPECIFIC DISCLOSURES This Privacy Policy is designed to apply to our Site visitors, users of our Service and other companies and users on a global basis. | — | Removed |
| 14 | We may choose or be required by law to provide additional disclosures relating to the processing of personal information in certain countries, regions or states. | — | Removed |
| 15 | Please refer below for disclosures that may be applicable to you: California: If you are a California resident, please see the Privacy Disclosures for California Residents section below for additional California-specific privacy disclosures, including the categories of personal information we process, our “sale” / “sharing” disclosures, and your rights under California law. | — | Removed |
| 16 | Nevada: Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. | — | Removed |
| 17 | Note we do not sell your personal information within the meaning of Chapter 603A. | — | Removed |
| 18 | However, if you would still like to submit such a request, please submit a request via our Data Subject Request Webform . | — | Removed |
| 19 | European Economic Area, United Kingdom or Switzerland: If you are located in the European Economic Area (“ EEA ”), United Kingdom or Switzerland, or otherwise engage with Heap’s European operations, please see the Privacy Disclosures for the European Economic Area, United Kingdom and Switzerland section below for additional European-specific privacy disclosures, including what constitutes your personal data, the lawful bases we rely on to process your personal data, and your rights in respect of your personal data. 1. | — | Removed |
| 20 | INFORMATION WE COLLECT AND OUR USE We collect personal information in connection with your visits to and use of our Site and Service. | — | Removed |
| 21 | This collection includes information that you provide to us, information from third parties, and information that is collected automatically such as through the use of cookies and other technologies. | — | Removed |
| 22 | Information That You Provide We collect personal information from you. | — | Removed |
| 23 | The categories of information we collect can include: Service Inquiries, Free Trial, or Demo Requests. | — | Removed |
| 24 | We may collect personal information that you provide when you inquire about our Service or request a free trial or demo. | — | Removed |
| 25 | This information may include your business information, including your first name, last name, email, phone number, company, company size, industry type, and any other information you provide, including your interests in relation to our Service or applicable business information. | — | Removed |
| 26 | We use this information to communicate with you about your inquiry or interests, provide the free trial or demo, or schedule an information call to discuss our Service. | — | Removed |
| 27 | Registration information. | — | Removed |
| 28 | We collect personal and/or business information that you provide when you register for an account to use our Service. | — | Removed |
| 29 | This information may include your name, email, and password. | — | Removed |
| 30 | We use this information to administer your account, provide you with the relevant services and information, communicate with you regarding your account, the Service, and for customer support purposes. | — | Removed |
| 31 | Payment information. | — | Removed |
| 32 | If you sign up for our Service, we collect the information provided in connection with your payment. | — | Removed |
| 33 | Please note that we use third party payment processors to process payments made to us. | — | Removed |
| 34 | As such, we do not retain any personally identifiable financial information such as credit card numbers. | — | Removed |
| 35 | Rather, all such information is provided directly by you to our third-party processor. | — | Removed |
| 36 | The payment processor’s use of your personal information is governed by their Privacy Policy. | — | Removed |
| 37 | Marketing Emails and Blog Subscription. | — | Removed |
| 38 | If you consent to receive marketing emails from us, or subscribe to our blog, we collect your personal information, and applicable interests and communication preferences in order to send you regular updates about the Service and other information about Heap. | — | Removed |
| 39 | We use this information to manage our communications with you and send you information about products and services we think may be of interest to you. | — | Removed |
| 40 | To unsubscribe from marketing emails, please follow the instructions within our messages and review the Control Over Your Information section below. | — | Removed |
| 41 | Note that you cannot unsubscribe from certain services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices). | — | Removed |
| 42 | Communications. | — | Removed |
| 43 | If you communicate with us through any paper or electronic form, we may collect your name, email address, mailing address, phone number, or any other personal information you choose to provide to us. | — | Removed |
| 44 | We use this information to investigate and respond to your inquiries, and to communicate with you, to enhance the services we offer to our users and to manage and grow our organization. | — | Removed |
| 45 | Events, Surveys, and Promotions. | — | Removed |
| 46 | If you fill out any forms relating to Heap events, surveys, contests, sweepstakes, or other promotional events, we collect your contact and demographic information, and any other information requested on the form or at sign up. | — | Removed |
| 47 | We use this information to fulfill the purpose of the form or sign up, facilitate the event, survey, contest, sweepstakes, and promotion, and, if you consent, to inform you about future programs that may be of interest to you. | — | Removed |
| 48 | Employment Applications. | — | Removed |
| 49 | If you apply for employment, we collect your contact and demographic information, educational and work history, employment interests, information obtained during interviews and any other information you choose to provide. | — | Removed |
| 50 | We use the information provided to evaluate your candidacy for employment, to communicate with you during the application process, to facilitate the onboarding process, and, if you consent, to consider your application for alternative positions. | — | Removed |
| 51 | You are free to choose which personal information you want to provide to us or whether you want to provide us with personal information at all. | — | Removed |
| 52 | However, some information, such as your name, address, payment transaction information, and information on your requested services may be necessary for the performance of our contractual obligations. | — | Removed |
| 53 | Automatic Data Collection We and our third-party providers and partners collect certain personal information automatically when you visit or interact with our Site and Service: Log Data : Including your internet protocol (IP) address, operating system, browser type, browser ID, the URL you entered and the referring page/campaign, date/time of your visit, the time you spent on our Service and any errors that may occur during your visit. | — | Removed |
| 54 | Please note that our systems may also record personal information that you type into our websites and Service even if you do not choose to submit it. | — | Removed |
| 55 | Analytics Data : Including the electronic path you take to our Service, through and when exiting our Service, as well as your usage and activity on our Service, such as the links, objects, products and benefits you view, click or otherwise interact with (also known as “ Clickstream Data ”). | — | Removed |
| 56 | Our emails may also contain tracking pixels that identify if and when you have opened an email that we have sent you, how many times you have read it and whether you have clicked on any links in that email. | — | Removed |
| 57 | This helps us measure the effectiveness of our marketing email campaigns, make the emails we send to you more relevant to your interests and to understand if you have opened and read any important administrative emails we might send you. | — | Removed |
| 58 | Location Data : Including your general geographic location based on the Log Data we collect. | — | Removed |
| 59 | Application Data : Some of our services offer mobile or browser applications to allow you to take advantage of our service offerings on the go and/or when visiting third-party websites and other online services. | — | Removed |
| 60 | Certain of these applications also allow us to access more precise Location Data about you and collect information about your use and interactions with third-party websites and online services (including the products or services you are interested in or purchase) to better serve you. | — | Removed |
| 61 | For information about our, and our third-party providers and partners’, use of cookies and related technologies to collect information automatically on our online services, and the choices you may have in relation to those practices, please visit our Cookies Policy here . | — | Removed |
| 62 | Information from Third Party Sources We may receive personal information about you from our business partners and service providers and combine this information with other data we collect from you. | — | Removed |
| 63 | The third parties may include website and service operators, payment processors, marketing partners, and shipping providers. | — | Removed |
| 64 | The information may include contact information, demographic information, information about your communications and related activities, and information about your purchase orders. | — | Removed |
| 65 | We may use this information to administer and facilitate our Service, your subscriptions, and our marketing activities. | — | Removed |
| 66 | Account Creation / Single Sign-On. We may use single sign-on (" SSO ") to allow a user to authenticate their account through their work email. | — | Removed |
| 67 | We do this by using OAuth authentication (similar methods), a secure mechanism to give Heap access to your account data without letting us know your password. | — | Removed |
| 68 | We will have access to certain information from those third parties in accordance with the authorization procedures determined by those third parties, including, for example, your username, password, name, email address, and profile picture. | — | Removed |
| 69 | We use this information to operate, maintain, and provide to you the features and functionality of the Service. | — | Removed |
| 70 | We may also send you service-related emails or messages (e.g., account verification, purchase confirmation, customer support, changes, or updates to features of the App, technical and security notices). | — | Removed |
| 71 | Social Media. | — | Removed |
| 72 | When you interact with our Site through various social media (LinkedIn, X, Facebook, YouTube), such as when you click on the social media icon on the Site, follow us on a social media site, or post a comment to one of our pages, we may receive information from the social network such as your profile information, profile picture, gender, username, user ID associated with your social media account, age range, language, country, and any other information you permit the social network to share with third parties. | — | Removed |
| 73 | We use this information to provide you with interactive functionalities between our Site and social media networks, as well as to communicate directly with you, such as to send you email messages about the Service that may be of interest to you. | — | Removed |
| 74 | For more information on how the social media networks process your personal information when you use their network, please refer to their respective privacy policies: LinkedIn: LinkedIn Corporation, 1000 W. | — | Removed |
| 75 | Maude Ave. | — | Removed |
| 76 | Sunnyvale, CA 94085, USA; Privacy Policy , Cookie Policy . | — | Removed |
| 77 | X: X Corp., 1355 Market St, Suite 900, San Francisco, CA 94103, USA; Privacy Policy , Cookie Policy . | — | Removed |
| 78 | Facebook: Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; Privacy Policy , Cookie Policy . | — | Removed |
| 79 | YouTube: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA; Privacy Policy , Cookie Policy . | — | Removed |
| 80 | Information from Other Sources. | — | Removed |
| 81 | We may obtain information from other sources, including through third-party information providers, customers, public sources, or through transactions such as mergers and acquisitions. | — | Removed |
| 82 | We may combine this information with other information we collect from or about you. | — | Removed |
| 83 | In these cases, our Privacy Policy governs the handling of the combined personal information. | — | Removed |
| 84 | We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you. | — | Removed |
| 85 | Other Uses of Personal Information In addition to the uses described above, we may collect and use personal information for the following purposes: For our business activities, including to operate the Service and to provide you with the features and functionality of the Service; To communicate with you and respond to your requests, such as to respond to your questions, contact you about changes to the Service, and communicate about account related matters; For marketing and advertising purposes, such as to market to you or offer you with information and updates on our Service we think that you may be interested in. | — | Removed |
| 86 | While we may use your personal information in this manner, please note that we do not use user content to serve you ads, and we will never share user content with any third parties for marketing or advertising purposes, unless you have explicitly submitted it to us for that purpose; For analytics, development, and research purposes to improve, develop, and optimize the use, function, and performance of the Site and Service; To enforce our Master Services Agreement , to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of Heap, you, or third parties; To comply with contractual and legal obligations and requirements, including to respond to privacy requests or requests/communications from regulators, law enforcement authorities, or other governmental officials; To fulfill any other purpose for which you provide personal information; and For any other lawful purpose, or other purpose that you consent to. 2. | — | Removed |
| 87 | HOW AND TO WHOM WE SHARE PERSONAL INFORMATION We may also share, transmit, disclose, grant access to, make available, and provide personal information with and to third parties, as described below. | — | Removed |
| 88 | Service Providers. | — | Removed |
| 89 | We share personal information with third party contractors and service providers who perform services on our behalf, which are subject to reasonable confidentiality terms, and which may include processing payments, providing web hosting services, technology support providers, email communications providers, analytics providers, data storage providers, and web and video hosting providers and developers. | — | Removed |
| 90 | Business Partners. | — | Removed |
| 91 | We may disclose personal information to our business partners for transactional and marketing purposes, including to promote their products or services if you consent. | — | Removed |
| 92 | We may also share your personal information with other third parties who may have products or services we think you may enjoy. | — | Removed |
| 93 | Online Advertising Partners. | — | Removed |
| 94 | We also share personal information with advertising networks or permit these partners to collect information from you directly on our websites to facilitate online advertising, such as search engines and social network advertising providers to serve targeted ads to you or to groups of other users who share similar traits, such as likely commercial interests and demographics, on third-party platforms. | — | Removed |
| 95 | For more information, including how to opt out of interest-based advertising, please see our Cookie Policy here . | — | Removed |
| 96 | Contentsquare Group. | — | Removed |
| 97 | We may share, disclose and transfer your personal information with Contentsquare Group for all purposes mentioned above. | — | Removed |
| 98 | Corporate Transaction. | — | Removed |
| 99 | We may transfer to third-parties any information we collect in the event we sell or transfer all or a portion of our business or assets (including any shares in the company) or any portion or combination of our products, services, businesses and/or assets. | — | Removed |
| 100 | Should such a transaction occur (whether a divestiture, merger, acquisition, bankruptcy, dissolution, reorganization, liquidation, or similar transaction or proceeding), we will use reasonable efforts to ensure that any transferred information is treated in a manner consistent with this Privacy Policy. | — | Removed |
| 101 | Legal Requirements. | — | Removed |
| 102 | We may share your information with third parties, including government authorities or public authorities, courts, intergovernmental or supranational bodies, as required by law or subpoena or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) to enforce our Master Services Agreement or other agreements or to protect the security or integrity of the Heap services, including to prevent harm or financial loss, or in connection with preventing fraud or illegal activity; and/or (c) to exercise or protect the rights, property, or personal safety of Heap, our Customers, visitors, or others. | — | Removed |
| 103 | With Your Consent. | — | Removed |
| 104 | We may disclose your information publicly or with another third party with your prior authorization. 3. | — | Removed |
| 105 | HOW LONG WILL WE STORE YOUR INFORMATION We will usually keep the personal information we collect about you for no longer than necessary for the purposes set out in Section 1, in accordance with our legal obligations and legitimate business interests. | — | Removed |
| 106 | The criteria used to determine the period for which personal information about you will be retained varies depending on the legal basis under which we process the personal information: Legitimate Interests. | — | Removed |
| 107 | Where we are processing personal information based on our legitimate interests, we generally will retain such information for a reasonable period of time based on the particular interest, taking into account the fundamental interests and the rights and freedoms of data subjects. | — | Removed |
| 108 | Consent. | — | Removed |
| 109 | Where we are processing personal information based on your consent, we generally will retain the information until you withdraw your consent, or otherwise for the period of time necessary to fulfill the underlying agreement with you or provide you with the applicable service for which we process that personal information. | — | Removed |
| 110 | Contract. | — | Removed |
| 111 | Where we are processing personal information based on contract, we generally will retain the information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations for legal claims that could arise from the contractual relationship. | — | Removed |
| 112 | Legal Obligation. | — | Removed |
| 113 | Where we are processing personal information based on a legal obligation, we generally will retain the information for the period of time necessary to fulfill the legal obligation. | — | Removed |
| 114 | Legal Claim. | — | Removed |
| 115 | We may need to apply a “legal hold” that retains information beyond our typical retention period where we face a threat of legal claim. | — | Removed |
| 116 | In that case, we will retain the information until the hold is removed, which typically means the claim or threat of claim has been resolved. | — | Removed |
| 117 | In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal information, as well as the potential risk of harm from unauthorised use or disclosure of your personal information. 4. | — | Removed |
| 118 | CONTROL OVER YOUR INFORMATION Email Communications. | — | Removed |
| 119 | From time to time, we may send you emails regarding updates to our Service, products or services, notices about our organization, or information about products/services we offer (or promotional offers from third parties) that we think may be of interest to you. | — | Removed |
| 120 | If you wish to unsubscribe from such emails, simply click the “unsubscribe link” provided at the bottom of the email communication. | — | Removed |
| 121 | Note that you cannot unsubscribe from certain services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices). | — | Removed |
| 122 | Modifying Account Information. | — | Removed |
| 123 | If you have an online account with us, you have the ability to modify certain information in your account (e.g., your contact information) through the [“profile,” “account,” “settings,” or “preferences”] options provided on the Site. | — | Removed |
| 124 | If you would like to request access to, or correction or deletion of personal information, you may send your request to us at the email provided below. . | — | Removed |
| 125 | How to Control Push Notifications. | — | Removed |
| 126 | You can stop receiving push notifications from us by changing your preferences in the iOS or Android notifications settings menu. 5. | — | Removed |
| 127 | LINKS TO THIRD-PARTY WEBSITES AND SERVICES For your convenience, our Service may provide links to third-party websites or services that we do not own or operate. | — | Removed |
| 128 | We are not responsible for the practices employed by any websites or services linked to or from our Service, including the information or content contained within them. | — | Removed |
| 129 | Your browsing and interaction on any other website or service are subject to the applicable third party’s rules and policies, not ours. | — | Removed |
| 130 | If you are using a third-party website or service, you do so at your own risk. | — | Removed |
| 131 | We encourage you to review the privacy policies of any site or service before providing any personal information. 6. | — | Removed |
| 132 | CHILDREN’S PRIVACY Our services are not intended for children under the age of 16. | — | Removed |
| 133 | We do not knowingly solicit or collect personal information from children under the age of 16. | — | Removed |
| 134 | If we learn that any personal information has been collected inadvertently from a child under 16, we will delete the information as soon as possible. | — | Removed |
| 135 | If you believe that we might have collected information from a child under 16, please contact us via our Data Subject Request Form here . 7. | — | Removed |
| 136 | CHANGES TO PRIVACY POLICY We reserve the right to change this Privacy Policy from time to time in our sole discretion. | — | Removed |
| 137 | We will notify you about material changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our Site, or through other appropriate communication channels. | — | Removed |
| 138 | It is your responsibility to review this Privacy Policy periodically. | — | Removed |
| 139 | All changes shall be effective from the date of publication unless otherwise provided. 8. | — | Removed |
| 140 | CONTACT US For additional inquiries about this Privacy Policy, please send us an email at privacy@contentsquare.com or contact us at: Heap, Inc. 53 Beach St, 6th Floor, New York, NY 10013 Data Protection Officer: Nicole Mazanitis privacy@contentsquare.com PRIVACY POLICY FOR THE EUROPEAN ECONOMIC AREA, UNITED KINGDOM AND SWITZERLAND This Privacy Policy governs how Heap processes personal data of individuals located in the European Economic Area (“ EEA ”), United Kingdom (“ UK ”) and Switzerland (collectively, “ Europe ”) that are visiting our Site or use our Service in accordance with data protection laws in Europe (hereafter “ European Privacy Policy ”). | — | Removed |
| 141 | When we use the term “personal data” in this section, we mean information relating to an identified or identifiable natural person. | — | Removed |
| 142 | Capitalized terms that are not defined in this European Privacy Policy have the meaning given them in our Global Privacy Policy above including any relevant agreement, policy, or addendum incorporated therein and any amendments or modifications thereto. | — | Removed |
| 143 | In the event of a conflict between the Global Privacy Policy and this European Privacy Policy, this Policy supersedes the Global Privacy Policy. 1. | — | Removed |
| 144 | OUR RELATIONSHIP TO YOU Heap, Inc., a member of the Contentsquare Group of companies, who are listed at this link , (“ Heap ”, “ we ”, “ our ” or “ us ”), is a company duly incorporated and organized under the laws of United States of America, having its registered address at 53 Beach St, 6th Floor, New York, NY 10013 . | — | Removed |
| 145 | Heap’s Data Protection Office (“ DPO ”) may be contacted at privacy@contentsquare.com . | — | Removed |
| 146 | In order for you to understand Heap’s obligations and your rights to your personal data under this Policy, it is important to identify the relationship you have with Heap: A “Visitor” is an individual providing personal data to us via our Site. | — | Removed |
| 147 | Heap acts as a data controller in this relationship. | — | Removed |
| 148 | A “Customer” is a prospect, lead, potential customer, customer or customer’s employee, agent or independent contractor providing personal data to us in connection with our Service and communications with Heap. | — | Removed |
| 149 | Heap acts as a data controller in this relationship. | — | Removed |
| 150 | A “User” is a customer’s employee, agent or independent contractor providing personal data to us in connection with our Service. | — | Removed |
| 151 | Depending on the purpose of processing (see Section 3 below), Heap acts as either a data controller or data processor in this relationship. | — | Removed |
| 152 | A “Customer’s Visitor” is an individual that provides personal data to our Customer when using our Service. | — | Removed |
| 153 | Heap does not have a direct relationship with the Customer’s Visitor. | — | Removed |
| 154 | Depending on the purpose of processing (see Section 3 below), Heap acts as either a data controller or data processor in this relationship. | — | Removed |
| 155 | For more information about how personal data is handled by our Customer as a data controller, please review our Customer’s privacy policy and contact them directly. | — | Removed |
| 156 | Hereinafter we may refer to Visitor, Customer and User collectively as “you.” 2. | — | Removed |
| 157 | NOTICE Heap provides notice to you through posted privacy policies and may provide additional “just-in-time” disclosures about the data collection, use, and sharing practices of specific Service. | — | Removed |
| 158 | The Global Privacy Policy generally describes our privacy practices, while this Policy is specific to Visitors and Customers located in Europe. | — | Removed |
| 159 | As a data processor, Heap is not able to provide notice to or obtain consent from Customer’s Visitor. | — | Removed |
| 160 | To the extent required by law, Heap supports Customers’ data-protection compliance efforts, but it is up to Customer to ensure the appropriate data protection safeguards are in place before processing personal data from Customer’s Visitor. 3. | — | Removed |
| 161 | TYPES OF PERSONAL DATA COLLECTED AND PURPOSES OF PROCESSING 3.1 PERSONAL DATA WE COLLECT DIRECTLY FROM YOU We collect the categories of personal data that you voluntarily submit directly to us when you use the Service, as set forth in our Global Privacy Policy under the Section 1 Information We Collect and Our Use . | — | Removed |
| 162 | The table below sets out in detail the categories of personal data we collect about you and how we use that information when you use the Service, as well as the legal basis which we rely on to process the personal data. | — | Removed |
| 163 | Category of Personal Data Purpose of Processing Legal Bases for Processing Business contact information , such as first name, last name, job title, email address and password, company, company size, industry type, any other information you provide. | — | Removed |
| 164 | We may use this information to set up and authenticate your account on the Service as a data controller, and provide support and maintenance of the Service as a data processor. | — | Removed |
| 165 | The processing of account management is necessary for the performance of a contract with you and to take steps prior to entering into a contract with you, namely our Master Services Agreement. | — | Removed |
| 166 | The processing of support and maintenance of the Service is determined by our Customer as a data controller. | — | Removed |
| 167 | We may use this information to communicate with you regarding our Service, including those communications described in this Global Privacy Policy, such as about your account, alert you of relevant security issues or updates regarding our Service, or provide other Service-related communications. | — | Removed |
| 168 | The processing is necessary for the performance of a contract with you, namely our Master Services Agreement, and our compliance with a legal obligation. | — | Removed |
| 169 | We may use this information to provide our customer service and deal with enquiries, requests, feedback, and complaints made by or about you relating to the Service. | — | Removed |
| 170 | The processing is necessary for our legitimate interest, namely administering the Service, for communicating with you effectively to respond to your enquiries, requests, or complaints. | — | Removed |
| 171 | We may use this information in connection with providing you with marketing communications in accordance with your preferences. | — | Removed |
| 172 | We will only use your personal data in this way to the extent you have given us consent to do so. | — | Removed |
| 173 | We may use this information to organize, manage, and facilitate access to our events. | — | Removed |
| 174 | This processing is necessary for our legitimate interests, namely the administration and execution of our events, and for the performance of a contract. | — | Removed |
| 175 | We may use this information to respond to privacy requests, or to requests or communications from regulators, law enforcement authorities, other government officials request or your data subject requests, and to resolve disputes and defend a legal claim. | — | Removed |
| 176 | This processing is necessary for our compliance with a legal obligation We may use this information to analyze, develop, improve and optimize the use, function, and performance of the Site and Service. | — | Removed |
| 177 | This processing is necessary for our legitimate interests (to develop and improve our Service). | — | Removed |
| 178 | Payment transaction information. | — | Removed |
| 179 | When you subscribe to our services, we may collect information such as your billing address and other information such as date and time of your transaction. | — | Removed |
| 180 | We may use this information to process your orders through the Service. | — | Removed |
| 181 | The processing is necessary for the performance of a contract; compliance with a legal obligation. | — | Removed |
| 182 | We may use this information to verify your identity in connection with the detection and prevention of fraud or financial crime. | — | Removed |
| 183 | The processing is necessary for our and third parties' legitimate interests, namely the detection and prevention of fraud and financial crime. | — | Removed |
| 184 | Communications and feedback. | — | Removed |
| 185 | When you contact us directly, e.g. by email or phone we will record your comments and opinions. | — | Removed |
| 186 | We may use this information to address your questions, issues and concerns. | — | Removed |
| 187 | The processing is necessary for our legitimate interests, namely communicating with you and responding to queries, complaints and concerns. | — | Removed |
| 188 | We may use this information to analyze, develop, improve, and optimize the use, function, and performance of the Site and Service. | — | Removed |
| 189 | The processing is based on either your consent, or as necessary for our legitimate interests (to develop and improve our Service). | — | Removed |
| 190 | Professional or Employment-related information . | — | Removed |
| 191 | When you you apply for employment at Heap on our Site, we may collect your contact and demographic information, educational and work history, employment interests, background check data, and any other information you choose to provide, such as during interviews We may use this information to evaluate your candidacy for employment, to communicate with you during the application process, to facilitate the onboarding process, and, if you consent, to consider your unsuccessful application for future positions. | — | Removed |
| 192 | The processing is based on either your consent, as necessary for our legitimate interests, or to comply with a legal obligation or perform a contract. 3.2 PERSONAL DATA WE COLLECT ABOUT YOU AUTOMATICALLY We also automatically collect personal data indirectly about how you access and use the Service, and information about the device you use to access the Service. | — | Removed |
| 193 | The table below sets out further information about the categories of personal data we collect about you automatically and how we use that information. | — | Removed |
| 194 | The table also lists the legal basis which we rely on to process the personal data. | — | Removed |
| 195 | We may link or combine the personal data we collect about you and the information we collect automatically for the purposes described above. | — | Removed |
| 196 | We may anonymise, de-identify and aggregate any of the personal data we collect about you (so that it does not identify or permit the identification of any individual (“ anonymized data ”). | — | Removed |
| 197 | We may use anonymized data for purposes that include testing our IT systems, research, data analysis, improving our Service. | — | Removed |
| 198 | We may also share such anonymized data with third-parties, including our customers, partners and service providers for various purposes such as to help us better understand your needs and improve our Service Category of personal data Purpose of Processing Legal basis for the processing Online unique identifiers: IP address, cookie ID, device ID, web beacons, pixels, and other similar technologies (as described in our “ Cookies Policy ”) We may use this information for technical support and maintenance, and for internal development of our Service. | — | Removed |
| 199 | This data collected for support and maintenance is necessary for the performance of the contract signed with our customers. | — | Removed |
| 200 | For our processing of this data for internal development, this processing is based on consent or is necessary for our legitimate interests, namely to improve, test, research, machine learning, benchmark, and analyze our Service. | — | Removed |
| 201 | We may use this information to tailor how the Service is displayed to you (such as the language in which it is provided to you). | — | Removed |
| 202 | The processing is necessary for our legitimate interest, namely tailoring our Service so that it is more relevant to our Visitors and Users. | — | Removed |
| 203 | We may use this information to ensure our network and information security of our Site and Service, such as enhance the security of our Site and Service, combat spam or other malware or security risks, detect fraudulent or suspicious activity in relation to our Site or Service, monitor and verify identify or service access. | — | Removed |
| 204 | The processing is necessary for our legitimate interests, namely to protect our Site, Service and your account from fraud and other illegal activities. | — | Removed |
| 205 | Information about your device (“device and technical data”). | — | Removed |
| 206 | We also collect information about the type of operating system, type of device and type of browser you use to connect to the Service. | — | Removed |
| 207 | This information can include details about the type of device, operating systems, browsers and applications connected to the Service through the device, your mobile network. | — | Removed |
| 208 | We may use this information for technical support and maintenance, and for internal development of our Service. | — | Removed |
| 209 | The data collected for support and maintenance is necessary for the performance of the contract signed with our Customers. | — | Removed |
| 210 | For our processing of this data for internal development, this processing is based on consent or is necessary for our legitimate interests, namely to improve, test, research, machine learning, benchmark, and analyze our Service. | — | Removed |
| 211 | We may use information about how you use and connect to the Service to present the Service to you on your device. | — | Removed |
| 212 | The processing is necessary for our legitimate interests, namely to tailor the Service to the User. | — | Removed |
| 213 | We may use this information to monitor and improve the Service and business, resolve issues and to inform the development of new products and services. | — | Removed |
| 214 | The processing is based on consent or is necessary for our legitimate interests, namely to monitor and resolve issues with the Service and to improve the Service generally. | — | Removed |
| 215 | We may use this information to ensure our network and information security of our Site and Service, such as enhance the security of our Site and Service, combat spam or other malware or security risks, detect fraudulent or suspicious activity in relation to our Site or Service, monitor and verify identify or service access. | — | Removed |
| 216 | The processing is necessary for our legitimate interests, namely to protect our Site, Service and your account from fraud and other illegal activities. | — | Removed |
| 217 | Information about how you use the Service (“usage data”). | — | Removed |
| 218 | For example, how frequently you access the Service, the time you access the Service and how long you use it for, the approximate location that you access the Service from, the site from which you came and the site to which you are going when you leave our website, the website pages you visit, the links you click, whether you open emails or click the links contained in emails, whether you access the Service from multiple devices, and other actions you take on the Service. | — | Removed |
| 219 | We may use this information for technical support and maintenance, and for internal development of our Service. | — | Removed |
| 220 | The data collected for support and maintenance is necessary for the performance of the contract signed with our Customers. | — | Removed |
| 221 | For our processing of this data for internal development, this processing is based on consent or is necessary for our legitimate interests, namely to improve, test, research, machine learning, benchmark, and analyze our Service. | — | Removed |
| 222 | We may use information about how you use and connect to the Service to present the Service to you on your device. | — | Removed |
| 223 | The processing is necessary for our legitimate interests, namely to tailor the Service to the user. | — | Removed |
| 224 | We may use this information to determine products and services that may be of interest to you for marketing purposes. | — | Removed |
| 225 | The processing is necessary for our legitimate interests, namely to inform our direct marketing. | — | Removed |
| 226 | We may use this information to ensure our network and information security of our Site and Service, such as enhance the security of our Site and Service, combat spam or other malware or security risks, detect fraudulent or suspicious activity in relation to our Site or Service, monitor and verify identify or service access. | — | Removed |
| 227 | The processing is necessary for our legitimate interests, namely to protect our Site, Service and your account from fraud and other illegal activities. 3.3 PERSONAL DATA WE RECEIVE FROM THIRD PARTIES If you interact with us through a social network, we may receive information from the social network such as your name, profile information, and any other information you permit the social network to share with third parties. | — | Removed |
| 228 | This processing is necessary for our legitimate interests to develop our Service and inform our marketing strategy. | — | Removed |
| 229 | We also use single sign-on (" SSO ") to allow users to authenticate their account using one set of login information. | — | Removed |
| 230 | The data we receive is dependent on your privacy settings with the social network. | — | Removed |
| 231 | We may use this information to reshare content created through the use of the Service, to authenticate you and allow you to access the Service. | — | Removed |
| 232 | The processing is necessary for the performance of a contract with you. 3.4 PERSONAL DATA WE COLLECT ABOUT YOUR VISITORS WHEN YOU USE OUR SERVICE When using our Service, we collect personal data about your visitors on your behalf (online unique identifiers, device and technical data, usage data and any additional personal data you decide to capture under the Master Service Agreement signed with us) for the provision of our Service, including support and maintenance, product usage analytics (i.e. understand how your visitors engage with your product) in order for you to improve their experience with your product. | — | Removed |
| 233 | As a data controller, it is up to you to determine the legal basis of this processing. | — | Removed |
| 234 | We share your Visitor’s personal data with our sub-processors listed here , only for the provision of the Service. 4. | — | Removed |
| 235 | HOW LONG WILL WE STORE YOUR PERSONAL DATA We will usually keep the personal data we collect about you for no longer than necessary for the purposes set out in Section 3.1 and 3.2, in accordance with our legal obligations and legitimate business interests. | — | Removed |
| 236 | The criteria used to determine the period for which personal data about you will be retained varies depending on the legal basis under which we process the personal data: Legitimate Interests. | — | Removed |
| 237 | Where we are processing personal data based on our legitimate interests, we generally will retain such data for a reasonable period of time based on the particular interest, taking into account the fundamental interests and the rights and freedoms of data subjects. | — | Removed |
| 238 | Consent. | — | Removed |
| 239 | Where we are processing personal data based on your consent, we generally will retain the data until you withdraw your consent, or otherwise for the period of time necessary to fulfill the underlying agreement with you or provide you with the applicable service for which we process that personal information. | — | Removed |
| 240 | Contract. | — | Removed |
| 241 | Where we are processing personal data based on contract, we generally will retain the data for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations for legal claims that could arise from the contractual relationship. | — | Removed |
| 242 | Legal Obligation. | — | Removed |
| 243 | Where we are processing personal data based on a legal obligation, we generally will retain the data for the period of time necessary to fulfill the legal obligation. | — | Removed |
| 244 | Legal Claim. | — | Removed |
| 245 | We may need to apply a “legal hold” that retains information beyond our typical retention period where we face a threat of legal claim. | — | Removed |
| 246 | In that case, we will retain the data until the hold is removed, which typically means the claim or threat of claim has been resolved. | — | Removed |
| 247 | In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal data, as well as the potential risk of harm from unauthorised use or disclosure of your personal data. 5. | — | Removed |
| 248 | RECIPIENTS OF YOUR PERSONAL DATA We may share your personal data with the following recipients (as required in accordance with the uses set out in Annexes 1 and 2): Service providers and advisors : we may share your personal information with third party vendors and other service providers that perform services for us or on our behalf, which may include providing professional services, such as legal and accounting services, mailing, email or chat services, payment services, IT and security services, customer support services, cloud storage, or marketing and analytics services. | — | Removed |
| 249 | Affiliates . | — | Removed |
| 250 | Other companies owned by or under common ownership as Heap, including our subsidiaries (i.e., any organisation we own or control) and our ultimate holding company (i.e., any organisation that owns or controls us) and any subsidiaries it owns, listed here . | — | Removed |
| 251 | Integrations and enrichment providers: our Service allows customers to integrate third-party tools to send or receive personal data to and from the Service. | — | Removed |
| 252 | Our customers remain responsible for any such personal data transmissions between these integration tools and our Service. | — | Removed |
| 253 | Purchasers and third parties in connection with a business transaction : your personal data may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control or acquisition of all or a portion of our business. | — | Removed |
| 254 | Law enforcement, regulators and other parties for legal reasons : we may share your personal data with third parties as required by law or if we reasonably believe that such action is necessary to (i) comply with the law and the reasonable requests of law enforcement; (ii) detect and investigate illegal activities and breaches of agreements, including our Master Services Agreement; and/or (iii) exercise or protect the rights, property, or personal safety of Heap, its users or others. 6. | — | Removed |
| 255 | MARKETING AND PROFILING From time to time we may contact you with information about our services, including sending you marketing messages and asking for your feedback on our services. | — | Removed |
| 256 | Most marketing messages we send will be by email. | — | Removed |
| 257 | For some marketing messages, we may use personal information we collect about you to help us determine the most relevant marketing information to share with you. | — | Removed |
| 258 | Where we rely on consent to send you marketing communications, we will only send you such messages if you have given us your consent to do so. | — | Removed |
| 259 | You can withdraw your consent at a later date by clicking on the unsubscribe link at the bottom of our marketing emails or by updating your preferences via your account on the Site. | — | Removed |
| 260 | We may analyze personal data we have collected about you to create a profile of your interests and preferences so that we can contact you with information that is relevant to you. | — | Removed |
| 261 | We may make use of additional information about you when it is available from external sources to help us effectively send product updates. | — | Removed |
| 262 | We may also use personal data about you to detect and reduce fraud and credit risk. 7. | — | Removed |
| 263 | SECURITY We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, change or damage. | — | Removed |
| 264 | All personal data we collect will be stored by our cloud hosting provider on secure servers. 8. | — | Removed |
| 265 | INTERNATIONAL TRANSFERS The personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations. | — | Removed |
| 266 | If you are located in the EEA, United Kingdom or Switzerland, your personal data may be processed outside of those regions, including in the United States. | — | Removed |
| 267 | In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as Standard Contractual Clauses adopted by the European Commission. | — | Removed |
| 268 | Heap transfers personal data to the United States pursuant to the Data Privacy Framework (please see above). | — | Removed |
| 269 | If you wish to enquire further about these safeguards used, please contact us using the details set out at the end of this European Privacy Policy. 9. | — | Removed |
| 270 | YOUR RIGHTS IN RESPECT OF YOUR PERSONAL DATA In accordance with applicable privacy laws in Europe, you have the following rights in respect of your personal data that we hold: Right of access . | — | Removed |
| 271 | You have the right to obtain: confirmation of whether, and where, we are processing your personal information; information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods; information about the categories of recipients with whom we may share your personal information; and a copy of the personal information we hold about you. | — | Removed |
| 272 | Right of portability . | — | Removed |
| 273 | You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person. | — | Removed |
| 274 | Right to rectification . | — | Removed |
| 275 | You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay. | — | Removed |
| 276 | Right to erasure . | — | Removed |
| 277 | You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified. | — | Removed |
| 278 | Right to restriction . | — | Removed |
| 279 | You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you. | — | Removed |
| 280 | Right to withdraw consent . | — | Removed |
| 281 | There are certain circumstances where we require your consent to process your personal information. | — | Removed |
| 282 | In these instances, and if you have provided consent, you have the right to withdraw your consent. | — | Removed |
| 283 | If you withdraw your consent, this will not affect the lawfulness of our use of your personal information before your withdrawal. | — | Removed |
| 284 | Right to object to processing. | — | Removed |
| 285 | You have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. | — | Removed |
| 286 | There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. | — | Removed |
| 287 | You can also object to marketing activities for any reason. | — | Removed |
| 288 | You also have the right to lodge a complaint to your local data protection authority. | — | Removed |
| 289 | If you are based in the European Union, information about how to contact your local data protection authority is available here . | — | Removed |
| 290 | If you are based in the UK or Switzerland, your local data protection authorities are the UK Information Commissioner's Office ( https://ico.org.uk/global/contact-us/ ) and the Swiss Federal Data Protection and Information Commissioner ( https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact/address.html ). | — | Removed |
| 291 | If you wish to exercise one of these rights, please contact us using the contact details at the end of these Privacy Disclosures, or you can use our Data Subject Rights Request Form . | — | Removed |
| 292 | Due to the confidential nature of data processing we may ask you to provide proof of identity when exercising the above rights. | — | Removed |
| 293 | PRIVACY DISCLOSURES FOR TRANS-ATLANTIC DATA PRIVACY FRAMEWORK Heap Inc., along with its affiliates based in the United States of America (Content Square, Inc., and Clicktale Inc., (together “ the US CS entities ”)), has self-certified with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (together, the “ Data Privacy Framework ”), where such participation is listed at this link , with respect to the personal data of individuals residing in the EU, United Kingdom, and Switzerland that the US CS entities process for the purposes identified above in this policy, including any such data processed on behalf of any of their affiliated companies of the Contentsquare group of companies. | — | Removed |
| 294 | The US CS entities commit to process personal data received from the EU, United Kingdom, and Switzerland in accordance with the Data Privacy Framework Principles, including the Supplemental Principles (collectively, the “ Principles ”) as set forth by the US Department of Commerce concerning the processing of personal data. | — | Removed |
| 295 | If there is any conflict between this Heap Privacy Policy and the Principles, the Principles shall govern. | — | Removed |
| 296 | To learn more about the Data Privacy Framework, please visit this webpage . | — | Removed |
| 297 | Independent Dispute Resolution To address inquiries or resolve complaints about our processing of personal data, residents of the EU, United Kingdom, or Switzerland should first contact Heap via e-mail to privacy@contentsquare.com . | — | Removed |
| 298 | The US CS entities have further committed to refer unresolved privacy complaints under the Data Privacy Framework to the American Arbitration Association’s International Centre for Dispute Resolution (“ICDR-AAA”), a non-profit alternative dispute resolution provider located in the United States to assist with the complaint resolution process. | — | Removed |
| 299 | If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://go.adr.org/dpf_irm.html for more information and to file a complaint. | — | Removed |
| 300 | The services of ICDR-AAA are provided at no cost to you. | — | Removed |
| 301 | Enforcement The US CS entities are subject to the investigatory and enforcement powers of the Federal Trade Commission (the “ FTC ”) to ensure our compliance with the Data Privacy Framework as outlined in this Privacy Policy. | — | Removed |
| 302 | Arbitration You may be entitled, under certain conditions as described in the Principles, to invoke binding arbitration when other dispute resolution procedures have been exhausted. | — | Removed |
| 303 | Lawful Access Requests The US CS entities may be required to disclose personal data in response to lawful access requests from public authorities, or to comply with national security or law enforcement requirements. | — | Removed |
| 304 | Any such disclosure is made in accordance with our Public Authorities Access Request Policy, available at this link . | — | Removed |
| 305 | Onward Transfers of Personal Data The US CS entities remain responsible to you, as well as potentially liable to you under the conditions set forth in the Principles, for the processing of personal data received under the Data Privacy Framework and subsequently transferred to the third parties identified above. | — | Removed |
| 306 | PRIVACY NOTICE FOR CALIFORNIA RESIDENTS This Privacy Policy supplements our Global Privacy Policy and provides additional details about the personal information we collect, use, and disclose about residents of the State of California, and the rights afforded to them under the California Consumer Privacy Act, as amended (the “CCPA”), and includes our Notice at Collection and Notice of Right to Opt-out of Sale/Sharing under the CCPA. | — | Removed |
| 307 | Your rights under the CCPA: Right to delete . | — | Removed |
| 308 | You have the right to request that we delete your personal information that we’ve collected from you. | — | Removed |
| 309 | Right to correct . | — | Removed |
| 310 | You have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions. | — | Removed |
| 311 | Right to know/access . | — | Removed |
| 312 | You have the right to request that we disclose to you the personal information we process about you, why we use it, where it came from, and who it is disclosed to. | — | Removed |
| 313 | Right to opt out of sale/sharing . | — | Removed |
| 314 | You have the right to request that we do not “sell” your personal information or “share” your personal information for cross-context behavioral advertising purposes (as such terms are defined under the CCPA). | — | Removed |
| 315 | Please see the dedicated “ “Sale”/“Sharing” of personal information” section below for more information. | — | Removed |
| 316 | Right to restrict the use and disclosure of your sensitive information . | — | Removed |
| 317 | You have the right to request that we limit our use and disclosure of your sensitive personal information. | — | Removed |
| 318 | Right to nondiscrimination . | — | Removed |
| 319 | You have the right not to receive discriminatory treatment because you’ve exercised any of your rights under the CCPA. | — | Removed |
| 320 | Categories of personal information collected In the last 12 months, we have collected the following categories of personal information, from the following sources: When you provide such personal information directly to us We collect the following categories of personal information about you in connection with your visits to and use of our Site and Service, such as when you register for an account to use our Service, request information, contact us, subscribe to our blog or to receive marketing emails from us, or apply for employment: Category of personal information Examples of personal information Identifiers First and last name, email address, and telephone number Professional or employment-related information Job position, company, company size, and industry For employment applications only: you also provide demographic information, educational and work history, employment interests, and interview information Any other personal information you voluntarily choose to provide Personal information in request or feedback you send us When you provide such personal information indirectly to us We may collect personal information about you with the help of third parties. | — | Removed |
| 321 | For more information about this processing, please refer to Section 1 above in this Global Privacy Policy. | — | Removed |
| 322 | When you use our Sites and such personal information is collected automatically When you visit or interact with our Site and Service, we may collect or generate through cookies the following categories of personal information about you: Category of personal information Examples of personal information Identifiers and contact information IP address, cookie IDs, device IDs, web beacons, pixels, and other similar technologies (as described in our “ Cookies Policy ”) Internet or other electronic network activity information Device and technical data Type of device/operating system/browser used to access the Site and Service, session logging, referring or exit pages; and date and time of your visit. | — | Removed |
| 323 | Internet or other electronic network activity information Behavioral data Web page interactions (clicks, browsing, zooms and other interactions), referring web page/source through which you accessed the Site and Service, and statistics associated with the interaction between device or browser and the Site. | — | Removed |
| 324 | Geolocation data City, state, or country. | — | Removed |
| 325 | Professional or employment-related information Job position, workplace, and industry Inferences drawn from the above information Whether you may be interested in our services, and aggregated metrics. | — | Removed |
| 326 | Purposes for which personal information is collected We collect and use these categories of personal information for the business and commercial purposes described in Section 1 above in this Global Privacy Policy. | — | Removed |
| 327 | Categories of third parties to whom personal information is disclosed In connection with one or more of the purposes described above, we disclose the identified personal information to the categories of third parties identified in Section 2 above in this Global Privacy Policy “Sale” / “Sharing” of personal information We “sold” or “shared” (as such terms are defined under applicable law) certain data elements within the following categories of personal information in the last 12 months: identifiers, demographic information, Internet or other electronic network activity information, approximate geolocation, and inferences drawn from the above. | — | Removed |
| 328 | We “sold” or “shared” each category to or with entities who provide advertising, marketing, or audience measurement; and social networks. | — | Removed |
| 329 | The business or commercial purposes of “selling” or “sharing” personal information is to assist us with advertising, marketing, audience measurement, and other functionality on our digital properties. | — | Removed |
| 330 | We do not “sell” or “share” any personal information of consumers under 16 years of age. | — | Removed |
| 331 | Retention We retain the categories of personal information identified above for the lengths of time identified in Section 3 above in this Global Privacy Policy. | — | Removed |
| 332 | Opt-out preference signal To exercise and signal to us your preference to opt-out of the sale or sharing (as such terms are defined under CCPA) of your personal information within our Site’s consent banner, you can toggle the switch into the grey “off” position (in contrast to the bright blue “on” position) or vice versa by clicking on the switch. | — | Removed |
| 333 | Required disclosures Below is a list of each type of request we have received during the previous calendar year from all individuals (meaning, requests received from anywhere in the world , not only California-residents), the outcome of such request, and the mean number of days to respond to the request: Type of request Number received Number complied with Number denied* Mean number of days to comply Request to delete 0 0 0 This feature is not included Request to correct 0 0 0 This feature is not included Request to know 1 1 0 44 Request to opt out of sale/sharing 0 This feature is not included This feature is not included This feature is not included Request to limit 0 This feature is not included This feature is not included This feature is not included Request to opt out of marketing communications 1 1 0 27 *Requests may be denied due to various factors including where the request was not verifiable or made multiple times. | — | Removed |
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.