Privacy Policy
Last updated: 27 February 2023
Introduction
This Privacy Policy (“Privacy Policy”) describes the types of information gathered by Catalan.ai Inc. (“Provider”, “us” or “we”) in the process of providing this website, our computing applications, and the associated services, software, data, information, tools, functionality, updates and similar materials (collectively, the “Service”), as well as how we use it, with whom the information may be shared, what choices are available to you regarding collection, use and distribution of information and our efforts to protect the information you provide to us through the Service.
By accessing or using the Service, you hereby consent to allow us to process information in accordance with this Privacy Policy. Please also refer to our Terms of Service (“Terms of Service”), which are incorporated as if fully recited herein. Terms defined in the Terms of Service that are not defined herein shall have the same definition as in the Terms of Service.
We may revise or update this Privacy Policy by posting an amended version through the Service and making you aware of the revisions, which may be through posting to the Service or otherwise. Your continued access to or use of the Service following our notice of changes to this Privacy Policy (or other acceptance method) means you accept such changes. Please refer to the “Last updated” date above to see when this Privacy Policy was last updated.
Territoriality
Regardless of where our servers are located, your personal data may be processed by us in the United States of America (“U.S.”), where data protection and privacy regulations may or may not be to the same level of protection as in other parts of the world. In all instances in this Privacy Policy, “our servers” means servers that we own or on which the Service is hosted, or which are otherwise utilized by the Service. BY USING THE SERVICE, YOU UNEQUIVOCALLY AND UNAMBIGUOUSLY CONSENT TO THE COLLECTION AND PROCESSING IN THE U.S. OF ANY INFORMATION COLLECTED OR OBTAINED BY US THROUGH VOLUNTARY SUBMISSIONS, AND, TO THE EXTENT POSSIBLE, THAT U.S. LAW GOVERNS ANY SUCH COLLECTION AND PROCESSING.
Who Collects Your Information On Our Service?
We collect information from you on the Service, including certain information that can identify you as a person (“Personally Identifiable Information” or “PII.”), and we are responsible for protection of your information.
What Information Do We Collect?
4.1 Personally Identifiable Information. We may request PII from you when you register for the Service, when you create or update your account, when you use the Service, from third parties, when you communicate or interact with us, or otherwise when you otherwise submit such information. You may choose not to provide your PII, but then you might not be able to take advantage of some of the features of our Service. The types of PII we may collect and save include:Contact and account registration information such as username, name, address, email address, physical/mailing address, telephone number;
Data metrics such as email read receipts and first party and third party cookies;
Location-based information;
Device information such as mobile phone provider associated with the device you are using to access the Service, your device’s unique identifier, the type of device and its operating system, and screen resolution of the device;
Information you provide such as feedback, comments, or other messages;
Technical information collected in our logs, such as standard web log entries that contain your IP address, keystrokes and clicks while using the Service, page URLs, the pages and features accessed most frequently, time spent on a page, how pages and features are used, previous page and referring page URLs, search terms entered, and similar analytics about use of the Service or Service; and
Storefront Data, as defined herein, to the extent it consists of or contains PII.
4.2 Storefront Data. The Service may be integrated with third party ecommerce and other storefront platforms (“Platforms”). If you interact with the Platforms through the Service, the Platforms may make additional information available to us, including name, other Platform user or account identification, email, location data, and “clickstream data” (as described herein) that is collected by the third party operator of the Platform that is associated with your use of the Platform and/or your account, business or storefront on the Platform (“Storefront Data”). Storefront Data may also contain or consist of certain business information, such as product and pricing information, that is not PII.
4.3 Financial Information. Although it may appear that the Service collects financial information, including credit card information, from you, it is collected and processed through a third party provider. We do not collect, store or process your financial information.
4.4 Anonymous Information. We may also collect anonymous, non-identifying and aggregate information such as the type of browser you are using, device type, the operating system you are using, and the domain name of your Internet service provider. We may create anonymous or de-identified information from PII. We may de-identify Storefront Data. Information collected or created pursuant to this section will not be considered PII and not subject to the terms and conditions of this Privacy Policy.
4.5 Device Permissions. The Service may access the internet, or use your mobile data plan in order to use certain features of the Service. The Service may access your device to send you push notifications.
4.6 No Storefront Customer Data. We do not request, collect or store any personally identifiable information about any customers of you, your business or your storefront (“Customer Data”). No Customer Data is requested as part of Storefront Data.
Why Is My Information Being Collected?
5.1 We need to collect your PII so that we can respond to your requests for information and demonstrations or to be added to our emailing lists, and to process your requests for access to our Service. We also collect aggregate information to help us better design the Service. We collect log information for monitoring purposes to help us to diagnose problems with our servers, administer the Service and Service, calculate usage levels, and otherwise provide services to you.
5.2 Storefront Data. Storefront Data is collected for purposes of providing the Service to you and is required for certain aspects of the Service to function including the provision of pricing analytics.
How Do We Use the Information We Collect?
6.1 We use the PII that we collect for the purposes for the purposes of providing the Service, and:
Responding To Your Inquiries and Fulfilling Your Requests. We may use your PII to respond to inquiries about the Service, to fulfill your requests for information.
Creating and Maintaining Your User Account. We use your PII to create and maintain an account for you to allow you to access and use the Service.
Communicating With You About Our Service. We may use your PII to send you information about new features of the Service, educational opportunities, webinars, marketing events and other items that may be of interest to you.
Sending Administrative and Promotional Emails. We may use your PII to send you emails to: (a) confirm your account and your other PII, (b) provide you with information regarding the Service, (c) inform you of changes to this Privacy Policy, our other policies; or (d) provide you with information on our other services and products, or promotions related to the Service.
Storefront Data. We may use Storefront Data for purposes of (a) providing the Service to you including providing pricing analytics, and (b) anonymizing and using such data to provide and improve certain analytics functionalities of the Service that are made available to you and other Users, and our general business purposes.
6.2 We may use anonymous information that we collect to improve the design and content of our Service, and to enable us to personalize your Service experience. We also may use this information in the aggregate to analyze how the Service is used, analyze industry trends, as well as to offer you programs or services.
How Do We Store and Protect Your Information?
7.1 After collecting your PII, we will store it on our Service for future use. We have physical, electronic, and managerial procedures in place to safeguard and help prevent unauthorized access, maintain data security, and correctly use the information we collect. Unfortunately, no data transmission over the internet or data storage solution can ever be completely secure. As a result, although we take industry-standard steps to protect your information (e.g., strong encryption), we cannot ensure or warrant the security of any information you transmit to or receive from us or that we store on our or our service providers’ systems.
7.2 If you are accessing the Service from outside of the USA, you understand that your connection will be through and to servers located in the USA, and the information you provide will be securely stored in our web servers and internal systems located within the USA.
7.3 We store your PII until we are required to remove it. We store our logs and other technical records in accordance with internal practices and policies, and potentially indefinitely.
Do We Share Your Information?
8.1 In general, we will not share your PII except: (a) for the purposes for which you provided it; (b) with your consent, or as you direct; (c) as may be required by law or as we think necessary to protect our organization or others from injury (e.g., in response to a court order or subpoena, in response to a law enforcement agency request, or when we believe that someone is causing, or is about to cause, injury to or interference with the rights or property of another); or (d) on a confidential basis with persons or organizations with whom we contract to carry out internal site operations, which may include for example, analytical services, or as necessary to render the Service. With your knowledge and consent, we may share your PII with our business partners, such as our marketing partners and event co-hosts. We may also share aggregate information with others, including affiliated and non-affiliated organizations. Finally, we may transfer your PII to our successor-in-interest in the event of an acquisition, sale, merger or bankruptcy.
8.2 Storefront Data is not shared in a non-anonymous form. Anonymized Storefront Data may be used to provide and improve certain analytics functionalities of the Service that are made available to you and other Users, and our general business purposes.
How Do We Use Cookies and Other Network Technologies?
9.1 To enhance your online experience with us, our web pages may presently or in the future use “cookies.” Cookies are text files that our web server may place on your hard disk to store your preferences. We may use session, persistent, first-party and third party cookies. Cookies, by themselves, do not tell us your email address or other PII unless you choose to provide this information to us. Once you choose to provide PII, however, this information may be linked to the data stored in the cookie. Certain features of our Service may not function properly without the aid of cookies. Provider uses session cookies, which are necessary to allow you to seamlessly navigate from one page or area of the Service to another during your visit, and these are normally deleted when you close your web browser. We also use persistent cookies for your convenience so that you can log in faster, your preferences are remembered from visit to visit, and that you have an overall more convenient experience while visiting our Service.
9.2 We or our service providers may also use “pixel tags,” “web beacons,” “clear GIFs” embedded links, and other commonly used information-gathering tools in connection with some Service pages and HTML-formatted email messages for such purposes as compiling aggregate statistics about Service usage and response rates. A pixel tag is an electronic image (often a single pixel), that is ordinarily not visible to website visitors, and may be associated with cookies on visitors’ hard drives. Pixel tags allow us and our service providers to count users who have visited certain pages of the Service, to deliver customized services, and to help determine the effectiveness of our promotional and advertising campaigns, Service, and Service. When used in HTML-formatted email messages, pixel tags can inform the sender of the email whether and when the email has been opened.
9.3 As you use the Internet, you leave a trail of electronic information at each website you visit. This information, which is sometimes referred to as “clickstream data”, can be collected and stored by a website’s server. Clickstream data can reveal the type of computer and browsing software you use and the address of the website from which you linked to the Service. We may use clickstream data as a form of non-personally identifiable information to determine how much time visitors spend on each page of our Service, how visitors navigate through the Service, how to better improve our pricing model, and how we may tailor our web pages to better meet the needs of visitors. We will only use this information to improve our Services.
9.4 Do Not Track. At present, the Service does not specifically respond to browser do-not-track signals.
Collection of Information by Others
Our Service may provide links to certain third party websites and services that you may click on our Service and may integrate with Platforms to allow you to interact with such Platforms and third parties. Please check the privacy policies of these third party websites and services to learn how they collect, use, store and share information that you may submit to them or that they collect. This Privacy Policy only applies to our Service, not the services of any third party.
EEA Privacy Rights
11.1 If you currently reside in the United Kingdom, Northern Ireland, the European Union, or Switzerland (collectively, the “EEA”), under the European Union’s General Data Protection Regulation ("EU GDPR"), the United Kingdom’s General Data Protection Regulation ("UK GDPR"), or Switzerland’s privacy law (“Swiss GDPR” together with the EU GDPR and UK GDPR, as applicable the “GDPR”), you are a Data Subject and the GDPR applies to your PII which is considered Personal Data, as each are defined under the GDPR. We are the Controller with respect to PII that we collect directly from you (excluding Storefront Data) and the Processor with respect to Storefront Data, as each are defined under the GDPR. The GDPR requires that we, in our capacities as a Controller and/or Processor, have a legal basis to process your Personal Data. We process your Personal Data under one or more of the following legal bases:
Processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests,
For the performance of a contract,
To comply with a legal obligation, and/or
If we have your consent to do so, such consent capable of being revoked at any time.
11.2.Under the GDPR, as a Data Subject you have certain rights. They are:
The right to be informed. This is your right to be informed about what Personal Data they are processing, why, and who else the data may be passed to.
The right of access. This is your right to see what Personal Data about you is held by us.
The right to rectification. This is the right to have your Personal Data corrected or amended if what is held is incorrected in some way.
The right to erasure. This is the right to have your Personal Data to be deleted in the event that such data is no longer required for the purposes it was collected for, your consent for the processing of the data is withdrawn, or the data is being unlawfully processed.
The right to restrict processing. This is the right to ask for a temporary halt to processing of your Personal Data, such as in the case where a dispute or legal case has to be concluded, or the data is being corrected.
The right to data portability. This is the right to ask for your Personal Data to be provided to you in a structured, commonly used, and machine-readable format.
The right to object. This is the right to object to further processing your Personal Data if such processing is inconsistent with the primary purposes for which it was collected. This right may also be exercised by withdrawing your consent, which you may do at any time, if applicable.
Rights in relation to automated decision making and profiling. This is the right to not be subject to a decision based solely on automated processing. The service does not engage in automated decision making and profiling.
11.3 You can find instructions for enforcing some of these rights elsewhere in this Privacy Policy. Otherwise, if you wish to find out more about these rights, please contact us at legal@catalan.ai.
California Privacy Rights
12.1 If you are a resident of California, the California Consumer Privacy Act of 2018, as amended (“CCPA”), provides you with certain rights regarding your personal information. For purposes of the CCPA, we are a “Business,” you, if you are an individual residing in California, are a “Consumer,” and PII includes “Personal Information” as defined under the CCPA.
12.2 Consumers have the right to request that we disclose Personal Information we have collected about them in the previous 12 months including, but not limited to, the categories of information collected by us, the source(s) of such information by category, and the purpose for collecting such information. This right may not be exercised more than twice in a 12-month period.
In the previous 12 months, we have collected the following categories of Personal Information about Consumers:
Identifiers, examples of which include a Consumer’s name, mailing address, social security number, unique personal identifiers (device identifier, IP Address, cookies, beacons, pixel tags, mobile ad identifiers), account names, and similar information;
Commercial information, examples of which include records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
Personal Records Under the California Consumer Records Law (Cal. Civ. Code §1798.80) (“CCRLPI”);
Internet/Network Activity, examples of which include browsing history, cookies, search history and a Consumer’s interaction with a website;
Geolocation data; and
Inferences drawn from any other category of personal information.
We collect the Personal Information from our users and/or by automatic means. Such Personal Information is collected in order to provide the Service and its functionalities, to comply with applicable law, and as otherwise described above in this Privacy Policy.
12.3 As a Consumer, you also have the right to request that we tell you which of your Personal Information we have disclosed for a business purpose, or sold, in the previous 12 months, if any. In the past 12 months, we have disclosed Personal Information falling under the following categories of personal information:
Identifiers;
Commercial information;
CCRLPI;
Internet/Network Activity;
Geolocation data; and
Inferences.
We disclose Personal Information in the preceding categories to the Consumers themselves, to third parties as the Consumer may direct, our service providers, and/or government/law enforcement agencies for the following purposes: the purposes for which it was provided for, the provision of the Service, in response to a Consumer’s specific request, to comply with applicable law, our legitimate internal business operations, and as otherwise described above in this Privacy Policy.
IN THE PAST 12 MONTHS WE HAVE NOT SOLD, AND DURING THE PERIOD OF TIME WHICH THIS PRIVACY POLICY IS POSTED WE SHALL NOT SELL, THE PERSONAL INFORMATION OF ANY CONSUMER, OF ANY AGE.
12.4 You also have the right to request the deletion of Personal Information that we have collected from you at any time. However, we may not be required to comply with such request under several circumstances including, but not limited to, when the data is necessary for the underlying transaction, to comply with applicable law, to detect security incidents, to debug glitches, and for our internal purposes.
12.5 In the event that you exercise one of your rights under the CCPA, you will not be discriminated against by us in any way, whether it is through the denial of goods/services, providing you a different level of goods/services, or charging (or suggesting that we will charge) you different prices for the goods/services unless such change in price is reasonably related to the value you receive from your Personal Information.
12.6 How do you exercise your rights under the CCPA?
Because we offer the Service exclusively online, you may submit requests to exercise your rights under the CCPA by contacting us at legal@catalan.ai, please include “Request for Privacy Information” in the subject line. You can also submit requests by calling us toll-free at 888-990-1911.
We will acknowledge receipt of your request within 10 days of receiving it, and use best efforts to respond within 45 days of receipt of your request, but in no event will our response come more than 90 days after your request. If we are unable to provide our response within the first 45 days following your request, we shall notify you as soon as we become aware of the possible delay and provide an explanation of why additional time is needed to respond.
Before we respond to any CCPA based requests relating to your personal information, we may take steps to reasonably verify the identity of the person making the request to make sure it’s you, or your authorized agent (in either case, the “Requestor”). We do this to this avoid disclosing your information to third parties and bad actors, not to inconvenience you in any way. For purposes of verifying identity, we will ask the Requestor to confirm at least two pieces of information that we have in our files. If an agent is acting on behalf of the Consumer, we will also need to verify the agent’s identity and their authority to act on the Consumer’s behalf. As the sensitivity of the information being requested increases, we will ask the Requestor to provide more information to verify their identity and/or authority to make the request. If the identity of the Requestor cannot be reasonably verified, either as the Consumer or their agent, then in order to protect that Consumer, we may not disclose or delete the personal information that is the subject of the request.
Children and Privacy
We do not knowingly collect any information from any minors, and we comply with all applicable privacy laws including the GDPR, the Children's Online Privacy Protection Act (“COPPA”) and associated Federal Trade Commission (“FTC”) rules for collecting personal information from minors. Please see the FTC's website (www.ftc.gov) for more information. If you have concerns about this Service, wish to find out if your child has accessed our services, or wish to remove your child's personal information from our servers, please contact us at legal@catalan.ai. Our Service will not knowingly accept personal information from anyone under 13 years old in violation of applicable laws, without consent of a parent or guardian. In the event that we discover that a child under the age of 13 has provided PII to us, we will make efforts to delete the child’s information in accordance with the COPPA. If you believe that your child under 13 has gained access to our Service without your permission, please contact us at legal@catalan.ai.
Contact Information
If you have any questions or suggestions regarding our Privacy Policy, please contact us at legal@catalan.ai.