[COLLAB] DataGrail Privacy Policy 2023 Update (Draft 2-28-2023).docx
![X8]
Privacy Policy
Effective Date: August 28, 2023
We recognize that your privacy is very important. This Privacy Policy covers DataGrail’s policies on the collection, use, and disclosure of Personal Data when visitors and Customers access www.datagrail.io and/or related Software-as-a-Service applications.
By accepting DataGrail’s Privacy Policy, you consent to the collection, use, and storage of Personal Data as disclosed within this Privacy Policy. You may withdraw your consent anytime through the DataGrail's Privacy Request Form or by email at privacy@datagrail.io.
1. Personal Data Collected by DataGrail on the Platform
Email & Contact Information. Users may optionally provide their email address and/or other contact information to DataGrail to request information or a Demo.
Account Information. In subscribing to its Services, DataGrail requires account-based information such as Customer name, address, email, and payment processing information.
Log-File Information. Automatically reported by your browser each time you access a web page, including browser type, referring pages, and pages viewed.
Web Beacons. Pages of our site may contain web beacons to count users who have visited certain pages, deliver branded services, and measure the effectiveness of promotional campaigns.
Cookies. DataGrail’s site uses cookies to enhance user experience. Cookies are only collected with your express consent.
How You Can Control Advertising Cookies. Cookies are used for delivering advertising on our site based on browsing patterns.
2. Personal Data Received by DataGrail or Disclosed or Shared by DataGrail
Personal Data is collected for facilitating Services, marketing, or internal analysis. DataGrail shares Personal Data with third parties under contractual obligations to maintain confidentiality.
Provide Services. Personal Data is used to
- Provide, operate, and improve the Platform and Services;
- Process payments and complete transactions;
- Update you about new features and services;
- Respond to inquiries and provide customer support;
- Detect and prevent security incidents;
- Analyze data to improve services and personalize user experiences.
3. Personal Data of Minors
Only individuals aged 18 or older may create a DataGrail account. We do not knowingly collect Personal Data from anyone under 18. Parents or guardians should contact DataGrail if minor children provide us with Personal Data without consent.
4. Retention and Deletion of Personal Data; De-Identified Data
DataGrail retains Personal Data as long as necessary for providing services or as required under applicable law. De-identified data is maintained without attempting to re-identify it.
5. DataGrail’s Security Practices
DataGrail employs reasonable security measures against unauthorized access or alterations but cannot guarantee absolute security.
6. Response To “Do Not Track” Signals
DataGrail respects universal opt-out mechanisms that signal consumer’s choice to opt-out of behavioral advertising.
7. Changes to this Privacy Policy
Material changes will be communicated by updating the Effective Date, notifying account holders, or adding a notification on the Site.
8. Supplemental U.S. State-Specific Notices – Notice of Collection
Personal Data Collected, Used and/or Disclosed in Preceding 12 Months
| Personal Data Collected | Categories of Source of Collection | Purpose of Use | Categories to Whom DataGrail Discloses Personal Data | Purpose of Disclosure |
|---|---|---|---|---|
| Name/Alias | User;Third Party | Performing Services;Data Security;Marketing Communications; | Service Provider | Performing Services;Data Security;Customer Support;Marketing |
| User;Third Party | Performing Services;Data Security;Marketing Communications | Service Provider | Performing Services;Data Security;Customer Support;Marketing | |
| Address | User;Third Party | Performing Services;Data Security; | Service Provider | Data Security;Marketing |
| Cell or Telephone # | User;Third Party | Performing Services;Data Security | Service Provider | Performing Services;Data Security;Marketing |
| Unique Online ID | Device | Analytics;Data Security;Marketing | Service Provider | Performing Services;Data Security;Marketing |
| IP Address | Device | Debugging;Analytics | Service Provider | Performing Services;Data Security;Analytics |
A. Sale of Personal Data; Sharing of Personal Data; Right to Opt-Out
DataGrail does not sell Personal Data traditionally, but its use of personalized advertising tracking may be considered a “sale” under applicable privacy laws. Visitors can opt-out of data transmission to ad-tech providers via available opt-out mechanisms.
B. Collection of Sensitive Information
DataGrail does not collect Sensitive Information as defined by applicable laws.
C. Consumer Rights
1. Request DataGrail Disclose At No Charge (“Right to Know”):
- Specific pieces of personal information collected;
- Categories of Personal Data collected, used, and/or disclosed;
- Categories of sources for Personal Data;
- Business purposes for collecting Personal Data;
- Categories of third parties to whom Personal Data has been disclosed/shared.
2. Request DataGrail to Delete At No Charge (“Right to Delete”):
Deletion Requests can be submitted as specified above.
3. Request DataGrail Correct At No Charge (“Right to Correct”):
Requests to correct inaccurate Personal Data can also be submitted as specified above.
9. Contact Us
If you have any questions, please contact DataGrail, Inc., Privacy Department, 164 Townsend Street, Suite 12, San Francisco, CA 94107 or by email at: privacy@datagrail.io.
Last Updated: August 28, 2023