Privacy Policy

For purposes of this Privacy Policy, "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person, consumer or household, as understood under applicable data protection laws. Depending on applicable law, it does not include de-identified or aggregated information, or public information lawfully available from governmental records or other public sources.

We collect your Personal Information when you visit our websites and through other interactions with us, when you sign up or register for a user account, when you request information about our Services, when you visit and interact with user landing pages, when you otherwise use our Services or when you voluntarily provide information to us through our websites, or by emailing or otherwise contacting us. We may also collect your Personal Information from certain third parties.

Depending on how you interact with us, the categories of Personal Information we collect from these sources include the following and as set out in Section II below:

• Personal identifiers: Name, email address, telephone numbers, account username and password, photos and videos, social media handles and IP address, pages and other content you generate through our Services that identify you
• Payment data: Credit card, bank account or other payment information collected and stored through Paddle, our third-party payment processor, and records of Services you purchased, obtained or considered
• Internet or other electronic activity information: Device and browser type and information regarding your interactions with our website and/or mobile application (including your creation, generation and interaction with our pages), IP address, metadata and diagnostic data, details about your browser, network, operating system and device, information generated when you otherwise interact with us (e.g. through customer support), information from cookies and related technologies, and information that you are sharing with us through device settings (e.g. camera access, photos)

We have collected the same categories of Personal Information in the 12 months prior to the date of this Privacy Policy.

If you withhold Personal Information, please note we may not be able to provide certain Services to you.

Cookies are small, sometimes encrypted text files that are stored on computer hard drives or browsers by websites that you visit. They are used to help users navigate websites efficiently as well as to provide information to the owner of the websites. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, please visit www.allaboutcookies.org.

We also allow third parties (including Google and Meta) to use third party cookies, and other storage technologies to collect or receive information about how you interact with our websites and apps and elsewhere on the Internet and use that information to provide analytics and other measurements services and for advertising, marketing and/or retargeting purposes. For example, we use Google Analytics to evaluate the use of our website. Google Analytics uses cookies and other identifiers to collect information, such as how often users visit a Site, what pages they visit when they do so, and what other websites they visited prior to visiting our website. For information about Google's privacy practices, please refer to the Google Privacy Policy: https://policies.google.com/privacy?hl=en-US#infocollect.

When you visit our website and/or use our Services, we use cookies and similar technologies. For more information on how we collect and use cookies, please visit our Cookie Policy.

We have set out below a description of the reasons why we use your Personal Information (referred to as "processing purposes" below), and, for individuals located in the EEA or the UK, we explain which of the legal bases we rely on to do so.

If you are in the EEA/UK you are able to request a copy of the legitimate interest assessment carried out by us. Where we need to collect the abovementioned categories of Personal Information by virtue of a legal obligation or in light of a contract entered or to be entered into with you, and you do not provide this personal information when requested, we may not be able to comply with our legal obligations, provide you with the Services or perform the contract we have or are trying to enter into with you. In such case, we may have to terminate our relationship with you.

We have set out below a description of the ways we disclose your Personal Information to certain third parties for a business purpose including in the 12 months prior to the date of this Privacy Policy:

Additional Information About How We May Share Personal Information

We also share Personal Information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property or safety of others, including to law enforcement agencies, and judicial and regulatory authorities. We may also share your Personal Information with third parties to help detect and protect against fraud or data security vulnerabilities. We may transfer your Personal Information to a third party in the event of an actual or contemplated sale, merger, reorganization of our entity or other restructuring.

No Sale of Personal Information

We do not sell any of your Personal Information to third parties for monetary consideration.

No Profiling to Facilitate Decisions with Legal or Other Significant Effects

We do not engage in the automated processing of Personal Information to create profiles about individuals that are used in furtherance of decisions with legal or other similarly significant effects, such as the provision or denial of financial or lending services, housing, insurance, or access to essential goods or services.

Our Services are hosted in the US. Therefore, when you use our Services or otherwise disclose Personal Information to us, this Personal Information will be transferred from your location to the US. We may also share your Personal Information with third party recipients as set out above, that are established in the US or other third countries.

Where such countries outside the EEA or the UK do not offer the same level of data protection as in the EEA or the UK (i.e., as per an adequacy decision of the EU Commission or UK Government), we have put in place appropriate safeguards so that your Personal Information are and remain protected. These may include implementing the Standard Contractual Clauses, sharing Personal Information with recipients who have certified under the EU-US Data Protection Framework, or relying on a derogation for the transfer. You may obtain further information and a copy of the relevant data transfer mechanisms that we have in place by contacting us at [email protected].

In accordance with applicable law, you may have certain privacy rights depending upon the jurisdiction in which you reside or are located. However, please note that the below rights are not absolute and may be subject to limitations.

U.S. Privacy Rights

State privacy laws in certain U.S. states give state residents various rights with respect to many types of Personal Information we collect about them, with some exceptions. The rights provided under these laws are similar in many respects, with some differences from state to state. We list below the rights that may be applicable to our business under these law, noting that not all rights are available under each state's privacy law:

• Right to Know: The right to confirm whether or not we are processing a resident's Personal Information and to access such data. Laws in some states provide the right to know more detailed information.
• California's privacy law gives residents the right to request the following additional information collected since the 12 months preceding their request: Categories of personal information we have collected about them; categories of sources from which such personal information was collected; categories of personal information that the business sold or disclosed for a business purpose about the consumer; categories of third parties to whom the personal information was sold or disclosed for a business purpose; and the business or commercial purpose for collecting or selling your personal information.
• Oregon's privacy law gives residents the right to request a list of third party entities to which we have disclosed personal information.
• Right to Access / Copy: The right to access or request a copy of the Personal Information we have collected from the resident, subject to certain exceptions.
• Right to Delete: The right to request deletion of their Personal Information that we have collected from or about the resident and to have such information deleted, subject to certain exceptions.
• Right to Correct: The right to request that we correct inaccuracies in the resident's Personal Information, taking into account the nature of personal information and purposes of processing such information.
• Right to Opt-Out of Sale or Sharing of Personal Information: While we do not sell or share your Personal Information for monetary consideration, our use of third-party cookies may constitute a sale or sharing for cross-context behavioral advertising of your Personal Information, such as your Personal Identifiers, under certain U.S. state laws. Thus, you have the right to opt out of the sale or sharing of your Personal Information.

Exercising Your Rights

We will respond to requests from residents of states with data privacy laws that apply to us and will do so with respect to the rights that are provided under the requestor's state law as of the effective date of that law. The laws in some states listed above may not be in effect as of the date of this Privacy Policy.

To exercise rights to know, access/copy, delete, correct, opt-out or know third parties to whom personal information is disclosed, submit a request through our webform or by contacting us at [email protected]. We will provide a substantive response to these requests within 45 days of the date on which we receive your request. If we require additional information or time to process your requests, we will contact you.

Opt-out Preference Signals and Do Not Track

An opt-out preference signal is sent by a platform, technology, or mechanism on behalf of consumers and communicates a consumer's choice to opt out of the sale and sharing of personal information for cross-context behavioral advertising with all businesses that recognize the signal, without having to make individualized requests. The signal can be set on certain browsers or through opt-out plug-in tools.

We recognize the Global Privacy Control signal for certain U.S. residents based on IP address and do so at the browser level. This means that if the signal is sent through a specific browser, we will recognize it for that browser only, and only with respect to the identifiers for that browser. If you would like more information about opt-out preference signals, including how to use them, the Global Privacy Control website has such information (https://globalprivacycontrol.org/).

We will respond to opt-out requests as soon as feasibly possible, but no later than 15 business days after receipt of your request. If we require additional information or time to process your requests, we will contact you.

Some browsers have a "do not track" feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not respond to browsers' do not track signals.

Exercising Your Rights Using Authorized Agents

Agents may submit opt-out requests on behalf of individuals under several state data privacy law. For example, California residents can designate an agent to submit all other types of requests. If the agent submits an opt-out request on your behalf, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf. Agents can submit opt-out requests here.

If you are a California resident and you use an agent to submit other types of requests, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf. You will also be required to verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request. Agents can submit requests on behalf of California residents (other than opt-out requests) here.

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with state law pertaining to powers of attorney.

Verification of Requests

When you exercise rights other than opt-out rights, we will take steps to verify your identity. We will ask you for at least two pieces of personal information, depending on the nature of the request, and attempt to match those to information that we maintain or collect about you.