Last Modified: November 11th, 2021
We are Zoints (the "Zoints Team," "we", "our", "us"). We’re committed to protecting and respecting your privacy.
This Policy does not apply to information collected by any third party, including through any application or content (including advertising, if any) that may link to or be accessible from or on the Platform.
The Platform is not intended for children under 16 years of age. No one under age 16 may provide any information to or on the Platform. We do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us.
We may collect and use the following personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:
|Personal Information Category||Examples||Collected [YES/NO/COMMENTS]|
|A. Identifiers.||A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.||YES, we collect:
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Some personal information included in this category may overlap with other categories.
|We do NOT collect this category of personal information unless you voluntarily provide or we are obligated by law to collect.|
|C. Protected classification characteristics under California or federal law.||Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).||We do NOT collect this category of personal information unless you voluntarily provide it.|
|D. Commercial information.||Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||We do NOT collect this category of personal information unless you voluntarily provide it.|
|E. Biometric information.||Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.||We do NOT collect this category of personal information unless you voluntarily provide it.|
|F. Internet or other similar network activity.||Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.||YES, we collect this category of personal information (such as technical information about the browser or type of device you're using) for analytical purposes, security reasons, and other purposes described in this Policy.|
|G. Geolocation data.||Physical location or movements.||YES, we collect your IP address and any information you voluntarily provide.|
|H. Sensory data.||Audio, electronic, visual, thermal, olfactory, or similar information.||We do NOT collect this category of personal information unless you voluntarily provide it.|
|I. Professional or employment-related information.||Current or past job history or performance evaluations.||We do NOT collect this category of personal information unless you voluntarily provide it.|
|J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).||Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.||We do NOT collect this category of personal information unless you voluntarily provide it.|
|K. Inferences drawn from other personal information.||Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.||We do NOT draw inferences from the personal information we collect from you.|
The personal information of Categories A, F, and G (as described above) is required to provide the Platform services to you. If you do not provide the personal information we ask for, it may delay or prevent us from providing services to you.
We obtain the categories of personal information listed above from the following categories of sources:
We may use Google Analytics to understand how visitors engage with the Platform. Data collected by Google Analytics includes first-party cookies, data related to the device/browser, IP address, and on-site/app activities to measure and report statistics about user interactions on the Platform. We do not use the advertising features of Google Analytics. If you don’t want Google Analytics to be used in your browser, you can install the Google Analytics browser add-on. For more details, please visit how Google uses data when you use our partners' sites or apps and Google Analytics and privacy.
We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
We use (process) information that we collect about you or that you provide to us for the following purposes:
Please note you have the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal). If you opt-in to receive email notifications, you can go to your account settings and opt-out of the emails. For other withdrawal requests, please contact us.
We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.
We may disclose personal information that we collect or you provide as described in this Policy:
We may also disclose your personal information:
In the preceding twelve (12) months, we have disclosed personal information for a business purpose to the categories of third parties indicated in the chart below. We do not sell any personal information.
|Personal Information Category||Category of Third-Party Recipients|
|Business Purpose Disclosures||Sales|
|B: California Customer Records personal information categories.||Service Providers if you voluntarily disclose.||NONE|
|C: Protected classification characteristics under California or federal law.||Service Providers if you voluntarily disclose.||NONE|
|D: Commercial information.||Service Providers if you voluntarily disclose.||NONE|
|E: Biometric information.||Service Providers if you voluntarily disclose.||NONE|
|F: Internet or other similar network activity.||
|G: Geolocation data.||
|H: Sensory data.||Service Providers if you voluntarily disclose.||NONE|
|I: Professional or employment-related information.||Service Providers if you voluntarily disclose.||NONE|
|J: Non-public education information.||Service Providers if you voluntarily disclose.||NONE|
|K: Inferences drawn from other personal information.||NONE||NONE|
The Zoints Team consists of developers and members in multiple continents. Information may be held at our offices and those of the Service Providers, and other third parties as described above (see above: "How We Share Your Personal Information")
To provide you with the services, we will need to process and store information outside of the European Economic Area (the "EEA"). For more information, including on how we safeguard your personal information when this occurs, see "Transferring Your Personal Information Out of the EEA".
We will keep your personal information while you have an account with us or while we are providing the Platform services to you. Thereafter, we will keep your personal information for as long as is necessary:
We will not retain your personal information for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of personal information.
When it is no longer necessary to retain your personal information, we will delete or anonymize it.
To provide you with the services, we will need to process and store information outside of the EEA, depending on a variety of factors, including but not limited to the locations of the Service Providers.
The following countries to which we may transfer personal information have been assessed by the European Commission as providing an adequate level of protection for personal information: Canada and the United Kingdom.
Except for the countries listed above, other countries we may transfer information to may not have the same data protection laws as the EEA.
By accessing or using the Platform or otherwise providing information to us, you consent to the processing, transfer, and storage of information in and to the U.S. and other countries, where you may not have the same rights as you do under local law.
We will, however, ensure the transfer complies with data protection law and all personal information will be secure. Our standard practice is to use standard data protection contract clauses that have been approved by the European Commission. To obtain a copy of those clauses, please contact us.
You can review and change your personal information by logging into your account and visiting the settings page.
You may also contact us to request access to, correct, or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
Users in EEA and California may have additional personal information rights and choices, as described in the sections below.
Users in the European Economic Area have the following rights:
|Right to Access||The right to be provided with a copy of your personal information (the right of access)|
|Right to Rectification||The right to require us to correct any mistakes in your personal information|
|Right to be Forgotten||The right to require us to delete your personal information—in certain situations|
|Right to Restriction of Processing||The right to require us to restrict processing of your personal information—in certain circumstances, e.g. if you contest the accuracy of the data|
|Right to Data Portability||The right to receive the personal information you provided to us, in a structured, commonly used, and machine-readable format and/or transmit that data to a third party—in certain situations|
|Right to Object||
The right to object:
|Right Not to be Subject to Automated Individual Decision-Making||The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you|
For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the General Data Protection Regulation.
Users in California have certain rights under the California Consumer Privacy Act of 2018 ("CCPA") and certain other privacy and data protection laws, as applicable, to exercise free of charge:
|Disclosure of Personal Information We Collect About You||
You have the right to know:
|Personal Information Sold or Used for a Business Purpose||
In connection with any personal information we may sell or disclose to a third party for a business purpose, you have the right to know:
The categories of personal information about you that we sold and the categories of third parties to whom the personal information was sold; and
The categories of personal information that we disclosed about you for a business purpose.
You have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to opt out of the sale of your personal information. We do not sell your personal information.
|Right to Deletion||
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
|Protection Against Discrimination||
You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:
California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of the Platform that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us.
We do not monitor, recognize, or honor any opt-out or do not track mechanisms, including general web browser "Do Not Track" settings and/or signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer's online activities over time and across third-party websites or online services.
When you use the Platform, certain third parties may use automatic information collection technologies to collect information about you or your device. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites, apps, and other online services websites. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
If you are a user under the age of 18, you can send a request to remove any content or information you posted on the Platform by contacting us. Please notice that the removal does not ensure the complete or comprehensive removal of your posted content or information.
We are committed to ensuring that any information you provide to us is secure. To prevent unauthorized access or disclosure, we have put in place suitable measures and procedures to safeguard and secure the information that we collect.
The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Platform. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Platform.
If you would like to exercise any of your rights as described in this Policy, please:
Please note that you may only make CCPA-related data access or data portability disclosure requests twice within a 12-month period.
You will need to provide us with:
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.
You do not need to create an account with us to submit a request to know or delete. However, we do consider requests made through your password-protected account sufficiently verified when the request relates to the personal information associated with that specific account.
Any personal information we collect from you to verify your identity in connection with your request will be used solely for verification purposes.
We hope that we can resolve any query or concern you raise about our use of your information.
The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority, in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred.
We reserve the right to amend this Policy at our discretion and at any time. When we make changes to this Policy, we will post the updated Policy on the Platform and update the Policy's effective date, or notify you of the changes via other means of contact such as email. Your continued use of the Platform following the posting of changes constitutes your acceptance of such changes. You may also be asked explicitly to review and re-accept this Policy after the changes.
Please contact us if you have any questions about this Policy or the information we hold about you.
If you would like this notice in another format (for example audio, large print, braille) please contact us.