Privacy Policy

Last Modified: November 11th, 2021

Privacy Policy

We are Zoints (the "Zoints Team," "we", "our", "us"). We’re committed to protecting and respecting your privacy.

This privacy policy (this "Policy") describes the types of information we may collect from you or that you may provide when you access and use https://zoints.com, its associated subdomains, and the mobile application "Zoints" (collectively, the "Platform") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Policy does not apply to information collected by any third party, including through any application or content (including advertising, if any) that may link to or be accessible from or on the Platform.

Please read this Policy carefully. If you do not agree with our policies and practices, your choice is not to use the Platform. By accessing or using the Platform, you agree to this Policy. This Policy may change from time to time (see "Changes to Our Privacy Policy"). Your continued use of the Platform after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children Under the Age of 16

The Platform is not intended for children under 16 years of age. No one under age 16 may provide any information to or on the Platform. We do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us.

What Information We Collect About You

We may collect and use the following personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:

Personal Information Category Examples Collected [YES/NO/COMMENTS]
A. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. YES, we collect:
  • Username
  • Email address
  • IP address
  • Other identifiers you voluntarily provide
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Some personal information included in this category may overlap with other categories.
We do NOT collect this category of personal information unless you voluntarily provide or we are obligated by law to collect.
C. Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). We do NOT collect this category of personal information unless you voluntarily provide it.
D. Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. We do NOT collect this category of personal information unless you voluntarily provide it.
E. Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. We do NOT collect this category of personal information unless you voluntarily provide it.
F. Internet or other similar network activity. Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. YES, we collect this category of personal information (such as technical information about the browser or type of device you're using) for analytical purposes, security reasons, and other purposes described in this Policy.
G. Geolocation data. Physical location or movements. YES, we collect your IP address and any information you voluntarily provide.
H. Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. We do NOT collect this category of personal information unless you voluntarily provide it.
I. Professional or employment-related information. Current or past job history or performance evaluations. We do NOT collect this category of personal information unless you voluntarily provide it.
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. We do NOT collect this category of personal information unless you voluntarily provide it.
K. Inferences drawn from other personal information. Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. We do NOT draw inferences from the personal information we collect from you.

The personal information of Categories A, F, and G (as described above) is required to provide the Platform services to you. If you do not provide the personal information we ask for, it may delay or prevent us from providing services to you.

How Your Personal Information Is Collected

We obtain the categories of personal information listed above from the following categories of sources:

  • Directly from you. The information we collect directly from you includes the information you provide by filling in forms on the Platform (such as registration and profile forms); records and copies of your correspondence; your search queries on the Platform; and other information you provide on the Platform.
You also may provide information to be published or displayed (hereinafter, "posted") on public areas of the Platform, or transmitted to other users of the Platform or third parties (collectively, "User Contributions"). Your User Contributions are posted on and transmitted to others at your own risk. Although you may set certain privacy settings for such information by logging into your account profile, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Platform with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
  • Automatically as you navigate through the Platform. Information collected automatically may include usage details, IP addresses, identifiers for mobile devices, and information collected through cookies and other tracking technologies. We have a detailed Cookie Policy and more information about the cookies that we set on this page.

We have implemented reCAPTCHA Enterprise on the Platform and the Google privacy policy and terms of service apply. reCAPTCHA Enterprise is used to fight spam and abuse on the Platform, and it works by collecting hardware and software information, such as device and application data, and sending this data to Google for analysis. The information collected in connection with our use of the reCAPTCHA Enterprise service will be used for providing, maintaining, and improving reCAPTCHA Enterprise and for general security purposes. It will not be used for personalized advertising by Google.

We may use Google Analytics to understand how visitors engage with the Platform. Data collected by Google Analytics includes first-party cookies, data related to the device/browser, IP address, and on-site/app activities to measure and report statistics about user interactions on the Platform. We do not use the advertising features of Google Analytics. If you don’t want Google Analytics to be used in your browser, you can install the Google Analytics browser add-on. For more details, please visit how Google uses data when you use our partners' sites or apps and Google Analytics and privacy.

We do not conduct any behavioral tracking or profiling on the Platform; however, some content or applications accessible on the Platform are served by third parties, including content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use the Platform. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

  • Third Parties. We may collect information about you from third parties, such as Twitter, if you connect your account with the third parties’ services. We collect such information for you to connect the accounts and do not use the information for any other purposes.

How and Why We Use Your Personal Information

We use (process) information that we collect about you or that you provide to us for the following purposes:

  • For the performance of our contract with you (such as our Terms of Use) or to take steps at your request related to the contract, including but not limited to:
    • Creating and maintaining your account with us.
    • Providing you with the Platform services, including sending you emails of any updates or important information of the Platform, such as newsletters or announcements of a particular community you subscribe to or notifications of changes to the Platform. Please note you can opt-in to or opt-out of such emails in your account settings.
    • Fulfilling or meeting the reason you provided the information.
    • Providing you with support, responding to your inquiries, and addressing your comments, concerns, and complaints.
  • For our legitimate interests or those of a third party, including but not limited to:
    • Ensuring the Platform policies are adhered to, e.g. policies covering security and rules regarding users’ conduct.
    • Operational reasons, such as improving efficiency and quality control, and maintaining the safety, security, and integrity of the Platform and other technology assets.
    • Testing, research, statistical analysis, and product development to help us manage, develop and improve the Platform.
    • Responding to legal claims, investigations, government or regulatory requests, court orders, or any other legal processes.
    • Protecting the rights, property, or safety of us, our users, or the others.
  • To comply with our legal and regulatory obligations, including:
    • Verifying the identity of the users (if required by law).
    • Screening for financial and other sanctions or embargoes.
    • Providing information required by or relating to audits, inquiries, or investigations by regulatory bodies.
    • Other processing necessary to comply with professional, legal, and regulatory obligations that apply to the Platform.
  • Where you have given us consent, such as:
    • Fulfilling or meeting the reason you provided the information.
    • Emailing you updates and announcements of the Platform after you opt-in to receive the notifications in your account settings.

Please note you have the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal). If you opt-in to receive email notifications, you can go to your account settings and opt-out of the emails. For other withdrawal requests, please contact us.

How We Share Your Personal Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this Policy:

  • To contractors, service providers, and other third parties we use to develop, maintain and support the Platform, such as developers and cloud service providers (collectively "Service Providers").
  • To fulfill the purpose for which you provide it.
  • For any other purpose disclosed by us when you provide the information.
  • With your consent.

We may also disclose your personal information:

  • To comply with any court order, law, or legal process, including to respond to any government or regulatory requests.
  • To enforce or apply our Terms of Use and other agreements.
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our users, or others.

Personal Information We Sold or Disclosed for a Business Purpose

In the preceding twelve (12) months, we have disclosed personal information for a business purpose to the categories of third parties indicated in the chart below. We do not sell any personal information.

Personal Information Category Category of Third-Party Recipients
  Business Purpose Disclosures Sales
A: Identifiers.
  • Service Providers.
  • Fraud prevention service provider (reCAPTCHA provided by Google).
  • Analytical service provider (Google Analytics).
NONE
B: California Customer Records personal information categories. Service Providers if you voluntarily disclose. NONE
C: Protected classification characteristics under California or federal law. Service Providers if you voluntarily disclose. NONE
D: Commercial information. Service Providers if you voluntarily disclose. NONE
E: Biometric information. Service Providers if you voluntarily disclose. NONE
F: Internet or other similar network activity.
  • Service Providers.
  • Fraud prevention service provider (reCAPTCHA provided by Google).
  • Analytical service provider (Google Analytics).
NONE
G: Geolocation data.
  • Service Providers.
  • Fraud prevention service provider (reCAPTCHA provided by Google).
  • Analytical service provider (Google Analytics).
NONE
H: Sensory data. Service Providers if you voluntarily disclose. NONE
I: Professional or employment-related information. Service Providers if you voluntarily disclose. NONE
J: Non-public education information. Service Providers if you voluntarily disclose. NONE
K: Inferences drawn from other personal information. NONE NONE

Where Your Personal Information is Held

The Zoints Team consists of developers and members in multiple continents. Information may be held at our offices and those of the Service Providers, and other third parties as described above (see above: "How We Share Your Personal Information")

To provide you with the services, we will need to process and store information outside of the European Economic Area (the "EEA"). For more information, including on how we safeguard your personal information when this occurs, see "Transferring Your Personal Information Out of the EEA".

How Long Your Personal Information Will Be Kept

We will keep your personal information while you have an account with us or while we are providing the Platform services to you. Thereafter, we will keep your personal information for as long as is necessary:

  • To respond to any questions, complaints, or claims made by you or on your behalf.
  • To show that we treated you fairly.
  • To keep records required by law.

We will not retain your personal information for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of personal information.

When it is no longer necessary to retain your personal information, we will delete or anonymize it.

Transferring Your Personal Information Out of the EEA

To provide you with the services, we will need to process and store information outside of the EEA, depending on a variety of factors, including but not limited to the locations of the Service Providers.

The following countries to which we may transfer personal information have been assessed by the European Commission as providing an adequate level of protection for personal information: Canada and the United Kingdom.

Except for the countries listed above, other countries we may transfer information to may not have the same data protection laws as the EEA.

By accessing or using the Platform or otherwise providing information to us, you consent to the processing, transfer, and storage of information in and to the U.S. and other countries, where you may not have the same rights as you do under local law.

We will, however, ensure the transfer complies with data protection law and all personal information will be secure. Our standard practice is to use standard data protection contract clauses that have been approved by the European Commission. To obtain a copy of those clauses, please contact us.

Accessing and Correcting Your Information

You can review and change your personal information by logging into your account and visiting the settings page.

You may also contact us to request access to, correct, or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

If you delete your User Contributions from the Platform, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Platform users. Proper access and use of information provided on the Platform, including User Contributions, is governed by our Terms of Use.

Users in EEA and California may have additional personal information rights and choices, as described in the sections below.

Your Rights Under the GDPR

Users in the European Economic Area have the following rights:

Right to Access The right to be provided with a copy of your personal information (the right of access)
Right to Rectification The right to require us to correct any mistakes in your personal information
Right to be Forgotten The right to require us to delete your personal information—in certain situations
Right to Restriction of Processing The right to require us to restrict processing of your personal information—in certain circumstances, e.g. if you contest the accuracy of the data
Right to Data Portability The right to receive the personal information you provided to us, in a structured, commonly used, and machine-readable format and/or transmit that data to a third party—in certain situations
Right to Object The right to object:
  • at any time to your personal information being processed for direct marketing (including profiling);
  • in certain other situations to our continued processing of your personal information, e.g. processing carried out for the purpose of our legitimate interests.
Right Not to be Subject to Automated Individual Decision-Making The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you

For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the General Data Protection Regulation.

Your Rights Under the CCPA

Users in California have certain rights under the California Consumer Privacy Act of 2018 ("CCPA") and certain other privacy and data protection laws, as applicable, to exercise free of charge:

Disclosure of Personal Information We Collect About You You have the right to know:
  • The categories of personal information we have collected about you;
  • The categories of sources from which the personal information is collected;
  • Our business or commercial purpose for collecting or selling personal information;
  • The categories of third parties with whom we share personal information, if any; and
  • The specific pieces of personal information we have collected about you.
Please note that we are not required to:
  • Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;
  • Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or
  • Provide the personal information to you more than twice in a 12-month period.
Personal Information Sold or Used for a Business Purpose In connection with any personal information we may sell or disclose to a third party for a business purpose, you have the right to know:
The categories of personal information about you that we sold and the categories of third parties to whom the personal information was sold; and
The categories of personal information that we disclosed about you for a business purpose.
You have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to opt out of the sale of your personal information. We do not sell your personal information.
Right to Deletion Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
  • Delete your personal information from our records; and
  • Direct any service providers to delete your personal information from their records.
Please note that we may not delete your personal information if it is necessary to:
  • Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
  • Debug to identify and repair errors that impair existing intended functionality;
  • Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
  • Comply with the California Electronic Communications Privacy Act;
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
  • Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
  • Comply with an existing legal obligation; or
  • Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Protection Against Discrimination You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:
  • Deny goods or services to you;
  • Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
  • Provide a different level or quality of goods or services to you; or
  • Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
Please note that we may charge a different price or rate or provide a different level or quality of goods and/or services to you, if that difference is reasonably related to the value provided to our business by your personal information.

Other California Privacy Rights

Shine the Light Law Disclosure

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of the Platform that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us.

"Do Not Track" Disclosure

We do not monitor, recognize, or honor any opt-out or do not track mechanisms, including general web browser "Do Not Track" settings and/or signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer's online activities over time and across third-party websites or online services.

When you use the Platform, certain third parties may use automatic information collection technologies to collect information about you or your device. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites, apps, and other online services websites. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Eraser Law Disclosure

If you are a user under the age of 18, you can send a request to remove any content or information you posted on the Platform by contacting us. Please notice that the removal does not ensure the complete or comprehensive removal of your posted content or information.

Keeping Your Personal Information Secure

We are committed to ensuring that any information you provide to us is secure. To prevent unauthorized access or disclosure, we have put in place suitable measures and procedures to safeguard and secure the information that we collect.

The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Platform. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Platform.

How to Exercise Your Rights

If you would like to exercise any of your rights as described in this Policy, please:

Please note that you may only make CCPA-related data access or data portability disclosure requests twice within a 12-month period.

You will need to provide us with:

  • Sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative (e.g., username and verification via email on record); and
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.

You do not need to create an account with us to submit a request to know or delete. However, we do consider requests made through your password-protected account sufficiently verified when the request relates to the personal information associated with that specific account.

Any personal information we collect from you to verify your identity in connection with your request will be used solely for verification purposes.

How to File a GDPR Complaint

We hope that we can resolve any query or concern you raise about our use of your information.

The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority, in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred.

Changes to This Privacy Policy

We reserve the right to amend this Policy at our discretion and at any time. When we make changes to this Policy, we will post the updated Policy on the Platform and update the Policy's effective date, or notify you of the changes via other means of contact such as email. Your continued use of the Platform following the posting of changes constitutes your acceptance of such changes. You may also be asked explicitly to review and re-accept this Policy after the changes.

How to Contact Us

Please contact us if you have any questions about this Policy or the information we hold about you.

Do You Need Extra Help

If you would like this notice in another format (for example audio, large print, braille) please contact us.

Top