Purpose Privacy Policy

Last Revised: October 5, 2020

 
INTRO

Purpose Labs, Inc.  (“Purpose”, “our”, “we” or “us”) offers to its customers (each, a “Customer”) its proprietary self-serve simple data privacy Software, which enables Customers to scan their entire Company Cloud and to automatically discover and tag items of Personal Data, while producing a Data Mapping Report of the Personal Data that has been discovered (“Software”). In addition, our Website located at: www.purposeprivacy.com, offers its visitors (respectively “Website” and “Visitors”), information on our company, technology and information concerning our Software, as well as demos and trials of our Software (if such are made available). The Website together with the Software and related services we may provide to you from time to time, except if specifically designated otherwise, shall be referred to herein as the “Services”.

Purpose respects the privacy of the users of our Services, including: (I) Visitors (ii) Customers and Customers’ employees and personnel who use or access the Services under a Customer’s account (“User”, “You” or “Your”). This Privacy Policy (the “Privacy Policy” or “Policy”) is intended to describe our practices regarding the information we may collect from you when you use or access our, the ways in which we may use such information, and the choices and rights available to you.

This Policy supplements and shall be read in conjunction with our Terms of Use www.purposeprivacy.com/tou (the “TOU”) and our Cookie Policy www.purposeprivacy.com/cookie-policy (the “Cookie Policy”), and may be supplemented by additional privacy statements, terms or notices provided to you. Capitalized terms which are not defined herein, shall have the meaning ascribed to them in our TOU.

YOUR CONSENT 

PLEASE READ THIS PRIVACY POLICY BEFORE ACCESSING AND/OR USING THE SERVICES. BY ACCESSING OR USING THE SERVICES, YOU AGREE TO THE TERMS AND CONDITIONS SET FORTH IN THIS PRIVACY POLICY, INCLUDING TO THE COLLECTION AND PROCESSING OF YOUR PERSONAL INFORMATION (AS DEFINED BELOW). IF YOU DISAGREE TO ANY TERM PROVIDED HEREIN, YOU MAY NOT ACCESS OR USE THE SOFTWARE AND/OR THE WEBSITE.

Please note: you are not obligated by law to provide us with any Personal Information. You hereby acknowledge and agree that you are providing us with Personal Information as described in this Privacy Policy at your own free will. You hereby agree that we may collect and use such Personal Information pursuant to this Privacy Policy and any applicable laws and regulations.

TO THE EXTENT THAT YOU PROVIDE US WITH ANY PERSONAL INFORMATION RELATED TO ANY THIRD PARTY OR ANY OTHER PERSON OR ENTITY WHICH IS NOT YOU, INCLUDING INFORMATION RELATED TO ANY OF YOUR PERSONNEL, COLLEAGUES OR CUSTOMERS, YOU ARE SOLELY RESPONSIBLE TO RECEIVE AND HEREBY REPRESENT THAT YOU HAVE AND UNDERTAKE THAT YOU SHALL HAVE AT ALL TIMES, MAINTAINED AND RECEIVED, THE CONSENT, AUTHORITY, PERMISSION AND APPROVAL OF SUCH PERSONS AND PROVIDED THEM WITH SUFFICIENT DISCLOSURES, TO ALLOW PURPOSE TO ACCESS, STORE, COLLECT, ANALYZE AND PROCESS SUCH PERSONAL INFORMATION AS DETAILED HEREIN.

IN THIS POLICY YOU CAN READ ABOUT:

1. INFORMATION WE COLLECT

2. WHAT CATEGORIES AND TYPES OF DATA DO WE COLLECT?

3. OUR LEGAL BASIS FOR USE OF YOUR INFORMATION

4. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

5. JOB CANDIDATES

6. STORAGE AND INTERNATIONAL DATA TRANSFER

7. DATA RETENTION

8. USING COOKIES AND OTHER TRACKING TECHNOLOGIES

9. DATA SECURITY

10. YOUR RIGHTS

11. CHILDREN PRIVACY

12. GENERAL INFORMATION

1. INFORMATION WE COLLECT

First – What is Personal Data? “Personal Data” is information that identifies an individual or may with reasonable efforts or together with additional information we have access to, enable the identification of an individual, or may be of a private or sensitive nature relating to an identified or identifiable natural person. Identification of an individual also includes the association of such individual with a persistent identifier such as a name, an identification number, persistent cookie identifier etc.  Personal Data does not include information that has been anonymized or aggregated; provided, that, such information can no longer be used to identify a specific natural person.

In the course of downloading, accessing and/or using our Software, accessing our Websites or using our other Services, we receive your Personal Data through the following sources:

  • Data actively provided by You: Generally, this category refers to any information, data or content you actively and/or voluntarily create, upload or provide through our Services. For example, we collect the Personal Data that You actively input when registering or logging in to our Services, such as username and email address, your requests sent through the “contact us” option on the Services, your correspondence with our customer support team, when you apply for a job with us, etc. 

  • Personal Data we collect automatically when you use our Services: When operating our Services, we may use various tools and methods to collect information regarding your use of the Services. In other words, we are aware of your usage of the Services, Software and Website and may gather, collect and record the information relating to such usage, including by using our Subprocessors (as defined below) or tracking technologies such as cookies, JavaScript, beacons and Local Storage such as HTML5, and as further detailed below. You can learn more about these tracking technologies tools by reading the “AD IDENTIFIERS, COOKIES AND SIMILAR TECHNOLOGIES” section below.

  • Personal Data collected from other sources: Information from social networks. When using social login to log-in to the Services, we may have access to your public profile (if applicable). We collect your information from your social network account only if and to the extent you provided your permission for such collection. We may also collect personal information concerning you, from third parties who have assured us that they have obtained your consent for such provision of information. For example, we may collect and use your contact information from a Customer or Customer Admin if they used the Services to invite you to their Customer’s account as an End User, as allowed by applicable national laws. You can learn more about our third-party service providers and Business Partners by reading the “WITH WHOM DO WE SHARE YOUR PERSONAL DATA” section below.

2. WHAT CATEGORIES AND TYPES OF DATA DO WE COLLECT?

Most of the information that we collect when you use our Software and our Services is not Personal Data, however we collect and process the following types of information through the following respective methods of collection (as explained above):

Data actively provided by You: 

  • Information voluntarily provided by you: Contact information such as phone number and email, position, company, and any comments, feedback, reviews, recommendations, etc..

  • Support and communication data: If you contact us, for instance through our customer support channels, or respond to messages and communications that we send to you or publish on our social network accounts, we may keep a record of that correspondence and communication.

  • Information mandated by applicable law: Information we are required or otherwise authorized to collect under applicable laws to authenticate or identify you or to verify the information we have collected from you via our Services.

Personal Data we collect automatically when you use our Services:

  • Usage and Impression Data: details about how you use our Services and interact with our Software, Website or other services, such as session time and duration, pages you visited, methods used to browse away from a page, as well as information about your impressions of, and reactions to, products and advertisements that appear on the Services, such as your clicks and views.

  • Device and Technical Information - We collect information from and about the device(s) you are using to Use our Software or access our Services, as follows:

    • Identifiers: identifiers such as IP address, device identifiers and ad identifiers, etc. The country or region that you are browsing from can be derived from your IP address.

    • Device signals: Wi-Fi access points, connection speed, etc.

    • Cookie data: data from cookies stored on your device, including cookie IDs and settings. 

Please review the “AD IDENTIFIERS, COOKIES AND SIMILAR TECHNOLOGIES” section below to learn more about how we use cookies and other tracking technologies.

Personal information collected from other sources:

  • Information from social networks. When using social login to log-in to the Services, we may have access to your public profile (if applicable). We collect your information from your social network account only if and to the extent you provided your permission for such collection.

  • We may also collect personal information concerning you, from third parties who have assured us that they have obtained your consent for such provision of information. For example, we may collect and use your contact information from a Customer if they used the Services to invite you to their Customer’s account as an End User, as allowed by applicable national laws.

We may from time to time ask you for your consent to the collection of other information from you or your device. For instance, we may invite you to allow us to access your contacts to enable us to invite them to use our Services. If we do this or something similar, we will tell you what information we would like to collect, why we need it and what we’ll use it for.

If we combine Personal Data with non-Personal Data, the combined data will be treated as Personal Data. Further Personal Data will only be stored and processed if you voluntarily provide it to us, e.g. through a contact form.

3. OUR LEGAL BASIS FOR USE OF YOUR INFORMATION
 a. Legal Grounds for the collection and processing of Personal Data:
  • Provision of the Services: We collect and process your Personal Data to provide you with the Services, following your acceptance of this Privacy Policy; to maintain and improve our Services; to develop new services and features for our users; and to personalize the Services in order for you to get a better user experience. For example, we may send you offers concerning our Services which we think will be more relevant to your taste, based on your shopping habits (if you’re a Visitor) and your other activities across our Services; 

  • Legitimate interests: We process your information for our legitimate interests while applying appropriate safeguards that protect your privacy. Our legitimate interests may span things like detecting, preventing, or otherwise addressing fraud, abuse, security, usability, functionality or technical issues with our Services, protecting against harm to the rights, property or safety of our properties, users, or the public as required or permitted by law; enforcing legal claims, including investigation of potential violations of this Privacy Policy or defending against legal claims made by you or on your behalf;

  • With your consent: We ask for your agreement to process your information for specific purposes and you have the right to withdraw your consent at any time. For example, we ask for your consent to send you our marketing offers and communications;

  • Compliance with legal obligations: We may use your Personal Data in order to: comply with any applicable law, rule, regulation, guidelines, industry standards or other governmental authority; respond to or defend against legal proceedings brought against us or our affiliates; prevent fraud; investigate violations, and enforce our policies, including but not limited to our TOU [add link to Terms of Use].

 b. We may use your Personal Data for the following purposes:
  • to provide, operate and improve the Services;

  • to enable us to optimize and personalize our Software for you and for the device that you are using, as well as to deliver customized promotions as further discussed in Section 3.3 below;

  • to send you updates, notices, notifications, announcements, and additional information related to the Services;

  • to create aggregated statistical data and other aggregated and/or inferred Non-personal Data, which we may use to provide and improve our respective services;

  • to be able to contact you for the purpose of providing you with technical assistance, support and complaints and collect feedback, if you approach is with such requests and provide us with you contact details for such purpose; 

  • to verify your identity when we are approached with a request to exercise any of your rights hereunder or under our TOU;

  • to ensure that any purchases you make are verified on our servers and activated in the Software, and to provide you with user support if you need it;

  • to prevent, detect, mitigate, and investigate fraud, security breaches or other potentially prohibited or illegal activities, including any breaches of this Privacy Policy or of our TOU;

  • to perform functions or services as otherwise described to you at the time of collection;

  • To market our Services to Users or potential Users, and to be able to track and evaluate our marketing activities and their results and attribute different marketing achievements to the respective marketing efforts; and

  • to comply with any applicable rule or regulation, to protect our legal interests and/or respond to or defend against (actual or potential) legal proceedings against us or our affiliates.

We also analyze and use the information that we collect on an anonymized or aggregated basis for product development, to analyze the performance of our Software, to troubleshoot and to improve and optimize the Software and to ensure the best User experience for our users as a whole.

4. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We may share your Personal Data with third parties (or otherwise allow them access to it) only in the following manners and instances:

  • Internal Concerned Parties: We share your information with our family companies, as well as our employees, for the purposes described in this Privacy Policy and in accordance with Section 3 above. In addition, should Purpose or any of its affiliates undergo any change in control, including by means of merger, acquisition or purchase of substantially all of its assets, your Personal Data may be shared with the parties involved in such event under strict security condition, for the purpose of evaluating such event and in accordance with the terms of this Privacy Policy. If we believe that such change in control might materially affect your Personal Data then stored with us, we will notify you of this event and the choices you may have you via e-mail and/or prominent notice on our Website or Services.

  • Protecting Rights and Safety: We may share Personal Data to enforce this Privacy Policy and/or the End User License Agreement, including investigation of potential violations thereof; to detect, prevent, or otherwise address fraud, security or technical issues; to respond to claims that a content available on the Service violates the rights of third-parties; or otherwise if we believe in good faith that this will help protect the rights, property or personal safety of Purpose, any of our users, or any member of the general public.

  • Third Parties & Business Partners: We partner with certain third parties to provide selected services that are used to facilitate and enhance the Services and your use thereof (“Service Providers"). Such Service Providers may have access to, or process on our behalf personal information which we collect, hold, use, analyze, process and/or manage. These Service Providers include among others, hosting, database and server co-location services (e.g. AWS), data analytics services (e.g. Google Analytics), e-mail and text message distribution and monitoring services (e.g. Mailchimp), and our business, legal and financial advisors. We remain responsible for any personal information processing done by Service Provider on our behalf, except for events outside of our and/or their  reasonable control, and except with respect to Service Providers with whom you are contractually engaged, either  through a prior separate contractual engagement and/or through acceptance of their privacy policy and terms of use.

  • Law Enforcement Entities – We cooperate with government and law enforcement officials to enforce and comply with the law. We will disclose any data about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect our or a third party’s property and rights, to protect the safety of the public or any person, or to prevent or stop any activity we may consider to be, or to pose a risk of being, illegal, unethical, inappropriate or legally actionable. 

5. JOB CANDIDATES

Purpose welcomes all qualified candidates (“Candidates”) to apply to any of the open positions posted on our Website, Facebook, LinkedIn, by sending us their contact details and CV (“Candidates Information”). We are committed to keep Candidates’ Information private and use it solely for our internal recruitment purposes (including for identifying Candidates, evaluating their Softwares, making hiring and employment decisions, and contacting Candidates by phone or in writing).

Please note that the Purpose may retain Candidates Information submitted to it even after the applied position has been filled or closed for a reasonable time period. This is done so we could re-consider Candidates for other positions and opportunities at the Purpose; so, we could use their Candidates Information as reference for future Softwares submitted by them; and in case the Candidate is hired, for additional employment and business purposes related to their work. If you previously submitted your Candidates Information to the Purpose, and now wish to access it, update it or have it deleted from our systems, please contact us at jobs@purposeprivacy.com. 

6. STORAGE AND INTERNATIONAL DATA TRANSFER

Information regarding the Users may be maintained, processed and stored by us and our authorized affiliates and service providers in the United States, EU and in Israel.

While the data protection laws in the above jurisdictions may be different than the laws of your residence or location, please know that we, our affiliates and our service providers that store or process your personal information on our behalf are each committed to keep it protected and secured, pursuant to this Privacy Policy and industry standards, regardless of any lesser legal requirements that may apply in their jurisdiction.

Specifically, each of our Third Party Service Providers which store or process your Personal Information either: (i) assured us that they provide adequate safeguards to protect your rights to privacy including where applicable, by undertaking to comply with the EU Standard Contractual Clauses; (ii)  where applicable, hold and process such information on our behalf in jurisdictions which have been determined to ensure an adequate level protection by the EU Commission; (iii) perform such processing pursuant to your consent and acceptance of their privacy policy as further detailed in this Privacy Policy. 

By providing your information, you expressly consent to the place of storage and transfer described above, including transfers outside of the jurisdiction in which the information was provided.

7. DATA RETENTION

We retain the Personal Information we collect or receive from you only for as long as your registered account exists in our system and as needed in order to provide you with the Services and as otherwise necessary to comply with applicable laws and regulations.  If you withdraw your consent to us processing your Personal Information, including by deleting your account, we will delete your Personal Information from our systems (except to the extent such data in whole or in part is required to comply with any applicable rule or regulation and/or to respond to or defend against legal proceeding bought against us or our affiliates).

8. USING COOKIES AND OTHER TRACKING TECHNOLOGIES

We may use certain monitoring and tracking technologies to understand how you use our Services, including ones offered by Third Party Service Providers. These technologies are used in order to maintain, provide and improve our Services on an ongoing basis, and in order to provide a better experience to our Users. For example, these technologies enable us to: (i) keep track of and “remember” our Users’ preferences and authenticated sessions, (ii) secure our Services by detecting abnormal behaviors, (iii) identify technical issues and improve the overall performance of our Services, (iv) and create and monitor analytics. For more information, please follow the link to our Cookie Policy: [add link to Cookie Policy]. 

9. DATA SECURITY 

We take great care in implementing and maintaining the security of the Services and of your Personal Information. We have implemented administrative, technical and physical safeguards to help prevent unauthorized access, use or disclosure of your Personal Information. Your information is stored on secure servers and isn’t publicly available. We limit access of your information only to those employees, third party service providers or partners on a “need to know” basis, and strictly in order to enable us to perform the agreement between you and us. 

Despite these measures, Purpose cannot provide absolute information security or eliminate all risks associated with Personal Information, and security breaches may happen. If there are any questions about security, please contact us at security@purposeprivacy.com.

10. YOUR RIGHTS

If applicable to you under your country’s jurisdiction, you may have certain rights in connection with your Personal Information and how we handle it. You can exercise your rights at any time by contacting us via any of the methods set out in Section 16 below. Those rights may include, but are not limited to, the following:

 10.1 Right of access. You may have a right to know what information we hold about you and, in some cases, to have the

        information communicated to you. We reserve the right to ask for reasonable evidence to verify your identity before we

        provide you with any information. 

 10.2 Right to correct Personal Information. We endeavor to keep the information that we hold about you accurate and up

        to date. Should you realize that any of the information that we hold about you is incorrect, please let us know and we

        will use our best efforts to correct it as soon as we can.

 10.3 Data deletion. In some circumstances and under certain laws and regulations, you may have a right to request

        that some portions of the Personal Information that we hold about you be deleted or otherwise anonymized/de

        identified.

 10.4 Data portability. In some circumstances and under certain laws and regulations, you may have the right to request                 that data which you have provided to us is provided to you, so you can transfer or port it elsewhere.

 

California Privacy Rights: Residents of California please see our California Privacy Rights Statement for information about California Privacy Rights, and other required disclosures, if any.

11. CHILDREN PRIVACY

To use our Services, Users must be over the age of eighteen (18). Therefore, we do not knowingly collect Personal Information from individuals under the age of eighteen (18) and we do not wish to do so. We reserve the right to request proof of age at any stage so that we can verify that individuals under the age of eighteen are not using the Services. If you believe that we might have any information from or about an individual under the age of eighteen (18), please contact us at support@pruposeprivacy.com. In the event that it comes to our attention that a person under the age of eighteen (16) is using the Services, we may prohibit and block such User from using the Services and will make all efforts to promptly delete any Personal Information with respect to such User.

If you are submitting to the Services any Personal Information pertaining to any minor child, you hereby represent and warrant that you have received all the necessary legal consents or approvals or that you are the parent or legal guardian and have the actual authority and legal right to upload, submit, disclose or otherwise share such Personal Information and/or any other form of sensitive information, on the minor’s behalf.

12. GENERAL INFORMATION
 a. CHANGES TO THE PRIVACY POLICY 

This Privacy Policy is subject to changes from time to time, in our sole discretion. The most current version will always be posted on our Services (as reflected in the “Last Revised” heading). You are advised to check for updates regularly. We will provide notice of substantial changes of this Privacy Policy on the homepage of the Services and/or we will send you an e-mail regarding such changes to the e-mail address that you may have provided to us. Such substantial changes will take effect seven (7) days after such notice was provided on our Services or sent by email. Otherwise, all other changes to this Privacy Policy are effective as of the stated “Last Revised” date and your continued use of the Services after the Last Revised date will constitute acceptance of, and agreement to be bound by, those changes.

 b. CONTACT US

If you wish to exercise your rights or receive more information regarding our privacy protection practices, please contact us using the details provided below:

Purpose Labs, Inc.

support@purposeprivacy.com

Menahem Begin 121, Tel Aviv, Israel

© 2020 by Purpose Labs