Connect-CRM Privacy Policy

1. Definitions

Client

A customer of Connect Labs.

Client Data

Personal data and files stored in the Service by a User.

Personal Data

Information relating to an identified or identifiable natural person.

Public Area

Site areas accessible to all without login.

Restricted Area

Site areas accessible only to Users with login.

User

Authorized user of a Client accessing the restricted area.

Visitor

Non-user accessing the public area.

2. Roles & Responsibilities

Connect Labs is the controller of your Personal Data, as described in this Privacy Notice, unless otherwise stated. Please note that this Privacy Notice does not apply to the extent that we process Personal Data in the role of a processor (or a comparable role such as a “service provider” in certain jurisdictions) on behalf of our Clients, including where we offer to our Clients various cloud products and services, through which our Clients (and/or their affiliates) connect their own websites and applications to our hosted platform, sell or offer their own products and services, send electronic communications to other individuals, or otherwise collect, use, share or process Personal Data via our cloud products and services. In such cases, Connect Labs does not own, control or direct the use of any of the Client Data stored or processed by a Client or User via the Service. Only the Client or Users are entitled to access, retrieve and direct the use of such Client Data. The Client or the User is the data controller under the Regulation for any Client Data containing Personal Data.

For detailed privacy information applicable to situations where a Connect Labs Client (and/or a Client affiliate) who uses Connect Labs’s cloud products and services is the controller, please reach out to the respective Client directly. We are not responsible for the privacy or data security practices of our Clients, which may differ from those set forth in this Privacy Notice. If not stated otherwise either in this Privacy Notice or in a separate disclosure, we process such Personal Data in the role of a processor or service provider on behalf of a Client (and/or its affiliates), who is the responsible controller of the applicable Personal Data.

If your Personal Data has been submitted to us by or on behalf of a Connect Labs Client and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable Client directly.

Connect Labs is largely unaware of what Client Data is actually being stored or made available by a Client or User to the Service and does not directly access such Client Data except as authorized by the Client, or as necessary to provide Services to the Client and its Users. Except as provided in this Privacy Notice, Connect Labs does not independently cause Client Data containing Personal Data stored in connection with the Services to be transferred or otherwise made available to third parties, except to third party Sub-processors who may process such data on behalf of Connect Labs in connection with Connect Labs’s provision of Services to Clients.

Connect Labs is not responsible for the content of the Personal Data contained in the Client Data or other information stored on its servers (or its sub-processors’ servers) at the discretion of the Client or User nor is Connect Labs responsible for the manner in which the Client or User collects, handles disclosure, distributes or otherwise processes such information. If you are a Connect Labs Client and need a signed Data Processing Addendum in addition to the Terms of Service and Privacy Notice, you can find the document signed on behalf of Connect Labs here.

3. The Information We Collect

We collect different types of information from or through the Service.

3.1 Information you provide directly

Account sign-up:

When you sign up for an account to access one or more of our services, we ask for information like your name, contact number, email address, company name and country to complete the account signup process. You may also provide us with more information such as your photo, time zone and language, but we don’t require that information to sign up for an account.

Event registrations and other form submissions:

We record information that you submit when you (i) register for any event, including webinars or seminars, (ii) subscribe to our newsletter or any other mailing list, (iii) submit a form in order to download any product, whitepaper, or other materials, (iv) participate in contests or respond to surveys, or (v) submit a form to request customer support, or to contact Connect Labs for any other purpose.

Payment processing:

When you buy something from us, we ask you to provide your name, contact information, and credit card information or other payment account information. When you submit your card information, we store the name and address of the cardholder, the expiry date and the last four digits of the credit card number. We do not store the actual credit card number. For quick processing of future payments, if you have given us your approval, we may store your credit card information or other payment information in an encrypted format in the secured servers of our Payment Gateway Service Providers.

Testimonials:

When you authorize us to post testimonials about our products and services on websites, we may include your name and other personal information in the testimonial. You will be given an opportunity to review and approve the testimonial before we post it. If you wish to update or delete your testimonial, you can contact us at privacy@connect-crm.com.

Interactions with Connect Labs:

We may record, analyze and use your interactions with us, including email, telephone, and chat conversations with our sales and customer support professionals, for improving our interactions with you and other customers.

3.2 Information Collected by Clients

A Client or User may store or upload Client Data into the Service. Connect Labs has no direct relationship with the individuals whose Personal Data it hosts as part of Client Data. Each Client is responsible for providing notice to its customers and third persons concerning the purpose for which Client collects their Personal Data and how this Personal Data is processed in or through the Service as part of Client Data.

3.3 Automatically Collected Information

Information from browsers, devices and servers:

When you visit our websites, we collect information that web browsers, mobile devices and servers make available, such as the internet protocol address, browser type, language preference, time zone, referring URL, date and time of access, operating system, mobile device manufacturer and mobile network information. We include these in our log files to understand more about visitors to our websites.

Information from cookies on our public website:

Until you accept the consent banner on connect-crm.com, the website counts visits without setting a cookie and without identifying you: each visit is counted on its own and is not connected to any other. If you accept the banner, the website sets a cookie so that a visit can be connected to a signup made from it, and to other visits from the same browser. Nothing else is set. If you decline, the website stays cookieless for you. On either basis, the website also measures how quickly each page loads and responds (its web vitals): timings of the page, sent with the visit and nothing more. Visit counting, on either basis, is processed for us by PostHog in the European Union, as described under “Information from your use of the Service” below.

Information from your use of the Service:

When you are signed in to the Service, we record how you use the product itself: the pages you view, the buttons and controls you click, the size of screen you worked from, the browser and device you used, and the errors you ran into. Each of these is attributed to your user account and to the workspace you were signed in to, so that we can see whether a change we shipped worked for the people it was meant for. We may also record a replay of your session — the sequence of screens and clicks — in which all text, form inputs, addresses and browser console output are masked before they leave your browser. A masked replay shows where you went and what you pressed; it does not show what you typed or read. Application logs on our own servers record errors and performance data alongside this. This information is processed for us by PostHog, a processor in the European Union, and never includes the contents of your Client Data: no message, no contact, record or message identifier, no phone number and no name of the people you communicate with is sent as part of this measurement. Two things you do are counted under a stand-in rather than under the thing itself. When you open a chat, what is recorded is a value derived from that chat inside your workspace: the same chat is ordinarily the same value every time you open it, though matching the other person to one of your contacts for the first time gives the chat a new value from then on. This lets us count how many different chats you opened, and the value cannot be turned back into the chat, the contact or a message by anyone outside our own systems. When you press send, your browser makes up a random token for that one attempt and records it; the token is not derived from the message or from anything about it, and its only purpose is the join described below.

Outcomes recorded by our servers:

Some of what you do finishes on our servers rather than in your browser — a message you composed leaves after you press send, an import you confirmed writes its contacts a few minutes later. For these we record the outcome itself, attributed the same way, and, wherever a browser session caused it, joined to that exact session, so that an action is counted once: that a message you composed was sent, including one you scheduled, or could not be sent; that a message you sent was delivered, where the channel reports delivery; that a contact was created, by you or by an import you confirmed; that an import you confirmed finished; that you connected a channel; that somebody was invited to your workspace; or that somebody accepted an invitation to your workspace. A delivery, an invitation and an acceptance of one reach us through the channel or through your workspace rather than through your browser, so each carries no session at all; the others join the session that started them. A message you sent from your browser also carries the token your browser made up when you pressed send, and the outcome our servers record carries the same token, so the press and the outcome are counted as one send rather than two. A delivery and an invitation are also not attributed to any person — a delivery is joined to the send it confirms by a second value, derived one-way from the message on our servers, that identifies neither the message nor anyone on it, and an invitation names only the role it offered, never the address it went to. An acceptance is different: it names the person who joined, which is how the email address below reaches your own account. Each of these carries which part of the product it came from — the product itself, a mass message, Connie, or a connected AI client — and nothing about the message, the contact or the person you were communicating with: a message-sent record names only the channel it left on, a contact-created record names only the kind of record, and an import-finished record names only how many rows it wrote. Anything a connected AI client does under your grant — sending a message, or creating a contact — is attributed to your workspace rather than to you as a person, since the action is the client’s and not literally yours. A send on a Facebook or Instagram channel is attributed to the member who sent it, exactly as a send on any other channel is, even though those channels belong to the workspace rather than to one member. When you join a workspace, the email address you joined with is recorded on your own account in the measurement — the one place an email address appears — and never on the event itself.

Requests made with an API key, and tools used by a connected AI client:

Each request to our API made with one of your workspace’s keys, and each tool a connected AI client uses under your grant, is counted for your workspace, reads and writes alike, with which operation or tool it was and whether it succeeded, and nothing about what it read or wrote. The count is attributed to your workspace only: an API key, a tool or a connected client is never recorded as a person, and the member who created the key is not named on it. This is processed for us by PostHog on the same basis as the measurement above.

3.4 Information from Third Parties

Signups using federated authentication service providers:

You can log in to Connect Labs Services using supported federated authentication service providers such as Meta, LinkedIn, Microsoft and Google. These services will authenticate your identity and give you the option to share certain personal information with us, such as your name and email address. You should check your privacy settings on each Integrated Service to understand what information that Integrated Service makes available to us, and make changes as appropriate. Please review each Integrated Service’s terms of use and privacy policies carefully before using their services and connecting to our Service.

Referrals:

If someone has referred any of our products or services to you through any of our referral programs, that person may have provided us your name, email address and other personal information. You may contact us at privacy@connect-crm.com to request that we remove your information from our database. If you provide us information about another person, or if another person gives us your information, we will only use that information for the specific reason for which it was provided to us.

Information from our reselling partners and service providers:

If you contact any of our reselling partners, or otherwise express interest in any of our products or services to them, the reselling partner may pass your name, email address, company name and other information to Connect Labs. If you register for or attend an event that is sponsored by Connect Labs, the event organizer may share your information with us. Connect Labs may also receive information about you from review sites if you comment on any review of our products and services, and from other third-party service providers that we engage for marketing our products and services.

Information we collect and process when you integrate the Service with third parties:

You may connect third party integrations to your Connect Labs account, which may ask for certain permissions to access data or send information to or from your Connect Labs account. It is your responsibility to review any third party integrations you authorize. We may collect information about what types of integrations you use in your Connect Labs account. Any permission(s) granted by you, grants these third parties access to your data, which may include (but is not limited to) granting third party applications access to view, store, and modify your Connect Labs account data. We are not responsible for the practices of third party integrations, so please carefully review the permissions you grant to third party applications. For more information on integrations with third party providers, please see here

Information from social media sites and other publicly available sources:

When you provide feedback or reviews about our products, interact, or engage with us on marketplaces, review sites or social media sites such as Facebook, Twitter, LinkedIn and Instagram through posts, comments, questions and other interactions, we may collect such publicly available information, including profile information, to allow us to connect with you, improve our products, better understand user reactions and issues, or to reproduce and publish your feedback on our websites. We must tell you that once collected, this information may remain with us even if you delete it from these sites. Connect Labs may also add and update information about you, from other publicly available sources.

4. How We Use the Information

4.1 Operations

To maintain and enhance the Service, provide support, and ensure security.

• To set up and maintain your account, and to do all other things required for providing our services, such as enabling collaboration, providing website and email hosting, and backing up and restoring your data;
• To provide customer support, and to analyze and improve our interactions with customers;
• To detect and prevent fraudulent transactions and other illegal activities, to report spam, and to protect the rights and interests of Connect Labs, Connect Labs's users, third parties and the public.

We process Client Data solely in accordance with the directions provided by the applicable Client or User.

4.2 Improvements

We use the information:

• To understand how users use our products and services, to monitor and prevent problems, and to improve our products and services;
• To analyze trends, administer our websites, and track visitor navigations on our websites to understand what visitors are looking for and to better help them;

Should this purpose require Connect Labs to process Client Data, then the data will only be used in anonymized or aggregated form.

4.3 Communications

In addition to the purposes mentioned above, we may use your information for the following purposes:

• To communicate with you (such as through email) about products and materials that you have downloaded and services that you have signed up for, changes to this Privacy Notice, changes to the Terms of Service, or important notices;
• To keep you posted on new products and services, upcoming events, offers, promotions and other information that we think will be of interest to you;
• To ask you to participate in surveys, or to solicit feedback on our products and services;

4.4 Analytics

• To see how the Service is actually used by signed-in Users, and whether a change we shipped helped, through the usage measurement described in Section 3.3;
• To update, expand and analyze our records, identify new customers, and provide products and services that may be of interest to you;
• To monitor and improve marketing campaigns and make suggestions relevant to the user.

4.5 Legal Bases (UK/EEA)

If you are an individual in the United Kingdom, the European Economic Area (EEA), or of another relevant jurisdiction, we collect and process information about you only where we have a legal basis or bases for doing so under applicable laws. The legal bases depend on the products and services that your organization has purchased from Connect Labs, how such products and services are used, and how you choose to interact and communicate with Connect Labs’s websites, systems, and whether you attend Connect Labs events. This means we collect and use your Personal Data only where:

• We need it to operate and provide you with our products and services, provide customer support and personalized features, and to protect the safety and security of our products and services;
• It satisfies a legitimate interest of Connect Labs’s (which is not overridden by your data protection interests and rights), such as for research and development, to provide information to you about our products and services that we believe you and your organization may find useful, and to protect our legal rights and interests;
• You give us consent to do so for a specific purpose; or
• We need to comply with a legal obligation.

The usage measurement of signed-in Users described in Section 3.3 is processed because it is necessary to operate and improve the Service your organization has contracted for. The cookie on our public website is set only with your consent, given through the consent banner.

Where we rely on legitimate interests to process your Personal Data, you can object to that processing as described below under “Your Choices.” In response to your objection, we will stop processing your information for the relevant purposes unless we have compelling grounds in the circumstances or the processing is necessary in the context of legal claims. Connect Labs may also process other information that constitutes your Personal Data for direct marketing purposes and you have a right to object to Connect Labs’s use of your Personal Data for this purpose at any time.

4.6 Additional Limits on Use of Your Google User Data

Notwithstanding anything else in this Privacy Notice, if you provide Connect Labs access to your Google data (e.g., when you enable the email sync feature with your Google account), Connect Labs’s use of that data will be subject to these additional restrictions:

• Connect Labs will only use access to read, write, modify or control Gmail message bodies (including attachments), metadata, headers, and settings to provide a web email client that allows users to compose, send, read, and process emails and will not transfer this Gmail data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.
• Connect Labs will not use this Gmail data for serving advertisements.
• Connect Labs will not allow humans to read this data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for Connect Labs’s internal operations and even then only when the data have been aggregated and anonymized.

Connect Labs’s use of information received and Connect Labs’s transfer of information to any other app from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5. To Whom We Disclose Information

Except as described in this Notice, we will not intentionally disclose the Personal Data or Client Data that we collect or store on the Service to third parties without the consent of the applicable Visitor, User or Client. We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:

5.1 Unrestricted Information

Any information that you voluntarily choose to include in a Public Area of the Service, such as a public profile page, will be available to any Visitor or User who has access to that content.

5.2 Other Users in Your Company Account

Certain information about your use of the Connect Labs Services is available to the administrator(s) of your Connect Labs Account and, depending on the settings chosen by the Users of the Account, also to other Users for the purposes of providing the Connect Labs Services.

5.3 Service Providers

We work with third party service providers who provide website, application development, hosting, maintenance, security and fraud detection, and other services for us. These third parties may have access to, or process Personal Data or Client Data as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information.

The usage measurement described in Section 3.3 — visits to our public website, and the pages, clicks and masked session replays of signed-in Users — is processed on our behalf by PostHog Inc., acting as our Sub-processor, on its cloud service hosted in the European Union. The data is stored in the EU and is not transferred out of it by us.

5.4 Connect Labs Communities, Marketplace and Other User Generated Content

We make available various community forums and self-help support materials, as well as blogs and other means for you to post information on our websites. This information you post is publicly-available information that you choose to disclose and it may be read, collected, and processed by others that visit these websites. Except for username (which may be your real name) and the details that you choose to include in your profile, the categories of data disclosed in these circumstances will depend on what information you choose to provide. Your posts and certain profile information may remain even after you terminate your Connect Labs account. We urge you to consider the sensitivity of any information you may disclose in this way. We will correct or delete any information you have posted on the websites if you so request, as described in Section 10 "Your Choices" below. In some cases, we may not be able to remove your information, in which case we will let you know if we are unable to and why.

5.5 Partners

We may share data with trusted Connect Labs partners to contact you based on your request to receive such communications, help us perform statistical analysis, provide sales support, or provide customer support. Partners are prohibited from using your Personal Data except for these purposes, and they are required to maintain the confidentiality of your data. We partner with trusted third parties to provide content that we think may be relevant to you. When you engage with these partners, we will tell you who we are sharing data with and provide a link to the partner’s privacy policy so you can learn how to opt out of the partner’s communications. These partners are required to adhere to our privacy and data protection policies. For more information on our partner program, see this page. If you do not want us to share your Personal Data with these companies, please contact our partner's team at partners@connect-crm.com.

5.6 Non Personally Identifiable Information

We may make certain automatically-collected, aggregated, or otherwise non-personally-identifiable information available to third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding our Clients’, Users’ and Visitors’ interests, habits, and usage patterns for certain programs, content, services, and/or functionality available through the Service, all of the foregoing being subject to additional limits on use of your data as stated in this Privacy Notice.

5.7 Law Enforcement, Legal Process and Compliance

We may disclose Personal Data or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a facially valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies. We also reserve the right to disclose Personal Data or other information that we believe, in good faith, is appropriate or necessary to (i) take precautions against liability, (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity, (iii) investigate and defend ourselves against any third-party claims or allegations, (iv) protect the security or integrity of the Service and any facilities or equipment used to make the Service available, or (v) protect our property or other legal rights, enforce our contracts, or protect the rights, property, or safety of others.

5.8 Change of Ownership

Information about Users and Visitors, including Personal Data, may be disclosed and otherwise transferred to an acquirer, successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets and only if the recipient of the User or Visitor Data commits to a Privacy Policy that has terms substantially consistent with this Privacy Notice. Client Data may be physically or electronically transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets, for the sole purpose of continuing the operation of the Service, and only if the recipient of the Client Data commits to a Privacy Policy that has terms substantially consistent with this Privacy Notice.

6. Data Security

At Connect Labs, we take data security very seriously. We have taken steps to implement appropriate administrative, technical & physical safeguards to prevent unauthorized access, use, modification, disclosure or destruction of the information you entrust to us. These measures have been audited and certified to industry standards. However, no security system is perfect, and due to the inherent nature of the Internet, we cannot guarantee that data, including Personal Data, is absolutely safe from intrusion or other unauthorized access by others. You are responsible for protecting your password(s) and other authentication factors, as well as maintaining the security of your devices. If you believe your Personal Data has been compromised, please contact us as set forth in the “How to Contact Us” section. If we learn of a security systems breach, we will inform you and the authorities of the occurrence of the breach in accordance with applicable law.

6. Data Security

At Connect Labs, we take data security very seriously. We have taken steps to implement appropriate administrative, technical & physical safeguards to prevent unauthorized access, use, modification, disclosure or destruction of the information you entrust to us. These measures have been audited and certified to industry standards. However, no security system is perfect, and due to the inherent nature of the Internet, we cannot guarantee that data, including Personal Data, is absolutely safe from intrusion or other unauthorized access by others. You are responsible for protecting your password(s) and other authentication factors, as well as maintaining the security of your devices. If you believe your Personal Data has been compromised, please contact us as set forth in the “How to Contact Us” section. If we learn of a security systems breach, we will inform you and the authorities of the occurrence of the breach in accordance with applicable law.

7. International Data Transfers

Connect Labs may transfer your Personal Data to countries other than the one in which you live, including transfers to the United States. To the extent that Personal Data is transferred abroad, Connect Labs will ensure compliance with the requirements of the applicable laws in the respective jurisdiction in line with Connect Labs’s obligations. In particular, we offer the following safeguards if Connect Labs transfers Personal Data from jurisdictions with differing data protection laws:

• European Commission’s Standard Contractual Clauses. Connect Labs uses Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to countries not subject to an adequacy decision by the European Commission or your local legislature and/or regulator.

8. Children’s Privacy

Protecting the privacy of young children is especially important. Our Service is not directed nor intended to children under the age of 18, and we do not knowingly collect Personal Data from children under the age of 18. If you are under 18 years of age, then please do not use or access the Service at any time or in any manner. If we learn that Personal Data has been collected on the Service from persons under 18 years of age and without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under 18 years of age has obtained an Account on the Service, then you may alert us atprivacy@connect-crm.com and request that we delete that child’s Personal Data from our systems.

9. Data Retention

We will retain your Personal Data for a period of time that is consistent with the original purpose of the data collection, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer have a legitimate need to process your information, we will delete or anonymize your information from our active databases. We will also securely store the information and isolate it from further processing on backup discs until deletion is possible. For Connect Labs CRM Service:

• the contents of closed accounts are deleted within 180 days of the date of closure;
• the content of closed Free Trial Accounts are deleted within 60 days of the date of closure;
• server archival backups are kept for 7 days

For the usage measurement described in Section 3.3, held for us by PostHog in the European Union:

• recorded events — page views, clicks and the attributes attached to them — are kept for up to 7 years;
• session replays are kept for 30 days;
• one request to privacy@connect-crm.com removes you as a person from the measurement, together with your events and your recordings;
• when a workspace is deleted, the details held about it in the measurement are blanked.

10. Your Choices

10.1 Your rights with respect to information we hold about you as a controller

Right to access

you have the right to know which data we hold about you (if any).

Right to data rectification

you have the right to require corrections to your Personal Data in case they are inaccurate or incomplete.

Right to data deletion

you have the right under certain conditions to request the deletion of your Personal Data including in situations where the processing of your Personal Data is no longer necessary for the purposes for which it was collected, or if the processing of your Personal Data was based on your consent and you wish to withdraw your consent, and there are no other grounds for processing your Personal Data.

Right to restriction of processing

You may also have the right to request to restrict the use of your information in certain circumstances, such as when you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Right to data portability

You have the right to transfer your information to a third party in a structured, commonly used and machine-readable format, in circumstances where the information is processed with your consent or by automated means.

Right to object

You have the right to object to the use of your information in certain circumstances, such as the use of your personal information for direct marketing.

Right to complain

You have the right to complain to the appropriate supervisory authority if you have any grievance against the way we collect, use or share your information. This right may not be available to you if there is no supervisory authority dealing with data protection in your country.

We respect your privacy rights and provide you with reasonable access to the Personal Data that you may have provided through your use of the Services. If you wish to access or amend any other Personal Data we hold about you, or to request that we delete or transfer any information about you that we have obtained from an Integrated Service, you may contact us as set forth in the “How to Contact Us” section. At your request, we will have any reference to you deleted or blocked in our database. Additionally,

• You may update, correct, or delete your Account information and preferences at any time by accessing your Account settings page on the Service. Please note that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.
• You may decline to share certain Personal Data with us, in which case we may not be able to provide to you some of the features and functionality of the Service.
• Optional information: You can choose not to provide optional profile information such as your photo. You can also delete or change your optional profile information.
• You can always choose not to fill in non-mandatory fields when you submit any form linked to our websites.

At any time, you may object to the processing of your Personal Data, on legitimate grounds, except if otherwise permitted by applicable law. If you believe your right to privacy granted by applicable data protection laws has been infringed upon, please contact Connect Labs’s Data Protection Officer at privacy@connect-crm.com.

10.2 Navigation Information

On our public website, the only cookie used for measurement is the one set when you accept the consent banner. Decline the banner and no cookie is set; visits are counted without identifying you. If you accepted earlier and change your mind, delete the cookie for connect-crm.com in your browser and the website returns to counting your visits without a cookie.

In the Service, the usage measurement described in Section 3.3 is part of how the product is operated for your organization. Capture can be stopped for everybody at once, and we can do that within one deployment of the Service; we do not promise anything faster. To have what has been recorded about you removed — you as a person, your events and your recordings — send one request to privacy@connect-crm.com.

10.3 Opting out from Commercial Communications

You may opt out of receiving newsletters and other non-essential messages by using the `unsubscribe` function included in all such messages or by sending an email to the address provided in the “How to Contact Us” section. Please note that you will continue to receive essential notices and emails such as account notification emails (password change, renewal reminders, etc.), security incident alerts, security and privacy update notifications, and essential transactional and payment related emails. Users are able to view and modify settings relating to the nature and frequency of promotional communications that they receive from us by accessing the “Account functionality” tab on the Service.

10.4 Information processed on Connect Labs Client’s behalf

Connect Labs has no direct relationship with the Client’s customers or third party whose Personal Data it may process on behalf of a Client. An individual who seeks access, or who seeks to correct, amend, delete inaccurate data or withdraw consent for further contact should direct his or her query to the Client or User they deal with directly. Connect Labs Clients can delete, amend or block access to any Personal Data inside Connect Labs application, or by contacting Connect Labs Support.

11. California Privacy Rights

Under the California Consumer Privacy Act of 2018 (“CCPA”), California residents have certain rights to understand and request that we disclose details about how we handle your Personal Data. To learn more about how we collect, use, disclose, and share your Personal Data, please see below.

11.1 Categories of Personal Data Collected

In the preceding 12 months, we have collected the following categories of Personal Data about California consumers. We may collect this Personal Data directly from you, from third parties, and from your interactions with us. For additional details about the Personal Data that we collect and the sources from which we collect this Personal Data, please review Section 3 above. The Personal Data categories are:

• Identifiers, such as name, email address, address, and phone number;
• Commercial information, such as records of products or services purchased and other transactional data;
• Internet or other network or device activity details, such as technical data about your use of our website, products and services;
• Geolocation data, such as your approximate location based on IP address;
• Financial information, such as Payment Information or financial account numbers in the process of providing you with a subscription.
• Other Personal Information, in instances when you interact with us online, by phone or mail in the context of receiving help through our help desks or other support channels; participation in customer surveys or contests; or in providing the Service.
• Inferences drawn from any of the above information.

We may retain this Personal Data for as long as is needed for the purpose(s) for which it was collected and no longer than is relevant and reasonably necessary. Our retention periods vary based on business, legal and regulatory needs.

11.2 Business and Commercial Purposes for Collection; Disclosures for a Business Purpose

We may collect all of the above categories of Personal Data to run our business and carry out our day-to-day activities, as described above in Section 4. We have disclosed each of these categories of Personal Data with our service providers for various business purposes, as described above in Section 5, in the preceding 12 months.

11.3 Categories of Personal Data Sold or Shared for Cross-Context Behavioral Advertising

In the preceding 12 months, we have disclosed the above categories of Personal Data to third-party advertising partners, such as in connection with our use of tracking technologies for cross-context behavioral advertising or by providing lists of email addresses for potential customers, so that we can reach you across the web with advertisements for our products and services. This may be considered “sharing” or a “sale” under the CCPA. You can read more about our sharing and sales activities above in Section 3 and Section 5. Connect Labs does not have actual knowledge that it sells or shares the Personal Data of consumers under 16 years of age.

11.4 Your Rights

The CCPA gives you certain rights regarding the Personal Data we collect about you:

• Right to Know About Personal Data Collected, Disclosed, or Sold. You have the right to request to know what Personal Data we collect, use, disclose, share and sell about you.
• Right to Request Deletion of Personal Data. You have the right to request the deletion of your Personal Data collected or maintained by us as a business.
• Right to Opt-Out of the Sale or Sharing of Personal Data. You have the right to opt-out of the sale of your Personal Data by us as a business. Connect Labs shares Personal Data as described above, which may be considered a “sale” of Personal Data under the CCPA.

You may opt out of the measurement cookie on our public website by declining the consent banner, or by deleting the cookie for connect-crm.com in your browser, as described in Section 10.2. You may exercise any of the rights in this Section by writing to privacy@connect-crm.com. We do not currently respond to opt-out preference signals such as the Global Privacy Control (GPC) — see Section 12.

• Right to Limit the Use and Disclosure of Sensitive Personal Data. In some instances, we may use or disclose your Sensitive Personal Data for the legitimate business purposes as outlined under the CCPA, and for any other purposes as set forth in Section 4, above.
• Right to Correct Inaccurate Personal Data. You have the right to request the correction of your Personal Data if it is inaccurate and you may submit a request as further described below.
• Right to Non-Discrimination for the Exercise of Your Privacy Rights. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.

11.5. How to Exercise your California Rights

• You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent'sidentity to protect your Personal Information.
• Financial Incentives. We do not provide any financial incentives tied to the collection, sale, or deletion of your Personal Data.

If you would like to make a request and exercise your rights described above, please contact us via privacy@connect-crm.com

12. Do Not Track (DNT)

Connect Labs does not respond to “Do Not Track” settings or other related mechanisms at this time.

13. Changes and Updates to this Notice

Please revisit this page periodically to stay aware of any changes to this Notice, which we may update from time to time. If we modify the Notice, we will make it available through the Service, and indicate the date of the latest revision, and will comply with applicable law. Your continued use of the Service after the revised Notice has become effective indicates that you have read, understood and agreed to the current version of the Notice.

14. Contact Us

Please contact us with any concerns, complaints, questions or comments about this Notice, your Personal Data, our use and disclosure practices, or your consent choices by email at privacy@connect-crm.com, or by post at: