Questify Privacy Policy
Effective as of 5/20]/21
This Privacy Policy describes how Questify Inc. and its subsidiaries and affiliates (collectively “Questify,” “we”, “us” or “our”) handle personal information when you use our websites and other digital properties that link to this Privacy Policy (collectively, the “Site”), our mobile application (the “App”), participate in our events or activities, receive our emails and marketing communications, or engage with us on our social networks (collectively with the Site and the App, the “Service”).
Personal Information We Collect
Information you give us. Personal information that you may provide through the Service or otherwise includes:
Contact information, such as your first name, last name, email address, billing and mailing addresses, and phone number;
Profile information, such as your username and password that you may set to establish an online account with us, age, gender, biographical details, interests, preferences, information about your participation in our events, promotions, sweepstakes, contests, or surveys, and any other information that you add to your account profile;
Communications, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online;
Images, videos and other content that you upload or submit to us through the Service, such as by participating in a survey or uploading content to your profile, including pictures, video, captions and other text, audio and metadata associated with those files;
Payment and transactional information needed to complete your donations on or through the Service (including name, payment card information, billing and shipping information), and your donation history.
Marketing information, such as your preferences for receiving marketing communications and details about how you engage with them; and
Other information that you choose to provide but is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Information from third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:
Third party platforms. If you choose to connect the Service to a social media or other third party platform, such as when you log in using a social media account, we will collect the information shared by the platform such as your username or handle, name, image, profile data and other information. We will treat any information that you or the platform may provide to us in accordance with this Privacy Policy. When you visit or interact with our pages on one of those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information.
Business partners, such as payment processors, joint marketing partners and event co-sponsors.
Public sources, such as publicly-available social media profiles, directories and other third party sources.
Data collected automatically. We, our service providers, and our business partners may automatically log the following information about you, your computer or mobile device, and your activity over time on the Service and other online services:
Device data, such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, unique identifiers, and general location information such as city or town.
Usage data, such as the website you visited before browsing to the Site or accessing the App, pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen or with our email communications, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them.
Precise geolocation data, such as when you authorize our App to access your location.
Some of our automatic collection is facilitated by:
Cookies, which are text files stored on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently and remembering your preferences, enabling functionality, helping us understand user activity and patterns, facilitating online advertising and measuring the effectiveness of our ads.
Local storage technologies, like HTML5 and Flash, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
Web beacons, also known as pixel tags or clear GIFs, which are typically used to demonstrate that a webpage or email was accessed or opened, or that certain content within it was viewed or clicked, typically to compile statistics about usage of websites and the success of marketing campaigns.
Software development kits, or SDKs, which are used to incorporate third-party computer code into our App that allows our third-party service providers or advertising partners to collect data directly from it for a variety of purposes, including to provide us with analytics regarding the use of the App, to integrate with social media, add features or functionality to our App, or to facilitate online advertising.
How We Use Your Personal Information
We use your personal information for the following purposes or as otherwise described to you in this Privacy Policy or at the time of collection:
Service delivery. We use your personal information to:
provide, operate, maintain, and improve the Service;
communicate with you regarding the Service, including by sending you Service announcements, technical notices, updates, security alerts, and support and administrative messages;
analyze and share your survey responses, videos and feedback with our business partners;
process your Service transactions and process any related donations;
understand your opinions, needs and interests, and personalize your experience with the Service; and
provide support for the Service and respond to your requests, questions and feedback.
Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and develop other products and services. As part of these activities, we may create aggregated, de-identified or other anonymous data from the personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.
Marketing. We and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:
Direct marketing. If you request information from us, use the Service or participate in our surveys, promotions or events, we may send you Questify-related marketing communications as permitted by law but will provide you with the ability to opt out.
Interest-based advertising. We may contract with third-party advertising and social media companies to display ads on our Service and other sites. These companies may collect information about you (including the device data and usage data described above) over time and across various channels, including our Service and other sites and services, and use that information to serve ads that they think will interest you. These ads are known as "interest-based advertisements." You can learn more about your choices for limiting interest-based advertising in the “Advertising choices” section below.
Compliance and protection. We may use your personal information to:
protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
audit our internal processes for compliance with legal and contractual requirements and internal policies;
enforce our Terms of Use Agreement;
prevent, identify, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft; and
comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.
Other purposes with your consent. In some cases we will ask for your consent to collect, use or share your personal information for other purposes. For example, we may ask for your consent to send you marketing emails where required by law or to post your testimonial or endorsement.
How We Share Your Personal Information
We may share your personal information with the following parties and as otherwise described in this Privacy Policy or at the time of collection:
Affiliates. We may disclose your personal information to our subsidiaries and corporate affiliates for use consistent with this Privacy Policy.
Business partners. We may share your personal information with third parties with whom we collaborate on joint activities (such as co-sponsors of contests and promotions), with whom we have entered into joint marketing relationships or other joint ventures, or who we think may offer you products or services that you may enjoy.
Fiscal sponsor. We will share your personal information with our fiscal sponsor (currently Charity on Top Foundation) with whom we collaborate for donation processing.
Charities. We may share your personal information with charities to which you direct any donations.
Service providers. We may work with companies and individuals to help provide the Service on our behalf or help us operate the Service or our business (such as IT, customer support, hosting, website analytics, email delivery, marketing and advertising, research, and event management). They are permitted to use your personal information only to help us operate the Service or our business as authorized under our contracts with them.
Payment processors. Any payment card information you use to make a donation on or through the Service is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy, https://stripe.com/privacy.
Third party platforms. If you have enabled features or functionality that connect the Service to a social media network or other third party platform (such as by logging in to the Service using your account with the third party, or otherwise linking your account with the Service to a third-party’s services), we may disclose the personal information that you authorized us to share. We do not control the third party’s use of your personal information.
Other users of the Service and the public. We may provide functionality that enables you to disclose personal information to other users of the Service or the public. You may also be able to submit content to the Service, and we will display and share your username and profile information along with the content you submit and other information we have collected about you. We may make available settings through your registration profile that enable you to exercise choice regarding certain information that is displayed publicly or to other users. We do not control how other users or third parties use any personal information that you make available to other users or the public.
Advertising partners. We may work with third-party advertising and social media companies that may collect information about your activity on or through the Service and other sites and services. Our partners may use your information to recognize you across different channels and platforms over time for advertising, analytics, attribution and reporting purposes, and/or use hashed customer lists that we share with them to deliver ads to you and similar users on their platforms.
Professional advisors. We may disclose your personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services they render to us.
Compliance and protection. We may disclose your personal information as we believe appropriate to government or law enforcement officials or private parties (a) for the compliance and protection purposes described above; (b) as required by law, lawful requests or legal process, such as to respond to subpoenas or requests from government authorities; (c) where permitted by law in connection with any legal investigation; and (d) to prosecute or defend legal claims.
Business transfers. We may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business deal (or potential business deal) such as a merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy, in which case we will make reasonable efforts to require the recipient to honor this Privacy Policy.
Your Choices
Access or update your information. You may review, update, correct or delete the personal information in your registration profile by logging into your account or emailing us at contact@questify.ai .
Opt out of marketing communications. You may opt out of marketing-related emails by logging in and changing your account settings or by following the opt-out prompt in the email. You may continue to receive Service-related and other non-marketing emails.
Browser settings. Blocking third-party cookies in your browser settings or using ad-blocking browser plug-ins/extensions. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Service and our Site may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.
Mobile device settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
Platform settings. Using Google’s and Facebook’s interest-based advertising opt-out features:
Ad industry tools. Opting out of interest-based ads from companies participating in the following industry opt-out programs:
The opt-out preferences described above must be set on each device or browser for which you want them to apply. Not all companies that serve interest-based ads participate in the ad industry opt-out programs described above, so even after opting-out, you may still receive some cookies and interest-based ads from other companies. If you opt-out of interest-based advertisements, you will still see advertisements online but they may be less relevant to you.
Mobile location data. You can disable our access to your device’s precise geolocation in your mobile device settings.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Declining to provide your personal information. If you do not provide information indicated as required or mandatory within the Service, or that is otherwise necessary to provide a requested service or feature within the Service, that portion or all of the Service may be unavailable to you and we may deactivate your account.
Security
We take a number of organizational, technical and physical measures designed to protect the personal information we collect, both during transmission and once we receive it. However, no security safeguards are 100% secure and we cannot guarantee the security of your information.
International Data Transfers
We are headquartered in the United States and may use service providers in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.
Third Party Sites and Services
The Service may contain links to other websites and services operated by third parties, such as social media platforms, advertising services and other websites and applications. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third-party websites, applications or services, and are not responsible for their actions. Other websites and services follow different rules regarding their collection, use and disclosure of your personal information. We encourage you to read their privacy policies to learn more.
Children
The Service is not directed at, and Questify does not knowingly acquire or receive personal information from, children under the age of 16. If we learn that any user of the Service is under the age of 16, we will take appropriate steps to delete that individual’s personal information and restrict that individual from future access to the Service.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices. If we make material changes to this Privacy Policy we will notify you by posting the new privacy policy on our website and changing the effective date listed at the top of the policy. If required by law, we will also notify you of changes in another way that we believe is reasonably likely to reach you, such as via email (if you have an account linked to a valid email address) or another manner through the Service.
Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes in the Service (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the posting of any updated Privacy Policy indicates your acceptance of the update.
How to Contact Us
If you have any questions or concerns about our Privacy Policy, please contact us.
Questify Inc.
122 E Foothill Blvd., #A316
Arcadia, CA 91006
The information provided in this section applies only to individuals in the European Economic Area, United Kingdom and Switzerland (collectively, “Europe”) and explains our practices regarding personal information that we collect from you or which we have obtained about you from a third party and the legal basis for processing for your personal information. It also sets out your rights in respect of our processing of your personal information.
Personal information. References to “personal information” in this Notice to European users are equivalent to “personal data” governed by the General Data Protection Regulation (GDPR).
Controller. Questify Inc. is the controller of your personal information covered by this Privacy Policy.
Legal basis for processing. The legal bases of our processing of your personal information as described in this Privacy Policy will depend on the type of personal information and the specific context in which we process it. However, the legal bases we typically rely on are set out in the table below. We use your Personal Information only as permitted by law. Our legal basis for processing the personal information described in this Privacy Policy are described in the table below:
Processing purpose Details regarding each processing purpose listed below are provided in the section above titled “How we use your personal information”. |
Legal basis |
For service delivery |
Processing is necessary to perform the contract governing our provision of our Service or to take steps that you request prior to signing up for the Service. If we have not entered into a contract with you, we process your personal information based on our legitimate interest in providing the Service you access and request. |
For research and development For marketing and advertising purposes For compliance, fraud prevention and safety Sharing your personal information as described in this Privacy Policy |
These activities constitute our legitimate interests. We do not use your personal information for these activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). |
To comply with law |
Processing is necessary to comply with our legal obligations. |
With your consent |
Processing is based on your consent. Where we rely on your consent, you have the right to withdraw it any time in the manner indicated when you consent or in the Service. |
Use for new purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.
Retention. We retain personal information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
When we no longer require the personal information we have collected about you, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.
Your rights. You have the following rights in relation to the personal information we hold about you:
Right of access: You can ask us if we are processing your personal information and to provide you with a copy of it (along with certain details). If you require additional copies, we may need to charge a reasonable fee.
Right to rectification: If the personal information we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified.
Right to erasure: You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent to our processing of your personal information (where applicable).
Right to restrict processing: You can ask us to 'block' or suppress the processing of your personal information in certain circumstances, such as where you contest the accuracy of that personal information.
Right to data portability: You have the right, in certain circumstances, to obtain personal information you have provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
Right to object: You can ask us to stop processing your personal information, and we will do so, if we are:
Right to withdraw consent: If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.
Right to lodge a complaint with the supervisory authority: If you have a concern about any aspect of our privacy practices, including the way we have handled your personal information, you can report it to the relevant supervisory authority. You can find your data protection regulator here.
You may submit these requests by email or to our address provided above. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.
Cross-border data transfer. If we transfer your personal information out of Europe to a country not deemed to provide an adequate level of personal information protection for purposes of applicable data protection laws such that additional safeguards are required, the transfer will be performed:
pursuant to the recipient’s compliance with Standard Contractual Clauses or Binding Corporate Rules;
pursuant to the consent of the individual to whom the personal information pertains; or
as otherwise permitted by applicable laws.
You may contact us if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA or the UK.