This Privacy Policy (the “Policy”) explains how information about you (information that directly identifies you) and/or information that makes you identifiable (“personal information”) is collected, used and disclosed by Correlate AS, Org. No. 915 464 505 (“Company,” “we” or “us”) in connection with our website at www.correlate.com (the “Site”), application services at app.correlate.com (the “App”) and our application services offered in connection with the Site (collectively App with the Site, the “Service”). By visiting the Site, registering for an account at the App, or otherwise using the Service, you signify that you have read, understood and agree to the collection, storage, use and disclosure of personal information as described in this Policy.
We are the responsible entity (“data controller”) for the processing of your personal data as described in this Privacy Policy. We care about our customers and their privacy and undertake to respect and protect your personal data and privacy in accordance with applicable laws, industry rules and other related standards. In order to help you understand the way in which we collect and use your personal information, we have listed below our core privacy values when it comes to processing your personal data.
Since Correlate doesn’t actually store your files and works with third parties such as Dropbox, Google Drive and OneDrive to do that, their privacy policies will govern how your files are stored.
You may always reach out to us on matters of privacy and data protection by contacting us at privacy@correlate.com.
We collect personal information in connection with your visits to and use of the Service. This collection includes information that you provide in connection with the Service, information from third parties, and information that is collected automatically such as through the use of cookies and other technologies. You may also provide such information when in contact with Correlate AS employees officially representing Correlate AS through e-mail, telephone or other contacts.
Information That You Provide
We collect personal information from you. The categories of information we collect can include:
● Registration information. We collect personal and/or business information that you provide when you register for an account at the App. This information may include your name, email address, telephone number, and password, etc. It can also include location data generated by your activities (search queries, location sharing, etc.).
● Information collected through the use of the Service. After registration, you may connect to 3rd party services like Dropbox, OneDrive, GoogleDrive, Outlook or Gmail and connect files, documents, emails or other data. You may also create, edit or transmit information as part of your use of the Service (collectively, “User Content”). User Content and any information contained in the User Content, including personal information you may have included, is stored and collected as part of the Service. You have full control of the information included in the User Content.
● Payment information. If you make a purchase or payment on the App, such as for a subscription, we collect information provided in connection with your purchase or payment, such as your credit card and payment-related information.
● Inquiries and Feedback. If you contact us, we will collect the information that you provide us, such as your contact information and the contents of your communication with us.
You are free to choose which personal information you want to provide to us or whether you want to provide us with personal information at all. However, some information, such as your name, address, payment information and information on your requested Services may be necessary for the performance of our contractual obligations.
Information from Third Parties
We also collect and receive information about you from third parties. For example, when you interact with the Service through third-party sites and services, such as when you login using an account or credentials from a third-party service, share or export User Content from the Service with third-party services, or integrate the Service with third-party services (such as your email service so that emails can be shared with the Service or in App integrations), we may receive information from those websites and services. For example, when you login using an account or credentials from a third-party service, we may receive information such as your name, email address, access tokens, and other information related to your account with the third-party service. When you create, share or export User Content from the Service with third-party services, we may receive information such as user names, IP addresses, device identifiers, profile information, contacts, or e-mail addresses. When you integrate the Service with third-party services, we may receive information such as user names, IP addresses, device identifiers, profile information, contacts, or e-mail addresses. We also may receive any other information that a third-party site or service shares with us (or that you choose to allow it to share with us). The data we receive may depend upon your privacy settings with the site or service, though we do not control those settings or promise they will be effective. You should always review and customize your privacy settings with sites and services before using them in connection with the Service.
Information from Other Sources
We may obtain information from other sources, such as third-party information providers, or through mergers and acquisitions, and combine this with information previously collected. In these cases, our Privacy Policy governs the handling of the combined personal information.
We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.
Information That Is Automatically Collected (Cookies and Other Technologies)
We, and our third-party partners, also automatically collect information about you and any computer or device you use to access the Service, read our emails, or otherwise engage with us. Some of the information we collect, and ways we collect it, include:
● Cookies. When you use or visit the Service, we may send one or more cookies — small text files containing a string of alphanumeric characters — to your computer or device that allows us to uniquely identify your browser, computer, or device. A cookie may also convey other information to us, such as: your Internet Protocol (“IP”) address; unique device identifiers; your browser settings and specification; and information about how you use the Service (e.g., the pages you view, the links you click, features and functionalities you utilize, how frequently you access the Service, and other actions you take on the Service). Cookies also allow us to track your usage of the Service over time.
● Log Files. We may record log file information each time you access the Service. This information may include information such as: your requests or actions; IP address; browser type; unique device identifiers; information about your computer or device; number of clicks; how you interact with links, features, or functionalities on the Service; and other such information.
● Clear Gifs. We may employ clear gifs (also known as web beacons or pixel tags) which may collect information about you, your computer or device such as: your requests or actions; IP address; unique device identifiers; browser type; information about your computer or device; how you interact with links, features, or functionalities of the Service; information about cookies; all of which can show your Service usage patterns.
● Mobile Device Information. When you access the Service with a mobile device, we may collect and store a unique identifier associated with your device (including, for example, a UDID, Unique ID for Advertisers (“IDFA”), Google Ad ID, or Windows Advertising ID), or information about your mobile carrier, device type, model and manufacturer, and mobile device operating system brand and model.
We also collect information about the way you use our Service, for example, the site from which you came and the site to which you are going when you leave our Service, the pages you visit, the links you click, how frequently you access the Service, whether you open emails or click the links contained in emails, whether you access the Service from multiple devices, and other actions you take on the Service. We may collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Service and to understand more about the demographics of our users. We may also work with third-party partners to employ technologies, including the application of statistical modeling tools, which attempt to recognize you across multiple devices.
● Analytics. We may collect analytics data, or use third-party analytics tools, including Google Analytics, to help us measure traffic and usage trends for the sites and to understand more about the demographics of our users. For more information on how Google uses data when you use our partners’ sites or apps, visit: https://policies.google.com/technologies/partner-sites We use or may use the data collected through online data collection technologies to:
(a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Service;
(b) provide custom, personalized content and information, including targeted content and advertising;
(c) identify you across multiple devices;
(d) provide and monitor the effectiveness of our Service;
(e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our Service;
(f) diagnose or fix technology problems; and
(g) otherwise to plan for and enhance our service.
If you would prefer not to accept cookies, most browsers will allow you to:
(i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it;
(ii) disable existing cookies; or
(iii) set your browser to automatically reject cookies. Please note that doing so may negatively impact your experience using the Service, as some features and services on our Service may not work properly. Depending on your mobile device and operating system, you may not be able to delete or block all cookies. You may also set your e-mail options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our e-mail and performed certain functions with it.
We and our third-party partners may also use cookies and online data collection technologies for advertising purposes. For more information about online data collection technologies, please see “Third-Party Data Collection and Online Advertising” below.
We collect, use, process, combine, retain and store personal information and information that we collect or receive for a variety of purposes, including the following:
- For our business activities, including to operate the Service and to provide you with the features and functionality of the Service;
- To process your payment;
- To communicate with you and respond to your requests, such as to respond to your questions, contact you about changes to the Service, and communicate about account related matters;
- For marketing and advertising purposes, such as to market to you or offer you with information and updates on our products or services we think that you may be interested in. While we may use your personal information in this manner, please note that we do not use User Content to serve you ads, and we will never share User Content with any third parties for marketing or advertising purposes, unless you have explicitly submitted it to us for that purpose;
- For analytics and research purposes;
- To enforce this Policy, to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
- To comply with contractual and legal obligations and requirements;
- To fulfil any other purpose for which you provide personal information; and
- For any other lawful purpose, or other purposes that you consent to.
We also share, transmit, disclose, grant access to, make available, and provide personal information with and to third parties, including to:
- Service providers, subcontractors, partners, vendors, consultants, and others that help us with any of the purposes noted above or otherwise in this Policy, including by performing services on our behalf such as identifying and serving targeted advertisements, processing payments, sending postal mail, providing back-office services, or measuring site traffic. Such providers include Microsoft, Google, Hubspot, Segment, Amplitude, Hotjar, Mixpanel, LinkedIn, Facebook, SendGrid, Stripe, Sentry and will likely expand in the future;
- Our affiliates, parent companies, subsidiaries, and other related companies, all for the purposes noted above or otherwise in this Policy;
- Third parties to respond or comply with, in our sole discretion, a court order, subpoena, law enforcement or other government requests (with or without notice to you, in our discretion) under applicable law;
- Buyers, successors, or others in connection with a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by us may be among the assets transferred;
- Other third parties with your consent;
- Third parties, in our discretion, to: (i) satisfy any applicable law or regulation, (ii) enforce this Policy, including the investigation of potential violations thereof, (iii) investigate and defend ourselves against any third-party claims or allegations, or (iv) protect against harm to the rights, property or safety of us, the Service, other Service users, or third parties (including financial loss, or in connection with preventing fraud or illegal activity, and/or to enforce our Terms of Service); and
- Third parties in the aggregate, or stripped of personally identifying characteristics (anonymized).
Our Service uses certain Google & Microsoft services, such as the Google Gmail API & Microsoft’s Outlook Mail API. You can connect your Gmail or Outlook Mail account using OAuth authentication, a secure mechanism to give Correlate access to your Google or Microsoft account data without letting it know your password. If you provide Correlate access to your Google Gmail or Outlook Mail data, Correlate’s use of that Google Gmail or Outlook Mail data will be subject to the following additional restrictions:
- The Service will not transfer this Gmail or Outlook Mail data to others unless doing so is necessary (i) to provide and improve the features of the Service we provide to you, (ii) to comply with applicable law, or (iii) as part of a merger, acquisition, or sale of assets.
- We will not use or transfer this Gmail or Outlook Mail data for serving advertising, including retargeting, personalized, or interest-based advertising.
- We will not allow humans to read this data unless:
- we have your affirmative agreement for specific messages,
- doing so is necessary for security purposes (such as investigating a bug or abuse)
- It is necessary to comply with applicable law,
- The data has been aggregated and anonymized and is used only for our own internal operations purposes.
Our Service’s use of information received, and the Service’s transfer of information to any other app, from Google APIs or Microsoft APIs will adhere to Google’s Limited Use Requirements and Microsoft’s Terms of Use.
The purposes for which we process your personal data are:
- the provision of personal data by you may be necessary for the performance of any contractual relationship we have with you;
- where it is necessary for compliance with our legal obligations laid down by EU law;
- where in our legitimate interests (provided these are not overridden by your interests and fundamental rights and freedoms – this includes our own legitimate interests) such as:
- to contact you and respond to your requests and enquiries;
- for business administration, including statistical analysis;
- to provide the Service to you;
- for fraud prevention and detection; and
- to comply with applicable laws, regulations or codes of practices.
We may also process your personal data on the basis of your freely given, specific, informed and unambiguous consent. You should be aware that you are entitled under EU Data Protection Law to withdraw your consent where that has been given, at any time. If you do this and we have no alternative lawful reason to process your personal data, this may affect our ability to provide you with rights to use the Service.
For information about choices that you may have about the information collection and use described in this Section, see the “Your Choices” Section below.
If you have registered for an account with the Service, you can use the features and functionality of the Service, Google profile settings or Microsoft profile settings to edit the registration information.
If there is personal information in User Content, you can use the features and functionality of the Service to edit or delete the personal information or User Content.
Not all personal information is maintained in a format that you can access or change. If you would like to request access to, or correction or deletion of personal information, you may send your request to us by emailing support@correlate.com. We will review your request, and may require you to provide additional information to identify yourself, but we do not promise that we will be able to satisfy your request.
We strive to give you choices about how your personal information is used. These choices include the following:
● Marketing E-Mails. We may send you marketing e-mails from time to time. If you do not wish to receive them, you can opt-out by following the unsubscribe instructions in the e-mails, or by contacting us at support@correlate.com. We will work to honor your request within 10 business days. If you opt-out, we will still send you e-mails for service purposes, such as for communications about your account or subscription, and responses to your requests.
● Third-Party Data Collection and Online Advertising. We may share, or we may permit third-party online advertising networks, social media companies and other third-party services, to collect information about you, your computer or device when you visit or use the Service, open emails and otherwise interact with us. These third-party online advertising networks, social media companies, and other third-party services collect information about your use of our website over time so that they may play or display ads, on other devices you may use, and on other websites, apps, or services. Typically, though not always, the information we share is provided through cookies, social media plug-ins or similar online data collection technologies, which recognize the device you are using and collect information, including click stream information, browser type, time and date you visited the site, and other information. We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research.
As noted above, depending on your browser or mobile device, you may be able set your browser to delete or notify you of cookies and other data collection technology by actively managing the settings on your browser or mobile device. You may also be able to limit interest-based advertising through the settings on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest-based ads” (Android). To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative’s online resources, at http://www.networkadvertising.org/choices/, and/or the DAA’s resources http://www.aboutads.info/choices, and you may also adjust your ad preferences through your Facebook settings. When you opt-out of interest-based ads using these opt out links, you will still receive ads, they may just not be tailored to your interests. In addition, after opting out, these advertising partners may still collect information about you for any purposes permitted by the Principles.
You may also manage certain advertising cookies by visiting the EU-based Your Online Choices at www.youronlinechoices.eu. If you have any questions about opting out of the collection of cookies and other tracking/recording tools, you can contact us directly at support@correlate.com.
● Google Analytics and Advertising. We may also utilize certain forms of display advertising and other advanced features through Google Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Sites. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences or by vising NAI’s online resources at http://www.networkadvertising.org/choices.
If you are a resident in the European Union, you have the following rights in respect to your personal information that we hold:
- Right to object. You have a right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. You can object to marketing activities for any reason whatsoever.
- Right of access.The right to obtain access to your personal information.
- Right to rectification.The right to obtain rectification of your personal information without undue delay where that personal information is inaccurate or incomplete.
- Right to erasure.The right to obtain the erasure of your personal information without undue delay in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed.
- Right to restriction.The right to obtain restriction of the processing undertaken by us on your personal information in certain circumstances, such as, where the accuracy of the personal information is contested by you, for a period of time enabling us to verify the accuracy of that personal information.
- Right to portability.The right to portability allows you to move, copy or transfer personal information easily from one organization to another.
If you wish to exercise one of these rights, please contact us using the contact details at the end of this Policy. In addition to the above listed rights, as an EU resident, you also have the right to lodge a complaint with your local data protection authority. Further information about how to contact your local data protection authority is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
We take what we believe to be commercially reasonable steps to help protect personal information that we collect, but we do not guarantee that personal information will be completely protected. For example, the transmission of information via the Internet is not completely secure. Any transmission of personal information by you is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Service, including the illegal acts of third parties (such as criminal hacking). The safety and security of your information also depends on you. For example, it is important to keep your password for your account for the Service confidential. We also recommend that you log out of the Service when you are done using it. If you believe that any account credentials for the Service have been compromised, please contact us immediately at privacy@correlate.com.
Your information may be stored and processed in the United States or any other country in which Company or its subsidiaries, affiliates or service providers maintain facilities. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that offers a level of protection that may, in certain instances, be less protective of your personal information than the jurisdiction you typically reside in. The initial transfer of your personal information to us is necessary for the performance of our contract with you. For any onward transfer of your personal information we will enter into guarantees to ensure appropriate safeguards. If we transfer information from the European Union to third parties outside the European Union and to countries not subject to schemes which are considered as providing an adequate data protection standard, we will enter into contracts which are based on the EU Standard Contractual Clauses with these parties.
We will only retain your personal data for as long as necessary for our business purposes for which we have collected the information, or as otherwise required to operate the Service, comply with your requests, or comply with applicable law.
“System-recorded data” will be saved locally for one year on each module and on the server provided by us or our third-party supplier for as long as it is necessary. We store anonymized data for analytics purposes indefinitely.
The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian of a child under the age of 13, and believe that your child may have provided us with personal information, please contact us at support@correlate.com and we will use commercially reasonable efforts to delete that information.
The Service may provide links to third-party websites and online services. This Policy does not describe the privacy practices of those websites or services. Please review the privacy policies of those websites or services before providing personal information to them.
We may amend this Policy from time to time. When we do so, we will update the “Last Revision Date” at the end of the Policy. Your continued use of the Service after an updated Policy is posted constitutes your consent to the revised Policy.
If you have questions about this Policy or our privacy practices, please contact us at privacy@correlate.com.
This Policy was last revised on February 19, 2021.