DataGrail Privacy Policy

Effective Date: 2020-01-01

NB: For our standard privacy policy, please proceed here.

This California Consumer Privacy Rights Notice ("Notice") sets forth DataGrail's disclosure obligations under California law, including the California Consumer Privacy Act of 2018 ("CCPA") and the California Civil Code section 1798.83. This Notice provides the additional details regarding the information defined as 'personal information' under applicable California law and related to a California resident or household ("Consumers" and "You") further referred to as "Personal Information."

1. Personal Information Collected and Disclosed

DataGrail collects, uses and/or discloses Personal Information as follows:

Personal Information Collected, Used and/or Disclosed for Business Purpose in Preceding 12 Months

CCPA Category Collected? Source of Collection Business Purpose Disclosed for Business Purposes? Purpose of Disclosure
Category A: Identfiers and B: Personal Information
Name / Alias YES YOU
  • Performing services
  • Contacting you
  • Data security
Service provider (opt-in service)
  • Performing services
  • Integrated services customer support
  • Email YES You
    • Performing services
    • Data security
    • Opt-in for DataGrail newsletters or marketing communications
    • Sending requested sales collateral
    • Sending unrequested sales mailings
    Service Provider
  • Performing services
  • Integrated services
  • Customer notifications
  • Customer outreach
  • Address YES You
    • Performing services
    • Data security
    • Auditing
    N/A N/A
    Cell or Phone Number YES You
    • Performing services
    • Data security
    Service provider
  • Performing services
  • Data security
  • Unique/Online ID (cookies) YES YOU/DEVICE
    • Analytics
    • Auditing
    • Data security
    • Authentication
    • Ad targeting
    • LinkedIn
    • Google
    • Hubspot
    • Service provider
    • Advertising
    • Performing services
    • Integrated services
    • Chatbot Support and DataGrail communication
    IP Address YES DEVICE
    • Debugging
    • Analytics
    • Security
    • Authentication
    • Service provider
    • Service provider (opt-in service)
    • Google
    • Hubspot
    • Advertising
    • Performing services
    • Integrated services
    • Customer support
    Account Name YES YOU
    • Performing services
    • Data security
    N/A N/A
    Social Security Number NO N/A N/A N/A N/A
    Driver's License Number NO N/A N/A N/A N/A
    Passport Number NO N/A N/A N/A N/A
    Credit or Debit Card Number / ACH Yes (token only) YOU
  • Performing services
  • Service provider
  • Performing services
  • Integrated services
  • Process payments
  • Other: Medical / Financial / Health NO N/A N/A N/A N/A
    Category C: Protected Characteristics NO N/A N/A N/A N/A
    Category D: Commercial Information
    Personal Property Records NO N/A N/A N/A N/A
    Products/Services Purchased-Obtained-Considered NO N/A N/A N/A N/A
    Purchasing History/Tendencies NO N/A N/A N/A N/A
    Category E: Biometric Information NO N/A N/A N/A N/A
    Category F: Internet / Network Activity
  • Browsing / search history
  • Interaction with site/advertisement
  • Yes Use of website, services, and/or app
  • Performing services
  • Data security
  • GDPR compliance
  • Service provider
  • Performing services
  • Integrated services
  • Data security
  • GDPR compliance
  • Category E: Geolocation data NO N/A N/A N/A N/A
    Category H
    Audio NO N/A N/A N/A N/A
    Electronic NO N/A N/A N/A N/A
    Visual NO N/A N/A N/A N/A
    Thermal NO N/A N/A N/A N/A
    Olfactory NO N/A N/A N/A N/A
    Other Similar NO N/A N/A N/A N/A
    Category I: Professional / Employeement-Related NO N/A N/A N/A N/A
    Category J: Educational Information NO N/A N/A N/A N/A
    Category K: Inferences from Data Collected
    Preferences NO N/A N/A N/A N/A
    Characteristics NO N/A N/A N/A N/A
    Psychological Trends NO N/A N/A N/A N/A
    Predispositions NO N/A N/A N/A N/A
    Behavior NO N/A N/A N/A N/A
    Attitudes NO N/A N/A N/A N/A
    Intelligence / Abilities / Aptitudes NO N/A N/A N/A N/A

    Other Potential Third Party Disclosures: Personal Information may also be disclosed to third parties to serve our legitimate business interests as follows: (1) as required by law, such as to comply with a subpoena, or similar legal process, (2) as part of a merger, acquisition, bankruptcy or other transaction in which a third party assumes control of all or part of the business, (3) to investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies as required by law; (4) enforce our agreements with you, and/or (5) investigate and defend ourselves against any third-party claims or allegations.

    2. Sale of Personal Information

    DataGrail does not sell and will not sell your Personal Information.

    3. Your Consumer Rights under CCPA.

    California Consumers may contact DataGrail through their account, by email at privacy@datagrail.io, or through this webform:

    • A. Request DataGrail Disclose At No Charge:

      • categories of Personal Information collected, used, and/or disclosed about you;

      • categories of sources from which Personal Information is collected

      • business and/or commercial purposes for collecting and disclosing your Personal Information;

      • categories of third parties with whom your Personal Information has been disclosed/shared; and

      • the specific pieces of Personal Information collected about you.

    • B. Request DataGrail to Delete At No Charge:

      Except as exempted pursuant to CCPA 1798.105, to request DataGrail delete Personal Information.

    • C. Consumer Request Limitations

      Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the CCPA, including, but not limited to:

      • DataGrail is obligated to disclose/delete only upon a verifiable Consumer request from the consumer or an authorized agent acting on behalf of Consumer.

      • Consumers may only make a personal information request twice in a 12-month period.

      • Deletion is not required because it is necessary for DataGrail to maintain the Personal Information to fulfill the purposes enumerated in CCPA Section 1798.105

      DataGrail will confirm and respond to all requests within the timeframe required under the CCPA. In responding to any request to disclose/delete, DataGrail shall maintain a record of the requests as required under the CCPA.

    4. Non-Discrimination Policy

    You have the right not to receive discriminatory treatment for exercising any rights conferred by the CCPA. DataGrail shall not discriminate against a consumer for exercising any rights under the CCPA, including, but not limited to, (a) denying goods or services, (b) charging different prices or rates (including discounts/penalties) that is not directly related to the value provided to DataGrail for the Personal Information, (c) suggesting Consumer will receive a different rate/price or different level of quality of goods/services

    5. Your California Privacy Rights under California Civil Code Section 1798.83 & Business and Professions Code Section 22581

    California law permits Consumers to request and obtain from once a year, free of charge, certain information about their Personally Identifiable Information ("PII") (as defined by California law) disclosed to third parties for direct marketing purposes in the preceding calendar year (if any). If applicable, this information would include a list of the categories of PII that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year.

    In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

    6. Accessibility of this CCPA Policy.

    You can download and print a copy of this Notice by selecting print in your Browser.

    7. Contact Us

    Additional detail regarding our collection, use and disclosure of Personal Information, as well as general opt-out rights and other privacy disclosures, is set forth in our general Privacy Policy.

    If you have any questions regarding your Personal Information or about our privacy practices, please contact us at:

    DataGrail, Inc.
    Attention: Privacy Department
    164 Townsend Street, Suite 12
    San Francisco, CA 94107
    United States

    or by email at: privacy@datagrail.io.

    This Notice was last updated: January 31, 2020