Privacy Policy

About Grace

Grace is an AI generative engine that empowers creators and marketers to effortlessly generate and deploy content across digital marketing channels including social, email, SMS, Google and blogs. By intelligently translating simple inputs into optimized AI prompts, Grace delivers high-quality, ready-to-use content without requiring extensive setup. This Privacy Policy explains how Grace ("Grace") collects, uses, discloses, and otherwise processes personal data when you visit our website at getgrace.ai or engage with us in other related ways, including any sales, marketing, or events. It also describes the way we collect, use, disclose, and otherwise process personal data in connection with our AI-powered content generation services ("Services"). We may also choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you. This Privacy Policy does not address our privacy practices relating to Grace job applicants, employees and other employment-related individuals, nor data that is not subject to applicable data protection laws (such as deidentified or publicly available information). This Notice also does not apply to any content, data, or materials that our business customers upload to, process through, or generate using our services ("Customer Data"). We process Customer Data solely on behalf of, and in accordance with the instructions of, our customers under our Terms of Service and any applicable customer agreement.

Our Role in Processing Personal Data

Data protection laws sometimes differentiate between "controllers" and "processors" of personal data. A "controller" determines the purposes and means (the why and how) of processing personal data. A "processor," which is sometimes referred to as a "service provider," processes personal data on behalf of a controller subject to the controller's instructions. This Privacy Policy describes our privacy practices where we are acting as the controller of personal data. However, this Privacy Policy does not cover or address how our customers may process personal data when they use our services, or how we may process personal data on their behalf in accordance with their instructions where we are acting as their processor. As a result, we recommend referring to the Privacy Policy of the customer with which you have a relationship for information on how they engage processors, like us, to process personal data on their behalf. In addition, we are generally not permitted to respond to individual requests relating to personal data we process on behalf of our customers, so we recommend directing any requests to the relevant customer. If you access our services or otherwise interact with us from the European Economic Area, United Kingdom, or Switzerland, please see the Controller Details and Privacy Contacts section of our Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures for more information about our legal entities operating as the controllers of your personal data.

Our Collection and Use of Personal Data

The categories of personal data we collect depend on how you interact with us and our services. For example, you may provide us your personal data directly when you send us a message or engage with us in any manner electronically or in person. We also collect personal data automatically when you interact with our websites and other services and may also collect personal data from other sources and third parties.

Personal Data Provided by Individuals

We collect the following categories of personal data individuals provide us:

• Contact Information, including first and last name, phone number, email address, mailing address, and communication preferences. We use this information primarily to fulfill your request or transaction, to communicate with you directly, and to send you marketing communications in accordance with your preferences.
• Account Information, including first and last name, email address, phone number, account credentials or one-time passcodes, and the products or services you are interested in, purchased, or have otherwise used. We use this information primarily to administer your account, provide you with our products and services, communicate with you regarding your account and your use of our products and services, and for customer support purposes.
• Payment Information, including payment card information, billing address, and other financial information (such as, routing and account number). Please note that we may use third-party payment processing providers to process payments made to us. We do not retain any personally identifiable financial information, such as payment card number, you provide these third-party payment processing providers in connection with payments. Rather, all such information is provided directly by you to our third-party payment processing providers. The payment processing provider's use of your personal data is governed by their Privacy Policy. To view Stripe's privacy policy, please visit stripe.com.
• Event and Survey Information, including information provided when you sign up for an online or in person event or complete a survey. We use this information primarily to administer and facilitate our products and services, respond to your submission, communicate with you, conduct market research, inform our marketing activities, improve and grow our business, and facilitate the related event or survey.
• Feedback and Support Information, including the contents of custom messages sent through the forms, email addresses, or other contact information we make available to customers, as well as recordings of calls with us, where permitted by law (including through the use of automated tools provided by us or our third-party providers). We use this information primarily to investigate and respond to your inquiries, to communicate with you, and to improve our products and services.
• Professional Information, such as role, organization, industry, or professional background. If you choose to contact us, we may need additional information to fulfill the request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the request we receive or personal data we require fall outside the scope of this Privacy Policy. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Personal Data Automatically Collected

We, and our third-party partners, automatically collect information you provide to us and information about how you access and use our products and services when you engage with us. We typically collect this information through the use of a variety of our own and our third-party partners' automatic data collection technologies, including (i) cookies or small data files that are stored on an individual's computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies (collectively, "Data Collection Technologies"). Information we collect automatically about you may be combined with other personal data we collect directly from you or receive from other sources. We, and our third-party partners, use automatic data collection technologies to automatically collect the following data when you use our services or otherwise engage with us including:

• Information About Your Device and Network, including the device type, manufacturer, and model, operating system, IP address, browser type, Internet service provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier). We employ third-party Data Collection Technologies designed to allow us to recognize when two or more devices are likely being used by the same individual and may leverage these technologies (where permitted) to link information collected from different devices.
• Information About the Way Individuals Use Our Services and Interact With Us, including the site from which you came, the site to which you are going when you leave our services, how frequently you access our services, whether you open emails or click the links contained in emails, whether you access our services from multiple devices, and other browsing behavior and actions you take on our services (such as the pages you visit, the content you view, the communications you have through our services, and the content and links you interact with).

We employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on our services, which may record your mouse movements, scrolling, clicks, and keystroke activity on our services and other browsing, search or purchasing behavior. These third-party technologies may also record information you enter when you interact with our products or services, or engage in chat features or other communication platforms we provide. All of the information collected automatically through these Data Collection Technologies allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our products and services, and to improve the effectiveness of our products, services, offers, communications and customer service. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our products and services. For information about the choices you may have in relation to our use of automatic data collection technologies, please refer to the Your Privacy Choices section below. For additional details about the cookies we use on our websites and to adjust your preferences with regard to those cookies, please visit our "Cookie Preferences" manager linked in the footer of our websites.

Personal Data from Other Sources and Third Parties

We may receive the same categories of personal data as described above from the following sources and other parties:

• Employers: If you interact with our services in connection with your employment, we may obtain personal data about you from your employer or another company for which you work. For example, we may obtain your contact information from your employer to allow us to communicate with you about your employer's customer relationship with us.
• Social Media: When you interact with our services through other social media networks, such as when you follow us or share our content on other social networks, we may receive some information that you permit the social network to share with third parties. The data we receive is dependent upon your privacy settings with the social network, and may include profile information, profile picture, username, and any other information you permit the social network to share with third parties. You should always review and, if necessary, adjust your privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information primarily to operate, maintain, and provide to you the features and functionality of our products and services, as well as to communicate directly with you, such as to send you messages about products and services that may be of interest to you.
• Model Training: Unless permitted in our Terms of Service or any customer agreement, or unless you enter your personal data into the platform's AI features, we do not typically use personal Customer Data to train or fine-tune our AI models. We may use other data sources such as deidentified information, publicly available data, and licensed third-party datasets for model training, validation, and benchmarking.
• Service Providers: Our service providers that perform services on our behalf, such as analytics and certain marketing providers, collect personal data and often share some or all of this information with us. For example, we receive personal data you may submit in response to requests for feedback to our survey providers.
• Other Sources: We may also collect personal data about you from other sources, including publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions.
• Inferences: We may generate inferences or predictions about you and your interests and preferences based on the other personal data we collect and the interactions we have with you.

Personal Information Collected in Connection with Our Services

We also may receive personal data from third-party sources in connection with the provision of our Services. When we provide our Services, we may leverage personal data we receive from a variety of third-party sources, including through websites and mobile apps, public records and other publicly available sources, government entities, market research, social networks, our customers, consumer data resellers, our own in-house research teams, and other data compilers. The personal information we collect from the various sources may include (on the individual, household, or geographic level), such as:

• Contact information, such as your name, address, and other contact information.
• Particular interests, such as media consumption patterns, search histories, or businesses you may visit.
• Demographic information, such as age, race, income, education, geographic region, gender, and marital status.
• Information from Data Collection Technologies, as defined above.
• Publicly available information, such as information that is available in the public domain or from government public records.
• Inferences, which may include conclusions drawn from any of the categories of personal information listed in this section.

We use the information collected through our Services for various purposes, including the following:

• Data Marketing Services: Our Services include providing marketing information to our customers, generally regarding which of their customers or prospective customers are most likely to be interested (or disinterested) in certain products, or how to best contact or identify those customers. Similarly, we help our customers identify and understand their customers better, by providing certain insights about them.
• Market Research: We sometimes use the information to help our customers understand specific markets and what influences the purchase decision and behavior of their target audiences.
• General Geolocation Analysis: We sometimes use the information to help our customers better understand market opportunities at various locations.
• Additional Marketing Services: Other services we may provide to our customers (or that they may provide to their own customers), which may overlap with or supplement the above, may involve (i) helping target and optimize direct mail, email campaigns, display, social and mobile marketing; (ii) measuring how effective marketing campaigns have been by determining which messages are most likely to be seen or opened by which types of consumers; (iii) analyzing and optimizing our customers' (or their service providers') proprietary databases, or helping customers to detect and prevent crime and fraud; or (iv) providing "validation" or data hygiene services, which is how companies update and/or correct their databases by verifying, removing or correcting old, incorrect or outdated information.
• To Operate Our Services: We also use the information for our own internal purposes - such as to improve, test, update and verify our own database; to develop new products; and to operate, analyze, improve, and secure our services and our databases and servers.

Additional Uses of Personal Data

In addition to the primary purposes for using personal data described above, we may also use personal data we collect to:

• Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to facilitate payment for our products and services, or to deliver the services requested.
• Manage our organization and its day-to-day operations.
• Communicate with you, including via email, chat, social media and/or telephone calls.
• Facilitate the relationship we have with you and, where applicable, the company you represent.
• Request you provide us feedback about our product and service offerings.
• Address inquiries or complaints made by or about an individual in connection with our products or services.
• Create and maintain accounts for our users.
• Verify your identity and entitlement to our products and services.
• Register you for and provide you access to events and surveys.
• Market our products and services to you, including through email, phone, and social media.
• Administer, improve, and personalize our products and services, including by recognizing you and remembering your information when you return to our products and services.
• Develop, operate, improve, maintain, protect, and provide the features and functionality of our products and services.
• Identify and analyze how you use our products and services.
• Infer additional information about you from your use of our products and services, such as your interests.
• Create aggregated or de-identified information that cannot reasonably be used to identify you, which information we may use for purposes outside the scope of this Privacy Policy.
• Conduct research and analytics on our user base and our products and services, including to better understand the demographics of our users.
• Improve and customize our products and services to address the needs and interests of our user base and other individuals we interact with.
• Test, enhance, update, and monitor the products and services, or diagnose or fix technology problems.
• Help maintain and enhance the safety, security, and integrity of our property, products, services, technology, assets, and business.
• Defend, protect, or enforce our rights or applicable contracts and agreements including our Terms of Service which can be found at getgrace.ai, as well as to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties.
• Detect, prevent, investigate, or provide notice of security incidents or other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of Grace and others.
• Facilitate business transactions and reorganizations impacting the structure of our business.
• Comply with contractual and legal obligations and requirements.
• Fulfill any other purpose for which you provide your personal data, or for which you have otherwise consented.

We may use AI and machine learning to help deliver and improve the Services (e.g., generate analytics, identify trends, develop insights, enhance features). We do not use AI or automated decision-making to make decisions that produce legal or similarly significant effects about individuals (e.g., decisions about credit, employment, or healthcare).

Our Disclosure of Personal Data

We disclose or otherwise make available personal data in the following ways:

• To Customers of Services: We may make any information that we collect for our Services as described in this Privacy Policy available to our partners and to our customers.
• To Your Employer: If you interact with our services in connection with your employment, we may disclose personal data to your employer or another company for which you work. For example, we may provide information to your employer about your usage of our services in connection with your work for them.
• To Marketing Providers: We coordinate and share personal data with our marketing providers in order to communicate with you about the products and services we make available.
• To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described in the sections above. Depending on the applicable services, these service providers may process personal data on our behalf or have access to personal data while performing services on our behalf.
• To Other Businesses as Needed to Provide Services: We may share personal data with third parties you engage with through our services or as needed to fulfill a request or transaction including, for example, payment processing services.
• In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third-party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
• To Facilitate Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement: in connection with the establishment, exercise, or defense of legal claims; to comply with laws or to respond to lawful requests and legal process; to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of service; to detect, suppress, or prevent fraud; to reduce credit risk and collect debts owed to us; to protect the health and safety of us, our customers, or any person; or as otherwise required by applicable law.
• With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on our websites.

Your Privacy Choices

The following privacy choices are made available to all individuals with whom we interact. You may also have additional choices regarding your personal data depending on your location or residency. Please refer to our Region-Specific Disclosures below for information about additional privacy choices that may be available to you.

Communication Preferences

• Email Communication Preferences: You can stop receiving promotional email communications from us by clicking on the "unsubscribe" link provided in any of our email communications. Please note you cannot opt-out of service-related email communications (such as account verification, transaction confirmation, or service update emails).
• Phone Communication Preferences: You can stop receiving promotional phone communications from us by informing the caller you no longer wish to receive promotional phone calls from us, following the instructions provided on the call for opting out of promotional phone calls (where available). Please note we may need to continue to communicate with you via phone for certain service-related messages (such as, sending a verification code to your phone via call or text for purposes of verifying the authenticity of a log-in attempt).

Automatic Data Collection Preferences

Certain of our services may provide you the ability to adjust your preferences regarding our use of automatic data collection technologies. For example, there may be a "Cookie Preferences" manager linked in the footer of our websites that allows you to adjust your preferences regarding certain automatic data collection technologies on the specific website you are visiting for the specific device and browser you are using at that time (which means you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting). Where a Grace-specific preference manager or privacy setting is not available, you may be able to utilize third-party tools and features to further restrict the use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using our services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.

Partner-Specific Preferences

Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:

• Device-Specific / Platform-Specific Preferences: The device and/or platform you use to interact with us (such as your mobile device or social media provider), may provide you additional choices with regard to the data you choose to share with us. For example, many mobile devices allow you to change your device permissions to prevent our products and services from accessing certain types of information from your device (such as your contact lists or precise geolocation data), and many social media platforms allow you to change your platform permissions to prevent integrated products and services from accessing certain types of information connected with your profile.

Children's Personal Data

Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 18. If an individual is under the age of 18, they should not use our services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 18 has provided personal data to us, we encourage the child's parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 18, we will promptly delete that personal data.

Retention of Personal Data

We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights. To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations. Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.

Third-Party Websites and Services

Our services may include links to third-party websites, plug-ins, connections, applications, API’s and other services. Except where we post, link to or expressly adopt or refer to this Privacy Policy, this Privacy Policy does not apply to any personal data practices of third parties. To learn about the personal data practices of third parties, please visit their respective privacy policies.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:

• United States: If you are a resident of the United States, please read the ADDITIONAL UNITED STATES PRIVACY DISCLOSURES after the Contact Us section below, including a description of the personal data rights made available to residents of certain states under applicable law.
• European Economic Area, United Kingdom or Switzerland: If you are located in the European Economic Area (Member States of the European Union together with Iceland, Norway, and Liechtenstein), the United Kingdom, or Switzerland, please read the ADDITIONAL EUROPEAN-SPECIFIC PRIVACY DISCLOSURES in this Privacy Policy, including a description of the personal data rights made available to individuals located in those jurisdictions under applicable law.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes to this Privacy Policy, we will change the date at the beginning of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Policy or other privacy-related matters, please contact us at getgrace.ai.

ADDITIONAL UNITED STATES PRIVACY DISCLOSURES

These disclosures supplement the information contained in our Privacy Policy by providing additional information about our personal data processing practices relating to individual residents of certain states in the United States. For a detailed description of how we collect, use, disclose, and otherwise process personal data, please read our Privacy Policy. If you are a resident of the state of Nevada in the United States, you have the right to opt out of the sale of your personal data. Although we do not currently sell personal data of Nevada residents (as defined under Nevada law), you may submit a request to opt-out of the sale of your personal data by contacting us at getgrace.ai. If you are a resident of other certain states of the United States, the following supplementary disclosures apply to you. We may or may not sell your sensitive personal data. Please read the disclosures below for more details.

Personal Data Disclosures and Sales

We disclose all of the categories of personal data we collect to the categories of recipients set forth in the Our Disclosure of Personal Data section of our Privacy Policy. Our disclosure of personal data to the following categories of third parties qualifies as the sale of personal data under certain privacy laws:

• Our Customers: We may share inferences that we generate as part of our Services. Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit or opt-out of the sale of personal data (as described in the Your Additional U.S. Privacy Choices section below). Please note we do not sell the personal data of individuals we know to be less than 18 years of age.

Sensitive Personal Data

The following personal data elements we collect may be classified as "sensitive" under certain privacy laws:

• Race, ethnicity or national origin;
• Health data, including information regarding an individual's medical history, mental or physical health condition, or medical treatment or diagnosis;
• Precise geolocation information;
• Inferences related to the above.

We use sensitive personal data for the purposes set forth in the Our Collection and Use of Personal Data section of our Privacy Policy. Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit, or withdraw your consent for, our processing of sensitive personal data (as described in the Your Additional U.S. Privacy Choices section below).

Deidentified Information

We may at times receive, or process personal data to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.

Automated Decision-Making and Profiling

We do not conduct automated processing of personal data for the purposes of evaluating, analyzing, or predicting an individual's personal aspects in furtherance of decisions that produce legal or similarly significant effects. As a result, we do not provide a right to exercise control over such forms of automated decision-making and profiling.

Your Additional U.S. Privacy Choices

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:

• Right to Know: The right to confirm whether we are processing personal data about you and, under California law only, to obtain certain personalized details about the personal data we have collected about you, including: the categories of personal data collected; the categories of sources of the personal data; the purposes for which the personal data were collected; the categories of personal data disclosed to third parties (if any), and the categories of recipients to whom this personal data were disclosed; and the categories of personal data sold (if any) and the categories of third parties to whom the personal data were sold.
• Right to Access & Portability: The right to obtain access to the personal data we have collected about you and, where required by law, the right to obtain a copy of the personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
• Right to Correction: The right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of the personal data.
• Right to Control Over Sensitive Personal Data: The right to exercise control over our collection and processing of certain sensitive personal data.
• Right to Control Over Automated Decision-Making / Profiling: The right to direct us not to use automated decision-making or profiling for certain purposes.
• Right to Opt-Out of Sales: The right to direct us not to sell personal data to third parties, including the right to opt-out of the disclosure of personal data to third parties for the third parties' direct marketing purposes under California's "Shine the Light" Law.
• Right to Deletion: The right to have us delete personal data we maintain about you.

Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.

Submitting Privacy Rights Requests

Please submit a request specifying the right you wish to exercise by contacting us at getgrace.ai. To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of personal data, please adjust your cookie preferences directly within your web browser settings. In addition, you can also opt-out of cookie-based sales by businesses that participate in the Digital Advertising Alliance's CCPA Opt-Out Tool by visiting https://www.privacyrights.info/. Lastly, you may follow the other steps set forth in the Automatic Data Collection Preferences section of the Your Privacy Choices section of our Privacy Statement to further exercise control over automatic data collection technologies. Before processing your request to exercise certain rights (including the Right to Know, Access & Portability, Correction, and Deletion), we will need to verify your identity and confirm you are a resident of a state that offers the requested right(s). In order to verify your identity, we will generally require the matching of sufficient information you provide us to the information we maintain about you in our systems. As a result, we require requests submitted through our online form to include sufficient information so that we may identify your data. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or where you are not a resident of one of the eligible states.

Submitting Authorized Agent Requests

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent's authority to act on your behalf. In order to verify the authorized agent's authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

Appealing Privacy Rights Decisions

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by replying to the communication resolving your original request.

Additional California-Specific Disclosures

The following disclosures only apply to residents of the State of California.

California Categories of Personal Data

California law requires we provide disclosures to you about what personal data we collect by reference to the enumerated categories of personal data set forth within California law. To address this obligation, we have identified the relevant enumerated California personal data category for the personal data described in the Our Collection and Use of Personal Data section of our Privacy Policy below:

• Identifiers, such as real name, postal address, Internet Protocol address, and email address;
• Customer records, such as Name, contact information, education, employment, and financial information;
• Protected classification characteristics, such as age, race, and gender;
• Commercial information, such as purchasing histories or tendencies;
• Internet / network information, such as information regarding a consumer's interaction with an internet website or application;
• Geolocation data, such as device lat/long and MAID;
• Professional / employment information;
• Education information;
• Sensitive personal data, such as race, ethnicity, national origin, or health data;
• Inferences drawn from any other collected personal information to create a profile or a summary about, for example, an individual's preferences and characteristics.

U.S. Personal Data Processing Summary

The table below summarizes the categories of personal data we may process, the sources of that data, our purposes for processing, and the categories of third parties to whom we disclose the data.

California Privacy Rights Request Statistics: None.