Information We Collect
DealGenius collects information about you when you use our plugin. The types of information we collect includes:
- Contact information such as your name, email address and location when you register for an account. Location may be collected for context with certain plugin features and functionalities.
- Usage data such as your IP address, browser type, pages accessed to provide our service and analyze usage.
- Chat history such as transcripts of your conversations within the plugin to provide context to our AI assistant.
- Third party information such as analytics data from Google Analytics to understand overall plugin usage.
We do not collect any sensitive personal data without your explicit consent. The information we collect is used reasonably and transparently for the purposes outlined in this policy.
How We Use Information
We use the information we collect only as necessary for the following purposes:
- Provide our plugin services, features, and functionalities to you.
- Improve and optimize our plugin, such as by analyzing usage data to understand functionality that is most useful.
- Communicate with you, such as through email updates, chat functionalities, and customer support.
- Understand plugin usage and trends through aggregated analytics to improve our offerings.
- Comply with applicable legal obligations and requirements.
- Respond to or complete instructions you provide through the plugin based on your requests and usage.
- Maintain reasonable security of our systems, prevent fraud, technical issues, protect against harm or illegal uses.
- Deidentify, anonymize, and aggregate collected data to improve our services.
- Allow service providers under contract to help operate our plugin's functionality.
We will not use your personal information for any purpose other than intended at the time of collection. We do not sell or rent user data. We only retain personal data as reasonably needed for legal or business purposes.
Information Sharing
We do not share or disclose any personal data with third parties except under the following circumstances:
- Service providers, contractors, and partners: We may share data with third-party service providers and partners who help us operate and improve our plugin. This includes cloud hosting providers, identity verification services, payment processors, analytics services, security and fraud prevention services, billing systems, email distribution services, and more. We ensure external processors are obligated to appropriately protect and secure any data shared.
- Law enforcement: We may disclose user data to law enforcement agencies, public authorities, or other third parties if legally required to do so in response to lawful requests like subpoenas, court orders, or other legitimate law enforcement purposes.
We do not share personal information with any third parties for their own marketing purposes without consent. Any third party who accesses user data is carefully vetted and required to keep it confidential and secure, only processing it for the specific purpose in which it was shared.
User Rights and Choices
We respect user rights over personal data. Specifically, users have the right to:
- Opt-out of non-essential data uses like analytics tracking or academic research.
- Access the specific personal data we hold about you at any time via request.
- Request the correction of inaccuracies or outdated information in your personal data.
- Request the deletion of your personal data unless we have a lawful basis for retaining it.
- Object to specific uses of your data if unwarranted.
- Withdraw consent for data processing you previously authorized.
- Download certain types of personal data for portability purposes.
- Complain to relevant supervisory authorities if you feel your rights have been violated.
To make requests regarding your data or other rights, please contact us indicating your specific need. We will consider and respond appropriately to all legitimate requests in a timely manner.
Data Security
We employ appropriate technical and organizational measures designed to protect user data. Our security controls align with industry standards and include:
- Secure encrypted protocols (TLS/SSL) for data transmission.
- Encryption of sensitive data at rest and in transit using strong encryption.
- Input validation and rate limiting to protect against attacks.
- Internal access controls and personnel security training.
- Vendor risk assessments for external processors.
- Regular software updates, patches, tests, and audits.
- Disaster recovery provisions for availability.
- Incident response plan in case of any data breach.
We continually adapt our security controls based on evolving regulations, technologies, threat landscape, and internal policies. We authorize third-party security compliance audits at least annually. Please contact us if you have any specific security questions.
International Data Transfers
We store and process data securely in regionally localized infrastructure zones. By default, we do not transfer personal data internationally. However, some service providers we utilize may process data outside your jurisdiction. In particular:
- Cloud hosting providers may process data globally to provide redundancy and failover capacity.
- Online analytics services may store anonymized usage analytics internationally.
Where international data transfers occur, we institute safeguards such as Standard Contractual Clauses or EU-approved mechanisms to meet cross-border transfer requirements under privacy laws like GDPR. Contact us for more specifics on international data handling.
Changes To The Privacy Policy
We may update this privacy policy periodically, for example as plugin functionalities expand or privacy regulations evolve. For any material changes, we will notify users through:
- Email notices to the address associated with registered user accounts.
- Notices posted on our website and within the plugin itself.
We encourage users to review privacy updates periodically. Your continued use of the DealGenius plugin constitutes acceptance of any revised privacy policy. Prior versions of changed policies will be archived for reference.