Privacy Policy

1.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Register for an account or sign up for our Services
• Fill out contact forms, quote requests, or consultation inquiries
• Subscribe to newsletters, updates, or marketing communications
• Participate in surveys, contests, promotions, or interactive features
• Apply for employment opportunities or submit job applications
• Communicate with our customer support or sales teams
• Make purchases, payments, or financial transactions

This information may include:

• Contact Information: Full name, email address, phone number, mailing address, company name, job title
• Account Credentials: Username, password, security questions and answers
• Financial Information: Credit card details, billing address, payment method information
• Professional Information: Resume, work history, references, portfolio samples
• Communications: Any messages, feedback, inquiries, or content you submit

1.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain information about your device, browsing behavior, and interactions:

Device Information

• Device Identifiers: IP address, MAC address, device ID, advertising ID, unique device identifiers
• Hardware Information: Device type, model, manufacturer, operating system, version, screen resolution, battery level
• Network Information: Internet service provider (ISP), connection type, network status, Wi-Fi network name
• Geolocation Data: Country, region, city, ZIP/postal code, latitude/longitude coordinates (with your permission)

Browser & Usage Information

• Browser Details: Browser type, version, language preferences, time zone settings
• Browsing Activity: Pages visited, links clicked, time spent on pages, navigation paths
• Referral Information: Referring website, search engine queries, marketing campaign sources
• Interaction Data: Mouse movements, clicks, scrolls, form inputs, button presses, hover events
• Session Data: Session duration, timestamps, frequency of visits, return visitor status

Screen Recording & Session Replay

We utilize session recording technologies that may capture screen recordings, mouse movements, clicks, scrolls, keystrokes (excluding sensitive fields like passwords and credit card numbers), and other on-screen interactions. These recordings help us understand user behavior, identify usability issues, improve our Services, and provide better customer support.

Cookies & Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your browsing activities. This includes:

• Essential Cookies: Required for basic site functionality, authentication, and security
• Analytics Cookies: Track website usage, performance metrics, and user engagement
• Marketing Cookies: Deliver targeted advertising, measure campaign effectiveness, retargeting
• Preference Cookies: Remember your settings, language preferences, and customization choices
• Third-Party Cookies: Placed by advertising partners, analytics providers, and social media platforms

1.3 Information from Third-Party Sources

We may receive additional information about you from third-party sources, including:

• Data Brokers & Aggregators: Demographic data, purchasing behavior, lifestyle information, interest profiles
• Social Media Platforms: Profile information, connections, interactions, publicly available content
• Business Partners: Joint marketing initiatives, referral programs, affiliate networks
• Public Databases: Publicly available records, government databases, professional directories
• Analytics Providers: Website traffic data, conversion tracking, attribution modeling

We use the information we collect for various business purposes, including but not limited to:

2.1 Service Delivery & Operations

• Providing, maintaining, and improving our Services and features
• Processing transactions, payments, and fulfilling orders
• Creating and managing user accounts and profiles
• Responding to inquiries, requests, and customer support needs
• Sending transactional communications, confirmations, and service notifications
• Debugging, troubleshooting, and resolving technical issues

2.2 Personalization & User Experience

• Customizing content, features, and recommendations based on your preferences
• Remembering your settings, preferences, and previous interactions
• Analyzing user behavior to improve website usability and navigation
• Conducting A/B testing and user experience research
• Creating personalized experiences across devices and sessions

2.3 Marketing & Communications

• Sending promotional emails, newsletters, and marketing communications
• Delivering targeted advertising based on your interests and behavior
• Conducting market research, surveys, and customer satisfaction studies
• Promoting events, webinars, special offers, and new services
• Running contests, sweepstakes, and promotional campaigns
• Retargeting and remarketing across third-party platforms

2.4 Analytics & Business Intelligence

• Analyzing website traffic, user engagement, and conversion metrics
• Measuring the effectiveness of marketing campaigns and advertising
• Identifying trends, patterns, and insights from aggregated data
• Developing business strategies and making data-driven decisions
• Benchmarking performance against industry standards

2.5 User Profiling & Segmentation

We create detailed user profiles by combining information from multiple sources, including your browsing behavior, device information, demographic data, third-party data, and interactions with our Services. These profiles may include:

• Behavioral profiles based on browsing patterns, interests, and preferences
• Demographic profiles including age range, gender, location, income level
• Professional profiles based on job title, industry, company size
• Predictive profiles estimating future behavior, needs, and purchasing likelihood
• Cross-device profiles linking your activities across multiple devices

These profiles help us deliver more relevant content, personalized recommendations, and targeted advertising. We may share these profiles with third-party partners for marketing and analytics purposes.

2.6 Legal & Compliance

• Complying with legal obligations, court orders, and regulatory requirements
• Enforcing our Terms of Service and other legal agreements
• Protecting our rights, property, safety, and the security of our users
• Detecting, preventing, and addressing fraud, security breaches, or illegal activities
• Responding to law enforcement requests and legal processes

We may share your information with third parties in the following circumstances:

3.1 Service Providers & Business Partners

We share information with third-party vendors, consultants, and service providers who perform services on our behalf:

• Cloud hosting and infrastructure providers
• Payment processors and financial institutions
• Email service providers and marketing automation platforms
• Analytics and data analysis services
• Customer relationship management (CRM) platforms
• Advertising networks and marketing partners
• Session recording and heat mapping tools
• Content delivery networks (CDNs)

3.2 Advertising & Marketing Partners

We share information with advertising networks, data brokers, and marketing partners to deliver targeted advertisements, measure campaign performance, and enable retargeting across third-party websites and platforms. This may include sharing user profiles, browsing behavior, demographic information, and device identifiers.

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity or successor organization. We will notify you of any such change in ownership or control of your personal information.

3.4 Legal Requirements & Protection

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or government requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of our company, users, or the public
• Detect, prevent, or address fraud, security issues, or technical problems
• Respond to claims of illegal activity or violations of third-party rights

3.5 Aggregated & Anonymized Data

We may share aggregated, de-identified, or anonymized information that does not directly identify you with third parties for research, marketing, analytics, or other business purposes. However, even anonymized data may be re-identified when combined with other data sources.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of information and the purpose for which it was collected:

• Account Information: Retained for the duration of your account plus up to 7 years after account closure
• Transaction Records: Retained for at least 7 years for tax and accounting purposes
• Marketing Data: Retained until you opt out or for up to 5 years after last interaction
• Analytics Data: Retained for up to 3 years in aggregated or anonymized form
• Session Recordings: Retained for up to 2 years for quality assurance and improvement
• Communication Records: Retained for up to 5 years for legal and customer service purposes
• Backup Data: May be retained in backup systems for extended periods

Even after you request deletion, some information may remain in our systems for legal, regulatory, or legitimate business purposes. Backup copies may persist for additional time periods based on our data retention schedules.

Depending on your location and applicable laws (such as GDPR, CCPA, or other privacy regulations), you may have certain rights regarding your personal information:

5.1 Access & Portability

You may request access to the personal information we hold about you and receive a copy in a structured, commonly used, machine-readable format. Response time: up to 45 days.

5.2 Correction & Updates

You have the right to request correction of inaccurate or incomplete personal information. We will make reasonable efforts to update our records within 30 days of verification.

5.3 Deletion

You may request deletion of your personal information, subject to certain exceptions such as legal obligations, fraud prevention, security purposes, or legitimate business interests. We reserve the right to retain information in backup systems and for legal compliance.

5.4 Opt-Out Rights

• Marketing Communications: Unsubscribe via email links or account settings
• Targeted Advertising: Opt out through industry opt-out tools (DAA, NAI) or browser settings
• Sale/Sharing of Data: Submit requests through our privacy portal or email
• Cookies: Manage preferences through browser settings or cookie consent tools

5.5 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to exceptions)
• Right to opt out of the sale or sharing of personal information
• Right to non-discrimination for exercising privacy rights
• Right to limit use of sensitive personal information

5.6 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

5.7 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@enterprisetecgroup.com. We may require verification of your identity before processing requests. We reserve the right to deny requests that are excessive, unfounded, or prohibited by law.

We implement reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

We cannot guarantee absolute security. You acknowledge and accept the inherent security risks of providing information online. We are not responsible for security breaches caused by third parties, unauthorized access, or events beyond our reasonable control.

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction.

By using our Services, you consent to the transfer of your information to any country where we or our service providers operate. We will take steps to ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by regulatory authorities.

Our Services are not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

We reserve the right to modify this Privacy Policy at any time without prior notice. Changes will be effective immediately upon posting the updated Privacy Policy on our website. Your continued use of our Services after changes are posted constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Material changes may be communicated via email or prominent notice on our website.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We may collect, process, and store biometric information and biometric identifiers for authentication, security, personalization, and service improvement purposes. Biometric data is considered sensitive personal information under various privacy laws.

11.1 Types of Biometric Data Collected

• Facial Recognition Data: Facial geometry, facial templates, facial landmarks, faceprints derived from photographs or video
• Fingerprint Data: Fingerprint scans, fingerprint templates, touch patterns
• Voice Biometrics: Voiceprints, voice patterns, vocal characteristics, speech patterns
• Behavioral Biometrics: Typing rhythm, gait analysis, signature dynamics, mouse movement patterns
• Iris and Retinal Scans: Eye recognition data, iris patterns (if applicable)
• Hand Geometry: Palm prints, hand shape measurements (if applicable)

11.2 How We Use Biometric Data

• User authentication and identity verification
• Security and fraud prevention measures
• Access control and authorization
• Personalization of user experience based on identity
• Age verification and content restriction enforcement
• Demographic analysis and audience measurement
• Development and improvement of biometric recognition technologies

11.3 Biometric Data Retention & Deletion

Biometric identifiers and information will be retained for the duration of your use of our Services plus an additional period as required by law (typically 3 years after account closure). You may request deletion of biometric data at any time, subject to legal and security requirements. In Illinois and other jurisdictions with specific biometric privacy laws, we comply with applicable retention and destruction schedules.

11.4 Biometric Data Sharing

We may share biometric data with service providers who assist with authentication services, security verification, and identity management. We do not sell biometric data. However, biometric data may be disclosed to law enforcement, regulatory authorities, or in response to legal process.

11.5 Consent & Rights

Where required by law (such as in Illinois, Texas, Washington, or under GDPR), we obtain your explicit written consent before collecting biometric information. You have the right to refuse biometric collection, revoke consent, and request deletion of biometric data. However, refusing biometric collection may limit certain features or functionality of our Services.

We collect, use, and share both precise and approximate location information to provide location-based services, deliver relevant content, improve our Services, and for analytics and advertising purposes.

12.1 Types of Location Data

Precise Location Data

• GPS Coordinates: Latitude and longitude from GPS sensors (accurate to within meters)
• Wi-Fi Positioning: Location derived from nearby Wi-Fi access points and signal strength
• Bluetooth Beacons: Proximity data from Bluetooth Low Energy (BLE) beacons
• Cell Tower Triangulation: Location based on cellular network tower proximity
• IP Address Geolocation: Location derived from IP address (accurate to city level)

Approximate Location Data

• City, State, Country: General geographic region
• ZIP/Postal Code: Broader geographic area
• Time Zone: Time zone settings indicating general location
• Language Settings: Language preferences suggesting geographic region

12.2 How We Use Location Data

• Providing location-based services and features
• Delivering localized content, recommendations, and search results
• Targeted advertising based on geographic location and movement patterns
• Analytics and insights about user behavior and movement
• Fraud detection and security (identifying unusual location patterns)
• Compliance with legal requirements and content restrictions by region
• Improving map services, navigation, and location accuracy
• Demographic analysis and market research

12.3 Background Location Tracking

We may collect location data even when you are not actively using our Services (background location tracking). This allows us to provide continuous location-based features, track movement patterns, deliver location-triggered notifications, and improve our Services. You can disable background location tracking through your device settings, but this may limit certain features.

12.4 Location History & Storage

We maintain a history of your location data, including timestamps, coordinates, and movement patterns. This location history may be retained for up to 5 years for analytics, service improvement, and legal compliance purposes. You may request access to or deletion of your location history, subject to certain exceptions.

12.5 Sharing Location Data

We share location data with third-party service providers (mapping services, analytics platforms, advertising networks), business partners, and in aggregated form for research purposes. Location data may also be shared with other users if you enable location-sharing features. We may sell or share location data for targeted advertising purposes.

12.6 Controlling Location Data Collection

You can manage location permissions through your device settings (iOS Settings > Privacy > Location Services; Android Settings > Location). However, we may still collect approximate location data through IP addresses and other technical means even if precise location services are disabled. To fully prevent location data collection, you must discontinue use of our Services.

If you use health-related features or integrate health tracking devices with our Services, we may collect sensitive health and wellness information. This data is protected under health privacy laws including HIPAA (where applicable), GDPR, and state-specific health privacy regulations.

13.1 Types of Health Data Collected

• Physical Activity: Steps, distance, exercise type, workout duration, calories burned
• Biometric Measurements: Heart rate, blood pressure, body temperature, respiratory rate, blood oxygen levels
• Body Metrics: Height, weight, BMI, body fat percentage, muscle mass
• Sleep Data: Sleep duration, sleep quality, sleep stages, bedtime and wake time
• Nutrition: Food intake, calorie consumption, macronutrients, dietary preferences
• Mental Health: Mood tracking, stress levels, meditation sessions, mental wellness assessments
• Medical Information: Health conditions, medications, allergies, medical history (if provided)
• Reproductive Health: Menstrual cycle tracking, fertility data, pregnancy-related information

13.2 Health Data Sources

• Wearable devices (smartwatches, fitness trackers, health monitors)
• Connected health apps and platforms (Apple Health, Google Fit, Samsung Health)
• Manual entry and self-reported information
• Device sensors (accelerometer, gyroscope, heart rate sensor)
• Third-party health service integrations

13.3 Use of Health & Wellness Data

• Providing health and fitness tracking features
• Personalized health insights, recommendations, and goal tracking
• Research and development of health-related products and services
• Aggregated health analytics and population health studies
• Targeted advertising for health and wellness products (with consent)
• Integration with healthcare providers (where authorized)

13.4 Sharing of Health Data

We may share health data with service providers, research institutions, healthcare providers (with your authorization), insurance companies (with your consent), and in de-identified or aggregated form for research purposes. We do not sell identifiable health data without explicit consent, except as permitted by applicable law.

13.5 Health Data Security & Retention

Health data is encrypted in transit and at rest using industry-standard encryption protocols. We retain health data for as long as you use health-related features plus up to 7 years for legal and research purposes. You may request deletion of health data at any time, subject to legal retention requirements.

13.6 Limitations & Disclaimers

Our Services are not medical devices and should not be used for medical diagnosis or treatment. Health data and insights are provided for informational and wellness purposes only. Always consult qualified healthcare professionals for medical advice. We are not responsible for accuracy of health data or decisions made based on this information.

When you make purchases, subscriptions, or financial transactions through our Services, we collect and process financial and payment information. This data is handled in accordance with PCI DSS (Payment Card Industry Data Security Standards) and applicable financial privacy regulations.

14.1 Payment Information Collected

• Credit/Debit Card Information: Card number, expiration date, CVV/CVC code, cardholder name
• Bank Account Details: Account number, routing number, bank name (for ACH transfers)
• Digital Wallet Information: PayPal, Apple Pay, Google Pay, cryptocurrency wallet addresses
• Billing Information: Billing address, contact information, tax identification numbers
• Transaction History: Purchase history, transaction amounts, dates, merchants, product details
• Financial Account Information: Income level, credit scores, financial institution relationships

14.2 Payment Processing

Payment card information is processed by third-party payment processors (such as Stripe, PayPal, Square) who are PCI DSS compliant. We may store tokenized payment information (encrypted tokens representing your payment methods) but do not directly store complete credit card numbers. Payment processors have their own privacy policies governing the use of your financial information.

14.3 Use of Financial Data

• Processing payments, refunds, and billing for products and services
• Fraud detection, prevention, and risk assessment
• Tax reporting and compliance with financial regulations
• Account verification and identity authentication
• Personalized product recommendations based on purchase history
• Credit assessment and financial qualification (where applicable)
• Analytics on purchasing patterns and consumer behavior
• Targeted advertising based on purchasing power and financial profile

14.4 Sharing of Financial Information

We share financial data with payment processors, banks and financial institutions, credit card networks, fraud prevention services, tax authorities and government agencies, auditors and accountants, and in de-identified form with analytics partners. We may also share transaction data with merchants for order fulfillment and customer service.

14.5 Financial Data Retention

Transaction records are retained for a minimum of 7 years for tax, accounting, and legal compliance purposes. Payment method information (tokenized) is retained until you delete it or close your account. We may retain financial data longer if required by law or for dispute resolution purposes.

14.6 Security Measures

• End-to-end encryption for payment transactions using TLS/SSL protocols
• Tokenization of sensitive payment information
• PCI DSS Level 1 compliance through certified payment processors
• Multi-factor authentication for account access and transactions
• Regular security audits and vulnerability assessments
• Fraud detection systems monitoring unusual transaction patterns

Under various privacy laws (GDPR, CCPA/CPRA, and others), certain categories of personal information are classified as "sensitive" and subject to heightened protection and consent requirements. We may collect, process, and share the following categories of sensitive personal information:

15.1 Categories of Sensitive Information

• Social Security Number & Government IDs: SSN, driver's license number, passport number, national ID numbers
• Account Credentials: Username and password combinations, security questions, authentication codes
• Precise Geolocation: GPS coordinates accurate within a radius of 1,850 feet or less
• Racial or Ethnic Origin: Self-identified or inferred racial/ethnic background
• Religious or Philosophical Beliefs: Religious affiliation, spiritual beliefs, philosophical views
• Sexual Orientation & Gender Identity: LGBTQ+ status, gender identity, sexual preferences
• Union Membership: Labor union affiliation and participation
• Genetic Data: DNA sequences, genetic testing results, hereditary traits
• Biometric Information: Fingerprints, facial recognition data, voice prints (detailed in Section 11)
• Health Information: Medical conditions, diagnoses, prescriptions (detailed in Section 13)
• Sex Life & Sexual Behavior: Sexual activity, intimate relationships, dating preferences
• Citizenship & Immigration Status: Nationality, visa status, work authorization
• Children's Personal Information: Data from or about individuals under 13 (or 16 in EU)

15.2 Collection Methods for Sensitive Data

Sensitive personal information may be collected through direct disclosure (forms, profiles, surveys), inferred from your activity and behavior (browsing patterns, content interactions, purchase history), third-party data sources (data brokers, social media platforms), and automated technologies (AI algorithms, predictive analytics, facial recognition).

15.3 Purposes for Processing Sensitive Data

• Account security and fraud prevention (credentials, government IDs)
• Identity verification and age verification
• Personalized content and recommendations based on interests and characteristics
• Targeted advertising and marketing (including sensitive categories)
• Demographic analysis and market research
• Compliance with legal obligations (employment verification, tax reporting)
• Research and development of AI and machine learning systems
• Product development and service improvements

15.4 Sharing of Sensitive Information

We may share sensitive personal information with service providers, business partners, advertising networks, data analytics companies, research institutions, and government agencies as required by law. In some jurisdictions, sharing or selling sensitive personal information requires explicit opt-in consent. You may have the right to limit use and disclosure of sensitive personal information.

15.5 Legal Basis for Processing (GDPR)

For European users, we process sensitive data based on: explicit consent, necessity for employment/social security purposes, public interest or official authority, medical purposes, or legitimate interests (where permitted). You may withdraw consent at any time, subject to legal limitations.

15.6 Rights Regarding Sensitive Data

Under CCPA/CPRA, you have the right to limit use and disclosure of sensitive personal information for purposes other than providing Services. Under GDPR, you have enhanced rights including data portability, erasure, and objection. To exercise these rights, contact our privacy team at privacy@enterprisetecgroup.com.

When you connect your social media accounts to our Services or use social login features, we collect information from and about your social media profiles and activities. This integration allows for enhanced functionality but involves sharing data between our Services and social media platforms.

16.1 Social Media Platforms

• Facebook / Meta
• Instagram
• Twitter / X
• LinkedIn
• TikTok
• YouTube
• Snapchat
• Pinterest
• Reddit
• Discord

16.2 Data Collected from Social Media

• Profile Information: Name, username, profile picture, bio, age, gender, location
• Contact Lists: Friends, followers, connections, contact information
• Public Content: Posts, photos, videos, stories, comments, likes, shares
• Activity Data: Pages liked, groups joined, events attended, check-ins
• Engagement Metrics: Interaction history, content preferences, viewing patterns
• Social Graph: Network of connections, relationship types, influence scores
• OAuth Tokens: Access tokens allowing ongoing access to your social accounts
• Email Address: Primary email associated with social account

16.3 How We Use Social Media Data

• Single sign-on (SSO) authentication and account creation
• Populating your profile with social media information
• Finding and connecting with friends who use our Services
• Sharing content from our Services to your social media accounts
• Displaying your social media activity within our Services
• Personalized content recommendations based on social interests
• Targeted advertising using social media data and lookalike audiences
• Social listening and sentiment analysis
• Influencer identification and marketing outreach

16.4 Social Media Plugins & Widgets

Our Services include social media plugins (Like buttons, Share buttons, Follow buttons) that may collect information about your browsing activity even if you don't click them. These plugins set cookies and transmit data to social media platforms, allowing them to track your visits across websites. Social media platforms have their own privacy policies governing this data collection.

16.5 Facebook Pixel & Similar Technologies

We use Facebook Pixel, Twitter Pixel, LinkedIn Insight Tag, TikTok Pixel, and similar tracking technologies that collect information about your interactions with our Services and share it with social media platforms for advertising, retargeting, and analytics purposes. This includes: page views, button clicks, form submissions, purchases, and custom conversion events. You can opt out through platform-specific settings or browser ad preferences.

16.6 Sharing Data with Social Media Platforms

We share information with social media platforms for advertising purposes, including customer lists for audience matching, website activity for retargeting campaigns, and conversion data for attribution. Social media platforms may combine this data with their own data about you to create more detailed profiles and target advertising.

16.7 Managing Social Media Integrations

You can disconnect social media accounts from our Services through your account settings. However, this may limit certain features. You can also manage permissions and data access through each social media platform's privacy settings. Note that data already collected may be retained according to our retention policies.

We use third-party analytics services to collect, analyze, and report on user behavior and Service performance. These analytics providers have access to your information and use cookies, tracking pixels, and similar technologies to gather data about your interactions with our Services.

17.1 Analytics Providers We Use

• Google Analytics: Website traffic analysis, user demographics, behavior flow, conversion tracking
• Google Analytics 4 (GA4): Cross-platform tracking, event-based analytics, predictive metrics
• Adobe Analytics: Real-time analytics, customer journey mapping, attribution modeling
• Mixpanel: Product analytics, user cohort analysis, retention tracking, funnel analysis
• Amplitude: Behavioral analytics, user segmentation, predictive analytics
• Segment: Customer data platform, data collection and routing to multiple tools
• Heap Analytics: Automatic event tracking, retroactive analysis, session replay
• Hotjar: Heatmaps, session recordings, user feedback (detailed in Section 21)
• FullStory: Session replay, user experience analytics, conversion optimization
• Crazy Egg: Heatmaps, scroll maps, click tracking, A/B testing

17.2 Data Collected by Analytics Services

• Device & Browser Information: User agent, browser type, operating system, screen resolution
• IP Address & Location: IP address, country, city, geographic coordinates
• Behavior Data: Pages visited, time on page, bounce rate, exit pages, navigation paths
• Acquisition Data: Traffic sources, referral URLs, campaign parameters, search keywords
• Engagement Metrics: Clicks, scrolls, form interactions, video plays, downloads
• Conversion Data: Goal completions, e-commerce transactions, revenue, product views
• User Identifiers: Anonymous visitor IDs, client IDs, user IDs (when logged in)
• Custom Events: Application-specific interactions and custom tracking parameters
• Demographics: Age, gender, interests (inferred by analytics platforms)

17.3 How Analytics Data is Used

• Understanding how users interact with our Services
• Identifying popular content, features, and navigation patterns
• Measuring marketing campaign effectiveness and ROI
• Optimizing user experience and improving website performance
• A/B testing and experimentation (detailed in Section 22)
• Identifying technical issues, errors, and broken functionality
• Segmenting users based on behavior, demographics, and lifecycle stage
• Predicting user behavior and churn risk
• Benchmarking performance against industry standards

17.4 Data Sharing with Analytics Providers

Analytics providers receive data directly from your browser/device through tracking codes embedded in our Services. They process this data on their servers, which may be located in various countries including the United States. Analytics providers may use data for their own purposes, including improving their services, creating benchmarks, and developing new products. They may also combine data from our Services with data from other websites and apps that use their services.

17.5 Cross-Site and Cross-Device Tracking

Analytics services may track your activity across different websites and apps (cross-site tracking) and across multiple devices you use (cross-device tracking). This creates comprehensive profiles of your online behavior that can be used for analytics and advertising purposes. Cross-device tracking uses techniques such as: probabilistic matching (based on similar behavior patterns), deterministic matching (using login credentials), and device graphs (networks of linked devices).

17.6 Analytics Data Retention

Analytics data is typically retained for 26-50 months depending on the provider and our configuration. Some analytics providers offer options to automatically delete data after shorter periods. We may export and retain aggregated analytics reports indefinitely for historical analysis and business intelligence purposes.

17.7 Opting Out of Analytics

You can opt out of certain analytics tracking through: browser-based opt-outs (Google Analytics Opt-out Browser Add-on), Do Not Track signals (honored by some but not all providers), cookie consent management platforms, and ad blocker extensions. Note that opting out may affect functionality and our ability to provide personalized experiences. Opt-out preferences are device and browser specific.

We collect and use various advertising identifiers to deliver targeted advertising, measure ad performance, and enable retargeting across platforms and devices. These identifiers help us and our advertising partners recognize you across different contexts and serve relevant advertisements.

18.1 Types of Advertising Identifiers

Mobile Advertising IDs

• IDFA (Identifier for Advertisers): Apple's advertising identifier for iOS devices
• AAID (Google Advertising ID): Google's advertising identifier for Android devices
• Amazon Advertising ID: Advertising identifier for Amazon devices
• Roku Advertising ID (RIDA): Identifier for Roku streaming devices

Web & Cross-Platform Identifiers

• Cookie IDs: First-party and third-party cookie identifiers
• Device IDs: Unique device identifiers based on hardware characteristics
• Probabilistic IDs: Statistical identifiers based on behavioral patterns
• Unified IDs: Cross-platform identifiers (The Trade Desk UID, LiveRamp IdentityLink)
• Email Hashes: Hashed email addresses used for ad matching

18.2 How Advertising Identifiers Are Used

• Targeted Advertising: Delivering ads based on your interests, demographics, and behavior
• Retargeting/Remarketing: Showing ads for products you've viewed or abandoned in cart
• Frequency Capping: Limiting how many times you see the same ad
• Attribution: Measuring which ads led to conversions and purchases
• Lookalike Audiences: Finding users similar to existing customers
• Cross-Device Tracking: Recognizing you across phones, tablets, computers, TVs
• Audience Segmentation: Categorizing users into interest and demographic groups
• Ad Measurement: Tracking impressions, clicks, viewability, and engagement

18.3 Advertising Networks & Partners

We partner with numerous advertising networks and ad tech companies who have access to advertising identifiers and behavioral data:

• Google Ads / Display Network: Search ads, display ads, YouTube ads, remarketing
• Facebook/Meta Ads: Facebook, Instagram, Messenger, Audience Network
• Amazon Advertising: Sponsored products, display ads, video ads
• Microsoft Advertising: Bing ads, LinkedIn ads, Microsoft Audience Network
• Twitter/X Ads: Promoted tweets, trend takeovers, targeting based on interests
• TikTok Ads: In-feed ads, branded hashtags, spark ads
• Programmatic Platforms: The Trade Desk, MediaMath, Adobe Advertising Cloud
• Data Management Platforms (DMPs): Oracle BlueKai, Lotame, Neustar
• Ad Exchanges: AppNexus, OpenX, PubMatic, Rubicon Project

18.4 Real-Time Bidding & Programmatic Advertising

When you visit our Services, your advertising identifiers and behavioral data may be shared with dozens or hundreds of advertisers in real-time through automated ad auctions (Real-Time Bidding/RTB). This process happens in milliseconds and includes sharing information such as: device type, location, browsing history, demographic profile, interests, and previous purchases. Advertisers bid to show you ads, and the highest bidder's ad is displayed. This data sharing occurs even if you don't click on ads.

18.5 Interest-Based Advertising Categories

Based on your advertising identifiers and online behavior, you may be categorized into hundreds of interest segments for targeted advertising, including but not limited to:

• Demographics (age, gender, income level, education, parental status)
• Shopping behaviors (luxury shoppers, bargain hunters, impulsive buyers)
• Life events (moving, getting married, having a baby, retiring)
• Interests & hobbies (sports, travel, technology, fashion, food)
• Purchase intent (in-market for cars, electronics, insurance, etc.)
• Brand affinities (preferred brands and product categories)

18.6 Managing Advertising Identifiers

You can manage advertising tracking through:

• iOS: Settings > Privacy > Tracking > "Allow Apps to Request to Track" (OFF)
• Android: Settings > Privacy > Ads > "Opt out of Ads Personalization"
• Web Browsers: Cookie settings, third-party cookie blocking, tracking protection
• Industry Opt-Out Tools: NAI Opt-Out, DAA WebChoices, European Interactive Digital Advertising Alliance (EDAA)
• Reset Advertising ID: Generate new random identifier (iOS/Android settings)

Note: Opting out does not reduce the number of ads you see, but makes them less relevant to your interests. Opt-out choices are device and browser specific. We may continue to collect data for other purposes even if you opt out of personalized advertising.

We employ cross-device tracking technologies to link your activities across multiple devices (smartphones, tablets, computers, smart TVs, wearables) to create unified user profiles. This enables us to provide seamless experiences and deliver consistent advertising across all your devices.

19.1 Cross-Device Tracking Methods

Deterministic Matching

Deterministic matching uses known identifiers to link devices with high certainty:

• Login Credentials: Linking all devices where you log into your account
• Email Address: Matching devices using the same email for authentication
• Phone Number: Connecting devices associated with the same phone number
• Device IDs: Unique hardware identifiers tied to your account
• IP Address & Location: Devices sharing the same home network and physical location

Probabilistic Matching

Probabilistic matching uses statistical analysis of behavioral patterns to infer device ownership:

• Behavioral Similarities: Similar browsing patterns, time of day usage, content interests
• Geographic Patterns: Devices appearing in similar locations over time
• Network Analysis: Shared Wi-Fi networks, IP addresses, ISP information
• Device Characteristics: Similar screen resolutions, operating systems, browser configurations
• Temporal Patterns: Timing and sequence of device usage suggesting single user

19.2 Device Graph Technology

We use device graph providers who maintain massive databases of linked devices across billions of consumers. These providers create comprehensive maps of device ownership using data from multiple sources:

• First-Party Data: Direct login and account information from our Services
• Third-Party Data: Data purchased from data brokers and aggregators
• Partner Data: Shared data from advertising partners and publishers
• Offline Data: Purchase history, loyalty programs, credit card transactions

Major device graph providers include: Oracle BlueKai Device Graph, Tapad Device Graph, Drawbridge, LiveRamp IdentityLink, Neustar Fabrick, and Adobe Experience Cloud Device Co-op.

19.3 Unified User Profiles

Cross-device tracking allows us to build comprehensive unified profiles that include:

• Complete Device Inventory: All devices you own or regularly use
• Cross-Device Behavior: Complete journey across mobile, desktop, tablet, TV
• Channel Preferences: Which devices you use for different activities
• Conversion Paths: Complete attribution from first touch to purchase across devices
• Household Mapping: Other users and devices in your household
• Temporal Patterns: When you use different devices throughout the day

19.4 Uses of Cross-Device Data

• Seamless Experience: Syncing preferences, settings, and progress across devices
• Sequential Messaging: Coordinating ad sequences across mobile, desktop, and TV
• Frequency Management: Preventing ad fatigue by capping impressions across all devices
• Cross-Device Attribution: Understanding complete customer journey from awareness to purchase
• Retargeting: Showing ads on all your devices for products viewed on one device
• Personalization: Delivering consistent personalized experiences across touchpoints
• Household Targeting: Reaching all members of a household with coordinated messaging

19.5 Sharing Cross-Device Profiles

Unified cross-device profiles are shared with advertising partners, marketing platforms, analytics providers, data management platforms (DMPs), demand-side platforms (DSPs), and may be sold to data brokers and third parties. These profiles can be combined with offline data (credit reports, purchasing history, public records) to create even more comprehensive profiles for targeting and analytics.

19.6 Privacy Implications

Cross-device tracking significantly increases the amount of data collected about you and reduces your anonymity online. Even if you clear cookies or use private browsing on one device, you may still be tracked and identified through your other devices. Opting out requires action across all devices and platforms you use.

19.7 Opting Out of Cross-Device Tracking

• Log out of your account and don't use auto-login features
• Use different email addresses for different devices
• Disable ad personalization on each device independently
• Use VPNs to mask IP address and location
• Clear cookies and use private browsing modes
• Opt out through industry tools (NAI, DAA) on each device

Note: Complete opt-out of cross-device tracking is extremely difficult as probabilistic matching can still link devices even without deterministic identifiers.

We employ browser fingerprinting techniques to create unique identifiers for your device based on its configuration and characteristics. Unlike cookies, browser fingerprints cannot be easily deleted or blocked, making them a persistent tracking method that works even when you clear cookies, use private browsing, or block traditional tracking technologies.

20.1 What is Browser Fingerprinting

Browser fingerprinting collects information about your device and browser configuration to create a unique "fingerprint" that can identify you across sessions and websites. This fingerprint is created by combining dozens or hundreds of data points that, individually, may not be unique, but together create a highly distinctive identifier.

20.2 Data Points Used for Fingerprinting

Browser & System Information

• User Agent: Browser version, operating system, device type
• Browser Plugins: Installed plugins, extensions, add-ons (Flash, Java, PDF readers)
• Fonts: List of installed system and browser fonts
• Screen Properties: Screen resolution, color depth, pixel density, orientation
• Timezone & Language: System timezone, language preferences, keyboard layout
• Hardware Specs: CPU cores, memory, GPU details, audio devices

Advanced Fingerprinting Techniques

• Canvas Fingerprinting: Rendering hidden images to detect subtle differences in graphics rendering
• WebGL Fingerprinting: Using WebGL rendering characteristics and GPU information
• Audio Fingerprinting: Analyzing audio processing characteristics and signals
• Battery Status: Battery level and charging status (deprecated but previously used)
• WebRTC Leaks: Obtaining local and public IP addresses through WebRTC
• JavaScript Capabilities: Enabled features, API support, performance benchmarks
• HTTP Headers: Accept headers, encoding preferences, connection properties
• Storage Quotas: Available storage space for local storage, IndexedDB, cache
• Device Sensors: Accelerometer, gyroscope, magnetometer readings
• Clock Skew: Subtle variations in system clock accuracy

20.3 Fingerprinting Methods We Use

• Active Fingerprinting: Running JavaScript and HTML5 tests to collect device characteristics
• Passive Fingerprinting: Analyzing HTTP headers and network requests
• Cross-Browser Fingerprinting: Identifying users across different browsers on the same device
• Evercookie Techniques: Storing identifiers in multiple locations for persistence
• Third-Party Fingerprinting: Using specialized fingerprinting services (FingerprintJS, Iovation, ThreatMetrix)

20.4 Purposes of Fingerprinting

• User Tracking: Following users across websites even without cookies
• Fraud Prevention: Detecting suspicious devices and preventing account takeovers
• Bot Detection: Identifying automated traffic and malicious bots
• Analytics: Counting unique visitors more accurately than cookies
• Advertising: Targeting and retargeting users who block cookies
• Authentication: Device recognition for security and risk assessment
• Bypassing Privacy Tools: Tracking users who use ad blockers, VPNs, or Tor

20.5 Fingerprint Persistence & Accuracy

Browser fingerprints can remain stable for months or years, even as you update your browser, install new software, or change settings. Studies show that fingerprints can uniquely identify 99.2% of users with high accuracy. Fingerprints can survive:

• Cookie deletion and private browsing modes
• VPN usage (though VPNs may alter IP-based elements)
• Browser updates (fingerprints gradually evolve but remain linkable)
• Device restarts and cache clearing
• Ad blocker installation

20.6 Sharing Fingerprint Data

Browser fingerprints and associated behavioral data are shared with third-party analytics providers, advertising networks, fraud prevention services, device intelligence platforms, and may be incorporated into cross-device tracking systems. Fingerprints may be combined with other identifiers (cookies, login IDs, advertising IDs) to create comprehensive tracking profiles.

20.7 Protection Against Fingerprinting

Fingerprinting is difficult to prevent, but these measures may reduce effectiveness:

• Privacy Browsers: Tor Browser, Brave (with fingerprint protection)
• Browser Extensions: Canvas Blocker, NoScript, Privacy Badger
• Browser Settings: Disable JavaScript (breaks many websites), block third-party resources
• Fingerprint Randomization: Use tools that randomize fingerprint characteristics
• Virtual Machines: Browse in isolated VM environments with generic configurations

Important: Many anti-fingerprinting measures make your browser more unique and easier to track (the "privacy paradox"). Complete protection is nearly impossible while maintaining normal web functionality.

We use advanced session recording and heat mapping technologies to capture detailed recordings of your interactions with our Services. These tools create video-like recordings of your browsing sessions, tracking every mouse movement, click, scroll, keystroke, and form input to analyze user behavior and improve our Services.

21.1 Session Recording Technologies

We use the following session recording and replay platforms:

• Hotjar: Session recordings, heatmaps, conversion funnels, user feedback
• FullStory: High-fidelity session replay, searchable video-like recordings
• LogRocket: Session replay with console logs, network requests, errors
• Mouseflow: Session replay, heatmaps, form analytics, friction detection
• Lucky Orange: Real-time visitor recordings, live chat integration
• SessionCam: Enterprise session replay and struggle analysis
• Smartlook: Mobile and web session recordings, event tracking

21.2 What is Recorded in Sessions

• Complete Visual Recording: Pixel-perfect reproduction of everything you see on screen
• Mouse Movements: Every cursor position, path, velocity, and pattern
• Clicks & Taps: Location, element clicked, timestamp, click patterns
• Scroll Behavior: Scroll depth, speed, pauses, hesitations, back-scrolling
• Form Interactions: Fields focused, time spent per field, corrections made, abandoned fields
• Keystrokes: Typing patterns, speed, deletions (text content masked for sensitive fields)
• Page Navigation: Complete journey across pages, referrers, exit pages
• Device Interactions: Touch gestures, pinch-zoom, orientation changes (mobile)
• Rage Clicks: Repeated frustrated clicking indicating usability issues
• JavaScript Errors: Console errors, warnings, and technical issues encountered
• Network Activity: API calls, resource loading times, failed requests
• Custom Events: Button clicks, video plays, PDF downloads, specific interactions

21.3 Heatmap Types

• Click Heatmaps: Visualizing where users click, including non-clickable elements
• Move Heatmaps: Tracking cursor movement patterns and attention areas
• Scroll Heatmaps: Showing how far users scroll and where they stop
• Attention Heatmaps: Measuring time spent viewing different page areas
• Engagement Zones: Identifying most and least engaged page sections
• Confetti Maps: Segmenting clicks by traffic source, device, or user attributes

21.4 Data Captured with Recordings

Along with visual recordings, we capture extensive metadata:

• User ID, session ID, device ID for linking recordings to user profiles
• Device type, browser, operating system, screen resolution
• Geographic location (country, city, IP address)
• Traffic source, referrer, campaign parameters
• Session duration, time on page, bounce behavior
• Conversion events, purchase value, revenue attribution
• Custom user attributes (account type, subscription level, customer segment)

21.5 Sensitive Data Handling

We attempt to exclude certain sensitive information from recordings:

• Password Fields: Masked with asterisks or dots (but keystroke patterns still recorded)
• Credit Card Numbers: Typically masked but may be partially visible during input
• Social Security Numbers: Marked as sensitive and excluded when detected
• Email Addresses: May be captured unless specifically excluded
• Personal Messages: Private communications may be recorded unless explicitly blocked

Important: Masking is imperfect. Sensitive data may still be captured due to configuration errors, dynamic content, or technical limitations. We cannot guarantee that sensitive information never appears in recordings.

21.6 Uses of Session Recordings

• Analyzing user experience and identifying usability problems
• Understanding why users abandon forms or checkout processes
• Optimizing conversion funnels and reducing friction points
• Troubleshooting technical issues and bug reproduction
• Training machine learning models for behavior prediction
• Customer support and investigating user-reported problems
• Competitor analysis and benchmarking (for other sites we operate)
• Marketing optimization and A/B test analysis
• Fraud detection and security monitoring

21.7 Sharing of Recording Data

Session recording data is stored on third-party servers (often in the United States) and may be accessed by: session replay platform providers, our employees and contractors, analytics and consulting partners, and potentially subpoenaed by legal authorities. Some recording platforms may analyze your data to improve their own products and services.

21.8 Recording Retention

Session recordings are typically retained for 30 days to 12 months, depending on the platform and our configuration. Important recordings (high-value customers, problematic sessions, conversion events) may be retained longer. Aggregated heatmap data may be retained indefinitely.

21.9 Opting Out of Session Recording

Session recording usually happens automatically without explicit notice. To reduce exposure: use browser extensions that block recording scripts (uBlock Origin, Privacy Badger), enable tracking protection in your browser, use private/incognito mode (may still be recorded), or contact us to request exclusion from future recordings. However, we cannot retroactively delete past recordings linked to your account.

We continuously conduct A/B tests, multivariate tests, and behavioral experiments to optimize our Services, increase engagement, and maximize conversion rates. When you use our Services, you may be unknowingly enrolled in multiple concurrent experiments that test different features, designs, pricing, content, and user experiences without your explicit awareness or consent.

22.1 Types of Experiments

• A/B Tests: Comparing two versions of a page, feature, or element
• Multivariate Tests: Testing multiple variables simultaneously
• Split URL Tests: Directing users to entirely different page versions or URLs
• Personalization Tests: Dynamic content changes based on user segments
• Behavioral Experiments: Testing psychological triggers, nudges, dark patterns
• Pricing Tests: Showing different prices to different users
• Feature Rollouts: Gradual release of features to subset of users
• Algorithm Tests: Testing recommendation algorithms, search rankings, news feeds

22.2 What We Test

• Visual Design: Colors, layouts, images, fonts, button styles, page structure
• Content & Copy: Headlines, descriptions, calls-to-action, messaging tone
• Functionality: Feature availability, workflow processes, navigation structures
• Pricing & Offers: Price points, discounts, promotional timing, payment options
• Social Proof: Reviews, testimonials, user counts, urgency messages
• Recommendation Algorithms: Content suggestions, product rankings, search results
• Email & Notifications: Subject lines, send times, frequency, message content
• Psychological Triggers: Scarcity messages, FOMO elements, anchoring, framing effects

22.3 Experimentation Platforms

We use sophisticated experimentation and optimization platforms:

• Google Optimize / Google Optimize 360: A/B testing integrated with Google Analytics
• Optimizely: Enterprise experimentation platform with advanced targeting
• VWO (Visual Website Optimizer): A/B testing, split testing, multivariate testing
• Adobe Target: Personalization and experimentation within Adobe Experience Cloud
• Dynamic Yield: AI-powered personalization and optimization
• Unbounce: Landing page A/B testing and conversion optimization
• Custom Internal Tools: Proprietary experimentation frameworks

22.4 How You're Assigned to Experiments

When you visit our Services, you are automatically and randomly assigned to experiment groups based on:

• Random Assignment: Pure randomization for unbiased results
• User Attributes: Targeting specific demographics, behaviors, or segments
• Device Type: Mobile vs. desktop experiments
• Geographic Location: Regional or country-specific tests
• Traffic Source: Testing different experiences for paid vs. organic visitors
• Persistent IDs: Cookies or user IDs ensure you see consistent experience across sessions

You may be enrolled in dozens of simultaneous experiments without notification. Experiments typically run for days to weeks until statistical significance is reached.

22.5 Data Collected from Experiments

• Experiment Variant: Which version you were shown (control vs. variations)
• Engagement Metrics: Clicks, time on page, scroll depth, interactions
• Conversion Metrics: Sign-ups, purchases, downloads, form submissions
• Revenue Data: Transaction value, average order value, lifetime value
• Behavioral Patterns: How differently you behave in experiment vs. control
• Segment Performance: How different user groups respond to variations
• Long-term Effects: Retention, churn, repeat purchases measured over weeks/months

22.6 Ethical Considerations & Dark Patterns

Some experiments may test ethically questionable design patterns intended to manipulate behavior:

• Artificial Scarcity: Fake countdown timers, limited stock warnings
• Forced Continuity: Making cancellation difficult or hidden
• Confirmshaming: Guilt-inducing language for declining offers
• Sneaking: Adding items to cart or subscriptions without clear consent
• Price Discrimination: Showing different prices based on user profiles
• Obstruction: Making desired actions harder to find or complete

These tactics are tested to determine their effectiveness at increasing conversions, even if they reduce user trust or satisfaction long-term.

22.7 Sharing Experiment Data

Experiment data (including your responses and behaviors) is shared with experimentation platforms, analytics providers, business intelligence teams, marketing agencies, and may be presented in case studies or research publications (typically in aggregated form). Insights from experiments inform product development, marketing strategies, and business decisions.

22.8 Your Rights Regarding Experiments

You cannot opt out of individual experiments or control which variations you see. Experimentation is considered a core business practice necessary for service improvement. However, disabling cookies and clearing browser data may affect experiment consistency. Some experiments may be disclosed in academic research ethics boards when conducting formal studies, but commercial product optimization typically does not require informed consent or IRB approval.

We use artificial intelligence and machine learning technologies to process your data and improve our Services. Your data may be used to train, test, and improve AI models, algorithms, and automated systems.

AI-Powered Features

• Recommendation Engines: Suggesting content, products, or services based on your behavior
• Predictive Analytics: Forecasting user needs, preferences, and future actions
• Natural Language Processing: Analyzing text inputs, support tickets, reviews, feedback
• Image Recognition: Analyzing uploaded photos, profile pictures, or visual content
• Fraud Detection: Identifying suspicious patterns and preventing abuse
• Automated Customer Support: Chatbots and virtual assistants powered by AI

Data Used for AI Training

Your data (including content you create, upload, or share) may be used to train machine learning models. This includes text, images, videos, audio recordings, interactions, preferences, and behavioral patterns. While we typically use aggregated or anonymized data, some AI training may involve identifiable information. Trained models may be used internally or licensed to third parties.

If our Services include voice-activated features, voice commands, or audio recording capabilities, we collect and process voice data including:

• Voice Recordings: Audio files of your spoken commands, questions, or interactions
• Voice Biometrics: Unique vocal characteristics, pitch, tone, accent, speech patterns
• Transcriptions: Text versions of your voice inputs created through speech-to-text
• Background Audio: Ambient sounds, noise, other voices in the vicinity
• Usage Patterns: When, how often, and in what context you use voice features

Voice recordings may be reviewed by human personnel for quality assurance, training AI models, and improving speech recognition accuracy. Voice data may be stored indefinitely and shared with third-party transcription and AI training services.

Our mobile applications or web services may request access to your device camera and photo library. When granted, we collect:

• Photos & Videos: Images and videos you capture or select from your library
• Metadata: EXIF data including GPS coordinates, timestamps, device information, camera settings
• Image Analysis: Objects, faces, scenes, text, and content detected through AI processing
• Live Camera Feed: Real-time video stream for AR features, scanning, or verification

Photos may be analyzed for content moderation, facial recognition, object detection, or personalization purposes. Images uploaded to our Services may become publicly visible or shared with other users depending on your privacy settings and how you use our platform.

With your permission, we may access your device's microphone to collect audio data including:

• Voice Inputs: Spoken commands, questions, or dictation
• Environmental Audio: Background sounds, music, ambient noise
• Call Recordings: Customer support calls, sales calls, or consultation sessions
• Audio Fingerprints: Acoustic signatures for content recognition
• Sound Events: Specific sounds like alarms, notifications, or triggers

Audio recordings may be transcribed, analyzed by AI, reviewed by humans, and stored indefinitely. Some features may record audio even when you're not actively interacting with the Service (always-listening mode). You will typically be notified when recording is active, but notification requirements vary by jurisdiction.

We may use facial recognition and biometric analysis technologies to identify and analyze faces in photos, videos, or live camera feeds. This includes:

• Face Detection: Identifying that a face is present in an image
• Facial Mapping: Creating mathematical representations (faceprints) of facial features
• Face Matching: Comparing faces to identify the same person across multiple images
• Age & Gender Estimation: Predicting demographic attributes from facial features
• Emotion Detection: Analyzing facial expressions to infer mood or reactions
• Identity Verification: Confirming user identity through facial comparison

Faceprints are considered biometric identifiers and may be regulated differently than other personal information. In some jurisdictions, we obtain explicit consent before collecting faceprints. Facial recognition data may be shared with law enforcement, security services, or third-party verification providers. You may have the right to opt out of facial recognition in certain regions.

Our mobile applications may access various device sensors that collect detailed data about your physical environment and activities:

• Accelerometer: Device movement, shaking, tilt, orientation changes
• Gyroscope: Rotation, angular velocity, device positioning
• Magnetometer/Compass: Directional heading, magnetic field detection
• Barometer: Atmospheric pressure, altitude, floor level estimation
• Ambient Light Sensor: Screen brightness, environmental lighting conditions
• Proximity Sensor: Whether device is near your face or other objects
• Pedometer: Step counting, walking/running detection, activity tracking
• Thermometer: Device or ambient temperature

Sensor data reveals detailed behavioral patterns including: activity levels, transportation modes (walking, driving, flying), sleep patterns, device usage habits, and even health indicators. This data is used for analytics, fraud detection, user experience optimization, and may be shared with third-party analytics providers.

Our mobile applications may request the following device permissions to access sensitive data and functionality:

• Contacts: Access to your contact list, phone numbers, email addresses
• Calendar: View and modify calendar events, appointments, reminders
• SMS/MMS: Read, send, or receive text messages
• Phone: Make calls, access call logs, view phone numbers
• Storage: Read/write files, photos, videos, documents on device storage
• Bluetooth: Scan for and connect to nearby Bluetooth devices
• NFC: Near-field communication for payments or data transfer
• Notifications: Display push notifications, badges, alerts
• Background App Refresh: Continue running and collecting data when app is closed

You can manage permissions in your device settings, but denying permissions may limit functionality. Some permissions, once granted, allow continuous data collection even when the app is not actively in use.

When you enable push notifications, we collect device tokens and send targeted messages to your device. Push notifications may include:

• Transactional Updates: Order confirmations, account activity, security alerts
• Marketing Messages: Promotional offers, new feature announcements, re-engagement campaigns
• Behavioral Triggers: Cart abandonment, inactivity reminders, personalized recommendations
• Location-Based Alerts: Geo-targeted messages based on your physical location
• Time-Sensitive Offers: Limited-time deals, flash sales, expiring promotions

We track notification delivery, open rates, and actions taken. This data informs future messaging strategies and personalization. You can disable push notifications in your device settings or app preferences, though transactional notifications critical to service delivery may still be sent via other channels (email, SMS).

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your Rights

• Right to Know: Request disclosure of personal information collected, sources, purposes, and third parties with whom it's shared
• Right to Delete: Request deletion of your personal information (subject to legal exceptions)
• Right to Opt-Out: Opt out of the sale or sharing of personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit: Limit use and disclosure of sensitive personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

Data Sale & Sharing

We may "sell" or "share" personal information as defined by CCPA, including sharing data with advertising partners for targeted advertising. In the past 12 months, we have sold or shared the following categories: identifiers, commercial information, internet activity, geolocation data, and inferences about preferences and behaviors.

To opt out of sale/sharing: Email privacy@enterprisetecgroup.com with "Do Not Sell My Personal Information" in the subject line, or call +1 (949) 558-0793 (inbound, 24/7).

Individuals in the European Economic Area (EEA), United Kingdom, and Switzerland have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of whether we process your data and access to your personal data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Restriction: Restrict processing of your personal data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Our legal basis for processing typically includes: consent, performance of a contract, legal obligations, legitimate interests, and protection of vital interests. To exercise your rights, contact privacy@enterprisetecgroup.com with proof of identity.

Residents of Nevada, Virginia, Colorado, and Connecticut have additional privacy rights under their respective state laws:

Nevada

Nevada residents can opt out of the sale of personally identifiable information. To exercise this right, email privacy@enterprisetecgroup.com with "Nevada Do Not Sell" in the subject line.

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA)

Residents of these states have rights similar to CCPA including access, deletion, correction, and opting out of targeted advertising and sale of personal data. You can also opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise these rights, contact privacy@enterprisetecgroup.com. We will respond within 45 days. You may appeal our decision by replying to our response with "Appeal" in the subject line.

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universal standard for how websites should respond to DNT signals. At this time, we do not respond to or honor Do Not Track signals.

However, we recognize emerging privacy signals including Global Privacy Control (GPC). Depending on your jurisdiction and applicable laws, we may honor GPC signals as an opt-out of the sale or sharing of personal information for California residents and other similar state privacy laws.

To limit tracking, you can: disable cookies in your browser settings, use browser privacy/incognito modes, install ad-blocking extensions, or use privacy-focused browsers. However, these actions may limit functionality of our Services.

We use automated processing and algorithmic decision-making to analyze your data and make predictions or decisions about you. This includes:

• Credit & Fraud Assessment: Automated evaluation of creditworthiness, risk scores, fraud likelihood
• Content Personalization: Algorithmic curation of content, recommendations, search results
• Pricing Decisions: Dynamic pricing, personalized offers, discount eligibility
• Eligibility Determinations: Automated approval/denial for services, features, or programs
• Behavioral Predictions: Forecasting purchase intent, churn risk, lifetime value
• Content Moderation: Automated detection and removal of prohibited content

These automated decisions may have legal or similarly significant effects on you. In some jurisdictions, you have the right to: (1) be informed about automated decision-making, (2) request human review of automated decisions, (3) contest decisions, and (4) express your point of view. To exercise these rights, contact privacy@enterprisetecgroup.com.

You may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider.

Data Export Formats

Upon request, we will provide your data in one or more of the following formats:

• JSON: Structured data in JavaScript Object Notation format
• CSV: Comma-separated values for tabular data
• XML: Extensible Markup Language format
• PDF: Human-readable document format

Data Included in Export

Exported data may include: profile information, account settings, purchase history, interactions, communications, content you created, preferences, and other personal data we maintain about you. The export will be provided within 45 days of your verified request.

To request data portability, email privacy@enterprisetecgroup.com with "Data Portability Request" in the subject line and specify your preferred format.

You have the right to request deletion of your personal information, subject to certain legal exceptions. We will delete or de-identify your personal data unless retention is necessary for:

• Completing the transaction or providing the services you requested
• Detecting security incidents, fraud, or illegal activity
• Debugging and fixing errors
• Exercising free speech or ensuring others' rights
• Complying with legal obligations (tax, accounting, regulatory requirements)
• Internal lawful uses reasonably aligned with your expectations

What Gets Deleted

When you request deletion, we will remove or de-identify: your account profile, contact information, purchase history, communications, user-generated content, and other identifiable data from our active systems. However, some data may persist in:

• Backups: Data in backup systems may be retained until the backup is purged
• Archives: Legal or compliance archives maintained for regulatory purposes
• Third Parties: Data previously shared with third parties (we'll notify them when feasible)
• Aggregated Data: De-identified or aggregated data that no longer identifies you

To request deletion, email privacy@enterprisetecgroup.com with "Delete My Information" in the subject line. We will confirm your identity before processing deletion requests.

You have the right to opt out of the "sale" or "sharing" of your personal information as defined by applicable privacy laws. Under these laws, "sale" may include exchanging data for monetary or other valuable consideration, and "sharing" includes disclosing data for cross-context behavioral advertising.

What We Consider Sale/Sharing

We may "sell" or "share" your information when we:

• Share data with advertising networks for targeted advertising
• Provide data to analytics partners who use it for their own purposes
• Enable third-party cookies and tracking technologies on our websites
• Participate in data cooperatives or audience matching programs
• Disclose data to business partners in joint marketing initiatives

How to Opt Out

To opt out of sale/sharing:

• Email: Send request to privacy@enterprisetecgroup.com with "Do Not Sell" in subject line
• Phone: Call +1 (949) 558-0793 (inbound, 24/7) and request to opt out
• Browser Signals: We honor Global Privacy Control (GPC) signals where applicable

After opting out, we will not sell or share your personal information, though we may continue to share data with service providers for business purposes that are not considered "sales."

Our Services may allow you to create, upload, or share content including comments, reviews, photos, videos, or other materials. Any content you post in public areas may be viewed, collected, and used by others.

Public vs. Private Content

• Public Content: Visible to all users, indexed by search engines, shareable across platforms
• Limited Visibility: Visible only to selected users, groups, or connections
• Private Messages: Intended only for specified recipients (but may still be accessed by us)

Content Ownership & License

By submitting content, you grant us a worldwide, non-exclusive, royalty-free, transferable, sublicensable license to use, reproduce, modify, adapt, publish, translate, distribute, and display your content in any media. This license continues even after you delete your account or remove content from our Services.

Content Monitoring & Moderation

We may (but are not obligated to) monitor, review, or screen user-generated content for violations of our Terms of Service, illegal activity, or harmful content. We reserve the right to remove or modify any content without notice.

When you apply for employment with Enterprise Technology Group, we collect and process additional personal information for recruitment, hiring, and employment purposes.

Applicant Data Collection

• Application Materials: Resume, CV, cover letter, portfolio, work samples
• Personal Identifiers: Name, contact information, employment history, education
• References: Contact information and feedback from professional references
• Assessment Data: Skills tests, personality assessments, interview notes
• Background Checks: Criminal history, credit reports, employment verification (with consent)
• Diversity Information: Voluntary demographic data (race, gender, veteran status) for EEO compliance

Employee Data

For employees, we collect: payroll information, tax withholding data, benefits enrollment, performance reviews, disciplinary records, training completion, time tracking, device usage, email communications, and other employment-related data. Employee data is subject to separate employment policies and may be governed by different legal frameworks.

Applicant data is retained for at least one year after the hiring decision. Employee data is retained for the duration of employment and for legally required periods thereafter (typically 3-7 years depending on data type and jurisdiction).