Privacy Policy for Majika

This Privacy Policy describes how Majika (“we”, “us”) collects, uses, stores, and shares personal information when you use our websites and services (including scheduling and social integrations), accessible at https://openquok.com. By using the services, you acknowledge the practices described here.

This page is published at a public, non-geo-blocked URL so people and automated systems (including crawlers used by developer platforms to confirm that policy and consent links work) can retrieve it. Meta describes those crawlers and robots.txt expectations in its web crawler documentation for site owners and its privacy policy expectations for apps that use Meta technologies. Our site’s /robots.txt explicitly allows the Meta-related user agents listed there so they are not blocked from public pages.

1. Our services and third-party platforms

Majika provides tools to plan, manage, and publish content, including optional connections to third-party social and messaging platforms (each a “Platform”) when you choose to link an account.

• Collection, use, and disclosure of personal information by a Platform are governed solely by that Platform’s own terms and privacy policy. We do not control their practices.
• If you use our services on behalf of an organization, your organization may have its own policies for workspace data and team members. Where applicable, the organization may act as a separate controller of certain information.
• When you collect or process information about other people through connected Platforms (for example audience or engagement data), you are responsible for complying with applicable laws, obtaining any required consents, and providing any required notices. Questions or complaints about your use of such data are generally directed to you as the account holder; we may assist only as needed to operate the service.

2. Information we collect

We collect information about you as reasonably necessary for the activities described below, including information you provide directly, information we collect automatically, and information we receive from third parties (such as identity providers, payment processors, analytics subprocessors, or Platforms you connect).

2.1 Using our services

When you use our services, we may collect the following categories of information.

Account information

• Contact and profile information, including your name, email address, organization or workspace name, and postal or billing address when you choose to provide it.
• Preferences such as language, time zone, and the types of communications you would like to receive from us, where those settings exist in the product.
• Profile image or avatar and other optional profile fields you add (for example short bio, website links, or self-described location text).
• We may obtain account details from an identity provider when you use social login or single sign-on (for example sign-in with a Platform such as Facebook Login, Google, or GitHub), including identifiers the provider associates with your account.
• Workspace and membership data, including roles, invitations, and identifiers for organizations you belong to.

Billing and other payment information

• If you sign up for a paid service, we and our payment processors may collect billing contact details and payment method information. Card or bank details are typically collected directly by the processor; we may receive a limited subset (for example last four digits, brand, expiry, billing address, or payment tokens) and transaction identifiers.
• Commercial information about the services you acquire from us, including plan type, number of seats or team members, subscription identifiers, and transaction or invoice history related to the services.

Content

• Connected Platform profiles and credentials: When you connect a social or messaging Platform, we receive and store, via that Platform’s API, OAuth access and refresh tokens (encrypted at rest), the scopes you granted, the Platform username and identifier, and account-level metadata (for example profile picture, follower or subscriber counts, page IDs, and channel IDs).
• YouTube and Google API Services: For YouTube specifically, the services use YouTube API Services. When you connect a YouTube channel we receive content and engagement data needed to provide the services: posts and videos you create or schedule, video metadata you supply (for example title, description, tags, privacy setting, and optional thumbnail), and post-level or channel-level analytics the YouTube APIs return (for example views, watch time, likes, comments, and subscriber changes). Your use of those features is also subject to the YouTube Terms of Service and the Google Privacy Policy. Majika's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • OAuth scopes: When you connect YouTube, we request the narrowest scopes needed to list and manage the channel you select, upload and update videos you schedule, and show channel and video analytics in the product. These include Google account profile and email (userinfo.profile, userinfo.email) and YouTube scopes such as youtube, youtube.force-ssl, youtube.readonly, youtube.upload, and yt-analytics.readonly (shown on the Google OAuth consent screen when you authorize the connection).
  • How we use Google user data: We use it only to provide and improve user-facing features you see in Majika—for example connecting a channel, scheduling and publishing videos, displaying channel and video metadata, and showing analytics dashboards. We do not use Google user data for advertising, retargeting, credit decisions, or selling data to third parties.
  • How we store Google user data: OAuth tokens are encrypted at rest and kept while the YouTube connection is active (see Section 8). Video drafts, schedules, and analytics we retrieve are stored so you can manage content across sessions.
  • How we share Google user data: We transmit content to YouTube when you publish or update a video. We may process or store Google user data using infrastructure subprocessors (for example hosting and database providers) strictly to operate the services. We do not transfer Google user data to advertising platforms, data brokers, or other third parties except as described here or with your consent.
  • Human access: Our personnel do not read the content of your Google or YouTube data except when you ask us to investigate a specific issue you report, when necessary for security (for example investigating abuse or a bug affecting your account), when required by law, or when the data is aggregated and used for internal operations in line with applicable privacy requirements.
  • AI and machine learning: We do not use information received from Google APIs to train, fine-tune, or improve generalized machine-learning or AI models.
  You can revoke Majika's access to your Google data at any time at Google security settings , or disconnect the channel from your workspace integrations settings.
• TikTok for Developers: When you connect a TikTok account, the services use TikTok Login Kit and the Content Posting API (including direct post and inbox upload flows). We receive profile and account data needed to provide the services: TikTok user identifier (open_id), display name, username, avatar image URL, OAuth access and refresh tokens (encrypted at rest), the scopes you granted, and account statistics the TikTok APIs return (for example follower, following, likes, and video counts). When you schedule or publish, we send video or image content and related metadata (for example caption, privacy level, posting method, and interaction or brand-disclosure settings you choose) to TikTok; TikTok fetches media from public HTTPS URLs you host for that purpose. Your use of those features is also subject to the TikTok Terms of Service and the TikTok Privacy Policy.
  • OAuth scopes: When you connect TikTok, we request the narrowest scopes needed to identify your account, publish content you schedule, and show TikTok account statistics in the product. These include user.info.basic, user.info.profile, user.info.stats, video.publish, video.upload, and video.list (shown on the TikTok authorization screen when you approve the connection).
  • How we use TikTok user data: We use it only to provide and improve user-facing features you see in Majika—for example connecting a channel, scheduling and publishing videos or photo carousels, displaying profile metadata, and showing analytics summaries. We do not use TikTok user data for advertising, retargeting, credit decisions, or selling data to third parties.
  • How we store TikTok user data: OAuth tokens are encrypted at rest and kept while the TikTok connection is active (see Section 8). Schedules, publish records, and analytics we retrieve are stored so you can manage content across sessions.
  • How we share TikTok user data: We transmit content and metadata to TikTok when you publish or upload through the services. We may process or store TikTok user data using infrastructure subprocessors (for example hosting and database providers) strictly to operate the services. We do not transfer TikTok user data to advertising platforms, data brokers, or other third parties except as described here or with your consent.
  • Human access: Our personnel do not read the content of your TikTok data except when you ask us to investigate a specific issue you report, when necessary for security (for example investigating abuse or a bug affecting your account), when required by law, or when the data is aggregated and used for internal operations in line with applicable privacy requirements.
  • AI and machine learning: We do not use information received from TikTok APIs to train, fine-tune, or improve generalized machine-learning or AI models.
  You can revoke Majika's access at any time by disconnecting the channel from your workspace integrations settings, or in the TikTok mobile app under Settings and privacy → Security → Manage app permissions.
• Location you choose to share: If you provide a specific location (for example an address, city, or place such as a venue) in content, profile fields, or scheduling metadata, we collect and store that information as you submit it.
• Your material in the product: Messages, posts, comments, images, attachments, drafts, captions, and other material you curate, compose, or upload to the services, including content synchronized from or destined for connected Platforms where you enable those features.
• User-generated and social content: Content and metadata from connected Platforms that you choose to display or process through the services (for example posts, comments, pages or profiles, reactions, likes, feeds, or similar signals), within the limits of each integration.
• Messaging content: Content from social or in-product messaging features where you connect messaging channels or send messages through the services, as permitted by the integration and your settings.
• Social and messaging metadata: Metrics and descriptors associated with connected accounts or content (for example follower or subscriber counts, post counts, engagement statistics, thread identifiers, or timestamps), as returned by Platforms or generated in the product.
• Third-party personal information in content: Content you send or receive through Platforms or messaging channels (including SMS or similar channels if supported) may contain personal information about other people—for example names, photos, age or age range, gender, geographic location, opinions, preferences, or phone numbers supplied or visible in social interactions. You are responsible for lawful collection and use of such information when you bring it into the services.

Logs, usage, and support data

• Log data: May include your IP address, the address of the web page you visited before using the services (referrer), browser type and settings, device information (such as make, model, and operating system), date and time of use, browser configuration, language preferences, unique identifiers, and data from cookies or similar technologies.
• Usage data and analytics: May include frequency of logins, session duration, feature usage, navigation paths, and the types of activity you undertake (for example frequently accessed areas of the product), including product analytics or error reporting tools we or our subprocessors operate.
• General location: Derived from IP address, account or device settings, or Platform payloads (for example region or time zone associated with login or publishing).
• Support and feedback: Questions, issues, attachments, and general feedback you choose to provide through support channels or in-product feedback features.
• Security-related records: Such as authentication events, refresh-token issuance metadata (for example IP address or user agent where stored), fraud signals, and audit trails used to protect accounts and the service.

2.2 Surveys, events, marketing, and other activities

If you participate in surveys, contests, webinars, in-person events, or similar activities that we host or are affiliated with, we may collect:

• Contact information such as your name, email address, telephone number, organization name, and address, as requested on registration or RSVP forms.
• Participation, attendance, feedback, and opinions you submit.
• General information about your organization that you choose to provide (for example industry, approximate company size, or revenue band).
• We may also use service providers to enrich business-related information about your organization from public or licensed sources (for example legal entity name, size, or publicly stated revenue) to tailor offerings, where permitted by law.

2.3 Other interactions with us

• Brand and community channels: Messages, posts, mentions, and other interactions with our official brand or community accounts on third-party social platforms, when you choose to engage with us there.
• Email interactions and analytics: How you engage with emails we send (for example delivery events, opens, clicks, links followed, subsequent pages visited, browser or mail client type, and general location such as country or region), where tracking pixels or similar technologies are used.
• Calls and meetings: Preferences, feedback, opinions, and business needs you share during sales or support calls, webinars, or video meetings; and recordings of those sessions only where we notify you and you agree to recording.
• Gated or downloadable resources: If we offer resources such as videos, whitepapers, or case studies behind a form, we may collect your name and contact details and engagement analytics (for example which assets you view or download and how often).

2.4 Browsing our websites

When you browse our marketing sites, documentation, or other public web properties, we may collect information as described below, including automatic collection by us or by authorized service providers.

• Automated chat or assistants: If we offer chatbots or similar tools, we may collect your name, email address, the substance of your request, and related context about your use of the services.
• Cookies and similar technologies: We and our subprocessors may use cookies, web beacons, pixels, software tokens, and similar technologies on our websites and embedded content. See our Cookie Policy for more detail and choices where available.
• Website usage data: May include engagement metrics, the address of the previous web page that referred you, browser type, and—where we or a provider configure such tools—session replay, scroll or click patterns, or other interaction telemetry used to diagnose usability issues or abuse.

3. How we use your information

We use personal information only where we have an appropriate legal basis under applicable law (for example performance of a contract, legitimate interests, consent where required, or legal obligation). The purposes below describe how and why we process data in practice.

We use your information for the purposes described in the following sections.

We do not use the content of your scheduled posts, your connected-Platform content, or your private messages to send you advertising, and we do not sell that data.

3.1 Providing and securing our services

• Identify and authenticate: To verify who you are, maintain secure sessions, and ensure that only authorized users can use the services for their organization (or personal workspace) and make permitted changes to accounts, roles, and settings.
• Account setup and management: To use information you provide at sign-up or onboarding to create and administer your account, process payments where applicable, contact you about the services (for example onboarding, billing, or important service-related notices), and manage subscriptions, seats, and workspace configuration.
• Inquiries and the contractual relationship: To use your contact information and details related to your request to respond to questions, manage our contract with you (or with your organization), handle support tickets, and send operational updates and information about the services (including changes that affect your use of the product).
• Performance, security, and compliance: To use logging and related technical data—including general location derived from IP address or device signals—to operate, monitor, and protect the services, manage capacity and reliability, detect abuse, meet security requirements, and comply with obligations that apply to us (including developer or platform program rules where relevant).
• Location-based features: Where you choose to share specific location information, to provide features that depend on it—for example attaching or publishing location with posts on connected Platforms that support it, or other functionality that relies on precise or coarse location you supply.
• Analysis and service improvement: To analyze usage information, social or messaging metadata available through integrations, product feedback, support queries, and survey responses (where you participate) to identify issues, understand how the services are used, prioritize improvements, and produce aggregated analytics, insights, or measurement summaries that do not identify you as an individual where appropriate.
• Content and connected Platforms: To use content and related information that you send, receive, synchronize, or curate through connected Platforms—including messages, posts, comments, images, promotional or campaign material, and other assets you upload or manage in the services—to provide scheduling, publishing, engagement, and related product capabilities you request.
• Integrations and credentials: To store and refresh tokens and to call Platform APIs on your behalf strictly as needed to deliver the integrations you enable.

3.2 Communicating with you

• Service, events, and marketing: To use your contact information, where appropriate, to send information about the services, invitations to webinars or events, and marketing communications consistent with your preferences and applicable law (including opt-in or opt-out mechanisms where required).
• Email and engagement measurement: To use statistics such as open and click rates, and related engagement analytics, to assess the effectiveness of our communications, improve messaging and deliverability, and better understand your needs so we can provide information and service options that are more relevant to you.
• Transactional messages: Certain operational messages (for example security alerts, verification, billing receipts, or mandatory notices) may be sent independently of marketing preferences where they are necessary to provide or secure the services.

3.3 Improving our websites and applications

• To use information about you and your activity to understand usage patterns and other activities on our websites and applications, diagnose problems, and make improvements—including enhancing usability, performance, and security across the product and public sites.
• To use personalization technologies or rules (on websites or in-product) to present information that may be more relevant to you—for example highlighting documentation, resources, or prompts aligned with your industry, organization size, or prior interactions, where we implement such features.
• Support, sales, and training: If you provide information about yourself, your use of social or messaging services, or other feedback during telephone calls, video meetings, chat, or similar interactions with our customer support or sales teams, we may use, monitor, and record that information—including recordings only where we notify you and you agree—for training, quality assurance, improving internal sales and marketing processes, and improving the services.

3.4 Legal and safety

• To comply with applicable law, regulation, or lawful requests from public authorities.
• To establish, exercise, or defend legal claims, and to protect the rights, property, or safety of Majika, our users, or others.
• To aggregate or de-identify information where permitted, so it can no longer reasonably be linked to you, and to use that data for analytics, benchmarking, or research.

4. Your rights regarding your information

4.1 Services information

When using our services, you may access, update, or correct most of your account information by signing in and editing your profile or organization record.

If you have requests that cannot be carried out by logging in—including accessing additional information or deleting information about you—please contact us in writing at [email protected]. Please note that we may need to retain certain information about you for as long as you maintain an account, to provide the services, for record-keeping, for payment processing, to comply with legal and regulatory obligations, to resolve disputes, or to enforce our terms and other agreements between you (or your organization) and Majika (collectively, our “Terms”).

Requests to access, correct, update, or delete your information will be handled within thirty (30) days unless they are unusually extensive or complex, in which case we will advise you of the expected timeline.

If you have authorized us to access a Platform account to provide the services, you may revoke that access at any time—for example by disconnecting the integration in the product, revoking the app in that Platform’s account or security settings, or contacting us at [email protected] for assistance. For Platform-specific APIs, the Platform’s own permissions or security pages may also allow you to revoke access to data we would otherwise receive through the integration.

For other general requests, contact our support team at [email protected].

Depending on where you live, you may have additional statutory rights (for example to object to or restrict certain processing or to request data portability). Use the same contact address and we will respond in line with applicable law.

4.2 Marketing emails, advertising, and website browsing

For marketing communications, you may opt out by following the unsubscribe link in any marketing email you receive from us. If you have an account, unsubscribing from marketing will not affect product-generated or transactional emails sent in connection with your use of the services.

We may participate in interest-based advertising (for example where you have visited our sites or third-party sites that allow us to show ads related to our services). Industry groups publish tools that can help you understand which third parties have enabled cookies in your browser and how to opt out—for example the Network Advertising Initiative consumer choice page . You can also review your browser’s cookie controls.

For more on marketing and similar cookies, see our Cookie Policy.

5. Who has access to your information

Majika does not rent or sell your personal information. We restrict access to authorized personnel and contractors who need it for their job, and we do not share your information with third parties except as described below.

5.1 Authorized contractors and employees

Our employees and authorized contractors may access information about you when they need it to perform their role—for example customer support to validate your identity and respond to a request, communications staff to manage email lists and unsubscribe requests, or security staff to investigate abuse, fraud, denial-of-service attempts, or other threats to the services. They are required to protect confidentiality and handle data in line with this policy. For information received from Google APIs (including YouTube), human access is further limited as described under YouTube and Google API Services above and under the Google API Services User Data Policy.

5.2 Service providers, resellers, and partners

We share limited information with service providers that assist us with hosting, databases, email delivery, analytics, security, marketing operations, customer relationship tools, professional services, and payment processing. We limit subprocessors who may process your content strictly to what is needed to deliver the services.

If you purchase through an authorized reseller or partner, we may exchange information with that party as needed to support your purchase, onboarding, and ongoing use of the services.

When we share information with service providers, resellers, or partners, we require contractual commitments consistent with this Privacy Policy, including appropriate confidentiality and security measures, and processing limited to providing the services and your requests.

5.3 Marketing events and sponsors

We may run or co-host events (for example webinars or conferences) with sponsors or other organizations. If a sponsor wishes to collect your information for its own marketing, it does so under its own privacy policy; we may facilitate collection (for example on a shared registration form) only where we clearly disclose that fact and give you a choice to share your information with the sponsor, such as at registration or during the event.

5.4 Connected Platforms and third-party services

When you connect a Platform or authorize a third-party service to access your account, you agree that information about you may be processed by that Platform or service under its own terms and privacy policy. We do not control their practices. When you schedule or publish content, we transmit it to the Platform you selected; when you request analytics, we receive it from that Platform.

We encourage you to review the privacy policy of any Platform you connect, including the Google Privacy Policy for YouTube integrations and the TikTok Privacy Policy for TikTok integrations.

5.5 Customer organizations

If your employer or another entity purchases or administers the services for you, we may disclose limited information—such as your name, email address, and high-level usage information (for example login activity or time using the services)—to help that organization manage licenses, security, adoption, or training related to the services, in line with your agreements with them and with us.

5.6 Affiliates and corporate transactions

We may share information among Majika-controlled affiliates or successors, who must handle it consistently with this Privacy Policy (or notify you if a successor policy applies). We may disclose information as part of a merger, acquisition, financing, or sale of assets; where required, we will ensure appropriate continuity of protections or inform you of material changes.

5.7 Law enforcement, regulators, and professional advisors

We may disclose information where we believe in good faith that it is necessary to comply with law, regulation, court order, or legal process, or to establish, exercise, or defend legal claims. For governmental access requests concerning you or your organization, we will seek to redirect the request to you or notify you where we are not legally prohibited from doing so.

We may also disclose information to investigate or address illegal activity, fraud, threats to the rights or property of Majika or others, personal safety, or abuse of our infrastructure (for example spam or denial-of-service attacks).

We use professional advisors (such as lawyers and accountants) and may disclose information to them as necessary for their services and for audits, financial reporting, or regulatory reviews.

6. International data transfers

Under laws such as the EU General Data Protection Regulation (GDPR) and similar regimes, personal information may only be transferred to another country when appropriate safeguards apply—for example adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

We and our subprocessors may process or store personal information in countries including the United States and other regions where our hosting, payment, or technology partners operate. Where information is transferred from the European Economic Area, the United Kingdom, Switzerland, or similar jurisdictions, we rely on mechanisms recognized under applicable law (such as standard contractual clauses or supplementary measures) unless an adequacy decision or other valid basis applies.

By its nature, data you exchange through connected Platforms may be visible or stored globally according to those Platforms’ terms and policies.

7. How we safeguard your information

We maintain industry-standard administrative, technical, and physical safeguards designed to protect personal information. This includes security and privacy training for personnel who need access to personal data, so they understand the measures required to protect it.

Access controls limit access to personal information to people who need it to perform their work—for example, customer support staff may access your account details to verify your identity and help with a request. People authorized to handle personal information are subject to confidentiality obligations.

We encrypt data in transit and at rest where appropriate. We assess service providers’ security and privacy practices where they process personal data on our behalf and use contractual protections (including data processing terms) when required. Payment card data is handled by PCI-certified payment processors; we do not store full card numbers on our own systems.

No method of transmission or storage is completely secure. You should use strong passwords, protect workspace invitations, and review connected integrations regularly.

8. How long we retain your information

• OAuth tokens — kept while a Platform connection is active; revoked tokens are deleted promptly. You can disconnect a Platform at any time from your workspace integrations settings.
• Scheduled content not yet published — kept until published or until you delete it.
• Published-post records and analytics — kept while your account is active, so historical analytics remain available.

For some connected Platform data, the product may retrieve or refresh information when you use the services so it can be shown or used in your session, while credentials and content you create in the product (for example drafts, schedules, and workspace material) may be stored so you can access it across sessions. Aggregated or de-identified data may be used for analysis, product improvement, and troubleshooting.

Content may continue to exist on a third-party Platform even after you or we delete it from our services. To remove content from the Platform itself, you may need to use that Platform’s tools or contact its support.

We retain personal information for as long as needed to provide the services you have requested, for record-keeping, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. When it is no longer necessary to retain information about you, or when you make a valid deletion request we can fulfil, we will delete it in a secure manner or anonymize it, subject to technical limits such as backup and archival cycles.

9. Our roles under the GDPR and UK data protection laws

Depending on the situation and the type of data involved, Majika may act as a data controller or a data processor under the EU General Data Protection Regulation (GDPR), the UK GDPR, and related UK data protection legislation.

9.1 When we act as a data controller

We typically act as a controller when we decide why and how personal data is processed, for example when we are:

• Collecting information from you to set up and administer your account (for example account contact and profile details such as your name and email address).
• Monitoring usage information on our websites and applications.
• Managing your contact details and related preferences to send marketing, service, and other communications to you, consistent with this policy and your choices.
• Responding to a support or general inquiry you send us.
• Recruiting individuals for employment or contractor roles, where we operate recruitment activities.

9.2 Legal bases when we act as a controller

Where we are a controller, we rely on one or more of the following legal bases as applicable:

• Consent — for example where you submit information to create an account, register for a webinar or event, subscribe to marketing, or provide employment-related information as part of an application. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Contract — where processing is necessary to perform our agreement with you (or to take steps at your request before entering an agreement), including providing and supporting the services you have acquired.
• Legitimate interests — for example to provide, maintain, and improve the services, to keep them secure, to understand how they are used, and to promote demand for our services in a way that respects your rights and freedoms.
• Legal obligation — where we must process personal data to comply with applicable law (for example tax, accounting, or employment-related obligations).
• Vital or public interests — in rare cases, such as protecting vital interests or where strictly required by law.

9.3 Your rights when we act as a controller

Where we act as a controller, the rights described in Section 4 (Your rights regarding your information) apply, subject to applicable law.

You may also have the following rights, where they apply:

• Right to object — for example to object to processing based on legitimate interests or to direct marketing (including profiling related to marketing).
• Right to restrict processing — for example where you contest accuracy of data or object to processing pending verification.
• Right to data portability — to receive certain personal data you provided in a structured, commonly used, machine-readable format, or to have it transmitted to another controller where technically feasible.

For help with any of these requests, email us at [email protected].

9.4 When we act as a data processor

When you use our services and determine the purposes and means of processing personal data in them—including choosing which Platform accounts to connect or uploading and using content—you may act as a data controller (for your organization or yourself), and Majika acts as a data processor for that processing.

As a controller, you are responsible for complying with applicable data protection laws for that processing, including lawfulness of content and integrations you configure. As a processor, we process personal data on documented instructions from you (including through your use of the product), subject to our Terms, applicable Platform terms, and applicable law. As part of delivering the services, we may also process content to improve the services (for example usability, reliability, security, and new features) where permitted by our agreement with you and by law.

If you require a written data processing agreement under Article 28 GDPR or equivalent UK requirements, contact us at [email protected] to request our standard data processing addendum, where available for your use case.

If you use the services as an authorized user of a Majika customer (for example your employer or another organization), that customer may determine its own policies regarding access, modification, deletion, sharing, and retention of personal data and content. Please check with that customer for the rules that apply to your use of the services.

10. Your California privacy rights

If you are a California resident and the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “California Privacy Laws”) applies to you, this section provides additional information. Capitalized terms used in statutes have the meanings given in the California Privacy Laws.

10.1 Your rights

Section 4 describes how to exercise several rights. In addition, the California Privacy Laws may grant you rights including:

• The right to know what personal information we collect, including the categories described in Section 2 (Information we collect) above.
• The right to delete personal information we hold, subject to exceptions.
• The right to correct inaccurate personal information, taking into account the nature of the data and the purposes of processing.
• The right not to receive discriminatory treatment for exercising any privacy rights the California Privacy Laws provide.

You may access, update, or correct much of your account information by signing in to your account. For other requests under the California Privacy Laws, contact us at [email protected].

We disclose personal information to service providers as described in this policy (for example to host the services, send email, or process payments). We do not sell your personal information as “sell” is defined under the California Privacy Laws.

11. Children

The services are not directed to children under the age where parental consent is required in their jurisdiction. We do not knowingly collect personal information from such children. If you believe we have done so, contact us and we will take appropriate steps.

12. Changes to this policy

We may change this Privacy Policy at any time to reflect updates to our services, applicable laws, and other factors. If we make material changes, we will provide a prominent notice on this website and/or through the services where appropriate. We encourage you to review this policy periodically to stay informed.

13. Contact

For questions about this Privacy Policy or our data practices, contact us at [email protected].