Privacy Policy
This Privacy Policy (“Privacy Policy”) explains how information is collected and used by Granular Insights Inc. doing business as Clarisights (“Clarisights” or “we”, “us”, “our”) and its subsidiaries and affiliated companies.
This Privacy Policy applies to the following:
The data practices on the Clarisights website at https://www.clarisights.com(“Website”) and Clarisights app (“Platform”) through the https://app.clarisights.com, and other web pages that we operate in which we post a direct link to this Privacy Policy.
The data practices relating to the unified marketing data ingestion, storage, and visualization services (our “Platform”) that Clarisights provides its partners and customers (“Businesses”). The Platform offers Businesses the ability to, measure, and monitor the performance of their marketing campaigns.
Our relationship with representatives of our existing and prospective Businesses using our Platform.
Definitions
End User: Our customer’s (B2B, B2C companies) customers
Businesses: Our partners and customers who use our product.
Employee of Clarisights (EC): Any person actively working at Clarisights
Personal Data we collect on End Users
All data that is imported is pre-aggregated around campaign identifiers, platforms, operating systems, and other non-personal data types.
Personal Data Processed
We process the information you provide us when you submit an inquiry on our Website.
When you visit our Website, you can submit an inquiry through our online contact forms or chat-bot. You can also request a free demo of our Platform. When you contact us, you will be asked to provide information such as your name, work email address, phone number, and company name. We refer to this entire data as “Inquiry Information”.
We collect and process your contact information when you engage us to use our Platform.
When a representative of an existing or prospective Business uses or wishes to use our Platform, we collect that representative’s contact details such as name, email, phone number, position and company, Platform login information, and information relating to the engagement between us and the Business which is made with the involvement of the representative. We refer to this entire data as “Contact Information”.
You do not have a legal obligation to provide us with your Inquiry Information or Contact Information; however, if you choose to not share this information with us we may not be able to respond to your inquiry or provide you with the Platform.
When you visit the Website or the Platform, we record and collect certain information about your interaction with the Website or the Platform, including the IP address from which you access the Website or Platform, time and date of access, type of browser used, language used, links clicked, and actions taken while using the Website or Platform. We refer to this entire data as “Analytics Information“.
Data Controller and Data Processor
The Business is the data controller of the Platform Information, and Clarisights is its data processor.
Each Business is the data controller of its own Platform Information. They determine the purposes and means of processing that data. We only process such data based on their instructions and for the purpose of providing the Platform to them.
Clarisights is the data controller of Inquiry, Information Contact Information, and Analytics Information
Clarisights is the data controller for the Inquiry Information, Contact Information, and Analytics Information, as explained below.
How we process personal data
To respond to and handle your inquiry.
We process your Inquiry Information to contact you about your inquiry and handle your inquiry.
To send you administrative communications.
We process your Contact Information to send you communications and administrative emails, to manage the provision of the Platform to you, and to provide you with further information and updates about Clarisights’s products and technology.
To send you marketing communication, if you provided your consent.
We process your Inquiry Information and Contact Information to send you marketing communications such as newsletters, know-how articles, webinar and event invitations, and other useful industry information and announcements. We will only do so if you provided your consent to receive these communications from us. You may revoke your consent at any time via the unsubscribe link in each marketing communication you receive from us.
To provide and maintain the Website and Platform.
We process your Analytics Information to provide, maintain, and improve your user experience when accessing our Website or when using our Platform. We also will use the Analytics Information for quality assurance and the development and enhancement of the Platform. We also process Analytics Information to improve our email communications.
We will use the Analytics Information to prevent fraud, resolve disputes, troubleshoot problems, assist with any investigations, enforce our terms of use for the Platform, and take other actions otherwise permitted by law.
To provide the Platform to a Business, we process Platform Information as a data processor (also known as a service provider) on behalf of the Business and under the Business’s instructions.
Who processes your data?
We will not share your information with third parties, except in the events listed below or when you provide us with your explicit and informed consent.
We will process information with our service providers helping us to operate our business.
We will process personal information with the assistance of our service providers who assist us with the internal operations of the Website and Platform. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their promotional purposes. These service providers include Google Cloud Platform, FullStory, Intercom, Segment, and Amplitude.
We will share information with competent authorities, if you abuse your right to use the Platform, or violate any applicable law.
If you have abused your rights to use the Website or Platform, or violated any applicable law, we will share information with competent authorities and with third parties (such as legal counsels and advisors), to handle the violation or breach.
We will share your information if we are legally required.
We will share information if we are required to do so by a judicial, governmental, or regulatory authority.
We will share your information with third parties in any event of a change in our structure.
If the operation of our business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition), we will share information only as required to enable the structural change in the operation of the business.
Cookies
What are cookies?
Cookies are text files, composed of small amounts of data, that are saved on your computer or other devices (e.g. smartphone, tablet, etc.) when you use the internet and visit various websites.
The information that the cookies maintain is read by the website you visit, during the session of your visit to the website (these are called ‘session’ cookies), and when you return to visit it again (these are called ‘persistent’ cookies). We also use techniques called web beacons and web pixels for purposes similar to the use of cookies.
We use cookies necessary to operate the Website, for website statistics, for marketing purposes and to remember your website preferences.
We use cookies for several purposes, as briefly explained below:
Necessary: Cookies that are strictly necessary for the functioning of the Website. The Website cannot operate properly without these cookies. You can set your browser to block or alert you about these cookies, but some parts of the Website may not function properly.
Statistics: Analytics cookies that help us understand how you and other users interact with our Website by collecting data that does not directly identify you.
You can always delete or disable cookies.
You can always delete the cookies saved on your device through the settings of your computer browser or device. You can also disable cookies for future use through the settings of your computer browser or device.
What data is collected by us
Type of Data
User email, name and picture URL if available via Google login
Source
app.clarisights.com
Why is it collected?
For logging in and usage of our platform
Where is it stored?
Postgres - User table
Sub-processors with whom data is shared
2 months
Who has access
Type of Data
Sub-processors with whom data is shared
FullStory, Segment, Amplitude, Intercom
Why Does Clarisights Use FullStory?
We use Fullstory to perform session recording of how users are engaging with the Clarisights platform. This is useful for improving our product, as FullStory allows us to see where users are getting stuck, which parts of the platform they use the most, and for general usage research. We also use FullStory videos to provide better customer service as we can get back to them when they are stuck on something and/or when we realize they are using our product incorrectly. Deletion of data from Fullstory happens manually once the User is deleted.
Why Does Clarisights Use Amplitude and Segment?
Why Does Clarisights Use Intercom?
We have integrated Intercom for in-app support communication for our users with the Clarsights Customer Success team in case of any issues or if they have any questions.
Security and data retention
We will retain your Contact Information for as long as we need it for business purposes, and thereafter as needed for record-keeping matters.
We will retain Contact Information for the duration needed to support our ordinary business activities operating the Website and Platform. Thereafter, we will still retain it as necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims, and enforce our agreements.
We will retain Inquiry Information, Analytics Information, and Business Information in accordance with the Business’s instructions and only while the Business uses the Platform.
We will retain Inquiry Information, Analytics Information, and Business Information pursuant to the Business instructions, and only for the duration needed to provide the Platform to you. Upon the termination of the agreement with us for the provision of the Platform, we will return or delete your Business Information within 60 days of your contract end, unless we are required to retain such information under applicable law.
We implement measures to secure your information.
We implement measures to reduce the risks of damage, loss of information, and unauthorized access or use of information. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure personal information, it is not guaranteed, and you cannot expect that the Website or Platform will be immune to information security risks.
International Data transfers
We will internationally transfer information in accordance with applicable data protection laws.
If we transfer your personal data for processing at locations outside your jurisdiction, we will abide by data transfer rules applicable to these situations.
Additional information for individuals in the EU
Clarisights is the data controller of the Inquiry Information, Contact Information, and Analytics Information.
The following is the contact information of Clarisights as the primary data controller of the Inquiry Information, Contact Information, and Analytics Information:
Granular Insights Inc
16192 Coastal Highway, Lewes,Delaware,
19958 United States of America
Email: privacy@clarisights.com
Legal basis under EU law for processing your personal data.
The legal basis under EU law for processing Analytics Information is our legitimate interest in maintaining, developing, and enhancing the Website and the Platform.
The legal basis under EU law for processing your Inquiry Information to respond to and handle your inquiry is our legitimate interests in responding to your inquiry.
The legal basis under EU law for processing your Contact Information to offer the Platform to you is our legitimate interests in developing and maintaining our business relationship with you as a representative of an existing or prospective Business.
The legal basis under EU law for processing your Inquiry Information and Contact Information to send you marketing communications is your consent.
The legal basis under EU law for processing your Analytics Information to handle instances of abusive use of the Platform is our legitimate interests in defending and enforcing against violations and breaches that are harmful to our business.
The legal basis under EU law for processing your information where we are legally required to share it is our legitimate interests in complying with mandatory legal requirements imposed on us.
The legal basis under EU law for processing your information in the event of a change in our corporate structure is our legitimate interests in our business continuity.
With respect to Clarisights’s processing of your Inquiry Information, Contact Information, and Analytics Information, you have certain rights to access, update or delete information, obtain a copy of your information, withdraw your consent, and object or restrict certain data processing activities.
If you are in the EU, you have the following rights under the GDPR in relation to Clarisights’s processing of your Inquiry Information, Contact Information, and Analytics Information:
Right to Access your personal data that we process and receive a copy of it.
Right to Rectify inaccurate personal data we have concerning you and to have incomplete personal data completed.
Right to Data Portability, that is, to receive the personal data that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another service provider. Where technically feasible, you have the right that your personal data be transmitted directly from us to the service provider you designate.
Right to Object, based on your particular situation, to using your personal data based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or for the establishment, exercise of defense of legal claims. You may also object at any time to the use of your personal data for direct marketing purposes.
Right to Restrict the processing of your personal data (except for storing it) if you contest the accuracy of your personal data, for a period enabling us to verify its accuracy; if you believe that the processing is unlawful and you oppose the erasure of the personal data and request instead to restrict its use; if we no longer need the personal data for the purposes outlined in this Policy, but you require them to establish, exercise or defense relating to legal claims, or if you object to processing, pending the verification whether our legitimate grounds for processing override yours.
Right to be Forgotten. Under certain circumstances, such as when you object to us processing your data and we have no compelling legitimate grounds to override your objection, you have the right to ask us to erase your personal data. However, we may still process your personal data if it is necessary to comply with a legal obligation we are subject to under laws in the EU Member States or for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent. If our processing is based on your consent, such as processing your for marketing communications, you may withdraw your consent at any time via the unsubscribe link in each marketing communication you receive from us.
If you wish to exercise any of these rights, contact us at privacy@clarisights.com.
We reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you the information that you have asked for, we will explain the reason for this.
If you are the data subject of the Business Information we process on behalf of a business and would like to exercise any of your EU rights, please contact the Business.
You have a right to submit a complaint to the relevant supervisory data protection authority.
Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in particular in the Member State of your residence, place of work, or place of an alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.
Third-party disclosures
The types of third parties to which we disclose personal information, and the purposes for which it does so, is outlined above under WHO PROCESSES YOUR DATA.
When we disclose your personal information to third parties, we are liable for those onward transfers.
Please note that we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Your rights and choices regarding your personal data
You have certain rights to access, update or delete your information, obtain a copy of your information, withdraw your consent, and object or restrict certain data processing activities. These are outlined above under ADDITIONAL INFORMATION FOR INDIVIDUALS IN THE EU.
If you wish to exercise any of these rights, contact us at privacy@clarisights.com.
You can choose to opt-out of our marketing communications via the unsubscribe link in each marketing communication you receive from us.
We are subject to the investigatory and enforcement powers of the FTC
Granular Insights, Inc. is an American company that is subject to the investigatory and enforcement powers of the United States’ Federal Trade Commission.
CCPA Information for consumers residing in California
This is the personal information we have collected over the past 12 months when we operate as a “business” under the California Consumer Privacy Act (CCPA):
Categories of Personal Information
Specific Types of Personal Information Collected
Source of Information
Identifiers
Name, work email address, phone number (within Inquiry information, and Contact Information)Platform login information (within Contact Information)
The consumer
Information that identifies, relates to, describes, or is capable of being associated with, a particular individual
The subject of your inquiry (within Inquiry information and Contact Information)
The consumer
Professional or employment-related information
Company name and position (within Inquiry information and Contact Information)
The consumer themselves or the Business they are associated with
Commercial information, including products or services purchased, obtained, or considered
The subject of your inquiry expressing interest in our PlatformInformation relating to the engagement between us and the Business which is made with the involvement of the consumer as a representative of the Business
The consumer themselves or the Business they are associated with
Internet or other electronic network activity information
The IP address from which you access the Website or Platform, time and date of access, type of browser used, language used, links clicked, and actions taken while using the Website or Platform
The consumer’s device
The following are the CCPA business or commercial purposes for which we use each category of personal information. Details about the information we collect for each category are provided in the table above. More details about the business or commercial purposes are provided in the privacy policy’s section titled ‘HOW WE PROCESS PERSONAL DATA’ :
Categories of Personal Information
Specific Types of Personal Information Collected
IdentifiersProfessional or employment-related informationCommercial information, including products or services purchased, obtained, or consideredInformation that identifies, relates to, describes, or is capable of being associated with, a particular individual
Providing customer service, processing or fulfilling orders and transactions, verifying customer informationAuditing related to a current interaction with the consumer who is a job applicantProcessing transactions and verifying customer information
Internet or other electronic network activity information
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, prosecuting those responsible for that activityUndertaking internal research for technological development and demonstrationUndertaking activities to verify or maintain the quality of the service and to improve, upgrade or enhance the serviceDebugging to identify and repair errors
Please note that we do not sell your data and we have not done so in the preceding 12 months.
The following rights apply only to a California resident who is not a representative of a Business receiving a product or service from Clarisights and only in relation to personal information that is not in the context of the Business receiving a product or service from Clarisights:
Categories of Personal Information
Business or commercial purposes pursuant to the CCPA
Disclosure of Personal Information We Collect About You
You have the right to know: · The categories of personal information we have collected about you; · The categories of sources from which the personal information is collected; · Our business or commercial purpose for collecting personal information; · The categories of third parties with whom we share personal information, if any; · The specific pieces of personal information we have collected about you.
Right to Deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:· Delete your personal information from our records; and· Direct any service providers to delete your personal information from their records.Please note that we may not delete your personal information if it is necessary to:· Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;· Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;· Debug to identify and repair errors that impair existing intended functionality;· Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;· Comply with the California Electronic Communications Privacy Act;· Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;· Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;· Comply with an existing legal obligation; or· Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Protection Against Discrimination
You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:· Deny goods or services to you;· Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;· Provide a different level or quality of goods or services to you; or· Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.Please note that we may charge a different price or rate or provide a different level or quality of goods and/or services to you if that difference is reasonably related to the value provided to our business by your personal information.
Designate an authorized agent to submit CCPA requests on your behalf
You may designate an authorized agent to make a request under the CCPA on your behalf. To do so, you need to provide the authorized agent written permission to do so and the agent will need to submit to us proof that they have been authorized by you. We will also require that you verify your own identity, as explained below.
If you would like to exercise any of your CCPA rights as described above, you should email us at privacy@clarisights.com
We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal data requested to you, by using two or three points of the data verification process, depending on the type of information you require.
Security Measures to protect Personal data
All employees have signed an employment contract that requires them to not disclose/divulge data of our customers.
Access to our cloud provider, Google Cloud Platform, is managed through Google Cloud Platform’s centralized access control methods which multiple levels of role-based access are provided through Google’s Identity and Access Management Console, Google’s Zero Trust Identity Aware Proxy, and centrally managed SSH keys.
App.clarisights.com Admin access requires Google login and 2FA is enforced for all employees.
Fullstory access is granted on a need basis and also requires Google. login
Escalation Procedure
Any data breach must be immediately reported to privacy@clarisights.com.
Changes to this privacy notice
If we change this Privacy Policy, we will make efforts to proactively notify you of such changes.
From time to time, we may change this Privacy Policy. If we do so, we will make efforts to proactively notify you of such changes. In any event, the latest version of the Privacy Policy will always be accessible at https://www.clarisights.com/privacy
© All Rights Reserved, 2023
In accordance with SEC rules concerning the use of third-party endorsements and client testimonials in marketing materials, please be aware of the following. Endorsements and testimonials appearing on this site are actually received by the promoter (as defined in the SEC’s Marketing Rule) and used with their consent. They reflect the experiences of those who have used or are familiar with Clarisights, our products and/or services in some way. However, they are individual results, and results will vary. We do not claim that they are typical results that clients will generally achieve. The endorsements and testimonials are not necessarily representative of all of those who have used or will use our products and/or services. The endorsements and testimonials are given verbatim except for correction of grammatical or typing errors. Promoters do not receive any compensation, direct or indirect, in any form, for providing their endorsement or testimonial, as applicable.