Privacy Policy Addendum for CPRA

1. Introduction

This addendum is a supplement to Privacy Policy, explaining the additional privacy information and rights of California residents when using our Services, as guaranteed by privacy laws in California. Please read this addendum in conjunction with our Privacy Policy.

2. Categories of personal information we collect

• Identifiers such as email address, username, authentication credentials. unique device identifiers, Internet protocol address, phone number and other similar identifiers.
• Characteristics of protected classifications and demographic information, such as gender, age, race, and national origin.
• Commercial information, related to personal property, products or services purchased, obtained, or considered, or other purchasing or consuming records or preferences.
• Internet or other similar network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.
• Geolocation data such as physical location and movement information.
• Inferences drawn from other personal information identified above to create a profile about you reflecting user’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
• Sensitive Personal Information such as account log-in in combination with any required security or access code, password, or credentials allowing access to an account.

3. Categories of personal information collected

• Directly from you or your devices
• Automatically collected while using our services
• Our affiliates and subsidiaries
• Business partners
• Vendors who provide Services on our behalf
• Advertising networks
• Data analytics providers
• Payment partners
• Marketing partners
• Social media networks

4. Business or commercial purposes of Collection, Use and Share

• Performing Services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing targeted advertising or marketing services, providing analytics services, or providing similar services
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business
• Helping to ensure the security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes
• Debugging to identify and repair errors that impair existing intended functionality
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a Service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the Service or device that is owned, manufactured, manufactured for, or controlled by us
• Providing advertising and marketing services, except for cross‐context behavioral advertising, to the consumer, provided that for the purpose of advertising and marketing, a service provider or contractor shall not combine the personal information of opted‐out consumers which the service provider or contractor receives from or on behalf of the business with personal information which the service provider or contractor receives from or on behalf of another person or persons, or collects from its own interaction with consumers

5. Sales and Sharing Personal Information

We may share your personal information by allowing certain third parties (such as online advertising services) to collect your personal information via automated technologies and server-to-server connections on the Services for cross-context behavioral advertising. This type of sharing may be considered a “sale” under the CPRA. You have the right to opt out of these types of disclosures of your information, as detailed below.

We may sell or share for cross-context behavioral advertising purposes the following categories of personal information about you to or with online advertising services:

• Identifiers
• Online Activity

6. Disclosure of Personal Information for a Business Purpose

We may have disclosed the following categories of personal information about you for a business purposes to the following categories of third parties:

• Identifiers: affiliates, business partners, advertising networks, data analytics providers, marketing partners and social networks
• Device Information: affiliates, and business partners
• Online Activity (such as Service usage): affiliates, business partners, and data analytics providers
• Commercial information (such as purchase information): affiliates and business partners

7. Consumer rights

Consumers' rights regarding their personal information as below:

• Right to access (Right to know) and data portability
  • Please refer to user rights of our Privacy Policy
• Right to erasure (Right to be forgotten)
  • Please refer to user rights of our Privacy Policy
• Right to Correct
  • Please refer to user rights of our Privacy Policy
• Personal information sales and shares
  • California residents have the right to “OPT-OUT” of the sales or shares of personal information to the third parties.
  • To opt out, please click “Do Not Sell or Share My Personal Information”.
• Non-Discrimination
  • CPRA prohibits a business from discriminating against you exercising the rights of personal information under the law. The discrimination may include followings:
    • Denying goods or services to you;
    • Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
    • Providing a different level or quality of goods or services to you; and/or
    • Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
• Shine the Light
  • California's Shine the Light law gives California residents the right to ask companies once a year what personal information they share with third parties for those third parties' direct marketing purposes. If you'd like to ask for more information under the Shine the Light law, please send an email to feedback@tapas.io.

8. How to contact Us

In order to exercise the rights of personal information as California resident, please contact us, using one the following methods:

• Email Address
  • feedback@tapas.io
• Electronic Form
  • Please click here

We will send you a receipt of your request and explain how long we expect to respond to your request if we are able to verify your identity. Requests for specific pieces of personal information will take additional time for us to verify your identity.

For those submitting the request of exercising the rights on behalf of another person, we may request you to submit proof of authorization and identity verification.

We will respond to the requests within 45 days and it can be extended to additional 45 days in accordance with CPRA.

9. Update to this PP addendum

We may change, modify, add, or remove a part of this Privacy Policy Addendum based on our Privacy Policy.

Last modified: October 31, 2023