California Resident Privacy Notice

About this Notice

Effective August 1, 2023  

This California Resident Privacy Notice (“Notice”) supplements the information and disclosures contained in our Privacy Policy. It applies to individuals residing in California from whom we collect Personal Information as a business under California law.

This Notice explains how we collect, use, and disclose your Personal Information. It also describes how to exercise your rights under the California Consumer Privacy Act California Civil Code §§ 1798.100 to 1798.199) (“CPRA”), the Colorado Privacy Act (Colorado Rev. Stat. §§ 6-1-1301 to 6-1-1313) (“ColoPA”), the Connecticut Act Concerning Personal Data Privacy and Online Monitoring Act (Public Act No. 22-15) (“CPOMA”), the Utah Consumer Privacy Act (Utah Code Ann. §§ 13-61-101 to 13-61-404) (“UCPA”), and the Virginia Consumer Data Protection Act (Virginia Code Ann. §§ 59.1-575 to 59.1-585) (“VCDPA”). We call those laws collectively the “U.S. Privacy Laws.”

When we say “Personal Information” in this Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with you, directly or indirectly. Personal Information does not include information that cannot be reasonably linked to you. When data is deidentified (as defined under the U.S. Privacy Laws), we maintain it in deidentified form and do not attempt to reidentify the information. Other definitions below:

How we collect, use, and disclose Personal Information

To provide the products or features offered by NoteGoat, we process information about you, including Personal Information, whether or not you have an account or are logged in. The best way to learn about the types of information we collect and how we use them is to review the NoteGoat Privacy Policy. Subject to the limitations we describe in our privacy policies, we may disclose your Personal Information for business purposes, with strict restrictions on how our partners can use and disclose the data we provide. We may also disclose it at your direction or in other ways that are in accordance with the U.S. Privacy Laws. We don’t “share” your Personal Information, as defined in the California Consumer Privacy Act (“CCPA”). We also don’t sell any of your Personal Information, and we never will.

The information we collect, use and disclose about you will vary depending on how you interact with NoteGoat and our products. For the products covered by this Notice, here’s a summary of:

• The categories of Personal Information we may have collected about you over the past 12 months
• How we may use your Personal Information
• ​To whom we may have disclosed that information

Categories of Personal Information we collect may include:

• Identifiers;
• Internet or other electronic network activity information, including, content you view or engage with, and app, browser and device information;
• Sensory information including audio and/or visual information;
• Education information;
• Information derived from other Personal Information about you, which could include your preferences, interests, and other information used to personalize your experience; and
• Other information you provide.

We may also collect sensitive personal information (as defined in U.S. Privacy Laws), which may include:

• The content of messages you send and receive, which are considered sensitive personal information under CCPA;

Examples of how Personal Information may be used include:

• Providing, personalizing, and improving our products and services;
• Contracting with service providers to perform services on our behalf
• Facilitating the connection of third-party services or application, such as learning management solutions and social networks;
• Providing measurement, analytics, and other business services;
• Sending messages on your behalf to your social networks;
• Providing marketing communications to you;
• Communicating with you;
• Facilitating transactions and payments;
• For compliance purposes, including enforcing our Terms of Service and other legal rights;
• Promoting safety, integrity, and security;
• Researching and innovating for social good.

For categories of sensitive personal information that we collect, we will only use or disclose it either with your specific consent when required, or as otherwise permitted by law, including the CCPA. Learn more about the permitted purposes under CCPA.

Parties with whom each category of Personal Information may be disclosed include:

• People and email addresses you share and communicate with;
• People and accounts with which others share or reshare content with you;
• Apps, websites, and third-party integrations on or using our products;
• New owners in the event of a change of ownership or control of all or part of our products or their assets changes;
• Partners, including partners offering goods and services on our products, as explained in our Privacy Policy;
• Vendors, including measurement and marketing vendors;
• Service providers;
• Third parties, including external researchers and academics;
• Law enforcement or other third parties in connection with legal requests, to comply with applicable law or to prevent harm; and

Sources of Personal Information

Depending on how you interact with NoteGoat, the categories of sources from which we’ve collected Personal Information about you may include:

• You: We receive Personal Information from the information that you provide. For example, we collect the content, communications, and other information you provide when you use our products, including when you sign up for an account, create or share content, and communicate with others. We also collect information about how you use our products, including the features you use, the actions you take, the people you share content with, and the time, frequency, and duration of your activities.
• Your device(s): We collect information from and about the computers, phones, and other web-connected devices you use that integrate with our products, and we combine this information across different devices you use.
• Partners, vendors and third parties: Consumer data brokers and business parties.
• Public: Publicly accessible sources.

How long do we keep your Personal Information?

We keep Personal Information, including sensitive Personal Information, as long as we need it to provide our products, comply with legal obligations or protect our or other’s interests. We decide how long we need information on a case-by-case basis.

Here’s what we consider when we decide:

• If we need it to operate or provide our products.
• The feature we use it for, and how that feature works.
• How long we need to retain the information to comply with certain legal obligations.
• If we need it for other legitimate purposes, such as to prevent harm; investigate possible violations of our terms or policies; promote safety, security, and integrity; or protect ourselves, including our rights, property or products.

How can you exercise your Privacy Rights?

• Right to Know: You may submit a verifiable request for information regarding the: (1) categories of Personal Information collected or disclosed by us; (2) purposes for which categories of Personal Information are collected or disclosed by us; (3) categories of sources from which we collect Personal Information; (4) categories of third parties with whom we disclosed Personal Information; and (5) specific pieces of Personal Information we have collected about you in the past twelve months.
• Right to Request Correction: The right to request that we correct inaccurate Personal Information that we maintain about you.
• Right to Request Deletion: The right to request that we delete your Personal Information that we have collected from or about you.
• Verification and Submit Requests: Requests for access to or deletion of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations and regulations. To verify your access or deletion request, please authenticate your account by logging into your account and submitting a support request from the application or including your account number in the request.
• Shine the Light: We do not rent, sell or share Personal Information with nonaffiliated companies for their direct marketing uses as contemplated by California’s “Shine the Light” lay (Civil Code 1798.83) unless we have your permission.

Please note that to protect your information and the integrity of our products, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as a government issued ID.

Under certain U.S. Privacy Laws, you may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued ID, to verify your identity before processing your request to protect your information. In most cases, we will facilitate your request through automated tools available through your password-protected account.

Contact for more information

If you have additional questions about this Notice or how to exercise your rights under applicable U.S. Privacy Laws, please email us at support@notegoat.ai.