PlumPMM LLC PRIVACY
POLICY
Last Updated: July 14, 2026
This Privacy
Notice for PlumPMM LLC ("PlumPMM","we", "us",
or "our"), describes how and why we might access, collect,
store, use, and/or share ("process") your personal information
when you use our services ("Services"), including when you:
·
Visit
our website at https://www.plumpmm.com or any website of ours that links to this
Privacy Notice
·
Use
PlumPMM. PlumPMM is a B2B
product positioning platform built exclusively for product marketers, and
early-stage founders. The platform helps B2B companies develop clear,
differentiated, and defensible positioning by combining structured positioning
frameworks, market intelligence, competitive analysis, and AI-powered workflows
into a single solution.
·
Engage
with us in other related ways, including any marketing or events.
Questions
or concerns? Reading
this Privacy Notice will help you understand your privacy rights and choices.
We are responsible for making decisions about how your personal information is
processed. If you do not agree with our policies and practices, please do not
use our Services. If you still have any questions or concerns, please contact
us at privacy@plumpmm.com.
2.
WHAT INFORMATION DO WE COLLECT?
3.
HOW DO WE PROCESS YOUR INFORMATION?
4.
WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
5.
DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
6.
HOW DO THE AI FEATURES WORK AND HOW WE USE DATA FOR AI?
7.
HOW DO WE HANDLE YOUR SOCIAL LOGINS?
8.
MARKETING COMMUNICATIONS AND YOUR CHOICES
9.
HOW WE SHARE AND DISCLOSE INFORMATION?
10.
WHO ARE OUR SUB-PROCESSORS?
11.
HOW LONG DO WE KEEP YOUR INFORMATION?
12.
WHAT ARE YOUR PRIVACY RIGHTS?
13.
IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
14.
CONTROLS FOR DO-NOT-TRACK FEATURES
15.
DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
16.
DO WE COLLECT INFORMATION FROM MINORS?
This Policy applies to the Services, our website at https://www.plumpmm.com, our web application at https://app.plumpmm.com, and other interactions you have with us (for example, sales inquiries, events, webinars, and support). It does not apply to:
•
Third-party products, websites, or services that integrate with the Services (“Third-Party Services”), which are governed by their own terms and privacy policies; or
•
A Customer’s own products, websites, or data practices.
We collect personal data in three ways: information you (or a Customer) provide, information collected automatically, and information from third parties.
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
·
Account Information: Name, email address, business contact details, and account credentials
·
Customer data: Content, prompts, files, brand assets, contact lists, campaign data, and other material that Authorized Users submit to or generate within the Services.
·
Business Information: Company details, industry information, and strategic objectives
·
Support & Communication Data: Information in your inquiries, support tickets, survey responses, and feedback.
·
Marketing & events: Information you provide when you register for webinars, events, or content, or interact with our marketing.
Sensitive Information: We do not process sensitive information.
Payment Data: We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Paddle. You may find their privacy notice link(s) here: https://www.paddle.com/legal/privacy.
Social Login Data: We may provide you with the option to register with us using your existing social or email account details, like your Google, Microsoft or other social sign-in account. If you choose to register in this way, we will collect certain profile information about you from the social sign-in provider, as described in the section called HOW DO WE HANDLE YOUR SOCIAL LOGINS? below.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information We Collect Automatically
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
The information we collect includes:
·
Usage Data: Features and content viewed or interacted with, actions taken, dates/times of use, and configuration data generated as you use the Services.
·
Log & device data: IP address, browser type and settings, operating system, device identifiers, referring/exit pages, crash data, and diagnostic data. We also collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services.
·
Cookies and Similar Technologies: Information collected through cookies and similar tracking technologies
Information From Third Parties
In Short: We obtain additional information about you such as your social profile, etc. from third-party sources.
Consistent with how B2B marketing platforms operate, we may obtain personal data from third-party sources, including:
•
Single sign-on / social login providers (e.g., Google) — profile information you authorize them to share when you sign in.
•
Marketing and analytics partners, resellers, and affiliates — campaign performance data and lead information.
•
Publicly available and licensed sources — business information from public databases and partners.
Where we obtain data indirectly, we provide the transparency information required by applicable law and rely on an appropriate legal basis (see WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?).
In Short:
We process your information to provide, improve, and administer our Services,
communicate with you, for security and fraud prevention, and to comply with
law. We process the personal information for the following purposes listed
below. We may also process your information for other purposes only with your
prior explicit consent.
We process your personal information
for a variety of reasons, depending on how you interact with our Services,
including:
•
To
facilitate account creation and authentication and otherwise manage user
accounts. We may
process your information so you can create and log in to your account, as well
as keep your account in working order.
•
To
deliver and facilitate delivery of services to the user. We may process your information to
provide you with the requested service.
•
To
respond to user inquiries/offer support to users. We may process your information to
respond to your inquiries and solve any potential issues you might have with
the requested service.
•
To
send administrative information to you. We may process your information to send you details about
our products and services, changes to our terms and policies, and other similar
information.
•
To
request feedback. We
may process your information when necessary to request feedback and to contact
you about your use of our Services.
•
To
send you marketing and promotional communications. We may process the personal
information you send to us for our marketing purposes, if this is in accordance
with your marketing preferences. You can opt out of our marketing emails at any
time. For more information, see WHAT ARE YOUR PRIVACY
RIGHTS? below.
•
To
protect our Services.
We may process your information as part of our efforts to keep our Services
safe and secure, including fraud monitoring and prevention.
•
To
identify usage trends.
We may process information about how you use our Services to better understand
how they are being used so we can improve them.
•
To
determine the effectiveness of our marketing and promotional campaigns. We may process your information to
better understand how to provide marketing and promotional campaigns that are
most relevant to you.
•
To
comply with legal obligations and enforce our agreements. We may process your information when
necessary to comply with legal obligations and / or enforce our agreements.
In Short:
We only process your personal information when we believe it is necessary and
we have a valid legal reason (i.e., legal basis) to do so under applicable law,
like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to
protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, this section applies to you.
The General
Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid
legal bases we rely on in order to process your
personal information. As such, we may rely on the following legal bases to
process your personal information:
•
Consent:
We may process your
information if you have given us permission (i.e., consent) to use your
personal information for a specific purpose. You can withdraw your consent at
any time. Learn more about withdrawing your consent.
•
Performance
of a Contract: We may
process your personal information when we believe it is necessary to fulfill
our contractual obligations to you, including providing our Services or at your
request prior to entering into a contract with you.
•
Legitimate
Interests: We may
process your information when we believe it is reasonably necessary to achieve
our legitimate business interests and those interests do not outweigh your
interests and fundamental rights and freedoms. For example, we may process your
personal information for some of the purposes described in
order to:
o
Send
users information about special offers and discounts on our products and services
o
Develop
and display personalized and relevant advertising content for our users
o
Analyze
how our Services are used so we can improve them to engage and retain users
o Support our marketing activities
o
Diagnose
problems and/or prevent fraudulent activities
o
Understand
how our users use our products and services so we can improve user experience
•
Legal
Obligations: We may
process your information where we believe it is necessary for compliance with
our legal obligations, such as to cooperate with a law enforcement body or
regulatory agency, exercise or defend our legal rights, or disclose your
information as evidence in litigation in which we are involved.
•
Vital
Interests: We may
process your information where we believe it is necessary to protect your vital
interests or the vital interests of a third party, such as situations involving
potential threats to the safety of any person.
In Short:
We may use cookies and other tracking technologies to collect and store your
information.
This section serves as our cookie
policy. It explains the cookies and similar technologies used both on our
marketing website (plumpmm.com) and within the PlumPMM
application (app.plumpmm.com). “Cookies” here refers collectively to
cookies, pixels, tags, web beacons, and browser storage such as local storage
and session storage. Cookies may be “session” (deleted when you close your
browser) or “persistent” (remaining until they expire or are deleted), and may be set by us (“first-party”) or by a third party
(“third-party”).
Our two surfaces behave differently:
our marketing website uses analytics cookies that load only after you
consent through our cookie banner, while the application sets no
first-party tracking cookies and relies only on strictly necessary and
functional browser storage.
•
Strictly
necessary — required
for authentication, security, and core functionality. We cannot provide you
with the Services without this type of Cookie.
•
Functional — remember your preferences and
settings to improve your experience.
•
Analytics/performance — help us understand how our website
is used so we can improve it. Used on the marketing website only, and only with
your consent.
Our marketing website uses the cookies
below. Analytics cookies are set only after you consent through our cookie
banner. The current, automatically maintained list appears in the cookie
declaration embedded on this page and may update after each scan.
|
Cookie(s)
|
Provider
|
Category
|
Purpose
|
Typical duration
|
|
_ga, _ga_<ID>
|
Google Analytics 4
|
Analytics (consent-gated)
|
Measures site usage and traffic
|
Up to 2 years
|
|
_gid, _gat_*
|
Google Analytics
|
Analytics (consent-gated)
|
Usage statistics / rate-limiting
|
24 hours / 1 minute
|
|
CookieConsent
|
Cookiebot
|
Strictly necessary
|
Stores your cookie-consent choices
|
1 year
|
|
Functional cookies
|
Webflow
(host)
|
Functional
|
Site functionality and forms
|
Session / few by default
|
The PlumPMM
application does not set first-party tracking cookies. To keep you
signed in and remember your preferences, it stores a small amount of
information in your browser’s local storage and session storage
(technologies similar to cookies). All of it is
strictly necessary or functional — none is used for analytics, advertising, or
tracking — so it is not subject to consent. Most session storage data are
cleared when you log out. You can also clear this storage at any time through
your browser settings, though doing so will sign you out and reset your
preferences.
Some third-party providers set cookies
while you use the application, to keep it secure and to enable sign-in and
payments. Each is strictly necessary for the relevant function and is governed
by that provider’s own privacy policy.
|
Cookie(s)
|
Provider
|
Purpose
|
When set
|
|
__cf_bm,
cf_clearance
|
Cloudflare
|
Security and bot protection for the application
|
Always (the app is served through Cloudflare)
|
|
Google sign-in cookies
|
Google Identity Services
|
Enables “Continue with Google” sign-in
|
Only if you sign in with Google
|
|
Checkout & fraud-prevention cookies
|
Paddle
|
Processes payments and prevents fraud
|
Only when you make a payment
|
Because these are set by third parties,
we recommend reviewing the privacy policies of Cloudflare, Google,
and Paddle for details on their cookies.
Where required by law, we obtain your
consent before setting non-essential cookies on our marketing website, and we
do not place analytics cookies until you opt in. You can manage your choices at
any time and withdraw consent through:
•
our
cookie banner / preference center, available on our marketing website;
•
your
browser settings, which let you block or delete cookies and clear
local/session storage (this may affect how the Services function and may sign
you out of the application); and
•
industry
opt-out tools such as the NAI, DAA, and EDAA for
advertising cookies, if applicable.
We honor recognized opt-out preference
signals such as Global Privacy Control (GPC) where required by law.
Because cookie consent is stored per browser and device, you may need to set
your preferences on each one you use. The strictly necessary and functional
storage used within the application cannot be disabled without affecting core
functionality such as staying signed in.
In Short: We offer products, features, or tools
powered by artificial intelligence, machine learning, or similar technologies. We
DO NOT use your data to train or fine-tune AI models.
As part of our Services, we offer
products, features, or tools powered by artificial intelligence, machine
learning, or similar technologies (collectively, "AI Products").
These tools are designed to enhance your experience and provide you with
innovative solutions. The terms in this Privacy Notice govern your use of the
AI Products within our Services.
Use of AI Technologies
We provide the AI Products through
third-party service providers ("AI Service Providers"), including
Anthropic, OpenAI and Google Cloud AI. As outlined in
this Privacy Notice, your input, output, and personal information will be
shared with and processed by these AI Service Providers to enable your use of
our AI Products for purposes outlined in WHAT LEGAL
BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION? You must not use
the AI Products in any way that violates the terms or policies of any AI
Service Provider.
Model
Training
·
We do not use Customer Data to
train or fine-tune our own or any third party’s foundation models, and our
agreements with AI providers prohibit them from using your inputs and outputs
to train their models.
Inputs,
Outputs, and Human Review
·
Inputs/Outputs:
Prompts and generated outputs are processed to deliver the feature and may be
retained per HOW LONG DO WE KEEP YOUR INFORMATION?.
·
Abuse
monitoring: We may process inputs and outputs to detect and prevent fraud,
abuse, and policy or security violations.
·
We
do not conduct human review of Customer content except as needed to provide
support at your request or to investigate abuse.
Automated
Decision-Making
·
Our
Services generate content and recommendations but do not make decisions that
produce legal or similarly significant effects about individuals without human
involvement / and where they do, we provide the safeguards described here.
Where GDPR Article 22 applies, you have the rights described in WHAT ARE YOUR PRIVACY RIGHTS?.
In
Short: If you choose to register or log in to our Services using a social login
account, we may have access to certain information about you.
Our
Services offer you the ability to register and log in using your third-party
social login account details (like your Google Gmail or Microsoft logins).
Where you choose to do this, we will receive certain profile information about
you from your social login provider. The profile information we receive may
vary depending on the social login provider concerned, but will often include
your name, email address, profile picture, as well as other information you
choose to make public on such a social login platform.
We
will use the information we receive only for the purposes that are described in
this Privacy Notice or that are otherwise made clear to you on the relevant
Services. Please note that we do not control, and are not responsible for,
other uses of your personal information by your third-party social login provider.
We recommend that you review their privacy notice to understand how they
collect, use, and share your personal information, and how you can set your
privacy preferences on their sites and apps.
•
Email:
You may opt out of marketing emails via the unsubscribe link or by contacting
us. Service and transactional messages will continue.
•
Targeted
advertising:
You can opt out of cookie-based
targeting through our preference center and the industry tools (NAI, DAA, EDAA)
and by enabling GPC.
•
Mobile:
Use device settings such as “Limit Ad Tracking” (iOS) or “Opt
out of Ads Personalization” (Android).
We do not sell Customer Data. We share
personal data only as described below:
•
Service
providers / sub-processors
— vendors that host, process, and support the Services (e.g., cloud hosting, AI
model providers, analytics, payment processing, email delivery), bound by
contract to protect the data. See “WHO ARE OUR
SUB-PROCESSORS?” for our current sub-processors.
•
At
the Customer’s direction
— for Customer Data, as instructed by the Customer and through their use of
Service features and integrations.
•
Third-Party
Services — when a Customer or Authorized User enables an integration, we share
data with that integration as configured.
•
Affiliates — our parent, subsidiaries, and
corporate affiliates, under this Policy.
•
Legal
and safety — to comply
with law or valid legal process, enforce our terms, and protect the rights,
property, and safety of PlumPMM, our users, and
others.
•
Business
transfers — in
connection with a merger, acquisition, financing, reorganization, or sale of
assets, subject to confidentiality.
•
Aggregated/de-identified
data — which is no
longer personal data, for any lawful purpose.
•
With
your consent — or at
your direction.
To provide the Services, we engage
trusted third parties to process personal data on our behalf and on behalf of
our Customers (“sub-processors”). We enter into
written agreements with each sub-processor that require them to protect
personal data and to process it only as needed to provide their services to us,
consistent with the Customer Agreement and applicable law. We remain
responsible for our sub-processors’ performance of their data-protection
obligations.
The current sub-processors that may
process Customer Data or Authorized-User data are listed below.
|
Sub-processor
|
Purpose of processing
|
Processing location
|
|
Amazon Web Services, Inc. (AWS)
|
Cloud hosting and infrastructure; storage and
processing of Customer Data, including uploaded go-to-market documents and
content from publicly available websites processed by the Services.
|
United States
|
|
Cloudflare, Inc.
|
Content delivery network, DNS routing, caching, and
security/bot protection in front of the application.
|
Global edge network
|
|
OpenAI,
L.L.C.
|
AI model provider used to generate and optimize
automated messaging and other AI features from inputs you provide. Inputs and
outputs are not used to train its models under our agreement.
|
United States
|
|
Anthropic, PBC
|
AI model provider used to generate and optimize
content from inputs you provide. Inputs and outputs are not used to train its
models under our agreement.
|
United States
|
|
Google LLC (Sign-In)
|
Federated authentication for “Continue with Google”
sign-in.
|
United States
|
|
Google LLC (Workspace)
|
Business email and productivity tools used to
communicate with and support Customers and Authorized Users.
|
United States
|
|
PostHog,
Inc.
|
Product analytics on signed-in application usage to
help us understand and improve the Services.
|
United States
|
|
Resend (Plus Five Five,
Inc.)
|
Delivery of transactional and account emails (e.g.,
sign-in, notifications, service messages).
|
United States
|
|
Paddle.com Inc. (US) / Paddle.com Market Ltd. (RoW)
|
Payment processing and billing as our Merchant of
Record, including fraud prevention.
|
United States / United Kingdom
|
|
GitHub, Inc.
|
Tracking and managing customer-submitted issues,
bug reports, and feature requests.
|
United States
|
We provide advance notice of new or replacement sub-processors as described in the
Customer Agreement / Data Processing Agreement, and Customers may object to a
new sub-processor on reasonable, documented data-protection grounds in
accordance with that agreement.
In Short:
We keep your information for as long as necessary to fulfill the purposes
outlined in this Privacy Notice unless otherwise required by law.
We will only keep your personal
information for as long as it is necessary for the purposes set out in this
Privacy Notice, unless a longer retention period is required or permitted by
law (such as tax, accounting, or other legal requirements). No purpose in this
notice will require us keeping your personal information for longer than three
(3) months past the termination of the user's account.
When we have no ongoing legitimate
business need to process your personal information, we will either delete or
anonymize such information, or, if this is not possible (for example, because
your personal information has been stored in backup archives), then we will
securely store your personal information and isolate it from any further
processing until deletion is possible.
In Short: Depending on your state of
residence in the US or in some regions, such as the European Economic Area
(EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow
you greater access to and control over your personal information. You may
review, change, or terminate your account at any time, depending on your
country, province, or state of residence.
In some regions (like the EEA, UK,
Switzerland, and Canada), you have certain rights under applicable data
protection laws. These may include the right (i) to
request access and obtain a copy of your personal information, (ii) to request
rectification or erasure; (iii) to restrict the processing of your personal
information; (iv) if applicable, to data portability; and (v) not to be subject
to automated decision-making. If a decision that produces legal or similarly
significant effects is made solely by automated means, we will inform you,
explain the main factors, and offer a simple way to request human review. In
certain circumstances, you may also have the right to object to the processing
of your personal information. You can make such a request by contacting us by
using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS
NOTICE?" below.
We will consider and act upon any
request in accordance with applicable data protection laws.
If you are located in
the EEA or UK and you believe we are unlawfully processing your personal
information, you also have the right to complain to your Member State data
protection authority or UK data protection authority.
If you are located in
Switzerland, you may contact the Federal Data Protection and Information
Commissioner.
Withdrawing your consent:
If we are relying on your consent to process your personal information, which
may be express and/or implied consent depending on the applicable law, you have
the right to withdraw your consent at any time. You can withdraw your consent
at any time by contacting us by using the contact details provided in the
section HOW CAN YOU CONTACT US ABOUT THIS
NOTICE? below.
However, please note that this will not
affect the lawfulness of the processing before its withdrawal nor, when
applicable law allows, will it affect the processing of your personal
information conducted in reliance on lawful processing grounds other than
consent.
Opting out of marketing and promotional
communications: You can unsubscribe from our marketing
and promotional communications at any time by clicking on the unsubscribe link
in the emails that we send, or by contacting us using the details provided in
the section HOW CAN YOU
CONTACT US ABOUT THIS NOTICE? below. You will then be removed from
the marketing lists. However, we may still communicate with you — for example,
to send you service-related messages that are necessary for the administration
and use of your account, to respond to service requests, or for other
non-marketing purposes.
Account Information:
If you would at any time like to review
or change the information in your account or terminate your account, you can:
·
Log
in to your account settings and update your user account.
·
Contact
us using the contact information provided.
Upon your request to terminate your
account, we will deactivate or delete your account and information from our
active databases. However, we may retain some information in our files to
prevent fraud, troubleshoot problems, assist with any investigations, enforce
our legal terms and/or comply with applicable legal requirements.
Cookies and similar technologies:
Most Web browsers are set to accept cookies by default. If you prefer, you can
usually choose to set your browser to remove cookies and to reject cookies. If
you choose to remove cookies or reject cookies, this could affect certain
features or services of our Services.
If you have questions or comments about
your privacy rights, you may email us at privacy@plumpmm.com.
In Short: We may transfer, store, and
process your information in countries other than your own.
Our
servers are located in the United States. Regardless
of your location, please be aware that your information may be transferred to,
stored by, and processed by us in our facilities and in the facilities of the
third parties with whom we may share your personal information (see "HOW WE SHARE AND DISCLOSE INFORMATION?"
above), including facilities in the United States, and other countries.
If you are a resident in the European
Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries
may not necessarily have data protection laws or other similar laws as
comprehensive as those in your country. However, we will take all necessary
measures to protect your personal information in accordance with this Privacy
Notice and applicable law.
Most web browsers and some mobile
operating systems and mobile applications include a Do-Not-Track
("DNT") feature or setting you can activate to signal your privacy
preference not to have data about your online browsing activities monitored and
collected. At this stage, no uniform technology standard for recognizing and
implementing DNT signals has been finalized. As such, we do not currently
respond to DNT browser signals or any other mechanism that automatically
communicates your choice not to be tracked online. If a standard for online
tracking is adopted that we must follow in the future, we will inform you about
that practice in a revised version of this Privacy Notice.
California law requires us to let you
know how we respond to web browser DNT signals. Because there currently is not
an industry or legal standard for recognizing or honoring DNT signals, we do
not respond to them at this time.
In Short:
If you are a resident of California, Colorado, Connecticut, Delaware, Florida,
Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire,
New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may
have the right to request access to and receive details about the personal
information we maintain about you and how we have processed it, correct
inaccuracies, get a copy of, or delete your personal information. You may also
have the right to withdraw your consent to our processing of your personal
information. These rights may be limited in some circumstances by applicable
law. More information is provided below.
This section provides additional
information for California residents under the California Consumer Privacy Act,
as amended by the CPRA.
Categories of Personal Information We
Collect
The table below shows the categories of
personal information we have collected in the past twelve (12) months. The
table includes illustrative examples of each category and does not reflect the
personal information we collect from you. For a comprehensive inventory of all
personal information we process, please refer to the section "WHAT INFORMATION DO WE COLLECT?"
|
Category
|
Collected?
|
Disclosed for a business purpose?
|
|
A. Identifiers (name, email, IP, account ID)
|
Yes
|
Yes
|
|
B. Customer Records (Cal. Civ. Code §1798.80)
|
Yes
|
Yes
|
|
C. Protected classifications
|
No
|
No
|
|
D. Commercial information
|
Yes
|
Yes
|
|
E. Biometric information
|
No
|
No
|
|
F. Internet/network activity
|
Yes
|
Yes
|
|
G. Geolocation (approximate)
|
Yes
|
Yes
|
|
H. Sensory data (audio/visual)
|
No
|
No
|
|
I. Professional/employment info
|
Yes
|
Yes
|
|
J. Education information
|
No
|
No
|
|
K. Inferences
|
Yes
|
Yes
|
We may also collect other personal
information outside of these categories through instances where you interact
with us in person, online, or by phone or mail in the context of:
·
Receiving
help through our customer support channels;
·
Participation
in customer surveys or contests; and
·
Facilitation
in the delivery of our Services and to respond to your inquiries.
Sources of
Personal Information
Learn more
about the sources of personal information we collect in "WHAT INFORMATION DO WE COLLECT?"
How We Use
and Share Personal Information
Learn more
about how we use your personal information in the section, "HOW DO WE PROCESS YOUR INFORMATION?"
Will your
information be shared with anyone else?
We may
disclose your personal information with our service providers pursuant to a
written contract between us and each service provider. Learn more about how we
disclose personal information to in the section, "HOW
WE SHARE AND DISCLOSE YOUR INFORMATION?"
We may use
your personal information for our own business purposes, such as for
undertaking internal research for technological development and demonstration.
This is not considered to be "selling" of your personal information.
We have not
disclosed, sold, or shared any personal information to third parties for a
business or commercial purpose in the preceding twelve (12) months. We will not
sell or share personal information in the future belonging to website visitors,
users, and other consumers.
Sensitive
Personal Information
We do not collect Sensitive Personal
Information and we do not use or disclose SPI for purposes that require
an offered right to limit beyond those permitted by the CCPA.
Your Rights
You have
rights under certain US state data protection laws. However, these rights are
not absolute, and in certain cases, we may decline your request as permitted by
law. These rights include:
•
Right
to know whether or not we are processing your personal data
•
Right
to access your personal data
•
Right
to correct inaccuracies in your personal data
•
Right
to request the deletion of your personal data
•
Right
to obtain a copy of the personal data you previously shared with us
•
Right
to non-discrimination for exercising your rights
•
Right
to opt out of the processing of your personal data if it is used for targeted
advertising (or sharing as defined under California's privacy law), the sale of
personal data, or profiling in furtherance of decisions that produce legal or
similarly significant effects ("profiling")
Depending upon
the state where you live, you may also have the following rights:
•
Right
to access the categories of personal data being processed (as permitted by
applicable law, including the privacy law in Minnesota)
•
Right
to obtain a list of the categories of third parties to which we have disclosed
personal data (as permitted by applicable law, including the privacy law in
California, Delaware, and Maryland)
•
Right
to obtain a list of specific third parties to which we have disclosed personal
data (as permitted by applicable law, including the privacy law in Minnesota
and Oregon)
•
Right
to obtain a list of third parties to which we have sold personal data (as
permitted by applicable law, including the privacy law in Connecticut)
•
Right
to review, understand, question, and depending on where you live, correct how
personal data has been profiled (as permitted by applicable law, including the
privacy law in Connecticut and Minnesota)
•
Right
to limit use and disclosure of sensitive personal data (as permitted by
applicable law, including the privacy law in California)
•
Right
to opt out of the collection of sensitive data and personal data collected
through the operation of a voice or facial recognition feature (as permitted by
applicable law, including the privacy law in Florida)
How to
Exercise Your Rights
To exercise
these rights, you can contact us by visiting www.plumpmm.com, by emailing us at
privacy@plumpmm.com, or by referring to the contact details at the bottom of
this document.
Under certain
US state data protection laws, you can designate an authorized agent to make a
request on your behalf. We may deny a request from an authorized agent that
does not submit proof that they have been validly authorized to act on your
behalf in accordance with applicable laws.
Request
Verification
Upon receiving
your request, we will need to verify your identity to determine you are the
same person about whom we have the information in our system. We will only use
personal information provided in your request to verify your identity or
authority to make the request. However, if we cannot verify your identity from
the information already maintained by us, we may request that you provide
additional information for the purposes of verifying your identity and for
security or fraud-prevention purposes.
If you submit
the request through an authorized agent, we may need to collect
additional information to verify your identity before processing your request
and the agent will need to provide a written and signed permission from you to
submit such request on your behalf.
Appeals
Under certain
US state data protection laws, if we decline to take action
regarding your request, you may appeal our decision by emailing us at privacy@plumpmm.com.
We will inform you in writing of any action taken or not taken in response to
the appeal, including a written explanation of the reasons for the decisions.
If your appeal is denied, you may submit a complaint to your state attorney
general.
We respond within the time required by
law (generally 45 days, extendable once). We also comply with California’s
“Shine the Light” law; to make a request, contact us at privacy@yourdomain.com.
In Short: We do not knowingly collect
data from or market to children under 18 years of age or the equivalent age as
specified by law in your jurisdiction.
We do not knowingly collect, solicit
data from, or market to children under 18 years of age or the equivalent age as
specified by law in your jurisdiction, nor do we knowingly sell such personal
information. By using the Services, you represent that you are at least 18 or
the equivalent age as specified by law in your jurisdiction or that you are the
parent or guardian of such a minor and consent to such minor dependent’s use of
the Services. If we learn that personal information from users less than 18 years
of age or the equivalent age as specified by law in your jurisdiction has been
collected, we will deactivate the account and take reasonable measures to
promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18 or the
equivalent age as specified by law in your jurisdiction, please contact us at privacy@plumpmm.com.
In Short: Yes, we will update this
notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from
time to time. The updated version will be indicated by an updated
"Revised" date at the top of this Privacy Notice. If we make material
changes to this Privacy Notice, we may notify you either by prominently posting
a notice of such changes or by directly sending you a notification. We
encourage you to review this Privacy Notice frequently to be informed of how we
are protecting your information.
If you have questions or comments about
this notice, you may email us at privacy@plumpmm.com or contact us by post at:
PlumPMM LLC
455
Market St,
Suite 1940,
Num 616707,
San Francisco,
CA 94105
United States