Any personal information that PostFire obtains from other third-party sources will be processed by PostFire in accordance with this Policy and all applicable laws.  For example, our use and transfer of information via Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Technologies we use

When you use and interact with the Services, software automatically collects Usage Data.  To give you more insight, this section summarizes the main types of technologies the Services to generate and collect Usage Data: 

Cookies and Local Storage

Cookies and local storage may be set and accessed on your computer. Upon your first visit to the Services, a cookie or local storage will be sent to your computer that uniquely identifies your browser. “Cookies” and local storage are small files containing a string of characters that is sent to your computer’s browser and stored on your device when you visit a website.  Most Web services use cookies to provide useful features for their users. 

Most browsers are initially set up to accept cookies. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent; however, if you reject cookies, you will not be able to sign in to the Services or take full advantage of our Services. Additionally, if you clear all cookies on your browser at any point after setting your browser to refuse all cookies or indicate when a cookie is being sent, you will have to again reset your browser to refuse all cookies or indicate when a cookie is being sent. 

Pixel Tags

We also use “pixel tags,” which are small graphic files that allow us and third parties to monitor the use of the Services and collect Usage Data. A pixel tag can collect information such as the IP address of the device that downloaded the page on which the tag appears; the URL of the page on which the pixel tag appears; the time (and length of time) the page containing the pixel tag was viewed; the type of browser that retrieved the pixel tag; and the identification number of any cookie previously placed by that server on your computer.

Security

PostFire has implemented technical, administrative and physical security measures designed to protect your information from unauthorized access, use or disclosure. Still, no data transmission online is 100% secure, so we cannot guarantee or warrant the security of any information you provide, and you do so at your own risk. We cannot promise that your information will remain absolutely secure in all circumstances. We are not responsible for the circumvention of any privacy settings or security measures we may provide.

Our disclosures of information to others

This section describes how and why we exchange personal information with contractors and third parties.  It also describes exchanges made for certain purposes, like advertising, legal reasons and consensual direct marketing.  We may also disclose de-identified and/or anonymized data for these purposes.

We do not ‘sell’ or ‘share’ personal information

That means we don’t provide or exchange your personal information with others to facilitate behavioral ads (i.e., ads targeted to you) or otherwise sell it.  For clarity, we haven’t shared or sold any personal information for that purpose in the past twelve (12) months.

With our Affiliates

We may share, link or pool user information among our corporate affiliates, but always in accordance with applicable law, applicable agreements and this Policy.  

Direct marketing

We only exchange information about you with third parties for direct marketing purposes if you opt in, and will only do so until you opt out.  

We may share information about you with third party sponsors or partners who will use it for marketing purposes but only if you opt in to such sharing or do not opt out when prompted.  We will never share information in this manner without giving you one of these two options.

Functional disclosures

We also contract with other businesses to provide certain services related to the functionality and features of the Services, including payment processing, email and hosting services, software development, shipping and fulfillment, data management, and administration of contests and other promotions.  We refer to them as “contractors.”  

Contractors may collect information about you on our behalf, such as Personal Identifiers, Commercial Information, Internet Activity and Device Information, as necessary for them to perform their services.  At other times, we disclose information about you to contractors.  

Contractors are not permitted to use information about you for any purpose other than performing their services for us.  In the past twelve (12) months, we have disclosed these types of information to the following types of contractors:

• Analytics providers, namely Google Analytics, to tell us how the Services is doing, such as which parts interest visitors and how long they visit before leaving.  Among other data, they may receive your IP address.

• Various hosting services and data processors to provide the infrastructure of the Services, such as Cloudflare, which ensures that traffic is from real people, not computers.  Among other data, they may receive your IP address.

  With your consent or at your request

We may periodically ask for your consent to share your contact information to third parties (and, to be clear, no other data, such as demographic data).  Whenever we ask your consent for this reason, we will summarize the purpose and scope of the disclosure.  For example, we may offer discounts to you if you consent to join our mailing list or participate in a promotion involving direct marketing communications.  

In those cases, the Services will display a tickbox near an email-entry field explaining that by submitting your information, you agree to share your email with the content provider. 

To be clear, we only exchange information about you with third parties for direct marketing purposes if you opt in, and will only do so until you opt out.  

For legal reasons

Finally, we may disclose personal information: 

• In response to subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law.  In such cases we reserve the right to raise or waive any legal objection or right available to us; 

• When we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of our company, our users, or others; and in connection with the enforcement of our Terms and other agreements; or 

• In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.  

How long we retain your information

We retain your information only as long as we need it for the purposes described under Information we collect & how we use it, except when longer retention is required by our compliance policies and efforts toward applicable legal, tax, accounting and regulatory requirements.  

How long we need information for those purposes varies by category, and even within categories.  These retention determinations always consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from its unauthorized use or disclosure and whether we can achieve those purposes without using the personal information. 

• For example, we delete some Usage Data as soon as you exit the Services, whereas we may retain records of your orders for services and products for several years as required by law or contract, such as agreements with our payment processors or under our accounting standards. 

Use by minors

The Services are intended for adult users.  We do not knowingly collect information from anyone under the age of 18, and we do not share or sell information about anyone under 18 without affirmative authorization.  If we learn that we have collected information from a person under age 18, we will delete that information as quickly as possible.  

• If you are under 18:  sorry, but please leave the Services.  If you’ve already sent us information, please contact us first so we can delete it.  

• If you are a parent or guardian of a person under 18 years of age and you believe that person provided information to us, please contact us.

How to control your privacy

In General

As a user of the Services, you have rights and choices about your personal information.  We want you to be in control of your information, so we want to remind you of the following options and tools available to you:

Account controls:  You can update the personal information in your Account through the account settings made available on the services.  Any updated information will be reflected in our records and throughout the services promptly.

Newsletter opt-outs:  you may opt-out of any marketing communications from us by following the unsubscribe instructions in the communication you receive. We may continue to send you communications regarding the Services, such as notices about administrative updates, transaction reports, and changes to the Services, this Policy or the Terms.

Exercising rights:  If any of the local privacy laws listed below apply to you, see Requesting information to exercise your rights. 

International Data Transfers

If you reside outside the United States, we transfer information about you for processing in the United States.  Our Service is not intended for residents of non-U.S. jurisdictions.  If you live outside the U.S., by providing your information to us, you consent to the processing of the information in the United States.  The transfer of this information to the United States is necessary for the performance of our contract for use of the Services.

U.S. law is not equivalent to laws in other countries, such as GDPR in Europe or PIPEDA in Canada.  As of the Last Update, the U.S. has not been deemed an ‘adequate’ jurisdiction under GDPR for the purposes of international data transfers.  

Information about local privacy laws

The Services operate from the United States, but this Policy applies worldwide.  Our practices generally do not differ based on your location, but your rights and choices depend in part on the law where you live.  

If any of these local privacy laws apply to you, that section overrides any contrary descriptions elsewhere in the Policy as they relate to you.  If you have questions about your rights under other data privacy laws, please contact us.  

Requesting information 

Submitting requests

To exercise any rights described in this Policy, please contact us or use our Opt-Out Request Form (when available).  Your request must:

• provide sufficient information to identify you and the law that applies to you, such as your name, e-mail address, home or work address, or other information we maintain.  

• not include social security numbers, driver’s license numbers, third-party account numbers, credit or debit card numbers, or health information.

  Verifying requests

We verify requests by attempting to match information in the request to information we maintain.  We may require you to confirm your identity by authenticating via your account or other access method.  

• If your request is unclear or we are unable to authenticate your identity, we may ask for more information, in accordance with law that applies to you.  

• If you are an authorized agent submitting a request on a user’s behalf (where permitted), we may require proof of the user’s written authorization before processing the request.  

• If we cannot verify the identity of the data subject in the request, we may deny it, in full or in part. 

  Responses to requests 

We will respond to your request as quickly as we can, taking into account the nature of your request and the volume of pending requests.  The content of our response will vary with the nature of your request, but will always respond in accordance with any deadlines or requirements specified by the laws that applies to you.

• At times, we may be unable to provide responsive personal information, such as when disclosure would create a substantial, articulable and unreasonable risk to the security of the information, user accounts, or the security of our systems or networks.  We do not disclose account passwords or any other non-personal information that enables access to an account.

• We reserve the right to retain an archive of any deleted information, to the extent permitted by law.  We may also retain deidentified or aggregate data derived from personal information.

  Appealing decisions

Residents of jurisdictions that provide for an appeal mechanism may appeal a decision we have made regarding their requests by contacting us.

Information for Users in Certain U.S. States

Exercising your rights: As described in the “How to control your privacy" section of the Policy, all users have control over their information and can limit what data we process. If you are a resident of California, Colorado, Connecticut, Utah, Virginia or another state with a similar data-privacy law, you may have additional rights that you (or, in certain states, an authorized agent acting on your behalf) can exercise by contacting us, including the right to:

• More information about the categories and specific pieces of personal information we have collected and disclosed for a business purpose in the last 12 months

• Access and/or receive a copy of certain personal information we hold about you

• Correct your personal information

• Delete certain personal information we hold about you

• Receive information about the financial incentives that we offer to you, if any

• Opt out of the processing of your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable 

You also have the right to not be discriminated against for exercising your rights. You may also have the right to opt out of “sales” of your information and “sharing/processing of your information for targeted advertising.”  

Certain information may be exempt from the requests above under applicable law. For example, we need to retain certain information in order to provide our services to you. We also need to take reasonable steps to verify your identity before responding to a request.  

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us. 

1. Additional Information for Users in California

In addition to the rights described above, consumers residing in California are afforded the right to certain additional information with respect to their personal information under the California Consumer Privacy Act (“CCPA”). If you are a California resident, this section applies to you.

‍Our collection and use of personal information: We collect the following categories of personal information: identifiers (such as your username, the email address you used to sign up, and your phone number if you’ve chosen to provide it); commercial information (a record of what you’ve bought or transacting from or while using PostFire, if anything); internet or other network information (how you interact with the services); location information (because your IP address may indicate your general location); inference data about you (for example, what opportunities you may be interested in); and other information that identifies or can be reasonably associated with you. 

For more information about what we collect and the sources of such collection, please see the “Information we collect & why we use it” section of the Privacy Policy. To the extent we collect or use sensitive personal information as defined by law (such as the CCPA), we do so in accordance with applicable legal requirements, and we do not use or disclose it other than for purposes for which there is not a right to limit under the CCPA. 

• ‍Disclosure of personal information: We may disclose and share your personal information with service providers and third parties as described in the “Our disclosures of information to others” section of the Policy. We disclose the categories of personal information mentioned in that section for business or commercial purposes.

• ‍No sale or “share” of personal information: The CCPA sets forth certain obligations for businesses that sell or “share” personal information. We do not sell or share the personal information of our users as those terms are defined in the CCPA. We do disclose certain information as outlined in the “Our disclosures of information to others” section of the Policy and you can make choices with respect to your information as outlined in that policy.

• We disclose personal information for the following categories of purposes, as defined by CCPA:

• Advertising and Marketing

• Error Management

• Internal Research

• Provide Products or Services

• Quality Assurance

• Security

• Short-Term Transient Use

• We retain personal information as described in the “How long we retain your information” section of the Policy. 

California’s “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties, as defined under applicable law, for their direct marketing purposes. We only share your personal information with third parties for their own direct marketing purposes with your consent and, if you have consented, only until you withdraw your consent.

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us.