California Privacy Rights
Last updated as of: April 28, 2022
INTRODUCTION
Thank you for visiting the Invicti Security website. This California Privacy Rights page supplements our Privacy Policy, which describes our practices for the personal information for which we are a “data controller” under applicable law. This includes information collected when you visit our websites that display a link to this Policy (the “Sites”) or when you communicate with us.
All terms used on this page shall have the meanings given in the California Consumer Privacy Act (“CCPA”), when applicable. Note, however, if your information is collected in the context of a business relationship with us, it may not be covered by the CCPA.
NOTICE AT COLLECTION
We collect the following types of personal data for the uses and purposes listed below. You may choose not to provide us with any personal information, but you will not be able to access portions of the Sites that require personal information.
| Category | Description and Purpose | CCPA Categories |
|---|---|---|
| Contact Information | If you contact us or submit a question via our Sites, request a demo, or otherwise inquire about our products or services, we collect your name, company name, work email address, and phone number.We process Contact Information to provide our products and services to you, to provide customer support, to ensure the privacy and security of our Sites, products, and services, to maintain our databases and back-ups, to manage our relationships with you, to communicate with you, and to keep records of our communications with you. The legal basis for this processing is consent or, where applicable, our legitimate interests in the proper administration of our Sites and business, the proper management of our customer relationships, and direct marketing, and the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. | For purposes of the CCPA, Contact Information includes the following categories of personal information:IdentifiersCategories Described in the Customer Records StatuteProfessional or Employment-related Information |
| Account Registration Information | When you register with us, we collect your Contact Information, your company website URL, and a record of the products and services for which you have registered.We process Account Registration Information to provide our products and services to you, to provide customer support, to ensure the privacy and security of our products and services, to maintain our databases and back-ups, to manage our relationships with you, to communicate with you, and to keep records of our communications with you. The legal basis for this processing is consent or, where applicable, our legitimate interests in the proper administration of our Sites and business, the proper management of our customer relationships, and the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. | For purposes of the CCPA, Account Registration Information includes the following categories of personal information:IdentifiersCategories Described in the Customer Records StatuteCommercial InformationProfessional or Employment-related Information |
| Communications and Inquiries | If you contact us, in addition to your Contact Information, we will receive the subject matter of your message and any comments, content, or other information that you choose to provide.We process Communications and Inquiries to provide our products and services to you, to provide customer support, to ensure the privacy and security of our Sites, products, and services, to maintain our databases and back-ups, to manage our relationships with you, to communicate with you, and to keep records of our communications with you. The legal basis for this processing is consent or, where applicable, our legitimate interests in the proper administration of our Sites and business, the proper management of our customer relationships, and the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. | For purposes of the CCPA, Communications and Inquiries includes the following categories of personal information:IdentifiersCategories Described in the Customer Records StatuteCommercial InformationAudio, Electronic, Visual, or Similar InformationProfessional or Employment-related Information |
| Cookies and Similar Technologies | We use cookies and use similar technologies as described in our Cookies and Similar Technologies Policy. If you choose to disable cookies and similar technologies, some areas and features of the Sites may not work properly. | For purposes of the CCPA, Cookies and Similar Technologies includes the following categories of personal information:IdentifiersInternet or Other Electronic Network Activity InformationGeolocation Data |
| Device and Usage Information | When you visit our Sites, we automatically collect information from your browser and your device. This information includes the internet browser that you use, the website or source that linked or referred you to the Platform, your IP address or device ID (or other persistent identifier that uniquely identifies your computer or mobile device on the Internet), the operating system of your computer or mobile device, device screen size, and other similar technical information. We also receive information about your interactions with the Platform, including access dates and times, hardware and software information, device event information, crash data, cookie data, aggregated scan data or vulnerability data, and feature usage data.We process Device and Usage Information to operate the Sites, to serve you the content and functionality you request, to ensure the privacy and security of our Sites, to develop new services, to enhance your experience and provide you with a more personal and interactive experience, and for usage analytics purposes. The legal basis for this processing is our legitimate interests in monitoring and improving our Sites. | For purposes of the CCPA, Device and Usage Information includes the following categories of personal information:IdentifiersInternet or Other Electronic Network Activity InformationGeolocation Data |
DATA PRACTICES DURING LAST 12 MONTHS
The disclosures below describe our data practices during the last twelve months:
- Personal Information Collected: We have collected the categories of personal information listed below during the preceding 12 months:
- Identifiers
- Categories of Personal Information described in the California Customer Records statute
- Commercial Information
- Internet or Other Electronic Network Activity Information
- Geolocation Data
- Audio, Electronic, Visual, or Similar Information
- Professional or Employment-related Information
- Categories of Sources: We have collected the personal information identified in this Policy from you and from other third-party sources, including lead generation partners and payment processors.
- Business and Commercial Purposes for Collecting: We have collected the categories of personal information listed above for the following purposes:
- To provide our products and services to you
- To provide customer support
- To ensure the privacy and security of our Sites, products, and services
- To maintain our databases and back-ups
- To manage our relationships with you
- To communicate with you
- To keep records of our communications with you
- To operate our business
- To detect fraud, illegal activities, or security breaches
- To operate the Sites,
- To serve you the content and functionality you request
- To develop new services
- To enhance your experience and provide you with a more personal and interactive experience
- Usage analytics purposes
- Personal Information Sold: We have not sold categories of personal information during the preceding 12 months.
- Personal Information Disclosed for a Business Purpose. We have disclosed for a business purpose the categories of personal information listed below during the preceding 12 months. We have disclosed each category of personal information to the following categories of third parties: (1) corporate parents, subsidiaries, and affiliates; (2) advisors (accountants, attorneys); (3) service providers (data analytics, data storage, mailing, marketing, website and platform administration, technical support); and (4) operating systems and platforms.
- Identifiers
- Categories of Personal Information described in the California Customer Records statute
- Commercial Information
- Internet or Other Electronic Network Activity Information
- Geolocation Data
- Audio, Electronic, Visual, or Similar Information
- Professional or Employment-related Information
NO FINANCIAL INCENTIVE
We do not offer financial incentives or any price or service difference in exchange for the retention or sale of your personal information.
YOUR RIGHTS AND CHOICES
Do Not Sell My Personal Information. Under the CCPA, you have the right to direct us to stop selling your personal information to third parties and to refrain from doing so in the future. For purposes of the CCPA, we do not sell personal information as defined under applicable law.
CCPA Requests to Know and Requests to Delete. California consumers have the right to request that we (1) disclose what personal information we collect, use, disclose, and sell, and (2) delete certain personal information that we have collected or maintain. However, there are exceptions. By way of example, these rights do not apply where we collect or sell a consumer’s personal information if: (1) we collected that information while the consumer was outside of California, (2) no part of a sale of the consumer’s personal information occurred in California, and (3) no personal information collected while the consumer was in California is sold.
Request to Know. As a California resident, you have the right to request: (1) the specific pieces of personal information we have collected about you; (2) the categories of personal information we have collected about you; (3) the categories of sources from which the personal information is collected; (4) the categories of personal information about you that we have sold and the categories of third parties to whom the personal information was sold; (5) the categories of personal information about you that we disclosed for a business purpose and the categories of third parties to whom the personal information was disclosed for a business purpose; (6) the business or commercial purpose for collecting, disclosing, or selling personal information; and (7) the categories of third parties with whom we share personal information. Our response will cover the 12-month period preceding our receipt of a verifiable request.
Request to Delete. As a California resident, you have a right to request the erasure/deletion of certain personal information collected or maintained by us. As described herein, we will delete your personal information from our records and direct any service providers (as defined under applicable law) to delete your personal information from their records. However, we are not required to honor a deletion request if an exemption applies under the law.
Submission Process. You may submit a request to know or to delete via a toll-free telephone call to (833) 327-1888 or by email to privacy@invicti.com. If a request is submitted in an incorrect manner or if it is deficient, we will either (1) treat the request as if it had been submitted via the designated manner, or (2) provide you with specific directions on how to submit the request or remedy any deficiencies, as applicable.
Verification Process. We are required to verify the identities of those who submit requests to know or to delete. To determine whether the individual making the request is the consumer about whom we have collected information, we will verify your identity by matching the identifying information provided by you in the request to the personal information that we already maintain about you. As a part of this process, you will be required to provide your name, email address, and the last date of our communication with you. We will inform you if we cannot verify your identity.
- If we cannot verify the identity of the person making a request for categories of personal information, we may deny the request. If the request is denied in whole or in part for this reason, we will provide a copy of, or direct you to, our privacy policy.
- If we cannot verify the identity of the person making the request for specific pieces of personal information, we are prohibited from disclosing any specific pieces of personal information to the requestor. However, if denied in whole or in part for this reason, we will evaluate the request as if it is seeking the disclosure of categories of personal information about the consumer.
- If we cannot verify the identity of the person making a request to delete, we may deny the request.
- If there is no reasonable method by which we can verify the identity of the requestor to the degree of certainty required, we will state this in our response and explain why we have no reasonable method by which we can verify the identity of the requestor.
Authorized Agents. Authorized agents may submit requests via the methods identified in this Policy. If you use an authorized agent to submit a request to know or a request to delete, we may require: (1) the authorized agent to provide proof that you gave the agent signed permission to submit the request; (2) you to verify your identity directly with us; and (3) you to directly confirm with us that you provided the authorized agent permission to submit the request. However, we will not require these actions if you have provided the authorized agent with power of attorney pursuant to the California Probate Code.
Excessive Requests. If requests from a consumer are manifestly unfounded or excessive, in particular because of their repetitive character, we may either (1) charge a reasonable fee, or (2) refuse to act on the request and notify the consumer of the reason for refusing the request. If we charge a fee, the amount will be based upon the administrative costs of providing the information or communication or taking the action requested.
Retention. We are required by law to maintain records of consumer requests submitted under the California Consumer Privacy Act and how we responded to such requests for at least 24 months. We only use this information for recordkeeping purposes.
Non-Discrimination. You have the right not to receive discriminatory treatment by us due to your exercise of the rights provided by the CCPA. We do not offer financial incentives and price or service differences, and we do not discriminate against consumers for exercising their rights under the CCPA.
California Shine the Light. Under California Civil Code Section 1798.83, California residents who provide personal information in obtaining products or services for personal, family, or household use may be entitled to request and obtain from us once a calendar year information about the information we shared, if any, with other businesses for direct marketing uses. At present, we do not share your personal information with third parties for those third parties’ direct marketing purposes. Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing, if any, will be included in our response. As part of the California Online Privacy Protection Act, all users of our Sites may make any changes to their information at any time by contacting us at privacy@invicti.com.
CONTACT US
If you have any questions or concerns, wish to exercise your rights, or want to submit a complaint, please contact us using the information below, and we will do our best to assist you.
In Writing:
Invicti Security
1000 N Lamar Blvd Suite 300
Austin, TX 78703, US
By Email: privacy@invicti.com
Telephone: (833) 327-1888