Privacy Policy
Effective as of April 1, 2022
This Privacy Policy describes how 99Bridges and our corporate subsidiaries and affiliates (collectively, “99Bridges”, “we”, “us”, or “our”) collects, uses and shares your personal information if you visit www.99bridges.com or our other websites or services that link to this Privacy Policy (collectively, the “Services”), contact us, receive our communications or attend our events.
We provide important information for individuals in specific geographies (such as California, Nevada, and the EEA and UK) below.
Table of Contents (click to jump)
Personal Information We Collect
How We Use Your Personal Information
How We Share Your Personal Information
Your Choices
Other Sites, Mobile Applications, and Services
Security Practices
International Data Transfers
Children
Changes to this Privacy Policy
How to Contact Us
Your California Privacy Rights
Notice to European Users
Personal Information We Collect
Information you provide to us. Personal information you provide to us through the Services may include:
• Contact information, such as your email address and phone number. You may choose to share more personal details in personalizing your account, such as gender, zip code, age group, but those are not required as of the date of this privacy policy to set up an account.
• Profile information, such as your username and password and any account preferences for the Services.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us.
• Usage information, such as information about how you use the Services and interact with us, including information you provide when you use any interactive features of the Services.
• Marketing information, such as your preferences for receiving communications about our products, activities, and publications, and details about how you engage with our communications.
• Location, if your phone settings allow location to be shared with app providers or 99Bridges specifically, we will receive your location.
• Payment Details, we work with a payment processor, currently Stripe, to process payments. Stripe uses an API to receive your payment and other details directly. Stripe's privacy policy is available here.
• Other information that we may collect which is not specifically listed here, but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection.
Information we obtain from social media platforms. We may maintain pages for 99Bridges on social media platforms, such as Facebook, Twitter, and LinkedIn. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use, and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.
If you choose to connect your account on a third-party platform or network to the Services, like using your Google account to access our app, we may collect information from that platform or network. For example, this information may include your Google username, profile picture, and other profile information. You may also have the opportunity to provide us with additional information via the third-party platform or network, such a list of your connections. You can read more about your privacy choices for social media networks and other third-party platforms below.
Information we obtain from other third parties. We may receive personal information about you from third-party sources, such as marketing partners, publicly-available sources, and data providers.
Cookies and Other Information Collected by Automated Means
We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and activity occurring on or through the Services. The information that may be collected automatically includes your computer or mobile device operating system type and version number, manufacturer and model; device identifier; browser type; screen resolution; IP address; the website you visited before browsing to our website; general location information such as city, state or geographic area; and information about your use of and actions on the Services, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and length of access. Our service providers and business partners may collect this type of information over time and across third-party websites and mobile applications. See our Cookie Policy for more information.
How We Use Your Personal Information
We use your personal information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:
To operate the Services. We use your personal information to:
• provide, operate, and improve the Services, including to process payments;
• establish and maintain your user profile on the Services;
• facilitate social features of the Services, such as our blog
• communicate with you about the Services, including by sending you announcements, updates, security alerts, and support and administrative messages;
• understand your interests and personalize your experience with the Services;
• provide support and maintenance for the Services; and
• respond to your requests, questions and feedback.
For research and development. We analyze use of the Services to improve the Services and to develop new products and services.
To send you marketing and promotional communications. We may send you marketing communications as permitted by law. You can opt out of our marketing and promotional communications as described below.
For compliance, fraud prevention, and safety. We may use your personal information and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to: (a) protect our, your, or others’ rights, privacy, safety, or property (including by making and defending legal claims); (b) enforce the terms and conditions that govern the Services; and (c) protect, investigate, and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity.
To create anonymous data. We may create aggregated and other anonymous data from your personal information and other individuals whose personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Services and promote our business.
To comply with law. We use your personal information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
With your consent. In some cases we may specifically ask for your consent to collect, use, or share your personal information, such as when required by law.
How We Share Your Personal Information
We do not share your personal information with third parties without your consent, except in the following circumstances or as otherwise described in this Privacy Policy:
Affiliates. We may share your personal information with our corporate subsidiaries and affiliates for purposes consistent with this Privacy Policy.
Service providers. We may share your personal information with third-party companies and individuals that provide services on our behalf or help us operate the Services (such as customer support, hosting, analytics, email delivery, text messaging delivery, marketing, and database management services). These third parties may use your personal information only as authorized by their contracts with us.
Payment Processors. We integrate with Stripe to process payments. Stripe receives payment card and personal information details directly from users. Stripe's privacy policy is available here.
Partners. We may sometimes share your personal information with business partners or enable them to collect information directly via our Services. See our Cookie Policy for more information about third parties that collect information through our Services with cookies and similar technologies.
Third-party platforms and social media networks. If you have enabled features or functionality that connect the Services to a third-party platform or social media network (such as by connecting your account with a third party to the Services or sharing content via a third-party platform), we may disclose the personal information that you authorized us to share. We do not control the third party’s use of your personal information.
Professional advisors. We may disclose your personal information to professional advisors, such as lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services that they render to us.
For compliance, fraud prevention and safety. We may share your personal information for the compliance, fraud prevention and safety purposes described above. Notwithstanding anything to the contrary in this policy, we may preserve or disclose your information if we believe that it is reasonably necessary to comply with a law, regulation, or legal request or to protect the safety, property, or rights of 99Bridges or others. However, nothing in this policy is intended to limit any legal defenses or objections that you may have to a third party or government request to disclose your information.
Business transfers. We may sell, transfer, or otherwise share some or all of our business or assets, including your personal information, in connection with a (potential) business transaction such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.
Your Choices
In this section, we describe the rights and choices available to all users. Users who are located within Canada, the European Economic Area and UK can find additional information about their rights below.
Access or update your information. If you have registered for an account with us, you may review and update certain personal information in your account profile by logging into your account.
Opt out of marketing communications. You may opt out of marketing emails by following the unsubscribe instructions at the bottom of the email. You may continue to receive service-related and other non-marketing emails.
Cookies & browser web storage. For information on how to disable cookies and similar technologies used in the Services, see our Cookie Policy.
Do Not Track. Some Internet browsers and phone operating systems may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit www.allaboutdnt.com. Currently, some mobile phones, such as in iOS, the Apple mobile phone operating system require users to opt-in to tracking across websites. You can find more information at here.
Choosing not to share your personal information. Where we are required by law to collect your personal information, or where we need your personal information to provide the Services to you, if you do not provide this information when requested (or you later ask to delete it), we may not be able to provide you with the Services. We will tell you what information you must provide to receive the Services by designating it as required at the time of collection or through other appropriate means.
Third-party platforms or social media networks. If you choose to connect to the Services via a third-party platform or social media network, you may have the ability to limit the information that we may obtain from the third party at the time you connect your third-party account to the Services. Subsequently, you may be able to control your settings through the third-party platform. If you withdraw our ability to access certain information from a third-party platform or social media network, that choice will not apply to information that we have already received from that third party.
Other Sites, Mobile Applications, and Services
The Services may contain links to, or content or features from, other websites and online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or online services that are not associated with us. We do not control third-party websites, mobile applications, or online services, and we are not responsible for their actions. Other websites and services follow different rules regarding the collection, use, and sharing of your personal information. We encourage you to read the privacy policies of the other websites and mobile applications and online services you use.
Security Practices
The security of your personal information is important to us. We employ a number of organizational, technical and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.
99Bridges has developed, implemented, and maintains a written organizational information security policy, implemented employee training regarding safeguarding personal information, conducted risk assessments and uses readily available security measures to periodically monitor systems and assets to identify data security events, imposed reasonable data access controls, does not store consumers' personal information on its network in clear text, and has a process to secure and inventory devices with access to personal information.
International Data Transfers
We are headquartered in the United States and have service providers in other countries, and your personal information may be transferred outside of your state, province, or country to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.
Children
The Services are not directed to, and we do not knowingly collect personal information from, anyone under the age of 16. If we learn that we have collected personal information of a child without the consent of the child’s parent or guardian, we will delete it. We encourage parents with concerns to contact us.
Changes to this Privacy Policy
We may amend this Privacy Policy at any time by posting the amended version on the Services and indicating the effective date of the amended version. We may announce any material changes to this Privacy Policy through the Service and/or via email if we have your email address. In all cases, your continued use of the Services after the posting of any modified Privacy Policy indicates your assent to the amended Privacy Policy.
How to Contact Us
If you have any questions or comments about this Policy or 99Bridges’ privacy practices, email us at infosec@99bridges.com. You may also write to us via postal mail at:
99Bridges, Inc.
Attn: Legal – Privacy
5339 Prospect Road, #203
San Jose, CA 95129
Your California Privacy Rights
Under California law, California residents are entitled to ask us for a notice identifying the categories of personal customer information that we share with certain third parties for marketing purposes, if any, and providing contact information for such third parties. If you are a California resident and would like a copy of this notice, please submit a written request to us via email at infosec@99bridges.com. You must put the statement "Your California Privacy Rights" in your request and include your name, street address, city, state, and ZIP code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.
If you are a California resident, under the Shine Your Light law, you can request information regarding the disclosure of your personal information by 99Bridges to third parties for the third parties’ direct marketing purposes or as provided under any other applicable regulation. To make such a request, please send an email to infosec@99Bridges.com.
California has passed a law called the California Consumer Privacy Act (CCPA). If the CCPA is applicable to you, you have the right to:
1. know the categories of personal information collected about you in the prior 12 months and its sources and business purpose;
2. know whether your personal information is sold or disclosed, and to whom, in prior 12 months;
3. if “sale” of info, right to opt out of the sale of your personal information;
4. access and then delete your personal information (subject to exceptions); and
5. equal service and price (non-discrimination) if you exercise your privacy rights.
You or your agent can exercise your rights under California law in the app itself or by emailing us at infosec@99bridges.com. If you want to submit a request under CCPA and before receiving your personal data or us deleting it, you will need to verify yourself as the account holder by making the request through your account or verifying your identity through your account. If you are no longer able to access your account, please use the reset password feature.
You may review and request changes to your information or opt-out of the sale of your personal information at infosec@99bridges.com
Rights of Canadian Users
Any person in Canada that has questions about 99Bridges' practices or the Services, you can reach out to the head of information security at infosec@99bridges.com. Your personal information may be transmitted outside of your particular province or outside of Canada.
On written request, subject to certain exceptions, 99Bridges will inform individuals of whether it has any personal information (as defined by Canadian law) about them, how we use the information and whether we have disclosed the information (and to what types of organizations we share personal information with), as well as make this information available upon proof of identity. You may also request a copy of any brochures or other information that explain our policies, standards, or codes.
If you are in Quebec, you also may have the right to:
1. know the categories of personal information collected about you;
2. access and then delete your personal information (subject to exceptions); and
3. the right to withdraw your consent for processing of your personal data (subject to exceptions).
You or your agent can exercise these rights under Canadian or Quebec law in the app itself or by emailing us at infosec@99bridges.com. If you want to submit a request and before receiving your personal data or us deleting it, you will need to verify yourself as the account holder by making the request through your account or verifying your identity through your account. If you are no longer able to access your account, please use the reset password feature.
Notice to European Users
The information provided in this section applies only to individuals in the European Economic Area and United Kingdom (collectively, “Europe”).
Personal information. References to “personal information” in this Privacy Policy are equivalent to “personal data” governed by European data protection legislation.
Controller and Representative. 99Bridges, Inc. is the controller of your personal information covered by this Privacy Policy for purposes of European data protection legislation.
The contact information for our representative in Europe is our head of information security. He can be reached via infosec@99bridges.com.
Legal bases for processing. The legal bases of our processing of your personal information as described in this Privacy Policy will depend on the type of personal information and the specific context in which we process it. However, the legal bases we typically rely on are set out in the table below. We rely on our legitimate interests as our legal basis only where those interests are not overridden by the impact on you (unless we have your consent or our processing is otherwise required or permitted by law). If you have questions about the legal basis of how we process your personal information, contact us at infosec@99bridges.com.
Use for new purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.
Sensitive personal information. We ask that you not provide us with any sensitive personal information (e.g., social security number, government-issued identification, payment card information, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Services, or otherwise to us. Payment card details are provided directly to our payment processor (currently Stripe), which is PCI-DSS compliant and does not share payment card details with us.
Retention
We retain personal information where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested; to comply with applicable legal, tax or accounting requirements; to establish or defend legal claims; or for fraud prevention). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. Except as needed to comply with applicable legal, tax or accounting requirements; to establish or defend legal claims; or for fraud prevention, we delete user personal data if an account has been inactive for a year.
Your rights
European data protection laws give you certain rights regarding your personal information. If you are located within Europe, you may ask us to take the following actions in relation to your personal information that we hold:
• Access. Provide you with information about how we process your personal information and give you access to your personal information.
• Correct. Update or correct inaccuracies in your personal information.
• Delete. Delete your personal information.
• Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
• Restrict. Restrict the processing of your personal information.
• Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.
Please contact us to submit these requests via infosec@99bridges.com. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us or submit a complaint to the data protection regulator in your jurisdiction. You can find your data protection regulator here.
Cross-Border Data Transfer
If we transfer your personal information from the European Economic Area to a country outside of it and are required to apply additional safeguards to your personal information under European data protection legislation, we will do so. Please contact us for further information about any such transfers or the specific safeguards applied.