Effective Date: December 4th, 2019
Information We Collect
When You Register for a CortaAi Account
When you create an Account, we may collect personal information from you, such as your name, phone number, company name, industry, job title, company size and email address. If you create an Account using your login from a third-party account, such as Google, Facebook or Twitter, we will access and collect the personal information about you that the third-party account provides (which is based on your privacy settings with the third-party account), so that you can log into your Account with us. We use your contact information to send you information about our Services and communicate with you about your Account, your activities on our Site and Services and policy changes. You may unsubscribe from receiving certain types of these messages through your Account settings, although CortaAi reserves the right to contact you when we believe it is necessary, such as for administrative and account management purposes.
When You Create a CortaAi Link
One feature of the Services is the ability to create shortened uniform resource locators (URLs) of websites (“CortaAi Link” or “Bitlinks”). Users can create CortaAi Links without registering for an account. When you create a CortaAi Link, CortaAi collects and stores both the original URL and the shortened URL and, if you are logged in to your Account, we will associate that information with your Account. CortaAi also collects and stores your IP address, your location, which we derive from your IP address, the time and date on which you shortened the original URL, and if you share a CortaAi Link on a social networking platform, the name of the platform and your username on that platform.
When You Interact With a CortaAi Link
Other Information We Automatically Collect
When you visit the Site, we automatically collect (i) your IP address and location derived from the IP address; (ii) the referring websites or services; (iii) the time and date of each access; (iv) device settings, such as browser type, operating system, and language; and (v) cookie information. This type of data enables us and third parties authorized by us to figure out how often individuals use parts of the Site so that we can analyze and improve them.
We may receive a confirmation when you open an email from us. We use this confirmation to improve our customer service.
CortaAi may use third-party APIs and software development kits (“SDKs”) to provide certain functions in our Services.
Third Party Services
Some features of the Services allow you to share your content and CortaAi Links through your accounts with other companies such as Facebook and Twitter. If you choose to connect CortaAi to such Third Party Services, we may collect information related to your use of those Third Party Services, such as authentication tokens that allow us to connect to your Third Party Service accounts. We will ask you for permission before you authorize our collection of this information. We will only use that information for the specific reason for which it was provided to us. We may also collect information about how you are using the Services to interact with those connected Third Party Services. Note that Third Party Services may have the ability to restrict the information that is provided to us based on your privacy settings of that account.
To enable us to infer the location from the IP addresses of computers or devices that visit our website or click, view or interact with CortaAi links as described in this policy, we receive IP-based location information from our third-party service provider. We also receive business contact information of our business customer contacts and prospects from our third party service provider.
Cookies and Other Similar Technologies
CortaAi cookies also allow CortaAi to track when you have clicked on a CortaAi Link. Each click of a CortaAi Link is tracked using a unique identifier assigned to you in one or more cookies stored by your web browser and associated with CortaAi. We may associate the unique identifier in our cookies with the other information we automatically collect when you use the Services, as described above, including your IP address, CortaAi Links you click, CortaAi Links you create, and information with your Account if you have one.
Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on acceptance of each new cookie in a variety of ways. If you disable cookies, you will not be able to use some features of the Services.
You may ask CortaAi not to associate your web browser or IP address with visits to the CortaAi.com website or CortaAi Links that you create or click by clicking on the appropriate links below. If you would like to opt-out of the CortaAi Links, please click on the opt-out choice for CortaAi Links below. This will install a cookie on your browser that instructs our servers not to associate your IP address and browser with CortaAi Links you create, click or view. If you clear your cookies in your browser, you will need to click on the opt-out choice again after each time you clear your cookies. To be clear, these cookie-based opt-outs must be performed on each device and browser that you wish to have opted-out. Cookie-based opt-outs are not effective on mobile applications. However, on many mobile devices, application users may limit tracking via their device settings. Please note that if you use these opt-out mechanisms, will still automatically collect the IP addresses of computers or mobile devices that click on or create CortaAi Links; we just won’t associate them with your browser or CortaAi account.
Note Regarding Children
We do not knowingly collect personal information from children. If we learn that we have collected personal information of a child under 13 (or older as required by applicable law), we will take steps to delete such information from our files as soon as possible.
How We Use Information
We use the personal information we collect for a variety of administrative and business purposes to:
- operate our Site and provide the Services,
- process and complete any transactions,
- verify individual identity,
- respond to inquiries, questions and comments and provide customer and technical support,
- provide access to certain functionalities of our Services,
- personalize and improve the Services and develop new products and services,
- to communicate with our current and prospective customers concerning our services,
- measure interest and engagement in our Site and Services,
- monitor and analyze usage and trends of the Site and Services,
- provide services to our customers to allow them to understand how you interact with our Services and to help detect, deter and prevent malicious, fraudulent or unlawful activity,
- comply with any legal obligations, and
Usage Across Devices
We may use the information we collect to make inferences that a unique individual has created or interacted with CortaAi links on different devices so that we can to detect, deter and prevent malicious, fraudulent or unlawful activity and analyze how users use our Services. For example, if you created a CortaAi link on a computer connected to your residential WiFi network, and you soon thereafter clicked on a CortaAi link on a mobile device connected to the same WiFi network, we may infer that a single individual created and clicked on the CortaAi links because both events were associated with the same IP address in the same time period.
Other Legitimate Interests
We also may use personal information to pursue legitimate interests, such as direct marketing, research (including marketing research), network and information security, prevention of fraudulent, malicious and unlawful activities, or any other purpose disclosed to you at the time you provide personal information or allowed by law.
Information We Share
The Services are designed to help you share information with others. In addition, we provide Services to our Customers that use CortaAi Link Metrics. As a result, some of the personal information generated through your use of the Services is shared publicly or with third parties as described below.
CortaAi Links You Create
Much of your activity on and through the Services is public by default. For example, when you create a CortaAi Link, the original URLs you have shortened and the corresponding CortaAi Links are publicly available.
Where permitted by law, if you register a CortaAi Account with an email address on a domain owned by an organization, (for example, an employer or educational institution where you have an email account), we may share your email address and information about your Account, such as the number of links you have created, with that organization to explore the organization’s interest in creating or managing an enterprise account or for related purposes.
Information We Share With Customers
Information You Elect to Share
When creating a CortaAi Link, you can share that CortaAi Link through Third Party Services. Any information that you elect to distribute through Third Party Services, such as a social network post you create, may then become accessible to users of those services. You can also access other Third Party Services through the Services, for example by clicking on links in the Statistics page for a CortaAi Link. We recommend that you review the terms of services and privacy policies of such Third Party Services that you access through the Services since CortaAi does not control and is not responsible for the privacy practices of these Third Party Services.
Information Shared with Service Providers
We may employ and contract with third parties to perform certain tasks on our behalf and under our direction (our “Service Providers”). We may need to share information about you with our Service Providers in order to provide our product with research and analytics on user behavior and to provide advertising products and services to users, to process payments, and to provide email marketing and support services. Our agreements with these Service Providers authorize them to use your information only as necessary to provide services to us. Transfers to subsequent third parties are covered by the service agreements with our Clients.
Information Disclosed Pursuant to Business Transfers
We may transfer and/or provide information about our users in connection with an acquisition, sale of company assets, or other situation where user information would be transferred as one of our business assets. You will be notified via email and/or a prominent notice on our website.
In such a case, the acquirer of CortaAi may continue to use your information as set forth in this policy or as otherwise allowed by law.
Information Disclosed for the Protection of CortaAi and Others
Information We Share With Your Consent
We will share information about you when you instruct us to do so, such as when you share CortaAi Links or content with others through the Services or if we notify you that the information you provide will be shared in a particular manner and you provide such information (like sharing/posting it with a third-party Service).
EU-U.S. PRIVACY SHIELD AND SWISS-U.S. PRIVACY SHIELD
CortaAi, Inc. participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. We are committed to subjecting all personal data received from European Economic Area (EEA) member countries and Switzerland, respectively, in reliance on each Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Frameworks, and to view our certification, visit the U.S. Department of Commerce’s Privacy Shield List. [https://www.privacyshield.gov]
CortaAi, Inc. is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. CortaAi, Inc. complies with the Privacy Shield Principles for all onward transfers of personal data from the EEA and Switzerland, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, CortaAi, Inc. is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Please direct any inquiries or complaints regarding our compliance with the Principles to the point of contact listed in the “Questions” section below. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider at https://www.jamsadr.com/eu-us-privacy-shield. JAMS is located in the United States and their services are provided at no cost to you.
Under certain conditions, more fully described on the Privacy Shield website [https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint], you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
The information you provide may be transferred, processed and/or accessed by us in the United States or another country where we (or our service providers) operate.
Your Account information is protected by a password for your privacy and security. You can prevent unauthorized access to your Account by selecting and protecting your password appropriately, making use of two-factor authentication, and limiting access to your computer and browser by signing off after you have finished accessing your Account.
CortaAi endeavors to protect the information it collects about its users using industry-standard security processes and controls, however, despite these efforts, no security measure is perfect or impenetrable and CortaAi does not guarantee or warrant that such measures will prevent unauthorized access to the information about you that is stored by CortaAi. In the event we experience a breach of security, we will promptly notify you if your personal information has been compromised, in accordance with applicable law. If you have any questions about the security of your personal information, you can contact us at support@CortaAi.com.
Choice and Access
You don’t need an Account to create CortaAi Links, and you can use many of the features of the Services without registering, thereby limiting the type of information that is collected about you individually.
CortaAi acknowledges that you have the right to access your personal information that we collect and are able to associate with you. If you have a CortaAi Account, you may access, correct, or request deletion of your personal information by logging into your Account. Once logged in to your account, you will be able to view a history of the URLs you have shortened and the metrics pages for those URLs. You can request a complete copy of the personal information we store about your account by clicking the Request GDPR SAR Report button in your Account Settings. For more information on how to request access to your information, please see our help article. You can delete your Account at any time through your Account settings page. If you delete your Account, you will no longer be able to access or use the Services. If you have an Account but are unable to access it, you can contact us at support@CortaAi.com. We will respond to your request within a reasonable timeframe. If you are a resident of the EEA or Switzerland, you have the right to ask that your personal data be corrected, updated, or erased. You may also have the right to object to, or request that we restrict, certain processing. If you would like to exercise any of these rights, you may contact us as indicated in the “Questions” section below. In certain circumstances, we may be required by law to retain your personal information.
If you do not have a CortaAi account, CortaAi has no way of identifying you or verifying that you created or clicked on a CortaAi link.
Please note that in the interest of ensuring that existing CortaAi Links continue to function for all of our users, the CortaAi Links that you have created and shared cannot be deleted or disabled (even if your Account is deleted), and any shortening and sharing activity that has already occurred on your Account also cannot be deleted. If you have concerns about any unauthorized use of your Account, you can delete your account within your Account settings.
Please see the Cookie section above for additional choices you may have.
If you are located in the European Economic Area, you have the right to lodge a complaint with a supervisory authority if you believe our Processing of your Personal Information violates applicable law.