Privacy Policy | INNFINITIX

Last updated: August 1, 2024

Please note: The privacy policy may be provided in several languages to ease your understanding of its terms depending on your country of residence. However, the legally binding version is the English version.

The titles and headlines are only for convenience purposes and are not legally binding.

This Privacy Policy (the “Policy”) describes the data collection and processing practices of INNFINITIX Software SAS and its subsidiaries and Affiliated Companies (“INNFINITIX,” “we,” “us,” or “our”). The Policy explains what data we collect, why we collect it, and how we use it when you access our websites that link to this Policy (each, a “Website” and jointly the “Websites”), download or use one or more of our software products (“Product(s)”) and using or accessing any related services (together with the Websites and Products, the “Services”).

Introduction

We recognize the importance of delivering safe products and protecting the privacy rights of our customers. Therefore, we designed this Policy in clear language and modular structure.

This Policy forms part of your agreement with us and shall be read and consented to together with the terms of service and/or license agreement of the relevant Service.

Please read the Policy carefully to be sure you understand it and agree with its terms before you use any of the Services. If you do not agree with the terms in this Policy and the choices, we provide do not mitigate your concerns, please do not access or use the Services. For any questions or matter related to this Policy, or your privacy rights, please contact our data protection officer at: contact@innfinitix.com.

General provisions

1. Jurisdiction and language

Please note that this Policy is designed with the EU General Data Protection Regulation (GDPR) and the ePrivacy directive in mind (jointly, the “Applicable Laws”). If you reside in any jurisdiction other than the EU, the EEA or the UK, and if you would like to learn more about our region-specific processing of Personal Information, you can directly navigate to the supplemental applicable jurisdictions notices below.

The Policy may be provided in several languages to ease your understanding of its terms depending on your country of residence. However, the legally binding version is the English version.

2. Scope and applicability

2.1. Controller Information

INNFINITIX Software SAS is the data controller of the Personal Information provided that are processed in connection with the Services. The postal address is 15001 90th Ave, Jamaica, NY 11432

We can be contacted at: contact@innfinitix.com for general inquiries, or at contact@innfinitix.com for privacy-related inquiries.

2.2. Data Protection Officer (DPO)

If you wish to contact us in any matter concerning this Policy, you are welcome to do so through the above address or by email to our data protection officer (DPO) at: contact@innfinitix.com.

2.3. Categories of Data Subjects

This Policy applies to the following types of Data Subjects:

a visitor to a Website, including a Products webpage or landing page, that links to this Policy or to this Privacy Portal (“Visitor(s)”); and/or
a user of any of the Products who downloads and installs a Product or otherwise interacts with the Services, whether accessing, downloading, installing, consuming, or otherwise using them (“User(s)”); and/or
a business customer, a business partner that has a contractual relationship with us, or a prospective customer or partner that is yet to be engaged in a contract with us (“Customer(s)”); and/or
a vendor, supplier or a Processor (“Vendor(s)”).

Unless otherwise mentioned in this Policy, we refer to any type of Data Subject as “you”.

Changes to this policy

From time to time, we may amend, add or delete provisions of this Policy to accommodate changes in our Services, Products, and data processing policies and to conform to new legislation. If we introduce such changes, we will post the amended Policy in this Portal and the website of the specific Product or Service, and the changes will be reflected in the “last updated” date stipulated in the Policy.

In case of a substantial change, we will provide you with a more prominent notice, for example, posting a note on the Website or sending an email to you, if we hold your email address. Your use of the Site or Services following the effective date of any such modification means you accept and agree to be bound by the modified Policy.

Transparency, consent and choice

You are not legally obligated to provide us with Personal Information (see definition below), and you acknowledge that providing us with Personal Information is done freely by you. You also acknowledge that we will not be able to provide you with the relevant Services or process requests you make without such information. Some of the Services will require you to submit specific Personal Information in addition to other information already processed about you. In such a case, you can choose whether you want to use such additional Services or not.

To better learn about your rights relating to your Personal Information, please refer below to the relevant section in this Policy.

Personal information we may process and how

The information we process in connection with the Services can be one of the following:

Personal Information (PI) means information that identifies you as a natural person, or that may be used, either alone or in combination with other information, to personally identify you as a natural person. Such information may include, for example, a first and last name, an email address, a phone number, a home or other physical address, and other contact information. In addition, in some jurisdictions (as the EU, for example), and given the specific use we make with the information, an IP address, device ID, and cookies could be considered as Personal Information as well.
Non-Personal Information (non-PI) means information that cannot personally identify or lead to identifying a natural person. For example, statistics or aggregated information, or any other type of data that can no longer be attributed to you.

This Policy applies to Personal Information and can be processed or derived in one of the following ways:

Information you submit to us

For example: forms you submit, accounts you open, or information you share when you actively contact us via one or more of the channels we may make available to you.

Submitting information to us is optional in certain cases and required in others, depending on the Services you choose to use or access, and whether you are a Customer or a User. This category includes one or more of the following data categories:

01. Contact details.

We may process your contact details (such as name, email address, or phone number) in case you submitted those to us when you contact us, open an account with us, when you subscribe to our mailing list, or when reaching out to our support services, as further described below.

02. Subscription to our mailing list.

If you voluntarily subscribe to our email communications, you will be asked to provide us with your email address. You can unsubscribe at any time using the unsubscribe option within the body of the email sent to you or by contacting our DPO at contact@innfinitix.com.

Purpose: We use your email address to send you information related to the Products and Services, provide you with tips related to our Services, and, subject to your consent, send promotional and marketing emails.

Retention: We will retain your information for as long as you do not explicitly ask us to delete it or if we learn that it was unlawfully collected (for example, if we discover you are a minor), and provided that no exemption is applied according to applicable law.

03. Signing up, registration, and account management.

Some of the Services require registration and signing up to a user account, for example, when you use any of our trial software licenses or when you choose to purchase a Product license. If you choose to do so, you will be asked to submit some information such as your email address, full name, and other Personal Information as the submission form indicates.

Your email address will be used as your username together with a password of your choice for authentication and authorization purposes. This information will be used to uniquely connect your account and purchases with you, your device, and your usage, and for account authentication and security purposes. Upon your consent, your email address will also be used to send you information, updates, and newsletters about our Services.

Purpose: We use your account information to assign an account to you, secure your access to your account, manage your installations and purchases of license activity, and provide you with access to your account and the ability to manage it directly.

Retention: We retain account information for as long as you are a User of the Product, and so long as the Account Information is required to provide you with the Services or process your payments, billing, complete a transaction, or as otherwise required by any applicable law. If billing is involved, we may retain such data for up to seven (7) years from the billing event, as required by applicable tax laws.

04. Purchasing a product license.

If you wish to purchase a product license from us, you will be asked to provide your contact information, such as your full name, email address, billing information, shipping information (if relevant), and any other purchase-related information, in order to process your purchase, issue a license key for you, contact you in case of support necessity if an issue arises, and to protect the access to your account and purchased Product licenses. We also use this information to deliver purchase confirmations, notifications, download links, activation keys, support and product notices, and other Product-related needs.

Upon your requested payment method, certain payment information may be further processed ("Payment Information"). Please note that depending on the product you purchase and the payment method you select, your Payment Information will be collected either by our own payment processing services or by our third-party payment processors. Payment Information is collected and processed by a PC Care Plus Affiliated Company that provides billing and payment processing services on our behalf. Therefore, Payment Information will be collected and stored in its secure facilities, certified with the strict PCI DSS certificate, and its privacy policy will be made available from the checkout page, and here.

If you purchase a license via a mobile application store, the relevant store will process your payment directly. Your payment information will be used to charge you for the product by our affiliated payment processing services or by our third-party payment processors.

Purpose: We use this information to process your order, to deliver the Product you ordered, whether physically or by sending you your license key directly to your email address, to manage your purchase and the license key as per your selected type of subscription, and to protect the access to your account and purchased Product licenses.

We also use this information based on your consent and sometimes for our legitimate interest of assigning you a license key based on your specific type of subscription and to the specific type of device you associated with the license key. We associate your license key with your email address and device information. If we learn that it is necessary to prevent fraud and abusive conduct, we may add additional data to it. Upon your consent, your email address will also be used to send you information, updates, and newsletters about our services.

In case there is an issue with your order, one of our representatives will use the contact details you submitted to reach you by email or phone.

Retention: We retain this information for as long as your license key is valid, and may sometimes retain it for longer periods when applicable laws require (for instance, payment information), or if you did not withdraw your consent to share information with you via certain contact details you submitted to us.

05. Contacting us/Support.

When you choose to contact us, we will process your inquiry details and content, including your contact details, in order to address such inquiries you have submitted to us. If you contact us for support, feedback, or other inquiries, either through an online form available on our Websites, by sending us an email, or by other means of communication we make available (such as by phone or submitting a bug report or filling in a survey), you will be requested to provide us with your name and email address (or other contact information, as the case may be and depending on how you want us to contact you back), and the subject matter of your inquiry.

Purpose: We use this information, based on your consent and our legitimate interest, for the purpose for which it was provided, including responding to your inquiry and providing you with the support or information you have requested, monitoring status, and for ticketing and recording purposes. This includes addressing any "Help and Support" ticket or chat you submit to us via the Websites or Services.

Retention: We retain such information for as long as needed to provide you with the inquiry requested or as required under applicable law. We may use third-party services (such as ZenDesk or Upclick) to help us provide this service. Hence, your data will be shared with them only for processing, tracking, and addressing your request.

06. Business customer information.

If you are a business partner, or potential business partner, we may store certain contact information and job title information about you in our CRM systems. This may include full name, work title, work email address, and the name of the company in which or for which you work, website URL, phone number, and country.

Purpose: We retain and process this information for CRM purposes and business needs, based on your consent and our legitimate interest, that may have been provided to a third party that introduced your details to us. If we entered into a contract, then this will be the lawful basis.

Retention: We retain this information for as long as it is relevant for our business purposes, and, if we entered into a contract, then for as long as such contract is valid, relevant, and/or for as long as required by applicable local legislation.

07. Files and/or media uploading.

Certain Products (such as inPixio, for example) allow you to upload documents, files, or media ("your Content"). In the event that your Content includes any Personal Information, this information will be subject to your use and responsibility. We do not retain your Content, rather than any metadata required to operate, process, and support your use of the Product. As a rule of thumb, your Content is retained locally on your local storage.

Upon your choice and request, we may offer you a backup option or cloud storage. In this case, it will be encrypted, and we will have no access to your Content. In any case, we implemented technical and organizational measures to ensure, from our side, maximum protection for you while you are using our Websites or Services.

Purpose and Retention: Such type of data will be processed only to the extent necessary and for the time scope required to provide you with the Services, operate them, and secure them.

08. Browser and mobile permissions.

When you choose to install the Product on your mobile device or browser, we will ask for your approval (consent) of the permissions required for the Product you choose to install. For extended functionalities that we may offer from time to time, the operating system of your mobile, and its respective application store, will ask you from time to time to approve special permission (opt-in consent), such as access to your media files.

09. Job recruitment.

If you choose to apply for a job in one of our companies, you will be asked to submit a form and upload your CV file. In such case, your application information will be processed by ADP, LLC, our third-party service provider, which provides recruiting services on our behalf. For additional information, please see ADP's privacy policy.

Retention: We retain this information for as long as your application for a position is under review and/or for as long as required by applicable local legislation.

Information Automatically Processed

This category refers to means we use to improve our Customers’ and Visitor’s experience and our process performance for our Services.

When you access one of the Websites, download, install, or otherwise use a Product or otherwise use the Services, certain information about your actions in connection with the Services, your device, and website visitors may be processed in order to provide the Services, maintain them, understand User’s usage, improving them with further versions and features, supporting them and protecting them. This category includes one or more of the following:

01. Online Identifiers

When you access our websites or use the Products or Services, we may process one or more of the following online identifiers: the IP address that your internet provider assigned to your device and access to the web, cookies information as specified in our Cookie Policy. Like any other digital service, such information is available via your local storage and processed through cookies, pixel tags, and log files.

We use this information to learn about the usage of the Websites, and the features we offer, and to extract analytics and statistics over time. In certain cases, and when a Visitor becomes a User, we may generate a dedicated random User ID to help us avoid providing redundant Services and offers.

This processing of local storage data and online identifiers is subject to your consent which is obtained through the cookie consent notification displayed on our websites, in which you can accept, decline, or set your preferences (with the exception of strictly necessary cookies). We provide full disclosure in our cookie policy and information about the type of cookies used, and how and why we use them. Please note that necessary cookies will be used as part of our legitimate interest and for purposes of Websites’ functionality.

Purposes: The use of Online Identifiers serves one or more of the following purposes: (i) As part of our legitimate interest, we use certain online information for analytics and statistical purposes when we want to learn how Visitors and Users use our Websites and Services, and when we want our Services to be responsive to Users’ and Visitors’ actions. (ii) We also use IP addresses many times as part of our legitimate interest to monitor, detect and prevent fraud or any automated non-human actions across our Websites and Services. The IP address also serves our legitimate interest to learn the country from which you access the Services and make sure we serve the Products and Services in the right language and in compliance with the jurisdiction in which we offer our Products and Services. (iii) In certain cases, and upon your consent, third-party cookies and tags will be used for advertising and marketing purposes of our Products and Services, including by using retargeting. See further explanation under ‘Third Party Services’.

Retention: The retention periods of each of the information mentioned in this section are different. You may visit the Cookie Policy available per website to learn about each cookie’s or web technology’s retention and expiry term. Otherwise, we retain online information for as long as necessary to achieve the purpose for which it is processed, to begin with, or, until we make it Non-Personal Information, in which case, we reserve the right to retain the information without any time limitation, based on our discretion and commercial necessities.

02. Device Information

We may collect certain information about the device from which you access the Websites, use Products, and Services, such as user-agent (that includes the browser type and version, IP address, operating system type, and version), device type (mobile/desktop), type and version of your operating system, your MAC address, the language you use on your device, and, when you choose to purchase a license to more than one device, we associate your license key and user ID with your email address and device information.

Purposes: Based on your consent, and in certain cases, our legitimate interest, we may process device information for one or more of the following purposes: (i) Product’s compatibility purposes, to the right device type, the relevant operating system’s version, and features. (ii) Offering additional Services or features specifically designed for your device type, for instance, mobile vs. desktop. (iii) To associate a license key issued to you with the device on which you install the Product. (iv) The Products’ core functionality is to help you manage your device’s space and optimize your ability to use it. In that case, as part of the Product’s functionality and based on our legitimate interest we will access certain device information that is required to provide, maintain, and support such functionality.

Retention: We retain device information for as long as necessary to provide the Product’s functionality, to maintain a record of your license key and usage of the product, and to associate license terms and renewals.

03. Online Activity

We also process certain online activity information from Visitors, for example, if you click an advertisement of our Product, we will get the source URL in which you click the advertisement, or, by using third-party services (such as retargeting), we may offer to you one or more of our Products when you visit other websites. Under this category, we may also capture your clicks on buttons in log files across our Websites or online Services, if provided, as described under the category of ‘Online Identifiers’.

Purpose: We use this information for the following purposes: (i) Based on your consent for advertising, marketing, and retargeting of our Products and Services. (ii) Based on our legitimate interest – to make the Website, Products, and Services responsive and functional, to measure and calculate our payments to advertisers and to monitor and prevent ad fraud concerning our Products and Services.

04. Installation Reports

When you install one or more of our Products, our server may receive some information about your systems such as the type of your Operating System, version, language, timestamp of installation and the IP address that your internet service provider allocates to your computer, for purposes of ensuring that the device and installation are real and not fraudulent and to ensure that the device is one that was not already installed the same product before (anti-fraud purposes). We need this data so we can serve the installed file, operate it and ensure compatibility.

Purpose: This information is collected for purposes of enabling the installation of the Product, recording it in our systems, being able to serve you with the Services via our servers when you use the Product, and tracking and making sure that the device and installation are real and not fraudulent. We also need this data so we can serve the installed file, operate it and ensure compatibility.

Retention: We retain this information for as long as the Product is installed on your device, and sometimes a bit longer afterward if we believe in our discretion that your device and any associated installation are associated with fraudulent installations or any other malicious usage of our Services.

Information Automatically Processed

This category refers to means we use to improve our Customers’ and Visitor’s experience and our process performance for our Services.

When you access one of the Websites, download, install or otherwise use a Product or otherwise use the Services, certain information about your actions in connection with the Services, your device, and website visitors may be processed in order to provide the Services, maintain them, understand User’s usage, improving them with further versions and features, supporting them and protecting them. This category includes one or more of the following:

01. Online Identifiers

Purposes: The use of Online Identifiers serves one or more of the following purposes:

(i) As part of our legitimate interest, we use certain online information for analytics and statistical purposes when we want to learn how Visitors and Users use our Websites and Services, and when we want our Services to be responsive to Users’ and Visitors’ actions.
(ii) We also use IP addresses many times as part of our legitimate interest to monitor, detect and prevent fraud or any automated non-human actions across our Websites and Services. The IP address also serves our legitimate interest to learn the country from which you access the Services and make sure we serve the Products and Services in the right language and in compliance with the jurisdiction in which we offer our Products and Services.
(iii) In certain cases, and upon your consent, third-party cookies and tags will be used for advertising and marketing purposes of our Products and Services, including by using retargeting. See further explanation under ‘Third Party Services’.

02. Device Information

Purposes: Based on your consent, and in certain cases, our legitimate interest, we may process device information for one or more of the following purposes:

(i) Product’s compatibility purposes, to the right device type, the relevant operating system’s version, and features.
(ii) Offering additional Services or features specifically designed for your device type, for instance, mobile vs. desktop.
(iii) To associate a license key issued to you with the device on which you install the Product.
(iv) The Products’ core functionality is to help you manage your device’s space and optimize your ability to use it. In that case, as part of the Product’s functionality and based on our legitimate interest we will access certain device information that is required to provide, maintain, and support such functionality.

03. Online Activity

Purpose: We use this information for the following purposes:

(i) Based on your consent for advertising, marketing, and retargeting of our Products and Services.
(ii) Based on our legitimate interest – to make the Website, Products, and Services responsive and functional, to measure and calculate our payments to advertisers, and to monitor and prevent ad fraud concerning our Products and Services.

04. Installation Reports

05. Product Activity

We automatically record and process activities related to the Product’s usage and functionality to be responsive to them or allow you to revert certain actions you took.

06. Media Buying and Marketing Channels

We use digital media channels to market and advertise our Products and Services. When you land on our website as a result of clicking an ad, we will receive information about the source media from which you arrived at our Services. This information includes a referral URL (the URL from which you arrived at our Site) and your IP address and will be collected via tags and cookies. The purpose of processing this data is to know the marketing channel from which you arrived, measure and calculate purposes for the advertising, measure the effectiveness of a marketing channel and filter fraudulent actions associated with such marketing and advertising channels.

Information About You

This category refers to data we may receive from third parties concerning the Services we provide to you.

This category includes information you provided to third party and we may get access to it. this includes the following:

01. Billing Information

When you purchase a Product your payment and billing information is collected and processed by our payment processor vendor. In this case, we will get access to the order and billing information, however, we will not have any access to your credit card details.

02. Authentication and Social Media

When you open an account and/or sign up for the Services, you may have the option to use social or email authentication. In this case, again, we will have access to metadata (such as tokens), and upon your consent, your social media’s public profile.

03. Marketing

When we buy media and market our Products and Services, we may get certain online information about visitors from third-party media owners, such as Facebook or Google. This information does not personally identify you and is used to learn how successful (or not) our campaigns are.

Cookies and Web Technologies

A cookie is a small text file that is placed on the browser of the hard drive of your computer (or similar device) by websites you visit. Cookies are typically used in order to make websites function, or function more efficiently, as well as to provide information to the operator of the particular website. Cookies make your use of the Site and Services easier to use and improve their functionality. They are used to make the login process easier for our users, to allow the website to track which products you have added to your cart and your preferred country, language, and currency, and to track the website’s Visitor across the Site.

Some of the Services, features, and tools that are integrated into our Site and Services may use their own cookies to be able to function properly. To know more about our cookies and our 3rd party cookies, please refer to the cookie policy available from the website you browse. Please be aware that you may set your browser to refuse or block any cookies from us or our 3rd party partners. In this case, however, some of the Services may not properly function.

Purpose and How We Use Personal Information

We use your Personal Information for the purposes we described next to each data type above, and for the following purposes:

Providing our Services, supporting them, improving them, and securing them so as to better market and advertise them.
We use certain information to prevent fraud and fake installations.
Open an account for you, manage it and support it.

Lawful Basis for Processing Personal Information

In addition to the lawful basis mentioned next to each data category:

If you are a Customer, our lawful basis for processing your Personal Information is a contract or preparation for contractual engagement. Otherwise, we will process Personal Information based on your consent, if required by Applicable Laws, or legitimate interest when processed for such an interest. Otherwise, the lawful basis for data processing will depend on the Personal Information concerned and the specific context in which we collect it: (a) we normally process Personal Information where we have your consent to do so, for example, when you submit a form to us or open an account with us, or confirm our cookies usage; or, in certain cases (b) where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, such as when we use the data in order to provide the core Services, or when used for anti-fraud purposes.

In some cases, we may also have a legal obligation to collect Personal Information from you or may otherwise need the Personal Information to protect your vital interests or those of another person. If we ask you to provide Personal Information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Information is mandatory or not.

If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Data, including if you would like to better understand how our legitimate interests in processing your data are balanced against your data protection rights and freedoms, please contact us.

How We Share Personal Information

In order to provide, operate, maintain, serve and improve our Services, so as to be able to offer additional products and features further, we use third-party services. Such Services include payment processors, feedback features, support and ticketing systems, operational tools, analytics, statistical tools, and so forth.

This means that we may share Personal Information of Users with the following categories of third parties for the respective purposes:

01. Hosting Services and Storage Vendors: We use third-party hosting and storage services (including cloud storage) to host our Websites, and respective data and retain your Information. Such Processors may be based (and their servers may be located) anywhere in the world. We require each such Processor to maintain strict privacy protection and data security policies and ensure their compliance with applicable data protection laws. However, their practices and activities are fully governed by their own privacy policies.

02. Analytics, Business Intelligence, and Statistics Vendors: If you are a User and visiting our Sites, we may use analytics services to help us understand how Users interact with our Sites and Services.

03. Support and Customer Services: We may use, from time to time, support and help desk services to provide better and faster support, whether online or, when you contact customer support.

04. Authentication and Authorization Services: In cases where you open an account with us, we may integrate over time certain authentication services.

05. Payment Processors: When you choose to purchase one or more of our products, we may use payment processing services carrying strict security standards.

06. Customer Relations Management and Mailing Lists: If you are a Customer or a User, we may use services to manage and secure your Personal Information, or, manage subscriptions and notifications lists.

07. Technology Partners: Some of our products and Services may include third-party technologies, widgets, or features in order to enhance a product’s functionality and expand it to include more features for you. For example, WordPress.

08. Advertising and Retargeting Services: Some of our third-party services may collect non-identifiable information about your interaction with our Websites. Such information may be used by such third parties for serving and displaying ads and offers of the Site and/or content and services offered via the Site (“Ads”) when you browse other websites across the web (“Retargeting”). You will have the choice to opt-out at any time of such type of advertising, directly from the Ad when you encounter it, from the ad setting of the providing third-party services, or by following our opt-out instructions, which are available in our cookie policy.

09. Business Partners: who combine their technological features with us may have access to certain Personal Information about your usage, as collected from you. In these cases, you will always be able to check their privacy policies before using the combined services.

10. Our Affiliated Companies: We may disclose Personal Information to any current or future affiliated company, parent companies, or subsidiaries to process for the purposes described in this Policy. Affiliated companies are companies controlling, controlled by, or under common control with us, including, for example, INNFINITIX North America. However, data will not be shared with third parties for marketing or promotional purposes.

11. Legal Proceedings or Law Requirements: We may share your Personal Information with any third-party if we believe that disclosure of such information is helpful or reasonably necessary to: (a) comply with any Applicable Law, regulation, legal process, or governmental request; (b) enforce our license agreement, terms of service or this Policy, including investigations of potential violations thereof; (c) detect, prevent, or otherwise address fraud or security issues; and/or (d) protect against harm to the rights, property or safety of our companies, our affiliated entities, our users, yourself, and/or the public.

12. Merger, Sale, or Bankruptcy: In the event that we or one of our affiliated entities is acquired by, or merged with, a third-party entity or otherwise sells all or part of our/its assets, we may (and hereby reserve the right to) transfer or assign the Personal Information and other information we have collected or received. In such a case, we will require the acquiring entity to post its data practices and provide you with any of your rights as per the jurisdiction of your residency.

13. Special Cases: We may share information upon your consent or in fraud prevention or investigation cases. We may store Non-Personal and Personal Information on our servers or our cloud servers, use or share Non-Personal Information in any of the above circumstances, and provide and improve our Service as detailed above. Furthermore, we reserve the right to use, disclose or transfer (for business purposes or otherwise) aggregated and processed data to third parties, including, inter alia, affiliates, for various purposes, including commercial use. This information may be collected, processed, and analyzed by us and transferred in a combined, collectively, and aggregated manner (i.e., your information is immediately aggregated with other users) to third parties.

International transfers of data

We may transfer your Information (including Personal Information) outside the country in which it is collected or in which you reside (e.g., to the United Kingdom or the United States), including to a country that may not offer the same level of protection for Personal Information as of the country in which you reside. However, in which case we make sure to place all contractual safeguards (such as verification of an adequate level of protection measures, security certificates and other measures that help us assess the security level of a third-party service).

By providing Personal Information and using the Services, you expressly consent to the use of such information in accordance with this Privacy Policy and to the transfer of your Information to another country (including, the UK or the US).

Rights of Data Subjects

01. Privacy rights available to all Users

Depending on your country of residency and on the type of your use of our Products and Services, certain rights concerning your Personal Information may be available to you. If you are a Visitor of our Sites or a User of the Services, the following rights apply to you:

The right to know: you have the right to know about the Personal Information that is collected and processed about you, including the categories of third parties with which we may share your information. To accommodate this right, we made this Policy as detailed and transparent as possible, and we provide additional disclosures and notifications throughout the Services, in proximity to the Personal Information collection point.
The right to access: the Personal Information held about you.
The right to rectification: you have the right to ask us to correct the information we hold about you. When you manage an Account with us, you can access this option at any time directly from your account.
The right of erasure: you may ask us to delete certain Personal Information about you, or to stop using it. We can only do this when possible and as allowed by applicable laws. Sometimes we need your information to complete a transaction based on an action you made, comply with the law, or provide you with Products and Services.
Portability right: you may contact us to request an export of your Personal Information in a reusable format, or to directly transfer such data to another vendor offering related services.
The right to withdraw consent previously given: where you have given us your consent to use your Personal Information for a specific purpose, and in the absence of our legitimate interest or requirements by applicable law, you may decide to withdraw your consent and we will then stop using your information for that purpose.

02. Privacy rights for specific jurisdictions

In addition to the general rights outlined above, you may additionally refer to the region-specific rights related to your Personal Information.

03. Exercising your privacy rights

Please note, requests to exercise your rights must be verifiable to be processed.

Directly from your account: Most rights are exercisable and available directly from the account you have with us (such as edit, portability, and deletion request), or from their respective services and communications (such as unsubscription/opt-out etc.).
Form submission: you can complete this form and either submit it digitally or send it by email to contact@innfinitix.com.
Email: reaching out to us at: contact@innfinitix.com.
Post: by post to: INNFINITIX Software SAS, Immeuble Adamas, 2 rue Berthelot, CS 90142, P2414 COURBEVOIE CEDEX, France

Make sure to include sufficient information about the request, the related Service, and the Data Subject to allow us to verify you and your request and we will process your verifiable request within the timeframe indicated in the applicable regulation. Please note that when handling these requests, we may ask for additional information from you.

Please note that even if you unsubscribe from our service, we may still send you transactional emails related to purchases or product downloads, such as order confirmations, product notices, expiry notifications, bug-fix notifications, security alerts, compatibility notifications, or enhancements.

Please note that response times for exercising your rights may vary based on residency. Please refer to the Special Jurisdiction chapter for more information on response times in your region.

Information security

We implement organizational and technical measures to protect Customers' and Users' privacy and to protect their Personal Information, including, by using third-party services specializing in data security. We periodically review our information and data collection practices to ensure constant monitoring, we use third-party processing and serving services that implement various information security standards and certifications and we monitor and filter access to data when it comes to personnel in our organization. Such systems and procedures reduce the risk of security breaches, but they do not provide absolute security, as there is no such thing when it comes to the worldwide network. Therefore, we cannot guarantee that the Site and our servers are immune to unauthorized access to the information stored therein and to other information security risks. If you have any questions about the security of our Websites or Services, you can contact us at contact@innfinitix.com.

Highlights of our general Security Policy can be found here.

Children

The Services are not designed to attract children under the age of 16. Accordingly, we do not intend to collect Personal Information from anyone we know to be under 16. If we learn that we have collected Personal Information from a child under 16, we will use commercially reasonable efforts to delete that information as quickly as possible. If you believe that we might have any such information, please contact us at contact@innfinitix.com.

Contact information

If you have any inquiries regarding this Privacy Policy, don’t hesitate to contact us at: contact@innfinitix.com.

Special Jurisdictions: The EU, EEA and the UK

This statement applies to Data Subjects residing in the EU, EEA or the UK, and supplements the terms provided in the privacy statement.

Our general privacy statement was designed with the EU GDPR transparency requirements in mind. The following data subject rights will be available in addition to those described under the general statement:

Right to the restriction of processing: you may ask us to temporarily cease the processing of your Personal Information, or, only for a specific purpose or function. Please note that this too might cause us to not be able to provide you with the Products and Services or part thereof.
Objection to processing: You may request us to stop processing your Personal Information. Similar exceptions as mentioned above will apply to such a case as well.
Right to lodge a complaint: if you live in the EU, EEA or UK, you may lodge a complaint with the authority responsible for protecting Personal Information in your country of residence, if you believe that your rights have not been respected by us. In such a case, you are welcome to reach out to us first so we are able to help you with such a matter at: contact@innfinitix.com.

For any data protection-related matter, you may contact our group DPO at contact@innfinitix.com.

Special jurisdictions: California, USA

Last Updated: January 11, 2023

In compliance with CCPA, CPRA, CalOPPA

This statement applies to Data Subjects residing in California, USA, and supplements the terms provided in the general privacy statement.

The following rights related to your Personal Information are available to you in addition to those described under the general statement:

California Privacy Rights: Under California law, you may have the following rights:
- The right to know: You have the right to request certain information related to the collection, use, disclosure, and sale of your Personal Information.
- The right to access: You may request access to the specific pieces of Personal Information collected about you in the past 12 months.
- The right to deletion: You have the right to request the deletion of your Personal Information.
- The right to opt-out: You may opt out of the sale of your Personal Information. We do not sell your Personal Information.
Shine the Light: You may request a list of the third parties with whom we have shared your Personal Information for direct marketing purposes. We do not share your Personal Information for direct marketing purposes.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights under California law.

To exercise your California privacy rights, please contact us at: contact@innfinitix.com.

For more details about the elements in each category, please refer back to our Privacy Policy.

2. How we may share personal information

As a rule, we do not sell your personal information or share it for monetary gain. We do use advertising services of vendors such as Google, Facebook, Bing, and LinkedIn, which under California law may be considered data selling. If you wish to opt-out of this type of data selling (i.e., sharing of IP address and cookies information for targeted advertising), you can use the opt-out option available from the footer of the page labeled as "Do not sell my data."
We may share your personal information with a third party for a business purpose, including our affiliated companies. When we do so, we enter into a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have shared the following categories of personal information for business purposes:

Categories and Business Purpose

All categories

Our hosting, processing, infrastructure, and security service providers in order to provide, facilitate, process, and secure the Applications, the data, and the services.

Internet and network data

Service providers, web platforms, analytics services, and online marketing platforms.

Support and customer services

Support and help desk services.

Customer relations management and mailing list

Manage and secure your personal information, or manage subscriptions and notifications lists.

Business relations

CRM and mailing list platforms.

Contact information

Customer support services.

Billing information

Payment processing.

Advertising and retargeting services

Displaying and serving ads and offers.

Affiliated companies

We may need to disclose your data with our affiliated companies, parent companies, or subsidiaries to provide our services.

Technology partners that are integrated into products or websites

Widgets, or features in order to enhance a product’s functionality.

Cookies and certain online identifiers

Marketing and advertising of the Services, analytics, Website, and Services functionality.

Legal proceedings or law requirements

Complying with applicable laws, regulations, legal processes, or governmental requests.

Merger, sale, or bankruptcy

Due diligence according to structural changes.

Special cases

Such as fraud prevention or investigation.

3. Consumer privacy rights

Under the CPRA, you may exercise the following rights:

Access and data portability rights. You may request us to access certain information we may hold about you in the past 12 months. You may also ask us to provide it to you in a human-readable fashion (subject to exemptions). If you have an account with us, you can exercise your right directly via your account or make a request to us via the form available in the portal or via email to contact@innfinitix.com. Upon receipt of your verifiable request, and provided no exceptions apply, we will process the requested information. The right to access includes the following types of information (preceding 12 months):

The categories of personal information we collected about you.
The categories of sources for the personal information we collected about you.
Our business or other purposes for collecting that personal information.
The categories of third parties with whom we share that personal information.
The specific pieces of personal information we collected about you (also called a data portability request).
If we sold or shared your personal information for a business purpose.

You may only make such a request for access or data portability twice within a 12-month period.

Delete personal data. You have the right to request the deletion of personal information retained about you, subject to certain exceptions (see below). If you have an account with us, you can exercise your right directly via your account or make a request to us as described below. When applicable, once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with a customer/you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (CalOPPA) or any other applicable law.
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.
Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Rectify personal information. You have the right to request that we correct any inaccurate personal information that we have collected about you, including:
- The right to request that we delete any incomplete or inaccurate personal information that we have collected about you.
- The right to request that we provide a method to directly correct your personal information only if you have an online account and the information is reasonably available through the account.
Note: These rights to rectification only apply to the personal information we collected about you directly and do not apply to personal information that we received from a third party.

Opt-out of data selling or sharing. INNFINITIX is not in the business of selling, renting, or disclosing personal information to third parties for their direct marketing goals. However, you may request that we do not sell or share your data. To make such a request, please email us at contact@innfinitix.com.

4. How to exercise your consumer privacy rights

To exercise your rights, you may contact us via email at contact@innfinitix.com. You may also make a request through the online forms available on our website. We will require your email address or contact information to verify your identity.

5. Response Timing and Format

We strive to respond to a verifiable consumer request within 45 days of its receipt. If we require more time and meet the extension requirements defined by law, (up to 90 days), we will inform you of the reason and extension period in writing (electronically).
If you do not have an account with us, we will deliver our written response by email. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request if that is the case.
For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

6. Non-Discrimination

We will not discriminate against you for exercising any of your CPRA rights. Unless permitted by the CPRA or any other law, or due to your violations, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you with a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

7. Do not Track Signals (CalOPPA)

Do Not Track is a privacy preference that can be configured in certain web browsers (the “DNT Feature”); the DNT Feature, when enabled on a web browser, signals the websites you visit that you do not want certain information about your visit collected. Undertone does not currently respond or recognize DNT Feature signals.

8. Changes to this privacy statement

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you as per the notification mechanism described in our Privacy Policy, or, as otherwise required by applicable laws.

9. Contact info

If you have any questions or comments about this notice, our privacy statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at: contact@innfinitix.com.

Special jurisdictions: Canada

Last updated: July 16, 2023

About this statement

Complementing (however, do not substitute) the general Privacy Policy provided by INNFINITIX Software SAS (“INNFINITIX”) and its affiliated companies.

Scope and applicability

This statement applies to Data Subjects residing in Canada and is designed to comply with the Personal Information Protection and Electronic Documents Act (“PIPEDA”), and with the Quebec Privacy Legislation Modernization Act, also known as Law 25 (“Law 25”).

Terms and definitions

Any terms defined in the Privacy Policy have the same meaning when used in this notice. Any terms we use in this Canadian notice that are not defined will have the meaning we provide in the Privacy Policy or other agreements.

Collection of Personal Information

As described in our Privacy Policy, the following data categories are collected about you:

Identifiers (online and physical)
Online and network activity
Device information
Usage information
Payment and billing information
Marketing and advertising information
Customer support and customer relation information

For more details about the elements in each category, please refer back to our general Privacy Policy.

Use of Personal Information

We may use your personal information for one or more of the following purposes:

To provide products and services to you
To communicate with you about your orders and shipments
To improve our products and services
To personalize your experience on our website
To send you marketing communications.

Retention and disposal of personal information

In our general privacy policy, we explain the retention schedule of each personal data we collect. As a general rule, these are our data retention policies:

We retain personal data for as long as is required to establish the purpose for which it was collected.
We retain personal data beyond such a period when applicable legislation requires us to do so (for example, tax, labor, and so forth).
We may retain personal data for a longer period when we want to develop and improve our products and services over time. Depending on the nature, type and scope of such data, we may employ pseudo-anonymization measures to safeguard longer retention periods of such data.
Account and subscription information is retained until a valid and verified required for deletion is processed.
Subject to exemptions, we delete personal data in the following circumstances:
- Valid and verifiable request to delete.
- No longer necessary to serve the purpose for which it was obtained or to comply with legal requirements.
- If we discover it was unlawfully processed (for example, minors, or if a valid consent was not obtained).

Third parties and data transfers

As part of INNFINITIX's global operations, we share data with third parties, as described in our general privacy policy. This includes parties residing outside of Quebec and/or Canada. The following are categories of third parties with whom we share personal data. You have the right to request to know the name of a specific third party or the names under each category.

INNFINITIX affiliated companies (such as subsidiaries and parent companies)
Hosting services and storage vendors (such as Microsoft, Google and Amazon Web Services)
Analytics, business intelligence and statistics vendors (such as Google Analytics)
Support and customer services (such as ZenDesk)
Compliance vendors (such as OneTrust)
Customer relations management and mailing list (Such as Probance)
Billing and payment solutions (such as Upclick)
Advertising and marketing services (such as Google Adwords, Adsense, Facebook, Linkedin)
Technology partners that are integrated into Products or Websites (such as Chip.de and other features)
Special cases (fraud prevention or investigation)

For more details about third-party data disclosures, please refer back to our general Privacy Policy or contact our DPO at contact@innfinitix.com.

Your rights

Subject to certain exemptions provided by law, you may request to exercise one or more of the following rights:

Right to Access
Right to Correction
Right to Deletion
Right to Restriction of Processing
Right to Data Portability
Right to Object to Processing
Right to Complain

For more details about each of these rights and how to exercise them, please refer back to our general Privacy Policy or contact us at contact@innfinitix.com.

Additional Information

We make every effort to provide a high standard of protection for your personal data, including processing in compliance with our policies. Our goal is to be transparent about how we process and handle your data, and to provide you with the means to manage your privacy.