Effective date: April 6, 2022
Last Revised: May 17, 2022
Categories of Personal Data We Collect
This chart details the categories of Personal Data that we collect and have collected over the past 12 months:
Categories of Sources of Personal Data
We collect Personal Data about you from the following categories of sources:
How We Use Your Personal Data
Gatsby does not sell or share your personal data with Third Party Data Processors, unless through a Third Party such as a CRM that your Organization has specifically connected to your Gatsby instance.
Gatsby app's use of information received, and the app's transfer of information to any other app, from Google APIs, will adhere to Google API Services User Data Policy, including Limited Use Requirements.
This data will be read by humans only in the following cases:
Our Commercial or Business Purposes for Collecting Personal Data
The ways in which we may use your Information are as follows:
Providing, Customizing and Improving the Services
Marketing the Services
Corresponding with You
Meeting Legal Requirements and Enforcing Legal Terms
We may associate this information with your account (if you have a registered account), the device you use to access the Services, or email that you use to engage with Gatsby.
How We Share Your Personal Data
We disclose your Personal Data to the categories of service providers and other parties listed in this section. [Depending on state laws that may be applicable to you, some of these disclosures may constitute a “sale” of your Personal Data.] For more information, please refer to the state-specific sections below.
These parties help us provide the Services or perform business functions on our behalf. They include:
Parties You Authorize, Access or Authenticate
[If you are a contact of a Gatsby customer and/or a contact of a Gatsby customer's end users or employees, we may disclose Professional or Employment-Related Data that we collect about you from third-party vendors, to such customer in connection with our provision of certain services.]
We may share any Personal Data that we collect with third parties in conjunction with any of the activities set forth under “Meeting Legal Requirements and Enforcing Legal Terms” in the “Our Commercial or Business Purposes for Collecting Personal Data” section above.
All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.
Affiliates and Professional Advisers
We may share any Personal Data that we collect with our affiliates or otherwise within our corporate group, and professional advisors, such as auditors, law firms, or accounting firms.
Tracking Tools, Advertising and Opt-Out
You can decide whether or not to accept Cookies through your internet browser's settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Services and functionalities may not work.
To explore what Cookie settings are available to you, look in the “preferences” or “options” section of your browser's menu.
Third Party Website and Links
Please be aware that, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee the security of data that you share with us.
Gatsby encrypts all data at rest and transit and uses industry best practices to secure its systems. Gatsby's infrastructure is independently monitored by third parties and is undergoing SoC2 Type 2 compliance.
Personal Data of Children
We do not knowingly collect or solicit Personal Data about children under 13 years of age and, we expect our customers to avoid storing any information related to children under the age of 13 in our systems.
If we learn we have collected Personal Data from a child under 13 years of age, we will make commercially reasonable efforts to delete that information from our database. If you believe that a child under 13 years of age may have provided Personal Data to us, please contact us at firstname.lastname@example.org.
State Law Privacy Rights
California Resident Rights
Any California residents under the age of eighteen (18) who have registered to use the Services, and who have posted Information in the publicly-viewable portion of the Services, can request that such Information be removed from the Services by contacting us at email@example.com. We will make reasonable good faith efforts to remove the Information from prospective public view or anonymize it so the minor cannot be individually identified. This removal process cannot ensure complete or comprehensive removal. For instance, third-parties may have republished the Information and archived copies of it may be stored by search engines and others that we do not control.
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties' direct marketing purposes. If this law applies to you and you wish to obtain further information about our sharing, you may make one request each year by contacting us at firstname.lastname@example.org.
Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across different websites. Our Services do not support Do Not Track requests at this time. To find out more about “Do Not Track,” you can visit www.allaboutdnt.com.
Nevada Resident Rights
[If you are a resident of Nevada, you have the right to opt-out of the sale (as defined by N.R.S. 603A) of certain Personal Data to third parties who intend to license or sell that Personal Data. We do not “sell” your Personal Data as defined by N.R.S. 603A; however, if you would like to make such a request you may do so by contacting us at email@example.com.]
You can find the list of Gatsby Subprocessors here
Transfers of Personal Data
The Services are hosted and operated in the United States (“U.S.”) through Gatsby and its service providers, and if you do not reside in the U.S., laws in the U.S. may differ from the laws where you reside. By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party you integrated Gatsby to, is being provided to Gatsby in the U.S. and will be hosted on U.S. servers, and you authorize Gatsby to transfer, store and process your information to and in the U.S., and possibly other countries.