Privacy Policy – Castle

1. Introduction

Castle Intelligence, Inc. ("Castle", "we" or "us") helps online businesses (our "Clients") detect and address user account compromise and other malicious behavior in web, mobile and API applications ("Applications"). To do so, we collect information about how Internet users ("Users") interact with our Clients’ Applications.

This Policy is incorporated by reference into the Castle Terms of Service (the "Terms"). All terms not defined in this Policy will have the meanings set forth in the Terms.

2. Purpose and Scope

This Policy tells you how we use and protect personal information collected through use of the "Services", defined as our website(s) and our products and services, including the Castle Service.

This Policy covers only information that is collected by us in the course of our business, including through the Services and with respect to the people we employ and manage. It does not apply to other web sites, products or services that may be linked to or available via the Services or used in association therewith; nor does this Policy apply to practices of companies that we do not control or to people we do not employ or manage. Except as otherwise expressly included in this Policy, this document addresses only the use and disclosure of information we collect from you.

All individuals whose responsibilities include the Processing of Personal Information on behalf of Castle are expected to protect that data by adherence to this Policy. This Policy is intended to meet requirements globally, including those in North America, Europe, APAC, and other jurisdictions.

You expressly consent to our collection, storage, use and disclosure of your personal and non-personal information as described in this Policy and to all other terms herein.

3. Transparency/Notice: Types of Personal Information we collect and use

The types of Personal Information we may collect (directly from you or from Third-Party sources) and our privacy practices depend on the nature of the relationship you have with Castle and the requirements of applicable law. Some of the ways that Castle may collect Personal Information include:

• You may provide Personal Information directly to Castle through interacting with the Services, participating in surveys or contests, and requesting Services or information.
• As you navigate the Services, certain passive information may also be collected about your visit, including through cookies and similar technologies as described below.

We endeavor to collect only that information which is relevant for the purposes of Processing. Below are the ways we collect Personal Information and how we use it:

3.1 Types of Personal Information we collect

Castle collects Personal Information regarding its current, prospective, and former Employees, clients, customers, Users, visitors, and guests (collectively "Individuals").

• Communications with Us. We may collect Personal Information from you such as email address, phone number or mailing address when you choose to request information about our Services, register for Castle’s newsletter, request customer or technical support, or otherwise communicate with us.

• Surveys. From time to time, we may contact you to participate in online surveys. If you do participate, you may be asked to provide certain information which may include Personal Information. All information collected from your participation in our surveys is provided by you voluntarily. We may use such information to improve our products, Sites and/or services.

• Posting on the Site. Castle may offer publicly accessible blogs, private messages, or community forums. You should be aware that, when you disclose information about yourself on Castle’s blogs and forums, the Site will collect the information you provide in such submissions.

• Registration for Sweepstakes or Contests. Occasionally, Castle may run sweepstakes and contests. We ask those who enter in the sweepstakes or contests to provide contact information (e.g., an e-mail address).

• Automatic Data Collection. We may collect certain information automatically through our Services or other methods of web analysis, such as your Internet protocol (IP) address, cookie identifiers, and other device identifiers.

• Information Submitted Via Services. You agree that Castle is free to use the content of any communications submitted by you via the Services, including any ideas, inventions, and concepts.

• Information from Other Sources. We may receive information about you from other sources, including through Third-Party services.

3.1.1 Information about Clients

• Name and identity, email address, physical and virtual contact information, professional information, and financial information.
• Information responsive to surveys or requested information about our business, products or services.

3.1.2 Information about Users

Castle may have access to Personal Information about Users in the course of providing its Services to a Client. We consider User Data to be confidential and do not use such data for any purpose other than to provide the Services to our Clients.

3.1.3 Information about prospective, current, and former Employees

• Information responsive to applications for employment, including: name, address, phone number, email, title, date of birth, and other identification numbers.

3.2 How we use Personal Information

We acquire, hold, use, and Process Personal Information for a variety of business purposes, including:

• To Provide Services or Information Requested.
• Administrative Purposes.
• Marketing Castle Products and Services.
• Research and Development.
• Direct Mail, Email and Outbound Telemarketing.
• Services via Mobile Devices.
• Anonymous and Aggregated Information Use.
• Other Uses.

3.3 Cookies, pixel tags/web beacons, analytics information, and interest-based advertising

We may use cookies, pixel tags, local storage, and other Technologies to automatically collect information.

3.4 Third-Party websites, social media platforms, and software development kits

The Site may contain links to other websites that are not controlled by us. We encourage our Users to read the privacy policies of each website they interact with.

3.5 Third-party Payment processing

Clients may purchase our Services through Third-Party applications, which may collect certain financial information to process a payment on behalf of Castle.

4. Human Resources Data

Castle collects Personal Information from current, prospective, and former Employees for various business purposes including Human Resources administration and communication.

5. Sharing Information/Onward Transfer

5.1 Information we share

We may share your personal information as described in this Policy.

5.2 Data Transfers

All Personal Information collected may be stored anywhere in the world. By providing information to Castle, you consent to the storage of your Personal Information.

6. Opt-out rights

6.1 General

You have the right to opt out of certain uses and disclosures of your Personal Information.

6.2 Email and telephone communications

If you receive an unwanted email from us, you can use the unsubscribe link in the email to opt-out.

6.3 Mobile devices

Castle may occasionally send you push notifications through mobile applications. You may opt-out of these notifications by changing settings on your mobile device.

7. Rights of access, rectification, erasure, and restriction

You may inquire as to whether Castle is Processing Personal Information about you, request access to Personal Information, and ask for corrections of inaccuracies.

8. Data retention

Castle retains the Personal Information for as long as you use our Services or as necessary to fulfill the purposes for which it was collected.

9. How we protect your information

We take steps to ensure that your information is treated securely and in accordance with this Policy.

10. International Users

10.1 Data Transfers

By using the Site, Castle will transfer data to the United States and other locations.

10.2 Privacy Concerns or Disputes

If you have a privacy or data use concern, please contact Castle directly.

11. Children

The Services are not directed to those under 13 years of age, and we do not knowingly collect personal information from children.

12. Redress/Compliance and accountability

If you have any questions about our privacy practices or this Policy, please contact Castle.

13. Other rights and important information

13.1 Changes to our Privacy Policy

Castle may modify or update this Privacy Policy from time to time.

13.2 California privacy rights

California law permits Users who are California residents to request information about our disclosures of their Personal Information.

14. Definitions

The following terms shall have the meanings set forth:

• "Agent" means any Third Party that Processes Personal Information for Castle.
• "Employee" refers to any current or former employee of Castle.
• "Personal Information" is any information relating to an identified or identifiable natural person.
• "Process" or "Processing" means any operation performed on Personal Information.
• "Third Party" is any legal entity other than the Individual or Castle.

15. Revision history