Your use of our Services indicates your acknowledgement of the practices described in this Policy.
This Policy applies to our “Services” which include our website at sendoutpost.com(including any subdomains or mobile versions our “Site”), our onlineplatform, andour mobile applications (our “App”).
Our Services allow customers who have entered into a subscription agreement with us (“Customers”) to use the Services, and designate users who are authorized to access the Services (“Authorized Users”). This Policy does not apply to our Customers, and they may use Personal Data accessed through the Services for their own purposes.
This Policy does not apply to information processed by third parties, for example, when you visit a third-party website or interact with third-party services, unless those parties collect or process information on our behalf. Similarly, we do not control the privacy practices of other users, investors, or other companies,or communications that happen outside of our Services (e.g. direct communications). Please review any relevant third-party privacy policies for more information.
Personal Data We Collect
In order to provide our Services, we may collect and process information that relates to identified or identifiable individuals (“Personal Data”). We collect and process the following categories of Personal Data (note, specific Personal Data elements are examples and may change):
|Identity Data:||Personal Data about you and your identity, such as your name, username, profile data, and other Personal Data you may provide when youregister for our Services or as part of a user or account profile.|
|Contact Data:||Identity Data used to contact an individual, e.g. email addressor phone number.|
|Biographical Data:||Data relating to employment/employer, professional qualifications or affiliations, experience, etc.|
|Commercial Data||Personal Data relating to youruse of the Service, including your transactions/purchases, e.g. credit usage, contact frequency, pricing, and other similar information.|
|Device/Network Data:||Personal Data relating to your device, browser, or application e.g. IP addresses, MAC addresses, application ID/AdID/IDFA, identifiers from cookies, session history and similar browsing metadata, and other data generated through applications and browsers, including via cookies and similar technologies.|
|User Content:||Personal Data included in content provided by users of the Service in a free-form or unstructured format, such as in a “contact us” box, free text field, in apresentation, file, or document, or in messages. This includes content provided by users in an outpost deck (“User Outpost”).|
How We Collect Personal Data
We collect Personal Data from various sources based on the context in which the Personal Data will be processed:
|You:||We collect Personal Data from you directly, for example, when you input information into an online form, sign up for a waiting list, register, or contact us directly.|
|Your Devices:||We may collect certain Personal Data automatically from your devices. For example, we collect Device/Network Data automatically using cookies and similar technologies when you use our Services, access our Sites, or when you open our marketing communications.|
|Service Providers:||We receive Personal Data from third parties with whom we have a relationship in connection with a relevant transaction, or who collect information on our behalf.|
|Data we create or infer:||We (or third parties operating on our behalf) create and infer Personal Data (such as Inference Data) based on our observations or analysis of other Personal Data we process, and we may correlate this data with other data we process about you.|
How we Process Personal Data
We process Personal Data in a variety of contexts for certain purposes, as well as for the specific business purposes described below.
If register and create an account to use our Service, we will process Identity Data, Biographical Data, and Contact Data in connection with the creation, operation, and maintenance of that account. We may also collect certain User Content and from you, for example, as necessary to create Outposts and other user profile elements.We primarily use this Identity Data, Contact Data, and User Content as necessary to create, maintain, and provide you with important information about your account, and to otherwise provide the services and features you request.
We generally process Identity Data, Biographical Data, Contact Data, Commercial Data, and Device/Network Data when you use our Service. We generally use this as necessary to create, maintain, and provide your account and the services/features you request. For example, we may use this information to log you in, authenticate your access, and provide you with the Service.
We process and share Identity Data,Biographical Data, Contact Data, Device/Network Data, Inference Data, and User Contentin your business and investor profile in order to provide our Service.In addition, we may analyze this data to match you with prospective startups/investors. Certain information (such as Contact Data) is only shared between users when the parties ‘match’ on the platform. Further, certain information may not be available to certain users, depending on your privacy settings, your relationship to the other user, and prior interactions, and other similar factors. For example, if an investor or startup declines interest in your investor or startup profile, we do not make Contact Data available to that party or allow the parties to communicate through the Service, and we may restrict what information about each partyis available to other user.
Our Service may allow you to message or correspond with other users. When you use this feature, we will collect additional Device/Network Data and similar metadata in order to deliver the message and as part of our security operations. Any Personal Data or User Content you provide in a message may be made available to the party to whom the message is sent.
We may collect Financial Data, Identity Data, Commercial Data and Contact Datain connection with the billing and payment for our Services, or when you provide us with a credit card or other accepted method for payment. We primarily use this information as necessary to processing the billing and payment transaction, or to contact you regarding the transaction.
We may process Identity Data, Biographical Data, Device/Network Data and Contact Data in connection with email marketing communications (such as promotional emails), which you might receive if you register for an account, choose to receive marketing communications, or engage in a transaction allowing us to send you those marketing communications. We may also automatically collect Device/Network Data when you open or interact with those marketing communications.
When you contact us though the Site using a contact us box, through our chat, or via email, we process Personal Data such as Identity Data, Device/Network Data, and any Personal Data contained within any User Content. We use Identity Data, Contact Data, and User Content as necessary to communicate with you about the subject matter of your request and related matters. We may use third party service providers who provide these services and collect data on our behalf.
We, and certain third parties, automatically collect and process Identity Data, Contact Data, and Device/Network Data when you interact with cookies and similar technologies on our Services. We may receive this datafrom third parties to the extent allowed by the applicable partner. Please note that the privacy policies of third parties may also apply to these technologies and the Personal Data collected through them.
Subject to your rights & choices, we may use this information as follows:
(i) for “essential” or “functional” purposes, such as to enable certain features of the Services, or keeping you logged in during your session;
(ii) for “analytics” and “personalization” purposes, consistent with our business interest in how the Services are used or perform, how users engage with and navigate through our Service, what sites users visit before visiting the Service, how often they visit the Service, and other similar information, and modify the appearance of the Service to usage history, tailor the Service based on geographic location, and understand characteristics of users in various technical and geographic contexts; and
(iii) for “retargeting” or similar advertising purposes on our Site, so that you can see advertisements from us on other websites. These technologies and the data they collect, may be used by advertisers to deliver ads that are more relevant to you based on content you have viewed, including content on our Sites. These tracking technologies may also help prevent you from seeing the same advertisements too many times and help us understand whether you have interacted with or viewed ads we’ve delivered to you. This data collection may take place both on our Sites, as well as and on third-party websites that participate in the ad network (e.g. including as part of advertisements delivered by that ad network on a third-party website).
Note: Some of these technologies can be used to identify you across platforms, devices, sites, and services.
Business Purposes of Processing
In addition to the processing described above, we generally process Personal Data for several common purposes in connection with our business. For example, we process your Personal Data:
We process any Personal Data as is necessary to provide the Services, and as otherwise necessary to fulfill our obligations to you, e.g. to provide you with the information, features, and services you request.
We process certain Personal Data as necessary in connection with our legitimate business interest in personalizing our Services, including analyzing Personal Data to identify potential suggested connections between investors and startups. For example, aspects of the Services may be customized to you so that it displays your organization’s name and relevant information. We may also customize content to reflect your display preferences, to show you features or data relevant to you, or other similar functionality.
We may use any Personal Data we process through our Services as necessary in connection with our improvement of the design of our Services, understanding how are Services are used or function, for customer service purposes, in connection with the creation and analysis of logs and metadata relating to service use, and for ensuring the security and stability of the Services. Additionally, we may use Personal Data to understand what parts of our Service are most relevant to users, how users interact with various aspects of our Services, how our Services perform or fail to perform, etc., or we may analyze use of the Services to determine if there are specific activities that might indicate an information security risk to the Services or our Users.
We process Personal Data as necessary in connection with our creation of aggregate analytics relating to how our Services are used, company and investment trends, to understand how our service performs,and to create other reports regarding the use of our Services, demographics of our users, and other similar information and metrics. The resulting aggregate data will not contain information from which an individual may be readily identified. This processing is subject to users' rights and choices.
Note that we may, without your consent or further notice to you, and to the extent required or permitted by law, process any Personal Data subject to this Policy for purposes determined to be in the public interest or otherwise required by law. For example, we may process information as necessary to fulfil our legal obligations, to protect the vital interests of any individuals, or otherwise in the public interest or as required by a public authority. Please see the data sharing section for more information about how we disclose Personal Data in extraordinary circumstances.
If we process Personal Data in connection with our Services in a way not described in this Policy, this Policy will still apply generally (e.g. with respect to users' rights and choices) unless otherwise stated when you provide it.
Information we collect may be shared with a variety of parties, depending upon the purpose for and context in which that information was provided. We generally transfer data to the categories of recipients or in connection with specific business purposes, each described below.
Outpost is designed to connect startups and investors. The information we share varies based on your choices (e.g. in the settings menu), the information you provide, and whether you have declined or indicated interest in the other user’s investment or business. Basic company information may be made publicly available. When you make your User Outpost “searchable” your User Outpost (and any Personal Data in it) may be made publicly available to other users. If your User Outpost is not “searchable”, then your User Outpost will be shared with other users when you and the other User have each indicated interest in viewing your User Outpost. If, after viewing a User Outpost, you and another User each indicate interest in connecting, Outpost will send an introductory email to both parties that includes relevant Identity Information and Contact Data.
In addition, we may make certain information available to specific users if you use any other feature we offer that where you authorize us to share information with that party.
Note, if you decline interest in meeting a startup or investor, you may not be able to correspond with that party. Other Authorized Users may decline interest on behalf of organizations. If a startup raises a new round, or an investor starts or moves to a new fund, your selections may reset, and your priorindication of interest (and whether not to contact/be contacted by) will expire.
In connection with our general business operations, product/service improvements, to enable certain features, and in connection with our other lawful business interests, we may share Personal Data with service providers or subprocessors who provide certain services or process data on our behalf. For example, we may disclose information as part of our own internal operations, with vendors such as cloud-hosting providers, CRM providers, code management platforms, payment processors, IT security vendors, and other utilities or functions.
We may process certain data on behalf of our Customers, and we may share certain Personal Data with Customers to the extent such information was provided to us for processing on our Customer’s behalf, or in the event the Customer has a legitimate business purpose for receiving the information. For example, Authorized User account information (for example name and email) may be made available to the relevant Customer as necessary to document a Customer’s use of the Service, or as appropriate to ensure the security of Customer accounts. We may also share Commercial Data relating to Authorized Users’ use of the Service with Customer and account administrators. Additionally, our Customers may designate third party recipients to access certain Personal Data, and we will share Personal Data with users authorized by Customer administrators.
Your Personal Data may be processed in the event that we go through a business transition, such as a merger, acquisition, liquidation, or sale of all or a portion of our assets. For example, Personal Data may be part of the assets transferred, or may be disclosed (subject to confidentiality restrictions) during the due diligence process for a potential transaction.
In order to streamline certain business operationsand develop products and services that better meet the interests and needs of our customers, and for other permitted purposes, we may share your Personal Data with any of our current or future affiliated entities, subsidiaries, and parent companies.
Applicable law may grant you rights in your Personal Data. These rights vary based on your location, state/country of residence, and may be limited by or subject to our exemptions for certain laws, or other individuals’ rights. You may submit requests to exercise rights you have by contacting us at email@example.com.
All rights requests must be verified to ensure that the individual making the request is authorized to make that request, to reduce fraud, and to ensure the security of your Personal Data. We may require that you log in to your account or verify that you have access to your account or the email on file in order to verify your identity. If an agent is submitting the request on your behalf, we reserve the right to validate the agent’s authority to act on your behalf.
For information regarding your California Privacy Rights (if you are aCalifornia resident), please see below.
You may have the following choices regarding the Personal Data we process, to the extent required under applicable law:
|Consent:||If you consent to processing, you may withdraw your consent at any time. You may be required to close your account in order to withdraw consent where your consent is necessary to perform essential aspects of our Services.|
|Direct Marketing:||You have the choice to opt-out of or withdraw your consent to marketing communications. You may have a legal right not to receive such messages in certain circumstances, in which case, you will only receive direct marketing communications if you consent. You may exercise your choice via the links in our communications or by contacting us re: direct marketing.|
|Other Processing:||You may have the right under applicable law to object to our processing of your Personal Data for certain purposes, including without limitation, situations where we process in accordance with our business interests. You may do so by contacting us re: data rights requests. Note that we may not be required to cease processing based solely on your objection.|
We implement and maintain reasonable security measures to safeguard the Personal Data you provide us. However, we sometimes share Personal Data with third parties as noted above, and though we may enter contracts to help ensure security, we do control third parties’ security processes. We do not warrant perfect security and we do not provide any guarantee that your Personal Data or any other information you provide us will remain secure.
We retain information for so long as it, in our discretion, remains relevant to its authorized processing purpose, and in any event, for so long as is required by law. We will review retention periods periodically and may sometimes pseudonymize or anonymize data held for longer periods, if appropriate.
Our Services are neither directed at nor intended for use by minors under the age of majority in the relevant jurisdiction. Further, we do not knowingly collect Personal Data from such individuals. If we learn that we have inadvertently done so, we will promptly delete it.
Under the California Consumer Privacy Act (“CCPA”) and other California laws, California residents may have the following rights, subject to your submission of an appropriately verified request (see below for verification requirements):
Right to Know
You may have the right to request any of following, for the 12 month period preceding your request: (1) the categories of Personal Data we have collected about you, or that we have sold, or disclosed for a commercial purpose; (2) the categories of sources from which your Personal Data was collected; (3) the business or commercial purpose for which we collected or sold your Personal Data; (4) the categories of third parties to whom we have sold your Personal Data, or disclosed it for a business purpose; and (5) the specific pieces of Personal Data we have collected about you.
Right to Delete
You may have the right to have us delete (or deidentify) certain Personal Data that we hold about you, subject to exceptions under applicable law.
Right to Non-Discrimination
You may have the right to not to receive discriminatory treatment as a result of your exercise of any rights conferred by the CCPA.
You may request a list of Personal Data we have disclosed about you to third parties for direct marketing purposes (if any) during the preceding calendar year.
Opt-Out of Sale
At this time, we do not sell Personal Data.If we engage in sales of Personal Data in the future (as defined by applicable law), you may direct us to stop selling or disclosing Personal Data to third parties for commercial purposes.
Submission of Rights Requests
You may submit requests, via at firstname.lastname@example.org. See below for information regarding information that you must submit to verify your identity.
Verification of Rights Requests
All rights requests must be verified to ensure that the individual making the request is authorized to make that request, to reduce fraud, and to ensure the security of your Personal Data. We may require that you provide the email address we have on file for you (and verify that you can access that email account) and we may request additional information such as an address, phone number, or other data we have on file, in order to verify your identity. Depending on the sensitivity of the Personal Data you request and what type of request you submit, we may request additional information from you. If an agent is submitting the request on your behalf, we reserve the right to validate the agent’s authority to act on your behalf.
Supplemental Data Processing Disclosures
Categories of Personal Data Disclosed for Business Purposes
For purposes of the CCPA, we may disclose to Service Providers for “business purposes” the following categories of Personal Data: Identity Data, Contact Data, Commercial Data, Device/Network Data, Biographical Data, and User Content.
For purposes of the CCPA, we do not “sell” your Personal Data.
Right to Know
|Category of Data||Category of Sources||Business and Commercial Purposes||Category of Recipients|
|Identity Data||Data you provide to us; Data collected automatically; Data we receive from others||Service Provision and Contractual Obligations; Internal Processes and Service Improvement; Aggregate Analytics; Marketing Communications; Compliance, Health, Safety & Public Interest; Other Processing||Other Users (in some cases);Customers; Service Providers; Affiliates; Corporate Events; Legal Disclosures|
|Contact Data||Data you provide to us; Data we receive from others||Service Provision and Contractual Obligations; Internal Processes and Service Improvement; Aggregate Analytics; Marketing Communications; Compliance, Health, Safety & Public Interest; Other Processing||Other Users (in some cases); Customers; Service Providers; Affiliates; Corporate Events; Legal Disclosures|
|Commercial Data||Data you provide to us; Third parties||Service Provision and Contractual Obligations; Internal Processes and Service Improvement; Aggregate Analytics; Marketing Communications; Compliance, Health, Safety & Public Interest; Other Processing||Customers; Service Providers; Affiliates; Corporate Events; Legal Disclosures|
|Device/ Network Data||Data collected automatically; Data we receive from others||Customers; Service Providers; Affiliates; Corporate Events; Legal Disclosures|
|Biographical Data||Data you provide to us; Data we receive from others||Other Users (in some cases);Customers; Service Providers; Affiliates; Corporate Events; Legal Disclosures|
|User Content||Data you provide to us||Other Users (in some cases);Customers; Service Providers; Affiliates; Corporate Events; Legal Disclosures|
We may change this Policy from time to time. Please visit this page regularly so that you are aware of our latest updates. Your use of the Services following notice of any changes indicates acceptance of any changes.
Feel free to contact us with questions or concerns using the appropriate address below.
|Mailing address:||PO Box 1557, Boulder, CO 80306|