Last Updated: October 4, 2023.
CCPA and GDPR
Collection of Information
- We collect the Personal Information you give us when you register with the Site or use the Services, including name, address, credit card or bank information, and other Personal Information requested as part of your use of the Site or the Services, or the information you choose to give us when you use the Services.
- We collect Personal Information through your LinkedIn or Facebook account when you register with such account on our Site. This includes information on your professional background and experience.
- We collect and process special categories of Personal Information with your explicit consent. When you register, we will ask you to provide data regarding, age, race and ethnicity. You are not obliged to provide this information and you will still be able to use the Services if you do not provide this information.
- We may supplement or correct the Personal Information you submit to us with information in our other databases or information from third-party sources in order to reduce errors in our database, authenticate our users, prevent fraud and prevent abuse of our Site, as well as to provide more consistent, relevant experiences to our users.
Some Services may contain functionality that can enable us to access your location and tailor your experience based on your location ("Location-based Services"). We only process location data with your prior consent. To use Location-based Services, you must enable certain features of your mobile device (e.g., GPS, WiFi, or Bluetooth) to allow us to identify your location. To the extent your location is collected through Wi-Fi or Bluetooth sensors, such sensors, and the associated data services, may be provided by a third party that may access such information for the purpose of providing such data services to us. You may enable or disable such Location-based Services at any time on your device. If you choose to disable any Location-based Services on your device and/or opt out of any Location-based Services through the menu, you will not be able to utilize certain features of the Services. By enabling Location-based Services on your device, you agree and acknowledge that (i) device data we collect from you is directly relevant to your use of the Services, (ii) we may provide Location-based Services related to and based on your then-current location, and (iii) we may use any such information collected in connection with the provision of Location-based Services in providing the Services. PLEASE NOTE THAT LOCATION DATA MAY NOT ALWAYS BE ACCURATE, AND WE DISCLAIM ANY AND ALL WARRANTIES RELATED TO LOCATION-BASED SERVICES.
Subject to your separate consent, we may use your location to provide you with advertisements, offers, and other promotional content as part of the Services.
How Your Information is Used
Except as provided herein, we collect and use your personal and non-personal information for internal purposes only or for gathering aggregate and anonymized data. We may use your information in the following ways:
- To provide the Services, including sharing your personal data with our customers (legal basis: the processing is necessary for the performance of the contract between you and us). Our matching algorithm matches respondents with suitable research studies based on the personal information we process from you.
- To share data regarding race and ethnicity with our customers for the purposes of ensuring (i) you receive suitable requests for research studies and (ii) our customers reach the right target audience. We will only share data regarding race and ethnicity with your explicit consent, which we will ask when we first collect this information from you.
- To conduct routine business operations such as billing, identification, authentication, contact purposes and general research. As part of our routine business operations, we may transfer your Personal Information to certain third parties with whom we contract for the limited purpose of providing services such as web hosting, email, and credit card processing. These service providers qualify as processors within the meaning of the CCPA and the EU General Data Protection Regulation (GDPR) and are obligated to protect your information, and they do not use your Personal Information for their own commercial purposes. We have entered into written processor agreements with these services providers (legal basis: the processing is necessary for (i) the performance of the contract between you and us; and (ii) the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
- To employ internal marketing techniques such as tracking customer preferences to provide a customized Site experience and communicating with you about Services, special offers, and other services. This includes the use of Google Analytics (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
- To enhance the Services, including by providing proof to our customers that you have certain competencies, for example based on your LinkedIn profile (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
- To gather generic product, location and other contributed information to make reports based on aggregate anonymized data, which we may use internally, or which we may sell to others This processing is necessary for the purposes of our legitimate interests, which we have balanced against your interests and rights and freedoms. You are free to opt-out of these third-party disclosures, and we will honor all requests for opt-outs received at firstname.lastname@example.org to the extent that we can still differentiate and remove your personal information. Information that has been depersonalized and aggregated to the point where it is no longer attributable to you may not be removable from our disclosures to third parties.
- To use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
- To comply with court and governmental orders (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
- We may also ask your separate consent for additional ways to process your personal data, for example to provide you with advertisements, offers, and other promotional content, or when we want to process your location data (legal basis: your consent).
In order to improve our Products and the App and provide more convenient, relevant experiences to our users, we and our agents may use "cookies," "web beacons," and similar devices to track your activities. A cookie is a small amount of data that is transferred to your browser by a web server and can only be read by the server that gave it to you. It functions as your identification card and enables us to record your passwords and preferences. It cannot be executed as code or deliver viruses. A web beacon is a small transparent .gif image that is embedded in an HTML page or email used to track when the page or email has been viewed. Most browsers are initially set to accept cookies, and most services that include similar devices are typically initially activated to collect data. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether or not to accept it. We do not support browsers’ Do Not Track features. You can enable or disable Do Not Track by visiting the preferences or settings page of your browser.
Protecting Your Information
- We use a variety of security measures, including SSL, encryption, and authentication tools, to help protect your information. It is your responsibility, however, to maintain security of any Link you receive when using the Services.
- We do not retain your Personal Information for longer than is necessary for our business purposes. When we no longer need your Personal Information, we dispose of it in a commercially reasonable manner. We will not retain your personal information for more than three years.
Disclosure to Third Parties
We will not share your Personal Information with third parties without your consent, except in the limited circumstances described below:
- We may share your Personal Information with our third party service providers for the limited purposes described in the section entitled "How Your Information is Used."
- We will share your Personal Information with our customers to ensure (i) you receive suitable requests for research studies and (ii) our customers reach the right target audience.
- We will share your Personal Information when required by law, regulation, or litigation, and as necessary for purposes of national security, law enforcement, or other issues of public importance.
- If we sell assets or are acquired by or merged with another entity, we may provide such entity customer information without obtaining your further consent. We may provide notice of such asset sales, acquisitions, or mergers on the Site.
- If at any time you are uncomfortable with our use of your Personal Information for internal marketing purposes, you may opt-out as described in "Opting-Out or Updating Your Personal Information and Privacy Preferences." Note that if you opt not to provide us with certain mandatory information, then our Services may be unavailable to you.
- You may similarly opt out of receiving communications from us, but you will continue to receive communications regarding your use of the Services (e.g. when you have decided to participate in a Project).
Opting-Out or Updating Your Personal Information and Privacy Preferences.
- You may email us at email@example.com. In your email, please clearly state your name, account email, and your request vis a vis your data. This may include requesting that we delete some or all of your Personal Information; that we edit or make changes to your Personal Information that we are storing; or that you are choosing to opt-out of some or all of the disclosures to third parties listed in this Policy. Please note that choosing to opt out of those disclosures may result in the Services no longer being available to you.
- You may change your Personal Information available on the platform at any time by visiting your account preferences.
Should you choose to exercise your rights pursuant to this Policy and applicable law, you are entitled to being treated the same as all other customers who have not exercised this right. This means that should you choose to opt-out of marketing or other communications of that nature, we will not increase the price of or otherwise change the Services. However, should you choose to opt out of all disclosures to third parties or delete certain Personal Information required to provide the Services, we may no longer be able to provide you the Services, as the Services are dependent on your consent to have your Personal Information shared with researchers and customers.
Notice to EU citizens
In accordance with the applicable laws in the European Union, you have the following rights with respect to your personal data, which apply differently in different circumstances: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability and right to object to processing. Most of these rights are not absolute. Below we describe these rights in more detail and provide information on how you can exercise them. If you make a request to exercise your rights, we will respond within one month, but have the right to extend this period by two additional months, where necessary. If we extend the response period, we will let you know within one month from your request.
Information for Users Outside the United States
Queries Regarding Data Protection