Privacy Policy

This Privacy Policy sets forth the policies and practices of Collectus regarding the collection, use, and disclosure of personal information of users who access or interact with our services, including via www.collectus.com. By using our services, you consent to the practices described herein.

1. Information We Collect

• Personal Identifiers: Includes but is not limited to name, email address, postal address, phone number, payment information, and government-issued identification where required.
• Account Credentials: Login information, security questions, and authentication tokens.
• Device and Usage Data: IP address, browser type, OS version, referring URLs, interaction data, cookies, and similar technologies.
• User-Generated Content: Information voluntarily provided by users such as images, profile data, comments, and uploaded content.
• Sensitive Data: Where applicable, biometric, demographic, or financial data required to provide services.

2. Use of Information

We may use your personal information for the following purposes:

• Provision, operation, and enhancement of the Service.
• Account verification, authentication, and fraud prevention.
• Marketing, promotions, and service-related communications, subject to your preferences.
• Compliance with legal obligations, dispute resolution, and enforcement of agreements.
• Research and analytics to improve product features and usability.

3. Legal Grounds for Processing

We process your personal data based on the following legal bases:

• Your explicit consent.
• Necessity for the performance of a contract to which you are party.
• Compliance with legal obligations.
• Legitimate interests pursued by us or a third party, except where such interests are overridden by your rights.

4. Disclosure of Information

We may disclose your information in accordance with applicable laws to:

• Affiliates and subsidiaries of Collectus.
• Service providers and partners under strict contractual obligations.
• Regulatory, legal, and law enforcement authorities where required.
• Third parties in the context of business transfers, such as mergers or acquisitions.

5. International Data Transfers

Your personal data may be stored and processed outside of your jurisdiction, including in countries with different or less stringent data protection laws. We implement appropriate safeguards, including Standard Contractual Clauses and Data Processing Agreements, to ensure an adequate level of protection.

6. Data Subject Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• The right to access your data.
• The right to rectification of inaccurate data.
• The right to erasure (“right to be forgotten”).
• The right to data portability.
• The right to object to or restrict processing.
• The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

7. Regional Privacy Notices

7.1 General Data Protection Regulation (GDPR) – European Economic Area (EEA)

If you are a resident of the EEA, we process your personal data in accordance with the GDPR. You have the right to lodge a complaint with your local data protection authority if you believe that our processing of your personal information infringes the GDPR.

7.2 California Consumer Privacy Act (CCPA)

If you are a resident of California, you have specific rights under the CCPA, including:

• The right to request information about the categories and specific pieces of personal information we have collected.
• The right to request deletion of your personal information.
• The right to opt-out of the sale or sharing of your personal information.
• We do not discriminate against users who exercise their rights under the CCPA.

7.3 Other Jurisdictions

Residents of other jurisdictions may have additional rights under applicable local data protection laws. We will comply with such obligations as required by law.

8. Cookies and Similar Technologies

We use cookies, pixels, and similar tracking mechanisms for functionality, analytics, and targeted advertising. By continuing to use our site, you consent to our use of such technologies. Users may disable cookies via browser settings but this may impair functionality.

9. Data Retention

Personal data will be retained only as long as reasonably necessary to fulfill the purposes outlined herein, unless a longer retention period is required or permitted by law. Criteria for determining retention periods include legal requirements, user expectations, and operational necessity.

10. Security of Your Information

We implement appropriate administrative, technical, and physical measures to protect your personal data. However, no transmission or storage system can be guaranteed to be 100% secure. You acknowledge and accept this risk when using our Service.

11. Children's Data

The Service is not intended for individuals under the age of 13 (or equivalent minimum age in the relevant jurisdiction). We do not knowingly collect data from such individuals. If we learn that we have collected such information, we will delete it promptly.

12. Third-Party Services

Our services may include integrations or links to third-party platforms. Your interactions with those platforms are governed by their privacy policies. We disclaim any responsibility for the practices of such third parties.

13. Changes to This Privacy Policy

We reserve the right to amend this policy at any time to reflect changes in legal, regulatory, or operational requirements. We will notify users of material changes via prominent notice or direct communication. Continued use of the Service after such changes constitutes acceptance thereof.

14. Limitation of Liability

To the fullest extent permissible under applicable law, in no event shall Collectus, its affiliates, directors, officers, or agents be liable for any indirect, incidental, special, consequential, or punitive damages arising from or related to the use of or inability to use the Service or this Privacy Policy.

15. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the jurisdiction in which Collectus is incorporated, without regard to its conflict of laws provisions. Any disputes shall be resolved in the courts of competent jurisdiction therein.

16. Contact Information

For questions or concerns regarding this Privacy Policy, please visit: www.collectus.com