Last updated and effective as of: October 27, 2021
Ketch Kloud, Inc. (“Ketch”, “we”, or “us”) is a software company that sells tools for companies to understand, implement, and manage their privacy obligations to their consumers and to control how they store and process data to make compliance with those obligations easy.
We collect personal information (or personal data) and non-personal information from you when you use our Services. As further described in this section, we may receive personal information about you that you submit through the Services or that is provided to us by a third party; we also may receive personal information about you automatically as you use the Services.
Information you Provide Us: We receive personal information about you that you choose to provide to us, including when you create an account; search for or purchase our offerings; configure settings; communicate with us; or otherwise use our Services.
Information from our Customers: Our customers (“Customers”) may share information with us so that we can provide them with services. Each Customer chooses what information it shares, which may, for example, include personal information (“Customer Data”).
Usage and Log Data: When you interact with our Services, we may collect information from your device or web browser when you interact with the Services. For example, when you interact with the Services, we may log and store your IP address and technical information about your usage like your device ID, browser type, how you progressed through the Services, where you abandoned it, etc. We can use your IP address to determine your general location.
App Data: If you use a Ketch application, on mobile or other platforms, we may collect analytic information about your device, such as IP address, device ID, OS version, and clickstream.
Information from Public Sources or Third Parties: We may receive additional information about you from public or third-party sources. For example, we may receive marketing, sales generation, and recruitment information from service providers or partners.
We collect, use, process, and store your personal information:
We will only share your personal information with third parties under the following circumstances:
We use and share your non-personal, de-identified or aggregated data in a variety of ways, including to improve the Services.
We use tracking technologies, such as cookies, local storage, and pixel tags as described further below.
Cookies and Local Storage
Cookies and local storage may be set and accessed on your computer. Upon your first visit to the Services, a cookie or local storage will be sent to your computer that uniquely identifies your browser. "Cookies" and local storage are small files containing a string of characters that is sent to your computer's browser and stored on your device when you visit a website. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent; however, if you reject cookies, you may not be able to sign in to the Services or take full advantage of our Services. Additionally, if you clear all cookies on your browser at any point after setting your browser to refuse all cookies or indicate when a cookie is being sent, you will have to again reset your browser to refuse all cookies or indicate when a cookie is being sent.
Our Services use the following types of cookies for the purposes set out below:
Type of Cookie
Analytics and Performance Cookies
These cookies are used to collect information about traffic to our Services and how users use our Services. The information gathered does not identify any individual visitor. The information is aggregated and therefore anonymous. It includes the number of visitors to our Services, the websites that referred them to our Services, the pages that they visited on our Services, what time of day they visited our Services, whether they have visited our Services before, and other similar information. We use this information to help operate our Services more efficiently, to gather broad demographic information and to monitor the level of activity on our Services. We use Google Analytics for this purpose. Google Analytics uses its own cookies. It is only used to improve how our Services works. You can find out more information about Google Analytics cookies here. You can find out more about how Google protects your data here. You can prevent the use of Google Analytics relating to your use of our Services by downloading and installing the browser plugin available via this link.
These cookies are essential to provide you with services available through our Services and to enable you to use its features. For example, they allow you to log in to secure areas of our Services and help the content of the pages you request load quickly. Without these cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you with those services.
These cookies allow our Services to remember choices you make when you use our Services, such as remembering your language preferences, remembering your login details, remembering which polls you have voted in and in some cases, to show you poll results, and remembering the changes you make to other parts of our Services which you can customize. These cookies also enable us to identify you across various screens and devices as you login and use our Services, as well as enable us to work with partners to resolve your digital identities and personalize your experiences across our Services, our partners and customers, and across channels. The purpose of these cookies is to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you visit our Services.
A Flash cookie is a data file placed on a device via the Adobe Flash plug-in that is built into or downloaded by you onto your device. Flash cookies are used for various purposes, including, without limitation, enabling a Flash feature and remembering your preferences. For more information about Flash and the privacy choices Adobe offers, visit this link. If you choose to adjust your Flash privacy settings on your device some features of the Services may not function properly.
We also use “pixel tags,” which are small graphic files that allow us and third parties to monitor the use of the Services and collect usage data. We may also insert pixel tags on third parties’ websites. A pixel tag can collect information such as the IP address of the computer that downloaded the page on which the tag appears; the URL of the page on which the pixel tag appears; the time (and length of time) the page containing the pixel tag was viewed; the type of browser that retrieved the pixel tag; and the identification number of any cookie previously placed by that server on your computer. We use pixel tags to collect information about your visit, including the pages you view, the links you click and other actions taken in connection with our sites and Services and use them in combination with our cookies to provide offers and information of interest to you. We may also use pixel tags to collect data related to a website visit. Similar functionality may be enabled in a mobile app through the use of an SDK (Software Development Kit). Pixel tags also enable ad networks to serve targeted advertisements to you when you visit the Services or other websites. In addition, we use a variety of other technologies that collect similar information for security and fraud detection purposes.
You can also find more information about cookies and how they work, what cookies have been set on your computer or mobile device and how to manage and delete them at http://www.allaboutcookies.org and http://www.youronlinechoices.com.
To be clear, Ketch does not, and cannot, track your activity when you are not using the Services and does not collect activity about your online activity after you leave the Services.
To stop receiving notifications or promotions, please click the unsubscribe link found at the bottom of each email. For users in the European Economic Area (“EEA”): We only send marketing communications to users located in the EEA with your prior consent. Please see the section “GDPR: Information for EEA Users” below.
We use industry standard technical, administrative, and physical controls to protect your data. While we take reasonable precautions against possible security breaches, no website or internet transmission is completely secure and we cannot guarantee that unauthorized access, hacking, data loss, or other breach will never occur. We will process and store your personal information only for the period necessary to achieve the purpose of the storage, or as permitted by law. The criteria used to determine the period of storage of information is the respective statutory retention period. After expiration of that period, the corresponding information is routinely deleted, as long as it is no longer necessary for the fulfillment of a contract or the initiation of a contract.
You can choose to deactivate your account so that you are no longer viewable on the Services. You can request deactivation through the Services or by sending a message to email@example.com.
The Services may contain links to and from third-party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies, which may differ substantially from ours, and that we do not accept any responsibility or liability for their activities or the content of their privacy policies.
If you are a California resident, you have the right to opt-out of the sale of your personal information. We do not transfer your personal information to third parties in exchange for money but may share it with certain third parties for activities like targeted advertising, marketing, and analytics, and these may be deemed a "sale" under CCPA. You may opt-out of sale here.
Personal Information We Collect and Disclose for a Business Purpose. Without limiting the description of the information we collect, we collect the categories of personal information about California consumers identified in the chart below.
Categories of Personal Information
Collected in Prior 12 Months
A. Personal and online identifiers
A real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
C. Protected classification characteristics under California or federal law
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
D. Commercial or transactions information
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
E. Biometric information
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
F. Internet or other similar network activity
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
G. Geolocation data
Physical location or movements.
H. Sensory data
Audio, electronic, visual, thermal, olfactory, or similar information.
I. Professional or employment-related information
Current or past job history.
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
K. Inferences drawn from other personal information.
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Categories of Sources
We collect the personal information identified as collected in the chart above from the following categories of sources:
Why We Collect, Use, and Share California Information
These commercial and business purposes include, without limitation:
Recipients of California Personal Information
We disclose, and have disclosed in the last 12 months, all of the categories of personal information identified as collected in the chart above to the categories of third parties listed below for business purposes:
Your Rights Regarding Personal Information
California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:
To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:
Verification Process and Required Information
We may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. For example, we may require you to provide, at a minimum, at least two data points that we determine to be reliable for the purpose of verifying your identity. We will then typically attempt to match the identifying information provided by you to the personal information already maintained by us to verify the request. If you have a password protected account on the Services, we may verify your identity through the existing authentication practices for your account, in which case we will require you to re-authenticate yourself before we disclose or delete your personal information.
You may designate an authorized agent to make a CCPA request on your behalf by verifying your identity, as described above, and providing written permission for the authorized agent to act on your behalf.
Ketch will not discriminate against a user because the user exercised any of the user’s rights described above or afforded to it under applicable data privacy law.
Under Nevada law, Nevada residents may submit a request directing us not to make certain disclosures of personal information we maintain about them.
To exercise this right, please contact us:
Personal data collected through our Services will be transferred to and stored by us in the United States; therefore, your personal data will be processed outside your jurisdiction in a country that is not currently subject to an adequacy decision by the European Commission, and that may not provide the same level of data protection as your jurisdiction, such as the EEA. We ensure that the recipient of your personal data offers an adequate level of protection and security, for instance by entering into the appropriate back-to-back agreements and, if required, standard contractual clauses or alternative mechanism for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other applicable regulator
Ketch Kloud, Inc.
23 Geary Street, Suite 600
San Francisco, CA 94108
In certain circumstances, the Privacy Shield Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the Privacy Shield Principles.
The Federal Trade Commission has jurisdiction over Ketch’s compliance with the Privacy Shield.
With respect to human resources data received from European Union member countries, Ketch commits to cooperate with the EU Data Protection Authorities and the Swiss Federal Data Protection and Information Commissioner in conformity with the Supplemental Principles on Human Resources Data and the Role of the Data Protection Authorities and will comply with any advice given by such authorities.
The Privacy Shield Principles describe Ketch’s accountability for personal data that it subsequently transfers to a third-party agent. Under the Privacy Shield Principles, Ketch shall remain liable if third-party agents process the personal data in a manner inconsistent with the Privacy Shield Principles, unless Ketch proves it is not responsible for the event giving rise to the damage.
Note that Ketch may be required to release the personal data of EU and Swiss individuals whose data is pursuant to the Privacy Shield in response to legal requests from public authorities, including to meet national security and law enforcement requirements.
This section only applies to our European Economic Area (“EEA”) users.
Individuals located in the EEA have certain rights in respect of your personal data, including:
As a Ketch user:
In some cases, Ketch may process personal data pursuant to a legal obligation or to protect your vital interests or those of another person.
Ketch will offer EEA and Swiss individuals whose personal data has been transferred to us the opportunity to choose whether the personal data we have received may be used or disclosed for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. An individual may opt-out of such uses or disclosures of their personal data by contacting us at firstname.lastname@example.org.
Ketch users may exercise their rights regarding their personal information as follows:
VeraSafe has been appointed as Ketch's representative in the European Union and in the United Kingdom for data protection matters, pursuant to Article 27 of the General Data Protection Regulation of the European Union. If you are unable to reach Ketch as otherwise described in this section, VeraSafe can be contacted on matters related to the processing of personal data under GDPR. To make such an inquiry, please contact VeraSafe using this contact form or via telephone at +420 228 881 031 (Netherlands) or +44 (20) 4532 2003 (UK).
Alternatively, VeraSafe can be contacted at:
VeraSafe Netherlands BV,
Keizersgracht 391 A,
1016 EJ Amsterdam,
VeraSafe United Kingdom Ltd.
37 Albert Embankment
London SE1 7TL
If you have any questions about our privacy practices, or if you wish to make a request, please contact us at either:
Ketch Kloud, Inc.
23 Geary Street, Suite 600
San Francisco, CA 94108
We do not knowingly collect personal data about children. Our websites and systems are not designed for use by individuals under the age of 16, and in particular are not designed for children under the age of 13. If we learn we have collected or obtained personal data of someone under 13, we will delete that information from our database. If you believe that this has occurred, please contact us at email@example.com.