KUY.io, Inc. (“KUY.io”) takes your privacy very seriously. We have created this Privacy Policy (“Privacy Policy”) to outline how we collect, use and disclose Personal Data from Users of our website and web-application (the “Platform”), located at https://konnect.kuy.io (“Site”) and the related services described in our Terms of Use (collectively, the “Services”).

Please review the following text to understand our protocol with regards to Personal Data and how we treat it. By visiting https://konnect.kuy.io, you are providing your acceptance and consent to practices outlined here.

Background Information

When we refer to “Users”, we are referring to both individual users (“Individual Users”) and Organizational users that hold an Account on the Site. The Services allow Users the opportunity to track and report on work and personal activities in a manner of electronic time sheets. In the event that an Organization purchases a subscription to the Services, they will have access to aggregate reporting relating to usage of the Services by Users and other related analytics associated with their Organization. By default, Organizations will not have access to the content of Task Data of Users who create this content. If an Organization’s policies require access to this data, then KUY.io will comply. It is your responsibility to read and understand your Organization’s internal privacy policies.

Definitions

Terms utilized in this Privacy Policy have meanings as defined below:

1. "Entries” refers to any content written in relation to the tracking of tasks, time, travel or expenses.
2. “Organization” refers to the entity that entered into a subscription agreement with KUY.io and that you provided to us when you created an Account with the Platform (or that we otherwise retrieve during the signup process). The Organization will generally be your employer, or a subsection of your employer (i.e. department).
3. “Personal Data” means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession), and any information about the individual associated with that information.
4. “Work Network” is the group of employees, contractors or other authorized Users at your Organization.

Contacting KUY.io

If you have questions or concerns about what is described here in our Privacy Policy or you have other communications including the reporting of violations that should be brought to our attention, you may contact us below:

Kuy.io Inc.
To: Privacy Department
168 Insmill Cres, Ottawa, ON K2T 1G3
privacy@kuy.io

Children under 13

KUY.io does not knowingly offer its Services to children who are under 13 years of age. If we become aware of usage of its services by individuals in this age group, we will attempt to delete all related information immediately. If you have any information related to such usage, please report it to us at privacy@kuy.io

International Data Processing

Information collected from Users will be processed by us and some of our affiliate services and service providers (“Sub-Processors”). A list of our current Sub-Processors is available here. We will take reasonably necessary steps, including contractual measures and other legal requirements, to ensure that your Personal Data is dealt with the same level of caution and care as described in this Privacy Policy. For residents of the European Economic Area, KUY.io generally processes Personal Data in order to fulfill contracts we have with the Organizations that are our customers and Users, as well as to pursue our legitimate business interests listed above. Otherwise, KUY.io will obtain consent from an Individual User in respect of processing of Personal Data.

Security

We take security seriously and have the necessary measures in place to protect and secure your data. No security system is perfect though and for this reason while we cannot guarantee the impenetrability of our systems, we do treat the protection of your data and security with the highest priority.

Types of Data We Collect

When using our Services, we collect information from you – some of which is considered “Personal Data” and can be used to identify you and some of which is “Anonymous Data” which is not linked in any identifiable individual. In the following sections, we will outline the details of what we collect and how:

Information You Provide

When you sign up, we create an account for you on our servers (“Account”) to access our Services. We will store information such as your first name, last name, job title, department and email address.

The Platform's primary objective is the creation, purchase, and management of license subscriptions for the Konnect™ software, and the creation and management of support requests relating to that software. After you sign up, we may ask you for billing and payment information including your address data, contact information and tax information (if applicable). The collection and validation of this data with our third-party sub-processors is required by law.

Further, to associate software and support licenses with your Konnect™ deployments, we will collect and store unique-identity data of the deployment, such as the server unique id.

Information Collected through Systems

Platform

We associate each software and support license with a Support Entitlement Number (SEN) that is also included in the license key information. The SEN uniquely binds each software and support license to you and your organization as the owner, and is also required to obtain support requests, proving eligibility for support during the active duration of the subscription period.

Servers

Our servers (hosted by Digital Ocean) collect information including the type of browser and O/S you use, your IP Address, domain name and the timing / duration of your visit to our Site. This information is collected to make our Services more useful to you.

Logs

We record some information from your interactions with our Services automatically in our logs. This data includes IP addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. This information is used to analyze trends and usage patterns all in an effort to better tailor our Services to your needs.

Cookies

KUY.io, the Platform and its partners use cookies or similar technologies to analyze trends, administer the website, track Users’ movements around the website, and to gather demographic information about our user base as a whole.

We use “cookies” to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a Web server. Cookies are not used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a Web server in the domain that issued the cookie to you. One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize pages on our Websites, or register for the Services, a cookie helps us to recall your specific information on subsequent visits. When you return to the same Website, the information you previously provided can be retrieved, so you can easily use the customized features.

You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Platform's Services when you visit. The Platform keeps track of the pages you visit within the Platform, in order to determine what portion of the Platform Services is the most popular or most used. This data is used to deliver customized content and promotions within the Platform Services to customers whose behavior indicates that they are interested in a particular subject area.

Pixel Tags

We use “Clear Gifs” also known as “Pixel Tags” similar to cookies to track the usage of our Services by Users. These “Clear Gifs” are effectively transparent images that allow us to glean some information about said usage. An example common use case is to use this technology to understand the open-rate of emails that we send to you. Ultimately, like cookies, we use this tool as another method to customize our offerings for our customers.

Analytics Software

We use some analytics services from third party vendors such as Google Analytics in order to analyze usage of our Services. These services utilize information that they retrieve from cookies on our Web Application or other information that we send them directly to provide us with aggregated analytics that we can use to perform our analysis. These analytics services will have their own privacy policies and terms of use. By using our Services, you are agreeing to the processing of this data by such analytics services.

Information Collected from Others

By creating your Platform account via a third-party identity provider (Google, Microsoft or Apple) you agree to the Privacy Policy and Terms of Use of the respective service and the collection of data as outline in the respective documents provided by these service providers.

By providing payment information through our Payment Provider (Stripe), we collect address, billing and contact information in compliance with the PCI-DSS standard.

Information Collected from Your Organization

If your Organization becomes a customer of ours, we will create accounts for your usage of our Services. We may obtain from your Organization information about you such as your name, email address, title, department and reporting relationships.

Prospective Customers

We collect names, email addresses and other business contact information about individuals who represent our customers as well as individuals who we consider to be prospective customers and business partners (“Prospects”). We use the information to contact Prospects with information about KUY.io's products and services.

Use of Your Personal Data

General Use

In general, we use the Personal Data we have about you to offer you a more tailored experience and to respond to any requests you send us in a more comprehensive fashion. We use this data in the following ways:

• Allow for the creation of your account.
• Identify you on our system and keep track of the Work Network you are involved in.
• Improve the Services that we offer you and provide a more tailored experience.
• Respond to the requests that you send us.
• Send you messages (Email and our Web Application) that relate to your usage of our system or security and administrative messages.
• Send you communication requests for the purpose of improving our Services (i.e. request for phone call, completion of a survey).
• Send marketing related messages to our Services with your consent (from which you will be able to unsubscribe).
• To send you other notifications that relate to your usage of the system (for example, notifications about pending expiry of a software or support license term).

Anonymous Data

We use anonymized data retrieved from our database (i.e. where personally identifiable information has been obfuscated) in order to create analytics that will help us surmise how to improve our Service. Some of the reports created with this anonymized data may be share with your Organization so that they can understand the overall usage of our product by their employees/constituents.

Disclosure of Personal Information

Disclosures of your Personal Data are described as below.

Designated 3rd Parties

We will share your Personal Data with parties that you have already consented to share information with such as your Organization and those in your Work Network.

Third Party Service Providers

We use a set of third parties as part of our system in order to offer you the Services that we do. Examples include analytics services (as described previously) and email service providers. Service Providers who process Personal Data on our behalf are considered Sub-Processors.

Disclosure to Organization

In the event that your Organization becomes a customer of our Services, we will share information about your account related to usage statistics (such as number of recorded tasks) but will not share the content of the recorded tasks. Your organization may have specific policies in place regarding how Personal Data is shared to which we will have to comply.

Business Transfers

If our business (or substantially all of our assets) are acquired by a third party, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Data may be made available or otherwise transferred to the new controlling entity, where permitted under applicable law.

Other

In certain situations, we may receive a demand to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. KUY.io may disclose your Personal Data (a) to any governmental authority as part of an investigation to determine our compliance with any applicable law, rule, or regulation (including privacy laws, rules, and regulations), (b) in response to a court order, subpoena, discovery request, or other lawful judicial or administrative proceeding, (c) as otherwise required under any applicable law, rule, or regulation, and (d) in good faith, to defend the rights or property of KUY.io and other Users and (e) if KUY.io is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Web site of any change in ownership or uses of your Personal Data, as well as any choices you may have regarding your Personal Data.

Third Party Websites

Our Websites provide links to other websites. We do not control, and are not responsible for, the content or practices of these other websites. Our provision of such links does not constitute our endorsement of these other websites, their content, their owners, or their practices. This Privacy Policy does not apply to these other websites, which are subject to any privacy and other policies they may have.

Sensitive Personal Data

If you provide us with sensitive information in the course of interacting with the system, we will only use sensitive information for the purpose of storing and processing it as part of our Services. Sensitive information may include information about you such as racial or ethnic origin, religious beliefs, political affiliation, sexual preferences and criminal records, as well as health and genetic information about you. If you do not consent to the processing and storing of your sensitive information, it is therefore important that it not be submitted to us in the course of your usage.

Options Considering Personal Data

We describe some of the changes and options available to you on Personal Data below:

Email Communications

You may unsubscribe from our marketing communications by clicking on the “unsubscribe” link located on the bottom of our e-mails, or by sending us email us at privacy@kuy.io. Customers cannot opt out of receiving transactional emails related to their account with us or the Services.

Cookies

If you do not want to accept Cookies from our site, you may change your browser settings to not accept cookies. If you do not accept these cookies, you may not be able to use our Site and Services to the fullest extent.

Access, Modification or Deletion of Your Data

You may contact us at privacy@kuy.io in order to request a copy, change or delete any Personal Data that we have on file for your Account. Please note that some data cannot be deleted as it involves more than one party. As an Organizational customer, you may request the deletion of your entire Account (and all individual Users within that account). We will delete this information within 15 days of your request. Your information may stay on our backup servers for up to an additional 30 days but will no longer be present thereafter.

Residents of the European Economic Area (“EEA”) have additional data protection rights under applicable laws (including under the General Data Protection Regulation), including the right to request access to, obtain, correct, amend, delete, or limit the use of your personal data. Individual Users who wish to exercise these rights, should contact KUY.io using the contact information. In circumstances where KUY.io is a data processor and the Organization is the data controller, Individuals may be required to contact the Organization to avail themselves of such rights.

Retention

We retain Personal Data that you provide us as long as we consider it necessary for the purpose it was collected, or as needed to comply with our legal obligations, resolve disputes and enforce our agreements, and then we securely delete the information. We will delete this information from the servers at an earlier date if you so request, as described above. If a customer terminates its use of the Services, we will, unless legally prohibited, delete all customer information, including your Personal Data, from the Services.

Periodic Updates to Privacy Policy

We periodically update this Privacy Policy. In the event of an update, we will post the new policy at https://konnect.kuy.io/privacy_policy and update the “Last Updated” date above. Please check this page regularly for updates.