Privacy Policy

We created Prompt.io so you could easily communicate and share information with others. We respect the privacy of our users and want you to know that your privacy and security is one of our top priorities.

Our organization is SOC II Type 2 certified.

Privacy Policy

Privacy Policy

Last updated: November 2, 2023.  

We created Prompt.io™️ so you could easily communicate and share information with others. We respect the privacy of our users and want you to know that your privacy and security is one of our top priorities.

Prompt.io Inc. (hereafter referred to as "Prompt.io", “us” or “we”) owns and runs various websites, including but not limited to prompt.io, chatbox.com, and threadbox.io (the "Websites").

This "Privacy Policy" governs your use of the Websites (including, without limitation, both mobile and online versions of our site), and also applies to your use of all services, features, software, applications, databases, content, downloads and other services that we make available through the Websites, including the communications platform(s) available on the Websites (collectively, the “Services”) regardless of how you access or use the Websites, whether via personal computers, mobile devices or otherwise. Prompt.io is a business to business service provider whereby Prompt.io provides notification and messaging services that allows paid subscribers (each an "Operator" and collectively our "Operators") to contact and send messages and information to their user database ("users") through mobile text messaging services and other mobile communication systems. Our Privacy Policy primarily explains our data collection practices when collecting, storing and or using data on behalf of our Operators as a service provider. If you are a consumer who received a message delivered by Prompt.io because one of our Operators uses our Websites and you wish to opt-out from receiving additional messages, please contact the Operator directly. This Privacy Policy does not apply to our data collection activities offline or otherwise outside of our Websites or the information practices of our Operators.

Prompt.io may amend this Privacy Policy from time to time. If we do, we will post the revised Privacy Policy on the Websites.

In addition, please review our Website’s Terms and Conditions, which governs your use of the Websites. By using our Websites, you consent to our Privacy Policy and Terms and Conditions and our collection, use and sharing of your information and data, and other activities, as described below. If you do not agree to the terms of this Privacy Policy, then please do not use the Services.

  1. Information we Collect 

(a) Information You Provide to Us 

When you register for Prompt.io, use the Services or otherwise interact with us on behalf of a business or other organization, or through our Services we may ask for information such as your name, email address, phone number, company name, title,  etc. (“Personal Information”) and your zip code or address (“Demographic Information”). We use this information for general purposes that include: identification and authentication, providing and improving our products and services, contacting you, and research. We may collect this information through various forms and in various places on the Websites, including through "contact us" forms, if you sign up as an Operator or when you otherwise interact with our Websites. We may also obtain Personal Information and Demographic Information of our Operators’ users as part of the Services we offer to our Operators. If we combine Demographic Information with the Personal Information we collect directly from you, we will treat the combined data as Personal Information under this Privacy Policy.

Our Services allow our customers to operate a messaging platform to interact with end users via text, email and other messaging channels, including via live chat on their websites or messaging within mobile applications. In this Privacy Policy, the term “Operator” means our customer, i.e. the person or company who is using our Services to operate a messaging platform or to otherwise communicate and collect and exchange information with and from end users. Most of the information our end users provide to the Services will be shared with the Operator of that instance of our Services, as further described in this Privacy Policy.

If you elect to engage in any communication or engagement session with Prompt.io or an Operator that uses our Services, it is up to you to decide what, if any, information to provide during such session. Depending on your request, it may not be possible for us or the Operator to address all your questions without further information from you. Nevertheless, if you do not wish to provide certain information, then you should not do so.

If you use our Services as an end user, you agree that we can collect any content, materials, or information you enter into the Services (“User Materials”), including personal information. You also agree that these User Materials will be viewed by and shared with the Operator of the Services. The Operators may also contact you through email, text messages, social media, or the Services themselves as part of their interactions with you.

In addition, we may collect information through the following methods if you visit our Websites or use our Services:

  • Your direct communications with Prompt.io,
  • Your requests for information, news, and other content,
  • A technical support request you submit,
  • Your participation in a Prompt.io promotion, or
  • Recruitment and job applications.

We may also collect information from our direct interactions with you (such as through your attendance at a trade show or through sales inquiries), publicly available data, or data provided by third-party sources, such as marketing opt-in lists.

If you contact us by email, text message, or other means, we collect the personal information contained within and associated with your correspondence. If you provide us with your email or phone number in order to join our mailing lists, you agree that we may send you an email or text message to promote our Services and our partners’ products and services. If you enter a phone number in the Services in order for a text message to be sent to that number, you warrant to us that the recipient of that text message (whether you or someone else) has agreed to receive our text message.

(b) Information We Collect and Store As You Access and Use the Websites 

When you use our Services as an end user, some information is collected automatically. For example, we may automatically collect your browser’s Internet Protocol (IP) address, your browser type, the nature of the device from which you are using the Services, the identifier for any handheld or mobile device that you may be using, the actions you take while using the Services, and the content, features, and activities that you access and participate in while using the Services (“Usage Information”). This Usage Information that we collect may also include information regarding your interaction with e-mail, text, live chat, or social media messages, such as whether you opened, clicked on, or forwarded a message. You agree that we may share Usage Information about your use of the Services with the Operator. Whenever we associate Usage Information with your Personal Information, we will treat it as Personal Information. 

We will also use the data described above to draw conclusions about your interests from your use and to adapt our Website’s offerings according to your interests (profiling) in order to make our website as user-friendly, safe, and attractive as possible and thus promote the sale of Services.

It is necessary to store and process the information referred to above for the duration of your session in order to deliver our Website content to your device. We also store some of this information in the log files on our servers. We will not combine this information with your IP address or other Personal Information relating to you except as disclosed below.

We may use various methods and technologies to collect and store Usage Information ("Tracking Technologies"). Tracking Technologies may set, change, alter or modify settings or configurations on your Device. A few of the Tracking Technologies include, without limitation, the following (and subsequent technology and methods later developed):

Cookies

When you visit our Website, you consent to the use of cookies, and other technologies to collect and process information in accordance with this Cookie Policy. You may have seen a pop-up asking for your consent to this policy on your first visit to our Website. You may withdraw your consent at any time by following the instructions below. 

What is a Cookie?

A browser cookie is a small piece of data that is stored on your device to help websites and mobile apps remember things about you. Other technologies, including web beacons, web storage, and identifiers associated with your device, may be used for similar purposes. In this Policy, we say “cookies” to refer to all of these technologies. Cookies allow a website to recognize a user’s device. Cookies allow you to navigate between pages efficiently, remember preferences and generally improve the user experience for you. They can also be used to tailor advertising to your interests by tracking your browsing across websites.

Cookies are one of two variants. Session cookies are deleted automatically when you close your browser and persistent cookies remain on your device after the browser is closed (for example to remember your user preferences when you return to the website). Persistent cookies, also known as permanent cookies, are cookies that are stored on your hard drive until they expire or until you delete the cookie.

We use the following types of cookies: 

• Essential Cookies are required to make our Site function properly and cannot be turned off in our systems. If you block these cookies, portions of our Website may not function properly.

• Performance and Functional Cookies allow us to count visits and sources of traffic on our Website so we can measure and improve performance and functionality. They help us know which pages of our Site are most and least popular and how visitors move around the Site.

There may be other Tracking Technologies now and later devised and used by us in connection with the Website and we may otherwise obtain Usage Information when operating and/or administering a messaging campaign on behalf of our Operator. Further, third parties may use Tracking Technologies in connection with our Website and our Operators’ campaigns, which may include the collection of information about your online activities over time and across third-party websites or online services. We may not control those Tracking Technologies and we are not responsible for them. However, you consent to potentially encountering third-party Tracking Technologies in connection with use of our Website, our Operators’ campaigns and accept that our statements under this Privacy Policy do not apply to the Tracking Technologies or practices of such third parties.

We may combine information collected automatically (as described above) from your interactions with our website and your activity on third-party sites with other data (including Personal Information). 

Managing Cookies

If you wish to opt out of allowing certain cookies, you may do so by changing your browser settings so that cookies from our Websites cannot be set. Please note that if you delete, block, or otherwise restrict cookies, or use a different computer or Internet browser, you will need to renew your cookie management choices.

Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:

(a) https://support.google.com/chrome/answer/95647 (Chrome);

(b) https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop (Firefox);

(c) https://help.opera.com/en/latest/security-and-privacy/ (Opera);

(d) https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);

(e) https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac (Safari); and

(f) https://support.microsoft.com/en-gb/help/4468242/microsoft-edge-browsing-data-and-privacy (Edge).

Please note that this Cookie Policy does not apply to, and we are not responsible for, the privacy practices of third party websites which may be linked to our Sites.

Do Not Track Signals 

Because the “Do Not Track” browser-based standard signal has yet to gain widespread acceptance, we don’t currently respond to those signals unless stated otherwise elsewhere in this Privacy Policy.

(c) Information Third Parties Provide About You

We may receive information about you from your friends and others that use the Website, such as when they submit your information to us about you. Additionally, we may, from time to time, supplement the information we collect directly from you on our Website with outside records from third parties for various purposes, including to enhance our ability to serve you, to tailor our content to you and to offer you opportunities that may be of interest to you. To the extent we combine information we receive from those sources with your Personal Information we collect on the Website, it will be treated as Personal Information and we will apply this Privacy Policy to such combined information, unless we have disclosed otherwise. In no other circumstances do our statements under this Privacy Policy apply to information we receive about you from third parties.

(d) Interactions with Third-Party Services

The Website may include functionality that allows certain kinds of interactions between the Website and your account on a third-party website, application or other service. The use of this functionality may involve the third-party operator providing certain information, including Personal Information, to us. For example, we may provide third-party sites' interfaces or links on the Website to facilitate your sending a communication from the Website or we may use third parties to facilitate emails or social media postings. These third parties may retain any information used or provided in any such communications or other activities and these third parties' practices are not subject to our Privacy Policy. Prompt.io may not control or have access to your communications through these third parties. Further, when you use third-party sites or services, you are using their services and not our services and they, not we, are responsible for their practices. You should review the applicable third-party privacy policies before using such third-party tools on our Website.

(e) California / Delaware Do Not Track Disclosures

Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer's online activities over time and across third-party websites or online services (e.g., browser do not track signals). Currently, we do not monitor or take any action with respect to these signals or other mechanisms.

  1. How and When We Disclose Information to Third Parties

We may share non-Personal Information, such as aggregated user statistics, with third parties including our Operators. Further, we may share Device Identifiers with third parties along with data related to Website and text campaign activities. We will not share your Personal Information that we have collected directly from you on our Website with third parties for those third parties' direct marketing purposes unless you have consented (either through an opt-in or opt-out opportunity) at the time you provide your Personal Information. Further, we may share the information we have collected about you, including Personal Information, as disclosed at the time you provide your information and as described below or otherwise in this Privacy Policy. 

The information we collect, including Usage Information, may be used to improve the content of our Websites and the quality of our Services, and we do not share it with or sell it to other organizations for commercial purposes, except to Operators, to provide the Services or other products or services you've requested, when we have your permission, or in the following circumstances:

(a) Third Parties Providing Services on our Behalf. We may use third-party vendors to perform certain services on behalf of us such as: (i) to assist us in operations; (ii) to manage a database of customer information; (iii) hosting; (iv) designing and/or operating features; (v) tracking activities and analytics; (vi) enabling us to send you special offers or perform other administrative services; and (vii) other services designed to assist us in maximizing our business potential. We may provide these vendors with access to user information, including Device Identifiers and Personal Information, to carry out the services they are performing for you or for us. Third-party analytics and other service providers may set and access their own Tracking Technologies on your Device and they may otherwise collect or have access to information about you, potentially including Personal Information, about you. We are not responsible for those third party technologies or activities arising out of them. For example, we and our third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie). To learn more about how to opt out of Google's use of the Google Analytics cookies, visit here . We are not responsible for the effectiveness of or compliance with any third parties' opt-out options.

(b) Administrative and Legal Reasons. It is necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms and Conditions, or any other agreement you’ve entered into with us, or as otherwise required by law. Prompt.io may disclose personally identifiable information under special circumstances, such as to comply with subpoenas, when your actions violate the terms of any agreement with us, or when it is in our interest to protect our property or other legal rights (including, but not limited to, enforcement of our agreements), or the rights or property of others, or otherwise to help protect the safety or security of our Services and other users of the Services. It may be necessary to share information in order to investigate, prevent, or take action regarding suspected or actual illegal activities, including without limitation, fraud, situations involving potential threats to the physical safety of any person, or as otherwise permitted or required by law.

(c) Business Transfer. We may transfer information about you in the case where Prompt.io is acquired by or merged with another company or legal entity. We reserve the right to disclose and transfer all such information: (i) to a subsequent owner, co-owner or operator of the Websites or applicable database; or (ii) in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, including, during the course of any due diligence process.

  1. Security and Safety of Your Information 

We take reasonable precautions to protect our users' information. Your information is located on secure servers and encrypted before it hits our disks or our third party storage provider’s servers. We use https to protect information in transit when you use the Prompt.io web application on the Websites. This applies to your personal information, chat messages, and other User Content. However, we have no control over the security measures Operators may use to protect the User Content you share with them.

Certain links sent to you via email, text, live chat, or social media can effectively be your gateway into some of the Services. If you forward, share, or otherwise divulge those links to a third party, your Prompt.io account (if applicable) and User Materials may be compromised and you may be impersonated.

If you are communicating with an Operator that uses our Services, you should review the privacy practices of that Operator to understand which security measures they use.

  1. Storage, Disclosure, and Use of Your Communications

By default, your chat history will be saved on the Services and shared with the Operator.

If you visit our Websites or use our Services, we may also use your information for the following purposes:

    To deliver information requested by you, for example in response to technical support requests,

    To deliver marketing or other materials to you,

    For promotions you may enter into, or

    If you submit a resume or CV, consider you for employment with Prompt.io.

  1. Data Storage

When you use the file transfer feature of Prompt.io, the file that you transfer is copied and retained on the servers of our third party service provider after the transfer. Prompt.io does not access or use these files for any purpose other than to send them to their intended recipients or for backup purposes. These files may not be encrypted and could be disclosed in legal proceedings or investigations.

  1.  Children’s Privacy

Children’s safety is important to us, and we encourage parents and guardians to take an active interest in the online activities of their children. Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under the age of 13 without obtaining parental consent.  Visitors under eighteen (18) years of age are not permitted to use and/or submit their personal information on the Site. If we learn that we have collected personal information from a child under the age of 13 on our Services, we will delete that information as quickly as possible. If you believe that we may have collected any such personal information on our Services, please notify us at legal@prompt.io.

  1.  International Visitors

Our servers and data centers are located in the United States. If you choose to use the Services from outside the United States, then you should know that you are transferring your personal information outside of your region and into the United States for storage and processing. By providing your personal information to us through your use of the Services, you agree to that transfer, storage, and processing in the United States. Also, we may transfer your data from the United States to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services. You should know that each region can have its own privacy and data security laws, some of which may be less stringent as compared to those of your own region.

  1.  Your State Privacy Rights     

California Privacy Rights Notice

The California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”) provides residents of California, United States with specific rights regarding their Personal Information. 

Prompt.io acts as a service provider, as defined under the CCPA and CPRA, and we process Personal Information on our Operators’ behalf. Please direct any requests for access or deletion of your Personal Data to our Operators with whom you have a direct relationship. This CCPA policy governs Personal Information collected, processed, or disclosed by us as a Service Provider as instructed or permitted by our Operators.

Prompt.io undertakes to comply with legal requirements when processing Personal Information as a Controller and implements appropriate technical and organizational measures to ensure a level of security of Personal Information as required under applicable state privacy laws.

CCPA Categories of California Personal Information We Process

We only obtain Personal Information directly from our Operators as their Service Provider. Our processing of Personal Information is limited to business purposes. Personal Information collected by our Operators may include: 

  • Identifiers, including Personal Information as defined in California consumer records law (such as name, address, phone number, email address);
  • Commercial information (such as transaction data); and
  • Internet or other network or device activity (such as browsing history or IP address, including the city and state based on IP address).


How We Use and Disclose These Categories of Personal Information

We and our Operators may use (and in the past 12 months have used) all of the Personal Information we collect for the business purposes described in this Privacy Policy, and in accordance with our disclosures above. Each of the categories of Personal Information listed above is shared in accordance with our disclosures above and may be disclosed to the following: Prompt.io’s service providers and agents; state, federal, and international courts and regulatory and government authorities; prospective purchasers, assignees, and other parties involved in corporate transactions, and other third parties with which that you have authorized us to share your Personal Information.

Sale of Personal Information

The CCPA also provides California residents with the right to opt out of the “sale” of Personal Information.  Based on the definition of “sell” under the CCPA and under current regulatory guidance, we do not sell Personal Information. However, if you choose to limit the use of cookies and Tracking Technologies through your use of our Website, please review the information in the Cookies section of our Privacy Policy and the Opting-Out Cross-Contextual Behavioral Advertising Section above.

Direct marketing by third parties

We do not disclose Personal Information to third parties for their own purposes, and you may opt out of any disclosures of non-identifiable Personal Information. However, because California residents have the right to request information regarding such practices under California’s Shine the Light Law, please contact us regarding your rights.

 California “Shine the Light” Disclosure 

The California “Shine the Light” law gives residents of California the right under certain circumstances to opt out of the sharing of certain categories of Personal Information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your Personal Information with third parties for their own direct marketing purposes.          

Virginia Privacy Notice

This Virginia Privacy Notice applies to any Virginia residents about whom we have collected personal information. The provisions contained within this section are intended to provide notices in compliance with the Virginia Consumer Data Protection Act (“VCDPA”). Any capitalized term used and not otherwise defined below has the meaning assigned to it in this Privacy Policy.

The VCDPA provides Virginia residents with rights to receive certain rights to receive certain disclosures and access regarding collection, use, sale, and sharing of personal information, as well as rights to delete, correct, and affirmatively consent to the use, disclosure, and sale of certain personal data we collect about them. Additionally, Virginia residents have the right to opt out of targeted advertising, sale of their personal data, and profiling. Virginia residents also have the right not to receive discriminatory treatment by us for the exercise of their privacy rights. 

VCDPA Categories of Virginia Personal Information We Collect

Throughout this Privacy Policy, including in the above “Information We Collect” section, we discuss in detail the specific pieces of Personal Information we collect about individuals. Under the VCDPA, the categories of Personal Information we process on behalf of our Operators are:

  • Identifiers, including Personal Information as defined in by the VCDPA;
  • Commercial information (such as transaction data); and
  • Internet or other network or device activity (such as browsing history or IP address, including the city and state based on IP address).


How We Use and Disclose These Categories of Personal Information

We and our Operators may use (and in the past 12 months have used) all of the Personal Information we collect for the business purposes described in this Privacy Policy, and in accordance with our disclosures above. Each of the categories of Personal Information listed above is shared in accordance with our disclosures above and may be disclosed to the following: Prompt.io’s service providers and agents; state, federal, and international courts and regulatory and government authorities; prospective purchasers, assignees, and other parties involved in corporate transactions, and other third parties with which that you have authorized us to share your Personal Information.

We do not intentionally collect any sensitive personal data about you, and we prefer that you not share this information with us. Sensitive personal information will not be sold by us and will only be used for business purposes.

Your Virginia Privacy Rights 

If you are a Virginia resident, you have the following rights under applicable Virginia law in relation to your personal information, subject to certain exceptions: 

• Right to Know. You have the right to, up to twice in a 12-month period, request what personal data we collect, use, disclose, and/or sell, as applicable;

• Right to Delete. You have the right to request under certain circumstances that we delete your personal data.

• Right to Opt-Out. You have the right to opt out of targeted advertising, our sale of your personal data, and profiling decisions that could produce legal or similarly significant effects.

• Right to Correct. You have the right to request the correction of your inaccurate personal data.

• Right to Data Portability. When accessing your data, you have a right to obtain that data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit that data to another business.

• Right to Provide Affirmative Consent. We cannot process your sensitive data or use your personal data for certain purposes without your affirmative consent.

• Right to Non-Discrimination. You have the right to not receive discriminatory treatment for the exercise of the privacy rights described above.

How to submit a request 

You may exercise any of the rights described in this section by emailing us at legal@prompt.io. Any request you submit to us is subject to an identification and residency verification process (“Verifiable Consumer Request”) as permitted by the VCDPA.  We will not fulfill your request unless you have provided sufficient information that enables us to reasonably verify that you are the consumer on whom we collected the Personal Information. In order to verify you, you must provide us with your first and last name and email address. These rights are also subject to various exclusions and exceptions under applicable laws.

We will respond to your request within forty-five (45) days after receipt of a Verifiable Consumer Request for a period covering twelve (12) months and for no more than twice in a twelve-month period.  We reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and will provide notification of the extension if made within the first forty-five (45) days.

Authorized Agents

You are also permitted to designate an authorized agent to submit certain requests on your behalf.  Authorized agents will be required to provide proof of their authority to act on your behalf.  If an authorized representative submits a request on your behalf, we will contact you to confirm their representation. If we are unable to verify your identity, or confirm that you have authorized the request, we may not be able to respond to your request in full.

If you would like further information regarding your legal rights under Virginia law or would like to exercise any of them, please contact us at legal@prompt.io.

Colorado Privacy Notice

The Colorado Privacy Act (the “CPA”) provides Colorado residents with rights to receive certain disclosures regarding the collection, use, sale, and sharing of personal information, as well as rights to access, delete, correct, and restrict the use, disclosure, and sale of certain personal information we collect about them. Additionally, Colorado residents have the right to opt out of the sale/sharing of their personal information, including for purposes of cross-context behavioral advertising and targeted advertising. Colorado residents also have the right not to receive discriminatory treatment for the exercise of their privacy rights under the CPA. These rights do not apply to certain personal information that is already subject to certain federal and state regulations.

CPA Categories of Colorado Personal Information We Collect

Throughout this Privacy Policy, including in the above “Information We Collect” section, we discuss in detail the specific pieces of Personal Information we collect about individuals. Under the CPA, the categories of Personal Information we process on behalf of our Operators are:

  • Identifiers, including Personal Information as defined in by the CPA;
  • Commercial information (such as transaction data); and
  • Internet or other network or device activity (such as browsing history or IP address, including the city and state based on IP address).


How We Use and Disclose These Categories of Personal Information

We and our service providers may use (and in the past 12 months have used) all of the Personal Information we collect for the business purposes described in this Privacy Policy, and in accordance with our disclosures above. Each of the categories of Personal Information listed above is shared in accordance with our disclosures above and may be disclosed to the following: Prompt.io’s service providers and agents; state, federal, and international courts and regulatory and government authorities; prospective purchasers, assignees, and other parties involved in corporate transactions, and other third parties with which that you have authorized us to share your Personal Information.

We do not intentionally collect any sensitive personal data about you, and we prefer that you not share this information with us. Sensitive personal information will not be sold or shared and will only be used for business purposes.

Your Colorado Privacy Rights 

If you are a Colorado resident, you have the following rights under applicable Colorado law in relation to your personal information, subject to certain exceptions: 

• Right to Know. You have the right to, up to twice in a 12-month period, request what personal data we collect, use, disclose, and/or sell, as applicable;

• Right to Delete. You have the right to request under certain circumstances that we delete your personal data.

• Right to Opt-Out. You have the right to opt-out of targeted advertising, our sale of your personal data, and profiling decisions that could produce legal or similarly significant effects.

• Right to Correct. You have the right to request the correction of your inaccurate personal data.

• Right to Data Portability. When accessing your data, you have a right to obtain that data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit that data to another business.

• Right to Non-Discrimination. You have the right to not receive discriminatory treatment for the exercise of the privacy rights described above.

How to submit a request

You may exercise any of the rights described in this section by emailing us at legal@prompt.io. Any request you submit to us is subject to an identification and residency verification process (“Verifiable Consumer Request”) as permitted by the CPA.  We will not fulfill your request unless you have provided sufficient information that enables us to reasonably verify that you are the consumer about whom we collected the personal information on.  In order to verify you, you must provide us with your first and last name and email address.  These rights are also subject to various exclusions and exceptions under applicable laws.

We will respond to your request within forty-five (45) days after receipt of a Verifiable Consumer Request for a period covering twelve (12) months and for no more than twice in a twelve-month period.  We reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and will provide notification if the extension is made within the first forty-five (45) days.

Authorized Agents

You are also permitted to designate an authorized agent to submit certain requests on your behalf.  Authorized agents will be required to provide proof of their authority to act on your behalf.  If an authorized representative submits a request on your behalf, we will contact you to confirm their representation. If we are unable to verify your identity, or confirm that you have authorized the request, we may not be able to respond to your request in full.

If you would like further information regarding your legal rights under Colorado law or would like to exercise any of them, please contact us at legal@prompt.io.

Connecticut Privacy Notice

The Connecticut Data Privacy Act (together, the “CTDPA”) provides Connecticut residents with rights to receive certain disclosures regarding the collection, use, sale, and sharing of personal information, as well as rights to access, delete, correct, and restrict the use, disclosure, and sale of certain personal information we collect about them. Additionally, Connecticut residents have the right to opt out of the sale/sharing of their personal information, including for purposes of cross-context behavioral advertising and targeted advertising. Connecticut residents also have the right not to receive discriminatory treatment for the exercise of their privacy rights under the CTDPA. These rights do not apply to certain personal information that is already subject to certain federal and state regulations.

CTDPA Categories of Connecticut Personal Information We Collect

Throughout this Privacy Policy, including in the above “Information We Collect” section, we discuss in detail the specific pieces of Personal Information we collect about individuals. Under the CTDPA the categories of Personal Information we process are on behalf of our Operators are:

  • Identifiers, including Personal Information as defined in by the CTDPA;
  • Commercial information (such as transaction data); and
  • Internet or other network or device activity (such as browsing history or IP address, including the city and state based on IP address).


How We Use and Disclose These Categories of Personal Information

We and our service providers may use (and in the past 12 months have used) all of the Personal Information we collect for the business purposes described in this Privacy Policy, and in accordance with our disclosures above. Each of the categories of Personal Information listed above is shared in accordance with our disclosures above and may be disclosed to the following: Prompt.io’s service providers and agents; state, federal, and international courts and regulatory and government authorities; prospective purchasers, assignees, and other parties involved in corporate transactions, and other third parties with which that you have authorized us to share your Personal Information.

Your Connecticut Privacy Rights 

If you are a Connecticut resident, you have the following rights under applicable Connecticut law in relation to your personal information, subject to certain exceptions:

• Right to Know. You have the right to, up to twice in a 12-month period, request what personal data we collect, use, disclose, and/or sell, as applicable;

• Right to Delete. You have the right to request under certain circumstances that we delete your personal data.

• Right to Opt-Out. You have the right to opt out of targeted advertising, our sale of your personal data, and profiling decisions that could produce legal or similarly significant effects.

• Right to Correct. You have the right to request the correction of your inaccurate personal data.

• Right to Data Portability. When accessing your data, you have a right to obtain that data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit that data to another business.

• Right to Non-Discrimination. You have the right to not receive discriminatory treatment for the exercise of the privacy rights described above.

How to submit a request

You may exercise any of the rights described in this section by emailing us at legal@prompt.io. Any request you submit to us is subject to an identification and residency verification process (“Verifiable Consumer Request”) as permitted by the CTDPA.  We will not fulfill your request unless you have provided sufficient information that enables us to reasonably verify that you are the consumer on whom we collected the personal information.  In order to verify you, you must provide us with your first and last name and email address.  These rights are also subject to various exclusions and exceptions under applicable laws.

We will respond to your request within forty-five (45) days after receipt of a Verifiable Consumer Request for a period covering twelve (12) months and for no more than twice in a twelve-month period.  We reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and will provide notification if the extension is made within the first forty-five (45) days.

Authorized Agents

You are also permitted to designate an authorized agent to submit certain requests on your behalf.  Authorized agents will be required to provide proof of their authority to act on your behalf.  If an authorized representative submits a request on your behalf, we will contact you to confirm their representation. If we are unable to verify your identity, or confirm that you have authorized the request, we may not be able to respond to your request in full.

If you would like further information regarding your legal rights under Connecticut law or would like to exercise any of them, please contact us at legal@prompt.io.

10. Vermont Residents

Prompt.io will not share your nonpublic personal information with unaffiliated third parties unless you authorize us to make those disclosures without your consent, other than as permitted by law. Further, we will not share credit reports with our affiliates without your consent.

11. Opting Out of Email and Text Messages. 

You can opt out of certain commercial marketing emails at any time by clicking the "Unsubscribe" or "Opt-Out" link in the email you received. You can also email us your opt-out request at legal@prompt.io   We may send you other types of transactional and relationship email communications, such as service announcements, administrative notices, and surveys, without offering you the opportunity to opt out of receiving them. You can opt out of text alerts at any time by replying “STOP”. We process all opt out requests as quickly as we can. This opt-out request won’t prohibit us from sending you important nonmarketing notices.

12. Changes

From time to time, we may update this Privacy Policy. If there are significant changes we will notify you by sending a notice to the email address associated with your Prompt.io account, if any, revising the last update date, or by placing a notice on our Websites. We encourage you to review the Privacy Policy whenever you access the Website or otherwise interact with us to stay informed about our information practices and the choices available to you.

13. Questions

If you have any questions about this Privacy Policy please email them to legal@prompt.io or send them by mail to:

Prompt.io Inc.
14419 Greenwood Ave N., Ste A-373,
Seattle, WA 98133
USA

Other:

Contact for Data Protection Officer is DPO@prompt.io

See previous version dated August 4, 2023.