Privacy Policy

Summary of Key Points

This summary provides key points from our Privacy Notice. You can find more details about any of these topics by using the table of contents to find the section you are looking for.

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Sensitive Information. We do not process sensitive information.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts
• To deliver and facilitate delivery of services to the user
• To respond to user inquiries/offer support to users
• To send administrative information to you
• To fulfill and manage your orders
• To enable user-to-user communications
• To request feedback
• To send you marketing and promotional communications
• To protect our Services
• To identify usage trends
• To save or protect an individual's vital interest

3. What Legal Bases Do We Rely On to Process Your Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent).

4. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice.

Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

5. What Is Our Stance on Third-Party Websites?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with, our Services.

The Services may link to third-party websites, online services, or mobile applications and/or contain advertisements from third parties that are not affiliated with us and which may link to other websites, services, or applications. Accordingly, we do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. The inclusion of a link towards a third-party website, service, or application does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this Privacy Notice. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Services. You should review the policies of such third parties and contact them directly to respond to your questions.

6. Is Your Information Transferred Internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information, in the United States and other countries.

7. How Long Do We Keep Your Information?

In Short: We keep your information for specific periods depending on the type of data and your account status.

Retention Periods

After Account Termination

Upon termination of your account:

• We will delete or anonymize your personal information within thirty (30) days
• You may request an export of your data during the 14-day post-termination period (as described in our Terms of Service)
• Certain information may be retained longer where required by law, to resolve disputes, or to enforce our agreements

Requesting Early Deletion

You may request deletion of your personal information at any time by contacting us at privacy@horizon-group.io. We will process deletion requests within the timeframes specified in Section 10 (Your Privacy Rights).

8. How Do We Keep Your Information Safe?

In Short: We protect your personal information through specific technical and organizational security measures.

Technical Security Measures

We implement the following technical safeguards:

• Encryption in Transit: All data transmitted between you and our Services is encrypted using TLS 1.2 or higher
• Encryption at Rest: Personal information stored on our servers is encrypted using industry-standard AES-256 encryption
• Access Controls: Role-based access controls, multi-factor authentication (MFA) for administrative access, and principle of least privilege
• Infrastructure Security: Regular security patches, firewall protection, intrusion detection systems, and network monitoring

Organizational Security Measures

• Employee Security: Background checks for employees with data access, security awareness training, and confidentiality agreements
• Incident Response: Documented procedures for identifying, containing, and remediating security incidents
• Regular Assessments: Periodic security assessments and vulnerability testing

Data Breach Response

In the event of a security breach affecting your personal information, we will:

• Notify you within seventy-two (72) hours of confirming the breach
• Provide details about the nature and scope of the breach
• Describe measures taken to address the breach
• Cooperate with regulatory authorities as required

Limitations

Despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We encourage you to use strong passwords, enable two-factor authentication where available, and protect your account credentials.

9. Do We Collect Information from Minors?

In Short: We do not knowingly collect data from or market to persons under 18 years of age.

The Services are intended for users who are at least 18 years old. Persons under the age of 18 are not permitted to use or register for the Services. We do not knowingly collect personal information from persons under 18. If we learn we have collected personal information from a person under 18, we will delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@horizon-group.io.

This policy complies with the Children's Online Privacy Protection Act (COPPA) and similar laws.

10. What Are Your Privacy Rights?

In Short: You may review, change, or terminate your account at any time.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Log in to your account settings and update your user account
• Contact us using the contact information provided

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

11. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

12. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California or other US states with privacy laws, you have specific rights regarding your personal information.

California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information.

Your Rights Under CCPA/CPRA

You have the right to:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for collection, and the categories of third parties with whom we share it.

• Right to Delete: Request deletion of your personal information, subject to certain exceptions.

• Right to Correct: Request correction of inaccurate personal information we maintain about you.

• Right to Opt-Out of Sale/Sharing: Opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising purposes.

• Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you may limit our use to what is necessary to provide the Services.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

Do Not Sell or Share My Personal Information

We do not "sell" personal information as traditionally defined. However, under CCPA/CPRA's broad definitions, certain data sharing activities may be considered a "sale" or "sharing."

To opt out, email us at privacy@horizon-group.io with subject line "Do Not Sell or Share My Personal Information." We honor Global Privacy Control (GPC) signals as a valid opt-out request.

Shine the Light

California Civil Code Section 1798.83 ("Shine The Light") permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Other US State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, or other states with comprehensive privacy laws, you may have the following rights:

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA)

• Right to Access: Confirm whether we process your personal data and access that data
• Right to Correct: Correct inaccuracies in your personal data
• Right to Delete: Delete personal data you have provided or we have obtained
• Right to Data Portability: Obtain a copy of your personal data in a portable format
• Right to Opt Out: Opt out of targeted advertising, sale of personal data, and profiling

Utah (UCPA)

• Right to Access: Know whether we process your personal data and access that data
• Right to Delete: Delete personal data you have provided
• Right to Data Portability: Obtain a copy of your personal data
• Right to Opt Out: Opt out of targeted advertising and sale of personal data

How to Exercise State Privacy Rights

To exercise your rights under these state laws, email us at privacy@horizon-group.io with subject line "State Privacy Request - [Your State]". Include your name, state of residence, and the specific right you wish to exercise. We will respond within the timeframe required by your state's law (typically 45 days, with possible extension).

Right to Appeal

If we decline to take action on your request, you have the right to appeal. To appeal, email us at privacy@horizon-group.io with subject line "Privacy Appeal." If your appeal is denied, you may contact your state's Attorney General.

Data Breach Notification by State

In addition to the 72-hour notification described in Section 8, we comply with state-specific breach notification requirements:

For residents of other states, we will comply with applicable breach notification laws.

13. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at privacy@horizon-group.io or contact us by post at:

15. How Can You Review, Update, or Delete the Data We Collect from You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please visit: https://syncbeam.io.