California Supplemental Privacy Notice

Last updated: Jul 26, 2023

THIS SUPPLEMENT IS FOR CALIFORNIA RESIDENTS ONLY.

This California Supplemental Privacy Notice ("Notice") complements and supplements the information contained in our Privacy Policy. This Notice applies solely to residents of the State of California and provides additional disclosures required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA").

Any terms defined in the CCPA have the same meaning when used in this Notice. Where noted in this Notice, the CCPA temporarily exempts personal information reflecting a written or verbal business-to-business communication from some of its requirements.

Understanding the CCPA

The CCPA provides California residents with specific rights regarding their personal information. Under the CCPA, consumers have the following rights:

Right to Know: You have the right to request that we disclose certain information about our collection and use of your personal information over the past 12 months, including the categories of personal information collected, the sources from which it was collected, the business or commercial purpose for collecting or selling it, the categories of third parties with whom we share it, and the specific pieces of personal information we have collected about you.
Right to Delete: You have the right to request that we delete any of your personal information that we have collected from you and retained, subject to certain exceptions.
Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA rights.

"Personal information" under the CCPA means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include publicly available information from government records, deidentified or aggregated consumer information, or information excluded from the CCPA's scope, such as health or medical information covered by HIPAA or clinical trial data, or personal information covered by certain sector-specific privacy laws.

Scope of the California Privacy Notice

This Notice applies to the processing activities that Utobo owns and controls as a "business" under the CCPA. This includes personal information we collect from consumers who use our platform, website, and services.

This Notice does not apply to personal information we collect about employees, job applicants, contractors, or other personnel in the context of their employment or application for employment with Utobo.

Information Collected About Consumers in the Last 12 Months

We have collected personal information from the following categories of sources in the last 12 months:

Information you provide to us directly: This includes information you provide when you create an account, make a purchase, contact customer support, or otherwise communicate with us. Examples include your name, email address, postal address, phone number, payment information, and any content you create or upload to our platform.
Information collected automatically: When you use our services, we automatically collect certain information about your device and usage, including your IP address, browser type, operating system, device identifiers, pages visited, links clicked, and other usage data.
Information from third parties: We may receive personal information about you from third parties, including business partners, marketing partners, social media platforms, data brokers, and publicly available sources.

Purposes for Collecting Personal Information

We collect and use personal information for the following business and commercial purposes:

To provide, maintain, and improve our services and fulfill your requests
To support our general business operations and internal processes
To improve our products, services, and user experience
To protect the security and integrity of our services and users
To detect and repair bugs, errors, and other issues in our services
To conduct auditing related to counting ad impressions, verifying positioning, and auditing compliance
For short-term, transient use, such as non-personalized advertising shown as part of your current interaction
To advance our commercial interests, including marketing and advertising
To comply with law enforcement requests and as required by applicable law, court order, or governmental regulations
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets
To perform services on behalf of our business partners, including maintaining accounts and processing transactions
As described to you at the time of collection or as otherwise set forth in the CCPA

Sale of Personal Information

Utobo does not sell personal information in the traditional sense of the word. However, we may share certain categories of personal information for purposes that could be considered a "sale" or "sharing" under the CCPA's broad definitions. Specifically, we may share the following categories of personal information with advertising and analytics partners:

Identifiers (such as online identifiers and IP addresses)
Internet or other electronic network activity information (such as browsing history, search history, and interactions with our website)

These disclosures are made for the purpose of targeted advertising, analytics, and improving the relevance of ads shown to you.

Exercising Your California Privacy Rights

To exercise any of the rights described above, you may submit a verifiable consumer request to us by contacting:

Email: support@utobo.com

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

We will need to verify your identity before processing your request. To verify your identity, we may ask you to provide information such as your name, email address, or other identifying details that we can match against information we already have on file.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.