Privacy Policy

Welcome to Spotmar, a service provided Spotmar LLC. ("Spotmar", "we", "us", or "our"). Spotmar provides the fastest email experience in the world. Designed to make our users twice as productive.

This Privacy Policy explains how we collect, disclose and otherwise process Personal Data (defined below) when you use our website (the "Site"), mobile application (the "App"), and all related services provided by Spotmar (collectively, the "Service"), and your choices concerning our data practices.

"You" or "your", as used in this Privacy Policy, refers to the individual to whom Personal Data relates.

This Privacy Policy is incorporated into and forms part of our Terms of Service. Please read this Privacy Policy before using our Service or submitting any Personal Data to Spotmar and contact us if you have any questions.

When you contact us or interact with our Service we collect information that alone or in combination with other information could be used to identify you ("Personal Data") as follows:

Personal Data You Provide

We may collect your name, email address, phone number, and payment information when you register for our Service, sign up for our mailing list, or otherwise communicate with us. We may also collect any communications between you and Spotmar and any other information you provide to the Spotmar.

We also have pages on social media sites like Facebook and Twitter ("Social Media Pages"). When you interact with our Social Media Pages, we may collect Personal Data that you elect to provide to us through your settings on the Social Media Site, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

Personal Data Collected Automatically

Spotmar Content. We collect information from Spotmar product features, including the content of drafts or snippets you create in the Service and read receipts.

Authentication Tokens. When you sign in to the Service, we collect and store encrypted Google or Microsoft authentication tokens.

Use of the Site and App: When you visit, use and interact with the Site or App, we may receive certain information about your visit, use or interactions. For example, we may monitor the number of people that visit our Site or App, peak hours of visits, which page(s) are visited on our Site, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access and visit our Site (e.g., Firefox, Microsoft Internet Explorer, etc.), broad geographical information, and Site-navigation pattern. In particular, the following information is created and automatically logged in our systems:

• Log data: Information that your browser automatically sends whenever you visit the Site ("log data"). Log data includes your Internet Protocol ("IP") address (so we understand which country you are connecting from when you visit the Site), browser type and settings, the date and time of your request, and how you interacted with the Site.

• Cookies: Please see the "Cookies" section below to learn more about how we use cookies on the Site.

• Device information: Includes the operating system and browser you are using. Information collected may depend on the type of device you use and its settings.

• Usage Information: We collect information about how you use our Site and App, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency and duration of your activities.

• Anonymous Email Information. We collect and store anonymous information about emails you send and receive through the Service. This includes numeric identifiers and timestamps, but does not include Email Content Data (as defined below) or other information that could identify the sender, the recipient or the subject of the email.

Personal Data We Receive From Third Parties: From time to time we may receive information about you from third parties and other users, including your job title, employer, and location. We may also collect information about you that is publicly available. This may include your publicly available social media information, or your contacts' publicly available social media information. The data we receive is dependent upon your and your contacts' privacy settings with the relevant social network.

Personal Data We Process on Your Behalf: we process the contents of emails you send and receive through the Service, as well as the email addresses of the people you communicate with through the Service (collectively "Email Content Data"), on your behalf and subject to your instructions.

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Personal Data We Process on Behalf of Business Customers: If one of our business customers (such as your employer) provides you with access to the Service, we process your information pursuant to our Terms of Service and other agreements with the applicable business customer. If you are such an individual and would no longer like your data to be used by one of our business customers that use our Services or you would like to access, correct or request deletion of your data, please contact the business customer that you interact with directly.

We use Personal Data to provide the Service and improve your email experience. This processing is necessary to perform our contract with you.

We also use Personal Data as necessary for the following legitimate business interests

• To update and synchronize Service features across multiple devices (i.e., so a draft email you begin on one device will be available on your other device(s));

• To display information in the Service (such as emails and insights (such as job titles and profile photos) about other individuals with whom you communicate through the Service);

• To respond to your inquiries, comments, feedback or questions and provide onboarding support;

• To solicit referrals for new users from current users and to contact such referrals and other potential users;

• To manage our relationship with you, which includes sending administrative information to you relating to our Service and changes to our terms, conditions, and policies and sending account verification or technical/security notices;

• To analyze how you interact with our Service and provide, maintain and improve the content and functionality of the Service and our customer relationships and experiences, develop our business and inform our marketing strategy;

• To administer and protect our business and the Site, prevent fraud, criminal activity, or misuses of our Site, and to ensure the security of our IT systems, architecture and networks (including troubleshooting, testing, system maintenance, support and hosting of data); and

• To comply with legal obligations and legal process and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or other third parties, and recover debts due to us.

For information about what we mean by legitimate interests and the rights of individuals in the European Union ("EU"), please see the "EU Users" section below.

Aggregated Information. We may aggregate Personal Data and use the aggregated information to analyze the effectiveness of our Service, to improve and add features to our Service, and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services. We may collect aggregated information through the Service, through cookies, and through other means described in this Privacy Policy.

Marketing. We may contact you to provide information we believe will be of interest to you. For instance, if you elect to provide your email address, we may use that information to send you promotional information about our products and services. If we do, where required by law, for example if you are in the EU, we will only send you such emails if you consent to us doing so at the time you provide us with your Personal Data. You may opt out of receiving emails by following the instructions contained in each promotional email we send you or by contacting us. If you unsubscribe from our marketing lists, you will no longer receive marketing communications but we will continue to contact you regarding our Site and Services and to respond to your requests.

In certain circumstances we may share your Personal Data with third parties without further notice to you, unless required by the law, as set forth below:

Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Data with service providers, including web hosting, debugging services, email and productivity services, survey providers, data base and sales/customer relationship management services, customer service providers, payment processors; web and app analytics services, and data brokers. Notwithstanding the foregoing, we only share Email Content Data with our hosting provider (Google, Inc.) and, if you opt in, with our AI provider (OpenAI, Inc.). Pursuant to our instructions, these parties will access, process or store Personal Data in the course of performing their duties to us.

We use OpenAI to provide you with Spotmar's AI features, which are designed to help you create and edit emails with the help of machine learning algorithms. In order to use OpenAI's service, we need to collect, process, and transfer data, including personal data, the processes which are subject to this Privacy Policy.

We use OpenAI and Spotmar AI features based on your consent. By using Spotmar's AI features, you consent to the processing of your personal data by us as described in this Privacy Policy. If you do not consent to the use of the OpenAI service, you should not switch on Spotmar's AI features.

Your email content and requests you make to Spotmar's AI features are private and encrypted in accordance with our standard privacy and information security practices.

Your private data will not be used to train any machine learning models for Spotmar or OpenAI when you use Spotmar's AI features. Any information, including personal data, that you furnish while using Spotmar's AI features will be shared with OpenAI solely for the purpose of functioning of Spotmar's AI features.

Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider, your Personal Data and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.

Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with legal or regulatory obligations, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Site, or the public, or (v) protect against legal liability.

We keep Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a legitimate business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer.

If you have elected to receive marketing communications from us, we retain information about your marketing preferences until you opt out of receiving these communications and in accordance with our policies.

To determine the appropriate retention period for your Personal Data, we will consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we use your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

If you need to change or correct your Personal Data, or wish to have it deleted from our systems, you may contact us. We will address your request as required by applicable law.

Online Tracking and Do Not Track Signals: We may allow third party service providers to use cookies or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site. Our Site currently does not respond to "Do Not Track" ("DNT") signals and operates as described in this Privacy Policy whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will describe how we do so in this Privacy Policy.

Our Service is not directed to children who are under the age of 13. Spotmar does not knowingly collect Personal Data from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Data to Spotmar through the Service please contact us and we will endeavor to delete that information from our databases.

Scope. This section applies to individuals in the EU (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway, the United Kingdom, and, to the extent applicable, Switzerland).

Data Controller. Data protection laws in the EU differentiate between the "data controller" and "data processor" of Personal Data. If you signed up for the Service on your own, Spotmar is the data controller for the processing of your Personal Data. You can find our contact information, and the contact information of our EU-based representative, in the "Contact Us" section below.

Data Processor. If one of Spotmar's business customers has granted you access to the Service, Spotmar is the data processor for the processing of your Personal Data. To exercise the rights described below in relation to such processing of Personal Data, please contact the applicable business customer. Spotmar is also the data processor for the processing of Email Content Data on your behalf.

Legal Bases for Processing. This Privacy Policy (the paragraph "How We Use Personal Data") describes the legal bases we rely on for the processing of your Personal Data. Please contact us if you have any questions about the specific legal basis we are relying on to process your Personal Data.

As used in this Privacy Policy, "legitimate interests" means our interests in conducting our business and developing a business relationship with you. This Privacy Policy describes when we process your Personal Data for our legitimate interests, what these interests are and your rights. We will not use your Personal Data for activities where the impact on you overrides our interests, unless we have your consent or those activities are otherwise required or permitted by law.

Your Rights. Pursuant to the European Union General Data Protection Regulation (or GDPR), you have the following rights in relation to your Personal Data, under certain circumstances:

• Right of access: If you ask us, we will confirm whether we are processing your Personal Data and, if so, provide you with a copy of that Personal Data along with certain other details. If you require additional copies, we may need to charge a reasonable fee.

• Right to rectification: If your Personal Data is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your Personal Data with others, we will tell them about the correction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so you can contact them directly.

• Right to erasure: You may ask us to delete or remove your Personal Data, such as where you withdraw your consent. If we shared your data with others, we will tell them about the erasure where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data with so you can contact them directly.

• Right to restrict processing: You may ask us to restrict or 'block' the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared your Personal Data with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so you can contact them directly.

• Right to data portability: You have the right to obtain your Personal Data from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and that is processed by automated means. We will give you your Personal Data in a structured, commonly used and machine-readable format. You may reuse it elsewhere.

• Right to object: You may ask us at any time to stop processing your Personal Data, and we will do so:

• If we are relying on a legitimate interest to process your Personal Data — unless we demonstrate compelling legitimate grounds for the processing or we need to process your data in order to establish, exercise, or defend legal claims;

• If we are processing your Personal Data for direct marketing. We may keep minimum information about you in a suppression list in order to ensure your choices are respected in the future and to comply with data protection laws (such processing is necessary for our and your legitimate interest in pursuing the purposes described above);

• Right to withdraw consent: If we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing of your data before we received notice that you wished to withdraw consent.

•Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns (in the UK, the Information Commissioner's Office (ICO), who can be contacted at https://ico.org.uk/concerns, and in other EU countries the data protection authority of the country in which you are located).

Please see the "Contact Us" section below for information on how to exercise your rights.

Data Transfers. We rely on our EU-U.S. and Swiss-U.S. Privacy Shield certification to transfer Personal Data that we receive from the EU and Switzerland to Spotmar in the U.S. (for more information, please read the "Privacy Shield" section below).

Spotmar complies with the EU-U.S. and Swiss-U.S. Privacy Shield frameworks ("Frameworks") as set forth by the U.S. Department of Commerce regarding the processing of Personal Data transferred from the EU and Switzerland to the U.S. (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway). Spotmar has certified that it adheres to the Privacy Shield Principles (described below). If there is any conflict between the policies in this Privacy Policy and the EU or Swiss Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Frameworks and to view our certification page, please visit https://www.privacyshield.gov/.

General. We rely on our Privacy Shield certification to transfer Personal Data that we receive from the EU and Switzerland to Spotmar in the U.S. and we process such Personal Data in accordance with the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability ("Privacy Shield Principles"), as described below.

Notice and Choice. This Privacy Policy provides notice of the Personal Data collected and transferred under the Privacy Shield and the choice that you have with respect to such Personal Data. It also provides information about other Privacy Shield Principles that are set forth below.

Accountability for Onward Transfers. We may be accountable for the Personal Data we receive under the Privacy Shield that we may transfer to third-party service providers (described in the section "How We Share and Disclose Personal Data" above). If such service providers process Personal Data in a manner inconsistent with the Privacy Shield Principles, we are responsible for the harm caused.

Security. We maintain security measures to protect Personal Data as described in the "Security" section of this Privacy Policy.

Data Integrity and Purpose Limitation. We take reasonable steps to ensure that Personal Data is reliable for its intended use, and that it is accurate, complete and current for as long as we retain it. Our data retention practices are described in the "Data Retention" section of this Privacy Policy.

Access. EU users have certain rights to access, correct, amend, or delete Personal Data where it is inaccurate, or has been processed in violation of the Privacy Shield Principles. Please see the "Your Rights" section above for more information on the rights of users in the EU (and, to the extent applicable, users in Switzerland).

Recourse, Enforcement, Liability. In compliance with the Privacy Shield Principles, Spotmar commits to resolve complaints about our processing of your Personal Data. EU and Swiss users with inquiries or complaints regarding this Private Shield Policy should first contact Spotmar at: [email protected].

We have further committed to refer unresolved Privacy Shield complaints to an alternative dispute resolution provider. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider JAMS (free of charge) at https://www.jamsadr.com/eu-us-privacy-shield.

If your complaint is not resolved through these channels, under certain conditions a binding arbitration option may be available before a Privacy Shield Panel. For additional information, please visit: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.

We are subject to the investigatory and enforcement powers of the Federal Trade Commission with respect to Personal Data received or transferred pursuant to the Frameworks.

The Site may contain links to other websites not operated or controlled by Spotmar, including social media services ("Third Party Sites"). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

A "cookie" is a piece of information sent to your browser by a website you visit. By choosing to use the Site after having been notified of our use of cookies and other technologies in the ways described in this Privacy Policy, and, in applicable jurisdictions, through notice and unambiguous acknowledgement of your consent, you agree to such use.

Cookies can be stored on your computer for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third party placing it) and help recognize your computer when you open your browser and browse the Internet again (persistent cookies). Our Site uses cookies from the third parties described below. For more details on cookies please visit All About Cookies.

Type of Cookies Used

The following chart sets out how we use different categories of cookies and similar technologies, as well as information on your options for managing the settings for the data collection by these technologies:

CATEGORY WHO SERVES THE COOKIE/ TECHNOLOGY OPT OUT

Strictly necessary

Used to provide users with services available through the Site and to use some of its features, such as the ability to log-in and access secure areas. These cookies are essential for using and navigating the Site.

Spotmar. These cookies will expire in six months. Because these cookies are strictly necessary to deliver the Service, users cannot refuse them.

Security

Used to secure traffic to the Site.

Cloudflare, Inc. For more information, please visit this page. Because these cookies are strictly necessary to secure the Site, users cannot refuse them.

Analytics/Performance

Used to recognize and count the number of visitors and to see how visitors move around the Site. This helps us to improve the way our site works, for example by making sure users are finding what they need easily. The collected data provides us only with anonymous traffic statistics (like number of page views, number of visitors, source, and time spent on each page).

Google Analytics (provided by Google, Inc.). The information generated by Google Analytics about your use of the Site (including your IP address) will be transmitted to and stored by Google, Inc. in the United States (pursuant to Google's Privacy Shield certification). For more information on Google Analytics privacy practices, read here. For information on Google Analytics cookies expiration, read here.

Spotmar.

Google Analytics Opt-out Browser Add-on

You can also block or delete these cookies by changing the browser settings as explained in the "Your Options" section below.

Your Choices. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit the Network Advertising Initiative's online resources at https://www.networkadvertising.org and follow the opt-out instructions there or if you are located in the European Union, visit the European Interactive Digital Advertising Alliance's Your Online Choices opt-out tool here.

If you access the Site on your mobile device, you may not be able to control tracking technologies through the settings.

You use the Service at your own risk. We comply with industry standards to protect Personal Data both online and offline from loss, misuse, and unauthorized access, disclosure, alteration or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you send to us via the Service or e-mail. Please keep this in mind when disclosing any Personal Data to Spotmar via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third party websites.

Whether or not you provide Personal Data to us is completely up to you, but if you choose not to provide information that is needed to use some features of our Site, you may be unable to use those features. You can also contact us to request access to your data or to ask us to update, correct, or delete your Personal Data.

The Service, and our business may change from time to time. As a result we may change this Privacy Policy at any time. When we do we will post an updated version on this page, unless another type of notice is required by the applicable law. By continuing to use our Service or providing us with Personal Data after we have posted an updated Privacy Policy, or notified you if applicable, you consent to the revised Privacy Policy and practices described in it.

If you have any questions about our Privacy Policy or the information practices of the Site, please feel free to contact us at [email protected].