Updated May 23, 2018
This policy covers how Persona (“Persona,” “we,” “us,” or “our”) treats personal information that it collects and receives on www.persona.co. We are not in the business of selling information about you: we use information shared with us for the sole purpose of running and improving our services. This notice tells you what information we collect, steps we take to protect and secure it, how we use and share information, and finally, how you can contact us with questions or concerns.
Information We Gather
- Persona collects personal information when you register with us, use Persona products or services or post content on a Persona web site. This information is limited to your name, email address, username, and any information you post on your site. Your password is stored securely using a one way hash function.
- Persona may also collect personal information if you enter into promotions or sweepstakes.
- Persona may automatically receive and record information on our server logs from your browser, including your IP address, cookies, and the pages you request.
- Persona uses information for the following general purposes: products and services provision, identification and authentication, services improvement, support, contact, research, and anonymous reporting.
- Should you sign up for any of Persona's paid features, we require your billing information in order to process the transaction.
- We do not store your billing information, and this information will be discarded after your transaction has been processed.
- We will retain the last 4 digits of your credit card number, and credit card type, so that you may identify the card used in the future.
- If your subscription is auto-renewing, a recurring subscription will be created at our payment gateway.
- All transactions are processed over an industry standard SSL/TLS connection, with a minimum of 128-bit encryption.
- Persona may occasionally obtain IP addresses from users depending upon how you access our web sites. IP addresses, browser and session information may be used for various purposes, including but not limited to:
- Diagnose and prevent service or technology problems reported by our users or engineers that are associated with the IP addresses controlled by a specific web company or ISP.
- Estimate the total number of users visiting Persona's web sites from specific geographical regions.
- Help determine which users have access privileges to certain content, services or resources that we offer.
- Monitor and prevent fraud and abuse.
- A cookie is a small amount of data, which often includes an anonymous unique identifier that is sent to your browser from a web site's computers and stored on your computer's hard drive.
- If you reject all cookies, you may not be able to use Persona services or products that require you to "sign in" and you may not be able to take full advantage of all offerings.
- You can configure your browser to accept all cookies, reject all cookies or notify you when a cookie is set.
- Persona uses its own cookies for a number of purposes, including to:
- Require you to re-enter your password after a certain period of time has elapsed to protect you against others accidentally accessing your account contents.
- Keep track of preferences you specify while you are using the Persona Sites, Products and Services.
- Estimate and report our total audience size and traffic.
- Conduct research to improve the content and services provided on the Persona Sites, Products and Services.
Information Relating to Children
- Users under the age of 13 are prohibited from using Persona.
Information Use, Sharing and Disclosure
- Persona does not share personal information we learn about you from your use of the Persona web sites, products and services with others except as described in this policy.
- Persona may use or share your personal information where it is necessary to complete a transaction, to operate or improve the Persona products and services, or to do something that you have asked us to do.
- From time to time, Persona or a partner may sponsor a promotion, sweepstake or contest on Persona. You may be asked to provide personal information including name, email address or home address or to answer questions in order to participate. This information will be used strictly for the purpose of notifying and arranging delivery of promotional items to the person selected.
- When you register for Persona, we collect user-submitted account information such as username and email address to identify users and send notifications related to the use of the service.
- When you post content on a Persona web site, you have the ability to post content which may include personally identifiable information about yourself.
- If you post personal information online that is accessible to the public, you may receive unsolicited messages from other parties in return.
- Persona may share personally identifiable information about you under the following circumstances:
- We may share your personal information to respond to subpoenas, court orders, or legal process, to establish or exercise our legal rights or, defend against legal claims and if in our judgment in such circumstances disclosure is required or appropriate.
Persona may revise, modify or update this policy. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your particular Persona account or by placing a prominent notice on our site.
Confidentiality and Security
No data transmissions over the Internet can be guaranteed to be 100% secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk. Once we receive your transmission, we make efforts to ensure security on our systems.
- We use physical, electronic, and procedural safeguards to protect personal information about you.
- Your account information is password-protected. Additionally, your account's password is stored using a one way hash algorithm.
- In certain areas, Persona uses industry-standard SSL-encryption to protect data transmissions. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software.
If Persona learns of a security systems breach we may attempt to notify you electronically so that you can take appropriate protective steps. By using Persona or providing personal information to us you agree that we can communicate with you electronically regarding security, privacy and administrative issues relating to your use of those sites, products and services. We may post a notice on our applicable web sites if a security breach occurs. If this happens, you will need a web browser enabling you to view the applicable web sites. We may also send an email to you at the email address you have provided to us in these circumstances. Depending on where you live, you may have a legal right to receive notice of a security breach in writing. To receive free written notice of a security breach (or to withdraw your consent from receiving electronic notice) you should notify us at email@example.com.
Changing your Preferences and Personal Information
- You can edit your account information with Persona at any time.
- You can delete your applicable account by visiting the applicable account deletion page; however, please note that some personal information, primarily your contact information, may remain in our records to the extent necessary to protect our legal interests or document compliance with regulatory requirements.
Persona, as well as our data storage, resides in the United States. No matter where you are located, you consent to the processing and transferring of your information in and to the US and other countries. We have legally certified to commit to comply with the Privacy Shield Framework and Privacy Shield Principles. Such commitment is legally binding and enforceable under US law and satisfies the data privacy laws of the EU and Switzerland.
Persona has certified with Privacy Shield Framework and is legally committed to comply with all of the provisions of the EU - US Privacy Shield Framework and Swiss - US Privacy Shield Principles as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal information transferred from the European Union and Switzerland to the United States. It has been agreed by the EU and Switzerland that compliance with and certification with Privacy Shield satisfies all data privacy requirements under General Data Protection Regulation (GDPR). You can learn more about the Frameworks and Principles by visiting this page. A list of companies certifying under Privacy Shield can be found here.
If you have a privacy concern regarding Persona, or this policy, and if you cannot satisfactorily resolve it through the use of those sites, products or services, you can write to us by email at firstname.lastname@example.org.