Last Updated and Effective: March 16, 2021
INFORMATION WE COLLECT
Stock Story collects information from you in the ways detailed below.
INFORMATION YOU GIVE US
When you access the Services and create an account (“ Account”), we may collect certain information about you, including but not limited to:
Billing or payment information.
INFORMATION WE RECEIVE FROM OTHERS
We may receive information about you from others, including but not limited to:
Other Partners. We may receive information about you from third party services, such as analytics providers and advertising partners.
INFORMATION COLLECTED FROM YOUR USE OF THE SERVICES
When you use our services, we automatically receive and record information on our server logs from your browser or device, which may include the following:
Device identifiers and information;
Web browser information;
Page view statistics;
Transaction information (e.g. transaction amount, date and time such transaction occurred);
Identifying information from cookies and certain other tracking technologies (e.g. web beacons, pixel tags, SDKs, etc.) — for more information, see “How We Collect Data” section below;
Location information (e.g. IP address, zip code), including geolocation/GPS data – for more information, see below;
Log data (e.g. access times, hardware and software information).
Geolocation Information. You may be asked to share your precise geolocation information with us so we can customize your experience on the Services. If you give us permission, we can collect your precise geolocation (latitude and longitude) through various means, depending on the service and device you’re using, including GPS, Bluetooth or Wi-Fi connections. The collection of your geolocation may occur in the background even when you aren’t using the services if the permission you gave us expressly permits such collection. This information helps us identify your physical location and we may use it to personalize the Services and make it easier for you to interact with other users.
HOW WE USE YOUR INFORMATION
We use the information we collect, both on its own and combined with any other information we collect about you, for a variety of business purposes, including:
Effectively provide our Services to you, including for:
creation, access, and usage of your profile;
providing access to certain functions and features of our Services; and
managing your information and Account.
To present content to you.
To notify you about changes to the Services.
To communicate with you about your Account, our Services and policy changes
To provide analytics services.
To personalize website content and communications based on your preferences.
To do a better job of advertising and marketing our Services or marketing third party products and services, or target prospective customers with our products or services (our use of your information, marketing, and targeting activities are performed with your consent where required by applicable law);
To analyze and improve our Services pursuant to our legitimate interest, such as: detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity; undertaking research for technological development and demonstration measuring interest and engagement in our Services and short-term, transient use; developing new products and Services; and enforcing our terms and policies;
To create de-identified and aggregated information, such as de-identified demographic information, de-identified location information, information about the computer or device from which you access our Services, or other analyses we create; and
We may use third-party APIs and software development kits (“ SDKs”) as part of the functionality of our Services. APIs and SDKs may allow third parties including analytics and advertising partners to collect your personal information for various purposes including to provide analytics services and content that is more relevant to you.
To process your information as described above, we rely on the following legal bases:
Provide our service to you: Most of the time, the reason we process your information is to perform the contract that you have with us.
Legitimate interests: We may use your information where we have legitimate interests to do so. For instance, we analyze users’ behavior on our services to continuously improve our offerings, we suggest offers we think might interest you, and we process information for administrative, fraud detection and other legal purposes.
Legal compliance: If the law requires us to, we may need to collect and process your data. For example, we can pass on details of people involved in fraud or other criminal activity affecting us to applicable law enforcement.
HOW WE COLLECT DATA
We use different technologies to collect, process and store your information. These technologies include:
Log Files. A log file is a file that records events that occur in connection with your use of the Services, such as your service use data.
Third Party. We may embed third party scripts or put embeds in the page that send requests to external sites which may allow third parties to drop and read cookies on your browser. Your browser may allow you to disable cookies from third party sites.
Other Data Collection Technologies. Other technology used may include pixel tags, web beacons, local storage, algorithms and other similar tools on our Services or in our email messages.
SHARING OF INFORMATION
The information we collect is used to provide and improve the content and the quality of Stock Story, and without your consent we will not otherwise share your personal information to/with any other parties except: (a) to provide our Services, (b) when we have your permission, or (c) or under the following instances:
To service providers and business partners;
To third parties for marketing and internal research purposes, and for external research purposes (for external research, any information will be provided in anonymized and aggregated form);
For legal disclosures and business transfers; and
SERVICE PROVIDERS AND BUSINESS PARTNERS.
We may share your information with our third-party service providers and business partners that help us to accomplish certain business purposes (e.g., marketing and analytics providers, security and technology providers, advertising partners, and payment processors). When we share personal information with certain third-party partners, including marketing and advertising partners, that information includes your name, email address and other information enabling partners to fulfil business purposes, which may include:
validate your identity and fitness to use the service,
prevent fraudulent use of the service,
process payments pursuant to your usage of the Services,
assist you in using our products and services,
contact you with offers, services or products that may be of interest to you, and
provide you with their products or services.
The categories of service providers (processors) to whom we entrust personal information include: IT and related services; information and services; payment processors; customer service providers; and vendors to support the provision of the Services. We may also share non-personal information with certain third parties, including the media, industry observers, marketing and advertising partners, vendors, customers, potential customers or partners.
We may disclose any information without notice or consent from you: (a) in response to a legal request, such as a subpoena, court order, or government demand; (b) to investigate or report illegal activity; or (c) to enforce our rights or defend claims. If we have a good faith belief that such disclosure is reasonably necessary, we may disclose your personal information to other relevant third parties, such as internet service providers, to conduct an investigation, bring legal action, protect the rights of our user base, prevent harm to others or pursue other relief when you or a third party are or may be doing certain actions, such as:
violating our terms and conditions of use;
causing injury or other harm to, or otherwise violating the property or other legal rights, of us, other users, or third parties; or
violating federal, state, local, or other applicable law.
We may also transfer your information to (a) any affiliate of our corporate group or (b) another company in connection with a merger, financing due diligence, corporate restructuring, sale of any or all of our assets, or in the event of bankruptcy.
UPDATING OR REMOVING INFORMATION
You may review or edit your Account information as you wish, by logging into your Account using the information supplied during the registration process. Where you have consented to our use of your personal information, you may withdraw your consent at any time by contacting us at email@example.com. Some privacy laws may give you the right to review the personal information we keep about you. You can request a copy of your personal information by contacting us at firstname.lastname@example.org. If you believe that the information we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion or object to its processing, please contact us email@example.com. For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests. Keep in mind, we may reject requests for certain reasons, including if the request is unlawful.
If you would like to have us delete your Account information, we may do so by deactivating your Account first and then permanently deleting your Account. We may not be able to accommodate certain requests to object to the processing of personal information, notably where such requests would not allow us to provide our service to you anymore. You can stop all information collection by an app by uninstalling it using the standard uninstall process for your device. If you uninstall the app from your mobile device, the unique identifier associated with your device will continue to be stored. If you re-install the application on the same mobile device, we will be able to re-associate this identifier to your previous transactions and activities.
Notwithstanding the foregoing, we may continue to contact you for the purpose of communicating information relating to your request for our Services, or to respond to any inquiry or request made by you, as applicable. To opt out of receiving messages concerning Stock Story, you must cease requesting and/or utilizing our Services, and cease submitting inquiries to Stock Story, as applicable.
The Services may contain links to other websites, and other websites may reference or link to our website or other Services. These other websites are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve and are not responsible for the privacy practices or content of such other websites or applications. Visiting, accessing or utilizing these other websites or applications is at your own risk.
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW WE ASSUME NO LIABILITY OR RESPONSIBILITY FOR DISCLOSURE OF YOUR INFORMATION DUE TO ERRORS IN TRANSMISSION, UNAUTHORIZED THIRD-PARTY ACCESS, OR OTHER CAUSES BEYOND OUR CONTROL. BY USING THE SERVICES OR PROVIDING PERSONAL INFORMATION TO US, YOU AGREE THAT WE MAY COMMUNICATE WITH YOU ELECTRONICALLY REGARDING SECURITY, PRIVACY, AND ADMINISTRATIVE ISSUES RELATING TO YOUR USE OF THE SERVICES. IF WE LEARN OF A SECURITY SYSTEM’S BREACH, WE MAY ATTEMPT TO NOTIFY YOU ELECTRONICALLY BY POSTING A NOTICE ON THE SERVICES, BY MAIL OR BY SENDING AN E-MAIL TO YOU.
You play an important role in keeping your personal information secure and you should not share your username, password, or other security information for your Account with anyone. If we receive instructions using your username and password, we will consider that you have authorized the instructions. If you believe there has been any unauthorized access or use of your information, please contact us immediately at firstname.lastname@example.org. We may suspend your use of all or part of the Services without notice if we suspect or detect any breach of security.
CHOICE/OPT-OUT (MARKETING COMMUNICATIONS FROM US, EMAIL, PHONE, COOKIES)
RETENTION OF PERSONAL INFORMATION
PROCESSING AND STORING YOUR DATA
Where the GDPR applies and in accordance with any other applicable law, in certain circumstances and subject to data processing agreements, you have rights in relation to the personal information we hold about you. We set out below an outline of those rights and how to exercise those rights. Please note that we may require you to verify your identity before responding to any requests to exercise your rights by providing details only known to the account holder. To exercise any of your rights, please contact us at email@example.com. Please note that for each of the rights below we may have valid legal reasons to refuse your request, in such instances we will let you know if that is the case.
For the purposes of GDPR, the data controller is: Stock Story, Inc.
ACCESS - You have the right to know whether we process personal information about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with. In order to obtain information and access to data held by you, please contact us at firstname.lastname@example.org.
PORTABILITY - You have the right to receive a subset of the personal information you provide us if we process it on the legal bases of our contract with you or with your consent in a structured, commonly used and machine-readable format and a right to request that we transfer such personal information to another party. If you wish for us to transfer the personal information to another party, please ensure you detail that party and note that we can only do so where it is technically feasible. We are not responsible for the security of the personal information or its processing once received by the third party.
CORRECTION - You have the right to require us to correct any personal information held about you that is inaccurate and have incomplete data completed. Where you request correction, please explain in detail why you believe the personal information we hold about you to be inaccurate or incomplete so that we can assess whether a correction is required. Please note that while we assess whether the personal information we hold about you is inaccurate or incomplete, you may exercise your right to restrict our processing of the applicable data as described below.
ERASURE - You may request that we erase the personal information we hold about you in the following circumstances:
where you believe it is no longer necessary for us to hold the personal information;
we are processing it on the basis of your consent and you wish to withdraw your consent;
we are processing your data on the basis of our legitimate interest and you object to such processing;
you no longer wish us to use your data to send you marketing; or
you believe we are unlawfully processing your data.
RESTRICTION OF PROCESSING TO STORAGE ONLY - You have a right to require us to stop processing the personal information we hold about you other than for storage purposes in the following circumstances:
You believe the personal information is not accurate for the period it takes for us to verify whether the data is accurate;
We wish to erase the personal information but you want us to simply restrict the use of that data;
We no longer need the personal information for the purposes of the processing but you require us to retain the data for the establishment, exercise or defense of legal claims; or
You have objected to us processing personal information we hold about you on the basis of our legitimate interest and you wish us to stop processing the personal information while we determine whether there is an overriding interest in us retaining such personal information.
OBJECTION - You have the right to object to our processing of data about you and we will consider your request. Please provide us with detail as to your reasoning so that we can assess whether there is a compelling overriding interest in us continuing to process such data or we need to process it in relation to legal claims. You also have the right, at any time, to object to our processing of data about you in order to send you marketing, including where we build profiles for such purposes and we will stop processing the data for that purpose.
WITHDRAWAL OF CONSENT - Where you have provided your consent to us processing your personal data, you can withdraw your consent at any time by emailing us at email@example.com.
Our Services are not directed to persons under the age of 18. We do not knowingly collect personal information from children under the age of 18. If we become aware that a child the age of 18 has provided us with personal information, we will delete such information from our files. If you suspect that a user is under the age of 18, please use the reporting mechanism available through the service.
In the event that you wish to make a complaint about how we process your personal information, please contact us at firstname.lastname@example.org and we will try to deal with your request.
NOTIFICATION OF CHANGES
If you have an inquiry regarding our privacy practices or desire to access your personal data in our possession, we encourage you to contact us at email@example.com.
FOR CALIFORNIA CONSUMERS
We will not discriminate against you for exercising any of your rights under the California Consumer Privacy Act (“ CCPA ”). However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
The CCPA requires specific disclosures for California residents.
Categories of Personal Information We Collect
Identifiers, such as your name, alias, address, phone numbers, or IP address;
Demographic information, such as age, language or gender;
commercial information, such as subscription and monetization activities;
Internet or other electronic network activity information;
Geolocation data, such as the location of your device or computer, for example if you enable location services to enable us comply with applicable laws; and
inference data, such as information about your preferences.
Categories of Personal Information Transferred to Third Parties
Identifiers, such as your name, address, or phone numbers;
Demographic information such as your age, gender, or language;
commercial information, such as the details of subscription and monetization activities;
Internet or other electronic network activity information;
geolocation data; and
professional or employment-related information.
Business Purpose for Which Information May Be Used or Disclosed
Protecting against security threats, abuse, and illegal activity. Stock Story uses and may disclose information to detect, prevent and respond to security incidents, and for protecting against other malicious, deceptive, fraudulent, or illegal activity.
Maintaining our services. Stock Story uses information to ensure our services are working as intended, such as tracking outages or troubleshooting bugs and other issues that you report to us.
Auditing and measurement. Stock Story uses information for analytics and measurement to understand how our Services are used, as well as to fulfill obligations to our partners like publishers, advertisers, developers, or rights holders. We may disclose non-personally identifiable information publicly and with these partners, including for auditing purposes.
Research and development. Stock Story uses information to improve our services and to develop new products, features and technologies that benefit our users and the public.
Legal reasons. Stock Story also uses information to satisfy applicable laws or regulations, and discloses information in response to legal process or enforceable government requests, including to law enforcement.
California Consumer Privacy Rights
We do not sell your personal information. What this means is that we do not sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate in any way your personal information to another company for monetary or other valuable consideration. You have the right to request, twice in a 12-month period, the following information about the personal information we have collected about you during the past 12 months:
the categories and specific pieces of personal information we have collected about you;
the categories of sources from which we collected the personal information;
the business or commercial purpose for which we collected or sold the personal information;
the categories of third parties with whom we shared the personal information; and
the categories of personal information about you that we sold or disclosed for a business purpose, and the categories of third parties to whom we sold or disclosed that information for a business purpose.
You have the right to request that we delete the personal information we have collected from you. If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment.
How to Submit a Request
To submit an access or deletion request, contact us at firstname.lastname@example.org. All requests must be labeled “California access/Removal Request” on the email subject line. All requests must state that the User personally posted such content and provide a description of the content or information User wants removed and information reasonably sufficient to permit us to locate such content or information. We are not responsible for notices that are not labeled or sent properly, and we may not be able to respond if you do not provide adequate information. Please allow 30 days for a response. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to your personal information or complying with your request. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.