CorMetrix Privacy Policy

Overview

Last Updated: 12-16-25
Legal Counsel: Pruda Kothari

This Privacy Policy describes how CorMetrix Inc. ("CorMetrix," "we," "our," or "us") collects, uses, discloses, and otherwise processes personal information. This Privacy Policy applies to personal information we collect when you:

  • Visit our websites, including www.cormetrix.com (the "Sites");
  • Interact with our features, communications, advertising, or social media; or
  • Use our products or services (the "Services").

By accessing or using the Sites or Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy does not apply to CorMetrix employees or job applicants. Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from children.

This policy is intended to help you understand:

  • Personal Information We Collect, Purpose for Processing & Categories of Third Parties Personal Information is Shared with;
  • How We Collect Personal Information;
  • How We Use and Share Personal Information;
  • Your Rights Under Applicable Law;
  • How We Protect Personal Information;
  • How Long We Retain Personal Information;
  • Your Choices With Respect to Your Personal Information; and
  • How We Can Make Changes to this Policy.

1. Personal Information We Collect, Purpose for Processing & Categories of Third Parties Personal Information is Shared with

Categories of Personal Information Example Purpose for Processing Categories of Third Parties Shared With
Identifiers Name, email address, unique identifier, online identifier, transaction identifiers, device ID, advertising ID, and IP address
  • To provide, support and improve our website or services
  • To communicate with you about our products and services
  • For our own billing and administrative purposes
  • For security purposes
  • Market and advertise our Services
  • For internal training purposes, such as for our sales team
 Service Providers
Third Party Partners
Customer Records Name, email, address, and telephone number. Our payment processors information is collected about the transactions you make (such as transaction date, payment information, credit card or debit card number and zip code).
  • To provide, support and improve our website or services
  • To communicate with you about our products and services
  • For our own billing and administrative purposes
 Service Providers
Geolocation Approximate location derived from IP address.
  • To provide, support and improve our website or services
  • For security purposes
 Service Providers
Commercial information Name, address, telephone number, products or services purchased or considered, and other purchasing or consuming histories
  • To provide, support and improve our services
  • To communicate with you about our products and services
  • For our own billing and administrative purposes
 Service Providers

2. How We Collect Personal Information

We collect personal information in the following ways:

  • Directly from you when you complete forms, respond to surveys, communicate with us, or participate in marketing campaigns;
  • Automatically through your interaction with the Sites; and
  • From social media platforms when you interact with our accounts (subject to those platforms’ privacy settings).

3. How We Use Personal Information

We use personal information to:

  • Provide, maintain, and improve our Sites and Services;
  • Customize user experiences and recommendations;
  • Communicate with you, including marketing communications;
  • Conduct analytics and internal research;
  • Ensure security, prevent fraud, and investigate misuse;
  • Comply with legal obligations; and
  • Enforce agreements and protect our rights.

4. How We Share Personal Information

We may share personal information with:

  • Service Providers (e.g., cloud hosting, analytics, billing, security);
  • Marketing and Analytics Partners (e.g., Google Analytics, email platforms);
  • Professional Advisors (e.g., legal, accounting);
  • Legal Authorities where required by law or to protect rights;
  • Corporate Transaction Counterparties in connection with mergers or acquisitions; and
  • Other Third Parties with Your Consent.

We do not knowingly sell personal information as defined under applicable state privacy laws.

5. European Data Privacy Rights

We do not currently offer our Service outside of the United States of America and our Service is not recommended for residents of a country other than the United States of America.

6. U.S. State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Indiana, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or any other state that has enacted a comprehensive data privacy law, you may have additional rights regarding our collection, use, and disclosure of your personal information.

These rights do not apply to information that is exempt under applicable state privacy law. Additionally, the rights described in this Section are not absolute, may be subject to exceptions or limitations, and may vary depending on your state of residence. Where permitted by law, we may decline requests to exercise these rights.

Persons with disabilities may obtain this notice in an alternative format by contacting us using the Contact Us information below.

Your U.S. Privacy Rights

Subject to applicable law and verification of your identity, you may have the right to:

  • Right to Know / Confirm Processing
    To know whether we process your personal information and to request information about:
    • The categories of personal information we collect;
    • The categories of sources from which we collect personal information;
    • The business or commercial purposes for collecting, selling, or sharing personal information (if applicable);
    • The categories of third parties with whom we disclose personal information; and
    • Information about any automated decision-making or profiling, if applicable.
  • Right to Access
    To request a copy of the personal information we have collected about you, subject to applicable lookback periods under state law.
  • Right to Opt Out of Sale or Sharing / Targeted Advertising
    To opt out of:
    • The sale of personal information (as defined by applicable law); and
    • The sharing of personal information for purposes of targeted or cross-context behavioral advertising.
  • Right to Delete
    To request that we delete personal information we have collected from or about you, subject to legal exceptions.
  • Right to Correct
    To request correction of inaccurate personal information we maintain about you.
  • Right to Appeal
    To appeal our decision if we decline to take action on a request, where required by applicable law.
  • Freedom from Discrimination
    To exercise your privacy rights without unlawful discrimination or retaliation.

Exercising Your Privacy Rights

You may exercise your rights by contacting us using the information in the Contact Us section below. We will verify your identity before responding to your request and respond within the timeframes required by applicable law.

Sale or Sharing of Personal Information

We do not sell personal information for monetary consideration. We may share personal information for targeted advertising or analytics purposes as permitted by law. You may opt out of such sharing where required by applicable state privacy laws.

7. Sale of Personal Information

CorMetrix does not sell personal information for monetary consideration.

We may disclose personal information to certain third parties for business purposes, including analytics, marketing, or advertising, which may be considered a "sale" or "sharing" under certain state privacy laws. Where required by law, you may opt out of such disclosures.

Exercising Your State Privacy Rights

If you reside in a state that provides specific data privacy rights, you may exercise those rights by contacting us using the information in the Contact Us section below.

Your rights may be exercised only by you or by an authorized agent acting on your behalf, subject to verification. Depending on applicable law, you may submit a request to know or access personal information up to twice within a 12-month period, unless otherwise permitted.

To process your request, we must be able to reasonably verify your identity or authority. Verification may include:

  • Confirming account information if you maintain an account with us; or
  • Requesting additional information sufficient to verify your identity or authorization, consistent with applicable law.

The information provided must allow us to understand, evaluate, and respond to your request. We will use personal information submitted in connection with a request solely for verification purposes.

If we cannot verify your identity or authority to make the request, we may decline to fulfill the request, as permitted by law.

Authorized Agents

You may submit a request through an authorized agent. The agent must clearly state that they are acting on your behalf and provide documentation demonstrating their authority to do so. We may require you to separately verify your identity or directly confirm authorization with us.

Response Timing and Appeals

We will acknowledge receipt of a verifiable request and respond within 45 calendar days, unless an extension is permitted by law, in which case we may extend the response period by up to an additional 45 days and will notify you of the reason for the extension.

If we deny a request, you may appeal our decision by contacting us using the Contact Us section below. We will respond to appeals in accordance with applicable law.

Special Information for Nevada Residents

Nevada residents have the right to opt out of the sale of certain personal information. CorMetrix does not currently engage in such sales as defined under Nevada law.

California “Shine the Light” Disclosure

California residents may request information regarding the disclosure of certain categories of personal information to third parties for their direct marketing purposes during the preceding calendar year. To make such a request, please contact us using the information below.

8. How We Protect Personal Information

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction, taking into account the nature of the information and the risks involved in processing it.

Despite these efforts, no website, application, Internet transmission, or email communication is completely secure. Accordingly, we cannot and do not guarantee the absolute security of personal information.

9. How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary to fulfill legitimate business purposes, including providing the Services you request, complying with legal or regulatory obligations, resolving disputes, and enforcing our agreements.

In determining appropriate retention periods, we consider:

  • The amount, nature, and sensitivity of the personal information;
  • The purposes for which the personal information was collected and processed; and
  • Whether retention is necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

When personal information is no longer required, we securely delete or de-identify it in accordance with our retention policies and applicable law.

10. Your Choices Regarding Your Information

We offer the following choices regarding your personal information, subject to applicable law:

  • Account Information: Authorized users of our Services may update certain account information by signing into their account.
  • Marketing Communications: You may opt out of receiving promotional emails from us by using the unsubscribe link included in those emails or by contacting us using the information below. Please note that even if you opt out of marketing emails, we may continue to send you non-promotional communications related to your account or use of the Services.
  • Analytics Controls: You may manage how Google Analytics collects and uses information by adjusting your browser settings or installing the Google Analytics Opt-Out Browser Add-On.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Any updates will be posted on this page and will become effective as of the date they are posted.

Your continued use of the Sites or Services after the posting of changes constitutes your acknowledgment of the updated Privacy Policy.

12. Disclaimer

We may collect, use, and disclose de-identified or aggregated data for any business purpose, including for research, benchmarking, analytics, and the publication of reports or insights. We will not disclose any information that could reasonably be used to identify you or your organization.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, you may contact us at:

Email: compliance@cormetrix.com