Privacy Policy

Thank you for doing business with OCore, Inc. (“Company,” “we,” “our,” or “us”). We welcome you and hope you find our websites, applications, and our other services and tools (collectively, the “Services”) helpful and useful. We have adopted this privacy policy (“Privacy Policy”) to help our website visitors, contractors, employees, current and potential customers, and other business partners (“you” or “your,”) understand what Data we process, how and why we do so, and what your rights are regarding that Data. Any capitalized terms not otherwise defined herein have the meaning given to them in our agreement with you.

We always seek to improve our Services to you, and that requires that we process information about you and your usage preferences. As we do so, we are absolutely committed to protecting your privacy and the security of Personal Information. For purposes of this Privacy Policy, “Personal Information” means any information relating to an identified or identifiable individual and is protected similarly as personal data or personally identifiable information under data privacy and protection laws.

In this Privacy Policy, we use the word “Data” to describe all the information we process that relates to you and your use of our Services, including any Personal Information. “Data” is broken into different categories, which are defined in the “Data We Process” section of this Privacy Policy. We may refer to the different categories separately, but when we use the word “Data,” we mean all the different categories described in this Privacy Policy. Because of the nature of our Services, the term “Data” also includes the information, including Personal Information, you gather, upload, or is otherwise processed when you use the Services. We rely on your compliance with our agreement(s) you have with us to process Data, including any third-party Personal Information.

The term “Data” does not apply to information which does not relate to an identified or identifiable individual or to personal information or data rendered anonymous in such a manner that the individual is not or no longer identifiable (“Anonymized Data”). Anonymized Data also does not contain the name or identification number of the organization that provides your account, or of any of its divisions or facilities, or site names. For Anonymized Data, we: (a) take reasonable measures to ensure that it cannot be associated with an individual; (b) commit to maintain and use it only in anonymized form and not attempt to re-identify any individual from it. We hold all rights in and may use Anonymized Data for our own purposes in any legal manner and without attribution or compensation to any person.

This Privacy Policy applies to everybody who interacts with us online or otherwise. Because different portions of the Privacy Policy will apply differently to the various groups who interact with us, we have tried to clearly categorize the types of Data we process and how we do so. If you have any questions about this Privacy Policy or how we handle your Data, please email us at info@ocore.io.

When a utility or other organization gives you access to the Services, that organization controls the Data that it and its users put into the Services. We process that Data on the organization’s behalf and under our agreement with it, and that agreement controls if it conflicts with this Privacy Policy. If you have a request about Data your organization controls, please send it to your organization, and we will help it respond.

LAWFUL BASIS FOR PROCESSING

Many jurisdictions require that we disclose to you the lawful basis for our processing of your Data. We do that in the “Data We Process” section and otherwise throughout this Privacy Policy. In general, our lawful basis for processing your Data is your consent, our contract with you or with the organization that provides your account, or our legitimate interests.

Where our processing of your Data relies on your consent, we will obtain that consent through a clear, affirmative action (such as checking an unchecked box or clicking “I Agree”) specific to that processing. If our processing of a given category of Data is based on your consent, you may withdraw that consent at any time, and we will cease that processing going forward, without affecting the lawfulness of processing already carried out. Where our processing instead relies on our contract with you or another lawful basis identified in the “Data We Process” section, that other basis governs that processing. If you input Personal Information of another person into the Services, you represent that you are that person’s parent or guardian, or that you, or the organization that provides your account, have given any notice and obtained any consent that applicable law requires for us to process their Personal Information; we rely on your compliance with our agreement with you as our basis for processing that person’s Personal Information, and we may require you to provide evidence of that authorization on request.

If you withdraw your consent to process Data, this may result in your inability to receive partial or full access to the Services, and your withdrawal of consent does not limit our ability to use Anonymized Data for use by us in connection with our legitimate business efforts in the future. In addition, your withdrawal of consent may not prevent us from processing Data if we have processed such Data pursuant to a different lawful basis or to preserve legal claims. For example, if you give your consent for us to process your Data, but we are also required by law to process your Data, that separate “lawful basis” will still apply, even if you withdraw your consent.

When you enter into an agreement with us, either by registering for and accessing the Services, by executing an agreement in hard copy, or by clicking “I Accept” or similar language online, we will process your Data for the purposes of fulfilling the terms of our contract with you. In that case, our processing of your Data is based on the contract, so your withdrawal of consent will only be effective after the purposes for processing that Data have been fulfilled and after we no longer have a legal obligation to process that Data.

In all cases, we will comply with applicable law and we will cease processing your Data after the legal right, obligation, or other lawful basis expires.

INTENDED USERS

Our Services are built for utility professionals and other business users, and we do not knowingly process Data from users who are under 18. If we become aware that we have processed Data from a person under 18 and except to the extent allowed or required by law, then we will attempt to delete such Data as soon as possible, subject to our obligations under applicable law. If you are under the age of 18 in the jurisdiction in which you reside and want to make a request under applicable law, we may require you to make such request through a parent or guardian. If you believe that we have processed Data from a person under 18 in contravention of this policy, our provision of the Services, or applicable law, please contact us at info@ocore.io.

DATA WE PROCESS

Listed below are categories of Data we process when you use our Services. We never sell your Data, and we always have a lawful basis for processing the Data, but that lawful basis might be different for different categories, and we describe those uses below.

A. Registration Data

1. Data Description: Registration Data may consist of the name, email address, street address, other contact information, and other information you provide us using the Services, both when you engage us for the Services and thereafter. Registration Data also includes your username, client type, and other applicable registration information, if any and where applicable.
2. Lawful Basis for Processing: Our lawful basis for processing Registration Data is our contract with you, our contract with our customers, your consent, or our legitimate interests. We can only provide certain of the Services to you if we have the Registration Data, so we need to process that Registration Data during the term of our contract. Even when the Registration Data is not critically necessary to the provision of the Services, we may still process that Registration Data to facilitate our contractual interactions with you.
3. How We Process and Transfer Registration Data: Registration Data is accessible generally only to us and to you. In limited circumstances, we may transfer your Registration Data to our service providers, which parties are under obligations to protect the confidentiality of your Registration Data. We process Registration Data to provide the Services to you. At times, we will transfer the Registration Data to other third parties at your request. We may also process your Registration Data to offer our own goods or services to you, either directly through emails or through third-party platforms, but you may opt out of those communications at any time.

B. Engagement Data

1. Data Description: Engagement Data consists of all the information you input, record, or deliver (either directly or through third parties) to us using the Services, except as otherwise stated in this Privacy Policy. Engagement Data also includes all information that is proprietary to you regarding your use of the Services (other than the data that qualifies as “Usage Data” below) that is processed by the Services. Engagement Data specifically includes the content of any text, personal preferences, and other information you input and include in the Services, such as feedback, comments, questions, video, audio, pictures, etc. For example, Engagement Data may include documents, photos, audio files, signatures, and operational records you add; questions you ask our artificial intelligence features and the answers they return; and audio and video recordings of meetings, calls, and interviews, along with the transcripts and summaries made from them. Engagement Data specifically includes all Personal Information that is not considered Registration Data or Usage Data. We do not require processing of sensitive Personal Information to use the Services; however, Engagement Data may also include sensitive Personal Information if you upload or otherwise deliver to us such information to the Services. Before we process any sensitive Personal Information (such as health, biometric, precise geolocation, racial or ethnic origin, or similar sensitive categories of information), we will request your explicit, opt-in consent through a separate, affirmative action specific to that processing if you have not already consented to such processing. You may decline to provide sensitive Personal Information, though doing so may limit certain features of the Services. Unless you have consented to our processing of sensitive Personal Information, you shall not upload any such sensitive Personal Information to the Services.
2. Lawful Basis for Processing: Our primary lawful basis for processing Engagement Data is our contract with you and the related obligation to provide the Services. Where we additionally process Engagement Data for purposes beyond performing that contract (for example, to improve our Services) we rely on our legitimate interest in doing so, and you may object to that additional, legitimate-interest-based processing as described in the “Your Rights Regarding Your Data” section.
3. How We Process and Transfer Engagement Data: Your Engagement Data is accessible to us, to you, and to limited third-party service providers that we use to provide and improve the Services. If we transfer your Engagement Data to a third party, that party will be obligated to protect the confidentiality of your Engagement Data. Your input or delivery of Engagement Data is voluntary and you assume all risk associated with uploading your Engagement Data. We rely on your compliance with our agreement with you that you have all necessary rights to all Engagement Data you upload to the Services. Further, some Engagement Data, such as unsaved drafts, is stored on your device until you submit it. Both during the term of our agreement with you and thereafter, we may also convert Engagement Data to Anonymized Data, and that Anonymized Data belongs solely to us to use in our sole discretion (including to sell or share Anonymized Data that meets the applicable legal standard for such information, which is therefore not considered your Data or Personal Information under applicable law). To the extent we are required to delete any Engagement Data about you, we may still retain Anonymized Data that may have originated as your Engagement Data.

C. Usage Data

1. Data Description: Usage Data consists of the following and similar information:
   • Information about your interactions with the Services, most commonly our website, which includes the date and time of any requests you make. This also may include details of your use of any advertising you receive via the Services.
   • Adjustments you make to the default state of the Services, such as custom categories or settings.
   • The timing of the information you post to the Services including your interactions with us, but not including the content of those interactions, which would be included as Engagement Data.
   • Technical data which may include URL information, cookie data, your IP address, the types of devices you are using to access or connect to the Services, unique device IDs, device attributes, network connection type (e.g. WiFi, 5G, LTE, Bluetooth) and provider, network and device performance, browser type, language, mouse movements, and the links you click and how far you scroll on our website. Please note, however, that if you disable certain functions, your use of the Services may be limited.
   • Rights management, operating system, and application version.
   • Motion-generated or orientation-generated mobile sensor data (e.g. accelerometer or gyroscope), if any, required for the purposes of providing specific features of the Services to you.
2. Lawful Basis for Processing: Our primary lawful basis for processing Usage Data is our contract with you and the related obligation to provide the Services. Where we additionally process Usage Data for purposes beyond performing that contract (for example, to improve our Services) we rely on our legitimate interest in doing so, and you may object to that additional, legitimate-interest-based processing as described in the “Your Rights Regarding Your Data” section.
3. How We Process and Transfer Usage Data: Usage Data is accessible to us, to you, and to limited third-party service providers that we use to provide and improve the Services. If we transfer your Usage Data to a third party, that party will be obligated to protect the confidentiality of your Usage Data. We may also transfer Usage Data to other third parties at your specific request. We may process Usage Data to make improvements to the Services. Both during the term of our agreement with you and thereafter, we may also convert Usage Data to Anonymized Data, and that Anonymized Data belongs solely to us to use in our sole discretion (including to sell or share Anonymized Data that meets the applicable legal standard for such information, which is therefore not considered your Data or Personal Information under applicable law). To the extent we are required to delete any Usage Data about you, we may still retain Anonymized Data that may have originated as your Usage Data.

D. Payment Data

1. Data Description: Payment Data is only processed when your use of the Services is subject to the payment of a fee or other charge. We do not directly process your Payment Data because we use a third-party service provider that is PCI compliant to process payments. We may also invoice the organizations we work with, and they pay by purchase order, check, or bank transfer. Payment Data will vary depending on the payment method you use but will likely include information such as:

• Name;
• Date of birth;
• Certain credit card information used to reference a credit card;
• Address and postal code; and
• Mobile phone number
• Purchase order, invoice, and payment records

2. Lawful Basis for Processing: Our lawful basis for processing Payment Data is our contract with you, because we need this information to process payment for the Services. To the extent we also use Payment Data for our legitimate interest in improving our Services, you may object to that additional, legitimate-interest-based processing as described in the “Your Rights Regarding Your Data” section.

3. How We Process and Transfer Payment Data: We only use Payment Data to facilitate payment. We transfer Payment Data only with service providers that help us with billing, accounting, and banking.

E. Supplemental Mobile Data

1. Data Description: Where applicable to the Services, Supplemental Mobile Data consists of the following and similar information:

• Your audio data: If you give us permission, this enables us to process the voice commands captured via your device microphone to enable you to interact with the Services with your voice. Please note you will always have the ability to turn off the microphone feature; If you choose to attach an audio file, such as a voice note, we process it with the record you attach it to;
• Your precise mobile device location: If you give us permission to access your precise location, this enables us to access your GPS or Bluetooth to provide location-aware functionality in the Service, we use your device’s location to place an asset or site on the map when you ask us to, and we save that position with the asset or site. Please note that this does not include your IP address. We use your IP address to determine non-precise location, for example, what country you are in to comply with our licensing and other agreements; and
• Your photos/videos: If you give us permission to access your photos, videos, or camera, we will only access images and videos that you specifically choose to share with us and metadata related to those images, such as the type of file and the size of the image. We will never scan or import your photo library or camera roll.

2. Lawful Basis for Processing: Our primary lawful basis for processing Supplemental Mobile Data is our contract with you and the related obligation to provide the Services. Where we additionally process Supplemental Mobile Data for purposes beyond performing that contract (for example, to improve our Services) we rely on our legitimate interest in doing so, and you may object to that additional, legitimate-interest-based processing as described in the “Your Rights Regarding Your Data” section.

3. How We Process and Transfer Supplemental Mobile Data: We only use Supplemental Mobile Data when you specifically authorize it, and we only transfer it with those parties who are strictly necessary for the purpose you have authorized.

TRANSFERRING YOUR INFORMATION

We do not sell your Data to third parties. Except where a specific limitation is noted above, we may transfer your Data as follows:

1. At Your Instruction. If you request us to make your Data available to a third party, and such request furthers the purposes of our Services, we will do so.
2. Transferring to Vendors. In certain cases, we use the services of third-party vendors, to assist us in providing the Services. We may transfer your Data to such vendors solely for that purpose, and we will require those parties to abide by our privacy policies or privacy policies substantially in consonance with ours.
3. Service Providers. We may use a third party to provide specific Services on our behalf, including sending emails to you, conducting surveys, processing transactions, or performing statistical analysis of our Services. In these cases, we may provide certain Data, such as your name, email address, and other information necessary for the service to be provided. However, these third parties are required to maintain the confidentiality of this Data and are prohibited from processing this information for any other purposes.
4. Business Transitions. If we go through a business transition, such as a merger, acquisition, liquidation, or sale of all or a portion of our assets, the information we have about you will, in most instances, be part of the assets transferred. We reserve the right to transfer that information in connection with such transactions without notice to you. We will not be required to obtain your consent for such a transfer. Where such a transfer involves the Personal Information of EEA or UK residents, we will take reasonable steps to ensure that an appropriate lawful basis and, where required, an appropriate international transfer safeguard continue to apply to that Personal Information following the transaction.
5. Legal Disclosure. We may disclose your Data if required to do so by law or in the good faith belief that such action is necessary to conform to applicable law, comply with a judicial proceeding, court order, or legal process served on us, protect and defend our rights or property, or investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our agreement with you.

If we ever plan to process any Data in the future for any other purposes not identified above and we do not have a separate lawful basis for that new purpose for processing, we will only do so after obtaining your specific consent.

TECHNOLOGIES WE USE

The technologies we use for automatic Data processing may include the following:

• Artificial Intelligence. We utilize artificial intelligence technology as part of our Services, including through third-party service providers. For clarity, we do not use Personal Information or Engagement Data to train artificial intelligence models unless the organization that provides your account has opted in under its agreement with us. We may use Anonymized Data to train and improve our models. Further, we require our third-party artificial intelligence providers to keep Data confidential and not to use it to train their own models. Please note that outputs from artificial intelligence tools can be wrong so ensure that a human checks any output before reliance on such output.
• Meeting Recording and Transcription. We may record and transcribe meetings, calls, and interviews with you or your organization, including through a meeting assistant that joins the meeting.
• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Services. Where required by applicable law (including the EU ePrivacy Directive and UK PECR), we will request your prior, affirmative opt-in consent through a cookie banner or similar mechanism before we set any non-essential cookie, and we will set only strictly necessary cookies before obtaining that consent. Where such prior consent is not required by applicable law, our system will issue cookies when you direct your browser to our Services unless you have adjusted your browser settings to refuse them.
• Web Beacons. Pages of the Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
• Website Analytics and Visitor Identification. We use analytics that do not set cookies to understand how visitors use our website. We also use a service provider that matches visitors’ IP addresses and browser identifiers to companies and, for some visitors in the United States, to individual business profiles, so we can learn which organizations are interested in our Services. That provider and its data partners set cookies and similar storage on your device and may associate your visit with other information they have about you, including your email address, and we may use the results to contact you. You can opt out at https://app.retention.com/optout or block these cookies in your browser settings.
• Other Technologies. We may also use device identifiers, local storage, html modifiers, and different types of caching to help us understand the devices and users who access the Services. Those methods include device identifiers that are either hardware-based or software-based, persistent, or non-persistent, and which may identify either a device or a software module within a device (such as a web browser).

“Do Not Track” Options and GPC

Your web browser(s) may offer a “Do Not Track” option, which allows the individual to signal to operators of websites and web applications and services (including behavioral advertising services) that he or she does not wish such operators to track certain of his or her online activities over time and across different websites. We do our best to support Do Not Track requests but cannot guarantee full support based on the variety of internet browsers and technologies which means that we may process information about your online activity both while you are using the Services and after your use of the Services.

Separately, where you have enabled a Global Privacy Control (“GPC”) signal or other recognized universal opt-out preference signal in your browser or device, we will treat that signal as a valid request to opt out of the sale or sharing of your Personal Information to the extent required by applicable law, including the CCPA/CPRA and other state privacy laws described below. Global Privacy Control is a browser- or device-level technical specification that automatically communicates a user’s preference to opt out of the sale, sharing, or processing of their Personal Information for targeted advertising.

YOUR RIGHTS REGARDING YOUR DATA

Under applicable data protection, privacy, and other laws, you may have certain rights related to your access and control of your Data. Such rights may include the following:

1. The right to access, correct, update, or request deletion of your Data.
2. The right to object to processing or restrict the processing of your Data (Please note that if you exercise this right, it may limit or eliminate our ability to provide you the Services).
3. The right to request portability of your Data.
4. The right to opt-out of marketing communications we send you. You can exercise this right by clicking the “Unsubscribe” or “Opt-Out” link found in these communications.
5. The right to not be subject to a decision based solely on automated processing, including profiling, known as Automatic Decision Making.
6. The right to submit a complaint to any applicable regulatory authority about our processing activities.
7. The right to opt-out of us sharing (as defined in the CPRA) your Data, including for direct marketing purposes, subject to certain legal exceptions.
8. The right to limit use, disclosure, and restrict sensitive personal information (as defined in the CPRA).
9. The right to appeal our denial of a request to exercise any of the above rights, where applicable law provides for such an appeal.

If we engage in any processing that produces legal effects concerning you or similarly significantly affects you based solely on automated processing, including profiling, we will separately disclose to you the logic involved, and the significance and envisaged consequences of that processing, at or before the point we undertake it, and you will have the right to obtain human intervention, express your point of view, and contest that decision.

We may use additional processes to verify your identity before we reveal or delete any of your Data, including two-factor or two-step authentication measures to ensure we can identify you.

This list may not include all of your rights under applicable laws. If you believe you have additional rights, please contact us using the methods in this Privacy Policy.

We will not penalize, discriminate against, or terminate the Services for you merely because you exercised a right described above. However, some rights, if exercised, may mean we no longer hold the specific Data necessary to continue providing certain features or the Services generally (for example, deleting Registration Data needed to maintain your account) and in that limited circumstance the Services (or affected features) may be unavailable to you as a direct and unavoidable consequence of the Data no longer being available, not as a penalty for exercising your rights.

We will try to comply with your request(s) as soon as reasonably practicable and at the very least as required under applicable law. Upon receipt of your written request, we will provide you with a copy of your information, although in certain limited circumstances we may not be able to make all relevant information available to you, such as where that information also pertains to another user. In such circumstances we will provide reasons for the denial to you upon request.

Please also note that if you do opt-out of receiving marketing-related emails from us, we may still send you messages for administrative or other purposes directly relating to your use of the Services, and you cannot opt-out from receiving those messages while continuing to use the Services.

Further, you may opt-out or disable certain functions on your particular device, preventing us from processing Data. For example, you may disable geolocation or GPS functionality on your mobile device or disable push notifications. If you disable such features, your ability to use and access the Services may be limited.

To exercise any of these rights, or if you have any questions about our processing of your Data, please contact us at info@ocore.io or at our number: +1 (503) 825-0110.

A. Privacy for EU/UK Residents

The Regulation (EU) 2016/679 (General Data Protection Regulation) made effective in Europe on May 25, 2018 (“GDPR”) requires that we clearly describe to data subjects the data we process and how we use that data. This Privacy Policy does that and if you have any questions for us regarding our data processing, please contact us at info@ocore.io or at our number: +1 (503) 825-0110. We comply with the GDPR requirements to the extent they apply to us.

We are based in the United States. By accessing or using the Services or otherwise providing information to us, you understand that your information will be subject to processing in and to the United States and in our other locations.

Where we transfer Personal Information originating in the EEA or UK to the United States or another country that has not been recognized as providing an adequate level of data protection, we do so pursuant to an appropriate safeguard recognized under the GDPR/UK GDPR (such as the European Commission’s Standard Contractual Clauses (or, for transfers from the UK, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses)) or another valid transfer mechanism recognized under applicable law. You may request further information about, or a copy of, the relevant safeguard by contacting us using the details below. If we do not maintain an establishment in the EEA or UK but process the Personal Information of individuals located there in connection with offering them goods or services or monitoring their behavior, we have appointed a representative in the EEA or UK as required by Article 27 of the GDPR/UK GDPR; contact details for that representative are available on request at info@ocore.io.

We act as a “controller” as defined under the GDPR for Data about visitors to our website and our own business contacts. When we process Data on behalf of an organization that uses our Services, we act as that organization’s “processor,” and the organization is the controller. If you believe that this role should be defined differently, please contact us at info@ocore.io or at our number: +1 (503) 825-0110.

Pursuant to the GDPR, residents of the EU (and the EEA, as applicable) have the right to obtain our confirmation of whether we maintain personal information relating to them in the United States. If you are a resident of Europe, upon request from you, we will provide you with access to the Data that we process about you. Please contact us if you have any questions.

Further, if you are a resident of the United Kingdom (“UK”), to the extent the GDPR as incorporated into UK law pursuant to s.3 of the European Union (Withdrawal Act) 2018 (as amended, the “UK GDPR”) applies to us, we will follow all supplemental requirements under the UK GDPR and you have all rights as a UK citizen under the UK GDPR.

If you are a resident of the EEA or UK, you have the right to lodge a complaint about our processing of your Data with your local data protection supervisory authority or, for UK residents, the Information Commissioner’s Office (ICO), in addition to contacting us directly.

B. Privacy for California Residents

California adopted the California Consumer Privacy Act (“CCPA”), which took effect at the beginning of 2020 and has now adopted the California Privacy Rights Act (“CPRA”), which fully took effect January 1, 2023. We comply with the requirements of the CCPA and CPRA to the extent they apply to us.

In accordance with the CCPA/CPRA, we provide notice at or before the point we first process your Personal Information describing the categories of Personal Information processed and our purposes for processing it. That notice is set out in the “Data We Process” section above and in any supplemental notice presented to you at the point of first processing. For each category of Personal Information described in that section, we process that Data for as long as reasonably necessary to fulfill the purpose for which it was first processed, as described in the “Data Retention” section below, and no longer than required to satisfy that purpose or an applicable legal obligation. If we deny your request to exercise a right under the CCPA/CPRA, you may appeal that denial by contacting us at info@ocore.io, and we will respond to your appeal within the time required by law.

If you are a California resident, you may request to exercise your rights for any Data we have processed in the 12 months prior to your request. Such request covers any categories, sources, purposes, and, if applicable, third parties to whom we transfer the Data. Further, you can exercise any of your rights free of discrimination, for example, we cannot increase the price of the Services or decrease the quality of the Services because you exercise your rights.

To the extent the CCPA and CPRA apply to us, we act as a “business” as defined under those laws for Data about visitors to our website and our own business contacts. When we process Data on behalf of an organization that uses our Services, we act as that organization’s “service provider.” If you believe that this role should be defined differently, please contact us at info@ocore.io or at our number: +1 (503) 825-0110.

Separately from the CCPA/CPRA, California’s “Shine the Light” law (Cal. Civ. Code § 1798.83) entitles California residents to request certain information about our disclosure, if any, of Personal Information to third parties for those third parties’ own direct marketing purposes during the preceding calendar year. If you would like more information about this right, please contact us at info@ocore.io.

For more information, please direct your questions to us at info@ocore.io or at our number: +1 (503) 825-0110.

C. Other Data Privacy and Protection Laws

We strive to comply with all data protection and privacy laws in applicable jurisdictions, to the extent such laws apply to us and our Services. We strive to be transparent about our data processing activities and have disclosed our practices throughout this Privacy Policy. If you have any questions about your rights under any applicable data protection and privacy laws, please contact us at info@ocore.io or at our number: +1 (503) 825-0110.

Where applicable, we also comply with other comprehensive state privacy laws, including those of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states that have enacted similar legislation. To the extent required by those laws, we: (i) obtain your opt-in consent before processing sensitive Personal Information (such as precise geolocation, health, or biometric information), rather than relying solely on an opt-out right; (ii) conduct and document data protection assessments before engaging in processing that presents a heightened risk of harm, such as targeted advertising, the sale of Personal Information, or certain profiling; (iii) honor recognized universal opt-out preference signals, including GPC, as a valid opt-out of the sale of your Personal Information or its use for targeted advertising; and (iv) provide a process to appeal our denial of a rights request, as described in the “Your Rights Regarding Your Data” section above.

SECURITY

The security of your Data is important to us. We use commercially reasonable efforts to process your Data in a secure environment. We take technical, contractual, administrative, and physical security steps designed to protect Data that you provide to us. We have implemented procedures designed to limit the dissemination of your Data to only such designated staff as are reasonably necessary to carry out the stated purposes we have communicated to you.

THIRD-PARTY POLICIES

You may access third-party websites and other tools and services or products via a link on our website, mobile application, or via our other tools. The privacy policies of these third parties are not under our control and may differ from ours. The use of any Data that you may provide to any third parties will be governed by the privacy policy of such third party or by your independent agreement with such third party, as the case may be. If you have any doubts about the privacy of the information you are providing to a third party, we recommend that you contact that third party directly for more information or to review its privacy policy.

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any offering, site, or other products and Services used in connection with the Services. The inclusion of a link does not imply endorsement of the linked site or service by us or by our affiliates.

DATA RETENTION

You may delete certain Data within your account. We will process your Data for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you. For Data we process on behalf of an organization, we process that Data pursuant to our agreement with that organization. We may process certain Data as necessary to prevent fraud or future abuse, or for legitimate business purposes, such as analysis of Anonymized Data, account recovery, or if required by law. All retained information will remain subject to the terms of this Privacy Policy.

AMENDMENT OF THIS PRIVACY POLICY

We reserve the right to change this Privacy Policy at any time. If we decide to change this Privacy Policy in the future, we will post or provide appropriate notice. Unless stated otherwise, our Privacy Policy applies to all Data that we have about you and your account. The date on which the latest update was made is indicated at the top of this document. We recommend that you print a copy of this Privacy Policy for your reference and revisit this policy from time to time to ensure you are aware of any changes. Your continued use of the Services signifies your acceptance of any changes.

CONTACT US

You can help by keeping us informed of any changes such as a change of your personal contact information. If you would like to access your information, if you have any questions, comments, or suggestions or if you find any errors in our information about you, please contact us at info@ocore.io or at our number: +1 (503) 825-0110 or by mail at OCore, Inc., 710 S Redwood Rd, North Salt Lake, UT 84054. If you have a complaint concerning our compliance with applicable privacy laws, we will investigate your complaint and if it is justified, we will take appropriate measures.