Privacy Statement - 2023 Archived
Information We Collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:
Category A – Identifiers
Examples: Name, postal address, Internet Protocol address, email address, Social Security number, driver’s license number, passport number, or other similar identifiers.
Category B – Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
Examples: Name, signature, Social Security number, address, telephone number, fax number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, bank account number, credit card number, debit card number, or any other financial information, physical illness, mental illness or disabilities.
Category C – Protected classification characteristics under California or federal law
Examples: Age, ethnicity, citizenship, religion or creed, marital status, physical illness, mental illness or disabilities, gender, veteran status.
Category D – Commercial information
Examples: Records of personal property.
Category F – Internet or other similar network activity
Examples: Access history and information on your interaction with our application.
Category I – Professional or employment-related information
Examples: Occupation, employer information.
Category J – Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))
Examples: Education level, school attended.
How Information is collected
Elroi collects your personal information when you use our website or extension. We collect your personal information directly from you when you set up your account. Elroi also collects technical information about your device automatically to track your activity on our website. Additionally, when using our browser extension, we collect classes of protected personal information from the websites you visit.
We obtain the categories of personal information listed above from the following categories of sources:
Directly from our clients or their agents. For example, through information our clients provide to us related to the Services for which they engage us.
Directly from you. For example, through information we ask from you when our clients or their agents subscribe and engage our Services.
Directly and indirectly from you when using our Services or visiting our website. For example, usage details collected automatically in the course of your interaction with our platform or website.
Information We Collect
Personal Information is any information relating to an identified or identifiable individual.
The following data will be collected by Elroi and third-party providers. This falls into three maincategories:
1. User Submitted Information
2. Information Collected Automatically
3. Third Parties (i.e. Experian, for consumer verification purposes)
Personal Information We Collect About You.
We may collect and use the following personal information that identifies, relates to, describes, is reasonable capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:
Categories of Personal InformationSpecific Types of Personal Information Collected
Identifiers First Name; Last Name; Email Information that identifies, relates to, describes, or is capable of being associated with, a particular individual’s location.AddressInternet or other electronic network activity informationIP Address; User Agent StringMiscThe browser extension collects/stores any of the protected privacy data classes itself; however, it would store the occurrence of these protected data typesand hash (a hash is accepted as being irreversible) of that data. An example would be to see if different credit cards are used.
Use of Personal Information
Elroi uses personal information such as to provide services, to process transactions, to communicate with you, to provide security and prevent fraud, and to comply with the law. We may also use personal information for other purposes with your consent.
Provide Services.
Elroi collects personal information that is necessary to provide services. For example, Elroi may collect your first name, last name, and email to create a user account. Elroi also collects your IP address when you use our services.
Process Transactions.
Elroi collects information such as your name, payment information, and purchase information to process transactions.
Communicate with You.
Elroi collects personal information to communicate with you about your account, market our products and services, provide other relevant information, or request information or feedback. Elroi may use your personal information to send important notices, such as changes to our terms, conditions, and policies. This information is important to your interaction with Elroi. You may not opt out of receiving these important notices.
Maintain and Improve Services.
Elroi collects your personal information to ensure our services are working as intended, such as tracking outages or troubleshooting issues that you report to us. We also use your information to make improvements to our services and help develop new ones.
Security and Fraud Prevention.
Elroi collects your personal information to help improve the safety and reliability of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Elroi, our users, or the public.
Comply with the Law.
Elroi collects your personal information to comply with applicable law. Elroi also will use your personal information to respond to law enforcement requests, court order, or governmental regulations.
Elroi retains personal information only for so long as necessary to fulfill the purposes for which it was intended, including as described in this Privacy Policy, or as required by law.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Elroi does not sell your personal information.
Use of Personal Information- AndyneWe may use or disclose the personal information we collect for one or more of the following business purposes:
1. To fulfill or meet the reason for which the information is provided.
2. To provide you with email alerts and other notices concerning our Services, or updates to your insurance application process.
3. To improve our Services to you.
4. For testing, research, analysis and product development.
As described to you when collecting your personal information or as otherwise set forth in the CCPA.
Sharing Personal Information.
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
Category A: Identifiers.
Category B: California Customer Records personal information categories.
Category C: Protected classification characteristics under California or federal law.
Category D: Commercial information.
Category F: Internet or other similar network activity.
Category I: Professional or employment-related information.
Category J: Non-public education information.
We disclose your personal information for a business purpose to the following categories of third parties:
1. Our clients or their agents for which you have engaged in a business contract.
Service providers.
2. Third parties to whom you or your agents authorize us to disclose your personal information in connection with our Services.
In the preceding twelve (12) months, we have not sold any personal information.
We know how important your personal data is to you, so we will never sell it. We’ll only share it! We may disclose your personal information to a third party for verification purposes/ a business purpose. When we disclose your personal information for a business purpose, we enter into a contract that describes the scope, purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. (Get specific to the credit bureau?) We may disclose your original account setup information to the third party (credit bureau) for purposes of performing services the contract.
We may disclose your personal information to law enforcement or other legal entities as law requires. Additionally, we may disclose your personal information to businesses or companies when you request to action your data. We will put the data action request to the business or company you specify. We may need a link.
Your Rights and ChoicesThe CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Access to Specific Information and Data Portability RightsYou have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
Once we receive and confirm your verifiable consumer request, we will disclose to you:
The categories of personal information we collected about you.
Our business or commercial purpose for collecting that personal information.
The categories of third parties with whom we share that personal information.
The specific pieces of personal information we collected about you (also called a data portability request).
Deletion Request RightsYou have the right to request that we delete any of your personal information we collected from you and retained, subject to certain exceptions.
Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
3. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
4. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
5. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
6. Comply with a legal obligation.
7. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Exercising Access, Data Portability, and Deletion Rights.
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by email at privacy@elroi.ai.
You may also make a verifiable consumer request on behalf of your minor child.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
1. Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
2. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
3. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to the registered email associated with the account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Non-DiscriminationWe will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
1. Deny you use of our Services.
2. Provide you a different level or quality of Services.
Changes to Our Privacy NoticeWe reserve the right to amend this Privacy Notice at our discretion and at any time. The date this Privacy Notice was last updated is identified at the bottom of this page. You are responsible for periodically visiting the Indio website and this Privacy Notice to check for any changes.
To contact us please email privacy@elroi.ai
Updated: April 1, 2021