Privacy Policy

Introduction

Thank you for your interest in Opinr Inc. (doing business as Certa) ("Certa," "we," "our," or "us") and our websites located at www.certa.ai and www.getcerta.com (the "Websites") and our associated services (collectively with the Websites, the "Service").

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service. It also explains your privacy rights and how you can exercise them.

Important note: When Certa collects data on behalf of a Certa customer as a data processor, our agreement with that customer will control with respect to use of such data.

1. Information we collect

1.1 Information you provide to us

We collect personal information that you voluntarily provide when you:

• Register for an account
• Use our Service
• Complete forms or post inquiries
• Contact our support team
• Subscribe to marketing communications

This may include:

• Identifiers (name, email address, phone number, postal address)
• Account credentials
• Company information
• Payment details (processed by our payment providers)
• Communications with us
• Commercial information (products or services purchased, obtained, or considered)
• Professional or employment-related information
• Internet activity information (browsing history, search history, interactions with our Service)
• Geolocation data
• Inferences drawn from any of the information above

1.2 Information collected automatically

When you use our Service, we automatically collect:

• Usage data (pages visited, features used, time spent)
• Device information (IP address, browser type, operating system)
• Log data (actions taken, dates and times of access)
• Cookie data (as described in Section 2)

1.3 Information from third parties

We may receive information about you from:

• Business partners
• Identity verification services
• Publicly available sources
• Social media platforms (if you connect your account)

2. Cookies and similar technologies

2.1 What are cookies

Cookies are small data files stored on your device that help us improve our Service and your experience. We use both session cookies (deleted when you close your browser) and persistent cookies (remain until you delete them or they expire).

2.2 Types of cookies we use

• Essential cookies: required for the Service to function properly
• Analytics cookies: help us understand how visitors interact with our Service
• Marketing cookies: used to deliver relevant advertisements and track marketing campaign performance
• Preference cookies: remember your settings and preferences

2.3 Third-party cookies

We allow certain third parties to place cookies on our Websites, including:

• Google Analytics (analytics)
• Microsoft Clarity (analytics)
• LinkedIn (social media and marketing)
• Meta (marketing)
• Vimeo (content delivery)
• DoubleClick (advertising)

2.4 Your cookie choices

Most web browsers allow you to control cookies through their settings. To learn more about cookies and how to manage them, visit www.allaboutcookies.org.

3. How we use your information

We use your personal information for the following purposes:

We will not use your information for purposes incompatible with those described without notifying you and, where required, obtaining your consent.

4. How we share your information

4.1 Service providers

We share information with third-party service providers who help us operate, provide, and market our Service, including cloud hosting providers, payment processors, analytics providers, customer support tools, marketing platforms, and security services.

4.2 Business transfers

If Certa is involved in a merger, acquisition, or sale of all or part of its assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

4.3 Legal requirements

We may disclose your information if required by law, governmental request, or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4.4 With your consent

We may share your information with third parties when you have given us your consent to do so.

4.5 Security incidents

In the event of a security incident that may have compromised your personal information, we will notify affected individuals and relevant government agencies as required by applicable law. Where conditions permit and as required by law, we will provide timely information about the incident on our website and/or directly to affected users.

5. Data retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider how long the information is needed to provide our Service, our legal obligations, applicable statutes of limitations, potential disputes, and guidelines issued by relevant data protection authorities. When we no longer need personal information, we securely delete or anonymize it.

6. Data transfers

Certa is based in the United States, and your information will be processed and stored on servers in the United States and potentially in other countries where our service providers maintain facilities. These countries may have data protection laws different from those in your country.

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we implement appropriate safeguards for transfers of personal information to countries outside these regions, such as Standard Contractual Clauses approved by the European Commission.

7. Your privacy rights

Depending on your location, you may have certain rights regarding your personal information.

7.1 For all users

• Access: request information about what personal information we process
• Correction: request correction of inaccurate information
• Deletion: request deletion of your information in certain circumstances
• Marketing opt-out: opt out of marketing communications

7.2 For European users (EEA/UK/Switzerland)

You have the following additional rights:

• Restriction: request restriction of processing in certain circumstances
• Objection: object to processing based on legitimate interests
• Data portability: request a copy of your data in a structured, machine-readable format
• Withdrawal of consent: withdraw consent at any time (without affecting lawfulness of previous processing)
• Complaint: lodge a complaint with a supervisory authority

7.3 For California residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to know what personal information we collect, use, and disclose; delete personal information we collect from you; opt out of the "sale" or "sharing" of personal information; and non-discrimination for exercising your rights.

To exercise your CCPA/CPRA rights, contact us at legal@certa.ai or call our toll-free number at 1-866-I-OPT-OUT and enter Service Code 1100. California residents may also request information about our disclosure of personal information to third parties for direct marketing purposes under California's "Shine the Light" law by contacting us using the same methods. You can designate an authorized agent to submit requests on your behalf; however, we will require written proof of the agent's permission to do so and may verify your identity directly.

7.4 For Canadian residents

Your personal information may be transferred outside Canada and stored in countries with different data protection laws.

7.5 How to exercise your rights

To exercise your rights, please contact us at legal@certa.ai. We may need to verify your identity before fulfilling your request.

8. Security

We implement appropriate technical and organizational measures to protect your personal information. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information. If you have concerns about sharing sensitive information, please consider this limitation.

We regularly review and update our security practices to enhance protection of your information. Despite these efforts, should you become aware of any security vulnerabilities or concerns, please report them immediately to legal@certa.ai.

9. Children's privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children under 13 without parental consent. If we learn we have collected personal information from a child under 13, we will promptly delete it.

10. Third-party links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party website you visit.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on our Websites with the effective date. Your continued use of our Service after the changes become effective constitutes your acceptance of the updated policy.

12. Contact us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@certa.ai · legal@certa.ai
Address: Opinr, Inc. d/b/a Certa
24A Trolley Square #1635
Wilmington, Delaware 19806-3334

13. Reporting concerns

We are committed to lawful and ethical behavior. If you have concerns about improprieties, please report them to legal@certa.ai. We will investigate discreetly and maintain confidentiality to the extent possible.