LEGAL

Privacy Policy

This Website Privacy Policy ("Privacy Policy") explains how echo Group, Inc. (together with its subsidiaries and affiliates, "Echo," "we," "us," or "our") collects, uses, and shares Personal Information collected from or about you. This Privacy Policy applies to those websites ("Websites"), domains and URLs, the delivery of our services, mobile applications and other interactions with you, (collectively, our "Services"). If you are an Echo Chat user please review the Echo Chat User Privacy Policy and if you are a business customer, please review our Customer Privacy Policy.

By accessing our Websites or using our Services, you agree you have read and understood this Privacy Policy and our Terms of Service. If you do not agree with any portion of this Privacy Policy, please do not use or access our Websites or Services or provide us with any Personal Information.

If you are a California resident, please review Additional Disclosures for California Residents for additional disclosures, our notice at collection and a description of your rights under the CCPA.

Information We Collect and How We Collect It

When you interact with us, as a visitor to our Website(s) or a job applicant, we may collect certain Personal Information from or about you. We use the term "Personal Information" to mean any information that can be reasonably linked to you or otherwise identify you. Some of this information may be collected directly from you, automatically from your interactions with us or through third parties.

Information We Collect Directly From You

Depending on how you interact with us, including if you are a job applicant, we may collect the following categories of Personal Information:

  • Identity: Information such as your name, email, phone number, [government identifiers such as a Social Security number or driver's license number], company name, business contact info, billing contacts, legal representative, tax/VAT IDs where applicable.
  • Device & Usage: Such as login history, role/permissions, API keys, audit logs, IP address, device type, OS/browser, crash logs, performance metrics, cookie IDs, duration of your visit, pages you view or similar information.
  • Communications: Including messages you send us (email, forms) and the content of such messages.
  • Geolocation: Such as the general area from which your device accesses our Services based on information like its IP address, or precise location information you choose to provide.
  • Inferences: Inferences drawn from other Personal Information such as behaviors, attitudes, or other similar information.
  • Contact Information: Such as full name, including title, name at birth and preferred name, address, phone number, email address, and emergency contact details.
  • Sensitive Personal Information: Social security number, driver's license or identification number, racial or ethnic origin, marital status, religious or philosophical beliefs, health information, trade union membership, sexual orientation, physical or mental disability, and military or veteran status.
  • Professional Information: Education information, work history, resume, CV, certifications, and awards.]
  • Other Information: Any other information you provide to us that we have not solicited from you.
Automatic Collection of Information.

Certain of the information listed above may be provided directly by you or collected automatically through our use of cookies and online tracking technologies. For more information on our use of cookies and other tracking technologies please see Cookies & Tracking below.

Information Collected from Third Parties

We may also collect certain information about you from the following third parties:

  • Service Providers: Information such as analytics, error reporting, hosting, payments, email delivery.
  • Training Data: Including publicly available information via the Internet and datasets that are obtained through commercial agreements with third party businesses.

How We Use Personal Information

Depending on how you interact with us, we may use your Personal Information for the following purposes:

  • Provide and Improve our Services: Including provide our Website, maintain performance, debug, respond to your questions, and enhance features.
  • Trust, Safety, and Anti-fraud: Including detecting invalid traffic and abuse.
  • Communications: In order to communicate with you about our products and services and, if you opt in, product updates or surveys.
  • Legal Compliance: Comply with law, enforce terms, and protect Echo, our users, advertisers, and the public.
  • Research & Product Development: Including analyzing de-identified or aggregated usage to improve our Website, products and services.

When and How We Share Information

We do not sell your Personal Information to third parties for monetary compensation.

Depending on how you interact with us, we may disclose your Personal Information to the following types of third parties for the following purposes:

  • Service Providers: These include service providers that provide us with hosting, analytics, payments, email, customer support, and security.
  • Corporate Transactions: Including in the event of a business transfer, merger, acquisition.
  • Legal & Safety: In order to comply with law or protect rights, safety, and security.

Cookies & Tracking

Like many websites, we use cookies and other online tracking technologies, such as pixels, Flash objects, web beacons, embedded scripts, clear GIFs, and location-identifying technologies to collect information about you, your device and your visit to our Site, including to identify you and/or your location, record your preferences, track your usage of the Site, and improve the Site. Other technologies, including web storage and identifiers associated with your device, may be used for similar purposes.

We use the following categories of cookies:

  • Strictly Necessary: These cookies are essential for the Website to function properly and enable basic features such as page navigation and access to secure areas of the site.
  • Functional: These cookies enable enhanced functionality and personalization of the Website. They may remember your preferences.
  • Analytics: These cookies allow us to analyze how visitors use the Website, which helps us improve its functionality and performance.
  • Targeting Cookies: These cookies allow us to display advertisements or display targeted promotions or to manage our advertising. They collect information about your activities on websites. These Cookies may be set through our Site by our advertising providers. They may be used by those companies to build a profile of your interests and show you relevant adverts on other websites.
  • Session Replay Cookies: We may use cookies, which may be provided by our vendors, for purposes of session replay. These cookies record your interactions with our Website, including mouse movements, text, and other information, associated with your visit to our Websites. This information is used to help us improve our Websites and better provide you with information you are interested in when you visit our Websites. They may be set by us or by third party providers whose services we have added to our pages. This information is used to help us improve our Websites and better provide you with information you are interested in when you visit our Website.

You can manage the use of cookies in several ways:

  • Our Cookie Management Tool: You can find more information on our specific tracking technologies used and can change your preferences here: Cookie Settings.
  • Internet Browser: You can delete online tracking technologies, including cookies, from your device by clearing your browser history. This will delete all online tracking technologies from all websites and applications you have visited since you last cleared your browser history. You can also set your browser to prevent certain online tracking technologies from being placed on your device. To learn more, please see the links below:
    • Firefox
    • Google Chrome
    • Microsoft Edge
    • Safari / Safari Mobile
  • Third Party Tools: Various third-party tools exist that can help you manage cookies. For additional information you can also visit allaboutcookies.org where you will find information on cookie management and blocking.

How Long Do We Keep Your Information

We will keep your Personal Information for as long as it is required by us. For example, we may require it for our business purposes, to perform our contractual obligations, or where law or regulation obliges us to. We will generally retain your personal data throughout the lifecycle of your relationship with us. Some Personal Information will be retained after your relationship with us ends. We expect to delete your Personal Information (at the latest) once there is no longer any local, state, federal, and other legal requirement or legitimate business purpose for retaining your personal data.

Security

You use our Website and other services at your own risk. We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us. Please keep this in mind when disclosing any Personal Information to us via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Sites, our mobile app, or third-party websites.

Your Rights and Choices

Depending upon where you reside, certain choices and rights may be available to you under applicable data protection laws. If you have questions about what rights may apply to you, please contact us at privacy@echogroup.ai. Rights that may apply to you, include the following:

  • Right to Know and Access. You may have the right to know and access the Personal Information we have collected about you. We will provide you your Personal Information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Information to another controller.
  • Right to Delete. You may have the right to request that we delete the Personal Information we have collected about you, subject to certain legal exceptions.
  • Right to Correct. You may have the right to request that we correct any inaccurate Personal Information we have collected about you.
  • Rights to Opt-Out of Targeted Advertising, Sale of Personal Information, and/or Profiling. You may have the right to opt-out of our processing of your Personal Information for the purposes of (i) targeted advertising, (ii) the sale of Personal Information, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Please note we do not sell Personal Information nor do we process Personal Information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects and therefore these opt out rights do not apply.
  • Right to Appeal. You may have the right to appeal any of our responses with respect to your Personal Information privacy rights requests.
  • Right to No Discrimination. You will not receive any discriminatory treatment by us for the exercise of your privacy rights as outlined in this Privacy Policy.
  • Right to Contact Supervisory Authority: You may have the right to complaint to the relevant supervisory authority.

To exercise rights, use our Data Request Form or email privacy@echogroup.ai. We may ask that you provide clarifying or identifying information to verify your request (and your agent's authority, if applicable).

Children's Privacy

Our Services, including Echo Chat, are not directed to, nor intended for, minors under the age of 18. Children under the age of 13 may not use our Services. We do not knowingly solicit or collect Personal Information from children. If you have reason to believe that a child under 13 has provided Personal Information to Echo through the Services, please email us at privacy@echogroup.ai. We will take reasonable measures to delete such information from our systems.

International Data Transfers

We are located in the United States and store and process the Personal Information we handle in the United States. The level of data protection may not be equivalent to the level of protection applicable at your location.

Third Party Links

Our Website and Services may contain links to third-party websites. Any access to and use of such third-party websites is not governed by this Privacy Policy, but, instead, is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

Additional Information for California Residents

The CCPA imposes certain obligations on us and grants certain rights to California residents ("California Resident," "you" or "your") with regard to "Personal Information." If you are a California Resident, please review the following information about your potential rights with regard to your Personal Information under the CCPA. The rights described herein are subject to exemptions and other limitations under applicable law. For purposes of this section "Personal Information" shall have the same meaning as under the CCPA, meaning it is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Notice at Collection

For further details on the information we may collect and use information, including the sources from which we receive information, review Our Collection, Use, Disclosure, and Sale of Personal Information. We do not sell or share your Personal Information.

We retain your Personal Information as described above in Data Retention.

Our Collection, Use, Disclosure of Personal Information

Depending on how you interact with us, in the preceding 12 months, we may have collected or disclosed for a business purposes the following categories of Personal Information to the following categories of third parties as described in the below chart. We do not sell or share your Personal Information. We do not knowingly sell or share the personal information of California Residents under 16 years old.

  • Identifiers — name, contact details, IP address, online identifiers, government identifiers such as a Social Security number or driver's license number
    • Sources: Directly from you; Affiliates; Service Providers
    • Purposes: Provide and improve our Services; Personalize and customize your experience; Communicate with you; Prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services; Comply with legal obligations; Provide certain marketing services and functionality; Review and process job applications
    • Disclosed to: Service providers, vendors and affiliates; Government authorities or other third parties; Parties involved in transactions; Partners and publishers
  • Personal Information Categories Listed in the California Customer Records statute (Cal. Civ. Code 1798.80(e)) — name, contact details, payment information
    • Same purposes and recipients as above
  • [Characteristics of protected classifications under California or federal law, such as race, age, citizenship, veteran status]
    • Same purposes and recipients as above
  • Commercial Information — transaction history
    • Same purposes and recipients as above
  • Internet or Other Electronic Network Activity Information — browsing history, content, interactions with the Services
    • Sources: Directly from you; Affiliates; Service Providers; Business Partners; Analytics Providers
    • Same purposes and recipients as above
  • Geolocation Data — general area from device IP
    • Same purposes and recipients as above
  • Professional or Employment-Related Information — business contact info, current employment
    • Same purposes and recipients as above
  • [Non-public education information (as defined in the Family Educational Rights and Privacy Act (20 U.S.C. 1232g, 34 C.F.R. Part 99))]
    • Same purposes and recipients as above
  • Inferences Drawn from Other Personal Information — behaviors, attitudes
    • Same purposes and recipients as above
  • Sensitive Personal Information — demographic info, company financial info, government identifiers (SSN, driver's license)
    • Same purposes and recipients as above

In addition, we may disclose and in the preceding 12 months, may have disclosed any of the categories listed in "Information we collect" to the following categories of third parties: (i) judicial courts, regulators, or other government agents purporting to have jurisdiction over us, our subsidiaries or our affiliates, or opposing counsel and parties to litigation; and (ii) other third parties as may otherwise be permitted by law. Additionally, we may disclose your Personal Information to third parties upon your request, at your direction, or with your consent. We may also disclose your Personal Information or otherwise make it available to our service providers such as our IT and/or CRM providers, other entities that have agreed to limitations on the use of your Personal Information, or entities that fit within other exemptions or exceptions in, or as otherwise permitted by, the CCPA.

Use and Disclosure of Sensitive Personal Information

Under the CCPA, certain personal information we collect and process may be considered "sensitive personal information." The CCPA requires that we provide you with a right to limit our use or disclosure of such sensitive personal information in certain circumstances. Currently, we are not using your sensitive personal information for purposes that would require that we provide you with a right to limit.

California Residents' Rights under the CCPA

If you are a California resident, you may have the following rights under the CCPA in relation to Personal Information we have collected about from or about you to the extent required by the CCPA:

  • Right to be Informed. You have the right to be informed, at or before the point of collection, of the categories of Personal Information to be collected and the purposes for which the categories of Personal Information shall be used.
  • Right to Know/Access: You have the right to request the following information about our collection and use of Personal Information about you: (1) the specific pieces of your Personal Information collected; (2) the categories of your Personal Information collected; (3) the categories of sources from whom your Personal Information is collected; (4) the purpose for collecting your Personal Information; and (5) the categories of third parties with whom we have shared your Personal Information.
  • Right to Delete: You have the right to request that we delete certain Personal Information we have about you.
  • Freedom from Discrimination: You have a right of non-discrimination for the exercise of any of your privacy rights guaranteed by law such as the right to access, delete, or opt- out of the sale of your Personal Information.
  • Right to Correct: You have the right to request that we correct inaccurate Personal Information regarding the information you provide us.
  • Right to Access Information on Automated Decision-Making: You have the right to access information collected through automated decision-making. Additionally, you can opt-out of our use of automated decision-making related to your Personal Information.
  • Opt-Out of Sale or Sharing: Request that we do not sell or share your Personal Information.
  • Limit Use and Disclosure of Sensitive Personal Information: Request to limit the use and disclosure of sensitive personal information where required by the CCPA (we are not currently using sensitive personal information for purposes that would require we provide you with such a right to limit).
How to Submit a Request Under the CCPA
  • Consumer Rights Requests: You can submit a request to know, request to delete, or request to correct ("Consumer Rights Request") using our Data Request Form or emailing privacy@echogroup.ai. We may ask that you provide clarifying or identifying information to verify your request (and your agent's authority, if applicable).

We are only required to respond to verifiable Consumer Rights Requests made by you, or someone legally authorized to act on your behalf. You may also make a verifiable Consumer Rights Request on behalf of your minor child. Making a verifiable Consumer Rights Request does not require you to create an account with us.

When you submit a verifiable Consumer Rights Request, we will take steps to verify your request by email or telephone call. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

We will only use Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

  • Global Privacy Controls: While we do not sell or share Personal Information, we will respond to requests from opt-out preference signals, such as the Global Privacy Control ("GPC"). Such requests will be processed as a request to opt-out of our use of cookies that are not necessary for the website to function. [If you click "accept" on the cookies banner subsequent to your submission of a GPC signal, this may override your GPC signal.]

Notice of Financial Incentives

If you are an Echo Chat user, please see our Echo Chat Privacy Policy for our Notice of Financial Incentives.

"Shine the Light" and "Eraser" Laws

California Residents may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties' direct marketing purposes. We do not disclose Personal Information to third parties for their direct marketing purposes.

Do Not Track

Our Websites are not designed to respond to "do not track" requests from browsers.

Changes to this Policy

We may update this policy from time to time. We'll post the new version with a new "Last updated" date and, if changes are material, provide additional notice (e.g., email or in-product).

Contact

For questions or concerns about this Privacy Policy, contact us at: privacy@echogroup.ai.