Monument’s Privacy Policy (“Privacy Policy”) helps you understand how we collect, use and share your personal information and to assist you in exercising the privacy rights available to you. This Privacy Policy applies to personal information processed by us in our business and on our websites and applications (“Services”).

We value your business and we know security and privacy are important to you. It’s important to us, too. To help you understand our Privacy Policy, we tried to put this agreement in simple terms that are easy for anyone to understand.

Monument’s goal is to provide a private, encrypted photo and video storage and organization service for you. As part of that, you may elect to give us additional data, which is covered in "Information You Provide to Us". In addition, we may automatically collect information covered in "Information Collected Automatically by Us".

For both sources, we cover our use and protection of that information in "How we use your information", "Disclosing your information to third parties", "Data Retention" and "Security of Your Information". Lastly, you can find the choices you have over that data in "Your Choices".

Personal Information We Collect
The categories of personal information we collect depend on whether you are a customer, user, applicant or visitor, and applicable law.

Information You Provide to Us

- Account Creation: When you create a user account, we may ask to collect personal information like your name, email address, and/or phone number for purposes such as two-factor verification.
‍
- Communications with Us: We may collect your email address, phone number, device serial number, or mailing address when you order, pre-order our product and request information about our Services, register for our newsletter, request customer or technical support, apply for a job or otherwise communicate with us.

- Surveys: We may contact you to participate in surveys. If you decide to participate, you may be asked to provide personal information.

- Social Media Content: We may offer forums, blogs, or social media pages like Twitter, Discord or Facebook. Any content, comment you provide on these channels will be considered “public” and is governed by the privacy policy of the company providing them.

Information Collected Automatically by Us

- Automatic Data Collection: We may collect certain information automatically when you use the Services. This information may include your Internet protocol (IP) address, user settings, serial number of your Monument device, cookie identifiers, details about your browser, operating system or device, application versions, size and types of files transferred (i.e. JPG, MP4) and other analytics information about how you use the Services.

In addition, we may automatically collect data regarding your use of our Services, such as the types of content you interact with and the frequency and duration of your activities (i.e. Album browsing, watching videos).

Collecting this information enables us to better diagnose problems with our products, build new services, and features, provide customer support more effectively, inform you about operating systems that we no longer support and ensure the functionality of our products.

We do not and never have access to your content by any means. We do not transfer, process or copy your content. All of your content is processed locally on the Monument device.

- Cookies: We may use cookies, local storage, and other technologies (“Technologies”) to automatically collect information through the Services. Technologies are small data files placed on your computer, tablet, mobile phone, or other devices that allow us to record certain pieces of information whenever you visit or interact with our Services. Most browsers allow you to block and delete cookies.

How We Use Your Information
We use your information for a variety of business purposes, including to:

* Provide you with our Services and fulfill our contract with you, such as:
- Managing your information and accounts.
- Ship you physical products.
- Providing access to certain areas, functionalities, and features of our Services.
- Communicating with you about your account, our Services and policy changes.
- Undertaking activities to verify or maintain the quality or safety of a service or device.
- Processing your financial information and other payment methods for Services purchased.
- Performing analytics services.
- Providing Services such as maintaining or servicing your accounts, providing customer service, and verifying your customer information.
- Processing applications and transactions.

* Analyze and improve our Services pursuant to our legitimate interest, such as:
- Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity. For example brute force authentication and registration attempt.
- Measuring interest and engagement in our Services.
- Undertaking research for technological development and demonstration.
- Researching and developing products, services or security procedures to improve their performance, resilience, reliability or efficiency.
- Improving, upgrading or enhancing our Services.
- Developing new services.
- Ensuring internal quality control.
- Verifying your identity and preventing fraud.
- Debugging to identify and repair errors that impair existing intended functionality.
- Enforcing our terms and policies.
- Complying with our legal obligations, protecting your vital interest, or as may be required for the public good.

* Provide you with additional content and Services, such as:
- Auditing relating to interactions, transactions and other compliance activities.
- Other purposes you consent to, are notified of, or are disclosed when you provide personal information.

* Automatic Collection Technologies:
Our uses of Technologies fall into the following general categories:

- Operationally Necessary: This includes Technologies that allow you access to our Services, applications, and tools that are required to identify irregular behavior such as brute force authentication attempt, prevent fraudulent activity and improve security or that allow you to make use of our functionality.

- Performance Related: We may use Technologies to assess the performance of our Services, including as part of our analytic practices to help us understand how our Services are used.

- Functionality Related: We may use Technologies that allow us to offer you enhanced functionality when accessing or using our Services. This may include identifying you when you sign into our Services.
‍
We might have a presence on publicly accessible blogs, forums, social media pages, and privately accessible messaging features. Your interactions on these websites and applications are governed by the privacy policy of the company providing them.

Disclosing Your Information to Third Parties

We do not and never have sold or shared consumers' personal information. We share your personal information only in the necessary cases below in order to provide Services to you.

* Service Providers: There are limited categories of service providers (processors) to whom we entrust personal information. Our relationship with these providers allows them to perform only a limited set of tasks we ask them to do, and they have no further rights to or ownership of your data outside of them. These include:
- Payment processors
- Analytics providers
- Customer service providers
- Vendors to support the provision of the Services (i.e. shipping services, and application stores)

* International Data Transfers. You agree that all information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We have taken appropriate safeguards to require that your personal information will remain protected and require our third-party service providers and partners to have appropriate safeguards as well.

Your Choices

General
You have certain choices about personal information stored in our Platform. Where you have consented to the processing of your personal information, you may withdraw that consent at any time and prevent further processing by contacting us as described below.

Email and Telephone Communications
If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested.

Your Privacy Rights:
In accordance with applicable law, you may have the right to:
- Access Personal Data about you consistent with legal requirements.
- Request correction of your personal information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update personal information stored for your account, or for data we do not control, we may refer you to the controller who is able to make the correction.
- Request deletion of your personal information, subject to certain exceptions prescribed by law. Subject to applicable law, you may request that Monument delete information stored about you that is stored in our systems. However, if your data has been extracted from an external service provider (e.g., from a payment processor such as PayPal, Stripe, or customer service software such as Zendesk etc.), the data will still be present in the service provider’s system. To have this data deleted, contact the service provider who hosts the data.
- Request restriction of or object to processing of your personal information, if applicable, where such requests are permitted by law.

If you would like to exercise any of these rights, please log into your account, or contact us as detailed below. We will process such requests without undue delay and in accordance with applicable laws. To protect your privacy, we will take steps to verify your identity before fulfilling your request.

Data Retention
All information we automatically collect about you, such as your usage of Monument like application usage history, will be deleted once it's requested by you or required by law.

We retain other information you provide to us, such as your log-in and payment credentials, only as long as necessary to fulfill the purpose(s) for which it was collected, comply with applicable laws, comply with audits, and enforce our Terms of Service.

Security of Your Information‍
We take steps to ensure that your information is treated securely according to the best of our knowledge and in accordance with this Privacy Policy. To the fullest extent permitted by applicable law, we do not accept liability for unintentional disclosure.

By using the Services or providing personal information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Services, by mail or by sending an e-mail to you.

Children's Information‍
Our services are not directed to children under the age of 13 (or other age as required by local law), and we do not knowingly collect personal information from children. While individuals under the age of 13 may utilize our service, you must do so only with the involvement, consent and supervision of your parent or legal guardian.

Supervisory Authority
If you are located in the European Economic Area or the UK, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

Changes to Our Privacy Policy
If we collected personal data from you under this Privacy Policy, we will not use it for unexpected purposes outside of those stated in this Privacy Policy without obtaining your explicit consent. We may revise this Privacy Policy from time to time in our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use the Services after the new Privacy Policy takes effect.

Contact Us
If you have any questions or if you wish to submit a request to exercise your rights, please contact us at:

Monument Labs, Inc.
227 W Monroe St, Suite 5200
Chicago, IL 60606
‍
privacy@getmonument.com