Except as otherwise described below, this Policy applies to our online and offline personal information processing activities including, but not limited to: visitors to our website where this Policy is posted, including jellytoastapp.com (the “Site”); individuals who sign up for, or create an account with us to access and use certain features of our services; individuals who subscribe to receive news, information, and marketing communications and materials from us; and individuals who communicate or otherwise interact or engage with us or the services available through our Site or other online services (collectively referred to as the “Services”).

Additional Notices. Depending on how you interact or engage with us, we may provide you with additional or supplemental privacy notices. These additional notices will control to the extent there is a conflict with this Policy. For example, this Policy does not apply to the personal information we collect and process about job applicants and candidates for employment with us, or to employees or contractors with whom we work.

We collect personal information directly from you, from third-party sources, and automatically through your use of the Services. To the extent permitted by applicable law, we may combine the personal information we collect from publicly available or third-party sources. The personal information we collect varies depending upon your use of our Services and our interactions with you.

Personal Information Collected Directly. We may collect the following personal information directly from you:

• Account and Profile Information. When you sign in or create an account in connection with our Services, we may collect your name, email address, phone number, username, and password, and any other information provided in connection with your account or that you otherwise submit to us through your account.
• Your Content. Our Services are designed for you to back-up and store your data, and allow you to collaborate with others and work across multiple devices and services. If you are an Android user, the Service will collect and store the following when you choose to back-up your data:
• Photos
• Videos

If you are an iOS user, the Service will collect and store the following when you choose to provide them:

• Photos
• Videos
• Communications and Interactions. When you use our Services to communicate or interact with us or others, including if you sign up for our newsletter, complete forms on our Site, interact with others, submit content to the Services, or otherwise engage with us or our sponsored content, we may collect your name, email address, phone number, or other similar identifiers, as well as your message, the nature of your inquiry, and any other information you choose to provide.
• Purchases and Payments. When you make a purchase or payment through our Services, we may collect information such as payment type, payment card details, billing information, shipping address, purchasing information, such as details of SKUs and products purchased, and any other financial or commercial-related information necessary to enable our Services.
• Biometric Information; Tag and Search. Some features such as our “Tag and Search” functionality use information that could be classified as biometric information under certain laws. If you opt-in to use these features, we may collect and process such information.
• Promotional Information. If you agree to receive marketing communications from us, we may collect your contact details, preferences, and if relevant, information about your account and profile, including the Services and features you use.
• Responses and Feedback. If you participate in surveys, questionnaires, or research activities or initiatives conducted by us, such as for market research, user satisfaction, or other similar purposes, we may collect your responses and feedback, and any other information you choose to provide.
• Preferences and Other Requests. We may collect information about your preferences, including communications preferences, preferences related to your use of our Services, and any other preferences or requests you provide when interacting with us.

Personal Information Collected from Third Parties. We may collect and receive personal information from third party sources, such as data analytics and marketing providers, operating systems, customers and other users, and service providers or other third parties who provide services or perform functions on our behalf. We may collect the following information from third-party sources:

Personal Information Collected Automatically. We may automatically collect or derive personal information related to your use of our Services, including through the use of cookies, pixel tags, and other similar technologies. This may include:

• Device and Browsing Information. When you use our Services, we may collect browser type, domain name, page views, access times, date/time stamps, operating system, language, device type, unique ID, Internet service provider, referring and exiting URLs, clickstream data, and other similar device and browsing information.
• Activities and Usage. We also may collect activity information related to your use of the Services, such as information about the links clicked, searches, features used, items viewed, time spent within the Services, your interactions with us within the Services, and other similar activity and usage information.
• Location Information. We also may collect or derive general location information, such as through your IP address or the metadata contained in photos you upload. Additionally, with your permission, we may collect geolocation information from your device. You may turn off location data sharing through your device settings.
• Derived or Inferred Information: We may also derive information about you based upon the information we collect automatically and from other sources.

For more information about our use of cookies and other similar technologies, please see the Cookies and Other Tracking Mechanisms section below.

We may collect, use, disclose and otherwise process personal information for the following purposes:

• Services and Support. To enable our Services, communicate with you about your use of the Services, provide troubleshooting, technical support, and for similar support purposes, respond to your inquiries, fulfill your requests, and to otherwise run our day-to-day operations.
• Account Creation and Management. To enable account creation and management, including allowing you to create a profile and set preferences.
• Tag and Search. If you opt-in to our Tag and Search functionality, we may use your personal information as described below in the Tag and Search section.
• Analytics and Improvement. To better understand how users access and use the Services, and for other research and analytical purposes, such as to evaluate, develop, and improve our Services and business operations, and for internal quality control and training purposes.
• Communication. To respond to your questions, send you requested materials and newsletters, as well as information and materials regarding our Services and our offerings. We may also use this information to send administrative information to you, for example, information regarding the Services and changes to our terms and policies.
• Customization and Personalization. To tailor content we may send or display on the Services, including to offer location customization and to otherwise personalize your experiences and offerings.
• Marketing and Advertising. For marketing, advertising, and promotional purposes. For example, to send you promotional information about our Services, including information about sales, discounts, and new offerings, as well any other information that you sign up to receive.
• Research and Surveys. To administer surveys and questionnaires, such as for market research or user satisfaction purposes.
• Insight Development and Data Enhancement. We may combine personal information collected through the Services with other information that we or third parties collect in other contexts to obtain insights into how our Services are used.
• Security and Protection of Rights. To protect the Services and our business operations, and to protect our rights or those of our stakeholders; to prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use.
• Compliance and Legal Process. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, to respond to a subpoena, warrant, court order, or other legal process, or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.
• Auditing, Reporting, and Other Internal Operations. To conduct financial, tax and accounting audits, audits and assessments of our operations, including our privacy, security and financial controls, as well as for risk and compliance purposes. We may also use personal information to maintain appropriate business records and enforce our policies and procedures.
• General Business and Operational Support. To assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and to administer our business, accounting, auditing, compliance, recordkeeping, and legal functions.

Jelly Toast's Tag and Search feature makes it easier for you to search and organize your photos, and there are two distinct capabilities of the feature: (i) object tagging, and (ii) facial data tagging, which we discuss below:

• Objects:By signing up for Jelly Toast, you acknowledge that Tag and Search object tagging is provided as a matter of course. This functionality enables you to tag objects in your photos, making it easier for you to search and organize your photos. When you search your photos for an object or thing (e.g. baseball, beach, pineapple, etc.), you'll see all the photos that are recognized by the feature as containing that object or thing.
• Facial Data:Please note that the Jelly Toast Service will only collect and process facial data, namely facial vectors, if you choose to opt-in using the functionality provided (by opting in to Tag and Search, you are opting in to the facial data capability of the feature). As applicable, if you have opted-in to use the Tag and Search facial data feature, you can opt-out at any time using the functionality provided to opt-out, and the processed facial data will be deleted from the Service. When enabled, the Tag and Search facial data feature applies face recognition technology to your photos to detect faces and recognizable patterns in the photos you have stored in Jelly Toast. This means that photos of the same person can be grouped together. You can also tag the photos by adding names to them. These tags are private, even if you share the photos with others. This feature makes it easier to search and organize your photos and helps Jelly Toast auto-generate photo stories for you. You can learn morehere.

We may disclose the personal information we collect for the purposes described above and as follows:

• Vendors and Services Providers. We may disclose personal information we collect to our service providers, processors, and others who perform functions on our behalf. These may include, for example, IT service providers, help desk, payment processors, analytics providers, consultants, auditors, and legal counsel.
• Affiliates and Subsidiaries. We may disclose personal information we collect to our affiliates or subsidiaries who will use and disclose this personal information in accordance with this Policy.
• Other Users. We may disclose personal information to other users of the Services to support specific features, or when you request that we do so (implicitly or explicitly). For example, if you use features that allow you to post publicly on the Services or share photos or other content with other users, your information may be available to, and searchable by, others.
• Compliance and Legal Obligations. We may disclose personal information to third parties to comply with our legal and compliance obligations and to respond to legal process. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements. This may include regulators, government entities, and law enforcement as required by law or legal process. Additionally, it may include certain disclosures that we are required to make under applicable laws, such as the names of sweepstakes and contest winners.
• Security and Protection of Rights. We may disclose personal information where we believe it is necessary to protect the Services, our rights and property, or the rights, property and safety of others. For example, we may disclose personal information in order to (i) prevent, detect, investigate and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the Services, (ii) situations involving potential threats to the health, safety, or legal rights of any person or third party, or (iii) enforce, and detect, investigate and take action in response to violations of, our https://jellytoast.app/terms-of-use/. We may also disclose information, including personal information, related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
• In Support of Business Transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. We may also share certain personal information as necessary prior to the completion of such a transaction or corporate transactions such as financings or restructurings, to lenders, auditors, and third-party advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction.
• Aggregate and Deidentified Information. Notwithstanding anything else in this Policy, we may use, disclose, and otherwise process aggregate and deidentified information related to our business and the Services with third parties for quality control, analytics, research, development, and other purposes.
• Other Disclosures. We may disclose personal information in other ways not described above, but will notify you and, if necessary, obtain your consent.

We use cookies, pixels, local storage objects, log files, APIs, and other mechanisms to automatically collect browsing, activity, device, and similar information within our Services and to target advertising and content. We may also engage third-parties or service providers to do the same. We use this information to, for example, analyze and understand how visitors interact with our Services; identify and resolve bugs and errors in our Services; assess, secure, protect, optimize and improve the performance of our Services; conduct marketing and analytics activities; and personalize content in our Services. To manage your preferences regarding cookies, targeted advertising, and other tracking mechanisms within our Services, please see Your Privacy Choices below.

Cookies. Cookies are alphanumeric identifiers that we transfer to your device's hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within Service.

Pixel Tags. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, help us manage content and compile usage statistics. We may also use these in HTML e-mails we send, to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded.

Third-Party Analytics and Tools. We use third party tools, such as Google Analytics, which are operated by third party companies. These third-party analytics companies may use cookies, pixels, and other similar tools to collect usage data about our Services in order to provide us with reports and metrics that help us evaluate usage of our Services and improve performance and user experiences. To learn more about Google's privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/. You can also download the Google Analytics Opt-out Browser Add-on to prevent their data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

We make available several ways that you can manage your privacy choices and submit privacy requests related to your personal information and exercise rights that are provided to you under applicable data protection laws. Some of these choices are browser and device specific, which means that you need to set the preference for each browser and device you use to access our Services. In addition, if you delete or block cookies, you may need to reapply these preferences to each browser and/or device used to access our Services.

These options include:

• Account and Profile Information. You can review and update some of the personal information we maintain about you by logging into your account and updating your profile information directly within our Services.
• Marketing Communications. We may send periodic promotional emails or other similar communications to you, in accordance with applicable law. You may opt-out of these communications by following the instructions provided to you in the communication. If you opt-out of receiving promotional content from us, we may still send you communications about your account or any services you have requested or received from us. Additionally, you can manage your communication preferences in your account settings.
• Push Notifications. You can manage the type of push notifications you receive from us by adjusting your device settings or by modifying the settings within our Services.
• Cookie Settings. To prevent cookies from tracking your activity on our Site or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The "Help" portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Site, but some features may not function.
• Browser Signals/Do Not Track. Our site currently does not respond to “Do Not Track” signals. However, our site may respond to other opt-out preference signals as may be required by law.
• Industry Ad Choice Programs. You can also control how participating third-party ad companies use the information that they collect about your visits to our Site and those of third parties, in order to display more relevant targeted advertising to you. If you are in the U.S., you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance). Opting out of participating third party ad networks does not opt you out of being served advertising. You may continue to receive generic or "contextual" ads on our Site. You may also continue to receive targeted ads on other websites, from companies that do not participate in the above programs.

Our Service may contain links to third-party websites or features or provide certain third-party connections or integrated services. Any access to and use of such linked websites, features, or third-party services is not governed by this Policy. We are not responsible for the information practices of such third parties, including their collection, use, and disclosure of your personal information. You should review the privacy policies and terms for any third parties before proceeding to those websites or using those third-party features or services.

We may offer interactive features that allow you to create and publicly share information or content with others. Anything you submit or post to any such interactive features on the Services may be viewable and searchable by others based on your settings. By using these features, you acknowledge that you have no expectation of privacy or confidentiality in the content you choose to share, whether or not it contains personal information about you.

Our Services are not designed for children, and we do not knowingly collect personal information from children under 18. If you are a parent or legal guardian and you believe we have collected your child's information in violation of applicable law, please contact us using the contact information in the Contact Us section below.

We have implemented safeguards intended to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

This section of the Policy provides additional information for California residents and describes our information practices pursuant to the California Consumer Privacy Act 2018, as amended by the California Privacy Rights Act 2020, and its implementing regulations (the “CCPA”). Depending on how you interact or engage with us, we may provide you with other privacy notices with additional details about our privacy practices.

This section applies to “personal information” as defined in the CCPA, whether collected online or offline. This section does not address or apply to our handling of personal information that is exempt under the CCPA.

Categories of Personal Information Collected and Disclosed. Depending on how you use the Services, we may collect (and have collected in the prior 12 months) the following categories of personal information:

We have also disclosed the above categories of personal information to our service providers for business purposes in the past 12 months.

Source of Personal Information. We generally collect personal information from the following categories of sources:

• Directly or indirectly from you;
• Internet service providers;
• Operating systems and platforms; and
• Our vendors and service providers.

Purposes of Collection, Use, and Disclosure. As described in the How We May Use Personal Information section above, in general, we collect and otherwise process personal information for the following business or commercial purposes, or as otherwise directed or consented to by you:

• Services and support;
• Account creation and management;
• Tag and Search;
• Analytics and improvement;
• Communication;
• Customization and personalization;
• Marketing and advertising;
• Research and surveys;
• Insight development and data enhancement;
• Security and protection of rights;
• Compliance and legal process;
• Auditing, reporting, and other internal operations; and
• General business and operational support.

Sensitive Personal Information. Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive personal information” beyond the purposes authorized by the CCPA.

Retention of Personal Information. We retain your personal information for as long as needed or permitted, based on the reason we obtained it (consistent with applicable law). When deciding how long to keep your personal information, we consider whether we are subject to any legal obligations (e.g., any laws that require us to keep records for a certain period before we can delete them) or whether we have taken any legal positions (e.g., issued any legal holds or otherwise need to preserve the information). Rather than delete your data, we may also deidentify it by removing identifying details. Where we have committed to maintaining and using personal information in a deidentified form, we agree not to reidentify deidentified data except as permitted by applicable law.

Sales and Sharing of Personal Information. The CCPA defines "sale" as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third-party for purposes of cross-contextual behavioral advertising.

While we do not disclose personal information to third parties in exchange for monetary compensation, we may be considered as “selling” or “sharing” personal information under the CCPA because of our use of third-party ad or analytics cookies and other tools. We “sell” or “share” the following categories of personal information: identifiers, and Internet or other electronic network activity information. We disclose these categories to third-party advertising networks, analytics providers, and social networks for purposes of marketing and advertising. We do not sell or share personal information about individuals we know are under the age of 16.

California Privacy Rights. The CCPA provides California residents with specific rights regarding personal information. Subject to certain conditions and exceptions, California residents have the following rights with respect to their personal information:

• Right to Know (Access & Portability). You have the right to request:
• the categories or personal information we collected about you;
• the categories of sources from which the personal information is collected;
• our business or commercial purposes for collecting, selling, or sharing personal information; the categories of third parties to whom we have disclosed personal information; and.
• a copy of the specific pieces of personal information we have collected about you.

• Right to Correct. You have the right to request we correct inaccurate personal information.

• Right to Delete. You have the right to request we delete your personal information.

• Right to Opt-Out of Sales and Sharing. You have the right to opt-out of “sales” and “sharing” of your personal information as those terms are defined under the CCPA. To exercise these rights, please use the (Do Not Sell or Share My Personal Information/Your Privacy Choices) link at the bottom of our website.

You also have the right to opt-out of “sales” and “sharing” of your personal information using an opt-out preference signal. If our site detects that your browser or device is transmitting an opt-out preference signal, such as the “global privacy control”—or GPC— signal, we will opt that browser or device out of the use of cookies or other tools on our site that result in a “sale” or “sharing” of your personal information. If you come to our site from a different device or from a different browser on the same device, or if you clear your cookies, you will need to opt-out again, or use an opt-out preference signal, for that browser and/or device as well.

• Right to Limit Use and Disclosure. We do not engage in uses or disclosures of “sensitive personal information” that would trigger the right to limit use of sensitive personal information under the CCPA.

• Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.

Exercising Your Privacy Rights. If you are a California resident and would like to exercise your CCPA rights, you may do so via any of the methods described below:

• Email us at privacy.officer@synchronoss.com.
• Privacy Web Form

Verification. Before responding to your request, we must first verify your identity using the personal information you recently provided to us. You must provide us with your full name and email address. We will take steps to verify your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.

Authorized Agents. You may designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

This Policy is current as of the effective date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. We will post any updates to this Policy on this page. If we make material changes to how we collect, use, or disclose the personal information we have previously collected, we will endeavor to provide you with prior notice, such as by emailing you or posting prominent notice on our website or within the Services.

If you have any questions or concerns regarding this Policy or our privacy practices, you may contact us at privacy.officer@synchronoss.com