Recruit Shopify merchants and professionals for user research

AppStoreResearch ("we", "us", "our", or "AppStoreResearch") respects the privacy of every individual whose Personal Data (as defined below) we handle. Please read this Privacy Policy to understand how we may collect Personal Data from you through our website, https://www.appstoreresearch.com, as well as all associated sites linked to https://www.appstoreresearch.com by AppStoreResearch, its subsidiaries, and affiliated companies (the "Site").

By using, visiting, or accessing the Site, or by providing Personal Data to us on or through the Site, you consent to the practices described in this Privacy Policy.

This Privacy Policy does not govern privacy practices associated with offline activities, websites other than ours, or practices of third parties that we do not own or control, such as our partners, third party service providers featured on the Site or in the Services or advertisers

AppStoreResearch ("we", "us", "our", or "AppStoreResearch") respects the privacy of every individual whose Personal Data (as defined below) we handle. Please read this Privacy Policy to understand how we may collect Personal Data from you through our website, https://www.appstoreresearch.com, as well as all associated sites linked to https://www.appstoreresearch.com by AppStoreResearch, its subsidiaries, and affiliated companies (the "Site").

By using, visiting, or accessing the Site, or by providing Personal Data to us on or through the Site, you consent to the practices described in this Privacy Policy.

This Privacy Policy does not govern privacy practices associated with offline activities, websites other than ours, or practices of third parties that we do not own or control, such as our partners, third party service providers featured on the Site or in the Services or advertisers

AppStoreResearch ("we", "us", "our", or "AppStoreResearch") respects the privacy of every individual whose Personal Data (as defined below) we handle. Please read this Privacy Policy to understand how we may collect Personal Data from you through our website, https://www.appstoreresearch.com, as well as all associated sites linked to https://www.appstoreresearch.com by AppStoreResearch, its subsidiaries, and affiliated companies (the "Site").

By using, visiting, or accessing the Site, or by providing Personal Data to us on or through the Site, you consent to the practices described in this Privacy Policy.

This Privacy Policy does not govern privacy practices associated with offline activities, websites other than ours, or practices of third parties that we do not own or control, such as our partners, third party service providers featured on the Site or in the Services or advertisers

1. Interpretation and Definitions

For the purposes of this Privacy Policy, these terms have the following meanings:

Account means the unique account created for you to access our Services or parts of our Services.
Data Controller for the purposes of the General Data Protection Regulation (the "GDPR"), we are the Data Controller of your Personal Data, meaning that we determine the purposes and means by which your Personal Data are, or are to be processed.
Data Subject means any identified or identifiable natural person who is the subject of Personal Data.
Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
Personal Data means any information, which on its own or combined with other information, relates to and identifies, whether directly or indirectly, a living individual.
Services refers to the Site and related technology offered by AppStoreResearch.

Terms capitalized but not defined in this Privacy Policy shall have the meaning ascribed to them in our Terms and Conditions for Researcher and Participant.

1. Interpretation and Definitions

For the purposes of this Privacy Policy, these terms have the following meanings:

Account means the unique account created for you to access our Services or parts of our Services.
Data Controller for the purposes of the General Data Protection Regulation (the "GDPR"), we are the Data Controller of your Personal Data, meaning that we determine the purposes and means by which your Personal Data are, or are to be processed.
Data Subject means any identified or identifiable natural person who is the subject of Personal Data.
Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
Personal Data means any information, which on its own or combined with other information, relates to and identifies, whether directly or indirectly, a living individual.
Services refers to the Site and related technology offered by AppStoreResearch.

Terms capitalized but not defined in this Privacy Policy shall have the meaning ascribed to them in our Terms and Conditions for Researcher and Participant.

1. Interpretation and Definitions

For the purposes of this Privacy Policy, these terms have the following meanings:

Account means the unique account created for you to access our Services or parts of our Services.
Data Controller for the purposes of the General Data Protection Regulation (the "GDPR"), we are the Data Controller of your Personal Data, meaning that we determine the purposes and means by which your Personal Data are, or are to be processed.
Data Subject means any identified or identifiable natural person who is the subject of Personal Data.
Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
Personal Data means any information, which on its own or combined with other information, relates to and identifies, whether directly or indirectly, a living individual.
Services refers to the Site and related technology offered by AppStoreResearch.

Terms capitalized but not defined in this Privacy Policy shall have the meaning ascribed to them in our Terms and Conditions for Researcher and Participant.

2. Collection of Personal Data

We will only collect Personal Data that is necessary for and directly related to the provision of our Services. There are two types of data that we collect:

(i)Information You Provide to Us

We ask for and collect information, including Personal Data, about you when you use our Services. This information may include, but is not limited to:

Business contact information such as your name, job title, organization, address phone number, and country;
Marketing information such as your contact preferences; and
Account log-in credentials such as your e-mail address or username and password.
Information that forms the nature of our services: web-applications you use, issues you’re seeking to resolve, your sphere of expertise, etc.
We collect Personal Information through your LinkedIn or Facebook account when you register with such account on our Site. This includes information on your professional background and experience.

We may supplement or correct the Personal Information you submit to us with information in our other databases or information from third-party sources in order to reduce errors in our database, authenticate our users, prevent fraud and prevent abuse of our Site, as well as to provide more consistent, relevant experiences to our users.

(ii)Information We Collect Automatically

When you use our Services, we may automatically collect or receive certain information about your usage of our Services (collectively the "Usage Data"). In some countries, including countries in the European Economic Area (the "EEA"), such information is considered Personal Data under applicable data protection laws. This includes:

Device Information: We may collect certain information about the device you use, your unique device ID, the IP address of your mobile device, your operating system, the type of Internet browser you use, unique device identifiers and other diagnostic data.
Log Data: Our servers keep log files that record general data and information each time a Data Subject or automated system calls up our Site. This includes, but is not limited to, the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our Site (so-called referrers), the sub-websites, the date and time (so-called timestamp) associated with usage, the originating IP address, the internet service provider (ISP) of the accessing system, and any other similar data and information that may be used in the event of attacks on our information technology systems.

2. Collection of Personal Data

We will only collect Personal Data that is necessary for and directly related to the provision of our Services. There are two types of data that we collect:

(i)Information You Provide to Us

We ask for and collect information, including Personal Data, about you when you use our Services. This information may include, but is not limited to:

Business contact information such as your name, job title, organization, address phone number, and country;
Marketing information such as your contact preferences; and
Account log-in credentials such as your e-mail address or username and password.
Information that forms the nature of our services: web-applications you use, issues you’re seeking to resolve, your sphere of expertise, etc.
We collect Personal Information through your LinkedIn or Facebook account when you register with such account on our Site. This includes information on your professional background and experience.

We may supplement or correct the Personal Information you submit to us with information in our other databases or information from third-party sources in order to reduce errors in our database, authenticate our users, prevent fraud and prevent abuse of our Site, as well as to provide more consistent, relevant experiences to our users.

(ii)Information We Collect Automatically

When you use our Services, we may automatically collect or receive certain information about your usage of our Services (collectively the "Usage Data"). In some countries, including countries in the European Economic Area (the "EEA"), such information is considered Personal Data under applicable data protection laws. This includes:

Device Information: We may collect certain information about the device you use, your unique device ID, the IP address of your mobile device, your operating system, the type of Internet browser you use, unique device identifiers and other diagnostic data.
Log Data: Our servers keep log files that record general data and information each time a Data Subject or automated system calls up our Site. This includes, but is not limited to, the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our Site (so-called referrers), the sub-websites, the date and time (so-called timestamp) associated with usage, the originating IP address, the internet service provider (ISP) of the accessing system, and any other similar data and information that may be used in the event of attacks on our information technology systems.

2. Collection of Personal Data

We will only collect Personal Data that is necessary for and directly related to the provision of our Services. There are two types of data that we collect:

(i)Information You Provide to Us

We ask for and collect information, including Personal Data, about you when you use our Services. This information may include, but is not limited to:

Business contact information such as your name, job title, organization, address phone number, and country;
Marketing information such as your contact preferences; and
Account log-in credentials such as your e-mail address or username and password.
Information that forms the nature of our services: web-applications you use, issues you’re seeking to resolve, your sphere of expertise, etc.
We collect Personal Information through your LinkedIn or Facebook account when you register with such account on our Site. This includes information on your professional background and experience.

We may supplement or correct the Personal Information you submit to us with information in our other databases or information from third-party sources in order to reduce errors in our database, authenticate our users, prevent fraud and prevent abuse of our Site, as well as to provide more consistent, relevant experiences to our users.

(ii)Information We Collect Automatically

When you use our Services, we may automatically collect or receive certain information about your usage of our Services (collectively the "Usage Data"). In some countries, including countries in the European Economic Area (the "EEA"), such information is considered Personal Data under applicable data protection laws. This includes:

Device Information: We may collect certain information about the device you use, your unique device ID, the IP address of your mobile device, your operating system, the type of Internet browser you use, unique device identifiers and other diagnostic data.
Log Data: Our servers keep log files that record general data and information each time a Data Subject or automated system calls up our Site. This includes, but is not limited to, the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our Site (so-called referrers), the sub-websites, the date and time (so-called timestamp) associated with usage, the originating IP address, the internet service provider (ISP) of the accessing system, and any other similar data and information that may be used in the event of attacks on our information technology systems.

3. Sensitive or Special Categories of Personal Data

Different rules apply to the processing of Personal Data concerning race, ethnic origin, political opinions or beliefs, religious or other beliefs, trade union memberships, physical or mental health, sexual life or orientation and any offences committed. We do not require, collect, or process such sensitive or special categories of Personal Data.

3. Sensitive or Special Categories of Personal Data

Different rules apply to the processing of Personal Data concerning race, ethnic origin, political opinions or beliefs, religious or other beliefs, trade union memberships, physical or mental health, sexual life or orientation and any offences committed. We do not require, collect, or process such sensitive or special categories of Personal Data.

3. Sensitive or Special Categories of Personal Data

Different rules apply to the processing of Personal Data concerning race, ethnic origin, political opinions or beliefs, religious or other beliefs, trade union memberships, physical or mental health, sexual life or orientation and any offences committed. We do not require, collect, or process such sensitive or special categories of Personal Data.

4. Use of Personal Data

Except as provided herein, we collect and use your personal and non-personal information for internal purposes only or for gathering aggregate and anonymized data. We may use your information in the following ways:

(i)To Provide, Improve and Develop our Services

To provide the Services, including sharing your personal data with our Users (legal basis: the processing is necessary for the performance of the contract between you and us). Our matching algorithm matches Researchers with suitable Participants based on the personal information we process from these Users.
To conduct routine business operations such as billing, identification, authentication, contact purposes and general research. As part of our routine business operations, we may transfer your Personal Information to certain third parties with whom we contract for the limited purpose of providing services such as web hosting, email, and credit card processing. These service providers qualify as processors within the meaning of the CCPA and the EU General Data Protection Regulation (GDPR) and are obligated to protect your information, and they do not use your Personal Information for their own commercial purposes. We have entered into written processor agreements with these services providers (legal basis: the processing is necessary for (i) the performance of the contract between you and us; and (ii) the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To employ internal marketing techniques such as tracking User preferences to provide a customized Site experience and communicating with you about Services, special offers, and other services. This includes the use of Google Analytics (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To enhance the Services, including by providing proof to other Users that you have certain competencies, for example based on your LinkedIn profile (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To gather generic product, location and other contributed information to make reports based on aggregate anonymized data, which we may use internally or which we may sell to others. This processing is necessary for the purposes of our legitimate interests, which we have balanced against your interests and rights and freedoms. You are free to opt-out of these third-party disclosures, and we will honor all requests for opt-outs received at hello@appstoreresearch.com to the extent that we can still differentiate and remove your personal information. Information that has been depersonalized and aggregated to the point where it is no longer attributable to you may not be removable from our disclosures to third parties.
To use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
To comply with court and governmental orders (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests, rights and freedoms).
To Provide a Safe Website for Users and to Safeguard our Services and your Personal Data. This enables us to detect and prevent fraud, spam, abuse, security incidents, and other harmful activities; to verify or authenticate information or identifications provided by you; to comply with and fulfill our legal obligations to users; to stop unauthorized access to our Services and the distribution of malicious virus, malware, or software program on our Site; and to provide law enforcement authorities with the information necessary for criminal prosecution in case of cyber-attacks.
We may also ask your separate consent for additional ways to process your personal data, for example to provide you with advertisements, offers, and other promotional content, or when we want to process your location data (legal basis: your consent).

4. Use of Personal Data

Except as provided herein, we collect and use your personal and non-personal information for internal purposes only or for gathering aggregate and anonymized data. We may use your information in the following ways:

(i)To Provide, Improve and Develop our Services

To provide the Services, including sharing your personal data with our Users (legal basis: the processing is necessary for the performance of the contract between you and us). Our matching algorithm matches Researchers with suitable Participants based on the personal information we process from these Users.
To conduct routine business operations such as billing, identification, authentication, contact purposes and general research. As part of our routine business operations, we may transfer your Personal Information to certain third parties with whom we contract for the limited purpose of providing services such as web hosting, email, and credit card processing. These service providers qualify as processors within the meaning of the CCPA and the EU General Data Protection Regulation (GDPR) and are obligated to protect your information, and they do not use your Personal Information for their own commercial purposes. We have entered into written processor agreements with these services providers (legal basis: the processing is necessary for (i) the performance of the contract between you and us; and (ii) the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To employ internal marketing techniques such as tracking User preferences to provide a customized Site experience and communicating with you about Services, special offers, and other services. This includes the use of Google Analytics (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To enhance the Services, including by providing proof to other Users that you have certain competencies, for example based on your LinkedIn profile (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To gather generic product, location and other contributed information to make reports based on aggregate anonymized data, which we may use internally or which we may sell to others. This processing is necessary for the purposes of our legitimate interests, which we have balanced against your interests and rights and freedoms. You are free to opt-out of these third-party disclosures, and we will honor all requests for opt-outs received at hello@appstoreresearch.com to the extent that we can still differentiate and remove your personal information. Information that has been depersonalized and aggregated to the point where it is no longer attributable to you may not be removable from our disclosures to third parties.
To use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
To comply with court and governmental orders (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests, rights and freedoms).
To Provide a Safe Website for Users and to Safeguard our Services and your Personal Data. This enables us to detect and prevent fraud, spam, abuse, security incidents, and other harmful activities; to verify or authenticate information or identifications provided by you; to comply with and fulfill our legal obligations to users; to stop unauthorized access to our Services and the distribution of malicious virus, malware, or software program on our Site; and to provide law enforcement authorities with the information necessary for criminal prosecution in case of cyber-attacks.
We may also ask your separate consent for additional ways to process your personal data, for example to provide you with advertisements, offers, and other promotional content, or when we want to process your location data (legal basis: your consent).

4. Use of Personal Data

Except as provided herein, we collect and use your personal and non-personal information for internal purposes only or for gathering aggregate and anonymized data. We may use your information in the following ways:

(i)To Provide, Improve and Develop our Services

To provide the Services, including sharing your personal data with our Users (legal basis: the processing is necessary for the performance of the contract between you and us). Our matching algorithm matches Researchers with suitable Participants based on the personal information we process from these Users.
To conduct routine business operations such as billing, identification, authentication, contact purposes and general research. As part of our routine business operations, we may transfer your Personal Information to certain third parties with whom we contract for the limited purpose of providing services such as web hosting, email, and credit card processing. These service providers qualify as processors within the meaning of the CCPA and the EU General Data Protection Regulation (GDPR) and are obligated to protect your information, and they do not use your Personal Information for their own commercial purposes. We have entered into written processor agreements with these services providers (legal basis: the processing is necessary for (i) the performance of the contract between you and us; and (ii) the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To employ internal marketing techniques such as tracking User preferences to provide a customized Site experience and communicating with you about Services, special offers, and other services. This includes the use of Google Analytics (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To enhance the Services, including by providing proof to other Users that you have certain competencies, for example based on your LinkedIn profile (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests and rights and freedoms).
To gather generic product, location and other contributed information to make reports based on aggregate anonymized data, which we may use internally or which we may sell to others. This processing is necessary for the purposes of our legitimate interests, which we have balanced against your interests and rights and freedoms. You are free to opt-out of these third-party disclosures, and we will honor all requests for opt-outs received at hello@appstoreresearch.com to the extent that we can still differentiate and remove your personal information. Information that has been depersonalized and aggregated to the point where it is no longer attributable to you may not be removable from our disclosures to third parties.
To use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
To comply with court and governmental orders (legal basis: the processing is necessary for the purposes of our legitimate interests, balanced against your interests, rights and freedoms).
To Provide a Safe Website for Users and to Safeguard our Services and your Personal Data. This enables us to detect and prevent fraud, spam, abuse, security incidents, and other harmful activities; to verify or authenticate information or identifications provided by you; to comply with and fulfill our legal obligations to users; to stop unauthorized access to our Services and the distribution of malicious virus, malware, or software program on our Site; and to provide law enforcement authorities with the information necessary for criminal prosecution in case of cyber-attacks.
We may also ask your separate consent for additional ways to process your personal data, for example to provide you with advertisements, offers, and other promotional content, or when we want to process your location data (legal basis: your consent).

5. Sharing of Personal Data

We may share your Personal Data in the following situations:

(i)Third Party Service Providers

We may share your Personal Data with third party service providers to monitor and analyze your use of our Site, to advertise on third party websites to you after you have visited our Site, to facilitate payment processing, and/or to contact you. These third-party service providers have access to your Personal Data only to carry out their specified task, and they are obligated not to disclose or use your Personal Data for any other purpose.

(a)Analytics

Google Analytics: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Site. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Site available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy
Facebook: On this Site, the Data Controller has integrated components of the enterprise Facebook. The data protection guideline published by Facebook (their Privacy Policy can be viewed at https://www.facebook.com/policy.php) provides information about the collection, processing and use of Personal Data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the Data Subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook, should the Data Subject opt to eliminate a data transmission to Facebook.

(b)Email Marketing

We may use third party e-mail marketing service providers to manage and send emails to you containing newsletters, marketing, promotional materials and other information that may be of interest to you.

You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us by following the instructions in Section 18 of this Privacy Policy.

(с)Payment Processors

We provide paid Services on our Site and use third-party services for payment processing ("Payment Processors"). We will not store your payment card details as that information is provided directly to our Payment Processors whose use of your Personal Data is governed by their Privacy Policy. These Payment Processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The Payment Processors that we work with are:

Stripe: Their Privacy Policy can be viewed at https://stripe.com/us/privacy

PayPal: Their Privacy Policy can be viewed athttps://www.paypal.com/webapps/mpp/ua/privacy-full

(d)Behavioral Remarketing

We use third-party remarketing services to advertise our Services on third party websites after you visit our Site. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Site. These third-party vendors include:

Google Ads (AdWords): Google Ads (AdWords) remarketing service is provided by Google Inc. You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: https://www.google.com/settings/ads and for more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Facebook: Facebook remarketing service is provided by Facebook Inc. You can learn more about interest-based advertising from Facebook by visitinghttps://www.facebook.com/help/164968693837950. To opt-out from Facebook's interest-based ads, follow these instructions from Facebook: https://www.facebook.com/help/568137493302217, and for more information on the privacy practices of Facebook, please visit Facebook's Data Policy:https://www.facebook.com/privacy/explanation.

(ii)Affiliates

We may share your Personal Data with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates may include our parent company and any other subsidiaries, joint venture partners or companies that we control or are under common control with us.

(iii)Business Partners

We may share your Personal Data with our business partners to offer you certain products, services or promotions.

(iv)Third Parties Permitted By Law

Under certain circumstances, we may also share your Personal Data where disclosure is legally permissible and necessary, and this includes, but is not limited to (i) preventing, investigating, or taking action against illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our agreements, or as otherwise required by law; and (ii) defending our legal rights, responding to lawful court orders, subpoenas, warrants, or other requests by public authorities (including to meet national security or law enforcement requirements).

(v)Business Transfers

We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of our assets, financing, or acquisition of all or a portion of our business to another company. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

5. Sharing of Personal Data

We may share your Personal Data in the following situations:

(i)Third Party Service Providers

We may share your Personal Data with third party service providers to monitor and analyze your use of our Site, to advertise on third party websites to you after you have visited our Site, to facilitate payment processing, and/or to contact you. These third-party service providers have access to your Personal Data only to carry out their specified task, and they are obligated not to disclose or use your Personal Data for any other purpose.

(a)Analytics

Google Analytics: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Site. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Site available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy
Facebook: On this Site, the Data Controller has integrated components of the enterprise Facebook. The data protection guideline published by Facebook (their Privacy Policy can be viewed at https://www.facebook.com/policy.php) provides information about the collection, processing and use of Personal Data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the Data Subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook, should the Data Subject opt to eliminate a data transmission to Facebook.

(b)Email Marketing

We may use third party e-mail marketing service providers to manage and send emails to you containing newsletters, marketing, promotional materials and other information that may be of interest to you.

You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us by following the instructions in Section 18 of this Privacy Policy.

(с)Payment Processors

We provide paid Services on our Site and use third-party services for payment processing ("Payment Processors"). We will not store your payment card details as that information is provided directly to our Payment Processors whose use of your Personal Data is governed by their Privacy Policy. These Payment Processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The Payment Processors that we work with are:

Stripe: Their Privacy Policy can be viewed at https://stripe.com/us/privacy

PayPal: Their Privacy Policy can be viewed athttps://www.paypal.com/webapps/mpp/ua/privacy-full

(d)Behavioral Remarketing

We use third-party remarketing services to advertise our Services on third party websites after you visit our Site. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Site. These third-party vendors include:

Google Ads (AdWords): Google Ads (AdWords) remarketing service is provided by Google Inc. You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: https://www.google.com/settings/ads and for more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Facebook: Facebook remarketing service is provided by Facebook Inc. You can learn more about interest-based advertising from Facebook by visitinghttps://www.facebook.com/help/164968693837950. To opt-out from Facebook's interest-based ads, follow these instructions from Facebook: https://www.facebook.com/help/568137493302217, and for more information on the privacy practices of Facebook, please visit Facebook's Data Policy:https://www.facebook.com/privacy/explanation.

(ii)Affiliates

We may share your Personal Data with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates may include our parent company and any other subsidiaries, joint venture partners or companies that we control or are under common control with us.

(iii)Business Partners

We may share your Personal Data with our business partners to offer you certain products, services or promotions.

(iv)Third Parties Permitted By Law

Under certain circumstances, we may also share your Personal Data where disclosure is legally permissible and necessary, and this includes, but is not limited to (i) preventing, investigating, or taking action against illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our agreements, or as otherwise required by law; and (ii) defending our legal rights, responding to lawful court orders, subpoenas, warrants, or other requests by public authorities (including to meet national security or law enforcement requirements).

(v)Business Transfers

We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of our assets, financing, or acquisition of all or a portion of our business to another company. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

5. Sharing of Personal Data

We may share your Personal Data in the following situations:

(i)Third Party Service Providers

We may share your Personal Data with third party service providers to monitor and analyze your use of our Site, to advertise on third party websites to you after you have visited our Site, to facilitate payment processing, and/or to contact you. These third-party service providers have access to your Personal Data only to carry out their specified task, and they are obligated not to disclose or use your Personal Data for any other purpose.

(a)Analytics

Google Analytics: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Site. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Site available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy
Facebook: On this Site, the Data Controller has integrated components of the enterprise Facebook. The data protection guideline published by Facebook (their Privacy Policy can be viewed at https://www.facebook.com/policy.php) provides information about the collection, processing and use of Personal Data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the Data Subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook, should the Data Subject opt to eliminate a data transmission to Facebook.

(b)Email Marketing

We may use third party e-mail marketing service providers to manage and send emails to you containing newsletters, marketing, promotional materials and other information that may be of interest to you.

You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us by following the instructions in Section 18 of this Privacy Policy.

(с)Payment Processors

We provide paid Services on our Site and use third-party services for payment processing ("Payment Processors"). We will not store your payment card details as that information is provided directly to our Payment Processors whose use of your Personal Data is governed by their Privacy Policy. These Payment Processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The Payment Processors that we work with are:

Stripe: Their Privacy Policy can be viewed at https://stripe.com/us/privacy

PayPal: Their Privacy Policy can be viewed athttps://www.paypal.com/webapps/mpp/ua/privacy-full

(d)Behavioral Remarketing

We use third-party remarketing services to advertise our Services on third party websites after you visit our Site. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Site. These third-party vendors include:

Google Ads (AdWords): Google Ads (AdWords) remarketing service is provided by Google Inc. You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: https://www.google.com/settings/ads and for more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Facebook: Facebook remarketing service is provided by Facebook Inc. You can learn more about interest-based advertising from Facebook by visitinghttps://www.facebook.com/help/164968693837950. To opt-out from Facebook's interest-based ads, follow these instructions from Facebook: https://www.facebook.com/help/568137493302217, and for more information on the privacy practices of Facebook, please visit Facebook's Data Policy:https://www.facebook.com/privacy/explanation.

(ii)Affiliates

We may share your Personal Data with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates may include our parent company and any other subsidiaries, joint venture partners or companies that we control or are under common control with us.

(iii)Business Partners

We may share your Personal Data with our business partners to offer you certain products, services or promotions.

(iv)Third Parties Permitted By Law

Under certain circumstances, we may also share your Personal Data where disclosure is legally permissible and necessary, and this includes, but is not limited to (i) preventing, investigating, or taking action against illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our agreements, or as otherwise required by law; and (ii) defending our legal rights, responding to lawful court orders, subpoenas, warrants, or other requests by public authorities (including to meet national security or law enforcement requirements).

(v)Business Transfers

We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of our assets, financing, or acquisition of all or a portion of our business to another company. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

6. Disclosure to Third Parties

We will not disclose your Personal Information with third parties without your consent, except in the limited circumstances described below:

We may share your Personal Information with our third party service providers for the limited purposes described in the section entitled "How Your Information is Used."
We will share your Personal Information with our customers to ensure (i) you receive suitable requests for Research Projects and (ii) our Users reach the right target audience.
We will share your Personal Information when required by law, regulation, or litigation and as necessary for purposes of national security, law enforcement, or other issues of public importance.
If we sell assets or are acquired by or merged with another entity, we may provide such entity customer information without obtaining your further consent. We may provide notice of such asset sales, acquisitions, or mergers on the Site.

6. Disclosure to Third Parties

We will not disclose your Personal Information with third parties without your consent, except in the limited circumstances described below:

We may share your Personal Information with our third party service providers for the limited purposes described in the section entitled "How Your Information is Used."
We will share your Personal Information with our customers to ensure (i) you receive suitable requests for Research Projects and (ii) our Users reach the right target audience.
We will share your Personal Information when required by law, regulation, or litigation and as necessary for purposes of national security, law enforcement, or other issues of public importance.
If we sell assets or are acquired by or merged with another entity, we may provide such entity customer information without obtaining your further consent. We may provide notice of such asset sales, acquisitions, or mergers on the Site.

6. Disclosure to Third Parties

We will not disclose your Personal Information with third parties without your consent, except in the limited circumstances described below:

We may share your Personal Information with our third party service providers for the limited purposes described in the section entitled "How Your Information is Used."
We will share your Personal Information with our customers to ensure (i) you receive suitable requests for Research Projects and (ii) our Users reach the right target audience.
We will share your Personal Information when required by law, regulation, or litigation and as necessary for purposes of national security, law enforcement, or other issues of public importance.
If we sell assets or are acquired by or merged with another entity, we may provide such entity customer information without obtaining your further consent. We may provide notice of such asset sales, acquisitions, or mergers on the Site.

7. International Transfers

Your information, including Personal Data, is processed at our operating offices and in any other places where the parties involved in the processing are located. This means that your Personal Data may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. Regardless of where the Personal Data is transferred to, when we transfer your Personal Data to other countries, we will impose the same data protection safeguards as described in this Privacy Policy to offer an adequate level of data protection.

7. International Transfers

Your information, including Personal Data, is processed at our operating offices and in any other places where the parties involved in the processing are located. This means that your Personal Data may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. Regardless of where the Personal Data is transferred to, when we transfer your Personal Data to other countries, we will impose the same data protection safeguards as described in this Privacy Policy to offer an adequate level of data protection.

7. International Transfers

Your information, including Personal Data, is processed at our operating offices and in any other places where the parties involved in the processing are located. This means that your Personal Data may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. Regardless of where the Personal Data is transferred to, when we transfer your Personal Data to other countries, we will impose the same data protection safeguards as described in this Privacy Policy to offer an adequate level of data protection.

8. Storage and Retention of Personal Data

All Personal Data collected is subject to our strict data security policies. We will only retain your Personal Data for as long as is necessary for the purposes set out in this Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. In particular, we will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Site, or we are legally obligated to retain this data for longer periods. If your Personal Data is used for two or more purposes, we will retain it until the purpose with the longer period expires, but we will stop using it for the purpose with the shorter period once that shorter period expires.

8. Storage and Retention of Personal Data

All Personal Data collected is subject to our strict data security policies. We will only retain your Personal Data for as long as is necessary for the purposes set out in this Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. In particular, we will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Site, or we are legally obligated to retain this data for longer periods. If your Personal Data is used for two or more purposes, we will retain it until the purpose with the longer period expires, but we will stop using it for the purpose with the shorter period once that shorter period expires.

8. Storage and Retention of Personal Data

All Personal Data collected is subject to our strict data security policies. We will only retain your Personal Data for as long as is necessary for the purposes set out in this Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. In particular, we will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Site, or we are legally obligated to retain this data for longer periods. If your Personal Data is used for two or more purposes, we will retain it until the purpose with the longer period expires, but we will stop using it for the purpose with the shorter period once that shorter period expires.

9. Security of Personal Data

We are continuously implementing and updating appropriate technical and administrative measures to help protect your Personal Data against unauthorized access, loss, misuse, destruction, or alteration. At AppStoreResearch, only authorized persons are provided access to the Personal Data we collect from you, and such individuals have agreed and are obliged to keep such information confidential.

However, while we strive to protect your Personal Data, we cannot guarantee its absolute security as there is no method of transmission over the Internet, or method of electronic storage is 100% secure. Therefore, if you know or have reason to believe that your Personal Data, such as Account information, has been lost, stolen, misappropriated, otherwise compromised, or in any actual or suspected unauthorized use, please contact us by following the instructions in Section 18 of this Privacy Policy. We will assess the likely impact of the incident and take the necessary actions to bring the incident under control. Where necessary, we will also report to the appropriate authority, notify you of the incident and provide relevant information.

9. Security of Personal Data

We are continuously implementing and updating appropriate technical and administrative measures to help protect your Personal Data against unauthorized access, loss, misuse, destruction, or alteration. At AppStoreResearch, only authorized persons are provided access to the Personal Data we collect from you, and such individuals have agreed and are obliged to keep such information confidential.

However, while we strive to protect your Personal Data, we cannot guarantee its absolute security as there is no method of transmission over the Internet, or method of electronic storage is 100% secure. Therefore, if you know or have reason to believe that your Personal Data, such as Account information, has been lost, stolen, misappropriated, otherwise compromised, or in any actual or suspected unauthorized use, please contact us by following the instructions in Section 18 of this Privacy Policy. We will assess the likely impact of the incident and take the necessary actions to bring the incident under control. Where necessary, we will also report to the appropriate authority, notify you of the incident and provide relevant information.

9. Security of Personal Data

We are continuously implementing and updating appropriate technical and administrative measures to help protect your Personal Data against unauthorized access, loss, misuse, destruction, or alteration. At AppStoreResearch, only authorized persons are provided access to the Personal Data we collect from you, and such individuals have agreed and are obliged to keep such information confidential.

However, while we strive to protect your Personal Data, we cannot guarantee its absolute security as there is no method of transmission over the Internet, or method of electronic storage is 100% secure. Therefore, if you know or have reason to believe that your Personal Data, such as Account information, has been lost, stolen, misappropriated, otherwise compromised, or in any actual or suspected unauthorized use, please contact us by following the instructions in Section 18 of this Privacy Policy. We will assess the likely impact of the incident and take the necessary actions to bring the incident under control. Where necessary, we will also report to the appropriate authority, notify you of the incident and provide relevant information.

10. Privacy Obligations under the GDPR

Under the GDPR, our use of your Personal Data must be justified under one of several legal grounds. The principal legal grounds that justify our use of your Personal Data is as follows:

Consent: You have given us your consent for processing your Personal Data for one or more specific purposes.
Contract Performance: The use of your Personal Data may be necessary to enter or perform our contract with you, our terms and conditions, and/or other policies under which we provide our Services.
Legal Obligations: The use of your Personal Data is necessary for us to comply with our legal obligations.
Vital interests: The use of your Personal Data is necessary in order to protect your vital interests or of another natural person.
Public interests: The use of your Personal Data is

related to a task that is carried out in the public interest or in the exercise of an official authority vested in us.

Legitimate Interests: The use of your Personal Data is necessary to achieve a legitimate interest. In such circumstances it is for us to ensure that these interests are not overridden by your data protection interests or fundamental rights and freedoms
In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement.

10. Privacy Obligations under the GDPR

Under the GDPR, our use of your Personal Data must be justified under one of several legal grounds. The principal legal grounds that justify our use of your Personal Data is as follows:

Consent: You have given us your consent for processing your Personal Data for one or more specific purposes.
Contract Performance: The use of your Personal Data may be necessary to enter or perform our contract with you, our terms and conditions, and/or other policies under which we provide our Services.
Legal Obligations: The use of your Personal Data is necessary for us to comply with our legal obligations.
Vital interests: The use of your Personal Data is necessary in order to protect your vital interests or of another natural person.
Public interests: The use of your Personal Data is

related to a task that is carried out in the public interest or in the exercise of an official authority vested in us.

Legitimate Interests: The use of your Personal Data is necessary to achieve a legitimate interest. In such circumstances it is for us to ensure that these interests are not overridden by your data protection interests or fundamental rights and freedoms
In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement.

10. Privacy Obligations under the GDPR

Under the GDPR, our use of your Personal Data must be justified under one of several legal grounds. The principal legal grounds that justify our use of your Personal Data is as follows:

Consent: You have given us your consent for processing your Personal Data for one or more specific purposes.
Contract Performance: The use of your Personal Data may be necessary to enter or perform our contract with you, our terms and conditions, and/or other policies under which we provide our Services.
Legal Obligations: The use of your Personal Data is necessary for us to comply with our legal obligations.
Vital interests: The use of your Personal Data is necessary in order to protect your vital interests or of another natural person.
Public interests: The use of your Personal Data is

related to a task that is carried out in the public interest or in the exercise of an official authority vested in us.

Legitimate Interests: The use of your Personal Data is necessary to achieve a legitimate interest. In such circumstances it is for us to ensure that these interests are not overridden by your data protection interests or fundamental rights and freedoms
In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement.

11. Access and Correction of Personal Data

You have the following rights under this Privacy Policy, and by law, if you are within the EEA, to:

Access. You have the right to access, update or delete Personal Data that we are processing about you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your Account settings. If you are unable to perform these actions yourself, please contact us to assist you.

Correction. You have the right to rectify or correct any incomplete or inaccurate Personal Data that we hold about you.

Right to Object: You have the right to object to our processing of your Personal Data where we are relying on a legitimate interest as the legal basis for processing your Personal Data or if we are processing your Personal Data to send you direct marketing materials.

Restriction: You have the right to restrict us from processing your Personal Data if you think the Personal Data is inaccurate (until or unless such Personal Data is corrected or confirmed to be correct), if the processing is unlawful, or if it is no longer necessary for us to process the Personal Data, subject to any legal or other obligation that we have that overrides your rights herein;

Deletion: You have the right to request that we delete Personal Data that we do not have a legal basis to hold.

Data Portability: You have the right to obtain Personal Data we hold about you, in a structured, electronic format, and to transmit such data to another data controller, provided that it is Personal Data that you provided to us and the processing is carried out by automated means or is based on your consent or for contract performance.

Withdraw Consent: You have the right to withdraw your consent to us using and processing your Personal Data. However, if you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of the Site.

Please note that we may ask you to verify your identity before responding to such requests, and we reserve the right to charge a reasonable fee for processing any data access or correction request.

If you are in the EEA, you also have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EEA.