Privacy Policy

Last revised September 11, 2020.

We appreciate that you use or consider using Atayoo. This privacy policy describes what information, Atayoo collects, uses, discloses, and what choices you have with respect to the information. When we refer to Atayoo ("We", "Us", or "Our"), in this policy, we are refering to Our directors, contractors, and employees, the Atayoo website at atayoo.com (the "Website"), and the Atayoo's browser extensions and servers (collectively refering to the "Service").
Please read this Privacy policy carefully before accessing or using Atayoo. It takes about 20min to read these terms. We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or Our practices with regards to your personal information, please contact us at legal@atayoo.com.

If there are any terms in this privacy policy that you do not agree with, please discontinue use of the Website and the Service immediately.

This privacy notice applies to all information collected through the Website and the Service, as well as any related services, sales, marketing or events.

What Information Do We Collect

Information You Provide To Us

We collect information that you voluntarily provide to Us when you create an account, use the Website or the Service, express an interest in obtaining information about Us or Our products, when you participate in activities on the Website or otherwise when you contact Us. The information that We collect depends on the context of your interactions with Us and the Website or the Service, the choices you make and the products and features you use.

The personal information We collect may include the following:

• Personal Information. When you log in with your GitHub account to create an account on the Service, We collect a very few information you give Us access to via the GitHub OAuth consent screen such as your user ID and primary email address.
• Non-personal information. When you use the Website or the Service, you transmit to Us certain information that does not identify you and cannot otherwise be reasonably linked to you, such as templates, IDs and names of GitHub repositories, users and organizations added to workspaces, domains, profile settings associated with the use of the Service.
• Payment information. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment information is stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.

Information Automatically Collected

We automatically collect certain information when you use the Website and the Service. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, country, and other similar information. This information is primarily needed to maintain the security and operation of the Website and the Service, and for Our internal product analytics.

Like many businesses, We also collect information through cookies and similar technologies.
The information We collect includes:

• Log Data. As with most websites and technology services delivered over the Internet, Our servers automatically collect information when you access or use the Website or the Service and record it in log files. Depending on how you interact with Us, this log data may include your IP address, device information, browser type and settings and information about your activity (such as the date/time stamps associated with your usage, pages and files viewed, searches and other actions you take such as which features you use).
• Usage Data. When using the Service, We collect on a daily basis metadata regarding your usage such as:
  • The number of times you opened the quick switcher (search modal).
  • The number of times you copied the URL of a result.
  • The number of times you searched in a specific view.
  • The number of times you used a specific suggestion.
  • The number of times you opened a specific type of result.
  • The number of times you opened a recently visited result.
  • The number of times you opened a result without searching.
  • The number of times you searched in a specific context (either globally, in a user or an organization, or in a repository).
• Device Data. We collect device data such as information about your computer, phone, tablet or other device you use to access the Website and the Service. Depending on the device used, this device data may include information such as your IP address (or proxy server), device application identification numbers, location, browser type, hardware model Internet service provider and/or mobile carrier, operating system configuration information.

How Do We Use Your Information

We do not sell, trade, or rent your information to others.

We use the information We collect or receive:

• To facilitate the creation of your account, identify you as a user and provide you the Website and the Service.
• To understand how you use the Website and the Service and to improve them.
• To send you emails such as security or support and maintenance advisories.
• To process payments and other billing matters. We may contact you by email regarding these matters.
• To investigate and help prevent security issues, possible fraud or attempts to harm the Website and the Service.
• To enforce Our Terms of Use.

How Do We Share Your Information

We may process or share your data that We hold based on the following legal basis:

• Consent: We may process your data if you have given Us specific consent to use your personal information in a specific purpose.
• Legitimate Interests: We may process your data when it is reasonably necessary to achieve Our legitimate business interests.
• Performance of a Contract: Where We have entered into a contract with you, We may process your personal information to fulfill the terms of Our contract.
• Legal Obligations: We may disclose your information where We are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
• Vital Interests: We may disclose your information where We believe it is necessary to investigate, prevent, or take action regarding potential violations of Our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which We are involved.

Who Will Your Information Be Shared With

We only share information with the following third parties:

• Google Cloud Platform for Cloud Computing services
• Stripe for billing services
• Sentry for error reporting
• Amplitude and Google Analytics for product analytics

How You Can Access And Control The Information We Collect

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account to update your settings, export your data, or terminate your account. Once you terminated your account, We will keep your data from 30 days before deleting all your data from Our databases and third-party services We use. However, We may retain some information in Our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce Our Terms of Use and/or comply with applicable legal requirements.

Our Use Of Cookies And Tracking

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how We use such technologies and how you can refuse certain cookies are available when you use the Website and the Service.

Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information We process. However, despite Our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat Our security, and improperly collect, access, steal, or modify your information. Although We will do Our best to protect your personal information, transmission of personal information to and from the Website and the Service is at your own risk. You should only access the Website and the Service within a secure environment.

About GitHub Access Tokens And Usage. We do not store any GitHub personal access token allowing to access your GitHub private data. Access tokens used to search in your organizations and repositories are stored in the storage of your browser, and encrypted if the browser allows it.

Transfers of Personal Data

Our servers are located in United States. If you are accessing the Website or the Service from outside United States, please be aware that your information may be transferred to, stored, and processed by Us in Our facilities and by those third parties with whom We may share your personal information (see "Who Will Your Information Be Shared With " above), in United States, and other countries. If you are a resident in the European Economic Area, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. We will however take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

In some regions (like the European Economic Area), you have certain rights under applicable data protection laws. These may include the right:

• to request access and obtain a copy of your personal information
• to request rectification or erasure
• to restrict the processing of your personal information
• to data portability

In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please email Us at legal@atayoo.com. We will consider and act upon any request in accordance with applicable data protection laws. If We are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you are resident in the European Economic Area and you believe We are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here.

If you are resident in Switzerland, the contact details for the data protection authorities are available here. If you have questions or comments about your privacy rights, you may email Us at legal@atayoo.com.

Your Data Protection Rights under the California Consumer Privacy Protection Act (CCPA)

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits Our users who are California residents to request and obtain from Us, once a year and free of charge, information about categories of personal information (if any) We disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which We shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to Us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with the Website and the Service, you have the right to request removal of unwanted data that you publicly post on the Website and the Service. To request removal of such data, please contact Us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California.

Your other privacy rights:

• The right to be informed and know whether We collect and use your personal information and the purposes.
• The right to Non-Discrimination for the Exercise of a Consumer's Privacy Rights. We will not discriminate against you if you exercise your privacy rights
• The right to object to the processing of your personal data.
• The right to request correction of your personal data if it is incorrect or no longer relevant. You can also update your personal information by logging in your account and update it under the "Account" section.
• The right to designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
• The right to request to opt-out from future selling of your personal information to third parties. We do not sell, trade, or rent your information to others.

Upon receiving your request, We will need to verify your identity to determine you are the same person about whom We have the information in Our system. These verification efforts require Us to ask you to provide information so that We can match it with the information you have previously provided Us. For instance, depending on the type of request you submit, We may ask you to provide certain information so that We can match the information you provide with the information We already have on file, or We may contact you through a communication method (e.g. email) that you have previously provided to Us. We may also use other verification methods as the circumstances dictate.

Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, We do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that We must follow in the future, We will inform you about that practice in a revised version of this privacy notice.

Age Limitations

We do not intentionally gather personal information from visitors who are under the age of 16. If a child under 16 submits personal information to the Website or the Service and We learn that the personal information is the information of a child under 16, We will delete the information as soon as possible. If you believe that We might have any personal information from a child under 16, please contact Us at: legal@atayoo.com.

Changes To This Privacy Policy

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If We make material changes to this privacy notice, We may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how We are protecting your information.

Contact

If you have questions or comments about this privay policy, please contact us at:

Occupant
PO Box 426571
San Francisco, CA 94142
contact@atayoo.com