This Privacy Notice for Glise (doing business as Glise) (“we,“ “us,“ or “our“), describes how and why we might access, collect, store, use, and/or share (“process“) your personal data when you use our services (“Services“), including when you:
Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@glise.io.
We collect personal data that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
The personal data that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
We do not process sensitive data.
We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, date of payment, cardholder’s name, country of issue, billing address, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy notice link(s) here:https://stripe.com/privacy.
We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called “HOW DO WE HANDLE YOUR SOCIAL LOGINS?“ below.
If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:
We may request access or permission to certain features from your mobile device, including your mobile device's calendar, camera, contacts, microphone, reminders, and other features. If you wish to change our access or permissions, you may do so in your device's settings.
We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our application(s) you accessed.
We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.
This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
We may request access to and process certain personal and professional data from contractors, including contact details, banking information for payments, tax identification numbers, work history, and any other information necessary to fulfill the terms of the contract. If you wish to update or modify the data we process, you may do so by contacting us or through the provided contractor management portal.
We may request access to and process certain personal information from employees, including contact information, tax identification, bank details for payroll, performance reviews, training history, and other employment-related data. This information is processed to manage employment relationships, compensation, and benefits. If you wish to change or update the information we access, you can do so by contacting Human Resources or through your employee management system.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your Internet Protocol (IP) address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
We also collect information through cookies and similar technologies. There are a number of different types of cookies, however, our website uses the following:
The information we collect includes:
Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps“), and hardware settings).
We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), MAC address, device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.
Our use of data received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
We process your personal data for a variety of reasons, depending on how you interact with our Services, including:
To facilitate account creation and authentication and otherwise manage user accounts. We may process your data so you can create and log in to your account, as well as keep your account in working order.
To deliver and facilitate delivery of services to the user. We may process your data to provide you with the requested service.
To facilitate the negotiation and conclusion of contracts, we may process your personal data for the purpose of initiating, managing, and formalizing agreements between the Parties. This includes the exchange of information necessary to draft, review, amend, and finalize contractual terms, ensuring compliance with applicable laws and regulations.
To respond to user inquiries/offer support to users. We may process your data to respond to your inquiries and solve any potential issues you might have with the requested service.
To send administrative information to you. We may process your data to send you details about our products and services, changes to our terms and policies, and other similar information.
We may process your data when necessary to request feedback and to contact you about your use of our Services.
We may process the personal data you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see “WHAT ARE YOUR PRIVACY RIGHTS?“ below.
We may process your data to develop and display personalized content and advertising tailored to your interests, location, and more.
We may process your data as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
We may process data about how you use our Services to better understand how they are being used so we can improve them.
To determine the effectiveness of our marketing and promotional campaigns. We may process your data to better understand how to provide marketing and promotional campaigns that are most relevant to you.
We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
To comply with legal and regulatory requirements. We may process your data to meet our legal obligations, including responding to government requests, regulatory compliance, and for auditing purposes.
To process payments and handle billing. We may process your data to issue invoices, process payments, and handle any billing-related disputes.
To monitor and manage security incidents. We may process your data to detect, prevent, and respond to any security threats, including unauthorized access, data breaches, and other security-related issues.
To facilitate data backup and recovery operations. We may process your data as part of regular backup and disaster recovery efforts to ensure the integrity and availability of your data.
To personalize your experience. We may process your data to customize your interactions with our Services, including personalizing the content, layout, and functionality based on your preferences and usage history.
To enable third-party service integrations. We may process your data to allow integrations with third-party services or applications that you have requested or opted into using within our platform.
To facilitate data transfers. We may process your data when necessary for cross-border data transfers, ensuring compliance with data protection regulations in different jurisdictions.
To facilitate account closure and data deletion requests. We may process your data when you request the deletion of your account and the associated data as per applicable laws and our data retention policies.
To facilitate the onboarding and management of contractors. We may process your data to engage with independent contractors for the provision of services. This includes handling contracts, work assignments, payments, and compliance with tax and regulatory obligations.
To onboard and manage employees. We may process your data to handle recruitment, employment contracts, background checks, and to set up access to internal systems and resources necessary for performing your duties.
To manage payroll and employee benefits. We may process your data to administer salaries, bonuses, tax withholdings, and to facilitate access to employee benefits like healthcare, insurance, and retirement plans.
To monitor and manage employee performance. We may process your data to assess job performance, facilitate performance reviews, and handle promotions, disciplinary actions, or terminations.
To provide employee training and development programs. We may process your data to track participation in professional development activities, training programs, and certification processes to ensure skills enhancement and career growth.
To comply with employment laws and regulations. We may process your data to ensure adherence to labor laws, occupational health and safety standards, and other legal obligations related to employment and workforce management.
To facilitate internal communication. We may process your data to send important updates, internal newsletters, policy changes, and other HR-related communications necessary for maintaining smooth internal operations.
To manage workplace safety and report incidents. We may process your data to track workplace incidents, ensure safety compliance, and respond to emergencies or safety violations in accordance with applicable laws and company policies.
To manage access to internal systems and infrastructure. We may process your data to grant, monitor, and manage access to company networks, email systems, and other internal IT resources.
To track and evaluate contractor deliverables. We may process your data to assess the performance of contractors, ensure the timely delivery of services, and resolve any disputes or issues that arise during the contract period.
When Glise acts as a Processor of personal data, we process personal data of end-users strictly on behalf of and according to the instructions of our clients (the Controllers). In this role, we do not control the personal data we process; rather, we handle it in accordance with the contracts we have in place with our clients and applicable data protection laws.
As a Processor, we are responsible for the following:
We process personal data only to deliver the services requested by our clients and strictly in accordance with their documented instructions.
The specific purposes for which we process personal data are determined by our clients. We do not use or share end-users’ personal data for our own purposes unless permitted by law or the relevant agreement.
We ensure that all personnel authorized to process personal data are bound by strict confidentiality obligations and handle data in compliance with security standards.
When necessary, we may engage sub-processors to assist in providing our services. In such cases, we ensure that our sub-processors are subject to the same obligations for protecting personal data as outlined in our agreements with clients.
We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, alteration, or destruction, as outlined in our Data Processing Agreement (DPA).
In the event of a data breach affecting personal data processed on behalf of a client, we will promptly notify the client in accordance with the terms of our agreement and assist them in fulfilling any legal obligations related to the breach, including notifying end-users or regulatory authorities where necessary.
We assist our clients in responding to requests from data subjects (end-users) who exercise their rights under applicable data protection laws, such as rights to access, rectify, erase, or restrict the processing of their personal data.
If you are an end-user and wish to understand how your personal data is processed, we encourage you to reach out directly to the client (the Controller) who has engaged our services, as they are responsible for determining how your data is handled.
In all other cases, the provisions of this Privacy Notice apply as they do for ordinary data subjects.
For any queries related to Glise’s role as a Processor, you can contact us using the details provided in the “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?“ section.
We only process your personal data when we believe it is necessary, and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, this section applies to you.The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal data. As such, we may rely on the following legal bases to process your personal data:
We may process your data if you have given us permission (i.e., consent) to use your personal data for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
We may process your personal data when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
We may process your data when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal data for some of the purposes described in order to:
We may process your data where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your data as evidence in litigation in which we are involved.
We may process your data where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
Switzerland is bound by its own federal data protection law, the Swiss Federal Act on Data Protection (FADP). The revised FADP (revFADP) aligns closely with the General Data Protection Regulation (GDPR), and as such, we may rely on the following legal bases to process your personal data:
We may process your data if you have provided clear and explicit consent for a specific purpose. You are free to withdraw your consent at any time, and we will no longer process your data for that specific purpose unless there is another legal basis for doing so.
We may process your personal data to fulfill our contractual obligations with you, including providing the services you have requested or taking steps prior to entering into a contract.
We may process your data when necessary for our legitimate business purposes, provided that such interests are not overridden by your fundamental rights and freedoms. Examples include:
We may process your data where required by Swiss law, such as to comply with tax regulations, cooperate with regulatory authorities, or to present information in legal proceedings.
We may process your data when necessary to protect the vital interests of you or a third party, such as in situations that involve immediate threats to personal safety or emergencies.
Avis pour les résidents du Québec. En accédant à cette section, vous reconnaissez que vous comprenez l'anglais et que cette description vous permet de bien comprendre vos droits.
The Personal Information Protection and Electronic Documents Act (PIPEDA) require us to explain the valid legal bases we rely on in order to process your personal data. We may process your data if you have given us specific permission (i.e., express consent) to use your personal data for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your data without your consent, including, for example:
Brazil’s General Data Protection Law (LGPD) governs how we process your personal data. As such, we may rely on the following legal bases to process your personal data:
We may process your data if you have explicitly provided your consent for a specific purpose. You have the right to withdraw your consent at any time, and we will no longer process your data for that specific purpose. Learn more about withdrawing your consent.
We may process your personal data when necessary to fulfill our contractual obligations to you, including providing our services or taking steps prior to entering into a contract at your request.
We may process your data when it is necessary for purposes related to our legitimate interests, provided that these interests do not infringe upon your fundamental rights and freedoms. For example:
We may process your data when required by Brazilian law, such as for tax purposes, to cooperate with regulatory authorities, or in legal proceedings.
We may process your data, when it is necessary to protect your life or the life of another person, such as in emergency situations that involve risks to personal safety.
We may process your data for the protection of health, in procedures carried out by health professionals or health authorities.
We may process your data when necessary for the regular exercise of rights in judicial, administrative, or arbitration proceedings.
We may share data in specific situations described in this section and/or with the following third parties.
Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents (“third parties“) who perform services for us or on our behalf and require access to such data to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal data. This means that they cannot do anything with your personal data unless we have instructed them to do it. They will also not share your personal data with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.
The third parties we may share personal data with are as follows:
We also may need to share your personal data in the following situations:
We may share or transfer your data in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
We may share your data with our affiliates, in which case we will require those affiliates to honor this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
We may share your data with our business partners to offer you certain products, services, or promotions.
We may share your personal data when required by law, in response to a governmental request, or in compliance with a court order. This includes sharing your data with law enforcement agencies, regulatory bodies, or other authorities when necessary to comply with legal obligations, enforce our rights, or protect our interests or those of others.
When you share personal data (for example, by posting comments, contributions, or other content to the Services) or otherwise interact with public areas of the Services, such personal data may be viewed by all users and may be publicly made available outside the Services in perpetuity. If you interact with other users of our Services and register for our Services through a social network (such as Facebook), your contacts on the social network will see your name, profile photo, and descriptions of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.
We may use cookies and similar tracking technologies (like web beacons and pixels) to gather data when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests, which may appear either on our Services or on other websites.
To the extent these online tracking technologies are deemed to be a “sale“/“sharing“ (which includes targeted advertising, as defined under the applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described below under section “DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?“
Information about how we use such technologies is set out in section “WHAT DATA DO WE COLLECT“.
We may share your data with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Remarketing with Google Analytics, Google Display Network Impressions Reporting and Google Analytics Demographics and Interests Reporting. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.
As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, “AI Products“). These tools are designed to enhance your experience and provide you with innovative solutions. The terms in this Privacy Notice govern your use of the AI Products within our Services.
We provide the AI Products through third-party service providers (“AI Service Providers“), including OpenAI. As outlined in this Privacy Notice, your input, output, and personal data will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in “WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL DATA?“ You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.
Our AI Products are designed for the following functions:
All personal data processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties. This ensures high security and safeguards your personal data throughout the process, giving you peace of mind about your data's safety.
Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or X logins). Where you choose to do this, we will receive certain profile data about you from your social media provider. The profile data we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, and profile picture, as well as other data you choose to make public on such a social media platform.
We will use the data we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal data by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal data, and how you can set your privacy preferences on their sites and apps.
Our servers are located in Germany, Sweden, France and US East North Virginia, Poland. If you are accessing our Services from outside Germany, Sweden, France and US East North Virginia, please be aware that your data may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal data (see “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL DATA?“ above), in and other countries.
If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal data in accordance with this Privacy Notice and applicable law.
We will only keep your personal data for as long as it is necessary for the purposes set out in this Privacy Notice, but no longer than 2 years, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal data for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize such data, or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal data information we process. These measures include, but are not limited to:
We use advanced encryption protocols (such as TLS/SSL) to secure data during transmission and storage.
We enforce strict access controls, ensuring that only authorized personnel with a legitimate business need can access personal data.
We deploy firewalls, intrusion detection systems (IDS), and regular security monitoring to prevent unauthorized access to our networks and systems.
We limit the collection and storage of personal data to what is strictly necessary for the purposes for which it is processed.
Where appropriate, we employ techniques such as anonymization or pseudonymization to reduce the risk of identifying individuals from personal data.
We conduct routine security assessments, penetration testing, and audits to identify potential vulnerabilities and ensure ongoing protection.
We maintain a detailed incident response plan to promptly detect, investigate, and mitigate the impact of any security breach.
We provide regular cybersecurity and data protection training to all staff to ensure they follow best practices for handling and securing personal data.
We require that all employees, contractors, and third-party service providers sign Non-Disclosure Agreements (NDAs) before accessing any personal data.
However, despite these safeguards and efforts to secure your data, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Therefore, we cannot guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security measures and improperly collect, access, steal, or modify your data. While we will do our utmost to protect your personal data, any transmission of personal data to and from our Services is at your own risk. You should only access our Services within a secure environment.
In the unlikely event of a data breach that compromises the security, confidentiality, or integrity of your personal data, we will take the prompt following actions for notifying data protection authority and, if applicable, you.
Notification to the data protection authority: In the event of a data breach, we are required to notify the data protection authority within 72 hours of becoming aware of the breach. The notification will include the following details:
Notification to You: If the data breach poses a high risk to your rights and freedoms, we will notify you without undue delay. The notification will contain:
We do not knowingly collect, solicit, or process personal data from children under 18 years of age, nor do we knowingly sell such personal data. In compliance with the Children’s Online Privacy Protection Act (COPPA) for US residents, we take additional precautions to ensure that personal data from children under the age of 13 is not collected, as COPPA imposes specific requirements for handling children's data.
For users in the European Union (EU) and the United Kingdom (UK), we comply with local regulations which stipulate that individuals under the age of 16 must have parental consent to use our Services. By using the Services, you represent that you are at least 16 years old, or that you are the parent or guardian of a minor dependent aged 16 or younger and consent to their use of the Services.
If we learn that personal data from users under the age of 18 has been collected without proper authorization or parental consent, we will immediately deactivate the account and take reasonable measures to delete such data from our records in accordance with applicable laws. For users in the EU and UK, if we become aware that we have inadvertently collected personal data from children under the age of 16 without parental consent, we will take steps to delete such data as required by GDPR and other relevant regulations.
If you become aware of any personal data we may have collected from children under 18 years of age, or under 13 without parental consent, or under 16 in the EU or UK without parental consent, please contact us immediately at privacy@glise.io, and we will promptly investigate and address the issue.
In some regions (such as the EEA, UK, Switzerland), you have certain rights under applicable data protection laws. These rights include:
You have the right to request access to and obtain a copy of your personal data that we process.
You can request the correction of inaccurate or incomplete personal data.
You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent on which the processing is based.
You have the right to request that we limit the processing of your personal data under certain conditions, such as during the verification of its accuracy or when you have objected to its processing.
If applicable, you may request to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transferred to another data controller.
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that significantly affects you, unless explicitly allowed by law.
To exercise any of these rights or if you have questions about your data protection rights, please contact us using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?“ below.
We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal data, you also have the right to complain to your Member State data protection authority https://www.edpb.europa.eu/about-edpb/about-edpb/members_en#member-no or UK data protection authority https://ico.org.uk/.
If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner https://www.edoeb.admin.ch/edoeb/en/home.html
Withdrawing your consent: If we are relying on your consent to process your personal data, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?“ below or updating your preferences.
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal data conducted in reliance on lawful processing grounds other than consent.
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, replying “STOP“ or “UNSUBSCRIBE“ to the SMS messages that we send, or by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?“ below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.
If you would at any time like to review or change the information in your account or terminate your account, you can:
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.
We are committed to ensuring that individuals can exercise their rights under applicable data protection laws, including the right to access their personal data. If you wish to submit a Data Subject Access Request (DSAR) to obtain information about the personal data we hold about you, or to request its rectification, erasure, or transfer, you may do so by contacting us at the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?“ below.
To ensure the integrity and security of your data, we may require you to verify your identity before responding to your request. In some cases, we may also request additional information to better understand the nature of your request and facilitate our response.
We will acknowledge your DSAR within 30 calendar days and aim to respond to your request within the legally required timeframe. However, if your request is complex or involves a large volume of data, we may extend the response time by an additional 30 calendar days, in accordance with applicable laws. In such cases, we will notify you of the extension and provide reasons for the delay.
Please note that certain requests may be subject to legal exceptions, and we may be unable to fulfill your request in certain circumstances, such as when fulfilling the request would infringe on the rights of others or conflict with legal obligations. In these instances, we will provide a clear explanation of the reasons for our inability to comply with your request.
For more information on how we handle Data Subject Access Requests, or if you have any concerns about the processing of your personal data, you can reach out to us using the contact information provided below.
If you have questions or comments about your privacy rights, you may email us at privacy@glise.io.
In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal data we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal data. You may also have the right to withdraw your consent to our processing of your personal data. These rights may be limited in some circumstances by applicable law. More data is provided below.
We have collected the following categories of personal data in the past twelve (12) months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | Yes |
| B. Personal data as defined in the California Customer Records statute | Name, contact data, education, employment, employment history, and financial data | No |
| C. Protected classification characteristics under state or federal law | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | Yes |
| D. Commercial data | Transaction data, purchase history, financial details, and payment data | No |
| E. Biometric data | Fingerprints and voiceprints | No |
| F. Internet or other similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements | No |
| G. Geolocation data | Device location | Yes |
| H. Audio, electronic, sensory, or similar data | Images and audio, video or call recordings created in connection with our business activities | No |
| I. Professional or employment-related data | Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | Yes |
| J. Education Information | Student records and directory information | No |
| K. Inferences drawn from collected personal data | Inferences drawn from any of the collected personal data listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | No |
| L. Sensitive personal data | No |
We may also collect other personal data outside these categories through instances where you interact with us in person, online, or by phone or mail in the context of:
We will use and retain the collected personal data as needed to provide the Services or for:
Learn more about the sources of personal data we collect in “WHAT DATA DO WE COLLECT?“
Learn about how we use your personal data in the section, “HOW DO WE PROCESS YOUR DATA?“
We may disclose your personal data with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?“
We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be “selling“ of your personal information.
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding twelve (12) months:
The categories of third parties to whom we disclosed personal information for a business or commercial purpose can be found under “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?“
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:
Depending upon the state where you live, you may also have the following rights:
To exercise these rights, you can contact us by emailing us at privacy@glise.io, or by referring to the contact details at the bottom of this document.
Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.
If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at privacy@glise.io. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.
California Civil Code Section 1798.83, also known as the “Shine The Light“ law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?“
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Revised“ date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
If you have questions or comments about this notice, you may contact our Data Protection Specialist by email at privacy@glise.io or contact us by post at:
Glise
Data Protection Specialist
Estonia
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please contact us: privacy@glise.io.