Privacy Policy

Welcome to Constructor.io. We know that you care about your information and how we handle it. Constructor.io Corporation (“We”, “Us”) processes personal information differently depending on who you are and your relationship with us. We provide the Constructor.io Service for our Customers to integrate onto their own website or app “Customer Property”.  Capitalized terms that are not defined in this Privacy Policy have the meaning given them in our Terms of Service Agreement available at https://constructor.com/terms-of-service-agreement/. Please select the applicable context below for more information about how we process your personal information.

A. Service Users

Service Users are authenticated administrators of the Service as designated by our Customer. Service Users will integrate the Service onto their Customer Property and will log into the Service.

We act as a Data Processor of your personal information, acting on behalf of our Customer. Please contact the team within your organisation responsible for managing the Service for any questions regarding your personal information.

B. End Users

End Users are visitors to a Customer Property.

When you visit a Customer Property, as a Data Processor we act solely on behalf of our Customer. We will process small pieces of your personal information, such as your IP address and cookie information, all under the specific instruction of that Customer. Please consult the privacy policy of the Customer Property you are visiting if you have any questions regarding our use of your personal information.

C. Constructor Applicants

Constructor Applicants are job applicants to Constructor.io Corporation.

Please consult our separate recruitment privacy policy at https://apply.workable.com/constructor-1/gdpr_policy/.

D. Constructor Contacts

Constructor Contacts are visitors to https://constructor.com and our other non-Service websites (“Site”), and our corporate sales and marketing contacts.
Please read this Privacy Policy carefully to understand how we process your personal information.

1. Information We Collect

Directly from you: If you use certain features on the Site, such as the “Contact Us” feature, you will be required to provide personal information.  Such information could include, for example, your name, email address, company name, job title, or phone number. 

We may send you promotional emails, including when you have requested a demo or other information and resources, and we may send you service related emails related to your account. If you no longer wish to receive these emails, you may opt out of them at any time.

Cookies and Tracking Technologies: Technologies such as cookies, JavaScript, local storage (as defined below), beacons, tags and scripts are used by Constructor.io and our partners, Customers, Affiliates, or analytics, advertising, or service providers. These technologies are used in analyzing trends, administering the site, tracking users’ movements around the site and to gather demographic information about Customers, Visitors, and our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis. Our partners may also use such technologies to deliver advertisements to you. We use cookies to remember users’ settings, as well as for authentication and analytics. For more information about our use of cookies, and how you can control them, see the “Cookies and Advertising” section below.

Log File Information: Log file information is automatically reported by your browser or mobile application each time you access our Service. When you access the Service, our servers automatically record certain information that your web browser sends whenever you visit any website. These server logs may include information such as your web request, Internet Protocol (“IP”) address, browser type, referring / exit pages and URLs, number of clicks, domain names, landing pages, pages viewed, the date and time of your visit, your software and hardware attributes (including device IDs), your general geographic location (e.g., your city, state, or metropolitan region), certain cookie information (see above), and other such information. 

LSOs: We may use Local Storage Objects (LSOs) such as HTML5 to store content information and preferences. “Local storage” is a way for a website to collect and store information “locally” (e.g., on the user’s device rather than on the website’s server) and then later retrieve it again. Local storage includes “localStorage” and “sessionStorage.” By using local storage, a user’s visits can, for example, be stored on their own computer, counted, and then given to us. We may partner with third parties to provide certain features on our Site or to display advertising based upon your browsing activity on our non-Service websites. Various browsers may offer their own management tools for removing HTML5 LSOs.

Web beacons: The Site or the emails that you receive from Constructor.io may use an application known as a “web beacon” (also known as a “clear gif” or “web bug”).  A web beacon is an electronic file that usually consists of a single-pixel image.  It can be embedded in a web page or in an email to transmit information, which could include personal information.  For example, it can allow an email sender to determine whether a user has opened a particular email.  

Third-party online tracking:  We also may partner with certain third parties to collect, analyze, and use some of the personal and other information described in this section.  For example, on our non-Service websites we may allow third parties to set cookies or use web beacons or in email communications from us.  This information may be used for a variety of purposes, including online website analytics. 

SDKs and mobile advertising IDs:  Our Services may include third-party software development kits (“SDKs”) that allow us and our service providers to collect information about your activity. In addition, some mobile devices come with a resettable advertising ID (such as Apple’s IDFA and Google’s Advertising ID) that, like cookies and pixel tags, allow us and our service providers to identify your mobile device over time for advertising purposes.

Social Media Widgets: Our Service may include social media features, such as the Facebook Like button and other widgets or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the Feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Site. Your interactions with these features are governed by the privacy policy of the organization providing it.

2. How We Use Your Information

When we process your personal information, we will only do so for the following reasons:

• Where you have given consent;
• Where processing is necessary for the performance of a contract with you, such as when you use our Service; 
• As necessary to comply with our legal obligations; or
• Our legitimate interests in processing your personal information.

3. How We Share Your Information

Non-Personally Identifiable Information. We may share non-personally identifiable information (such as anonymous usage data, referring/exit pages and URLs, platform types, number of clicks, etc.) with interested third parties to help them understand the usage patterns for certain Constructor.io services and those of our partners. Non-personally identifiable information may be stored indefinitely.

Analytics.  We partner with certain third parties to obtain the automatically collected information discussed above and to engage in analysis, auditing, research, and reporting.  These third parties may use web logs or web beacons, and they may set and access cookies on your computer or other device.  In particular, the Site uses Google Analytics to help collect and analyze certain information for the purposes discussed above. You may opt out of the use of cookies by Google Analytics here.  

Third-party service providers.  We use third-party service providers that perform services on our behalf, including web-hosting companies, mailing vendors, and analytics providers.  These service providers may collect and/or use your information, including information that identifies you personally, to assist us in achieving the purposes discussed above.

We may share your information with other third parties when necessary to fulfil your requests for services; to complete a transaction that you initiate; to meet the terms of any agreement that you have with us or our partners; or to manage our business.

Instances Where We Are Required to Share your Information: Constructor.io will disclose your information where required to do so by law, if subject to subpoena or other legal proceeding, or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) to enforce our Terms of Service Agreement or to protect the security or integrity of our Service; and/or (c) to exercise or protect the rights, property, or personal safety of Constructor.io, our Customers or others.

What Happens in the Event of a Change of Control: We may buy or sell/divest/transfer the company (including any shares in the company), or any combination of its products, services, assets and/or businesses. Your information such as Visitor names and email addresses, and other Customer Content or information related to the Service may be among the items sold or otherwise transferred in these types of transactions. We may also sell, assign or otherwise transfer such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganizations, liquidations, similar transactions or proceedings involving all or a portion of the company. You will be notified via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

Behavioral Targeting / Re-Targeting: We may partner with a third party to manage our advertising on other sites. Such third parties may use technologies such as cookies to gather information about your activities on this site and other sites in order to provide you advertising based upon your browsing activities and interests. For information, please see the “Cookies and Advertising” section below.

Testimonials: We may display personal testimonials of satisfied Customers on our Site in addition to other endorsements. With your consent we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at privacy@constructor.io.

4. Storage and Processing

Your information collected through the Service may be stored and processed in the United States or any other country in which Constructor.io or its subsidiaries, affiliates or service providers maintain facilities. Constructor.io may transfer information that we collect about you, including personal information, to Affiliates, or to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction, and you consent to the transfer of information to the U.S. or any other country in which Constructor.io or its parent, subsidiaries, affiliates or service providers maintain facilities and the use and disclosure of information about you as described in this Privacy Policy. Whenever we share information of EEA, UK, or Swiss users outside the EEA, UK or Switzerland we make sure a valid data transfer mechanism (e.g., appropriate safeguards) are in place, including where appropriate Standard Contractual Clauses.

5. Notification Procedures

It is our policy to provide notifications, whether such notifications are required by law or are for marketing or other business related purposes, to you via email notice, written or hard copy notice, or through conspicuous posting of such notice on the Service, as determined by Constructor.io in its sole discretion. We reserve the right to determine the form and means of providing notifications to you, provided that you may opt out of certain means of notification as described in this Privacy Policy.

6. Data Retention

We will retain and use your personal information as necessary to fulfill the business purposes described above, to comply with our legal obligations, resolve disputes, and enforce our agreements.

7. Cookies and Advertising

Targeted Advertising 

On our non-Service websites we use your personal information to tailor our marketing and advertising efforts. To do this, we provide your information to third party advertising networks (such as Google) and social media companies (such as Facebook). When we provide data to agencies, ad networks, and other parties for targeted advertising, we do not provide them with your name, financial information, or other specific identifiers (such as a government ID or date of birth, if we have collected that). We use online identifiers such as email, cookie addresses, and device identifiers to help us provide targeted advertising to you and others like you. We may also use aggregate information to help advertisers reach the kind of audience they want to target. We may make use of the personal information we have collected from you to enable us to display advertisements to target audiences.

Social Sharing

You may be able to use social sharing features and other integrated tools on the Site such as the Facebook “Like” button. Please remember, though, that use of the information you share on social media sites will be governed by the privacy policies of the social media provider, and we are not responsible for how they treat the information.

Cookies and Trackers

You can customize your cookie preferences for this Site through our Cookie Banner or our Cookie Preference Center by clicking the “Manage Settings” link in the footer of our website.

Your choices will be stored for six months. Strictly necessary cookies cannot be disabled using this tool, nor can the tool be used to block cookies on third party sites linked from this Site. Please consult the Cookie Notice for more information about the type of cookies and tracking technologies that we use on the Site and why.

Some web browsers may allow you to enable Do Not Track or Global Privacy Control settings that send signals to websites to halt some tracking technologies. This Site is configured to honor these signals.

8. Children’s Privacy

Protecting the privacy of young children is especially important. For that reason, Constructor.io does not knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, please do not send any information about yourself to us, including your name, address, telephone number, or email address. No one under age 16 is allowed to access or use the Site or to provide any personal information to Constructor.io. In the event that we learn that we have collected personal information from a child under age 16, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 16, please contact us at privacy@constructor.io.

9. Your Privacy Rights

You may withdraw your consent to process your personal information at any time. If you do so, you may be unable to use some of the Sites. You may “opt out” of receiving marketing or promotional communications from us by following the instructions in those communications. If you opt out, we may still send you non-promotional service emails, such as essential communications about your account or our ongoing business relations.

You can contact us directly at privacy@constructor.io or at https://constructor.io/about/contact-us/ to exercise your privacy rights.

Individuals in the US

Some states grant you certain rights and control over your information. Those rights may include:

• Information about You: You may ask for us to state what categories of personal information about you we have, and the categories of sources from which we collect your personal information.
• Correct Your Information: You may log into your account, if you have one with any of our Sites, to correct the information stored in your profile. You may also contact us to help you correct your information.
• Receive a Copy of Your Data: You may request the categories and specific pieces of information (if any) we have about you, the categories of personal information that we have disclosed about you for a business purpose, and the categories of third parties with which we have shared personal information.
• Delete Your Data: You may request that we delete the personal information we have collected from you.
• Profiling: You may opt out of our ability to create a profile of you for marketing or advertising purposes. Where you have created an account with us or where we have created a customer profile based on your transactional history with us, we may be limited in how we can manage your data and you may be asked if you wish to delete your data instead.
• Do Not Sell: You may opt out of our sale(s) of your personal information, as “sale” is defined by data privacy laws. Please see above for more information.
• Non-Discrimination: State law may prohibit discrimination against you for exercising your privacy rights.
• Do Not Share for Targeted Advertising: You may opt out of targeted advertising. For more information on how to do so, please see below.

Opting out of the sale or sharing of your personal information. We do not sell your personal information for money. However, we partner with a variety of companies, including ad networks, to improve the Site and to share personal information used to market services to you by these third parties. These transfers can be deemed a sale under some data privacy laws.

You may opt out of the sale of your personal information or the sharing to a third party for targeted advertising by clicking on the “Do Not Sell or Share My Personal Information” link on our Site or contacting us using the methods above.

Verification Process and Required Information. All requests must be verified. In certain circumstances, we may decline a request to exercise the right to know and/or right to deletion, particularly where we are unable to verify your identity. If we cannot verify your identity based on the information provided, a request for a copy of your data will be treated as a request for information and if we cannot verify your identity, a request to delete personal information may be treated as a request to opt-out of the sale of personal information.

If you wish to appeal a decision regarding your rights, please contact us at privacy@constructor.io.

Authorized Agent. You may designate an authorized agent to make a request on your behalf. An Authorized Agent must have written documentation of their authority to act on your behalf, such as a Power of Attorney.

Individuals in Europe

If you are in the EEA, UK or Switzerland, you have the following rights:

• Access. you have the right to request a copy of the personal data we are processing about you. For your own privacy and security, at our discretion we may require you to prove your identity before providing the requested information.
• Rectification. you have the right to have incomplete or inaccurate personal data that we process about you rectified.
• Deletion. you have the right to request that we delete personal data that we process about you, except we are not obliged to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
• Restriction. you have the right to restrict our processing of your personal data where you believe such data to be inaccurate; our processing is unlawful; or that we no longer need to process such data for a particular purpose unless we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it.
• Portability. you have the right to obtain personal data we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal data which you have provided to us, and (b) if we are processing that data on the basis of your consent or to perform a contract with you.
• Objection. Where the legal justification for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defense of a legal claim.
• Withdrawing Consent. If you have consented to our processing of your personal data, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out from marketing messages that you receive from us.
• Lodging a Complaint. If you believe that we have not complied with applicable data protection laws you have the right to lodge a complaint with the local data protection authority. The EU Commission provides a list of supervisory authorities here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm. The UK Information Commissioner’s Office can be contacted at https://ico.org.uk/global/contact-us/. 

Data Privacy Framework (DPF)

Constructor complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Constructor has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.  Constructor has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Constructor commits to resolve DPF Principles-related complaints about our collection and use of your personal information.  EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Constructor at: privacy@constructor.io.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Constructor commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. Individuals have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. See Annex I of the DPF Principles for additional information: https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2.

Constructor has responsibility for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf.  Constructor shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless Constructor proves that it is not responsible for the event giving rise to the damage.

The Federal Trade Commission has jurisdiction over Constructor’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). Constructor may disclose personal information in response to lawful requests by US public authorities, including to meet national security or law enforcement requirements.

10. Security

We use a variety of administrative, physical, and technology solutions, including engaging with qualified cybersecurity companies, to protect your information from unauthorized access, loss, or misuse. Because there is always some risk in transmitting information over the internet and otherwise processing information, we cannot and do not guarantee or warrant the security of any information that you transmit on or through the Sites or that we otherwise maintain.

11. Links to Other Websites

We are not responsible for the practices employed by websites or services linked to or from the Site, including the information or content contained therein. If you use these links, you will leave the Site. Please remember that when you use a link to go from the Site to another website, our Privacy Policy does not apply to third-party websites or services. Your browsing and interaction on any third-party website or service, including those that have a link or advertisement on our Site, are subject to that third party’s own rules and policies. We have not reviewed these third-party sites and do not control and are not responsible for any of these sites, their content, or their privacy policy. Thus, we do not endorse or make any representations about them, or any information, software, or other products or materials found there, or any results that may be obtained from using them. If you decide to access any of the third-party sites listed on our website, you do so at your own risk.   

12. Updates/Changes to Our Privacy Policy

Any updates we may make to our Privacy Policy will be posted on this page, and we may also provide a website notice of any material changes for a reasonable period of time. Please check back frequently to see any updates or changes to our Privacy Policy. If you do not agree or consent to these updates or changes, do not continue to use the Site.

This Privacy Policy was last updated July 6, 2023.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@constructor.io.