Privacy Notice

GGL Projects, Inc.
700 El Camino Real Suite 120-1312
Menlo Park, CA 94025
privacy@sitejabber.com

Our privacy notice governs our privacy practices when you are using our websites, https://www.sitejabber.com, https://www.sitejabber.com/business, https://biz.sitejabber.com, our software as service called Jabio, our mobile app, and AI technology services, hereinafter and collectively referred to as the website.

Our privacy notice tells you what personal data and non-personal data we collect from you, how we collect them, how we protect them, how we disclose them, how you can access and change them, and how you can limit our disclosure of them. Our privacy notice also explains certain legal rights that you have concerning your personal data. Any capitalized terms not defined herein will have the same meaning as where they are defined elsewhere on our website.

Definitions
The terms “us”, “we”, and “our” refer to the owner of this Website.

‘NONPERSONAL DATA’ (NPD) means any information that is in no way personally identifiable.

‘PERSONAL DATA’ (PD) means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person can be identified directly or indirectly by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. PD is in many ways the same as Personally Identifiable Information (PII). However, PD is broader in scope and covers more data.

‘SENSITIVE PERSONAL DATA’ (SPD) is a consumer’s social security, driver’s license, state identification card, or passport number; a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security, access code, password, or credentials allowing access to an account; a consumer’s exact geolocation; a consumer’s ethnic or racial origin, religious or philosophical beliefs, or union membership; the contents of a consumer’s mail, text messages, and email unless the business is the intended receiver of the communication; a consumer’s genetic data; the processing of biometric data to uniquely identify a consumer; personal information collected and analyzed about a consumer’s health; sex life or sexual orientation. Sensitive personal information that is "publicly available" is considered sensitive personal information or personal information.

Our Compliance with the Data Privacy Network
GGL Projects, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce about the collection, processing, retention, and protection of customer personal data transferred from the European Union, United Kingdom, and/or Switzerland to the United States. Consistent with our commitment to protect customer personal data about individuals in these geographical areas, GGL Projects, Inc. has certified to the Department of Commerce that it adheres to the Data Privacy Framework of Notice, Choice, and Accountability for Onward Transfer, Security, Data Integrity and Purpose of Limitation, Access, Recourse, Enforcement and Liability. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. More information on GGL Projects, Inc.’s participation in the EU-U.S. and Swiss-U.S. and United Kingdom Data Privacy Framework is available at https://www.dataprivacyframework.gov/

Accountability for Onward Transfer
GGL Projects, Inc. is accountable for customer personal data that we receive and subsequently transfer to third parties. If third parties that process customer personal data on our behalf do so in a manner that does not comply with the Data Privacy Framework, we are accountable, unless we prove that we are not responsible for the event giving rise to the damage.

Contact information and customer personal data are accessible only by those GGL Projects, Inc. employees and consultants who have a reasonable need to access such information for us to fulfill contractual, legal and professional obligations. All of our employees and consultants have entered into confidentiality agreements.

Enforcement and Liability
GGL Projects, Inc. is subject to the jurisdiction and enforcement and investigatory authority of the United States Federal Trade Commission. GGL Projects, Inc. also commits to periodically reviewing and verifying the accuracy of this privacy notice and the company’s compliance with the principles, and remedying issues identified. All employees of GGL Projects, Inc. that have access to personally identifiable information covered by this privacy notice in the U.S. are responsible for conducting themselves in accordance with it. The failure of a GGL Projects, Inc. employee to comply with this privacy notice may result in disciplinary action up to and including termination.

Self-assessment Approach
GGL Projects, Inc. complies with the Data Privacy Framework by utilizing the self-assessment approach as specified by the U.S. Department of Commerce. The assessment is conducted on an annual basis to ensure that all of GGL Projects, Inc.’s relevant privacy practices are being followed in conformance with this Data Privacy Framework. Any employee that GGL Projects, Inc. determines violates these policies will be subject to discipline, up to and including termination of employment and/or criminal prosecution.

Dispute Resolution
GGL Projects, Inc. agrees with the EU-U.S., Swiss and United Kingdom Data Privacy Framework by fully investigating and attempting to resolve any complaint or dispute regarding the use and disclosure of customer personal data in violation of this privacy notice. Any questions or concerns regarding the use or disclosure of personal data should first be directed to the owner of this website; or if the question or concern is from our customer, then to GGL Projects, Inc. at the address given at the top of this privacy notice.

[When valid, we will comply with the Data Privacy Network dispute resolution requirements. Otherwise, our choice of law, jurisdiction, and arbitration provisions included in our terms and conditions will apply.]

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, GGL Projects, Inc. commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to ICDR-AAA DPF IRM Service, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://go.adr.org/dpf_irm.html for more information or to file a complaint. The services of ICDR-AAA DPF IRM Service are provided at no cost to you.

GGL Projects, Inc. will cooperate with the United States Federal Trade Commissions and any data protection authorities in the investigation and resolution of complaints that cannot be resolved between GGL Projects, Inc. and the complainant that are brought to a relevant data protection authority.

Contact us using the information at the top of this privacy notice to exercise any of your legal rights contained within this privacy notice. We will respond to your request within 30 days of receiving it. California residents: if you want to opt out of the sale of your personal information, you can do so here: Do Not Sell My Personal Information

When using our website and submitting PD to us, you have certain rights under the Data Privacy Network, privacy laws in the United States including the California Consumer Privacy Act of 2018 (CaCPA), the California Privacy Rights Act of 2020 (CPRA), and privacy laws of other countries including the European Union General Data Protection Regulation of 2016 (the “EU GDPR”), the UK General Data Protection Regulation (UK GDPR / the Data Protection Act 2018), the Data Protection Act 2018, and other global privacy laws. Even if not listed here, we will make reasonable efforts to honor data subject access requests even though we may be under no legal obligation to do so. However, we reserve the right to decline any data subject access request that we are not legally obligated to comply with. Your rights include but are not limited to the following:

• The right to equal service, price, and not being discriminated against even if you exercise your privacy rights.
• The right to one or more means where you can submit requests under this privacy notice including (at minimum) a toll-free telephone number, or if the business maintains an Internet website, a website address email address.
• The right to know whether your PD is sold, shared, or disclosed, and to whom.
• The right to request that we do not sell or share any of your PD.
• The right to request that we disclose the following personal information to you: the categories of personal information we collected about you; the categories of sources from which your personal information is collected; the business or commercial purpose for collecting, selling, or sharing your personal information; the categories of third parties to whom we disclose your personal information; the specific pieces of personal information we have collected about you.
• The right to be informed about the PD that we collect from you and how we process them.
• The right to get confirmation that your PD are being processed and you can access your PD.
• The right to have your PD corrected if they are inaccurate or incomplete.
• The right to request the removal or deletion of your PD if there is no compelling reason for us to continue processing them. However, the right to deletion is not absolute and can be overridden to continue data processing in some cases where we still have a legal ground or overriding legitimate interest to process your data.
• The right to ‘block’ or restrict the processing of your PD. When your PD are restricted, we are permitted to store your PD, but not to process them further.
• The right to request the PD that you provided to us and use them for your own purposes. Upon express request, we will provide your data to you or another service or product provider within 30 days of your request subject to commercial and industrial secrets.
• The right to object to us processing your PD for the following reasons:
  • processing was based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
  • direct marketing and targeted advertising (including profiling);
  • processing for purposes of scientific/historical research and statistics.
• The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects regarding you or similarly significantly affects you.
• The right that we limit the collection of your PD to that which is "adequate, relevant and reasonably necessary with the purposes for which the data is processed.
• The right that we do not process your PD for purposes that are neither reasonably necessary nor compatible with the disclosed purposes for which such personal data is processed, as disclosed to you unless the controller obtains your consent.
• The right to designate an authorized agent to make a request on your behalf. When designating an authorized agent, you must provide a valid power of attorney, the requester’s valid government-issued identification, and the authorized agent’s valid government-issued identification.
• The right to file a complaint with supervisory authorities if your information has not been processed in compliance with your rights under privacy laws.

Generally, you control the amount and type of information that you provide to us when using our website.

Our Legal Basis for Collecting and Processing PD
Our legal basis for collecting and processing your PD when you buy our products, and services, or fill in any of the contact forms on our website is based on the necessity for the performance of a contract or to take steps to enter into a contract. Our legal basis for collecting and processing your PD when you sign up for our newsletter, download free information, and access free audio, videos, and other free business tools through our website is based on consent.

Automatic Information
We automatically receive information from your web browser or mobile device. This information may include the IP address of your computer/the proxy server you use to access the Internet, your Internet service provider’s name, your web browser type, the type of mobile device, your computer operating system, and data about your browsing activity when using our website. We use all this information to help improve our website.

When Entering and Using Our Website
When you enter and use our website and agree to accept cookies, some of these cookies may contain your PD.

Our Use of Cookies
Our website uses cookies. A cookie is a small piece of data or a text file that is downloaded to your computer or mobile device when you access certain websites. Cookies may contain text that can be read by the web server that delivered the cookie to you. The text contained in the cookie generally consists of a sequence of letters and numbers that uniquely identifies your computer or mobile device; it may contain other information as well.

By agreeing to accept our use of cookies you are giving us and the third parties with which we partner permission to place, store, and access some or all the cookies described below on your computer and or mobile device.

• Strictly Necessary Cookies - These cookies are necessary for the proper functioning of the website, such as displaying content, logging in, validating your session, responding to your request for services, and other functions.
• Performance Cookies - These cookies collect information about the use of the website, such as pages visited, traffic sources, users’ interests, content management, and other website measurements.
• Functional Cookies - These cookies enable the website to remember users’ choices, such as their language, usernames, and other choices while using the website.
• Media Cookies - These cookies can be used to improve a website’s performance and provide special features and content. They can be placed by us or third parties who provide services to us.
• Advertising or Targeting Cookies - These cookies are usually placed and used by advertising companies to develop a profile of your browsing interests and serve advertisements on other websites that are related to your interests.
• Session Cookies - These cookies allow websites to link the actions of a user during a browser session. They may be used for remembering what a user puts in their shopping cart as they browse a website. Session cookies also permit users to be recognized as they navigate a website so that any item or page changes they make are remembered from page to page. Session cookies expire after a browser session.
• Persistent Cookies - These cookies are stored on a user’s device between browser sessions, which allows the user’s preferences or actions across a website or across different websites to be remembered. Persistent cookies may be used for remembering users’ choices and preferences when using a website or target advertising to them.
• We may also use cookies for:
  • identifying the areas of our website that you have visited;
  • personalizing the content that you see on our website;
  • our website analytics;
  • remarketing our products or services to you;
  • remembering your preferences, settings, and login details;
  • targeted advertising and serving ads relevant to your interests;
  • allowing you to display content on social networks.

Most web browsers can be set to disable the use of cookies. However, if you disable cookies, you may not be able to access features on our website correctly or at all.

Web Beacons
We may use a technology called web beacons to collect general information about your use of our website and your use of special promotions or newsletters. The information we collect by web beacons allows us to statistically monitor the number of people who open our emails as well as providing us with other information about your interaction with our services.

At User Registration or When Buying Products or Services
When you register as a user or when buying our products or services, we may collect some or all of the following information: your name, email address, and password. You also have the option to upload your photo and provide your gender, age, location, and clothing size information. On the business side, a business registers with its name, email, and password. They also have the option to upload a photo. We also store IP address information whenever our website is accessed.

When Using Sitejabber
When you use Sitejabber, you can set up your personal profile, form relationships, send messages, perform searches and queries, post in forms, and transmit information through various channels. We collect this information so we can provide you with high-quality service and offer personalized features. In most cases, we retain it so that you can return to view prior messages you have sent or to easily see your friends list. Your profile information, as well as your first name, last initial, and photo, are displayed to people in the Sitejabber community to enable you to connect with people on Sitejabber.

Collecting Information About Your Physical Location
When you use our services, we may collect and process information about your actual physical location. We use several technologies such as GPS and IP tracking to determine your location. These technologies may also give us information about nearby cell towers, Wi-Fi access points, and other devices.

Google API
By using our website, you are subject to the Google Privacy Policy and Terms of Service. When collecting and processing user data, including PD from Google APIs, we will follow Google API Services User Data Policy. We also require that our employees, contractors, and agents comply with the Google API Services User Data Policy.

Chat Software, AI Chatbot(s), and or Contact Forms
Our website contains chat software, AI chatbot(s), and contact forms that lets visitors communicate with us and use our new AI technologies, online,offline, and by email. When you use these methods to communicate with us, we collect the following information but not limited to your email address, first name, last name, general physical location, and any other information you willingly choose to give us. You should limit the information you give to us to one that is necessary to answer your questions.

Hotjar.com
We use www.Hotjar.com. Hotjar is a technology service that helps us better understand our users’ experience - how much time they spend on which pages, which links they click on, what they do and don’t like, etc. This enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular the IP addresses of their devices captured and stored only in anonymized form); the screen size, type, unique identifiers of devices; browser information; geographic location (country only); and languages used to display our website. Hotjar stores this information in a pseudonymized user profile.

You can opt-out of Hotjar’s storing of data about your usage of our website, and Hotjar’s use of tracking cookies on other websites by visiting: https://www.hotjar.com/policies/do-not-track/.

Google Analytics
Our website uses Google Analytics to collect information about the use of our website. Google Analytics collects information from users such as age, gender, interests, demographics, how often they visit our website, what pages they visit, and what other websites they have used before coming to our website. We use the information we get from Google Analytics to analyze traffic, improve our marketing, advertising, and website. We do not combine the information collected using Google Analytics with PD. You can prevent Google Analytics from using your information by opting out at this link: https://tools.google.com/dlpage/gaoptout

Analytics
Our website uses analytics services from several companies other than Google to collect information about the use of our website. Analytics collects information such as how often users visit our website, what pages they visit, when they do so, what other websites they used before coming to our website, and their IP addresses. We use the information we get from analytics to improve our services.

Posthog:
We utilize Posthog analytics platform to collect and analyze user behavior data to improve our products and services. This may include tracking user interactions within our products, such as clicks, navigation paths, and feature usage. Additionally, we may record session replay data with Posthog to better understand user interactions and improve user experience. Please note that the data inputs for session replay are anonymized to protect your privacy.

Google Ad and Content Network
Third-party vendors, including Google, use cookies, pixels, and other technologies to serve ads based on a user's past visits to our website. These technologies are also used to track your activities on our website and other websites, including the web pages that you visited, the ads or content that you clicked on, any items you may have purchased, and the search terms you used to deliver tailored advertising to you. Users may opt-out of the use of Google’s cookies for interest-based advertising by visiting http://www.aboutads.info/choices/ For European users visit http://www.youronlinechoices.eu

Disclosing Your PD for Lookalike or Similar Audience Marketing
We may disclose your PD with third parties for similar audience marketing purposes. Similar audience marketing is also called lookalike audience marketing. The third parties we disclose your PD with for this type of marketing include Facebook and/or Google. Using your PD for similar audience marketing or lookalike audience marketing helps us find new audiences (users and customers) based on similar interests to yours. This helps us improve our marketing services. Your PD is only disclosed with Facebook and Google for this type of marketing. By using our website and agreeing to our privacy notice you are giving consent for your PD to be used for the marketing purposes described within this section.

What Happens If You Don’t Give Us Your PD
If you do not provide us with enough PD, we may not be able to provide you with all our products and services. However, you can access and use some parts of our website without giving us your PD.

We use the information we receive from you to:

• provide our products and services you have requested or purchased from us;
• personalize and customize our content;
• make improvements to our website;
• contact you with updates to our website, products, and services;
• resolve problems and disputes;
• contact you with products and services that we believe may be of interest to you.

Video Reviews
Videos submitted on Sitejabber may be published to YouTube using YouTube API Services. When creating and submitting a video, you are subject to the YouTube Terms of Service and Google's Privacy Policy to understand how your personal information is handled and protected regarding their services.

Communications and Emails
When we communicate with you about our website, we will use the email address you provided when you registered as a user or customer. We may also send you emails with promotional information about our website or offers from us or our affiliates unless you have opted out of receiving such information. You can change your contact preferences at any time through your account or by contacting us using the information at the top of this privacy notice.

Disclosing Your Information When You Login Using Social Media Websites
We may disclose your PD with third parties such as Facebook.com, Twitter.com, YouTube.com, Instagram.com, Google.com, and others. If you sign into our services through a third-party social networking service or website, your “friends” list from that service or website might be automatically imported to our services. We do not have any control over the privacy notices and business practices of other third-party services or websites.

If you log into our website using social media websites, you are agreeing to let us use and store your profile information from those websites to make better use of any social media features on our website. Disclosing this information helps us provide you with a better experience when using our website and provides us with information such as visitor traffic. If you use any of the social icons on our website to display our information, you may also be disclosing your personal information through social media websites.

Text Messaging, SMS, Push Notifications, and Telephone Calls
If you provide a mobile telephone number, or landline telephone number to us, you are giving your express consent and authorize us or a third-party to contact you by using any of these communication methods. You are not required to give us your consent to contact you through these communication methods. However, withholding your consent may interfere or prevent us from providing some or all our services to you. You can stop receiving text messages, push notifications, and telephone calls at any time by contacting us or using one of our opt-out methods.

Disclosing Information with Third Parties
We do not sell or rent your PD to third parties for marketing purposes. However, for data aggregation purposes we may use your NPD, which might be sold to other parties at our discretion. Any such data aggregation would not contain any of your PD. At times we may disclose your PD to service providers and or contractors whom we hire to provide services to us. This disclosure of PD could be considered a sale under some privacy laws including the California Privacy Rights Act. These service providers and or contractors may include but are not limited to payment processors, call centers, data management services, help desk providers, accountants, law firms, auditors, shopping cart and email service providers, shipping companies, and event sponsors when you attend an event or webinar arranged by our company or between a group of companies to provide support and other services consistent with our privacy notice.

Legally Required Releases of Information
We may disclose your PD if such disclosure is (a) required by subpoena, law, or other legal processes; (b) necessary to assist law enforcement officials or government enforcement agencies; (c) necessary to protect us from legal action or claims from third parties, including you and or other users; or (d) necessary to protect the legal rights, personal and or real property, or the personal safety of our company, users, employees, and business partners.

Disclosures to Successors
If our business is sold or merges in whole or in part with another business that would become responsible for providing the website to you, we retain the right to transfer your PD to the new business. The new business would retain the right to use your PD according to the terms of this privacy notice as well as to any changes to this privacy notice as instituted by the new business. We also retain the right to transfer your PD if our company files for bankruptcy and some or all of our assets are sold to another individual or company.

Community Discussion Boards, Blogs, or Other Mechanisms
Our website may offer the ability for users to communicate through online community discussion boards, blogs, or other mechanisms. If you choose to post on these discussion mechanisms, you should use care when exposing any PD, as such information is not protected by our privacy notice nor are we liable if you disclose your PD through such postings. Also, PD which you post on our website for publication may be available worldwide on the Internet. We cannot prevent the use or misuse of such information by others.

We will maintain your PD in a structure that identifies you only for as long as it serves the purpose(s) for which it was initially collected as stated in this privacy notice, or for legal, business, or tax purposes. We will attempt to permanently erase or anonymize your PD once it reaches the end of its retention period or if we receive a valid request from you to do so. However, some of your data may still exist within our systems, for example, if it is waiting to be overwritten. This data has been put away from use, meaning, while it still exists on our archive system, it cannot be readily accessed by any of our operating systems, or any of our employees or contractors.

If you make any postings on our website that contain information about third parties, you agree that you have permission to include that information. While we are not legally liable for the actions of our users, we will remove any postings about which we are notified if such postings violate the privacy rights of others.

Some web browsers have settings that enable you to request that we do not track your movement within our website. You can turn off tracking features and other security settings in your browser by referring to your browser’s user manual. If your browser supports it, you can turn on the Global Privacy Control to opt-out of the “sale” of your personal information under California’s CCPA/CPRA and other applicable state privacy laws.

Our website may contain links to other websites. These websites are not under our control and are not subject to our privacy notice. We have no responsibility for these websites, and we provide links to these websites solely for your convenience. You acknowledge that your use of and access to these websites are solely at your risk.

Our website is not designed for use by anyone under the age of 16. We do not knowingly collect PD from children under the age of 16. If you are a parent or guardian and believe that your child is using our website and they are under the age of 16, please contact us. Before we remove any information, we may ask for proof of identification to prevent malicious removal of account information. If we discover that a child under the age of 16 is accessing our website, we will delete their information within a reasonable period of time. You acknowledge that we do not verify the age of our users nor have any liability to do so.

You can always opt-out of receiving email correspondence from us or our affiliates. We will not sell, rent, or trade your email address to any unaffiliated third party without your permission except in the sale or transfer of our company, or if our company files for bankruptcy as described in the section Disclosures to Successors.

We have built our website and services using industry-standard security measures and authentication tools to protect the security of your PD. We and the third parties who provide services to us also maintain technical and physical safeguards to protect your PD. Unfortunately, we cannot guarantee the prevention of loss or misuse of your PD or secure data transmission over the Internet because of its nature. We strongly urge you to protect any password you may have for our website and not disclose it with anyone.

You may have to provide a credit or debit card to buy products and services from our website. We use third-party billing services and have no control over them. We use commercially reasonable efforts to ensure that your credit card number is kept strictly confidential by using only third-party billing services that use industry-standard encryption technology to protect your credit card number from unauthorized use. However, you understand and agree that we are in no way responsible for any misuse of your credit card number.

When transferring data from the European Union, Switzerland, and the United Kingdom to the United States, we comply with and follow the guidelines required by the Data Privacy Framework. In circumstances where the Data Privacy Framework doesn't apply, with limited exceptions, the following provision will apply.

PD that we collect from you may be stored, processed, and transferred among any countries in which we operate. The European Union has not found the United States and some other countries to have an acceptable level of protection of PD under Article 45 of the GDPR. Our company relies on derogations for specific situations as defined in Article 49 of the GDPR. If you are a European Union user, or a user from another country, with your consent your PD may be transferred to the United States or other countries when you request information from us. When you buy goods or services, we will use your PD for the performance of a contract with you. Wherever we transfer, process, or store your PD, we will attempt to apply reasonable safeguards to protect it. We will use the information we collect from you by following the practices described in our privacy notice. Also, we enter into data processing agreements and standard contractual clauses when appropriate. By using our website, you agree to the transfers of your PD described within this section.

We reserve the right to change this privacy notice at any time. If our company decides to change this privacy notice, we will post those changes on our website so that our users and customers are always aware of what information we collect, use, and disclose. If at any time we decide to disclose or use your PD in a method different from that specified at the time it was collected, we will provide advance notice by email sent to the email address on file in your account. Otherwise, we will use and disclose our users’ and customers’ PD in agreement with the privacy notice in effect when the information was collected. In all cases, your continued use of our website, services, and products after any change to this privacy notice will constitute your acceptance of such change. If you have questions about our privacy notice, please contact us through the information at the top of this privacy notice.