Privacy Policy

Last Revised: November 11th 2020

vcita, Inc. and its subsidiaries and affiliates (including, but not limited to, under the brands Wisestamp or Wisebrand) (collectively, “vcita”) respect the privacy of vcita’s customers (a “Customer” or “Customers”) and the clients of such Customers (a “User” or “Users”) alike. This privacy policy explains vcita privacy practices in connection with the use of its Sites and Services. It also describes the ways vcita collects and uses personal information related to Users and Customers and the rights and options available to Users and Customers with respect to such information.

This privacy policy is incorporated into the Terms of Service between vcita and Customer (the “Agreement”). Capitalized terms not defined herein shall have the meaning ascribed to them in the Agreement.

THIS PRIVACY POLICY ONLY GOVERNS VCITA’S USE OF YOUR PERSONAL INFORMATION. THE USE OF USER’S PERSONAL INFORMATION BY CUSTOMER (OR OTHER THIRD PARTIES) IS NOT CONTROLLED BY VCITA, AND USER SHOULD REVIEW CUSTOMER’S PRIVACY POLICY INDEPENDENTLY. VCITA IS NOT RESPONSIBLE AND WILL BEAR NO LIABILITY TO CUSTOMER’S PRIVACY POLICY OR TO CUSTOMER’S COMPLIANCE WITH IT.

The summary of this policy will give you a quick and clear view of vcita practices. Please take the time to read our full policy.

A Summary of The Policy

The personal information you provide to vcita

vcita receives and stores any information you enter on its Sites or Services or give vcita in any other way. If you register with the Services vcita will need your email address and other contact and personal information. To the extent applicable, such information may be provided by you either directly or by signing up to the Sites and/or Services using your social network account.

Additional payment and transaction related personal information might be required to provide the Services.

vcita also receives and stores personal information from recorded calls you participated in, as further described in the Terms of Service.

What internet traffic does vcita collect?

Certain of the Services and/or Sites enables Users and Customers to contact each other, schedule an appointment, form a contract, pay and receive fees, interact and manage their engagement by using such Services and/or Sites. Such Services are installed on vcita’s servers, and when you use such Services and/or the Sites, the information routed via the Services and/or Sites is accessible to vcita. In addition, vcita collects information, such as session durations, page impressions, Internet protocol (IP) addresses, details from your device and information related to online data or metadata that is routed through vcita’s servers, such as web page addresses, structure, data fields and images.

Further information is collected when you and vcita exchange communications.

Does vcita collect location-based information?

vcita does not actively collect geographical location-based information, except for information regarding the country and city you reside in, and only when accessing certain Services.

However, certain location-based information is stored on vcita’s servers, for example if you use certain Services to access geographic based services.

What does vcita do with your personal information?

vcita uses personal information for the following purposes: to provide and operate the Services and the Sites; to contact you when necessary; to comply with applicable law; to collect fees and debts; to protect you, other Users or Customers and the Sites and Services from misuse and law violations; and to take action in case of dispute or legal proceeding.

Transfer of Data Outside your Territory

If the transfer of your personal information is governed by the GDPR, vcita transfers your personal information to service providers located in the U.S., as necessary to performing the contract with you. 

EU-US Privacy Shield

vcita is self-certified to the EU-US Privacy Shield Framework, in connection with processing personally identifiable information from EU member states. The Federal Trade Commission (FTC) has jurisdiction over vcita’s compliance. To learn more about the Privacy Shield program, and to view vcita’s certification, please visit https://www.privacyshield.gov/. 

Important notice about privacy of persons under the age of 16

The Services and the Sites are not intended for use by persons under the age of 16. If you are not 16 years old or older, then you cannot use any of the Services or the Sites and must not provide any of your personal details.

How does vcita share your personal information with others?

vcita does not sell, rent or lease your personal information to third parties. vcita shares personal information with others, subject to your explicit consent, to operate the Services and Sites using sub-contractors, to contact you, etc.

How does vcita use anonymous, statistical or aggregated information?

vcita may use anonymous, statistical or aggregated information to properly operate and improve the Services or the Sites and for other internal and statistical purposes. vcita will use anonymous, statistical or aggregated information at vcita’s sole discretion, provided, however, that vcita will not knowingly, or intentionally use the information to reveal your identity without your consent.

How does vcita access & use your Google user data?

vcita uses Google OAuth in order to get access to your Google data as part of your registration to certain Services, if you choose to synchronize your Google Calendar or your Google Contacts with the Service or when you use WiseStamp Service with Gmail via Gmail API. 

How can you access your personal information?

If you are a Customer and registered to the Services or Sites you can access your personal account using the designated user interface in the applicable Services or Site. 

Which ‘opt out’ and deletion options are available to you?

At any time you can opt out of vcita’s mailing lists or request to delete your personal information, by sending vcita a request at: vcita.com/contact, or, with respect to Wisestamp Service – support@wisestamp.com. 

How does vcita secure your personal information?

vcita and third parties on its behalf implement information security systems and procedures to secure your personal information. 

Your rights under the GDPR

If vcita processes your personal information when you are in the EU, further terms apply to vcita’s processing in relation to your rights as a data subject under EU data protection laws.

Specific Provisions for California Residents

If you are a California resident, you are entitled to specific privacy rights. 

Cookies and Other Tracking Technologies

vcita uses cookies and similar tracking technologies to make it easier for you to log-in and to facilitate the Sites and Services activities, to analyze performance and marketing activities, and to personalize your experience. 

Job Applications

vcita collects applicants’ personal information solely for vcita’s internal recruitment purposes.

Enforcement

If you have any questions, concerns or complaints regarding this privacy policy please refer them to vcita.com/contact. 

Changes to this Privacy Policy 

vcita will update its policy from time to time after giving proper notice. 

The vcita Privacy Policy

The personal information you provide to vcita

As a Customer, when you register to the Sites and/or Services, you will be asked to provide vcita an active e-mail address and other contact and personal details (or other allowed means of identification), and to select a password. To the extent applicable, any such information may be provided by you either directly (by submitting it yourself) or by signing up to the Sites and/or Services using your social network account (e.g. connecting your Facebook, Instagram, Etsy, Google or Twitter account to our Services) and selecting to grant the Sites and/or Services access to certain data available on such account(s).

vcita can ask you to provide additional payment and transaction related personal information, to the extent required to provide the Services.

If you communicate with vcita, vcita will receive and store personal information from recorded calls you participated in, as further described in the Terms of Service.

As a Customer, you may also need to set-up a profile using certain features of the Services, which will be available on websites other than your own. Some of this data is intended to be publicly available as a way for users to approach the Customer. vcita does not have any obligation under this privacy policy with respect to information which a Customer provides and which is intended to be publicly available.

You may also provide vcita certain details concerning your organization, such as the organization’s billing details, main contact persons, and business needs and preferences. If such information includes personal information related to others, you confirm that you have brought this policy to their attention and received their permission to the upload of their details to the Sites and/or Services and to the use of their details under this policy.

Please bear in mind that false, incorrect, incomplete, or outdated information can prevent you from registering and using the Services and/or Sites or impair vcita’s ability to provide you with the Services and to contact you.

What internet traffic does vcita collect?

Certain of the Services and/or Sites provide a comprehensive solution to Users and Customers, which enables them to contact each other, schedule an appointment, form a contract, pay and receive fees, interact and manage their engagement by using such Services and/or Sites. Such Services are installed on vcita’s servers, and when you use such Services and/or the Sites, the information routed via the Services and/or Sites is accessible to vcita.

When you use the Services and/or the Sites, vcita will collect information, such as session durations, page impressions, Internet protocol (IP) addresses, details from your device, for example, the operating system and browser that you use, and users’ activities on the Services and/or Sites, the domain name that served you to access the Services and/or Sites, and content types and origins.

vcita will also store information related to online data or metadata that is routed through vcita’s servers, such as web page addresses, structure, data fields and images.

The stored data will be attributed to you in person, only to the extent necessary for the use of the Services and/or Sites, as set in the following section. In all other cases, vcita will anonymize the data and will not use the data to personally identify you.

Further information is collected when you and vcita exchange communications, for example, when you submit an inquiry to customer support at vcita.com/contact

Does vcita collect location-based information?

vcita does not actively collect any personal information that is based on your geographical location, except that information regarding the country and city that you reside in will be collected when accessing certain Services.

However, certain location-based information is stored on vcita’s servers, for example if you use certain Services to access geographic based services.

vcita will use such information subject to this privacy policy and will anonymize such data as soon as it is no longer necessary for the performance of the Services by Customer.

What does vcita do with your personal information?

Vcita uses personal information for the following purposes and for as long as it serves such purposes:

  • To provide and operate the Services and the Sites;
  • To send you updates and notices and to provide you with information related to the Services and/or the Sites, provided that vcita will not share your e-mail address or any other personal information with online advertisers and advertising networks, without your explicit consent;
  • To enforce the Agreement;
  • To contact you as and when it is necessary for providing the Services;
  • To comply with any applicable law, respond to lawful requests of personal information by public authorities, and assist law enforcement agencies as required, including to meet national security; in any case where vcita believes that the use of the information is necessary to prevent imminent physical harm or damage to property;
  • To collect fees and debts, and to prevent fraud, misappropriation, infringements, identity thefts and any other misuse of the Services and/or the Sites;
  • To take any action in any case of dispute, or legal proceeding of any kind between you and vcita, or between you and other users or third parties with respect to, or in relation with the Services and/or the Sites.

Transfer of Data Outside your Territory

  • Your personal information will be maintained, processed and stored by vcita, our affiliates, and our service providers in the United States or other jurisdictions.
  • vcita makes sure that its data hosting service providers, or any other third party, provide adequate confidentiality and security commitments.
  • If the transfer of your personal information is governed by the GDPR, vcita transfers your personal information (including, for example, your name, your business name, email address, etc.) to its service providers located in the U.S., as necessary to perform the contract with you.
  • vcita continuously monitors guidelines by the EU regulators relating to the adequacy of the U.S. and the appropriate transfer mechanism. Until such further guidance will be issued., vcita continues to comply with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States.

For any Privacy Shield related complaints that are not resolved within 45 days, you can file a complaint with JAMS, our independent dispute resolution provider, at the following website: https://www.jamsadr.com/file-an-eu-us-privacy-shield-claim. The services of JAMS are provided at no cost to you. The Customers controlling and operating the Services will be considered the controllers of such Users’ Data and are responsible for complying with all laws and regulations which are applicable to the collection and control of such clients’ Data including privacy or data protection laws of all relevant jurisdictions.

Vcita cannot provide legal advice to Customers, but Vcita recommends that all Customers that create and maintain websites using vcita platform or otherwise use the Services should maintain clear and comprehensive privacy policies complying with the applicable laws and regulations. For further information on the EU-U.S. Privacy Shield Framework please see the next section.

EU-US Privacy Shield

vcita is self-certified with the US Department of Commerce – EU-US Privacy Shield Framework, in connection with the collection, use, and retention of personal information from EU member states to the United States. vcita is committed to adhere to the Privacy Shield principles, including notice, choice, accountability for onward transfer, security, data integrity, purpose limitation, access, recourse, enforcement and liability.

For further information about the Privacy Shield program and to view vcita’s certification page, please visit: https://www.privacyshield.gov. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. The Federal Trade Commission (FTC) has jurisdiction over vcita’s compliance with the Privacy Shield.

In compliance with the EU-US Privacy Shield Principles, vcita is committed to resolve complaints about your privacy and its collection or use of personally identifiable information related to you. European Union individuals with inquiries or complaints regarding this privacy policy should first contact vcita’s privacy team at: privacy@vcita.com.

Additionally, if you are an EU data subject, you can invoke binding arbitration in certain cases, as Annex I of the EU-U.S. Privacy Shield Agreement describes. For further information, please visit the Privacy Shield website at: www.privacyshield.gov, or contact vcita’s privacy team.

Important notice about privacy of persons under the age of 16

The Services and the Sites are not intended for use by persons under the age of 16. If you are not 16 years old or older, then you cannot use any of the Services or the Sites and must not provide any of your personal details.

vcita strongly encourages parents to monitor their children’s use of the web. vcita will delete a child’s personal information if a parent so requests by sending an e-mail at vcita.com/contact. If vcita learns that a child under the age of 16 years has provided personal information to vcita without verifiable parental consent, vcita will use commercially reasonable efforts to delete such information from vcita’s databases.

How does vcita share your personal information with others?

vcita does not sell, rent or lease your personal information to third parties. vcita shares personal information with others only in any of the following instances, or otherwise subject to your explicit consent:

  • To operate the Services and Sites, including to store and process your information through a third-party hosting services and processing payments;
  • To contact you. For example, vcita uses a third party’s mailing platform to send you messages and updates from time to time;
  • If vcita believes that you have breached the Agreement or any other agreement with vcita or abused your rights to use the Services or the Sites or performed any act or omission that vcita believes to be violating any applicable law, rules, or regulations. Vcita will share your information with law enforcement agencies, governmental agencies and other competent authorities as well as with other third parties, as may be required;
  • If vcita is required, or believes that it is required by law to share or disclose your information; In any case of dispute, or legal proceeding of any kind between you and vcita, or between you and other users or third parties with respect to, or in relation with the Services or the Sites (including a dispute between User and Customer), vcita can use your information in preparing its legal case in connection with such dispute or proceedings;
  • In any case where vcita believes that sharing information is necessary to prevent imminent physical harm or damage to property;
  • If vcita organizes the operation of the Services or the Sites within a different framework, or through another legal structure or entity, or if vcita is acquired by, or merged with another entity it can share your information with the new entity who will operate the Services or the Sites, provided, however, that those entities agree to be bound by the provisions of this privacy policy, with respective changes taken into consideration;
  • vcita can also share personal information with sub-contractors and other companies or organizations connected, or affiliated with vcita, such as subsidiaries, sister-companies and parent companies;
  • vcita is liable for onward transfers of personal information to third parties. 

How does vcita use anonymous, statistical or aggregated information?

Vcita also uses anonymous, statistical or aggregated information to properly operate the Services or the Services; to improve the quality and functionality of the Services or the Sites; to enhance your experience; to create new services, including customized services; to change or cancel existing content or services, and for other internal and statistical purposes.

Vcita can share, publish, post, disseminate, transmit or otherwise communicate or make available anonymous, statistical or aggregated information to suppliers, business partners, sponsors, affiliates and any other third party, at vcita sole discretion, provided, however, that vcita will not knowingly, or intentionally use the information to reveal your identity without your consent.

How does vcita access & use your Google user data?

vcita uses Google OAuth in order to get access to your Google data as described as follows:

  • As part of your registration to certain Services, you can choose to register using your Google account. As part of this process vcita will create a vcita account using your Google email address, and later on will use it as your system email address.
  • If you choose to synchronize your Google Calendar with a Service, vcita will access your Google calendar and will use it to display your availability on your vcita calendar(s).
  • If you choose to synchronize your Google Contacts with a Service, vcita will import your Google Contacts into vcita’s app and will use it to allow you to contact your clients.
  • In order to use the WiseStamp Service with Gmail via Gmail API, you will be required to link your account with one or more of your e-mail accounts (e.g. Gmail), and permit our Services to automatically update your signature settings with the WiseStamp Service generated content. The specific access and use privileges requested are displayed in the notice which appears during the account linking process. Please read this notice carefully, and make sure that you understand which privileges are granted and what information you make available to vcita by linking your e-mail account(s).
  • You can choose to export your Google data from vcita’s app at any time.

How can you access your personal information?

If you are a Customer and registered to the Services or Sites, then you can access your personal account and edit or amend your personal information at any time using the designated user interface in the applicable Services or Site.

If you find that the information on your personal account is not accurate, complete or updated, then you can make all necessary changes to correct it. Otherwise, both Customers and Users can contact us at vcita.com/contact.

Which ‘opt out’ and deletion options are available to you?

At any time you can opt out of vcita’s mailing lists, by sending vcita a removal request to: vcita.com/contact, or, with respect to Wisestamp Service – support@wisestamp.com. It can take up to ten (10) business days for your opt-out request to take effect.

If you wish to delete your personal information that is stored in vcita’s database, you can send a request to delete information to: vcita.com/contact, or, with respect to Wisestamp Service – support@wisestamp.com. Vcita will inform you whether it can accept your request. vcita will strive to accept requests to delete personal information. Vcita can refuse your request, for example, if vcita believes that removal of certain information can harm other users.

You will bear full responsibility for any damage, costs, fines and expenses resulting from the deletion of data pursuant to your request to exercise the right to deletion, and hold vcita harmless thereof.

In any case, vcita can keep any aggregated or anonymized information for statistical, marketing and other purposes, indefinitely.

It is vcita’s policy to keep Customer personal information on file unless specifically requested to be deleted.

How does vcita secure your personal information?

Vcita and third parties on its behalf implement information security systems and procedures to secure your personal information. While such systems and procedures reduce the risk of security breaches, they do not provide absolute security.

Therefore, vcita cannot guarantee that the Services or the Sites will be immune from any wrongdoings, malfunctions, unlawful interceptions or unauthorized access to the information stored therein and to other information security risks, or that your private communications on or through the Services or the Sites will remain private.

We restrict access to personal information you provided vcita, to our employees, contractors, vendors and agents, who need to know that information, for the purposes described in this privacy policy.

These individuals are obligated to keep your personal information confidential and they can be subject to penalties, termination of relations and criminal prosecution, if they fail to comply with such obligations.

Your rights under the GDPR

If EU data protection laws apply to the processing of your personal information by vcita as a data controller, then the following terms apply:

vcita processes your personal information based on the following lawful grounds:

  • All processing of your personal information which are not based on the lawful grounds indicated below, are based on your consent.
  • vcita processes your personal information to perform the contract with you.
  • vcita will process your personal information to comply with a legal obligation and to protect your and others’ vital interests.
  • vcita will further rely on its legitimate interests, which vcita believes are not overridden by your fundamental rights and freedoms, for the following purposes:
    • Communications with you, including direct marketing where you are a Customer or a User, or where you make contact with vcita’s through the Sites
    • Cyber security
    • Support, customer relations, service operations
    • Enhancements and improvements to yours and other users’ experience with our Services.
    • Fraud detection and misuse of the Service or Sites.

In addition to your rights under other sections in this policy, you have the following rights:

  • AT ANY TIME, CONTACT VCITA IF YOU WANT TO WITHDRAW YOUR CONSENT TO THE PROCESSING OF YOUR PERSONAL INFORMATION. EXERCISING THIS RIGHT WILL NOT AFFECT THE LAWFULNESS OF PROCESSING BASED ON CONSENT BEFORE ITS WITHDRAWAL.
  • Request to delete or restrict access to your personal information. vcita will review your request and use its judgment, pursuant to the provisions of the applicable law, to reach a decision about your request.
  • You may ask to transfer your personal information in accordance with your right to data portability.
  • You may object to the processing of your personal information for direct marketing purposes.
  • You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affecting you.
  • You have a right to lodge a complaint with a data protection supervisory authority of your habitual residence, place of work or of an alleged infringement of the GDPR.

A summary and further details about your rights under EU data protection laws, is available on the EU Commission’s website at: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.

Note that when you send vcita a request to exercise your rights, vcita will need to reasonably authenticate your identity and location. vcita will ask you to provide credentials to make sure that you are who you claim to be and will further ask you questions to understand the nature and scope of your request.

If vcita needs to delete your personal information following your request, it will take some time until vcita completely delete residual copies of your personal information from its active servers and from its backup systems.

If you have any concerns about the way vcita processes your personal information, you are welcome to contact our representative in the European Union at: datenschutz@rickert.net. vcita will look into your inquiry and make good-faith efforts to respond promptly.

If you wish to exercise your rights under the GDPR or have any questions in this matter, please contact us at: privacy@vcita.com.

Please note that under the GDPR vcita also functions as a data processor. As such, vcita is committed to assist vcita’s Customers who functions as data controllers to fulfill data subjects’ rights under the GDPR.

Should you need vcita’s assistance to indicate who is the relevant vcita’s data controller is, please feel free to contact us at: privacy@vcita.com.

To the extent required and upon a written request from vcita’s data controller, vcita will assist the vcita’s data controller to fulfill data subjects’ rights under the GDPR.

Specific Provisions for California Residents

This section applies solely to Customers and Users of our Services who reside in the State of California.

The personal information that we collect

In the preceding twelve (12) months we have collected the following categories of personal information from users:

  • Identifiers and personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as email address and other contact and personal details.
  • Commercial information, such as payment and transaction related personal information.
  • Internet or other similar network activity information.
  • Professional or employment-related information.
  • Inferences drawn from other personal information.

Our Categories of sources from for the personal:

We obtain the categories of personal information listed above from the following categories of sources:

  • Users and Customers of our Services.
  • Services activities.

Our Use and Disclosure Practices

We use the personal information that we collect or receive for the business purposes as described above under the section titled “What does vcita do with your personal information?” of this policy.

We disclose personal information to third parties for business purposes as described above under the section titled “How does vcita share your personal information with others?” in this policy.

In the preceding twelve (12) months we have disclosed the following categories of personal information for business purposes:

  •  
  • Commercial information.
  • Professional or employment-related information.
  • Internet or other similar network activity.
  •  

In the preceding twelve (12) months, we have not sold personal information.

Your Rights as a California Resident

You are entitled to the following specific rights under the California Consumer Privacy Act (‘CCPA’) in relation to your personal information:

Access to Specific Information and Data Portability Rights

You have the right to request that we will disclose certain information to you about our collection and use of your personal information over the past 12 months. After verifying your request, we will disclose to you:

  • The categories of personal information we collected about you;
  • The categories of sources for the personal information we collected about you;
  • Our business or commercial purpose for collecting that personal information;
  • The categories of third parties with whom we share that personal information;
  • The specific pieces of personal information we collected about you;
  • If we disclosed your personal information for a business purpose, we will provide you with a list which will identify the personal information categories that each category of recipient obtained.

Deletion Rights

You have the right to request that we delete any of your personal information. Upon confirmation of your request, we will delete your personal information from our records, unless an exception applies.

Exercising Your Rights

To exercise the access, data portability, and deletion rights described above, please submit your request to us by sending an email at vcita.com/contact.

Only you or a person authorized to act on your behalf, may make a request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

A request for access can be made by you only twice within a 12-months period.

We cannot respond to your request or provide you with the requested personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use the personal information provided in your request to verify your identity or authority to make the request.

We will do our best to respond to your request within 45 days of its receipt. If we require more time (up to additional 45 days), we will inform you of the reason and extension period in writing. We will deliver our written response by email.

Any disclosures that we provide will only cover the 12-month period preceding receipt of your request.

The response we provide will also explain the reasons for our inability to comply with your request, if applicable.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will inform you of the reasons for such decision and provide you with a cost estimate before processing further your request.

Cookies and Other Tracking Technologies

vcita uses cookies and similar tracking technologies to make sure that the Sites and Services are continuously improved and meet your needs, to analyze performance and marketing activities, and to personalize your experience.

Job Applications

vcita collects applicants’ personal information solely for vcita’s internal recruitment purposes including for communication with applicants by phone or in writing, evaluation of applications and hiring process.

Enforcement

vcita is doing its utmost to comply with this privacy policy. If you have any questions, concerns or complaints regarding this privacy policy and the enforcement thereof, please refer them to: support@wisestamp.com.

After receiving your complaint, vcita can contact you to better understand your concerns and will make all efforts to promptly answer your question or resolve your complaint to your full satisfaction.

Changes to this Privacy Policy

Vcita can change and update the terms of this privacy policy from time to time. Changes will take effect seven (7) days after their initial posting on the Sites or within the Services unless vcita amends this privacy policy to comply with legal requirements. In the latter cases the amendments will become effective as required or ordered.