Mobile Application Privacy Policy

Invision Power Services, Inc., doing business as Invision Community (“Invision Community”, “we”, “us”, or “our”) has created the Invision Community Mobile Application (“Application”) to allow you to engage with your favorite communities powered by the Invision Community platform. We are committed to protecting your personal information and your right to privacy.

In this document, we describe our Application privacy policy. We seek to transparently explain what information is collected, how we use it and what rights you have in relation to it. If there are any terms in this privacy policy that you do not accept, you must discontinue use of our Application and relevant services.

This privacy policy applies to all information collected through our mobile application, and/or any related services (we refer to them collectively in this privacy policy as the "Services").

In addition to this privacy policy, each target community that you interact with may also have their own established privacy policy that further governs your use of the Services. Please take the time to review such privacy policies as Personally Identifiable Information (PII) such as display names, email addresses and passwords are submitted directly to the target community.

What information do we collect?

The personal information that we collect depends on the context of your usage. Security credentials, display names, email addresses and other similar contact data are not collected, processed or stored directly by us; such data is submitted directly to, processed and retained by each individual community you choose to visit.

We may collect certain information when you visit, use or navigate the Application. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics including, operating system, language preferences, country and other technical information. This information is primarily needed to maintain the security and operation of our Application, and for our own internal development analytics and error reporting purposes.

Like most companies, we may also collect information through cookies and similar technologies that are required to provide service.

Information collected through the Application

Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device’s camera, photo roll, calendar, and other features. If you wish to change our access or permissions, you may do so in your device’s settings.

Mobile Device Data. We may automatically collect device information (such as your mobile device identifier, model and manufacturer), operating system, version information and IP address.

Push Notifications. You may choose to receive push notifications through the Application to receive updates from your favorite communities. These requests are processed by a third party provider as outlined in the next section. To opt-out of push notifications for an individual community, you may login to the specific community and turn them off in your account settings. To opt-out of all push notifications in the application, you may revoke push notification permissions in your device’s settings.

How do we use your information?

Except as otherwise noted in this document, we do not collect personal information that is used exclusively for the Application. Certain community-specific features may be enabled by the community owner, such as spam mitigation. Please review the community’s privacy policy to determine applicability. Our corporate privacy policy may be reviewed at any time by visiting https://invisioncommunity.com/legal/privacy.

Will your information be shared with anyone?

Any information that we may collect may be processed or shared based on the following legal basis:

Consent

We may process your data if you have given us specific consent to use your personal information for a specific purpose.

Legitimate Interests

We may process your data when it is reasonably necessary to achieve our legitimate business interests.

Performance of a Contract

Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.

Legal Obligations

We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

Vital Interests

We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process your data or share your personal information in the following situations:

Vendors, Consultants and Other Third-Party Service Providers.

We may share your data with third party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to perform the relevant service. Such examples are listed below as well as their purpose and a link to their respective privacy policies:

• expo.io - We utilize this provider to provide and process push notifications. Information shared includes your device identifier and the content being provided by the specific community. Privacy policy: https://expo.io/privacy
• sentry.io - We utilize this provider to provide in-application crash and error reporting. Information shared includes your device identifier, IP address and metadata such as browser, device manufacturer, model, etc. Unless described in this policy, we do not share, sell, rent or trade any of your information with third parties for their promotional purposes. Privacy policy: https://sentry.io/privacy/

Unless described in this policy, we do not share, sell, rent or trade any of your information with third parties for their promotional purposes.

Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

How long do we keep your information?

We will only keep your personal information for as long as necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

How do we keep your information safe?

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please be reminded that the vast majority of data submitted via our Application is done so directly to the communities you’ve chosen to interact with. We do not have any control and do not warrant data protection for data that we do not directly process or control. The end-community is solely responsible for the data you submit to them, through the Application

Do we collect information from minors?

We do not knowingly solicit data from children under 18 years of age. By using the Application, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Apps. If you become aware of any data we have collected from children under age 18, please contact us at privacy@invisionpower.com.

What are your privacy rights?

In some regions (like the European Economic Area), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please contact the specific community administration team.

Data breach

A privacy breach occurs when there is unauthorized access to or collection, use, disclosure or disposal of personal information. You will be notified about data breaches when Invision Power Services, Inc. believes you are likely to be at risk of serious harm with respect to our own processing of any collected data. As noted throughout this policy, each individual community is responsible for safeguarding the collection of your data and are subsequently responsible for notifying you of any breach.

Do we make updates to this policy?

We may update this privacy policy from time to time. Your continued use of the Application after a revision constitutes your acceptance of any updates. If you do not agree to accept such changes, you must discontinue use of the Application.

How you can contact us about this policy

If you have questions or comments about this policy, you may email us at privacy@invisionpower.com.

Effective 26 September 2019