Last Updated: November 09, 2021
2. Collection of Information
Information you provide
Our technology makes it easier for you to get value and convenience from your insurance data by making it safer and easier to connect your personal insurance information to software applications created by Innovators that help you do things like verify your active insurance to close on a mortgage or drive a car, save money, cover a home or vehicle, or understand and select coverage options. When you connect your insurance accounts with a Developer application or otherwise connect your insurance accounts through us, we collect login information required by the provider of your account, such as your username and password, answers to challenge questions, or a security token (these are referred to below as your “Login Information”). When providing this information, you give the Developer and us the authority to act on your behalf to access and transmit your information from the relevant insurance institution. Your Login Information, as well as any other information we gather through the Services that may be used to identify, contact, or locate you individually, are collectively referred to herein as your “Personal Information.”
We may collect contact information, such as email address, phone number, or mailing address when you request information about our Services, register for our marketing materials, request customer or technical support, apply for a job, or otherwise communicate with us.
We may post job openings and opportunities on our Services. If you reply to one of these postings by submitting your application, CV and/or cover letter to us, we will collect and use your information to assess your qualifications.
Information collected from your insurance institutions
The information we receive from the insurance institutions that maintain your insurance accounts varies depending on the information made available by those institutions. But, in general, we collect the following types of information from your insurance institutions:
- Account information
- Information about policies, vehicles, and Personal Information related to providing accurate insurance data;
- Information about billing transactions, including amount, date, type, quantity, price, and a description of the transaction.
Information received from your devices
Our technology is generally embedded in our Innovators’ applications. When you use your device to connect to our services through a Developer application, we receive information about that device, including IP address, hardware model, operating system, and other technical information about the device.
We may collect Personal Information automatically when you use our Services:
- Cookies. Cookies are small text files placed in device browsers that store preferences and facilitate and enhance your experience.
- Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in our Services that collects information about engagement on our Services. The use of a pixel tag allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement. We may also include web beacons in e-mails to understand whether messages have been opened, acted on, or forwarded.
Our uses of these Technologies fall into the following general categories:
- Operationally Necessary. This includes Technologies that allow you access to our Services, applications, and tools that are required to identify irregular website behavior, prevent fraudulent activity and improve security or that allow you to make use of our functionality;
- Performance-Related. We may use Technologies to assess the performance of our Services, including as part of our analytic practices to help us understand how individuals use our Services (see Analytics below);
- Functionality-Related. We may use Technologies that allow us to offer you enhanced functionality when accessing or using our Services. This may include identifying you when you sign into our Services or keeping track of your specified preferences, interests, or past items viewed;
- Advertising- or Targeting-Related. We may use first party or third-party Technologies to deliver content, including ads relevant to your interests, on our Services or on third-party websites.
- Analytics. We may use Technologies and other third-party tools to process analytics information on our Services. For example, our analytics partners include
Information we receive about you from other sources
We also receive information about you directly from the relevant Developer. For example, our Innovators may provide information about which insurance institution you use, or what information they expect to receive from an insurance institution.
3. Use of Information
We use the information we collect to operate, improve, and protect the services we provide, to market our Services and to develop new services. More specifically, we use your Personal Information:
- To operate, provide, and maintain our Services;
- To verify your identity and manage your account;
- To improve, enhance, modify, add to, and further develop our Services and new products;
- To protect you, our Innovators, our partners, or Canopy Connect from fraud, malicious activity, and other privacy and security-related concerns;
- To provide customer support to you or to our Innovators, including to help respond to your inquiries related to our Service or our Innovators’ applications;
- To pursue our legitimate interests such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention;
- To audit certain interactions, transactions and other compliance activities;
- To enforce our agreements and policies;
- To comply with our legal obligations;
- To investigate any misuse of our service or our Innovators’ applications, including violations of their agreements with us, criminal activity, or other unauthorized access to our Services; and
- For any other purpose described to you when the information was collected, such as registering for events or when applying for employment with us as posted on our site.
We may also use your Personal Information in an aggregated, de-identified, or anonymized manner (that does not identify you personally) for any purpose permitted under applicable law. This includes creating or using aggregated, de-identified, or anonymized data based on the collected information to develop new services and to facilitate research.
We may use Personal Information to tailor and provide you with content and advertisements. We may provide you with these materials as permitted by applicable law.
We may engage in automated decision making, such as for anti-fraud purposes. Canopy’s processing of your Personal Information will not result in a decision based solely on automated processing that significantly affects you unless such a decision is necessary as part of a contract we have with you, we have your consent, or we are permitted by law to engage in such automated decision making. If you have questions about our automated decision making, you may contact us as set forth in “ Contact Us ”
4. Disclosures & Transfers
- We may share your Personal Information with the Developer of the application you are using and as directed by that Developer (such as with another third party if directed by you).
- We may also share your Personal Information as directed by you, such as with Business Partners to provide you with a product or service you have requested. We may also share your Personal Information to business partners with whom we jointly offer products or services.
- We share your Personal Information with “Service Providers” who have limited access to databases of user information or registered member information solely for the purpose of helping us to provide and/or improve the Services and are subject to contractual restrictions prohibiting them from using the information about our users for any other purpose. Such agents or third parties do not have any rights to use Personal Information beyond what is absolutely necessary to assist us.
- We may disclose your Personal Information to third parties to protect us or others without your consent if we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other users of the Services, or anyone else (including the rights or property of anyone else) that could be harmed by such activities. We may disclose Personal Information when we believe in good faith that such disclosure is required by and in accordance with the law.
Please note that if you are using the Services at the request or as part of an organization, your organization’s account administrator may be able to view certain activity and content associated with your use of the Services, including, but not limited to, elements of your Personal Information.
5. International Transfers
The Services are hosted in the United States and are intended primarily for visitors located within the United States. If you choose to use the Services from other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you may be transferring your Personal Information outside of those regions to the United States for storage and processing. We endeavor to safeguard your information consistent with the requirements of applicable laws. By providing your Personal Information through the Services, you consent to the extent allowed by law to such transfer, storage, and processing.
The files containing your information will be on our servers and those of our service providers and will be accessible to persons that require it for the purposes of their duties. Information may be accessible to the courts and the law enforcement and national security authorities of the United States. To obtain more information about our policies and practices with respect to service providers outside of your country, please contact us as set forth below. If you are located in the European Economic Area, Switzerland, the United Kingdom or Brazil, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your Personal Information violates applicable law.
The security of your Personal Information is important to us. We use commercially reasonable efforts to store and maintain your Personal Information in a secure environment. We take technical, contractual, administrative, and physical security steps designed to protect Personal Information that you provide to us. We have implemented procedures designed to limit the dissemination of your Personal Information to only such designated staff as are reasonably necessary to carry out the stated purposes we have communicated to you. The files and records containing your Personal Information will be kept in our offices and/or on our servers or those of our service providers and only those employees that require it for the purposes of their duties will have access to this file. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.
8. Your Privacy Choices and Rights
The privacy choices you may have about your Personal Information are determined by applicable law and are described below.
We process requests to be placed on do-not-mail, do-not-phone, and do-not-contact lists as required by
- Text Messages. You may opt out of receiving text messages from us by following the instructions in the text message you have received from us or by otherwise contacting us.
- Mobile Devices. We may send you push notifications through our mobile application. You may opt out from receiving these push notifications by changing the settings on your mobile device. With your consent, we may also collect precise location-based information via our mobile application. You may opt out of this collection by changing the settings on your mobile device.]
- “Do Not Track.” Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
- Cookies and Interest-Based Advertising. You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, our Services may not work properly. Please note that cookie-based opt-outs are not effective on mobile applications. However, you may
opt-out of personalized advertisements on some mobile applications by following the instructions for Android , iOS and others.
The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy by visiting the Network Advertising Initiative , the Digital Advertising Alliance , the European Digital Advertising Alliance , and the Digital Advertising Alliance of Canada . Please note you must separately opt out in each browser and on each device.
In accordance with applicable law, you may have the right to:
- Access Personal Information about you, including: (i) confirming whether we are processing your Personal Information; (ii) obtaining access to or a copy of your Personal Information, in a structured, commonly used, and machine readable format; and (iii) receiving an electronic copy of Personal Information that you have provided to us, or asking us to send that information
to another company in a structured, commonly used, and machine readable format (the “right of data portability”);
- Request Correction of your Personal Information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your Personal Information;
- Request Deletion of your Personal Information;
- Request Restriction of or Object to our processing of your Personal Information; and
- Withdraw your Consent to our processing of your Personal Information.
If you would like to exercise any of these rights, please contact us as set forth below. We will process such requests in accordance with applicable laws.
9. Notice to California Consumers
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of Personal Information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. We do not share your Personal Information with third parties for the third parties’ direct marketing purposes unless you provide us with your express consent to do so.
Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), natural persons who are California residents have certain rights concerning their Personal Information held by us, as described below.
Personal Information Collection, Use, and Disclosure: The following table describes (i) the categories of Personal Information (as defined in the CCPA) we may collect about you; (ii) the sources from which that information is collected; (iii) the business and/or commercial purposes for collecting that information; and (iv) the categories of third parties to whom that information is disclosed.