Privacy policy

This privacy policy (this “Policy”) governs the manner in which Cantina (“we,” “us,” or “our”) is committed to protecting the privacy of its users or any individuals providing their personally identifiable information in connection with their organization (“you,” “your,” or “user”) and providing transparency regarding the collection, use, and disclosure of personal information when you use our services. This Policy outlines how we handle your information, and by accessing or using our platform, website, or application (the “Platform”) in order to access or use Cantina’s products or services (collectively, “Services”), you agree to the practices described herein.

Information Collected

We collect personal information that you voluntarily provide to us when you register for our Services, express an interest in obtaining information about us or our Services, when you participate in activities on the Services, or otherwise when you contact us.

We may collect and process the following types of personal and non-personal information:

What You Provide to Us

The personal information that we collect depends on the context of your interactions with us and the Services you use. The personal information we collect may include the following:

• Identity information, such as your first name, last name, username or similar identifier, title, date of birth and gender;
• Contact information, such as your postal address, email address and telephone number;
• Profile information, such as your username and password, interests, preferences, feedback and survey responses;
• Social media profiles and links to your profiles;
• Feedback and correspondence, such as the information you provide in your responses to surveys, when you participate in market research activities, report a problem with Service, receive customer support or otherwise correspond with us;
• Usage information, such as information about how you use the Service and interact with us; and
• Code repositories and associated information and materials.

Information Collected Automatically

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Use of Personal Information

We will use your personal information in the following ways:

1. We use your personal information to enable you to access and use the Services and to provide and deliver products and to provide you with the information and services that you request, including managing and handling your requests, inquiries or complaints.
2. We use your personal information as we believe necessary or appropriate to comply with applicable laws such as maintaining appropriate business records, conducting due diligence, know your customer identification, anti-money laundering, counter-terrorism, or other processes, complying or cooperating with requests by governmental or law enforcement agencies, regulatory bodies, or other bodies having oversight or prudential jurisdiction or as otherwise required.
3. We use your personal information to communicate about promotions, upcoming events, and other news about products and services offered by us and our selected partners.
4. We may use your personal information to operate, maintain, and improve our Services. We may also use your information to respond to your comments and questions regarding the Services, and to provide you and other users with general customer service.
5. We may use or share your personal information with your consent, such as when you consent to let us post your testimonials or endorsements on our Site, you instruct us to take a specific action with respect to your personal information, or you opt into third party marketing communications.
6. We may use your personal information to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.

Information Disclosure to Third Parties

We may disclose your information to our service providers, partners and other third parties as described in this Policy:

1. To our subsidiaries and affiliates.
2. To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
3. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Cantina’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Cantina about our users is among the assets transferred.
4. To third parties to market their products or services to you if you have consented to such disclosures.
5. To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
6. We may share information to protect the rights and property of Cantina, our agents, customers, and others. This includes enforcing our agreements, policies, and terms of use.
7. We may share information in an emergency. This includes protecting the safety of our employees and agents, our customers, or any person.
8. We may share information with other companies or entities of your choosing that you permit us to share your personal information with.

How Information is Secured

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on servers hosted by render.com. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Platform and the Services, you are responsible for keeping this password confidential. We urge you to be careful about giving out information in public areas of Cantina’s platform. The information you share in public areas may be viewed by any user of the Platform.

We employ security measures designed to protect the security of all information submitted through the Platform or otherwise in connection with the Services. Although we do our best to protect your data and personal information, we cannot guarantee the security of your data or personal information transmitted through the Platform. Any transmission of personal information or data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Platform.

Age Restrictive Practices

We do not knowingly solicit data from or market to individuals under 18 years of age. By using the Services, you represent that you are at least 18 years of age.

Cross-border Transfers of Your Data

Please be advised that the Platform is hosted in the United States and in other regions throughout the world. Your personal data may be stored and processed in any country where we have facilities or in which we engage service providers, and, by using the Services and giving us your data, you consent to the transfer of data to countries outside your country of residence, including, without limitation, the United States, which may have data protection rules that are different from those of your country and may not provide the same level of protections as the laws of your country.

Your California Rights

A California resident who has provided personal information to a business with whom he/she has established a business relationship for personal, family, or household purposes (“California customer”) is entitled to request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. In general, if the business has made such a disclosure of personal information, upon receipt of a request by a California customer, the business is required to provide a list of all third parties to whom personal information was disclosed in the preceding calendar year, as well as a list of the categories of personal information that were disclosed.
 
However, under the law, a business is not required to provide the above-described lists if the business adopts and discloses to the public (in its privacy policy) a policy of not disclosing customer’s personal information to third parties for their direct marketing purposes unless the customer first affirmatively agrees to the disclosure, as long as the business maintains and discloses such a policy. Rather, the business may comply with the law by notifying the customer of his or her right to prevent disclosure of personal information and providing a cost free means to exercise that right.
 
As stated in this Policy, we do not share information with third parties for their direct marketing purposes unless you affirmatively agree to such disclosure. If you do ask us to share your information with a third party for its marketing purposes, we will only share information in connection with that specific promotion, as we do not share information with any third party on a continual basis. To prevent disclosure of your personal information for use in direct marketing by a third party, do not opt in to such use when you provide personally identifiable information on one of our sites. Please note that whenever you opt in to receive future communications from a third party, your information will be subject to the third party's privacy policy. If you later decide that you do not want that third party to use your information, you will need to contact the third party directly, as we have no control over how third parties use information. You should always review the privacy policy of any party that collects your information to determine how that entity will handle your information.
 
California customers may request further information about our compliance with this law by e-mailing [email protected]. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this e-mail address.

Privacy Notice and Opt Out Notice

As required by United States Federal Trade Commission (“FTC”) regulation, by acknowledging receipt of this Policy, you also consent to receive your periodic notice of the Privacy Policy, via the Platform. By acknowledging receipt of this Policy, you also consent to receive your opt out notice and opportunity to opt out, as required by FTC regulation, via the Platform.

Changes to This Privacy Policy

It is our policy to post any material changes we make to this Policy on this page with a notice that this Policy has been updated on the Platform’s home page. If we make material changes to how we treat our users' data and personal information, we will notify you via email or through a notice on the Platform’s home page. The date this Policy was last revised is identified at the top of the page. We may change this Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices.

Contact us

If you have any questions or concerns regarding this Policy, please contact us at [email protected]. By using the Platform and our Services, you acknowledge that you have read and understood this Policy and consent to our practices outlined herein.