Privacy Policy

You may have the right under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), California's “Shine the Light” law and certain other privacy and data protection laws, as applicable, to exercise free of charge:

You have the right to know, and request disclosure of:

• The categories of personal information we have collected about you, including sensitive personal information;
• The categories of sources from which the personal information is collected;
• Our business or commercial purpose for collecting, selling, or sharing personal information;
• The categories of third parties to whom we disclose personal information, if any; and
• The specific pieces of personal information we have collected about you.

Please note that we are not required to:

• Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;
• Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or
• Provide the personal information to you more than twice in a 12-month period.

In connection with any personal information we may sell, share, or disclose to a third party for a business purpose, you have the right to know:

• The categories of personal information about you that we sold or shared and the categories of third parties to whom the personal information was sold or shared; and
• The categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom the personal information was disclosed for a business purpose.

You have the right to opt-out of the sale of your personal information or sharing of your personal information for targeted behavioral advertising. If you exercise your right to opt-out of the sale or sharing of your personal information, we will refrain from selling or sharing your personal information, unless you subsequently provide express authorization for the sale or sharing of your personal information.

Under California's “Shine the Light” law, you have the right to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

To opt-out of the sale or sharing of your personal information, visit our homepage and click on the Do Not Sell or Share My Personal Information link here: www.opendata-labs.com/privacy

You have the right to limit the use and disclosure of your sensitive personal information to the use which is necessary to:

• Perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services;
• To perform the following services: (1) Helping to ensure security and integrity to the extent the use of the consumer's personal information is reasonably necessary and proportionate for these purposes; (2) Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer's current interaction with the business, if the consumer's personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer's experience outside the current interaction with the business; (3) Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business; and (4) Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business; and
• As authorized by further regulations.

You have a right to know if your sensitive personal information may be used, or disclosed to a service provider or contractor, for additional, specified purposes.

To limit the use of your sensitive personal information, visit our homepage and click on the “Privacy”. Or visit: www.opendata-labs.com/privacy

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records; and
• Direct any service providers or contractors to delete your personal information from their records.
• Direct third parties to whom the business has sold or shared your personal information to delete your personal information unless this proves impossible or involves disproportionate effort.

Please note that we may not delete your personal information if it is reasonably necessary to:

• Complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
• Help to ensure security and integrity to the extent the use of the consumer's personal information is reasonably necessary and proportionate for those purposes;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise their right of free speech, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
• Comply with an existing legal obligation; or
• Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

If we maintain inaccurate personal information about you, you have the right to request us to correct that inaccurate personal information. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate personal information.

You have the right to not be retaliated against by us because you exercised any of your rights under the CCPA/CPRA. This means we cannot, among other things:

• Deny goods or services to you;
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
• Provide a different level or quality of goods or services to you; or
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Please note that we may charge a different price or rate or provide a different level or quality of goods and/or services to you, if that difference is reasonably related to the value provided to our business by your personal information. We may also offer loyalty, rewards, premium features, discounts, or club card programs consistent with these rights or payments as compensation, for the collection of personal information, the sale of personal information, or the retention of personal information.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com.

Please note that you may only make a CCPA/CPRA-related data access or data portability disclosure request twice within a 12-month period.

If you choose to contact us directly via our website or by email, you will need to provide us with:

• Enough information to identify you (e.g., your full name, address and customer or matter reference number);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person's behalf.

Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Some internet browsers include the ability to transmit “Do Not Track” signals. We do not currently respond to Do Not Track browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will update this Privacy Policy.

Residents of Connecticut may have certain personal data rights under the Connecticut Data Protection Act (CTDPA) which may be exercised free of charge once per year, provided that in cases where the requests are manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee to cover the administrative costs of complying with the request or decline to comply with the request.

You have the right to:

• Confirm whether or not we are processing your personal data and access such data.
• Correct inaccuracies in your personal data.
• Delete personal data provided by or obtained about you.
• Obtain a copy of your personal data processed by us in a portable format.
• Opt-out of the processing of your personal data for targeted advertising.
• Opt-out of the sale of your personal data.
• Opt-out of profiling performed in furtherance of solely automated decisions that produce legal or similarly significant effects.
• Designate another person to serve as your authorized agent to act on your behalf and opt out of processing for targeted advertising, the sale of your data, and profiling as listed above.
• Non-discrimination or retaliation for exercising any of these rights.
• To designate an agent to exercise your rights on your behalf.
• We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• If you would like to exercise any of your rights, or if you wish to designate an agent to exercise your rights on your behalf, as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com.

• Please note that you may only make a CTDPA-related data access or data portability disclosure request once within a 12-month period.
• If you choose to contact us directly by any of the means set forth herein, you will need to provide us with:
  • Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
  • Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
  • A description of what right you want to exercise and the information to which your request relates.
• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Virginia may have certain personal data rights under the Virginia Consumer Data Protection Act (VCDPA) which may be exercised free of charge up to two times per year, provided that in cases where the requests are manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee to cover the administrative costs of complying with the request or decline to comply with the request.

You have the right to:

• Confirm whether or not we are processing your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete personal data provided by or obtained about you.
• Opt-out of the processing of your personal data for targeted advertising.
• Opt-out of the sale of your personal data.
• Opt-out of profiling performed in furtherance of decisions that produce legal or similarly significant effects.
• Non-discrimination or retaliation for exercising any of these rights.
• We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com.

• Please note that you may only make a VCDPA-related data access or data portability disclosure request twice within a 12-month period.
• If you choose to contact us directly by any means described herein you will need to provide us with:
  • Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
  • Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
  • A description of what right you want to exercise and the information to which your request relates.
• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Utah residents may have certain personal data rights under the Utah Consumer Privacy Act (UCPA) which may be exercised free of charge up to once every 12 months, provided that in cases where the requests are manifestly unfounded, excessive, repetitive or technically unfeasible, we may charge a reasonable fee to cover the administrative costs of complying with the request or decline to comply with the request. We may also charge a fee in situations where we believe that the request is part of an organized effort to harass, disrupt or impose undue burdens on our business or if your request is for a purpose other than exercising a right under the UCPA.

You have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Delete the personal data you provided to us.
• Obtain a copy of the personal data that you have provided to us in a format that is portable and easily usable.
• Opt-out of processing of your personal data for targeted advertising.
• Opt-out of the sale of your personal data.
• No retaliation for exercising one of these rights.
• We are required to respond within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days and provide you with the reason(s) for the extension.
• If we decline to take action regarding your request, we must notify you within 45 days of the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com.

• Please note that you may only make a UCPA-related data access or data portability disclosure request once within a 12-month period without incurring a fee.
• If you choose to contact us directly by any means described herein, you will need to provide us with:
  • Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
  • Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
  • A description of what right you want to exercise and the information to which your request relates.
• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Colorado may have certain personal data rights under the Colorado Privacy Act (CPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us.
• Receive your requested data in a usable and transferable form.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.

If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.

You can request information under the CPA free of charge once per year. For a second or subsequent request within a 12-month period, we may charge an amount that is the same for the provision of a public record, which is $0.25 per standard page, or a fee not to exceed the actual cost of providing a copy, printout, or photograph of the record in a format other than a standard page.

How to Exercise Your Rights: If you would like to access your data, confirm that your data is being processed by us, request deletion of your data, request correction of your data, or receive your requested data in a usable and transferable form, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com.

If you wish to exercise your opt-out rights you can do so here: www.opendata-labs.com/privacy-policy. Find the section Colorado Opt-Out Rights, or if you wish to designate an agent to exercise your rights on your behalf or are a guardian or conservator exercising consumer rights on behalf of another, you can do so in the same section of Colorado Opt-Out Rights here www.opendata-labs.com/privacy-policy. You may also contact us at: privacy@opendata-labs.com. If your request to exercise your rights is declined, you may appeal by contacting us at: privacy@opendata-labs.com and following the process found here: www.opendata-labs.com/privacy-policy.

If you need to contact us for any reason, you can do so at: privacy@opendata-labs.com.

• Please note that you may only make a CPA-related data access or data portability disclosure request for free once within a 12-month period. Subsequent requests may result in fees as noted above.
• If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:
  • Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
  • Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
  • A description of what right you want to exercise and the information to which your request relates.
• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Delaware may have certain personal data rights under the Delaware Personal Data Privacy Act (DPDPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Florida may have certain personal data rights under the Florida Digital Bill of Rights (FDBR).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 15 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Indiana may have certain personal data rights under the Indiana Consumer Data Protection Act (INCDPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an INCDPA-related data access and data portability disclosure request for free once within a 12-month period.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Iowa may have certain personal data rights under the Iowa Consumer Data Protection Act (ICDPA).

You have the right to:

• Confirm whether we process your personal data and to access such personal data.
• Delete personal data provided by you.
• Obtain a copy of your personal data that you previously provided to us.
• Opt-out of the sale of personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an ICDPA-related data access and data portability disclosure request for free twice within a 12-month period.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Kentucky may have certain personal data rights under the Kentucky Consumer Data Privacy Act (KCDPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make a KCDPA-related data access and data portability disclosure request for free twice within a 12-month period.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Maryland may have certain personal data rights under the Maryland Online Data Privacy Act (MODPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an MODPA-related data access and data portability disclosure request for free once within a 12-month period. If your requests are manifestly unfounded, excessive, technically infeasible, or repetitive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Minnesota may have certain personal data rights under the Minnesota Consumer Data Privacy Act (MNCDPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 60 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an MNCDPA-related data access and data portability disclosure request for free once within a 12-month period. If your requests are manifestly unfounded or excessive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Montana may have certain personal data rights under the Montana Consumer Data Privacy Act (MCDPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an MCDPA-related data access and data portability disclosure request for free once within a 12-month period. If your requests are manifestly unfounded or excessive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Nebraska may have certain personal data rights under the Nebraska Data Privacy Act (NEDPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an NEDPA-related data access and data portability disclosure request for free twice within a 12-month period. If your requests are manifestly unfounded, excessive or repetitive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Nevada may have certain personal data rights under the Nevada Online Privacy Law (OPL).

• You have the right to contact us to request changes to any of the covered information that is collected through our website.
• The OPL provides Nevada residents the limited right to opt-out of the sale of their personal information to third parties. Please note, however, that we do not currently sell your personal information.
• If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:
  • Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
  • Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
  • A description of what right you want to exercise and the information to which your request relates.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of New Hampshire may have certain personal data rights under the New Hampshire Consumer Data Privacy Act (NHCDPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an NHCDPA-related data access and data portability disclosure request for free once within a 12-month period. If your requests are manifestly unfounded, excessive or repetitive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of New Jersey may have certain personal data rights under the New Jersey Consumer Data Privacy Law (NJDPL).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of the categories of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an NJDPL-related data access and data portability disclosure request for free once within a 12-month period. If your requests are manifestly unfounded, excessive or repetitive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Oregon may have certain personal data rights under the Oregon Consumer Privacy Act (OCPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Obtain a list of third parties to which we have disclosed your personal data.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make an OCPA-related data access and data portability disclosure request for free once within a 12-month period. We may charge a reasonable fee to cover the administrative costs of complying with a second or subsequent request within the 12-month period, unless the purpose of the second or subsequent request is to verify that we corrected inaccuracies in, or deleted, your personal data in compliance with your initial request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Rhode Island may have certain personal data rights under the Rhode Island Data Transparency and Privacy Protection Act (RIDPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make a RIDPA-related data access and data portability disclosure request for free once within a 12-month period. If your requests are manifestly unfounded, excessive or repetitive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Tennessee may have certain personal data rights under the Tennessee Information Protection Act (TIPA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make a TIPA-related data access and data portability disclosure request for free twice within a 12-month period. If your requests are manifestly unfounded, excessive or repetitive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Residents of Texas may have certain personal data rights under the Texas Data Privacy and Security Act (TDPSA).

You have the right to:

• Opt-out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• Access your data and to confirm that your data is being processed by us.
• Request deletion of your data held by us.
• Request correction of your data held by us, taking into account the nature of the personal data and the purposes of the processing of such personal data.
• Receive your requested data in a usable and transferable form.
• Non-discrimination or retaliation for exercising any of these rights.
• Designate an agent to exercise your rights on your behalf.
• Appeal if your request is denied.
• Responding to Requests. We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time for response once for 45 additional days, as long as we notify you within the original 45 days.
• If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and provide information on the appeal process within a reasonable time after the communication of the decision to decline.
• Please note that you may only make a TDPSA-related data access and data portability disclosure request for free twice within a 12-month period. If your requests are manifestly unfounded, excessive or repetitive, we may: (1) charge you a reasonable fee to cover the administrative costs of complying with the request; or (2) decline to act on the request.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: www.opendata-labs.com/privacy. You may also contact us at: privacy@opendata-labs.com. If you choose to contact us directly via our website or by email, you can find detailed instructions here and you will need to provide us with:

• Enough information to identify you (e.g., your full name, contact information, address and other information as is reasonably requested by us);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.

• We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
• Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.