Effective date: December 31, 2021
What we collect
We get information about you in a range of ways:
Information You Give Us
We may collect your name, postal address, email address, phone number, username, password, demographic information (such as your occupation), social security number, tax ID number, bank account information, as well as other information you directly give us on our Services, which may include marketing, promotions and when communicating to you about new features.
For customers who have paid services, we collect your billing details such as credit card information, banking information, and/or billing address.
Information We Get From Others
We may get information about you from other sources, such as your employer. We may add this to information you provide us through our Services.
Information Automatically Collected
We may collect information about the devices accessing our Services. Some examples are the type of device, operating system used, application information, unique device identifiers, and crash data. The type of information we collect depends on the type of device used and its settings.
Transactional and Usage Information
We may automatically log information about you and your computer, subject to your consent where required by law. For example, like most services when using our Services, we may log your computer operating system type, browser type, browser language, pages or screens you viewed, how long you spent on a page or screen, location (your IP address), access times and information about your use of and actions on our Services. This is the information we collect from every user of the Services, whether they have an account or not. This information may include personal information.
Cookies and Similar Technologies Information
Use and disclosure of personal information
We may use, process, and/or disclose personal information for the following purposes:
To operate, maintain, and improve the Services. This includes the use of other information to support the delivery of our services, assist with service requests, monitor for errors, remedy security or technical issues, and analyze website and application performances.
To respond to comments and questions, verify permission access, and provide customer service.
To send information including confirmations, invoices and billing, technical notices, updates, security alerts, and administrative messages.
To communicate upcoming events and other news about products and services offered by us.
To communicate and inform you about system updates and important services-related notices, such as privacy and policy update notices or changes in our terms of service. These communications are administrative, and you may not opt out of them.
To send marketing emails related to the Services, which you may opt out of using provided unsubscribe links or the opt-out mechanism in those communications.
To link or combine user information with other personal information. An example is when we combine the information a company has provided about their shareholders with the information entered by shareholders in their personal portfolios to improve the user experience.
To protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.
To provide and deliver products and services to our business customers with respect to their employees or investors. An example is when an employee exercises their employee stock options and we provide a tax form to their employer to facilitate compliance with tax laws.
We may also use and disclose personal information as follows:
Our business customers’ authorized users and other designated representatives can access information that we hold about the equity information of their employees and investors.
To comply with laws, lawful requests, and legal or regulatory processes.
Eton does not allow the use of our Services by anyone younger than 18 years old. If you learn that anyone younger than 18 has unlawfully provided us with personal data through the Services, please contact us and we will take steps to delete such information.
We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, establishing or defending legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
When we no longer require the personal information, we have collected about you, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.
Information choices and changes
Our marketing emails tell you how to “opt-out.” If you opt-out, we may still send you non-marketing emails. Non-marketing emails include emails about your accounts and our business dealings with you. If at any time you would like to change your communication preferences, we provide unsubscribe links and an opt-out mechanism in those communications for your convenience.
Do Not Track
Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Eton is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Eton may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Eton may transfer your Personal Data to countries other than the one in which you live.
Data Protection Officer
Eton Venture Services, Ltd. Co.
3112 Windsor Road, Suite A-237
Austin, Texas 78703
Notice for California Residents
Scope. This section applies only to California residents. It describes how we collect, use, and share Personal Information of California residents in our capacity as a “business” under the California Consumer Privacy Act (“CCPA”) and their rights with respect to that Personal Information. For purposes of this section, “Personal Information” has the meaning given in the CCPA. However, this section does not apply to:
Information exempted from the scope of the CCPA, including nonpublic personal information;
Personal Information we collect from individuals acting in their capacities as representatives of organizations solely in the context of conducting due diligence regarding, or providing or receiving a product or service to or from, such organizations; and
Personal Information we collect, use, and share on behalf of our customers as a “service provider” under the CCPA for purposes of providing our services to them.
Eton does not sell (as such term is defined in the CCPA) the Personal Information we collect (and will not sell it without providing a right to opt-out).
Your California privacy rights. You have the following rights under the CCPA:
Information. To request the following information about how we have collected and used your Personal Information during the past 12 months:
The categories of Personal Information that we have collected.
The categories of sources from which we collected Personal Information.
The business or commercial purpose for collecting Personal Information.
The categories of third parties with whom we share Personal Information.
Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information disclosed to each category of the third-party recipient.
Access. To request a copy of the Personal Information that we have collected about you during the past 12 months.
Deletion. To request that we delete the Personal Information that we have collected from you.
Nondiscrimination. To exercise the rights described above free from discrimination as provided in the CCPA.
How to exercise your rights. You may submit requests to exercise your right to information, access, or deletion by submitting your request here or via email to email@example.com. We will need to verify your identity to process your information, access, and deletion requests and we reserve the right to confirm your California residency. You may be required to provide government identification, give a declaration as to your identity under penalty of perjury, and/or provide additional information. If you wish to designate an authorized agent to make a request on your behalf, we will need to verify both your and your agent’s identities and your agent must provide a valid power of attorney pursuant to California Probate Code Sections 4000-4465. If you have not provided your agent with such a power of attorney, you must provide your agent signed permission to exercise your CCPA rights on your behalf, provide the information we request to verify your identity and provide us with written confirmation that you have given the authorized agent permission to submit the request. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. In certain cases, we may be required or permitted by law to deny your request.
Examples of Personal Information Collected
The business/commercial purposes for which we use these categories of Personal Information and the types of third parties to which we disclose these categories of Personal Information for business purposes are described in the section above entitled “Use and disclosure of personal information.”
Notice for European Users
The information provided in this section applies only to individuals in the European Economic Area, the United Kingdom, and Switzerland (collectively, “Europe”) and explains our practices regarding personal information that we collect from you or which we have obtained about you from a third-party and the legal basis for processing for your personal information. It also sets out your rights in respect of our processing of your personal information.
Personal information. References to “personal information” in this Notice to European Users are equivalent to “personal data” governed by the General Data Protection Regulation (GDPR).
EU representative. Our EU representative’s details can be obtained by emailing firstname.lastname@example.org.
Data protection officer. Our data protection officer can be contacted at: Data Protection Officer, email@example.com, Eton Venture Services, Ltd. Co. 3112 Windsor Road, Suite A-237, Austin, Texas 78703
Sensitive personal information. We ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) on or through the Services, or otherwise to us.
Your rights. You have the following rights in relation to the personal information we hold about you:
Right of access: You can ask us if we are processing your personal information and to provide you with a copy of it (along with certain details). If you require additional copies, we may need to charge a reasonable fee.
Right to rectification: If the personal information we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified.
Right to erasure: You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent to our processing of your personal information (where applicable).
Right to restrict processing: You can ask us to “block” or suppress the processing of your personal information in certain circumstances, such as where you contest the accuracy of that personal information.
Right to data portability: You have the right, in certain circumstances, to obtain personal information you have provided us with (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
Right to object: You can ask us to stop processing your personal information, and we will do so if we are: relying on our own or someone else’s legitimate interests to process your personal information, unless we can demonstrate compelling legal grounds for the processing; or processing your personal information for direct marketing purposes.
Right to withdraw consent: If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.
Right to lodge a complaint with the supervisory authority: If you have a concern about any aspect of our privacy practices, including the way we have managed your personal information, you can report it to the relevant Supervisory Authority. You can find your data protection regulator here.
You may submit these requests here or email firstname.lastname@example.org or to our postal address provided above. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why subject to legal restrictions.
Cross-border data transfer. If we transfer your personal information out of Europe to a country not deemed to provide an adequate level of personal information protection for purposes of applicable data protection laws such that additional safeguards are required, the transfer will be performed:
pursuant to the recipient’s compliance with Standard Contractual Clauses;
pursuant to the consent of the individual to whom the personal information pertains; or
as otherwise permitted by applicable laws.
You may contact us if you want further information on the specific mechanism used by us when transferring your personal information out of Europe.