Utilityze, Inc. (“Utilityze,” “we,” “our,” or “us”) provides a customer insights and market research data platform (“Platform”) and related services (“Services”) that help marketers understand their customer data.
This Privacy Policy (“Policy”) explains our privacy practices regarding information we collect, use, share, and secure. It applies to visitors to our website, https://www.Utilityze.com (our “Website”); Authorized users representing our business clients (“Clients”) who subscribe to and use our Platform and Services (“Subscribers”); and personal information contained within the data our Clients upload or otherwise make available to us for processing via the Platform (“Client Data”).
Our principal place of business is New York, NY USA. If you have any questions about this Policy or our privacy practices, please contact us at privacy@Utilityze.com.
For clarity, Utilityze acts as a data controller concerning the information collected from Website visitors and Subscribers. Utilityze acts as a data processor on behalf of our Clients concerning the Client Data they upload to the Platform. Our processing of Client Data is governed by the agreements between Utilityze and our Clients.
1. Information We Collect
We define “Personal Information” as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.
We collect Personal Information in the following ways:
Information Collected via Our Website:
Information Collected Automatically: When you visit our Website, we may automatically collect technical information through cookies, web beacons, or similar technologies. This can include IP address, domain server, type of device or browser, operating system, access times, pages viewed, and referring websites. Some of this information may be considered Personal Information under certain laws.
Information You Provide: You may provide Personal Information directly when you fill out forms, request a demo, contact us for support, subscribe to marketing communications, or otherwise interact with the Website. This typically includes your name, work email address, phone number, company name, and the content of your inquiry.
Information Collected via Our Platform:
Subscriber Account and Usage Information: When Clients subscribe to our Platform and authorize users (Subscribers), we collect information necessary to provide and manage the Services. This includes: Subscriber names, work email addresses, work phone numbers, job titles, usernames, hashed passwords, company affiliation, billing contact details, IP addresses used for login, device/browser information, platform usage analytics, support communications, configuration settings. We collect this information directly from Subscribers or Client administrators.
Client Data (Processed on Behalf of Clients): Our Clients upload or otherwise provide Client Data to the Platform for processing. This data is determined and controlled by our Clients and may include Personal Information about their customers or end users, such as names, emails, addresses, demographic details, survey responses, or other market research information. Utilityze does not directly collect this data from end users; we process it solely based on our Clients' instructions as outlined in our agreements with them.
Technical Data from Client Integrations: In certain cases, if our Clients have enabled tags, pixels, or cookies on their own digital properties that integrate with our Platform, we may receive pseudonymous identifiers (e.g., browser cookies, mobile device IDs) associated with Client Data to help our Clients analyze conversions, ad effectiveness, and user paths as part of the Services.
Data Retention:
We retain Subscriber Account and Usage Information as long as the Client maintains an active account and for a period of 2 years thereafter as necessary for legal, accounting, or operational purposes, unless a different period is required by law.
We retain information collected via our Website for as long as necessary to fulfill the purpose for which it was collected, such as responding to inquiries, or for analytics purposes for up to 26 months, unless required otherwise by law or for ongoing business needs.
We retain Client Data processed on behalf of our Clients according to the instructions in our agreement with each Client, or as long as necessary to provide the Services to that Client. If you are an end user whose data may be included in Client Data and have questions about its retention, please contact the relevant Utilityze Client directly.
2. Cookies and Other Tracking Technologies
Website Cookies: On our public Website, we use cookies and similar technologies for functionality, performance analytics, and marketing. This includes first-party cookies and third-party cookies from services like Google Analytics. Non-essential cookies are deployed based on your consent, typically obtained through a cookie banner or preference center on our Website.
Platform Cookies: Within our Platform, we use essential cookies required for functionality, such as persistent cookies to allow authorized Subscribers to remain logged in across sessions and session cookies to maintain state during a single session. These functional cookies do not require consent.
Cookie Management: Most browsers allow you to control cookies through their settings preferences. You may set your browser to refuse cookies or to alert you when cookies are being sent. However, refusing essential cookies may limit functionality on parts of our Website or Platform. For more information on managing cookies, visit http://www.allaboutcookies.org/.
3. How We Use the Information
We use the Personal Information we collect for the following purposes:
To Provide and Manage Our Services: Operate and maintain the Platform, process Client Data on behalf of and as instructed by our Clients, manage Subscriber accounts, provide customer support, process payments, and fulfill contractual obligations.
To Communicate with You: Respond to inquiries, send service-related announcements, provide information you request, and manage subscriptions.
For Marketing and Promotions: If you have opted-in, we may use your contact details (collected via the Website) to send promotional emails about Utilityze products or services. You may opt out of these communications at any time by following the unsubscribe link in the email or contacting us.
To Improve Our Services: Analyze usage trends on our Website and Platform (often using aggregated or anonymized data) to understand user needs, improve functionality, develop new features, and generate anonymized benchmarking reports for Clients or internal use.
For Security and Compliance: Monitor for security threats, prevent fraud, enforce our Terms of Service and other agreements, and comply with applicable legal obligations, court orders, or governmental regulations.
Legal Basis for Processing (where applicable, e.g., under GDPR):
When acting as a controller (for Website visitors and Subscribers):
Performance of a Contract: Processing necessary to provide the Services to our Clients and manage Subscriber accounts.
Legitimate Interests: Processing for network security, website/platform analytics, service improvement, responding to inquiries, and sending essential service communications. We balance these interests against individual rights.
Consent: Processing based on your explicit consent, such as for marketing emails or non-essential website cookies. You can withdraw consent at any time.
Legal Obligation: Processing necessary to comply with our legal requirements.
When acting as a processor (for Client Data): We process Client Data based on the documented instructions of our Client (the data controller), typically outlined in our Data Processing Agreement (DPA) with them. We rely on our Clients' representation that they have a lawful basis for processing the Client Data they provide to us.
4. Sharing of Information
We do not sell or rent your Personal Information in the traditional sense. We share information only in the following circumstances:
Third-Party Service Providers (Sub-processors): We use reputable third-party vendors and service providers to support our Website and Platform operations. These providers act as our sub-processors or service providers and process data only as directed by us and for specified purposes. Our key providers include:
• Amazon Web Services and Google Cloud Storage (cloud hosting and storage)
• OpenAI (generative AI)
• Stripe (payment processing)
• Stytch (authentication services)
• Chargebee (subscription management)
• PostHog (product analytics for Platform usage)
• Vercel (web hosting for certain assets)
• Webflow (website hosting)
• MIstral (generative AI)
We maintain agreements with these providers requiring them to protect the information.
With Our Clients: We provide Clients access to the Client Data they have uploaded and the results of the processing performed by our Platform. We may also share aggregated or anonymized analytics with our Clients regarding Platform usage or general market insights derived from aggregated data (ensuring no individual or specific Client is identifiable).
Legal Requirements & Compliance: We may disclose Personal Information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is reasonably necessary to (a) investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (b) enforce our agreements with you or our Clients; (c) investigate and defend ourselves against any third-party claims or allegations; (d) protect the security or integrity of our Service; or (e) exercise or protect the rights, property, or safety of Utilityze, our users, personnel, or others.
Business Transfers: If Utilityze is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider, your Personal Information may be transferred as part of that transaction, subject to standard confidentiality arrangements.
International Data Transfers: Our primary operations and hosting are in the United States. If you are accessing our Website or Platform from other regions (like the European Economic Area, UK, or Switzerland) with laws governing data collection and use that may differ from U.S. law, please note that you are transferring your Personal Information to the United States. When we transfer Personal Information from regions like the EEA, UK, or Switzerland to the US or other countries not deemed adequate, we rely on appropriate transfer mechanisms, such as: The EU-U.S. Data Privacy Framework and related extensions, and/or Standard Contractual Clauses (SCCs) approved by relevant authorities, often supplemented with additional safeguards. By using our Website or Services, you consent to the transfer, processing, and storage of your information in the United States.
5. Data Subject Rights
Depending on your location and applicable data protection laws (such as GDPR in Europe or CCPA/CPRA in California), you may have certain rights regarding your Personal Information. These rights may include:
• Right to Access: Request access to the Personal Information we hold about you.
• Right to Rectification: Request correction of inaccurate Personal Information.
• Right to Erasure (Deletion): Request deletion of your Personal Information, subject to certain exceptions.
• Right to Restrict Processing: Request restriction of how we process your Personal Information in certain circumstances.
• Right to Data Portability: Request a copy of your Personal Information in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent where processing is based on consent (this does not affect past processing).
• Rights Related to Automated Decision-Making: Rights regarding automated decision-making and profiling, if applicable.
• Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
Exercising Your Rights:
Subscribers: If you are a Subscriber and wish to exercise rights regarding your Subscriber Account Information, please contact us at privacy@Utilityze.com or contact your Client administrator.
Website Visitors: If you are a Website visitor and wish to exercise rights regarding data collected via the Website, please contact us at privacy@Utilityze.com.
End Users (Client Data): If you are an end user whose Personal Information may be part of Client Data uploaded by a Utilityze Client, you must direct your requests to the relevant Utilityze Client (the data controller). Utilityze processes this data on their behalf and cannot directly respond to your requests without their authorization. We will assist our Clients in responding to valid data subject requests concerning the data we process for them.We will respond to verifiable requests within the timeframes required by applicable law. We may need to verify your identity before processing your request.
6. Security Measures
We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect the Personal Information we process against unauthorized access, alteration, disclosure, loss, or destruction. These measures include encryption (e.g., data in transit and at rest), secure cloud hosting environments, access controls, and internal security policies. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Children’s Privacy
Our Website and Platform are not directed to children under the age of 13 (or other minimum age as required by local law, such as 16 in the EEA/UK unless member state law provides otherwise). We do not knowingly collect Personal Information from children. If you believe a child under the relevant minimum age has provided Personal Information to us without parental consent, please contact us at privacy@Utilityze.com, and we will take steps to delete the information as soon as possible.
8. Third-Party Websites and Signals
Third-Party Links: Our Website may contain links to other websites whose privacy practices may differ from ours. If you submit Personal Information to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.Do Not Track & Global Privacy Control: Some browsers offer a “Do Not Track” (DNT) signal. There is no industry standard for how websites should respond to DNT signals, so we do not currently respond to them. However, for users in jurisdictions where required by law (such as California under CCPA/CPRA), we [State your practice: e.g., "process verified Global Privacy Control (GPC) signals as a request to opt-out of the 'sale' or 'sharing' of personal information for that browser or device."
9. U.S. State-Specific Privacy Rights
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section supplements the information contained elsewhere in this Policy.
Categories of Personal Information Collected: In the preceding 12 months, we have collected the categories of Personal Information described in Section 1.
Business Purposes for Collection/Use: We collect and use Personal Information for the business purposes described in Section 3.Categories of Sources: We collect Personal Information from the sources described in Section 1.
Categories of Personal Information Disclosed for Business Purposes: In the preceding 12 months, we have disclosed the categories of Personal Information described in Section 1 to the categories of third parties listed in Section 4 for the business purposes described in Section 3.
"Sale" or "Sharing" of Personal Information:
Utilityze does not "sell" or "share" Personal Information as those terms are defined under the CCPA/CPRA. We do not have actual knowledge of selling or sharing Personal Information of consumers under 16 years of age.
Right to Know/Access: You have the right to request information about the categories and specific pieces of Personal Information we have collected about you, the sources, the purposes, and the categories of third parties to whom we have disclosed it.
Right to Delete: You have the right to request the deletion of your Personal Information, subject to certain exceptions.
Right to Correct: You have the right to request correction of inaccurate Personal Information.
Exercising Your California Rights: To exercise these rights (Know, Delete, Correct), please contact us via email at privacy@Utilityze.com. Please provide sufficient information to verify your identity. You may also designate an authorized agent to make requests on your behalf.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the "Last Updated" date at the top of this Policy. If we make material changes, we will provide notice through our Website or, for Subscribers, potentially via email or platform notification prior to the change becoming effective. We encourage you to periodically review this Policy to stay informed about our collection, use, and sharing of Personal Information. Your continued use of our Website or Services after any changes indicates your acceptance of the revised Policy.
11. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us via email at privacy@Utilityze.com.
12. Relationship to Terms of Service
This Privacy Policy is incorporated into and forms part of our Terms of Service. Your use of the Platform and Services is subject to both this Policy and the Terms of Service. You are responsible for maintaining the confidentiality of your Subscriber credentials and must notify us immediately of any unauthorized use. As stated in our Terms of Service and reiterated here, Clients retain ownership over their Client Data. Utilityze accesses and processes Client Data solely to provide the Services as instructed by the Client or as required by law, and uses aggregated or anonymized data only for limited purposes like service improvement or general statistical reporting, without identifying specific Clients or individuals.
