Collection of Information
Information You Provide to Us
We collect information you provide directly to us. For example, we collect information when you request information, create a Drift account, sign up for our Services, participate in any interactive features of the Services, fill out a form or submit surveys, participate in a contest or promotion, order or purchase energy supply ("Supply") through the Services, communicate with us via third party social media sites, request customer support or otherwise communicate with us. The types of information we may collect include:
Account Information, such as your name, address, email address, phone number, social media user name, and any other information you choose to provide;
Individual Information, such date of birth, social security number, driver's license number (or comparable), and passport number when you provide such information in connection with signing up for our Services;
Property and Supply Usage Information, such as the number of residents, square footage, date and type of construction, type of HVAC used, the current utility company servicing the property and your utility services account number, including your usage history for the past two years, and your Supply usage amounts and rates;
Transaction Information, such as information about the type and sources of Supply you request. We may also collect and store limited payment information from you, such as payment card type and expiration date and the last four digits of your payment card number, however, we do not collect or store full payment card numbers and all transactions are process by our third party payment processor.
Other Information You Choose to Provide, such as when you participate in a survey, contest, promotion or interactive area of the Services or when you request technical or customer support. If you participate in promotions offered by your employer or certain membership groups of which you are a member, we may also collect details about the benefits offered by your employer or your membership in certain services groups.
In some cases, we may also collect information you provide about others, such as when you refer someone to our Services. We will use this information to fulfill your requests and will not send communications to your contacts unrelated to your requests, unless they separately consent to receive communications from us.
Information We Collect Automatically When You Use the Services
When you access or use our Services, we automatically collect information about you, including:
Log Information: We log information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to our Services.
Device Information: We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers and mobile network information.
Information Collected by Cookies and Other Tracking Technologies: We and our service providers use various technologies to collect information, including cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular and count visits. Web beacons are electronic images that may be used in our Services or emails and help deliver cookies, count visits and understand usage and campaign effectiveness. For more information about cookies, and how to disable them, please see "Your Choices" below.
Information We Collect From Other Sources
We may also obtain information from other sources and combine that with information we collect through our Services. For example, we may collect information about you from third parties, including but not limited to mailing list providers and publicly available sources.
Use of Information
We may use information about you for various purposes, including to:
Provide, maintain and improve our Services;
Provide and deliver the Supply, products and services you request, process transactions and send you related information, including confirmations and invoices,
Send you technical notices, updates, security alerts and support and administrative messages;
Respond to your comments, questions and requests and provide customer service;
Communicate with you about products, services, offers, promotions, rewards, and events offered by Drift and others, and provide news and information we think will be of interest to you;
Monitor and analyze trends, usage and activities in connection with our Services;
Personalize and improve the Services and provide advertisements, content or features that match user profiles or interests; Will tell users where to get best price products, etc.
Process and deliver contest entries and rewards;
Link or combine with information we get from others to help understand your needs and provide you with better service; and
Carry out any other purpose for which the information was collected.
Drift is based in the United States and the information we collect is governed by U.S. law. By accessing or using the Services or otherwise providing information to us, you consent to the processing and transfer of information in and to the U.S. and other countries.
Sharing of Information
With vendors, consultants and other service providers who need access to such information to carry out work on our behalf;
With local utility or energy supply companies to fulfill your Supply order;
In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation or legal process, or as otherwise required by any applicable law, rule or regulation;
If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property and safety of Drift or others;
In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company; and
With your consent or at your direction.
We may also share aggregated or de-identified information, which cannot reasonably be used to identify you.
Social Sharing Features
The Services may offer social sharing features and other integrated tools (such as the Facebook "Like" button), which let you share actions you take on our Services with other media, and vice versa] Your use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the entities that provide these features.
Advertising and Analytics Services Provided by Others
Drift takes reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction.
You may update, correct or delete information about you at any time by logging into your online account, emailing us at firstname.lastname@example.org. If you wish to deactivate or delete your account, you may contact us at email@example.com, but note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period of time.
Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services.
You may opt out of receiving promotional emails from Drift by following the instructions in those emails or by emailing firstname.lastname@example.org. If you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.
In effect for users who use Plaid to connect a bank account to their Drift account, so Drift statements can be paid via ACH.
This policy does not apply to any website, product or service of any third-party company even if the website or application links to (or from) the Service. Plaid does not operate those websites, products, or services - please always review the privacy practices of a company before deciding whether to provide any information to them.
Information We Collect
In general, we collect information in a number of ways, including (i) when a client or end-user provides it directly to us via the Website and/or Service, (ii) when we obtain end-user information through trusted third parties including financial institutions, (iii) through your continued access of the Service, including data passively collected through technology such as "cookies". The types of information we collect and our use of that information will depend on whether you are a Website Visitor, Client, or End-User.
Cookies and IP Addresses
We automatically receive and record information from your web browser when you interact with the Service, including your IP address and cookie information. This information is used for fighting spam/malware and also to facilitate collection of data concerning your interaction with the Service (e.g., what links you have clicked on). Generally, the Service automatically collect usage information, such as the number and frequency of visitors to the Site. We may use this data in aggregate form, that is, as a statistical measure, but not in a manner that would identify you personally. This type of aggregate data enables us and third parties authorized by us to figure out how often individuals use parts of the Service so that we can analyze and improve them. We may also receive a confirmation when you open an email from us. We use this confirmation to improve our customer service.
To simply browse our Website, you are not required to provide any Personal Information. However, we may gather non-personally-identifiable information, as described directly above, just for the purposes of monitoring and improving our Website and the Service. We will not share this information with third parties except as a necessary part of providing our Website and the Service, nor will we use it to target any advertisements to you. Of course, if you sign up with or use any of our services, more information is shared.
When you use Plaid services as a client, whether paid or unpaid, we will gather and store your name, company name, email address, phone number, billing address, and any other relevant information that you provide directly to us. Any and all test and/or live users that sign up as an end-user of your services fall under the end-user category. If you sign up for a paid account, we will also store the relevant data required to complete your transaction, including but not limited to your financial information, bank account numbers, routing numbers, billing address and company name. We may also rely on a third-party payment processor to complete transactions, and all data shared with them falls under their own privacy policies. Further, we will collect and associate all relevant end-user data with your client account, including but limited to end-user names, email addresses, billing addresses and financial information. We may additionally collect information on the IP addresses, devices, and locations used to access Plaid, which may be linked to your account for fraud detection and prevention purposes. Finally, we may collect additional data for identity verification on an as-needed based determined at our own sole discretion.
As an end-user of any application that utilizes the Service, whether via a client or other third-party, directly via use of our API or other services, or through an application built by us directly, you are agreeing to share financial information with us including, but not limited to, your account credentials, transactional histories, account numbers, and balances/limits as well as general identity data including names and addresses of all account holders. You are enabling us to interact with and through your financial institutions on your behalf and with your consent. We may also retrieve information pertaining to usage of our client applications and other general activity that comes through use of the Service.
We collect statistical information about how both unregistered and registered users, collectively, use the Service ("Aggregate Information"). Some of this information is derived from Personal Information. This statistical information is not Personal Information and cannot be tied back to you, your Account or your web browser.
How We Use Personal Information
Plaid uses your Personal Information as follows:
To operate and maintain the Service (such as, overall operating and maintenance, providing customer service, fixing malfunctions, testing our security systems, etc.).
To provide you with the features, functions and benefits of the Service (such as, displaying to information regarding your financial accounts).
To enhance, improve, add to and further develop the Service (such as, creating new features or functions, refining or personalizing the user experience, increasing Service technical performance, etc.).
We will use your contact information (such as, your email address or phone number) to provide you with Service notifications.
To help personalize the Service experience for you (such as, remembering your information so you will not have to enter it each time you use the Service or providing you with offers, advertisements or features you may like).
And for the other purposes referenced in the "Sharing and Disclosure" section below (such as, for the purposes of legal compliance).
Sharing and Disclosure
Plaid does not sell or rent any personal information to marketers or third parties that have not been explicitly authorized (e.g., in the case of a client).
We may share your Personal Information with trusted third parties who are integral to the operation of our Website and the Service, including but not limited to financial institutions, payment processors, verification services and credit bureaus, as well as any third parties that you have directly authorized to receive your Personal Information. We may store your Personal Information in locations outside the direct control of Plaid, for instance, on servers or databases co-located with hosting providers.
We will only disclose your Personal Information in response to such a request if we believe in good faith that doing so is necessary to comply with applicable law or a legal obligation to which we are bound. If we receive such a request, we will use reasonable efforts to give you prompt notice, so that you may contest it if you choose. We will not provide you such notice if we determine in good faith that either (a) we are not permitted to provide it under applicable law, or (b) that doing so would result in an imminent risk of death, serious physical injury or significant property loss or damage to Plaid or a third party. In addition, in the event of a merger, acquisition, reorganization, bankruptcy, or other similar events, certain information in our possession may be transferred to our successor or assign.
We may occasionally email you with information about offers or new services. You can opt out of these email communications by replying with unsubscribe in the subject line, or via an unsubscribe link included in such communications. However, you will continue to receive certain email communications related to your account including information regarding transactions and your relationship with Plaid.
Protection of Information
Although no data storage or transmission can be 100% secure, we take significant steps to protect user and account information to ensure that it is kept private. Plaid maintains strict administrative, technical, and physical procedures to protect information stored in our servers, which are located in the United States. Access to information is limited (through user and password credentials and software systems) to those employees who require it to perform their job functions. We use industry-standard Secure Socket Layer encryption to safeguard the account registration and sign-up information, along with the end-user sign-up process. Other safeguards include, but are not limited to data encryption, firewalls, and physical access controls to building and files.
Information from Children
We do not knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, please do not attempt to register for the Service or send any personal information about yourself to us. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under 13 may have provided us personal information, please contact us at email@example.com.
If you have any questions or concerns regarding our privacy policies, please send us a detailed message to firstname.lastname@example.org, or: Attn: Legal; Plaid Inc. - San Francisco, CA 94105.