Privacy Policy for CU Station™ Services
1. Privacy Policy of MetaCato Inc.
MetaCato Inc. (“MetaCato,” “we,” “us,” or “our”) is a Delaware corporation with its principal place of business in Texas, USA. This Privacy Policy outlines how we collect, use, share, and protect personal data in compliance with applicable laws, including the laws of the United States (such as the California Consumer Privacy Act (CCPA)), the General Data Protection Regulation (GDPR) of the European Union, and other applicable laws where necessary.
For the purposes of this Privacy Policy, “you” and “your” refer to any individual accessing or using our services, websites, or platforms, whether on behalf of yourself or a legal entity. By using our services, you acknowledge and agree to the practices described in this Privacy Policy.
2. Scope of This Policy
This Privacy Policy applies to all products, services, and websites offered by MetaCato, including but not limited to:
- CU Station™ website
- CU Station™ Community Connect Portal
- CU Station™ Affiliate Portal
- CU Station™ Consumer Portal
- CU Station™ FIM Portal
(Collectively referred to as the “Services”).
3. Applicability
This Privacy Policy primarily applies to users based in the United States. However, we are committed to complying with applicable global data protection regulations for users from the European Union (EU), and any other regions with specific data protection laws.
4. Our Commitment to Privacy
We are dedicated to safeguarding your privacy and ensuring that your personal data is handled in accordance with all applicable federal, state, and international laws and regulations.
Please read this Privacy Policy carefully to understand how we handle your personal data and the rights you have.
5. Overview of This Privacy Policy
This Privacy Policy encompasses the following aspects:
5.1 Types of Personal Data Collected
Details on the specific personal data we gather from users.
5.2 Usage of Collected Data
An explanation of how we utilize the collected data.
5.3 Data Sharing Practices
Information on third parties with whom we may share your data.
5.4 Your Privacy Rights and Options
A summary of your rights regarding your personal data and your choices.
5.5 Data Protection Measures
An overview of the security measures we implement to safeguard your personal data.
6. Overview of What we Collect.
We collect different types of data based on how you interact with CU Station™ Services.
6.1 Identifiers and Contact Information
We collect your name, username, email address, phone number, CU Station™ account ID, and physical address.
6.2 Protected Characteristics
We may collect age, gender, and other demographic information where necessary to provide tailored Services or comply with legal requirements.
6.3 Commercial Information
Details about your usage of CU Station™ services, such as account activity, preferences, and any products or services purchased through the platform, including membership or loan applications.
6.4 Billing and Payment Information
Payment details such as credit/debit card information, billing addresses, and transaction history when you make or receive payments through CU Station™.
6.5 Internet and Electronic Activity
Data about your online activity, including browsing behavior, searches, and interactions with CU Station™ portals.
6.6 Device and Usage Data
Information about the device and software you use to access CU Station, including your browser type, operating system, and usage details like IP address.
6.7 Profile Inferences
We may make inferences based on your behavior and preferences to offer personalized content or services.
6.8 Audio and Visual Information
Photos, avatars, or video recordings (e.g., from webinars or interactive sessions) when applicable.
6.9 Sensitive Information
Includes geolocation data (with your consent), account credentials, and any communications through CU Station™ messaging features.
7. How Data Collected
We collect data in the following ways:
7.1 Data You Provide Directly
You provide information when you:
7.1.1 Create an account or use our Services.
7.1.2 Subscribe to newsletters or marketing communications.
7.1.3 Participate in CU Station™ community events, forums, or discussions.
7.1.4 Make purchases or contact support.
7.2 Automatically Collected Data
We collect certain data automatically through cookies and other tracking technologies, such as:
7.2.1 IP addresses, device identifiers, usage statistics, and activity logs.
7.2.2 Anti-fraud monitoring tools to ensure the security of our Services.
7.3 Data from Third-Party Platforms
When you use third-party platforms (e.g., social media) to access CU Station™, those platforms may share data with us, depending on your privacy settings.
7.4 Cookies and Similar Technologies
We use cookies and similar tools to:
7.4.1 Personalize your experience.
7.4.2 Secure your data.
7.4.3 Provide relevant content and ads.
7.5 Data from Third Parties
We may collect additional data from third parties (e.g., analytics providers, public databases) to improve our Services and protect against fraud.
8. How We Use Personal Data
We use personal data for various business, commercial, and legal purposes, including:
8.1 Provision of services
To provide, maintain, and improve the Services, process transactions, and ensure functionality.
8.2 Personalization
To tailor content, recommendations, and marketing communications based on your preferences.
8.3 Communication
To send service-related communications, respond to inquiries, and provide customer support.
8.4 Compliance with legal obligations
To comply with regulatory and legal requirements, such as reporting obligations and data retention.
8.5 Security
To maintain the security and integrity of our systems, prevent fraud, and protect against unauthorized access or misuse.
9. Data Sharing
We may share your personal data with:
9.1 Services Providers
Third-party vendors who help us deliver the Services, such as payment processors, cloud storage, and technical support.
9.2 Advertising Partners
We may share data with advertising partners to deliver personalized ads.
9.3 Legal and Safety Reasons
We may disclose your data if required by law or necessary to protect the security and integrity of our Services.
9.4 Business Transfers
In the event of mergers, acquisitions, or sale of assets, your personal data may be transferred to the acquiring entity.
9.5 Public Forums
If you participate in public forums on CU Station™, your profile and activity may be visible to other users.
10. Your Privacy Rights and Choices
10.1 Under U.S. Law (CCPA and Other Applicable State Laws):
10.2 Right to Access: Request access to the personal data we hold about you.
10.3 Right to Rectification: Request correction of inaccurate personal data.
10.4 Right to Deletion: Request deletion of your personal data, subject to legal limitations.
10.5 Right to Opt-Out: Opt-out of the sale of personal data or targeted advertising.
10.6 Right to Data Portability: Request a copy of your personal data in a machine-readable format.
10.7 Right to Limit Use of Sensitive Data: Restrict the use of sensitive personal data where applicable.
10.8 Under GDPR – Where Applicable (for EU/EEA residents):
10.9 Right to Access: Right to know how your data is processed and obtain a copy of it.
10.10 Right to Rectification: Right to have inaccurate personal data corrected.
10.11 Right to Erasure (“Right to be Forgotten”): Right to have your personal data deleted under specific conditions.
10.12 Right to Data Portability: Right to receive a copy of your personal data in a structured, machine-readable format.
10.13 Right to Object: Right to object to the processing of your personal data, especially in cases of direct marketing.
10.14 Right to Suspend Use: Request to suspend the use of your personal data under certain conditions.
10.15 For Users of Other Regions
For users in regions outside the United States, including Singapore, Malaysia, Japan, and any other regions, we are committed to ensuring compliance with applicable laws and regulations governing personal data protection. This includes recognizing your rights to access and correct your personal data, withdraw consent for its processing, and request disclosure, correction, or deletion of your personal data as stipulated by the respective data protection laws in these jurisdictions.
To exercise any of these rights, please contact us at [email protected]. We will respond in accordance with applicable legal requirement.
11. Data Security and Protection
We implement industry-standard security measures, including encryption, access controls, and secure storage systems, to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no system is entirely secure, and we cannot guarantee absolute security. We encourage users to safeguard their credentials and use strong passwords.
12. International Data Transfers
If you are located outside the United States, your personal data may be transferred to and processed in the U.S. and other countries where we or our service providers operate. We ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms, are in place to protect your data during such transfers.
13.Data Retention
We retain your personal data as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. When your data is no longer required, we will securely delete or anonymize it in accordance with applicable laws.
14.Childern’s Policy
Our Services are not directed to individuals under 13 years of age (or under 16 in some jurisdictions), and we do not knowingly collect personal data from children without verifiable parental consent. If we learn that we have collected personal data from a child without appropriate consent, we will delete the information promptly.
15.Data Storage and International transfers
Your personal data is primarily stored and processed within the United States. For international users, (where necessary and applicable) we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure compliance with applicable global data protection laws.
16.Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or technology. We will notify you of significant updates by posting the revised policy on our website and updating the “Last Updated” date. Continued use of our Services after such changes indicates your acceptance of the updated terms.
17.Contact Information
If you have questions about this Privacy Policy, please email Data Protection Officer at contracts@MetaCato.com. You may also mail at the address:
MetaCato, Inc. 6565 N. MacArthur Blvd, Ste 225 Irving, TX 75039 Attn: Privacy Policy Administrator |
