Privacy policy

Effective Date: August 20, 2020

Kalderos, Inc. (“Kalderos”, “our”, “we”, or “us”) is a life sciences technology company. We build web software and offer services that assist life science businesses (“Customers”) with their strategic and operational goals. As part of our agreements with our Customers, we may obtain information from and about healthcare providers, government agencies, and other persons and entities with which our Customers may have business dealings (“Business Partners”).  Some of this information includes information about individuals maintained and/or processed by these Business Partners. We may also collect Personal Information from individuals who simply browse our websites and applications (“Visitors”).

We are committed to respecting and protecting the privacy of the information we maintain. This Privacy Policy describes our privacy practices with respect to the Personal Information we collect and/or process, including on or through Kalderos.com, the Review Application  f/k/a Grappa, the Verify Application f/k/a Avenue, and the Request Application (collectively, the “Sites”).  By using or accessing the Sites and our services in any manner, you agree that we may collect, use, and share Personal Information about you in the following ways.  This Privacy Policy does not cover data that we collect regarding employees, and contractors or other Kalderos personnel.

Remember that use of our Sites is at all times subject to each Application’s Terms of Service, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Service.

We may modify this Policy at any time at our sole discretion. We will notify you of any material changes by posting the new Privacy Policy on the Sites. Consult this Policy regularly for any changes.

1. Personal Information We Collect

Over the course of our relationships with Customers, Business Partners, and Visitors, it is routine for us to collect, process and store Personal Information. For purposes of this Privacy Policy, Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.  It does not include deidentified or aggregate information or public information lawfully available from governmental records.

This section describes the categories of Personal Information we may have collected about you in the last 12 months, and the categories of Personal Information we may continue to collect about you (Please note that the types of Personal Information listed in each category are examples only; they are not exhaustive.):

Contact information and identifiers, such as name, date of birth, social security number, address, email address, and phone number.

Professional or employment-related information, such as information about the companies for which individuals work and their titles and business contact information. Additionally, when you apply for employment with Kalderos, we may ask for your Personal Information, including your name, email address, phone number, copies of your resume or CV, and any other information required to verify your qualifications.

Device and online identifiers and Internet or other electronic activity information, such as IP address, operating system and information about the provider or browser used, date and time of visit to the website, pages visited, and information associated with browsing history.

Commercial, financial, billing and payment-related information, such as records of and information related to rebates, payments, and payers; information about health care products or services purchased, dispensed, or billed for; account information. Payment method information that is collected by Dwolla, Inc. on behalf of our Customers is subject to Dwolla’s Privacy Policy, which is available here.

Health insurance information, such as information submitted on a health insurance claim.

Location data, such as information derived from IP addresses.

Audio and visual information.

Other information you provide to us, such as information you choose to communicate to us or transmit through the Sites.

2. How We Use Personal Information

We may use the Personal Information described above for multiple internal and external purposes, including to:

Provide the Sites and Kalderos’ products and services

• Communicate with our Customers or Business Partners regarding account activities, new version and product offerings, or other communications relevant to the Sites and our products and services

• Consider you for employment with Kalderos

• Administer the Sites, maintain our systems, and troubleshoot

• Protect and secure our Sites, operations, and personnel

• Facilitate product and service development and new offerings

• Facilitate our business operations and needs, defend our rights and legal claims and comply with law, our policies, and legal requests

• Reorganize or transition our business, such as in connection with a merger, acquisition, or sale of all or a portion of our assets or business

If you contact us by email or by filling-out a registration form, we may keep a record of your contact information and correspondence, and may use your email address, and any information that you provide to us in your message, to respond to you.

If you decide at any time that you no longer wish to receive such information or communications from us, you may email us at info@kalderos.com and request to be removed from our list.  

If you are a Customer or a Business Partner of Review, Request, or Verify, you may review and update the Personal Information in your profile on the Sites by logging in and editing such information. If you decide to delete all of your information, we may cancel your account. We may retain an archived copy of your records to the extent required by law, or to the extent permitted by law when needed for reasonable business purposes.

3. Sharing Personal Information

In the last 12 months, we may have disclosed each of the categories of Personal Information above with third parties for a business purpose and may continue to do so. The categories of third parties with which we share personal information include:

• Customers

• Business partners

• Service providers and suppliers, agents, or contractors, including social media companies and analytics providers, see section on “Use of Cookies” below.

• Law enforcement, governmental authorities, or other third-parties as required by law, in response to legal requests, to protect our rights and interests, or for the protection of others

• Third parties who may acquire all or part of our business or act as successors in interest to our business

We may also disclose aggregate statistics regarding user behavior as a measure of interest in, and use of, our Sites or de-identified data, such as overall patterns or demographic reports.

4. Children’s Personal Information

The Sites are not designed for, directed to, or intended to be used by children under the age of 18. If we obtain actual knowledge that a child under the age of 18 is using the Sites, we will take steps to delete such information as soon as possible.

5. Security

Kalderos maintains reasonable physical, electronic, and procedural safeguards designed to protect Personal Information. We cannot, however, guarantee the security of Personal Information.

If you are a Customer or a Business Partner and you have an account with us, your account is protected by a password that you select. It is your responsibility to protect your password appropriately and to limit access to your computer or device and browser by, among other things, signing off after you have finished accessing your account.

6. Third Party Hosting, Serving and Storage

KALDEROS MAY CONTRACT WITH A VARIETY OF THIRD PARTIES, INCLUDING SUPPLIERS, PROVIDERS, AND VENDORS, TO PROVIDE FOR OUR HOSTING, AUTHENTICATION, SERVING, STORAGE, COMMUNICATION, AND TELECOMMUNICATION NEEDS, ETC., INCLUDING WITHOUT LIMITATION STORAGE OF OUR USERS’ PERSONALLY IDENTIFIABLE INFORMATION. KALDEROS SHALL NOT BE RESPONSIBLE OR LIABLE, AND HEREBY DISCLAIMS ALL RESPONSIBILITY AND LIABILITY, FOR CULPABLE (INCLUDING WITHOUT LIMITATION NEGLIGENT) ACTS OR OMISSIONS BY THESE THIRD PARTIES.

7. Use of Cookies

We use cookies, tracking pixels and related technologies on our Sites. Cookies are small data files that are served by our platform and stored on your device. Our Sites uses cookies dropped by us or third parties for a variety of purposes, including to operate and personalize the Sites.

Through the use of our Sites, third party services may place cookies on the Visitor's browser and may send their own cookies to the Visitor's cookie file. Some of these services may include, but are not limited to: Google, Intercom, Hubspot, LogRocket, Pendo, and other social networks, security firewalls, analytics companies and service providers. These services may also collect and use identifiers such as IP Address, HTTP Referrer, Unique Device Identifier and other non-personally identifiable information and server logs. You may opt-out from Google’s cookies using their Ad Settings. You may also use the Network Advertising Initiative opt-out page to opt-out of some third party cookies.

8. Use of Tracking Pixels

Kalderos collects Personal Information through the use of tracking pixels. A tracking pixel is a transparent graphic image that is placed on a website and, in combination with a cookie, allows us to collect information regarding the use of the Sites that contains the tracking pixel.

We may also work with ad networks and ad delivery platforms that place retargeting pixels on Visitors’ devices to gather information about Visitors’ online activities, such as browsing histories and demographic information. This information can be aggregated into audience segments, which help deliver relevant advertising to Visitors visiting our Sites and third-party websites that use the same pixels. Specifically, we may use the tracking pixels of a few large ad platforms (Twitter, Hubspot, LinkedIn, Google Ads, Facebook). To learn more about Google Ads, please visit https://policies.google.com/privacy. To learn more about Hubspot, please visit http://www.legal.hubspot.com/privacy-policy. To learn more about Twitter, please visit https://support.twitter.com/articles/20170514. For further information about LinkedIn’s privacy practices, please visit https://www.linkedin.com/legal/privacy-policy. To learn more about Facebook’s privacy practices, please visit https://www.facebook.com/policy.php.

9. Do-Not-Track Requests

“Do Not Track” signals are options available on browsers to tell operators of websites that users do not wish to have your online activity tracked. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. Because there currently is no industry standard concerning what, if anything, websites should do when they receive such signals, we currently do not take action in response to these signals. If and when a final standard is established and accepted, we will reassess how to respond to these signals.

10. Third Party Sites

Our Sites may contain links to websites operated by third parties over which we have no control. Should you click on a link to a third-party website, the privacy policy of that website will apply instead of our Privacy Policy. We are not responsible for the content or security of third-party websites.

11. Your Rights Under California Law

If you are a resident of California, you may have rights under the California Consumer Privacy Act of 2018 (“CCPA”), as described in this section of our Privacy Policy.  Please note, however, that Kalderos often acts as a service provider to other businesses that determine how your information is collected, used, and/or shared, and that much of the information Kalderos collects would be subject to exceptions in the CCPA (for instance, for information processed in a business-to-business context) to the extent the CCPA applies.  If you submit a request, we will let you know if we cannot respond directly. This section of the Privacy Policy only relates to data that is covered by the applicable portions of the CCPA.

Rights Under the CCPA

Individuals whose Personal Information is covered by the CCPA have the right, subject to certain limitations, to: (i) request access to the Personal Information we collect and share about you and (ii) request that we delete the Personal Information we have collected from you.

Your Right to Request Disclosure of Information We Collect and Share About You

Individuals whose Personal Information is covered by the CCPA have a right to request that Kalderos provide the following information:

• The categories of Personal Information that Kalderos has collected about you.

• The categories of sources from which Kalderos collected the Personal Information.

• The business or commercial purposes for which Kalderos collected and/or sold the Personal Information.

• The categories of any third parties with which Kalderos shared the Personal Information.

• The specific pieces of Personal Information Kalderos collected over the past 12 months.

Individuals whose Personal Information is covered by the CCPA may also submit a request that Kalderos provide the following additional information:

• The categories of Personal Information, if any, Kalderos has sold about you, categories of third parties to which Kalderos sold that Personal Information and the categories of Personal Information sold to each type of third party.

• The categories of Personal Information that Kalderos has disclosed for a business purpose.

Our responses to any of these requests will cover the 12-month period preceding our receipt of the request.

Your Right to Request the Deletion of Personal Information We Have Collected from You

Individuals whose Personal Information is covered by the CCPA may also request deletion of information covered by the CCPA.  Upon receiving and verifying such request, Kalderos will delete the Personal Information that we have collected about you, unless that information is necessary for Kalderos to:

• Complete the transaction for which we collected the information;

• Provide you with a good or service you requested;

• Perform a contract Kalderos entered into with you;

• Detect security incidents;

• Maintain the functionality or security of Kalderos’ systems;

• Comply with or exercise rights provided by the law; or

• Use the information internally in ways that are comparable with the context in which you provided the information to Kalderos or that are reasonably aligned with expectations based on your relationship with Kalderos, among other things.

We may also retain information where another exception to the deletion requirements in Cal. Civ. Code § 1798.105(d) applies.

Please note that if you or your authorized agent request that we delete your Personal Information, you may no longer be able to access or use certain parts of the Sites.

Sales of Personal Information

We do not sell Personal Information.

Our Process for Responding to Requests for Access or Deletion under the CCPA

If you are a California resident, to exercise your CCPA rights and submit your requests, please send an email to support@kalderos.com or contact Kalderos at (844) 930-2322.

Requests for disclosures are generally free, and we will not discriminate against you for exercising your rights. However, please note that Kalderos primarily operates as a service provider to other companies and in a business-to-business context. Accordingly, we may not be able to respond directly to your request, though we will seek to provide you an explanation of the basis for a denial of your request.  

Before responding to your request, we will need to verify your identity based on information we maintain about you.  The specific verification data we may request will vary depending on your relationship with us and the nature of your request. You may place a request through an authorized agent, however you will also need to verify the agency request as well.  Requests that relate to a household must be placed through a verified request from each member of the household.  For any request, if we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request.  We will notify you to explain the basis of the denial.

Accessibility

Kalderos is committed to ensuring that our communications are accessible to individuals with disabilities.  If you need a copy of this privacy policy in an alternative accessible format, please contact us at the contact information below.

Shine the Light Law

California’s “Shine The Light” law permits California customers to annually request and obtain information free of charge about what Personal Information is disclosed to third parties for direct marketing purposes in the preceding calendar year. We do not disclose your Personal Information to third parties for the third parties’ direct marketing purposes.

11. International Users

Our Sites are hosted in the United States and is intended for access and use by individuals located in the United States only. By using our Sites, you consent to the transfer of your Personal Information to the United States as described in this Privacy Policy. Please do not use the Sites if you do not agree to the transfer and processing of your Personal Information in the United States or if it is illegal to do so in your home country.

12. Contact Us

If you have any questions or concerns, please contact us at support@kalderos.com or contact Kalderos at (844) 930-2322.

13. Updates and Changes to this Privacy Policy

We may modify this Privacy Policy at any time at our sole discretion. We will notify you of any material changes by posting the new Privacy Policy on the Sites. Your continued use of the Sites after the effective date constitutes your acceptance of the amended Privacy Policy. Please review this page for the latest information on acceptable uses of the Sites. The amended Privacy Policy supersedes all previous versions. If you do not agree to changes to this Policy, you must stop using the Sites after the effective date of such changes.