Privacy Policy

How Dusted collects, uses, discloses, and protects personal information

THIS PRIVACY POLICY EXPLAINS HOW DUSTED LLC HANDLES PERSONAL INFORMATION IN CONNECTION WITH THE DUSTED PLATFORM AT DUSTED.IO. DUSTED IS A PUBLIC PROFESSIONAL PORTFOLIO AND COMMUNITY PLATFORM. YOUR PROFILE, THE WORK YOU PUBLISH, AND YOUR COMMUNITY ACTIVITY ARE PUBLIC BY DEFAULT AND ARE VISIBLE TO ANYONE ON THE INTERNET. SECTION 11 EXPLAINS WHAT THIS MEANS FOR YOU. SECTION 3.5 EXPLAINS HOW THE AI ASSISTANT AND ITS OPTIONAL VOICE FEATURE WORK, INCLUDING THAT WE RECORD AND TRANSCRIBE WHAT YOU SAY AND THAT WE DO NOT USE YOUR VOICE TO IDENTIFY YOU. SECTION 7 EXPLAINS THAT DUSTED USES CONTENT AND ACTIVITY ON THE PLATFORM TO DEVELOP AND TRAIN MACHINE LEARNING MODELS AND TO GENERATE AGGREGATED INSIGHTS. SECTIONS 12 THROUGH 15 EXPLAIN THE PRIVACY RIGHTS AVAILABLE TO YOU, INCLUDING RIGHTS UNDER THE CALIFORNIA CONSUMER PRIVACY ACT, OTHER STATE PRIVACY LAWS, AND THE GENERAL DATA PROTECTION REGULATION, AND HOW TO EXERCISE THEM.

---

TABLE OF CONTENTS

1. ABOUT THIS PRIVACY POLICY
2. SUMMARY OF OUR PRIVACY PRACTICES
3. PERSONAL INFORMATION WE COLLECT
4. CATEGORIES OF PERSONAL INFORMATION COLLECTED
5. SOURCES OF PERSONAL INFORMATION
6. HOW WE USE PERSONAL INFORMATION
7. ARTIFICIAL INTELLIGENCE AND MACHINE LEARNING
8. COOKIES, ANALYTICS, AND SIMILAR TECHNOLOGIES
9. HOW WE DISCLOSE PERSONAL INFORMATION
10. SELLING, SHARING, AND TARGETED ADVERTISING
11. PUBLIC CONTENT AND COMMUNITY FEATURES
12. YOUR PRIVACY CHOICES
13. YOUR RIGHTS UNDER UNITED STATES STATE PRIVACY LAWS
14. HOW TO SUBMIT A REQUEST, VERIFICATION, AGENTS, AND APPEALS
15. NOTICE TO INDIVIDUALS IN THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM, AND SWITZERLAND
16. INTERNATIONAL DATA TRANSFERS
17. RETENTION OF PERSONAL INFORMATION
18. SECURITY OF PERSONAL INFORMATION
19. CHILDREN'S PRIVACY
20. DO NOT TRACK AND GLOBAL PRIVACY CONTROL SIGNALS
21. ADDITIONAL STATE DISCLOSURES
22. CHANGES TO THIS PRIVACY POLICY
23. HOW TO CONTACT US

1. ABOUT THIS PRIVACY POLICY

1.1 Who we are.

Dusted LLC is a California limited liability company with its principal place of business at 35 Miller Ave, Unit #615, Mill Valley, California 94941 ("Dusted," "we," "us," or "our"). Dusted operates a professional community and portfolio platform that allows marketers and adjacent professionals to publish examples of their work, describe the reasoning behind that work, build a public professional profile, and engage with other members of the community.

1.2 Scope.

This Privacy Policy (the "Policy") describes how we collect, use, disclose, retain, and protect personal information in connection with the website at dusted.io, all associated subdomains and applications, and all related features and services (collectively, the "Service"). It also describes the choices and rights available to you and how to exercise them.

1.3 What this Policy does not cover.

This Policy does not apply to: information handled by any third party that operates its own website, application, or service, including any employer, client, vendor, advertiser, authentication provider, or payment processor; information you publish publicly through the Service, to the extent it is collected, copied, or used by another person after publication; or information handled by Dusted outside of the Service, such as job applicant information, which is addressed by separate notices.

1.4 Personal information.

In this Policy, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. In jurisdictions that use the term "personal data," that term has the same meaning for the purposes of this Policy. Information that has been deidentified or aggregated so that it can no longer reasonably be associated with an individual is not personal information and is not subject to this Policy.

1.5 Your agreement.

This Policy is incorporated into the Dusted Terms of Service. By using the Service, you acknowledge that you have read this Policy. Where applicable law requires consent for a particular processing activity, we will obtain that consent separately and will not rely on this Policy as consent.

2. SUMMARY OF OUR PRIVACY PRACTICES

The following summary is provided for convenience only. It is not a substitute for the full Policy, and the detailed sections that follow control in the event of any inconsistency.

3. PERSONAL INFORMATION WE COLLECT

3.1 Information you provide when you register.

When you join a waitlist, request an invitation, or create an account, we collect your name, email address, username, password or authentication credential, and any professional details you choose to supply, including job title, employer, industry, location, years of experience, areas of specialization, and links to your other professional profiles or websites.

3.2 Profile and portfolio information.

We collect the information you add to your profile and portfolio, including your biography, profile photograph, employment and engagement history, education, certifications, awards, skills, services offered, contact preferences, and any other detail you elect to publish.

3.3 Content you upload.

We collect the files, documents, images, video, audio, presentations, case studies, playbooks, templates, campaign summaries, metrics, narrative context, commentary, and other materials you submit to the Service, together with any metadata embedded in or associated with those materials, such as file names, authorship fields, creation and modification dates, software identifiers, and, in some cases, location information embedded in images. We recommend that you review and remove embedded metadata before uploading any file if you do not wish to disclose it.

Content you upload may contain personal information about other people, including colleagues, clients, customers, and campaign audiences. You are responsible for ensuring that you have the right to disclose that information to us and to publish it through the Service, as described in the Terms of Service. Please do not upload sensitive personal information about any individual, including health, financial, biometric, government identifier, precise location, or children's information.

3.4 Communications.

We collect the contents of messages you send through the Service, including direct messages, comments, discussion posts, and reactions, as well as your correspondence with our support, security, billing, and legal teams, together with any attachments and the metadata associated with those communications.

3.5 Voice input and AI assistant interactions.

The Service includes an AI assistant that helps you plan and draft case studies and other content. You may interact with it by typing or, where the voice feature is available, by speaking to it. Voice input is optional, and the assistant remains available through text input if you prefer not to use it. When you use the voice feature, we collect:

• (a) the audio recording of your speech captured during the session;

• (b) the text transcript generated from that recording;

• (c) the prompts, questions, drafts, summaries, and other output that the assistant generates during the session, and the edits you make to them; and

• (d) technical and session information about your use of the feature, including session start and end times, duration, device and microphone characteristics, language settings, error events, and quality metrics.

We access your microphone only while a voice session is active and only with the permission you grant through your browser or device. We present a notice before your first voice session and display an indicator while recording is in progress. You can end a session at any time, and you can withdraw microphone permission at any time through your browser or device settings, which disables the feature without affecting the rest of the Service.

We do not use your voice to identify or authenticate you. We do not create, extract, store, or compare voiceprints, voice templates, or other biometric identifiers derived from your speech, we do not use speaker recognition, and we do not analyze your voice to infer characteristics about you such as age, gender, emotion, or health. We process voice recordings for transcription and for the operation of the assistant only. Section 21.5 addresses biometric information.

Please do not speak confidential information belonging to an employer or client, personal information about other people, or anything you would not put in writing. Please also do not use the voice feature where another person can be overheard, and do not use it to record a meeting, call, or conversation involving anyone else. Many jurisdictions, including California, require the consent of every participant before a communication may be recorded, and complying with those laws is your responsibility.

3.6 Payment information.

If you purchase a paid offering, our payment processors collect your payment card or bank account details, billing address, and transaction information directly from you. We receive from those processors a record of the transaction, the last several digits and card brand of the instrument used, the billing contact, and the authorization result. We do not store complete payment card numbers on our own systems.

3.7 Information collected automatically.

When you access the Service, we and our service providers automatically collect:

• (a) device and connection information, including internet protocol address, browser type and version, operating system, device type and identifiers, screen and window characteristics, language and locale settings, and time zone;

• (b) log and diagnostic information, including access times, pages and screens viewed, referring and exit pages, files requested, response codes, error events, crash reports, and performance metrics;

• (c) activity and engagement information, including profiles and portfolio items you view, search queries you run, links you follow, content you save or share, members you follow, reactions and comments you post, features you use, session duration and frequency, upload and download events, and interaction with our emails and notifications; and

• (d) approximate location inferred from your internet protocol address at the level of city, region, and country. We do not collect precise geolocation from your device.

3.8 Information from third parties.

We may receive personal information from:

• (a) authentication and single sign on providers, if you choose to register or sign in through them, which typically supply your name, email address, profile identifier, and profile image in accordance with the permissions you approve;

• (b) analytics, attribution, security, fraud prevention, and content delivery providers, which supply technical and behavioral data about your interaction with the Service;

• (c) marketing, advertising, and referral partners, which may supply campaign attribution, referral source, and prospect information;

• (d) vendors, employers, agencies, and other organizations that provide information about you in connection with a subscription, sponsorship, verification, or recruiting arrangement; and

• (e) publicly available and commercially available sources, including public professional directories, company websites, and business information providers, which we may use to supplement profile data, verify professional details, and support community integrity.

3.9 Inferences.

We generate inferences from the information described above, including inferences about your professional seniority, discipline, industry, areas of expertise, content interests, likely relevance of particular content to you, and probability of engaging with a given feature. We use these inferences to personalize the Service, to improve discovery and recommendations, and to develop our products.

3.10 Sensitive information.

We do not seek to collect sensitive personal information. We do handle account credentials, which certain state laws classify as sensitive. If you voluntarily disclose information in your profile or in content you upload that reveals a characteristic that a privacy law treats as sensitive, such as racial or ethnic origin, religious belief, health status, sexual orientation, gender identity, union membership, or immigration status, you do so of your own initiative and, where you publish it, you make it publicly available. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

4. CATEGORIES OF PERSONAL INFORMATION COLLECTED

The following table describes the categories of personal information we collect, using the statutory categories established by the California Consumer Privacy Act, as amended by the California Privacy Rights Act. We collect each category from the sources described in Section 5, use each category for the purposes described in Section 6, retain each category as described in Section 17, and disclose each category to the categories of recipients described in Section 9 and identified below.

5. SOURCES OF PERSONAL INFORMATION

We collect personal information from the following categories of sources: directly from you, when you register, complete your profile, upload content, communicate with us, or purchase a paid offering; automatically from your device and browser, through cookies, software development kits, server logs, and similar technologies, as described in Sections 3.7 and 8; from our service providers and business partners, including hosting, analytics, security, communications, and payment providers; from authentication providers you elect to use; from vendors, employers, and other organizations in connection with a commercial or verification arrangement; from other users, where they mention you, tag you, credit you as a collaborator, or report content; and from publicly available and commercially available sources, as described in Section 3.8(e).

6. HOW WE USE PERSONAL INFORMATION

We use personal information for the following business and commercial purposes:

• (a) to create, authenticate, administer, and support your account, and to provide the Service;

• (b) to host, publish, display, and distribute your profile, portfolio, and content in accordance with the visibility settings you select;

• (c) to operate community features, including search, discovery, recommendations, following, messaging, comments, collections, and notifications;

• (d) to personalize the Service, including the content, profiles, and features presented to you;

• (e) to communicate with you about your account, transactions, security, and changes to our terms and policies;

• (f) to send you newsletters, product announcements, community updates, event invitations, and other marketing communications, subject to your preferences and applicable law;

• (g) to process payments, prevent payment fraud, manage subscriptions, and maintain financial and tax records;

• (h) to measure, analyze, and improve the Service, including through analytics, research, testing, surveys, and product development;

• (i) to generate aggregated, benchmarked, statistical, and deidentified insights about marketing practice, content performance, and platform activity, which we may publish or make available to users, vendors, and the public;

• (j) to operate the AI assistant, including to capture, transmit, transcribe, and process voice input, to generate drafts and suggestions, and to measure and improve the accuracy and quality of the feature;

• (k) to develop, train, test, evaluate, and improve machine learning models, algorithms, classifiers, search and recommendation systems, and related technologies, as described in Section 7;

• (l) to promote Dusted and the Service, including by featuring content, profiles, and member work in marketing materials in accordance with the license granted in the Terms of Service;

• (m) to maintain the safety, integrity, and security of the Service, including to detect, investigate, and prevent fraud, abuse, scraping, unauthorized access, security incidents, and violations of our terms and policies;

• (n) to moderate content, to respond to complaints, notices, and reports, and to enforce the Terms of Service and other applicable policies;

• (o) to comply with applicable law, legal process, and regulatory obligations, to respond to lawful requests from public authorities, and to establish, exercise, or defend legal claims;

• (p) to evaluate, negotiate, and complete a corporate transaction such as a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections; and

• (q) for any other purpose disclosed to you at the time we collect the information or to which you consent.

6.1 Combination of information.

We may combine information we collect from different sources and across your interactions with the Service, and may associate information collected automatically with your account, in order to accomplish the purposes described above.

6.2 Deidentified and aggregated information.

We may create deidentified and aggregated information from personal information and may use, retain, disclose, publish, and commercialize that information for any lawful purpose. Where we deidentify information, we maintain and use it in deidentified form, take reasonable measures to prevent reidentification, and do not attempt to reidentify it except to test the effectiveness of our deidentification measures or as otherwise permitted by law.

7. ARTIFICIAL INTELLIGENCE AND MACHINE LEARNING

7.1 Our use of content and activity data for model development.

We use content published on the Service and data about how the Service is used to research, develop, train, pretrain, fine tune, test, evaluate, benchmark, and improve machine learning models, artificial intelligence systems, algorithms, classifiers, embeddings, search and recommendation systems, and related technologies. The material used for these purposes may include the work you upload, the narrative context and commentary you provide, your profile and professional information, your interactions with the Service, your interactions with the AI assistant, including voice recordings and transcripts, and the annotations and labels we or our providers derive from that material.

7.2 Why we do this.

We use these technologies to power features that summarize and classify work published on the Service, surface relevant content and benchmarks, generate aggregated insights about marketing practice, improve search and discovery, detect abuse and low quality content, and support new features that we develop over time. Where applicable law requires a legal basis for this processing, we rely on our legitimate interest in developing and improving the Service, or on your consent where consent is required.

7.3 Providers.

We may use third party providers of models, computing infrastructure, and related tooling to carry out the activities described in this Section. Where we transmit personal information to such a provider, we use commercially reasonable efforts to engage that provider under contractual terms that restrict its use of the information to the provision of services to us.

7.4 Outputs.

Models developed as described in this Section may generate summaries, classifications, recommendations, benchmarks, and other outputs that we provide to you, to other users, to vendors, or to the public. Outputs are generated by automated systems and may be inaccurate or incomplete. We do not use automated processing to make decisions about you that produce legal effects concerning you or that similarly significantly affect you.

7.5 Your controls.

You can limit the personal information available for these purposes by choosing what you publish and by using any privacy controls we make available. Where we offer a control that allows you to exclude your content from model development, it will be described in your account settings, and you may also contact us at privacy@dusted.io. A control of this kind operates prospectively. It does not require us to retrain, modify, or delete a model that has already been trained, and it does not affect insights or deidentified data already generated. If you are located in a jurisdiction whose law gives you a right to object to processing of this kind or to withdraw consent, you may exercise that right as described in Sections 13 through 15, and we will honor it to the extent the law requires.

7.6 Models and derived artifacts.

Model parameters, weights, embeddings, annotations, and other artifacts created through the activities described in this Section are our property and do not contain your content in retrievable form as such. Deleting your account or your content removes it from the Service in accordance with Section 17 but does not remove artifacts already derived from it.

8. COOKIES, ANALYTICS, AND SIMILAR TECHNOLOGIES

8.1 Technologies we use.

We and our service providers use cookies, local storage, software development kits, pixels, tags, web beacons, and similar technologies to operate the Service, remember your preferences, authenticate your session, measure performance, understand usage, and support marketing.

8.2 Categories.

The technologies we use fall into the following categories:

• (a) strictly necessary technologies, which are required to deliver the Service, maintain your session, balance load, and protect against fraud and abuse, and which cannot be disabled through our preference tools;

• (b) functional technologies, which remember your settings and preferences and enable enhanced features;

• (c) analytics and performance technologies, which help us understand how the Service is used, diagnose errors, and measure the effectiveness of features and communications; and

• (d) marketing and attribution technologies, which help us measure the performance of our campaigns and, where applicable, present Dusted advertising to you on other websites and services.

8.3 Your choices.

Most browsers allow you to block or delete cookies, and mobile operating systems provide controls over advertising identifiers. Where required by law, we present a consent or preference tool that allows you to accept or reject non essential technologies, and you may change your election at any time through that tool. Blocking certain technologies may impair the functioning of the Service. Because the technologies used on the Service change over time, the consent tool available on the Service, together with this Policy, describes the current position.

8.4 Email technologies.

Our emails may contain pixels or tracked links that tell us whether a message was opened and which links were followed. You can limit this by disabling image loading in your email client or by unsubscribing from marketing messages.

9. HOW WE DISCLOSE PERSONAL INFORMATION

We disclose personal information to the following categories of recipients for the purposes described in Section 6:

• (a) Service providers and processors, which perform functions on our behalf under contract and are permitted to use the information only to provide services to us, including cloud hosting and storage, content delivery, database and file processing, analytics, error monitoring, search infrastructure, email and notification delivery, customer support tooling, security and fraud prevention, identity and authentication, payment processing, accounting, speech to text and audio processing, and model and computing infrastructure providers;

• (b) other users and the public, with respect to your profile, published work, comments, and other content and activity that you make publicly visible, and with respect to information you send directly to another user;

• (c) vendors, sponsors, advertisers, and business partners, in aggregated, deidentified, or statistical form, and in identifiable form only where you have opted in to a feature that shares your information with a specific vendor or partner, such as a lead form, a recruiting product, or a gated content download that you complete;

• (d) professional advisors, including lawyers, accountants, auditors, insurers, and consultants, who are bound by duties of confidentiality;

• (e) public authorities, courts, and other parties, where we believe in good faith that disclosure is required by law, legal process, subpoena, court order, or governmental request, or is necessary to protect the rights, property, or safety of Dusted, our users, or the public, to investigate suspected fraud or abuse, to enforce our terms, or to establish, exercise, or defend legal claims;

• (f) parties to a corporate transaction, including a prospective or actual acquirer, investor, lender, or successor entity, and their advisors, in connection with a financing, due diligence process, merger, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality protections, and to the successor entity on completion of such a transaction;

• (g) complainants and rights holders, where we forward a notice or complaint as described in the Terms of Service, including notices of alleged infringement, confidentiality complaints, and abuse reports, which may include your identifying information;

• (h) affiliates and subsidiaries that we may establish, which will use the information consistently with this Policy; and

• (i) any other party to whom you direct or consent to disclosure.

9.1 No disclosure for independent marketing.

We do not disclose your personal information to a third party for that party's own independent marketing purposes without your consent.

10. SELLING, SHARING, AND TARGETED ADVERTISING

10.1 We do not sell personal information for money.

We do not sell your personal information in exchange for monetary consideration, and we have not done so.

10.2 Sharing and targeted advertising.

Certain state privacy laws define "sale," "sharing," and "targeted advertising" broadly enough to cover the use of analytics and advertising technologies that transmit identifiers or activity data to a third party for cross context behavioral advertising, even where no money is exchanged. To the extent our use of such technologies constitutes sharing, selling, or processing for targeted advertising under those laws, you may opt out at any time by:

• (a) using the cookie preference tool available on the Service and rejecting marketing and analytics technologies;

• (b) following the "Do Not Sell or Share My Personal Information" link where it appears on the Service;

• (c) transmitting a recognized opt out preference signal, such as the Global Privacy Control, from your browser, which we honor as a valid opt out request for the browser and device from which it is sent, as described in Section 20; or

• (d) emailing privacy@dusted.io with the subject line "Opt Out of Sale or Sharing."

10.3 Sensitive information.

We do not sell or share sensitive personal information, and we do not use or disclose sensitive personal information for purposes that would give rise to a right to limit its use under California law.

10.4 Minors.

We do not knowingly sell or share the personal information of any person under the age of eighteen, and the Service is not directed to or available to persons under that age.

11. PUBLIC CONTENT AND COMMUNITY FEATURES

11.1 Public by default.

Dusted is a public professional platform. Unless you use a control that we make available to restrict visibility, your profile, the work you publish, the context and commentary you provide, and your community activity are visible to all users and to anyone on the internet, including people who do not have a Dusted account.

11.2 Consequences of publication.

Content that you make public may be viewed, linked to, quoted, summarized, screenshotted, indexed, cached, archived, and analyzed by third parties, including search engines, artificial intelligence systems, archiving services, aggregators, researchers, recruiters, competitors, and journalists. We cannot control, monitor, prevent, or reverse those activities, and we cannot retrieve or delete copies that a third party has made. Removing content from the Service does not remove copies held elsewhere.

11.3 Take care what you publish.

Please consider carefully what you publish. Do not publish confidential information belonging to an employer or client, personal information about other people, unreleased work, or anything you would not wish to be permanently public. The Terms of Service sets out your responsibilities in this regard.

11.4 Nonpublic communications.

Direct messages and other nonpublic communications are not visible to the general public but are accessible to the recipients you select and to us for the purposes described in this Policy, including support, security, moderation, and legal compliance. They are not encrypted end to end. Do not transmit sensitive information through them.

11.5 Profile visibility controls.

We may make additional privacy and visibility controls available over time. Where a control exists, it is described in your account settings. Visibility controls operate prospectively and do not affect copies already made.

12. YOUR PRIVACY CHOICES

12.1 Account and profile.

You can review and update most of the information in your account and profile at any time through your account settings, including your name, professional details, links, and the content you have published. You can delete individual items of content and can close your account entirely.

12.2 Communications.

You can unsubscribe from marketing emails using the link in any such message or through your notification settings. You cannot opt out of transactional and administrative messages while you maintain an account. If you have consented to text messages, you can opt out by replying STOP.

12.3 Cookies and tracking.

You can manage cookies and similar technologies as described in Section 8.3.

12.4 Third party authentication.

You can disconnect an authentication provider through your account settings or through the provider's own controls, although doing so may affect your ability to sign in.

12.5 Voice features.

Voice input is optional. You can use the AI assistant by typing instead, decline or withdraw microphone permission through your browser or device settings, end a voice session at any time, and delete individual recordings and transcripts through your account settings or by writing to privacy@dusted.io.

12.6 Account closure.

You can close your account through your account settings or by writing to privacy@dusted.io. Closure removes your profile and published content from public display in accordance with Section 17, subject to the retention permitted by that Section and by the Terms of Service.

13. YOUR RIGHTS UNDER UNITED STATES STATE PRIVACY LAWS

13.1 Rights available.

Depending on the state in which you reside and subject to the exceptions and verification requirements of the applicable law, you may have the right to:

• (a) know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection and use, and the categories of third parties to which we disclose it;

• (b) obtain a copy of the personal information you provided to us in a portable and, where technically feasible, readily usable format;

• (c) correct inaccurate personal information that we maintain about you;

• (d) request the deletion of personal information we have collected from you;

• (e) opt out of the sale or sharing of personal information and of processing for targeted advertising, as described in Section 10;

• (f) opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, which we do not conduct;

• (g) limit the use and disclosure of sensitive personal information, which we do not use or disclose in a manner that triggers this right;

• (h) obtain a list of the specific third parties to which we have disclosed personal information, where the applicable state law provides that right; and

• (i) not be subjected to unlawful discrimination for exercising any of these rights.

13.2 States covered.

These rights are provided under the privacy laws of the states that have enacted them, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, and any other state whose comprehensive privacy law applies to us. The specific rights available to you, and the exceptions that apply, are determined by the law of your state of residence.

13.3 Limits on deletion.

We may decline a deletion request, in whole or in part, where retention is permitted or required by law, including where the information is necessary to complete a transaction, provide a service you requested, detect or prevent fraud or security incidents, comply with a legal obligation, exercise or defend a legal claim, maintain the integrity of the Service, or engage in internal uses reasonably aligned with your expectations. Where content you published has been viewed, copied, quoted, or indexed by others, deletion from the Service does not remove those copies.

13.4 Nondiscrimination.

We will not deny you access to the Service, charge you a different price, provide a different level or quality of service, or retaliate against you because you exercised a privacy right. We do not offer financial incentives in exchange for personal information.

13.5 Authorized agents.

You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your own identity directly with us and to confirm that you granted the agent permission.

14. HOW TO SUBMIT A REQUEST, VERIFICATION, AGENTS, AND APPEALS

14.1 How to submit a request.

You may submit a privacy request by emailing privacy@dusted.io with the subject line "Privacy Request," by using any request form or preference tool available on the Service, or by writing to us at the address in Section 23. Please describe the right you wish to exercise and provide enough information for us to locate your records, including the email address associated with your account.

14.2 Verification.

To protect your information, we will take reasonable steps to verify your identity before acting on a request. Verification typically involves confirming control of the email address associated with your account and may involve matching additional information you provide against our records. We may request additional information where a request concerns sensitive information or a large volume of records. If we cannot verify your identity, we will decline the request and explain why.

14.3 Response timing.

We will acknowledge a request promptly and will respond within the period required by applicable law, which is generally forty five days from receipt of a verifiable request, extendable by an additional forty five days where reasonably necessary and where we notify you of the extension. Requests to opt out of sale, sharing, or targeted advertising are actioned within fifteen business days. Where the applicable law of your jurisdiction sets a different period, we will comply with that period.

14.4 Fees and frequency.

We do not charge a fee to respond to a request unless the request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline to act, and will explain our reasons. Applicable law may limit the number of requests you may make within a twelve month period.

14.5 Appeals.

If we decline your request, in whole or in part, you may appeal that decision by replying to our response or by emailing privacy@dusted.io with the subject line "Privacy Appeal" within a reasonable period. We will review the appeal and inform you in writing of our decision and the reasons for it within the period required by applicable law, generally forty five or sixty days depending on your state of residence. If your appeal is denied, we will provide information about how you may contact your state attorney general or other supervisory authority to submit a complaint.

14.6 California specific disclosures.

California residents may request the categories of personal information disclosed for a business purpose in the preceding twelve months, together with the categories of recipients, and may request the specific pieces of personal information we hold. The categories are set out in Sections 4 and 9. California residents may also request information under California Civil Code section 1798.83 regarding disclosures to third parties for direct marketing purposes; as stated in Section 9.1, we do not make disclosures of that kind.

15. NOTICE TO INDIVIDUALS IN THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM, AND SWITZERLAND

15.1 Application.

This Section applies if you are located in the European Economic Area, the United Kingdom, or Switzerland. For the personal data described in this Policy, Dusted LLC is the controller. Where you upload content containing personal data about other individuals, you act as the controller of that data and we act as your processor or as a separate controller depending on the circumstances, as described in the Terms of Service.

15.2 Legal bases.

We process personal data on the following legal bases:

15.3 Your rights.

Subject to the conditions and exceptions of applicable law, you have the right to request access to your personal data; to request rectification of inaccurate data; to request erasure; to request restriction of processing; to object to processing carried out on the basis of legitimate interests, including processing for direct marketing, which we will cease on objection; to data portability in respect of data you provided to us and that we process by automated means on the basis of consent or contract; to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal; and not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

15.4 Exercising your rights and complaints.

You may exercise these rights by contacting privacy@dusted.io. You also have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or the place of the alleged infringement, or with the Information Commissioner's Office in the United Kingdom or the Federal Data Protection and Information Commissioner in Switzerland. We would appreciate the opportunity to address your concern before you approach a supervisory authority.

15.5 Retention and automated decisions.

We retain personal data for the periods described in Section 17. We do not carry out automated decision making that produces legal effects concerning you or that similarly significantly affects you.

15.6 Provision of data.

Provision of the information necessary to create and operate an account is required in order to use the Service, and if you do not provide it we cannot provide the Service to you. All other information is provided at your option.

16. INTERNATIONAL DATA TRANSFERS

16.1 Where information is processed.

Dusted is established in the United States, and the Service is hosted and operated there. Personal information that we collect is transferred to, stored in, and processed in the United States and may be processed in other countries where we or our service providers maintain operations. Data protection law in those countries may differ from the law of your country of residence.

16.2 Safeguards.

Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland to a country that has not been recognized as providing an adequate level of protection, we implement an appropriate transfer mechanism, which is generally the Standard Contractual Clauses adopted by the European Commission, together with the United Kingdom International Data Transfer Addendum or the United Kingdom Addendum where applicable, and we carry out a transfer risk assessment and apply supplementary technical, organizational, and contractual measures where appropriate. Where we rely on a different mechanism, including your explicit consent or the necessity of the transfer for the performance of a contract with you, we will do so in accordance with applicable law. You may request a copy of the relevant transfer mechanism, with commercial terms redacted, by contacting privacy@dusted.io.

16.3 Your public content.

Content that you publish publicly is by its nature accessible worldwide. Publishing content publicly involves a transfer of that content to every jurisdiction from which it can be accessed, and no transfer mechanism can limit that consequence.

17. RETENTION OF PERSONAL INFORMATION

17.1 Approach.

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. In determining the appropriate period, we consider the volume, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, whether we can achieve those purposes by other means, our legal and contractual obligations, and the applicable limitation periods for legal claims.

17.2 Indicative periods.

The following periods are indicative and may vary depending on the circumstances:

17.3 Legal holds.

Where we receive notice of an actual or anticipated legal claim, investigation, or regulatory inquiry, we may suspend the deletion of relevant information until the matter is resolved.

18. SECURITY OF PERSONAL INFORMATION

18.1 Our measures.

We maintain administrative, technical, physical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and loss. These measures include encryption of data in transit, encryption of data at rest where appropriate, access controls based on the principle of least privilege, authentication requirements for administrative access, network and application monitoring, logging, vulnerability management, secure development practices, contractual security commitments from our service providers, and internal policies and training.

18.2 No guarantee.

No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of personal information. You are responsible for maintaining the confidentiality of your credentials, for enabling multifactor authentication where available, and for notifying us at security@dusted.io if you believe your account has been compromised.

18.3 Incident notification.

If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities to the extent and within the time required by applicable law.

19. CHILDREN'S PRIVACY

The Service is intended exclusively for working professionals aged eighteen and over. We do not direct the Service to children, do not knowingly collect personal information from any person under the age of eighteen, and do not knowingly sell or share the personal information of any such person. If we learn that we have collected personal information from a person under the age of eighteen, we will delete that information and terminate the associated account. If you believe that a person under the age of eighteen has provided personal information to us, please contact privacy@dusted.io so that we can take appropriate action. You must not upload content that contains the personal information of a child.

20. DO NOT TRACK AND GLOBAL PRIVACY CONTROL SIGNALS

Some browsers transmit a Do Not Track signal. Because no common industry standard for interpreting that signal has been adopted, the Service does not respond to it. We do, however, recognize and honor the Global Privacy Control and other opt out preference signals that applicable law requires us to honor. When we receive such a signal from your browser or device, we treat it as a request to opt out of the sale and sharing of personal information and of processing for targeted advertising for that browser or device. Because a preference signal is associated with a specific browser or device rather than with you as an individual, you should transmit it from each browser and device you use, and you may also submit an opt out request that applies to your account as described in Section 10.2.

21. ADDITIONAL STATE DISCLOSURES

21.1 Nevada.

Nevada law permits residents of Nevada to direct a covered operator not to sell certain covered information. We do not sell covered information as that term is defined under Nevada law. Nevada residents may nonetheless submit a request to privacy@dusted.io.

21.2 Colorado, Connecticut, and other universal opt out states.

Where the law of your state requires us to recognize a universal opt out mechanism, we honor recognized mechanisms in accordance with Section 20.

21.3 Texas and Oregon.

Residents of Texas and Oregon may exercise the rights described in Section 13, and residents of Oregon may request a list of the specific third parties to which we have disclosed personal data. Requests may be submitted as described in Section 14.1.

21.4 Washington and Nevada health data.

We do not collect, process, or sell consumer health data as that term is defined under the Washington My Health My Data Act or the comparable law of Nevada, and the Service is not designed to receive information of that kind. Please do not upload health information about yourself or any other person.

21.5 Biometric identifiers and voice recordings.

We do not collect or process biometric identifiers or biometric information as those terms are defined under the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, or comparable law. We do not use facial recognition technology and do not derive facial geometry from photographs. If you use the voice feature described in Section 3.5, we record and transcribe your speech in order to operate that feature, but we do not extract, store, or compare a voiceprint or other identifier template from the recording, do not use speaker recognition, and do not use your voice to identify or authenticate you or to infer characteristics about you. We do not sell or share voice recordings, and we do not disclose them other than to the service providers that process them on our behalf.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Policy from time to time to reflect changes in our practices, in the Service, or in applicable law. When we make a change, we will revise the Effective Date at the top of this Policy and post the updated version on the Service. If we make a material change, we will provide additional notice, which may include emailing the address associated with your account or presenting a notice within the Service, before the change takes effect, and where applicable law requires your consent to a change, we will obtain that consent. We encourage you to review this Policy periodically. Your continued use of the Service after an updated Policy takes effect indicates that you are aware of the updated Policy.

23. HOW TO CONTACT US

If you have any question, concern, or complaint regarding this Policy or our handling of personal information, or if you wish to exercise a privacy right, please contact us:

Dusted LLC
Attention: Privacy
35 Miller Ave, Unit #615
Mill Valley, California 94941
United States
Email: privacy@dusted.io

For security matters, contact security@dusted.io. For general support, contact support@dusted.io. For other legal notices, contact legal@dusted.io. We will respond to your inquiry within a reasonable period and, where a legal deadline applies, within the period that the applicable law requires.

This Privacy Policy is incorporated into and forms part of the Dusted Terms of Service.

Dusted LLC | 35 Miller Ave, Unit #615, Mill Valley, California 94941 | dusted.io