Crystal Ball Insight Privacy Policy
Last modified: 1 March 2023
​
Introduction
Crystal Ball Insight Ltd. (the "Company," "we," “us,” or “our”) respect your privacy and are committed to protecting it through our compliance with this “Privacy Policy” or “Policy.”
This Policy describes the types of information we may collect from you or that you may provide when you visit our website crystalballinsight.com, and/or use our Crystal Ball software (collectively, the "Platform") and our practices for collecting, using, maintaining, protecting, and disclosing that information.
This Policy applies to information we collect:
-
On the Platform.
-
In email, text, and other electronic messages between you and the Company (whether on or off the Platform).
-
Through APIs or injectable code you download/copy from the Platform.
It does not apply to information collected by:
-
Us offline or through any other means, including on any other website operated by Company; or
-
Any third party.
Our other websites and apps and these other third parties may have their own privacy policies, which we encourage you to read before providing information on or through them. Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it.
IF YOU DO NOT AGREE WITH OUR POLICIES AND PRACTICES, DO NOT REGISTER WITH, ACCESS, OR USE THE PLATFORM. BY REGISTERING WITH, ACCESSING, OR USING THE PLATFORM, YOU AGREE TO THIS PRIVACY POLICY.
This Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Platform after we revise this Policy means you accept those changes, so please check the policy periodically for updates.
​
Children Under the Age of 16
Our Platform is not intended for children under 16 years of age. No one under age 16 may provide any personal information to or on the Platform. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on the Platform, register on the Platform, make any purchases through the Platform, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at contact@crystalballinsight.com.
Information We Collect About You and How We Collect It
We collect several types of information from and about users of the Platform, including information:
-
By which you may be personally identified, such as name, e-mail address, and any other identifier by which you may be contacted online or offline ("personal information"); and/or
-
About your internet connection, the equipment or profile you use to access the Platform, and usage details.
We collect this information:
-
Directly from you when you provide it to us.
-
Automatically as you navigate through the Platform. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.
-
From third parties, for example, our business partners or third-party profiles you connect to the Platform (such as Google).
Information You Provide to Us
The information we collect on or through the Platform may include:
-
Information that you provide by filling in forms on the Platform. This includes information provided at the time of registering to use the Platform, subscribing to our service, or requesting further services.
-
We may also ask you for information when you report a problem with the Platform.
-
Records and copies of your correspondence (including email addresses), if you contact us.
-
Your responses to surveys that we might ask you to complete for research purposes.
-
Details of transactions you carry out through the Platform and of the fulfillment of your services. You may be required to provide financial information before subscribing to certain services through the Platform.
​
Information We Collect Through Automatic Data Collection Technologies
As you navigate through and interact with the Platform, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
-
Details of your visits to the Platform, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Platform.
-
Information about your computer and internet connection, including your IP address, operating system, and browser type.
We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).
The information we collect automatically is only statistical data and does not include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve the Platform and to deliver a better and more personalized service, including by enabling us to:
-
Estimate our audience size and usage patterns.
-
Store information about your preferences, allowing us to customize the Platform according to your individual interests.
-
Recognize you when you return to the Platform.
The technologies we use for this automatic data collection may include:
-
Cookies (or browser cookies).
-
A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of the Platform. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to the Platform.
-
-
Web Beacons.
-
Pages of our the Platform and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity). We do not collect personal information automatically, but we may tie this information to personal information about you that we collect from other sources or you provide to us.
-
Third-Party Information Collection
When you use the Platform, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include:
-
Analytics companies.
-
Your Internet service provider.
-
Our payment processor (Bluesnap).
-
Our service provider hosting the Platform.
These third parties may use tracking technologies to collect information about you when you use the Platform. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites, apps, and other online services websites. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
How We Use Your Information
We use information that we collect about you or that you provide to us, including the following “Business Purposes”:
-
To present the Platform and services to you.
-
To provide you with information that you request from us.
-
To fulfill any other purpose for which you provide it.
-
To provide you with notices about your account/subscription, including expiration and renewal notices.
-
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
-
To notify you about changes to the Platform or any services we offer or provide through it.
-
To allow you to participate in interactive features on the Platform.
-
Notify you when Platform updates are available.
-
For any other legitimate business purposes relating to the Platform or our legitimate interests.
-
For any other purpose with your consent.
The Company will only process personal information for Business Purposes. We may use outside services to help us with accomplishing the Business Purpose; a list of outside services/outside service providers is available in Addendum B.
We do not currently use the information we collect to display advertisements.
Disclosure of Your Information
We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose personal information that we collect, or you provide as described in this privacy policy:
-
To our subsidiaries and affiliates.
-
To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
-
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by the Company about the Platform users is among the assets transferred.
-
To fulfill the purpose for which you provide it.
-
For any other purpose disclosed by us when you provide the information.
-
With your consent.
-
Crystal Ball use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
We may also disclose your personal information:
-
To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
-
To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.
-
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
Choices About How We Use and Disclose Your Information
We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:
-
Tracking Technologies and Advertising.
-
You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Platform may then be inaccessible or not function properly.
-
-
Promotional Offers from the Company.
-
If you do not wish to have your email address used by the Company to promote our own or third parties' products or services, you can opt-out by logging into the Platform and adjusting your user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an email stating your request to contact@crystalballinsight.com. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions. This opt out does not apply to information provided to the Company as a result of service experience or other transactions.
-
-
Targeted Advertising.
-
We do not control third parties' collection or use of your information to serve interest-based advertising. However these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.
-
Accessing and Correcting Your Information
You can review and change your personal information by logging into the Platform and visiting your account profile page.
You may also send us an email at contact@crystalballinsight.com to request access to, correct or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
Your California/EU Privacy Rights
If you are a California resident or an EU resident, California law or EU law may provide you with additional rights regarding our use of your personal information. To learn more about your California/EU privacy rights, please review our Addendum A.
Data Security
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions will be encrypted using SSL technology.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the Platform. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Platform.
Changes to Our Privacy Policy
It is our policy to post any changes we make to our privacy policy on this page with a notice that the privacy policy has been updated on the Platform home page. If we make material changes to how we treat our users' personal information, we will notify you by email to the primary email address specified in your account and/or through a notice on the Platform home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting the Platform and this privacy policy to check for any changes.
Contact Information
To ask questions or comment about this privacy policy and our privacy practices, contact us at:
ADDRESS: Ben Gurion 38 St, Ramat Gan Israel
EMAIL ADDRESS: contact@crystalballinsight.com
or via our toll-free number: +972-528822812
Addendum A
CCPA & GDPR Privacy
​
This Addendum A for California Residents and EU Residents supplements the information contained in Company's Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California or the European Union ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and the General Data Protection Regulation (GDPR), and any terms defined in the CCPA or GDPR have the same meaning when used in this Addendum.
Information We Collect
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("personal information") as further described in our Privacy Policy. We obtain the categories of personal information listed below as described in our Privacy Policy. In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:
​
​
​
​
​
​
Sharing Personal Information
We may disclose your personal information to a third party for a business purpose as described in our Privacy Policy. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
Disclosures of Personal Information for a Business Purpose
In the preceding twelve (12) months, Company has not disclosed personal information for a business purpose.
Sales of Personal Information
In the preceding twelve (12) months, we have not sold personal information.
​
Data Processing Agreement.
We drafted and published a Data Processing Agreement in accordance with Article 28 of the GDPR for signature with our customers who are subject to the GDPR.
​
DPA It is available here:
​
Therefore, if you are a customer subject to the GDPR or who need a DPA for a different reason, please download it, sign it and return it signed to contact@crystalball.pro
Security.
Crystal Ball is ISO 27001 certified.
What we use your Personal Information For
The table below explains what we use (process) your personal information for and our reasons for doing so:
The above table does not apply to special category personal information, which we will only process with your explicit consent.
Your Rights Under the CCPA.
You have the right under the CCPA and certain other privacy and data protection laws, as applicable, to exercise free of charge, your:
-
Right to Know. You have the right to request information about: (a) the categories of personal information we have collected about you, (b) the categories of sources from which we collected the personal information, (c) the purposes for collecting the personal information, (d) the categories of third parties with whom we have shared your personal information, and (e) the purpose for which we shared your personal information. You may also request information about the specific pieces of personal information we have collected about you.
-
Right to Delete. You have the right to request that we delete the personal information that we have collected from you.
-
Right to Opt-Out. You have the right to opt-out of the sale of your personal information.
We will not discriminate against you, in any manner prohibited by applicable law, for exercising these rights.
​
We will endeavor to respond to your request within forty-five (45) days of receiving your request or notify you that we need additional time to process your information.
Deletion Request Rights
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
-
Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
-
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
-
Debug the Platform to identify and repair errors that impair existing intended functionality.
-
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
-
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
-
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
-
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
-
Comply with a legal obligation.
-
Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
How to Exercise Your Rights
If you would like to exercise any of your rights as described in this Addendum, please:
-
Call us, toll-free, at +972-528822812; or
-
Email us at contact@crystalballinsight.com.
Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period. If you choose to contact directly by email, phone, or in writing, you will need to provide us with:
-
Enough information to identify you (e.g., your full name, address, and customer or matter reference number);
-
A description of what right you want to exercise and the information to which your request relates.
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collect information or is someone authorized to act on such person’s behalf. Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.
Your Rights Under the GDPR