Grass - Privacy Policy
Last Modified: July 26, 2024
1. Introduction
Half Space Labs Limited d/b/a Wynd Labs™ (Wynd Labs
, we
, us
, or our
) operates the Grass™ web extension, dashboard application, desktop application, mobile application, and related hardware, including as made available through our website www.getgrass.io (the Website
, and together with our web extension, dashboard, desktop application, mobile application, and related devices, the Grass Services
) that permit users to participate in a Decentralized Peer-to-Peer Internet Networking Ecosystem that facilitates access to and use of web data (the Grass Network
).
The purpose of this Privacy Policy is to help you understand what types of personal information we collect, use, and disclose in connection with your access to and use of the Grass Services and participation in the Grass Network.
This Privacy Policy covers the following topics, which you can access by clicking the links below:
Unless you are based in the European Economic Area (EEA) or the United Kingdom (UK), by accessing or using the Grass Services or participating in the Grass Network, you agree to accept this Privacy Policy, including the terms and conditions of this Privacy Policy that relate to the ways that we collect, use, and disclose your personal information. If you are based in the EEA or the UK, please see below for our policies and procedures regarding how we process your personal data here.
You can withdraw your consent to our collection, use, or disclosure of your personal information by contacting our Privacy Officer using the contact information that is included in this Privacy Policy (see below). Please note that if you choose to withdraw your consent, we may not be able to provide you with certain services, products, communications, and opportunities, including access to and use of the Grass Services and/or participation in the Grass Network.
2. What is personal information?
Personal information is any information about, relating to, or that identifies a specific individual. Under certain laws that may apply to you, personal information may also include information that identifies a specific household or device.
3. Personal information that we collect
We may collect personal information from you based on the Grass Services that you elect to access and use. The personal information that we collect from you in connection with your use of the each of the Grass Services includes the following:
The types of personal information that we collect will depend on what personal information you choose to provide to us based on your interactions with us and the Grass Services and Grass Network.
4. Other information that we collect
In addition to the personal information that we collect from you, we collect information about your use of the Grass Services and participation in the Grass Network, including your device domain you use to access the Grass Services, the operating system of your device, your device settings, application IDs, the type and version of your browser, crash data and analytics, other device identifiers, and other information relating to the manner in which you access or use the Grass Services or participate in the Grass Network.
5. Use of your personal information
We use the personal information that we collect to provide you with the functionality, features, and communications that are available on and through the Grass Services and to enable us to manage, maintain, and develop our operations. For example, we may use your personal information for the following purposes:
Unless you are based in the EEA or UK, by consenting to our collection, use, and disclosure of your personal information on and through the Grass Services you allow us to fulfill the purposes for which we collect and use your personal information as described above.
For more information about how we use your personal information if you are based in the EEA or UK, including the legal bases we may rely on to process your personal information as an alternative to obtaining your consent, please see the EEA and UK section of this Privacy Policy.
6. Promotional and transactional communications
We will collect your consent prior to sending you promotional emails and other electronic messages (e.g., texts, direct messages), unless an exception to obtaining your consent applies under applicable laws. You will have an opportunity to opt-out or unsubscribe from receiving promotional messages from us at any time. Promotional messages include, but are not limited to, our newsletter and updates about our and our partners businesses, products, and services.
By using the Grass Services, you agree to receive transactional communications about your account and activities. For example, when you create an account or reset your password you may receive an email confirming the details of such activity. You may not opt-out of receiving these transactional communications.
7. Disclosure of personal information
We may disclose your personal information and other information in the manner and for the purposes that are described in the sections below.
Since we may disclose your personal information to third parties (including our service providers) as described in this Privacy Policy, your personal information may be collected, used, disclosed, and otherwise processed outside of your jurisdiction of residence. As such, your personal information may potentially be accessible to law enforcement and national security authorities of another jurisdiction where local laws provide for a different level of protection for personal information. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security agencies in those other countries may be entitled to access your personal information.
If you would like further information about our policies and practices regarding the transfer and storage of your personal information, including disclosures to third parties such as our service providers, please contact our Privacy Officer using the contact details below.
Unless you are based in the EEA or UK, by providing your personal information to us, you consent to our disclosure of this information to our service providers (and other third parties) as described in this Privacy Policy, including those that may be located outside of your jurisdiction of residence.
8. Aggregated data
We may disclose aggregated non-personal information and related usage information, which does not contain personal information that can identify you, with third parties, including our customers, clients, partners, advertisers, service providers, vendors, suppliers, and content providers
9. Retention of personal information
We do not keep your personal information forever. We will retain your personal information for as long as is reasonably necessary for us to complete our dealings with you, or as may be required by law, whichever is longer.
10. Security and protection of personal information
We endeavour to maintain commercially reasonable physical, technological, and procedural safeguards that are appropriate based on the sensitivity of the personal information in question. These safeguards are designed to prevent your personal information from loss and unauthorized access, collection, use, disclosure, copying, modification, disposal, or destruction.
Please advise our Privacy Officer immediately of any incident involving the loss of or unauthorized access to or disclosure of your personal information that is relevant to your use of the Grass Services.
11. Access to personal information
You can ask to access the personal information that we have about you. If you want to review, verify, delete or correct your personal information, please contact our Privacy Officer. We may request specific information from you to enable us to confirm your identity and right to access, as well as to search for and provide you with the personal information that we hold about you. If you require assistance in preparing your request, please contact our Privacy Officer.
Your right to access the personal information that we hold about you is not absolute. There are situations where applicable law allow or require us to refuse to provide some or all of the personal information that we hold about you. In addition, your personal information may have been destroyed, erased or made anonymous in accordance with our record retention practices. In the event that we cannot provide you with access to your personal information, we will endeavour to inform you of the reasons why, subject to any legal or regulatory restrictions.
If you are based in the EEA or the UK, you have other rights with respect to your access to and correction of the personal information we hold about you. Please see below for our policy on how we process your personal data.
12. Consent; withdrawal of consent
Unless you are based in the EEA or UK or you advise us otherwise, through the access and use of our website and Services, you have consented to the collection, use and disclosure of your personal information as explained in this Privacy Policy. For further information about how we process your personal information if you are based in the EEA or UK, including the legal bases we may rely on to process your personal information as an alternative to obtaining your consent, please see the EEA and UK section of this Privacy Policy.
13. Links to third party resources
The Grass Services may contain links to other websites that may be subject to less stringent privacy standards. These links are provided for your convenience only and you assume all risk for clicking these links to other websites. We cannot assume any responsibility for the privacy practices, policies or actions of the third parties that operate these websites. We are not responsible for how such third parties collect, use or disclose your personal information. You should review the privacy policies of these websites before providing them with personal information.
14. Cookies
We use cookies and tracking technologies that are similar to cookies. A cookie is a small file of letters and numbers that we may set on your device to store and sometimes track information about you. Cookies and similar technologies we use are designed for analytics. This allows us to distinguish you from other users of our Website. This also helps us to provide you with a good experience when you use our Website. We may use the following types of cookies on our Website:
15. Changes to this Privacy Policy
We may make changes to this Privacy Policy from time to time. These changes may be made as a result of changes to our legal obligations or the ways in which we collect, use, disclose, or otherwise process your personal information.
We will post an updated version of our Privacy Policy on our website when we make changes and may also notify you of the changes we have made if we are required to do so by applicable law. We encourage you to check this Privacy Policy for updates on a regular basis.
You agree that by continuing to use the Grass Services or participate in the Grass Network after an update to our Privacy Policy, you agree to accept and consent to the collection, use, and disclosure of your personal information as described in the updated version of the Privacy Policy.
16. Contact information
If you have any questions or concerns regarding this Privacy Policy, you should contact our Privacy Officer at privacy@wyndlabs.ai.
**If you choose to communicate with us via email, please be aware that email is not a 100% secure medium for sending any personal or confidential information to us. **
This section of the Privacy Policy includes information that is specific to how we process the personal information of users who are based in the EEA and the UK. For the purposes of the General Data Protection Regulation as it applies both in the EEA and the UK (GDPR
), Wynd Labs is a data controller and can be contacted using the details in section 16 of this Privacy Policy above. Wynd Labs is a ‘data controller’ subject to the GDPR only insofar as we are offering goods or services to individuals in the EEA / UK or where the Grass Services may be used to monitor individuals’ behavior as far as their behavior takes place in the EEA or UK.
Data controllers need a lawful basis to collect and use your personal data under the GDPR. In respect of the data processing undertaking by Wynd Labs, the relevant lawful bases on which we rely to process your personal data include:
We will keep your personal data for no longer than is necessary for the purposes for which it is processed. The length of time that personal data will be kept may depend on the reasons for which we are processing the data and on the applicable laws or regulations that the information falls under such as financial regulations, statutory limitation periods or any contractual obligation we might have.
If you request to receive no further contact from us, we will keep some basic information about you on our suppression list in order to avoid sending you unwanted materials in the future.
Data transfers outside of the EEA and UKIn the course of providing you with access to and use of the Grass Services, we may transfer your personal information outside of the EEA or UK, including to the United States. This means that your personal data will not have the automatic protection of data protection laws, including the GDPR, which apply in the EEA and UK. In these circumstances, to ensure that your personal data continues to have adequate protection when it is transferred outside of the EEA or UK, your personal data will only be transferred on one of the following bases:
appropriate safeguardsfor international transfers prescribed by applicable law (e.g., the standard data protection clauses adopted by the European Commission and, in the case of the UK, by the Information Commissioner’s Office); or
You can obtain more details of the protection given to your personal data when it is transferred outside the EEA / UK by contacting us using the details set out below.
Your rights in relation to your personal dataUnder the GDPR, you have the following rights in relation to our processing of your personal information. Please note that these rights are not absolute, and we may be entitled or obliged to refuse requests where exceptions or exemptions apply:
If you have given your consent and you wish to withdraw it, please contact us using the contact details set out above. Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services.
If you are not satisfied with how we are processing your personal information, you can make a complaint to a data protection supervisory authority in the UK (namely, the Information Commissioner’s Office, whose website is here: https://ico.org.uk ) or in the EU, including the data protection regulator in the EU country where you or your organization is located.
A list of data protection authorities in the EU are available here: https://edpb.europa.eu/about- edpb/about-edpb/members_en