RISA Labs, Inc. Privacy Policy

This privacy policy (the “Privacy Policy”) describes how RISA Labs, Inc.. and all of its subsidiaries (“RISA Labs, Inc.,” “we,” “our,” or “us”) collects, uses, and shares your information and your rights with respect thereto. This Privacy Policy only applies to the information gathered from or about you through your use of RISA Labs, Inc..com (“RISA Labs, Inc. Main Site”) and any other RISA Labs, Inc. websites or service tools that specifically links to this Privacy Policy, including information collected from your registration for or use of products and services that may be available through our Site (“B2B Sites” and, together with the RISA Labs, Inc. Main Site are hereinafter the “Sites”).

By using our Sites, you are agreeing to the terms of this Privacy Policy. Please carefully review this Privacy Policy and the Terms of Use before you use our Sites, as your use of any of our Sites is subject to these information collection and use practices.

Services and products available through the B2B Sites are subject to explicit terms and conditions in underlying agreements and this Privacy Policy does not supersede or replace those agreements.

Type of Information Collected

Personal Information: For all Sites, any information that can be linked to you or used to identify you including, but not limited to:

• your name
• your email address
• your home or work address
• your telephone number
• your place of work
• your job title

Employment Information: any information that can be linked to you or used to identify you while applying for, obtaining, or terminating employment with RISA Labs, Inc.. Workday is the third party vendor that is utilized for this purpose, for more information see the Workday Privacy Statement.

Organization Specific Information: For B2B Sites, “Business Information” means any information that can be linked to your organization or used to verify an individual user’s business relationship with an organization including, but not limited to:

• business name
• business address
• business telephone number
• business Tax ID number, or SSN if used as a business identifier

Authentication Specific Information: For B2B Sites, “Authentication Information” means any information that is collected in the process of verifying a user’s identity and such user’s access to products and services available in the B2B Sites.

• ReCAPTCHA: we may use reCAPTCHA v3, a service offered by Google to protect our website and forms from spam, fraud, abuse, and automated extraction of our data Users are subject to Google’s Privacy Policy and Terms of Use. reCAPTCHA works by collecting hardware and software information to send to Google for analysis. This information is not used for personalized advertising.
• Multi-Factor Authentication: we may use Google Authenticator, an application offered by Google to protect our products and services that require user authentication, by adding a second step of verification when a user signs in. By using this service, Users are subject to Google’s Privacy Policy and Terms of Use.

Other Data: RISA Labs, Inc., or third party partners, may also collect “Other Data” that doesn’t directly identify you. To the extent that the Other Data does specifically identify you, we will treat it as personal information and protect it as such.

Other Data includes, but is not limited to:

• System Data
• Device Fingerprint Identification (including IP Address)
• Location Based Services

How We Collect Information

B2B Sites

User and Organization Verification: in certain B2B Sites, the information collected throughout registration processes is used to validate a user’s identity, confirm existence of an organization, and validity of a business relationship between an organization and user(s). RISA Labs, Inc. may use non-US based resources employed by RISA Labs, Inc. and third party vendors to collect and/or verify information during this process. Additional Privacy Notices for our vendors are included here: LexisNexis Privacy Policy, ImageNet Privacy Policy.

• User Verification: this process is completed when a user registers for access to certain B2B Sites.
• Organization Verification: this process is completed when a user registers for access to certain B2B Sites and requests to also register an organization or be added as an administrator to an existing organization. Additional information may be required to complete the verification process.

Use of Cookies & Similar Technologies in all Sites

We may use Cookies to collect certain information related to your use of our Site, which may include Personal Information. “Cookies” are small data files that we send to your computer when you visit our Site that help us customize your visit to our Site based on your preferences. Cookies enable our Site to recognize you or your computer when you return to our Site. We may utilize third parties to send and manage Cookies. For more information, reference the Cookie Banner on RISA Labs, Inc. Main Site, or the RISA Labs, Inc. Cookies & Preferences Guide.

In general, we use five different types of cookies:

• Strictly Necessary Cookies
• Functional Cookies
• Performance Cookies
• Targeting Cookies
• Social Media Cookies

Opting Out of Cookies & Similar Technologies

There are multiple ways to opt-out of cookies. However, blocking some cookie types may impact your experience of the Sites and the services we are able to offer.

• Browser Settings: you can opt out of cookies on your browser. Every browser is different, so it is important to check the instructions provided by the browser.
• Preference Settings on RISA Labs, Inc. Main Site: you can opt out of applicable cookies when visiting RISA Labs, Inc. Main Site, by reviewing and acknowledging some or all cookies we utilize, which is available in our cookie consent banner. This opt-out feature is only applicable for RISA Labs, Inc. Main Site and does not affect Cookies used in the B2B Sites.
• Data Analytics Tools: in addition to Cookies, RISA Labs, Inc. uses various third-party analytics tools, including but not limited to Google Analytics, to track Cookies and/or gather information about you and your use of RISA Labs, Inc. Main Site. RISA Labs, Inc. uses information summarized from such analytics tools to aid in making decisions to improve our ability to offer you services and RISA Labs, Inc. Main Site’s visitors’ experiences, including decisions on the selection and presentation of content, images, navigation cues and interactive media. If, at any time, you wish to opt out of RISA Labs, Inc. Main Site’s collection of your information through its use of Google Analytics, you may visit this link to opt-out. To request more information about our use of other third-party analytics tools, Contact Us.
• B2B Site Opt-Out: Opt-out functionality utilized by the Cookie and Preference Banner on the RISA Labs, Inc. Main Site is not presently supported in any B2B Sites. To opt-out of cookies on a B2B Site, follow the instructions in the Individual Preferences section below, and request a limitation on the type of cookies you desire. All requests will be processed in accordance with the Individual Rights and Individual Preferences Section as applicable.
• Net Promotor Survey (NPS): you can opt out of Net Promotor Surveys when prompted within our B2B sites. When opting out of NPS, we do not collect additional information for this purpose. This opt-out feature is only applicable to the B2B sites. For more information about the collection of NPS information, see the InMoment Privacy Policy.

Opt-Out of Sale, Sharing, and/or Targeted Advertising

• U.S. Residents: RISA Labs, Inc. sells and shares Personal Information or processes Personal Information for targeted advertising purposes (as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act “CCPA”). In the past twelve months, we have sold or shared the categories of Personal Information as listed in this Privacy Policy. To exercise your rights to opt-out of the sale and/or sharing of your Personal Information or opt out of the use of your Personal Information for targeted advertising (if those rights are afforded to you under U.S. State law), see the Individual Rights and Individual Preferences sections below to determine what applies to you or please access the below link.
• As a California resident, you have a right to direct RISA Labs, Inc. not to sell your Personal Information to third parties. To initiate your request, please click the following: Do Not Sell or Share My Personal Information.
• Notice for California Residents: Individuals who reside in California and have provided their Personal Information to us can request, once per calendar year, information about our sharing of certain categories of Personal Information to third parties, for direct marketing purposes. Such requests should be submitted to us using one of the methods listed in the Contact Us section. California residents can find more information on exercising their rights by visiting the California Consumer Privacy Act (CCPA) | State of California - Department of Justice - Office of the Attorney General site. The foregoing includes the following rights:some text
  • The right to know about the personal information a business collects about them and how it is used and shared;
  • The right to delete personal information collected from them (with some exceptions);
  • The right to opt-out of the sale or sharing of their personal information;
  • The right to non-discrimination for exercising their CCPA rights;
  • The right to correct inaccurate personal information that a business has about them; and
  • The right to limit the use and disclosure of sensitive personal information collected about them.

How We Use and Disclose Your Personal Information

RISA Labs, Inc. does not sell, rent, or license your Personal Information. Except as described in this Privacy Policy, will not disclose your Personal Information to unaffiliated third parties without your consent.

We may use and disclose your Personal Information for the following purposes unless prohibited by law:

• to operate, improve, correct, and maintain our Sites and products and services
• to perform the functions and provide the goods and services you request
• to facilitate and improve your experience on our Sites
• for identity verification, validation, or authentication
• to contact you about our Sites and new features and enhancements
• to market our new products, services, or events
• for billing, account management, and other administrative matters
• to investigate and help prevent security issues, misuse, fraud, and abuse
• to share it with and transfer our rights in it to any successor entity to RISA Labs, Inc., which entity would have the right to use and disclose the information as RISA Labs, Inc. did prior to such transfer
• if we believe that any law or regulation requires us to do so
• to respond to a subpoena or governmental request
• as we deem advisable to protect our safety, rights, privacy or property, or that of others
• to enforce or respond to a possible violation of any law or regulation, this Privacy Policy, or our Terms of Use
• to third parties as contractually agreed to for B2B Sites,
• as otherwise permitted by this Privacy Policy or applicable law

Aggregated Data

We may aggregate and anonymize your Personal Information with other information that we have collected from other users so that you may no longer be able to be reasonably identified (“Aggregated Data”). By using our Site, you agree that we may use and disclose Aggregated Data for any purpose.

Individual Rights & Preferences

Individual Rights

Individuals can request to access, change, delete, restrict, or confirm the use of Personal Information that has previously been provided to us in any Site. To submit a request, follow the instructions in the Contact Us section below.

For your protection, we only fulfill requests for the Personal Information you have provided to us, that you identify in your request, and we may need to verify your identity before fulfilling certain requests. When permitted by law, we may charge an appropriate fee to cover the costs of responding to your request.

We will try to comply with your request as soon as reasonably practicable and consistent with applicable law. Please note that all individual rights may not be available under applicable law to all users of our services. To appeal our decision regarding your privacy request (to the extent these rights are provided to you by law), feel free to Contact Us.

If you would like to receive a copy of your Personal Information for purposes of transmitting it to another individual or entity, you must contact the source of the information.

Individual Preferences

At RISA Labs, Inc., we respect your individual preferences, and we provide options to express how much you wish to share with us and when and how you hear from us.

• Communication Preferences:some text
  • You can unsubscribe by clicking the unsubscribe link at the bottom of any of our electronic communications.
  • If you no longer wish to receive marketing-related emails you may opt-out by sending a request to us, following the instructions in the Updating Communication Preferences section below.
  • Note: if you choose to opt out of marketing related emails, we will continue to send communication that is strictly necessary for the use of our sites and services.
• Cookies & Similar Technologies:some text
  • For information on choices related to Cookies & Similar Technologies, see the Use of Cookies & Similar Technologies section above.
  • B2B Site Cookie Opt-Out: using one of the contact methods in the Contact Us section below, a request can be submitted to request a limitation on the type of cookies you desire. The following information is required from you to process your request:some text
    • Full name, aliases, or other names used
    • Current address
    • Telephone number and contact information so we may contact you if necessary
    • Any additional identifying information that would help us verify your identity
    • The type of request that you wish us to comply with (i.e., B2B Site Cookie Opt-Out, Cookie Type, etc.)

Other Notices

External Sites and Services

The appearance of external links to third-party or partner websites (“External Sites”) on the Site are being provided as a convenience only. A link to the External Site does not constitute an endorsement of the products, services, or opinions of use and we bear no responsibility for the accuracy, legality, or content of the linked External Site beyond the initial link. We do not control (or review, approve, monitor, or endorse) the External Site, nor do we make any representations or warranties with respect to External Sites. You may be subject to the External Site’s privacy policy and other terms and conditions when you leave our Site. We are not responsible or liable to you or to any party for any content, including advertising and products/services, made available from External Sites.

Any access to External Sites is at your own risk. You acknowledge and agree that we will not be liable, either directly or indirectly, for any damage or loss caused by or in connection with use of or reliance on any such External Sites.

User Locations

Our Sites are intended to be used only by users located within the continental United States, Guam, Alaska, and Hawaii. We do not intentionally monitor, profile, target, or offer our products and services to citizens of, and located in, the European Union.

Children Under the Age of 13

Our Sites are intended for use by individuals over the age of 18, and we do not direct or target children under the age of 13 for the collection of information.

We may lawfully acquire PHI from minors under the age of 18 as dependents on their parent, guardian, or subscriber health insurance plans. The PHI has been lawfully procured and is transmitted as prescribed in the agreements between the parties of that transaction. If this information is gathered without our knowledge, we will immediately delete and remove this information once discovered pursuant to applicable law.

Updates to Privacy Policy

This Privacy Policy is reviewed annually, or more frequently as the need may arise. We may update or change this Privacy Policy at any time as we deem necessary to reflect changes in our business practices, laws, regulations, or the industry. When we make changes to this Privacy Policy, we include the date of the update at the beginning of this Policy. If, at any time, you disagree with the Privacy Policy, you should discontinue your use of our Sites.

Updating Communication Preferences: if you no longer wish to receive marketing-related emails you may opt-out by sending a request to us using one of the contact methods listed below in the Contact Us section below (email or mail). The following information is required from you to process your Communication Preferences request:

1. Full name, aliases, or other names used
2. Current address
3. Telephone number and contact information so we may contact you if necessary
4. Any additional identifying information that would help us verify your identity
5. The type of request that you wish us to comply with (i.e., marketing opt-out)

Submitting a Privacy Rights Request: using one of the contact methods in the Contact Us section below, a request can be submitted to access, change, delete, restrict, or confirm the use of Personal Information that has previously been provided to us. The following information is required from you to process your Privacy Rights Request:

1. Full name, aliases, or other names used
2. Current address
3. Telephone number and contact information so we may contact you if necessary
4. Any additional identifying information that would help us verify your identity
5. The type of request that you wish us to comply with (i.e., access, change, delete, restrict, or confirm use)
6. The specific system of records, or a clear description of the record(s) including date range, subject matter, contacts, or persons involved, place records were created, applicable system of records, and other pertinent details. The description should be specific enough to help us locate the information you are seeking.
7. The applicable Site
8. A notarized statement or statement of perjury (see example Statement of Perjury below)
9. Your signature
10. Date of signature

Statement of Perjury: I declare under penalty of perjury under the laws of the United States of America that the foregoing is true and correct, and that I am the person named above and requesting access to my records, or records that I am entitled to request as the parent of a minor or the legal guardian of an incompetent, and I understand that any falsification of this statement is punishable under the provisions of 18 U.S.C. § 1001 by a fine, imprisonment of not more than five years, or both, and that requesting or obtaining any record(s) under false pretenses is punishable under the provisions of 5 U.S.C. § 552a(i)(3) by a fine of not more than $5,000.

Voluntary Disclosure

You may be asked to provide us with Personal Information when you contact us.

Contact Us

Questions or Feedback: If you have any questions about this Privacy Policy or our Site and its operations, please contact us at PrivacyOffice@risa.health or via mail at:

RISA Labs, Inc.
Compliance & Privacy Program
355 Bryant Street, Suite 403,
San Francisco, CA 94107

‍