Privacy policy
The website www.float.com (the “Website”) and Float online scheduling service (the “Service”) are made available by Pixel Paddock, LLC., a New York limited liability company (“Float”).
We respect your privacy and recognize your need for appropriate protection and management of your personal information.
Please read this Privacy Policy and Data Processing Agreement carefully to understand how your personal information is collected and used by us.
What information do we collect and why?
- To operate, maintain, and provide the Website and Service, including AI-enabled features, we and our sub-processors may use cookies, web beacons, and similar technologies to collect usage and technical information, we and our sub-processors may use “cookies”, “web beacons”, and similar devices to track your activities anonymously.
- Float does not use Customer Data or personal data from paid or enterprise accounts to train, fine-tune, or improve artificial intelligence models, except where such data has been aggregated and de-identified so that it cannot reasonably be associated with any individual or customer.
- During a Website visit, you may also elect to provide us with personal information, such as your name, team name, email, and a password, to create a free trial of the Service.
- Information that you upload during the use of the Service may include the name, email, photo of yourself or your colleagues or employees. The information is displayed to users of your Float account, including the account owner, administrators and team members, as well as anyone else to whom you provide log in credentials. You are responsible for the data that you and users authorized by you input to the Service and for the compliance of such data with applicable law, including but not limited to data protection laws.
- If you choose to subscribe to use the Service, we will ask you to provide credit card and account information in order to process your order. Financial information provided via our Website is transferred over a secure connection. We store a record of the payment transaction, including the last 4 digits of the credit card number, for account and billing purposes. We will not authorize the release of your personal or financial information to anyone not directly involved in processing the transaction. This information may be encrypted and stored for logging purposes in accordance with applicable regulatory requirements. Credit card numbers are used only for processing payments and are not used for any other purposes.
- As part of the Service, we use certain third party processors to process some or all of your personal information. Our sub-contractors (third party agents) consist of cloud service providers, email delivery service, digital behavioral analytics service, and help-desk software providers. As part of providing AI-enabled features, Float may also use third-party artificial intelligence service providers acting as sub-processors. Such providers process personal data solely on Float’s instructions and subject to data protection agreements consistent with applicable law.
- We have signed data processing contracts that comply with GDPR with each processor.
- Information Processed Through AI Features: If you use AI-enabled features of the Service, Float processes information you submit to those features, including prompts, inputs, files, and related metadata, as well as the outputs generated by such features (“AI Output”).
How do we use your personal information?
- Float does not sell, trade or rent your personal information to others. We will not disclose your personal information to others without your express permission, other than as set forth in this privacy policy. Float does not supplement the personal information provided by you with information collected from other sources.
- When you choose to provide us your email address, we may use it to reply to a message that you have sent to us. We may also use your email to contact you from time to time regarding updates or enhancements to the Float Service, or to our policies, or to send you other information that we feel may be of interest to you.
- To provide, operate, and maintain the Service, including AI-enabled functionality.
- To process Customer Data and generate AI Output at the direction of our Customers.
- To provide customer support and respond to inquiries.
- To monitor, prevent, and address security, fraud, or technical issues.
- To comply with applicable legal obligations.
How do we protect your information?
- We support AES 256-bit encryption and TLS 1.2 and one-way encrypt all passwords.
- Our Website and Service are hosted by Google Cloud Platform in the United States.
- Here is an overview of the steps we take to secure your data.
Data Processor/Controller
Pixel Paddock, LLC. is the “data controller” of its Prospects’, Users’ and Customers’ personal data, as detailed above. Accordingly, we assume the responsibilities of a data controller (solely to the extent applicable under law), as set forth in this Privacy Policy.
Pixel Paddock, LLC is the “data processor” of personal data contained in Customer Data, as submitted by our Customers and their Users to their Account’s boards, items and docs. We process such data on behalf of our Customer (who is the “data controller” of such data) this includes any Customer Data processed through AI-enabled features of the Service and in accordance with its reasonable instructions, subject to our Terms, our Data Processing Agreement (to the extent applicable) and other commercial agreements with such Customer.
Our Customers are solely responsible for determining whether and how they wish to use our Services, and for ensuring that all individuals using the Services on the Customer’s behalf or at their request, as well as all individuals whose personal data may be included in Customer Data processed through the Services, have been provided with adequate notice and given informed consent to the processing of their personal data, where such consent is necessary or advised, and that all legal requirements applicable to the collection, use or other processing of data through our Services are fully met by the Customer.
Our Customers are also responsible for handling data subject rights requests under applicable law, by their Users and other individuals whose data they process through the Services.
Automated Processing: Certain features of the Service use automated processing, including artificial intelligence, to generate suggestions, insights, or outputs based on Customer Data. These features do not produce legal or similarly significant effects concerning individuals. Customers retain control over how AI Output is reviewed and used.
Cookies
The Float Application uses certain monitoring and tracking technologies, such as cookies, beacons, pixels, tags, and scripts (collectively, “Cookies”). These technologies are used in order to provide, maintain, and improve our website and platform or any other website or webpage operated by us (the “Services”), to optimize our offerings and marketing activities, and to provide our visitors, customers and users (“you”) with a better experience (for example, in order to track users’ preferences, to better secure our Services, to identify technical issues, and to monitor and improve the overall performance of our Services).
The following table contains information on the types of Cookies used by our application.
Your rights
If you wish to exercise your privacy rights under applicable law (including the EU or UK GDPR, the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), or the Colorado Privacy Act (CPA)). Such rights may include – to the extent applicable to you:
- Right to data portability: We offer a number of ways for you to export your data, via both CSV and API formats. Here is a guide we’ve put together to help you navigate these processes.
- Right to object & right to rectify: All of your available personal data can be viewed and amended at any time via our web application or our API. You can also unsubscribe from our marketing emails by following the unsubscribe link at the bottom of the message. If you are unsure of the type or accuracy of personal data we have stored, you can email us at [email protected] and we’ll clarify, and where necessary, correct.
- Right to erasure: The account owner can delete your account from the account settings at any time. All your content will be deleted from our servers within 30 days. Individual people and project data can also be deleted at any time from within the app or via our API.
- AI-related inputs and outputs are retained and deleted in accordance with the same retention and deletion practices that apply to other Customer Data, unless a longer retention period is required by law.
- Prompt breach notification: You’ll be notified promptly of breaches involving your personal data per the GDPR requirements outlined in Art. 34. You can also monitor the status of our account-wide systems at any time from our live status page: http://status.float.com
If you are a GDPR-protected individual, you also have the right to lodge a complaint with the relevant supervisory authority in the EEA or the UK, as applicable.
If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law.
In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.