Privacy Policy

 

Effective Date: December 1, 2023

Lettuce Financial Labs, Inc. (“Lettuce,” “our,” “we” or “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, store, use and distribute information through our software, website, documentation, and related services (together, the “Services”). Capitalized terms not defined in this Privacy Policy have the meaning as set forth in our website Terms of Use.

 

1. Consent

By using the Services, you consent to the use of your Personal Information as described in this Privacy Policy. You may not use the Services if you are not of legal age to form a binding contract (in many jurisdictions, this age is 18). Except as set forth in this Privacy Policy, your Personal Information will not be used for any other purpose without your consent. We do not sell your Personal Information to third parties, except as described herein or as permitted by law. You may withdraw your consent to our processing of your Personal Information at any time. However, withdrawing consent may result in your inability to continue using some or all of the Services.

US Clients Only. Our Services are not directed to anyone located outside of the United States of America. By using or continuing to use our Services, you are confirming that you are located within the United States and agreeing that you will not provide us Personal Data, or otherwise visit, access, or use our Services, if you are located outside of the United States. We do not monitor the behavior of persons (data subjects) located outside of the United States. If, through fraud, deceit, or other unauthorized or inadvertent use or disclosure, we receive information pertaining to individuals located outside of the United States, such individuals should contact us at privacy@lettuce.co. Upon verifying the information, we will immediately delete the unauthorized information from our systems and records.

 

2. Collection of Information

Personal Information

When registering for or using the Services, we may require or ask you to provide certain personally identifiable information (referred to below as your “Personal Account Information”). The Personal Account Information that we require you to provide in order to access the Services may include, but is not limited to, the following:

• Full Name
• Occupation/Profession
• Social Security Number
• Email Address
• Phone Number
• Personal Address
• Company Name
• Company Address
• Financial and billing information, such as billing name and address, banking information, and credit card number (“Billing Information”)

Your Personal Account Information and your Billing Information (together with Data, Diagnostic, Login, Usage and Analytics, and Generalized Geo-Location Information, as defined below, that may be used to identify, contact, or locate you individually) are collectively referred to as your “Personal Information.”

We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send. Any use of your Personal Account Information for these limited marketing purposes will comply with applicable laws. 

Data, Diagnostic & Login Information

You may be able to create, upload, publish, transmit, distribute, display, store or share information, data, text, graphics, video, messages or other materials using our Services (this is collectively referred to below as “Data”). Some of this Data may be stored and maintained on our servers. If you run into technical errors in the course of using the Services, we may request your permission to obtain a crash report along with certain logging information from your system documenting the error (“Diagnostic Information”). Such information may contain information regarding your Operating System version, hardware, browser version, and your email address, if provided. Additionally, certain login information may be maintained in a cookie stored locally on your personal computing device, i.e. not on a server, in order to streamline the login process (“Login Information”).

Usage and Analytics Information

As you use our Services, we may also collect information through the use of commonly-used information-gathering tools, such as cookies, log files, and Web beacons, each as further described below. These tools collect information about your interaction with our Services, including the resources that you access, pages viewed, how much time you spent on a page, and how you reached our website. We also log the details of your visits to our website and information generated in the course of using our website, such as mouse movements, clicks, page visits, text entered, how long you spent on a page, and other details of your actions on our website. Collectively, this information is referred to as “Usage and Analytics Information.”

‍Cookies

We use cookies to provide you with our Service, to personalize content and ads, and to provide you with the best experience possible on our website. For more information about our use of cookies, please see the section entitled “Cookie Policy” below.

Log Files

As is true of most websites, we gather certain information automatically to analyze trends in the aggregate and administer the Services. This information may include your Internet Protocol (IP) address (or the proxy server you use to access the World Wide Web), device and application identification numbers, your location, your browser type, your Internet service provider and/or mobile carrier, the pages and files you viewed, your searches, your operating system and system configuration information, and date/time stamps associated with your usage. Due to Internet communications standards, when you visit or use our websites and Services, we automatically receive the URL of the website from which you came and the website to which you go when you leave our website. This information is used to analyze overall trends, to help us improve the Services, to track and aggregate non-personal information, and to provide the Services. For example, we use IP addresses to monitor the regions from which customers and visitors navigate the Sites.

Web Beacons

We use web beacons alone or in conjunction with cookies to compile information about your usage of the Services and interaction with emails from us. Web beacons are electronic images or code embedded on our website that can recognize certain types of information on your computer, such as cookies, when you viewed a particular website or Service tied to the web beacon, and a description of a website or Service tied to the web beacon. For example, we may place web beacons in marketing emails that notify us when you click on a link in the email that directs you to one of our websites. We also use web beacons to operate and improve the Services and our email communications.

Geo-location

We do not use GPS technology to collect any information regarding your precise real-time geo-location while using the Services. However, we may use elements of your Usage and Analytics Information (such as your IP address) to determine your generalized location. This information is referred to as “Generalized Geo-Location Information.” Please be aware that some of our third party contractors may utilize applications that require location services. For additional information regarding our third party contractors, please see Section 12 below.

 

3. Use of Information

We use the information we collect in the following ways:

Personal Account Information

We use your Personal Account Information to manage your account, to provide the Services, to maintain our customer/visitor lists, to respond to your inquiries or provide feedback, for identification and authentication purposes, for service improvement, and to address issues like malicious use of the Services. We may also use your name, profession, email and/or phone number for limited marketing purposes, namely, to contact you to further discuss your interest in the Services, to enable you to refer other members to us, and to send you information about us or our partners. 

Billing Information

We use Billing Information to manage your account, to provide the Services, to check the financial qualifications of prospective customers and to collect payment for the Services.

Data, Diagnostic Information and Login Information

We use this information for the purpose of administering and improving our Services to you. We may also use this information in a de-identified, anonymous way in conjunction with an analytics service such as Google Analytics to monitor and analyze use of the Services, for the Services’ technical administration, to increase the Services’ functionality and user-friendliness, and for other legitimate business purposes.

Usage and Analytics Information

We may use your Usage and Analytics Information to troubleshoot, improve and enhance the Services or for other development, diagnostic, security, and corrective purposes. We may also use this information in conjunction with an analytics service such as Google Analytics to monitor and analyze use of the Services, for the Services’ technical administration, to increase the Services’ functionality and user-friendliness, to enable more effective responses to support requests, to ensure compliance with customer subscription and service limitations, and to inform company research and development.

We use session replay technologies to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies for site optimization and fraud/security purposes. 

We may disclose such Usage and Analytics Information to other third parties so long as such information does not contain personally identifiable data and is presented in aggregate form. 

Generalized Geo-Location Information

We may use this information for the purpose of administering and improving our Services to you, such as by providing you with relevant advertisements and promotions. We may also use your Generalized Geo-Location Information in an anonymized manner in conjunction with an analytics service such as Google Analytics to monitor and analyze use of the Services, for the Services’ technical administration, and to increase the Services’ functionality and user-friendliness. If we plan to use your Personal Information in the future for any other purposes not identified above, we will only do so after informing you by updating this Privacy Policy. 

 

4. Personalized Advertising

We use third party vendors such as Google Ads for personalized advertising to users who have visited our website or used our Services. Such third-party vendors may use cookies and/or device identifiers to gather information about you in order to serve our ads on sites across the internet based on your past visits to our website or use of our Services. 

For more information about interest-based ads, including to learn how you may be able to opt out of having your web browsing information used for interest-based or behavioral advertising purposes, please visit www.aboutads.info/choices. For more information about how Google uses your data, please visit www.google.com/policies/privacy/partners/.

 

5. Do Not Track

Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser. While we do not currently support Do Not Track signals, we treat the data of everyone who comes to our site in accordance with this Privacy Policy, whatever their Do Not Track status or preference.

 

6. Disclosures & Transfers

We have put in place contractual and other organizational safeguards with our agents and contractors to protect a proper level of protection of your Personal Information, as further detailed in “Security” below. We will take reasonable steps designed to ensure that your data is treated securely and in accordance with this Privacy Policy.

From time to time we may employ third parties as contractors to help us provide and/or improve the Services. These third parties may have limited access to databases of user information or registered member information solely for the purpose of helping us to provide and/or improve the Services and they will be subject to contractual restrictions prohibiting them from using the information about our members for any other purpose. Such agents or third parties do not have any rights to use Personal Information beyond what is necessary to assist us. For additional information regarding our third party contractors, please see Section 12 below.

We may also disclose your Personal Information with your consent.

 

7. Important Exceptions

We may disclose your Personal Information to third parties without your consent if we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other users of the Services, or anyone else (including the rights or property of anyone else) that could be harmed by such activities. We may disclose Personal Information when we believe in good faith that such disclosure is permitted or required by and in accordance with the law.

We may also disclose, transfer, sell or otherwise sell some or all of our business or assets, including your Personal Information, in connection with a corporate reorganization, a merger or amalgamation with another entity, a sale of all or a substantial portion of our assets or stock, including any due diligence exercise carried out in relation to the same, or in the event of bankruptcy or dissolution. We will provide you notice (which may be by email or notice on our website) upon consummation of any such change of control transaction and whether your Personal Information has become subject to a new Privacy Policy. We will also notify you of choices you may have regarding the information.

 

8. Security

The security of your Personal Information is important to us. Taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we have and continue to implement commercially reasonable technical and organizational measures designed to ensure a level of security reasonably appropriate to the risk to those whose Personal Information we process. We also use commercially reasonable technical, administrative, and physical safeguards designed to preserve the integrity and security of the Personal Information that you provide to us. We have implemented procedures designed to limit the dissemination of your Personal Information to only such designated staff as are reasonably necessary to carry out the stated purposes we have communicated to you.

You are also responsible for helping to protect the security of your Personal Information. For instance, never give out your password, and safeguard your user name, password and personal credentials when you are using the Services, so that other people will not have access to your Personal Information. Furthermore, you are responsible for maintaining the security of any personal computing device on which you utilize the Services.

If we learn of a security breach, we may attempt to notify you electronically so that you can take appropriate protective steps. We may also post a notice on our website if a security breach occurs. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.

 

9. Sharing Information with Third Parties

You may be able to direct that Personal Information be shared with third parties through use of the Services. We will not permit any such transfer without your express opt-in consent. The privacy policies of these third parties are not under our control and may differ from ours. The use of any information that you may provide to any third parties will be governed by the privacy policy of such third party or by your independent agreement with such third party, as the case may be. Furthermore, such third parties may store the transferred Personal Information in a location with privacy and other laws different than those that apply to us. If you have any doubts about the privacy of the information you are providing to a third party, we recommend that you contact that third party directly for more information or to review its privacy policy.

 

10. Retention

We will keep your Personal Information for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you. We may retain certain data as necessary to prevent fraud or future abuse, or for legitimate business purposes, such as analysis of aggregated, de-identified data, or account recovery. All retained Personal Information will remain subject to the terms of this Privacy Policy. Please note that if you request that your Personal Information be removed from our databases, it may not be possible to completely delete all of your Personal Information due to technological, legal, or contractual constraints.

 

11. Amendment of this Privacy Policy

We reserve the right to change this Privacy Policy at any time. If we decide to change this Privacy Policy in the future, we may post or provide appropriate notice. In the event that we make material changes to this Privacy Policy, we will provide notice through our website. Changes will be effective immediately upon posting and will apply to your use of our website as of the “Effective Date” listed above. You understand and agree that your continued use of our website after the Effective Date means that the collection, use and sharing of your information is subject to the updated Privacy Policy. Unless stated otherwise, our current Privacy Policy applies to all Personal Information that we have about you and your account. The date on which the latest update was made is indicated at the top of this document. We recommend that you print a copy of this Privacy Policy for your reference and revisit this policy from time to time to ensure you are aware of any changes. Your continued use of the Services signifies your acceptance of any changes.

If applicable law requires your opt-in consent to any particular amendment to this Privacy Policy, the amendment will not apply to your Personal Information until we receive such consent from you. To the extent we cannot provide some or all of the Services without your consent to such amendment to the Privacy Policy, your decision not to consent may result in our having to limit your ability to use certain aspects of the Services.

 

12. Service Providers

We may employ third-party companies and individuals to facilitate our Services (“Service Providers”), to provide the Services on our behalf, to perform Service-related services or to assist us in analyzing how our Services is used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Lettuce uses Plaid Inc. (“Plaid”) to gather your data from financial institutions. By using the Services, you grant Lettuce and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from your relevant financial institution. You also acknowledge and agree that the terms of Plaid’s End User Privacy Policy will govern Plaid’s use of your Personal Information. 

Lettuce uses Hurdlr, Inc. (“Hurdlr”) to gather and process your data from Lettuce. By using the Services, you agree to your personal and financial information being transferred, stored, and processed by Hurdlr in accordance with the Hurdlr Privacy Policy.

For information about other Service Providers, please contact us.

 

13. Cookie Policy

What are cookies?

Cookies are small text files containing a string of characters that can be placed on your computer or mobile device that uniquely identify your browser or device.

What are cookies used for?

Cookies allow a site or services to know if your computer or device has visited that site or service before. Cookies can then be used to help understand how the site or service is being used, help you navigate between pages efficiently, help remember your preferences, and generally improve your browsing experience. Cookies can also help ensure marketing you see online is more relevant to you and your interests.

What types of cookies do we use?

There are generally four categories of cookies: “Strictly Necessary,” “Performance,” “Functionality,” and “Targeting.” We routinely use all four categories of cookies on the Service. You can find out more about each cookie category below.

• Strictly Necessary Cookies. These cookies are essential, as they enable you to move around the Service and use its features, such as accessing logged in or secure areas. Because these cookies are essential, they cannot be disabled.
• ‍Performance Cookies. These cookies collect information about how you have used the Service, for example, information related to the unique username you have provided, so that less strain is placed on our backend infrastructure. These cookies may also be used to allow us to know that you have logged in so that we can serve you fresher content than a user who has never logged in. We also use cookies to track aggregate Service usage in an anonymized fashion and experiment with new features and changes on the Service. The information collected is used to improve how the Service works.
• Functionality Cookies. These cookies allow us to remember how you’re logged in, whether you chose to no longer see advertisements, when you logged in or out, and the state or history of Service tools you’ve used. These cookies also allow us to tailor the Service to provide enhanced features and content for you and to remember how you’ve customized the Service in other ways. The information these cookies collect are anonymous, and they are not used to track your browsing activity on other sites or services.
• ‍Targeting Cookies. Us, our advertising partners or other third party partners may use these types of cookies to deliver advertising that is relevant to your interests. These cookies can remember that your device has visited a site or service, and may also be able to track your device’s browsing activity on other sites or services other than ours. This information may be shared with organizations outside of ours, such as advertisers and/or advertising networks to deliver the advertising, and to help measure the effectiveness of an advertising campaign, or other business partners for the purpose of providing aggregate Service usage statistics and aggregate Service testing.

How long will cookies stay on my device?

The length of time a cookie will stay on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies will only stay on your device until you close your browser. Persistent cookies stay on your computer or mobile device until they expire or are deleted.

How to control your cookie settings.

If you do not want cookies to be dropped on your device, you can adjust the setting of your Internet browser to reject the setting of all or some cookies and to alert you when a cookie is placed on your device. For further information about how to do so, please refer to your browser ‘help’ / ‘tool’ or ‘edit’ section or see www.allaboutcookies.org. Please note that if you use your browser settings to block all cookies (including strictly necessary Cookies) you may not be able to access or use all or parts or functionalities of our Services.

If you want to remove previously-stored cookies, you can manually delete the cookies at any time. However, this will not prevent the Services from placing further cookies on your device unless and until you adjust your Internet browser setting as described above.

For more information on the use of targeting/advertising cookies, please see www.aboutads.info/choices.

 

14. State Law Privacy Rights

Nevada Residents

If you are a resident of Nevada, you have the right to opt-out of the sale of any Personal Data that we have collected or will collect about you. You can exercise this right by submitting a verifiable request to us via email at support@lettuce.co with the subject line “Nevada Do Not Sell Request,” and providing us with your name, address, and, if available, the email address associated with your account. We may follow up with you to verify your identity in connection with your request. Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A.  

 

15. Access of Services by Children

We do not knowingly collect or solicit any information from anyone under the age of 13 on these Services. In the event we learn that we have inadvertently collected personal information from a child under age 13, we will take reasonable steps to delete that information. If you believe that we might have any information from a child under 13, please contact us at support@lettuce.co.

 

16. Contact Us

You can help by keeping us informed of any changes such as a change of email address or telephone number. If you have any questions, complaints, comments or suggestions, please contact us at support@lettuce.co.

 

17. GLOSSARY

‍Financial Information: Bank account number, debit or credit card numbers, and other financial information.

‍Identifiers: Real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

‍Internet or Network Information: Browsing history, search history, and information regarding a person’s interaction with an internet website, application, or advertisement.