Privacy Policy

Welcome to the Birdeye Peak’s website and platform (accessible at https://birdeye.so/peak), and such other platforms, applications and interface(s) as we may operate from time to time, (the “Platform”). The Platform is owned, managed and operated by Wings Lab Pte. Ltd. (the “Company”, “we”, “us”, “Birdeye Peak”, or “our”). We take your privacy rights and the protection of personal data very seriously, and strive to collect, use, disclose and process any personal data collected in a manner that complies with applicable data protection and privacy legislation, including without limitation, the data protection and privacy laws applicable to our operations and to you (collectively, “Data Protection Legislation”). Depending on your location, this may include local consumer privacy statutes, and any similar laws in the jurisdictions where you access the Platform. This Privacy Policy sets out what personal data we collect, how we use and share your personal data, and your choices concerning our information practices. This Privacy Policy is incorporated into and forms part of our Terms of Use which is located at Terms of Use (the “Terms”). Before accessing and using the Platform or any of our Services, or submitting any personal data to the Company via the Platform, please read through this Privacy Policy and review it carefully. By accessing and/or using the Platform or Services, you agree to our use, collection and/or disclosure of your personal data as set out in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access or use the Platform or any of our Services. The Company reserves the right to modify this Privacy Policy at any time and encourages you to review this Privacy Policy each time you access the Platform. For the avoidance of doubt, this Privacy Policy does not apply to personal data processed by Birdeye Peak or its affiliates under a separate written agreement in connection with enterprise, API, white-label, licensing, downstream licensing, or other business-to-business services, except to the extent that Birdeye Peak processes such personal data independently for its own purposes. The applicable agreement governs the parties’ respective data-protection roles and obligations. This Privacy Policy applies only to the Birdeye Peak Platform and Services operated by the Company. Other websites, platforms, applications or services offered under the “Birdeye” name or similar branding (each an “Other Birdeye Service”) are operated by separate and independent legal entities, are governed by their own privacy policies, and are not covered by this Privacy Policy. The operator of an Other Birdeye Service is an independent controller of any personal data it collects, and the Company is not responsible for its data practices. Where we and the operator of an Other Birdeye Service share personal data, each acts as an independent controller in respect of its own processing and not as joint controllers, unless we tell you otherwise.

​

DEFINITIONS AND INTERPRETATION

1. “personal data” (or “personal information” as the case may be) means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you, as defined under applicable Data Protection Legislation. For clarity, blockchain data such as wallet addresses and transaction hashes may be publicly available by design. Where we associate such on-chain data with identifiable off-chain information (such as an email address), that combined dataset may constitute personal data.
2. Capitalised terms in this Privacy Policy shall have the meaning given to them in the Terms, unless the context requires otherwise.

​

UPDATES TO THIS PRIVACY POLICY

1. We may revise this Privacy Policy from time to time without any prior notice. By continuing to access and/or use our Platform or Services, you are deemed to acknowledge and accept such changes to this Privacy Policy.

​

WHAT PERSONAL DATA WE MAY COLLECT

1. In order to access and/or use the Platform and our Services, you may be required to provide us and we may collect the following categories of personal information:
   1. Identification Information: Name, email address, social media profile, username, handle, and phone number (as the case may be) for any communication or marketing purposes.
   2. Billing Information: Name, email address, postal address.
   3. Wallet Information: Details of your Digital Wallet (such as the wallet address) when you create or connect your Digital Wallet with the Platform. Wallet addresses may be publicly available on a blockchain by design. Where we associate a wallet address or other on-chain data with identifiable off-chain information relating to you, that combined dataset may constitute personal data.
   4. User Onboarding Information: Information submitted for onboarding, eligibility checks, compliance verification, or KYC (if applicable).
   5. Communications Data: Information contained in support requests, surveys, feedback, or community messages.
   6. Internet Activity Information: When you visit, use, or interact with the Platform or Services, the following information may be created and automatically logged in our systems:
      1. Device Information: The manufacturer and model, operating system, IP address and unique identifiers of the device, as well as the browser you use to access the Service. The information we collect may vary based on your device type and settings.
      2. Usage Information: Information about how you use our Platform, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency, and duration of your activities.
      3. Email Open/Click Information: We may use pixels in our email campaigns that allow us to collect your email and IP address as well as the date and time you open an email or click on any links in the email.
   7. Peak Assistant We process your prompts and instructions, any files or context you supply, the conversation history, the AI Output generated, and technical and safety signals about the interaction with the Assistant.

For the avoidance of doubt, Birdeye Peak does not intentionally collect, process, request, or require any special categories of personal data or sensitive personal information to provide the Services, and users are strictly prohibited from submitting such data to us. “Anonymised Data” refers to information that is not associated with or linked to your personal data and cannot be used to identify individual persons. We have the right to aggregate, collect, analyze, and process personal data to create Anonymized Data for legitimate internal business purposes, including to operate, secure, optimize, and improve the Services, and to detect and prevent fraud or malicious activity.

​

WHEN WE MAY COLLECT, USE AND/OR DISCLOSE YOUR PERSONAL DATA

1. We may collect and use your personal data for any or all of the following purposes:
   1. performing obligations in the course of or in connection with allowing you access or use of our Platform and Services;
   2. to operate, secure, troubleshoot and improve the Services;
   3. conduct research;
   4. verifying your digital wallet or identity, where we are required to do so (whether by law or otherwise);
   5. provision of the Platform and Services, including to:
      1. provide, operate, maintain, and secure the Platform or Services;
      2. create, maintain, and authenticate your User Account; and
      3. initiate, route, or facilitate Digital Asset transactions.
   6. processing payments for any subscriptions to Paid Features;
   7. marketing and advertising purposes, including to send you direct marketing communications as permitted by law, and notify you of special promotions, offers and events by email and other means;
   8. responding to, handling, and processing queries, requests, applications, complaints, and feedback from you;
   9. managing your relationship with us;
   10. contacting you in respect of any matters relating to your use of the Platform;
   11. complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
   12. any other purposes for which you have provided such information;
   13. To generate responses and perform the workflows you request via the Peak Assistant;
   14. To detect and prevent abuse, prompt injection, jailbreaking and breaches of the Terms. This may include limited human review of conversations for safety, abuse-detection and quality purposes, by authorised personnel or contractors under confidentiality obligations, minimised and where possible pseudonymised;
   15. transmitting to any unaffiliated third parties including our third-party service providers and agents, and relevant governmental and/or regulatory authorities, whether within or outside your jurisdiction of residence; and
   16. any other incidental business purposes related to or in connection with the above.
2. The purposes listed in the above clauses may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under a contract with you).
3. Paid Features. Please note that users of Paid Features must provide payment information (name, postal address, payment card information or payment account information). This information is used for billing purposes only and is processed by our payment processors. When you are making a payment, we do not have access to your payment card information. Should we have any issues with processing an order, the email address you have provided will be used to contact you.
4. Assistant. Please note that we do not use your Prompts, conversation history, files or other content to train foundation models, whether ours or a third party’s, and we contractually require our model providers not to train on data submitted through our integrations. We may use aggregated, de-identified usage statistics (such as feature adoption, error rates, latency) which do not identify you or reveal your content. The Assistant uses third-party foundation models and inference infrastructure. Your Prompts and relevant context are transmitted to those providers as our subprocessors, solely to generate a response and to meet their own safety obligations. Please do not submit to the Assistant: private keys or Seed Phrases; passwords or credentials; material non-public or inside information; third-party confidential information; special category data; or the personal data of other individuals except where you have all necessary rights, notices, consents, and lawful bases.
5. Advertisements. We display advertising on the Platform and may use remarketing and tracking features. Remarketing features allow us to display advertising in a more targeted manner in order to present advertisements of interest to users, based on their activity on other websites. Tracking features allow us to collect information about impressions, ad clicks and certain actions that users complete through our Platform. This data also helps us evaluate the performance of ad campaigns. Note that we collect pseudonymous data only. Note that we do not share any personal information with our advertisers. They can only access general statistics that include the amount of impressions their ads have generated as well as clicks.
6. Progress Tracking. We record your activity and profile on the Platform in order to operate the Progress Tracking feature and to incentivise and track participation. This includes activity and event records, points and balances, tiers and statuses (for example a VIP programme), streaks, participation in challenges, quests and mini-games, leaderboard position where applicable, and reputation indicators and other Intangible Rewards attributed to you. Where Progress Tracking includes leaderboards, public tiers, badges or shared achievements, information about your participation may be visible to other Users and associated with your username or wallet address.
7. Wallet Labelling. We may analyse, classify, tag, and display labels associated with blockchain wallet addresses and related on-chain activity as part of the Platform and Services. Our wallet labels are intended to describe an address, transaction pattern, protocol interaction, entity, category, or other on-chain attribute; they are not intended to identify a natural person. We do not knowingly use personal data obtained from your User Account, profile, or other off-chain interactions with us to create, append, publish, or otherwise make available a wallet label that identifies you, or another natural person, as the owner or controller of a particular blockchain wallet address. We also implement reasonable technical and organisational measures designed to reduce the risk that wallet labels, whether alone or combined with information available through the Platform, identify a natural person. This does not prevent us from processing or displaying information that is publicly available on a blockchain or otherwise lawfully made public; applying labels based on publicly available, reliable, or lawfully obtained information concerning an entity, protocol, service, smart contract, exchange, project, or publicly disclosed wallet address; identifying or disclosing information where required or permitted by applicable law, regulation, legal process, or a valid request from a competent authority; using personal data internally where necessary to provide the Services, maintain security, prevent fraud or abuse, comply with legal obligations, enforce our Terms, or protect our rights, users, or the public; or correcting, removing, restricting, or otherwise managing labels where we determine that doing so is appropriate. Where a natural person has voluntarily and publicly associated themselves with a wallet address, any label or information we display will be based only on that public association or other lawful sources.
8. If you use the mobile application to access our Platform, we may also collect the following information in the following manner:
   1. We may request access or permission to certain features from your mobile device, including but not limited to your mobile device’s camera (for QR code scanning), storage, notifications, and other features. If you wish to change our access or permissions, you may do so in your device’s settings. Please note that disabling certain permissions may limit the availability or functionality of some App features.
   2. We automatically collect device information (such as your mobile device ID, model, and manufacturer, but excluding Apple’s Advertising Identifier (IDFA), which we access only with your permission under Apple’s App Tracking Transparency framework), operating system, version information and system configuration information, device and application identification numbers, browser type and version, and Internet IP address. This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purpose.
   3. Where required on iOS devices, we will request your permission through Apple’s App Tracking Transparency framework before tracking your activity across other companies’ apps and websites for advertising or measurement purposes. You can change this permission at any time in your device’s settings.

​

WHEN YOUR PERSONAL DATA MAY BE DISCLOSED TO THIRD PARTIES

1. We may disclose your personal data described above to third parties or in specific situations without further notice to you, unless required by applicable law. Such disclosures may occur in the following instances:
   1. Performance of Services: When necessary for fulfilling obligations related to your Platform Transactions or your use of the Platform and our Services, we may disclose personal data to third parties involved in delivering these services.
   2. Service Providers: To support our business operations and provide certain services, we may share personal data with third-party providers, partners, affiliates, and service providers. This includes those offering hosting and cloud services, IT support, email communication and newsletter services, advertising and marketing services, payment processing, customer relationship management, customer support, and analytics services. These third parties may access, process, or store personal data as needed to perform their functions, in accordance with our instructions. We require any such third party with whom we share your personal data to provide the same or equal level of protection for your personal data as set out in this Privacy Policy, to use it only for the purposes we specify, and to comply with applicable Data Protection Legislation.
   3. Professional Advisors: We may share personal data with our professional advisors, such as legal and accounting firms, when necessary for them to provide services to us.
   4. Business Transfers: If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, dissolution, sale of all or a portion of our assets, or transition of service to another provider (collectively a “Business Transaction”), your personal data may be shared in the diligence process with counterparties and others assisting with the Business Transaction and transferred to a successor or affiliate as part of or following that Business Transaction along with other assets.
   5. Legal Requirements: While we do not voluntarily share personal data with government authorities or regulators, we may disclose your information when required to do so by law, regulation, court order, or other legal obligation.
2. Your personal data may be made publicly available in certain instances, including when you:
   1. make any social media posts with your social media accounts which we may repost or share on our own social media platforms;
   2. choose, register or use a Username, display name, avatar or profile that is associated with your wallet address or transaction activity, or otherwise link your address to identifying information, in which case that association may become visible to other Users or the public; and
   3. interact with a third-party Dapp or blockchain explorer, in which case information relating to your transaction (including your addresses and amounts) may be received, recorded or made public by that third party.

Please note that any personal data or transaction data you provide to, or that is collected by, such third parties is governed by their own privacy policies and not by this Privacy Policy.

1. For the purposes of registration, verification or provision of any of our Services, we may rely on third parties who may collect, use, disclose or process your personal data for their own purposes, and without our involvement or reference to us. We are not liable or responsible for the collection, use, disclosure or processing of your personal data by such third parties acting for their own purposes as independent controllers. Where third parties instead process your personal data on our behalf and under our instructions, the protections described in the section “When Your personal data May Be Disclosed to Third Parties” continue to apply.

​

THIRD PARTIES; LINKS TO THIRD PARTY SITES

1. Some business partners use our charting solutions on their own websites. Such sites may display messages such as “Powered by Birdeye Peak” or similar. We do not own, operate, or control these sites or their privacy practices, and their privacy policies do not apply to us or govern our collection, use, disclosure, or processing of personal data. We are not responsible for, and are not bound by, the privacy policies of such third-party sites. You should review the privacy and security policies and other terms applicable to each third-party site you visit.
2. Where a third party licenses our applications or integrations (for example our APKs) to power its own application or interface, that third party’s end users are not our users. We generally receive only aggregate API call and technical data from the licensee. The licensee is solely responsible for its own application or interface, its privacy compliance, and its collection, use, disclosure, and processing of its end users’ personal data. To the fullest extent permitted by applicable law, those end users have no claim, remedy, or recourse against us in connection with the licensee’s application or interface, or the licensee’s handling of their personal data.
3. On the Website, the Company may provide links to websites or online platforms operated by third parties, including social media or content platforms operated by third parties, such as X (formerly Twitter) or Coingecko. We do not own, operate, or control such third-party websites. If you follow links to sites not owned or operated by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy, security, or content of these sites, including the accuracy, completeness, or reliability of information and services found on these sites.
4. Certain transactions conducted via our Services may require you to connect a compatible third-party Digital Wallet to the Services. By using such Digital Wallet to conduct such transactions via the Services, you agree that your access to, use of, connection to, and/or interactions with such third-party Digital Wallets are governed by the privacy policy for the applicable Digital Wallet, and you agree that you are using the Digital Wallet in accordance with the terms and conditions of the applicable third-party provider of such Digital Wallet. Digital Wallets are not maintained or supported by, or associated or affiliated with, the Company. We expressly disclaim any and all liability for actions arising from your use of third-party Digital Wallets, including but without limitation, actions relating to the use and/or disclosure of personal information by such third-party Wallets.

​

USE OF COOKIES AND OTHER TECHNOLOGIES

1. We may deploy one or more of the following technologies to collect Internet Activity Information in order to enhance your user experience, understand how you interact with our Services, and improve our offerings:
   1. Cookies: These are small text files placed on your device that allow us to uniquely identify your browser or store information and settings. Cookies help improve your experience by enabling smooth navigation between pages, remembering your preferences, supporting specific functionalities, analyzing user activity and patterns, and facilitating targeted advertising.
   2. Local Storage Technologies: Technologies such as HTML5 may be used to provide functionality similar to cookies but with the ability to store larger amounts of data. This information can be stored directly on your device, including outside your browser, in relation to specific applications.
   3. Web Beacons (Pixel Tags/Clear GIFs): These help us confirm when a webpage or email has been accessed or opened, or when specific content has been viewed or clicked. Web beacons are typically used to track user engagement and optimize the content we deliver.

You may refer to our Cookie Policy for more information.

​

WITHDRAWING YOUR CONSENT

1. The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request us to stop collecting, using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request in writing or via email to us at the contact details provided below.
2. Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. We will process your request within the period required by applicable law and, where permitted by applicable law, shall seek to process your request within fourteen (14) business days of receiving it.
3. Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue to grant you access and/or use of our Platform and Services and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us via email.
4. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclosure without consent is permitted or required under applicable laws.
5. Please note that data recorded on a public blockchain cannot be deleted, corrected or restricted by us or by anyone else; because the public source remains, data we delete may be re-observed in the ordinary course of operating the Platform.
6. Please note that any such withdrawal of consent may result in us being unable to continue providing our services or fulfilling our contractual obligations with you, including but not limited to termination of your access to your account with us, our Website, App, APIs and/or Platform Services, inability to access or redeem any points, and an inability to transact or complete an ongoing transaction started via our Website, our App, APIs, regardless of whether you have made payment for such services or products. Accordingly, your withdrawal of consent may also lead to the termination of any contract(s) that you may have with our Company, as well as termination of any contracts with any third parties you may have engaged with through our Website, our Company or Site Services, for which our Company expressly reserves its rights and remedies thereto.

​

HOW TO ACCESS, CORRECT OR DELETE YOUR PERSONAL DATA

1. If you wish to make (a) an access request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or (b) a correction request to correct or update any of your personal data which we hold about you, you may submit your request via email to us at the contact details provided below.
2. Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request.
3. We will respond to your request as soon as reasonably possible and within the period required by applicable law. Where permitted by applicable law, we will seek to respond within thirty (30) business days. If we require additional time to respond, we will notify you as required by applicable law. If we are unable to provide you with any personal data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the Data Protection Legislation).
4. You may, at any time and regardless of your location, request that we delete the personal data we hold about you and, where you have created a User Account, request deletion of your account, by submitting a request via email to us at the contact details provided below. We will consider and process your request in accordance with applicable law, subject to applicable legal exceptions, technical constraints, and our retention obligations. Where the App supports account creation, you may also initiate deletion of your account from within the App. Upon deletion, we will delete or de-identify your account and the personal data associated with it within a reasonable period, subject to any information we are required or permitted to retain under applicable laws or for legitimate business purposes, including security logs, backups, fraud prevention, regulatory compliance, the resolution of disputes, and technical limitations.
5. You should be aware that data recorded on public blockchains is permanent and immutable, as described in the section “When We May Retain Your personal data”. Deletion of your account and off-chain personal data will not, and cannot, remove any on-chain records (such as wallet addresses, transaction hashes, asset types, amounts, timestamps, or network identifiers) that exist independently of us.

​

SAFEGUARDING YOUR PERSONAL DATA

1. To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have or will implement appropriate administrative, physical and technical safeguards. These include limiting the collection of personal data, enforcing strong authentication and access controls (such as secure password practices and restricting data access to a need-to-know basis), encrypting data, maintaining up-to-date antivirus protection, regularly updating our operating system and other software, securely erasing storage devices before disposal, applying web security measures against risks, and conducting regular security reviews and testing.
2. You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures. However, no security measures are failsafe and we cannot guarantee the security of your personal data. You use the Platform and our Services at your own risk.

​

ACCURACY OF PERSONAL DATA

1. We generally rely on personal data provided by you (or your authorised representative). In order to ensure that your personal data is up-to-date, complete and accurate, please update us if there are changes to your personal data via email at the contact details provided below. Failure to do so may affect or impact your continued use of our Platform and/or Services.

​

WHEN WE MAY RETAIN YOUR PERSONAL DATA

1. We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws. In determining the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process it, the potential risk of harm from unauthorised use or disclosure, and any applicable legal, regulatory, tax, accounting or reporting requirements.
2. We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected, and is no longer necessary for legal or business purposes.
3. You should be aware, however, that blockchain records are permanent, uneditable, and immutable digital records. Interactions with smart contracts, including deposits, withdrawals, and transactions may create permanent on-chain records that cannot be deleted. This includes transaction hashes, wallet addresses, asset types, amounts, timestamps, and network identifiers.

​

INTERNATIONAL TRANSFERS OF PERSONAL DATA

1. We may transfer, store, process and/or deal with your personal data outside origin of where your personal data is collected. In particular, we may share your personal data with our affiliates located in the United States, the European Union, Singapore and other countries, and/or to other external third party service providers, as the case may be. Examples include:
   1. While using the App, your data may be stored in servers located in the United States, the European Union, and Singapore, owned and operated by Amazon Web Services, Inc., a United States corporation.
   2. Your data also may be transmitted to servers directly owned and operated by us or our affiliates.
   3. We have a contractual relationship with companies to develop and assist in managing the Platform and Services for us. The aforementioned companies and our affiliates may be able to access your data for the purpose of developing and facilitating the Services.
2. Please note that we may transfer such information to a country that does not have the same data protection laws as your jurisdiction, however we will take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the Data Protection Legislation.
3. Where required, we rely on adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

​

JURISDICTION SPECIFIC MATTERS

1. If you are located in the European Economic Area (“EEA”) or the United Kingdom. The General Data Protection Regulation and the UK GDPR require us to identify the legal bases on which we process your personal data. Depending on the data and context, we rely on:
   1. performance of a contract (these Terms) to provide, operate and secure the Platform and Services and to transmit transactions you initiate;
   2. compliance with a legal obligation including sanctions, jurisdictional access and law enforcement requirements;
   3. your consent which you may withdraw at any time; and
   4. our legitimate interests in securing, analysing and improving the Platform, preventing fraud and abuse, and enforcing our Terms, where not overridden by your interests or fundamental rights.
2. If you are located in the European Economic Area (“EEA”) or the United Kingdom. In connection with the accessing, browsing of the Site and using the services, you shall be entitled to exercise certain rights laid down by the GDPR or the UK GDPR, similar privacy laws and outlined herein below, however exercise of some of those rights may not be possible in relation to the Platform and Services taking account of the Services’ nature, manner, form and other applicable circumstances. In some cases, we may ask you to provide us additional evidence and information confirming your identity. Subject to applicable law, you have the right to:
   1. Right to Access: you may request access to all Personal Information being processed about you by sending an email request to support.peak@birdeye.so
   2. Right to Rectification: if your Personal Information is inaccurate, you have the right to have the data rectified without undue delay. If you wish to rectify your personal information please send us an email request to support.peak@birdeye.so
   3. Right to Erasure (Right to be Forgotten): you can send us the request to delete your Personal Information we are currently processing about you.
   4. Restriction of Processing: you are entitled to request restriction of processing of your Personal Information.
   5. Objection to Processing: under certain circumstances you may exercise this right with respect to your Personal Information. For example, you have absolute right to object to processing of your Personal Information if it is for direct marketing purposes.
   6. Right to Data Portability: you may exercise this right with respect to your Personal Information which allows you to obtain and reuse your Personal Information for your own purposes across different services.
   7. Consent Withdrawal Right: you are entitled to withdraw consent to the processing of your Personal Information.
   8. Automated Decision-Making, Profiling: you have the right to object to decisions based solely on automated processing, including profiling.
   9. You shall have the right to file a complaint with a competent data protection supervisory authority.
3. If you are located in Canada. We process your personal data on the basis of your express or implied consent, which you may withdraw at any time by contacting us, except where applicable law permits or requires processing without consent (including for fraud detection and prevention, investigations, or to comply with a subpoena, warrant, court order, or law).
4. US State Privacy Rights. This Section 45 applies to residents of California (CCPA/CPRA) and other US states with comprehensive consumer privacy laws (including Virginia, Colorado, Connecticut and Texas). The above provisions of this Privacy Policy continue to apply. Where Birdeye Peak processes data under a separate written agreement, those activities are governed by the relevant data processing terms in the agreement and not by this Section 45. Your rights as a US state resident include those described in “ACCURACY OF PERSONAL DATA” and “HOW TO ACCESS, CORRECT OR DELETE YOUR PERSONAL DATA”, which apply equally to you.

In addition: Right to Opt Out of Sale or Sharing: We do not sell your personal information or share it for cross-context behavioural advertising. No action is required on your part. Right to Limit Sensitive Personal Information: To the extent we process sensitive personal information as defined under applicable US State privacy laws, we do so only as necessary to provide the services you request. Right to Non-Discrimination: We will not discriminate against you for exercising any of your rights under applicable US State privacy laws. Right to Appeal: If we decline to act on your request, you may appeal by contacting us at support.peak@birdeye.so. If you remain unsatisfied, you may contact your state attorney general. Response timeline: We will respond to verifiable requests within 45 days of receipt. Where reasonably necessary, we may extend this period by a further 45 days with prior notice. Shine the Light (California Civil Code § 1798.83): We do not disclose personal information to third parties for their own direct marketing purposes.

1. Children’s Privacy: The Platform and our Services are not directed to, and are not intended for use by, children, and we do not knowingly collect personal data from any person under the age of 18 (or the age of majority in your jurisdiction). If you believe that a child has provided us with personal data, please contact us using the details below and we will take reasonable steps to delete such information.

​

HOW TO CONTACT US

1. If you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request, you may contact us by this email:

Email: support.peak@birdeye.so