YOUR CALIFORNIA PRIVACY RIGHTS
SUPPLEMENT TO SWORDFISH PRIVACY POLICY

Last Updated: May 4, 2020

THIS SUPPLEMENT IS INTENDED FOR RESIDENTS OF CALIFORNIA, U.S.A. WE ENCOURAGE YOU TO READ THIS SUPPLEMENT CAREFULLY AND USE IT TO MAKE INFORMED DECISIONS. BY USING OUR SERVICES, YOU AGREE TO THE TERMS OF THE PRIVACY POLICY AND THIS SUPPLEMENT, AND YOUR CONTINUED USE OF THE SERVICES CONSTITUTES YOUR ONGOING AGREEMENT TO THE PRIVACY POLICY AND THIS SUPPLEMENT.

GENERAL

This Privacy Policy Supplement entitled “Your California Privacy Rights” outlines the individual rights Swordfish (the “Swordfish”, “we,” “us,” or “our”) provides to the residents of California, U.S.A. with respect to collecting, using and disclosing personal information when providing our online services (collectively, the “Services”) and constitutes an integral part of Swordfish’s Terms of Service (“Terms”, and collectively, the “Agreement”).

This Supplement is an integral part of the Swordfish Privacy Policy linked here. It is not a standalone privacy policy. Rather, this Supplement provides privacy disclosures to California residents as required by California law to supplement the Privacy Policy. In particular, it discusses categories of personal information Swordfish has collected and individual rights of California residents relative to that personal information.

As stated in the Privacy Policy, we collect personal information from “Users,” who are Swordfish individual customers or business customer representatives who download, install, or use the Swordfish browser extension. We also collect personal information from “Contacts,” who are people whose identities are being confirmed, who are the subject of an investigation, or who are being contacted by Users, for example for recruitment or sales purposes. Using the Swordfish Services (e.g., plugin or website interface), Users can lookup “Business Profiles” of Contacts by social media URL, name, phone number, email address, or postal address. The Services return the available contact information (name, phone number, email address, location (city and country), company name, and job title) and social media account URLs.

CALIFORNIA CONSUMER PRIVACY ACT DISCLOSURES

(i) Categories of Personal Information and Recipients

The table below summarizes the categories of personal information we collect from California residents (and have collected in the last 12 months), the purposes for which the categories of personal information will be used, and the categories of recipients to whom Swordfish has disclosed (including for a business purpose) and sold personal information (and has done so in the past 12 months).

Categories of Personal Information Collected	Purposes of Use	Categories of Recipients to Whom The Personal Information Was Disclosed and Sold
“Identifiers” such as a real name, alias, postal address, telephone number, email address, and account name. We collect all the above Identifiers from Users. We collect name, phone number, email address, location (city and country), company name, and job title, as well as social media account URLs from Users and about Contacts.	Users: Identifiers about Users are used for marketing, for opening new user accounts to use Swordfish’s Services, and to maintain existing accounts. Contacts: Identifiers are used to provide Services to Users. Users query our Services and receive Identifiers of Contacts in response.	Identifiers of Contacts are sold and disclosed to Users.
Information (other than Identifiers already described above) that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to:	Signature	We may collect signatures on forms used for identiy verification purposes for California residents or their agents seeking to exercise individual rights.	Not applicable.
	Employment information (job title and business contact information).	We collect company name and job title for Contacts. This information is used to provide Services to Users in response to their queries.
	Bank account number, credit card number, debit card number, or any other financial information. We collect this information from Users.	Payment information is used for paying for Services.	Payment information is never sold. It is, however, disclosed to payment gateway service providers that process payments from Users on behalf of Swordfish.
Commercial information, including records of products and services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. We collect this information about Users.	For our accounting records, we maintain records of what purchases Users made, when and for how much.	Our accountants and financial advisors may have access to commercial information of Users.
Electronic information. The information in this table is almost all in electronic form.	See the other cells in table.	See the other cells in table.
Professional or employment-related information (job title and business contact information).	We collect company name and job title for Contacts. This information is used to provide Services to Users in response to their queries.

(ii) Individual Rights Under CCPA

Right of Access and Data Portability

Upon request, we will tell a California resident the categories and specific pieces of personal information we have collected about that resident in the previous 12 months. In addition, upon request, we will disclose to a California resident:

• The categories of personal information we have collected about that California resident.
• The categories of sources from which the personal information is collected.
• The business or commercial purpose for collecting that California resident’s personal information.
• The categories of third parties with whom we share personal information.
• The specific pieces of personal information we have collected about that California resident.
• The categories of personal information that we have sold about that California resident.
• The categories of personal information that we disclosed about a California resident for a business purpose.

The identity of any person making such a request must be verified as a condition of providing the requested information.

Right of Deletion

You have the right to request that we delete any of your personal information that we collected from you and retained by us, subject to certain conditions and exceptions under the law. For instance, we have the right to retain personal information needed to:

• Complete the transaction for which the personal information was collected, provide a good or service requested by the California resident, or reasonably anticipated within the context of our ongoing business relationship with the California resident, or otherwise perform a contract between our business and the California resident.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
• Conduct solely internal uses that are reasonably aligned with the expectations of the California resident based on the California resident’s relationship with us.
• Comply with a legal obligation.
• Use the personal information internally, in a lawful manner that is compatible with the context in which the California resident provided it.

The identity of any person making such a request must be verified as a condition of deleting the personal information as requested.

How to Exercise Individual Rights

If you wish to contact us about any of your rights as set out in this section, please contact us by one of the methods listed below in the Contact Us section. Please contact us using one of these methods if you wish to have an authorized agent make a request for individual rights on your behalf.

Verification of Requests to Exercise Individual Rights

For Users: We will verify your identity in response to a request to exercise your individual rights by requiring you to log into your password-protected account, going to the Section in your profile called “Exercising Individual Privacy Rights,” checking the box next to the individual rights you wish to exercise, and saving your preferences.

For Contacts that are not Users:

• We will verify your identity in response to a request to exercise your individual rights by requiring that you to provide two pieces of information that Swordfish already has in the Contact’s Business Profile from the following categories: for instance, email address, telephone number, or social media account.
• In addition, in the case of a request for specific pieces of personal information, we will ask for an additional piece of information that Swordfish already has in the Contact’s Business Profile in addition to the two pieces described above, together with a signed declaration under penalty of perjury that the requestor is the consumer whose personal information is the subject of the request or a representative acting on behalf of that consumer.

We will not provide or delete information as requested if we are unable to verify the identity of the requestor as required above or have reason to believe that the request is fraudulent. We may ask for additional verification if we suspect fraud, such as a copy of an identification credential from the requestor. We will use any such additional information strictly for identity verification purposes, and it will be deleted following the completion of the verification process.

Policy Against Discrimination

California residents have a right not to receive discriminatory treatment by any business covered by the CCPA for the exercise of the privacy rights conferred by the CCPA. Accordingly, Swordfish will not discriminate against individual California residents for exercising any of their rights under the CCPA, including by:

• Denying goods or services to the California resident
• Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties.
• Providing a different level or quality of goods or services
• Suggesting that the California resident will receive a different price or rate for goods or services or a different level or quality of goods or services

Sale of Personal Information of Minors

Swordfish does not knowingly sell the personal information of minors under 16 years of age.

NOTICE TO CALIFORNIA RESIDENTS REGARDING “DO NOT TRACK” SIGNALS

Under California law, online service providers must disclose in their privacy policies how they respond to “do not track” settings. These are settings users can set in their browser software. Currently, there is no standard governing what, if anything, a website operator should do when receiving a “do not track” signal. Accordingly, Swordfish does not currently take action in response to a “do not track” browser setting. As industry standards regarding do not track settings emerge, Swordfish will revisit and amend this policy to account for these standards.

CONTACT US

If you have any questions, comments or concerns about this Supplement or about our privacy practices, seek to exercise any of your privacy rights under applicable law, or wish to access, change, or update personal information we have about you, you should first contact us by email at contact@swordfishapp.com. You may also contact us at this email address if you are aware of abuse or misuse of our Services. If you are a Contact, you may also opt out of the sale of your personal information as stated in the next section.

NOTICE OF RIGHT TO OPT OUT

If you prefer that we not sell your personal information (by disclosing your Business Profile to our Users, vendors or business partners), you may opt-out by filling in your relevant details at www.swordfishapp.com/Optout.

COMPLAINTS

If you have a complaint about our privacy practices regarding Nevada residents, please follow the procedures in our Privacy Policy in the section titled Contact Us; Exercising Individual Rights; Complaints