Legal

Privacy Policy

How we collect, use, and protect your information.

1. Introduction

This Privacy Policy describes how Allspice Labs, Inc. and its subsidiaries and affiliates ("Allspice", "we", "us" or "our") collect, use, store, and share your information when (1) you access and/or use our websites, mobile applications, or other digital properties we own and operate, including www.allspiceapp.us, our mobile application, and widgets embedded on third party websites and other properties (collectively, the "Platform"); (2) you use our products and services offered through, on, or in connection with the Platform ("Services"); (3) you communicate with us in any manner, including by email, direct messaging, telephone, and/or in person ("Communications"); and (4) we interact with certain third party partners.

Please note the following sections that include important disclosures related to our Platform and Services:

Cookies, Advertising, and Tracking Technology Disclosures: To learn more about how our Platform, Services, and Communications use cookies and related technologies (including from Third Parties), see Cookies, Advertising, and Tracking below.
Your Choices Disclosures: To learn more about your choices concerning your information, see Your Choices below.
AI Features Disclosures: To learn more about our AI Features, including disclaimers and limitations, see AI Features and Disclaimers below.

If you are resident of certain states or countries, you may be entitled to additional rights. Please see the following quick-links below for easy access to additional information for such residents:

CA Residents: If you are a resident of California, please see our California Privacy Notice below.
Nevada Residents: If you are a resident of Nevada, please see our Nevada Privacy Notice below.
Washington Residents: If you are a resident of Washington, please see our Washington Health Privacy Notice below.
Connecticut Residents: if you are a resident of Connecticut, please see our Connecticut Health Privacy Notice.
Virginia, Colorado, Utah, Texas, Oregon, and Other State Residents: If you are a resident of Virginia, Colorado, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Kentucky, Nebraska, Rhode Island, Indiana, or Florida, please see our Additional State Privacy Rights below.
EU/EEA Residents: If you are a resident of the European Union or European Economic Area, please see our EU/EEA Privacy Notice below.

2. What Type Of Information Do We Collect?

Depending on how you interact with our Platform and Services, the nature of our Communications, and how we may interact with certain third party partners, we may collect the following pieces of your information:

Basic Identifying Information. Information you provide when you sign-up for an account for our Services such as your full name, e-mail address, username, name, and other similar identifiers.
Device Identifier and other Unique Identifiers. Information such as your device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, and other unique identifiers.
Internet or Other Network Activity. Information such as your browsing or search history, cross-site activity (including actions taken across the Platform surfaces such as saving recipes, adding items to your pantry, and other synchronized actions), and other information regarding your interactions with our Platform, emails, and advertisements.
Health Information. Information related to food allergies and other health-related dietary restrictions that you have identified.
Geolocation Data. Information including imprecise location data (such as location derived from an IP address or data that indicates a city or postal code level) and, with your consent, precise location data (such as latitude/longitude data).
Commercial Information. Information such as the products and samples you have purchased and considered, your shopping list information, your preferences on various products and brands, and related information about your commercial activities.
Demographic Information. Information such as your gender.
User Content. Information such as your Communications with us and any other content you provide, such as social media profiles, photographs of receipts, images, videos, survey responses, comments, product reviews, testimonials, AI chat inputs and queries, and other content.
Audio and Visual Information. Information such as photographs, images, and recordings of your voice (such as when we record customer service calls for quality assurance).
Inferences. Information such as inferences drawn from or created based on the information identified above.
Analytics Data. Aggregated and anonymized usage data regarding engagement with the Allspice Widget, Platform interactions, and feature usage that may be shared with Integration Customers through the Publisher Portal.

You may choose to voluntarily provide other information to us that we do not request, and, in such instances, and in such situations we have no control over what categories of personal information such disclosure may include. Any additional information provided by you to us is provided at your own risk.

3. How Do We Collect Your Information?

We collect your information in three ways: (1) directly from you when you use our Platform, Services, and Communicate with us; (2) automatically using online technologies when you engage with our Platform, Services, and Communications; and (3) from our third party partners.

Directly from you. We collect information directly from you when you enter your information on our Platform, create an account for our Services, update your profile, access our content, take a survey or a poll or enter a contest, use or interact with our Platform and Services, engage in Communications with us, or sign-up to receive emails, text messages, or certain other Communications from us.
AI Input Collection and Use. Certain Services may have features that use or are enabled by artificial intelligence or machine learning. When you use our AI-enabled features, we collect the information you provide (e.g., prompts, queries, text, images, and files) to generate responses and output, provide functionality. User inputs may be anonymized and used to improve our Services.
Automatically Using Online Technologies. When you visit our Platform, open or click on emails we send you or related Communications, or interact with advertisements displayed through, on, or in connection with the Platform or Services, we or other third parties may automatically collect certain information about you using online tracking technologies such as cookies, tokens, pixels, web beacons, software developer kits, and related technologies. We also use these technologies to track your actions across elements of the Platform (e.g., the mobile application, website, widget). For more information, see Cookies and Related Online Tracking Technologies below.
From Our Partners. We collect information from our third party partners, such as brands, data analytics providers, marketing or advertising providers, fraud prevention service providers, and vendors that provide services.

4. Cookies and Related Online Tracking Technologies

We and our third-party partners use cookies, pixels, web beacons, software development kits, and other similar online tracking technologies to gather information about you when you use our Platform, interact with some of our Services, and engage with our Communications. Some of the online tracking technologies are used to maintain the security of our Platform, maintain persistent login sessions as you navigate between elements of the Platform (e.g., the website, mobile application, and widget that may be embedded on websites operated by third parties) to enable synchronized actions across surfaces, manage your account, prevent crashes, fix bugs, save your preferences, assist with basic Platform functions, advertising, analytics, and other performance functions.

Our Platform uses Google Analytics for analytics purposes. You can learn more about Google Analytics by vising How Google uses information from sites or apps that use our services.

5. How Do We Use Your Information?

We use your information for a variety of purposes, including to:

Provide our Platform and Services to You. We use your information to provide our Platform and Services to you, including to: (1) create and manage your account when you sign-up to use our Platform or Services; (2) facilitate your access and use of our Platform; (3) process your requests and feedback on products to facilitate your participation in the Services; (4) send you notifications relating to your account and participation in our Services; (5) answer your Communications; (6) generate AI-powered responses, recommendations, and suggestions related to cooking, meal planning, ingredient substitutions, nutrition information, and ingredient freshness estimates based on your queries and inputs; (7) synchronize your actions across different elements of the Platform; and (8) perform other related business functions.
Communicate with You. We use your information to engage in Communications with you, such as to respond to your requests, inquiries, issues, feedback, and to provide customer service.
Market and Advertise. We use your information for marketing and advertising purposes, including sending marketing, advertising, and promotional communications to you by email, text message, or postal mail. We also use your information to show you advertisements for Services and to administer our sweepstakes and other contests.
Conduct Analytics and Personalization. We use your information to conduct research and analytics, including to improve our Platform and Services. We also use your information to understand your interaction with our Platform, advertisements, Services, and our Communications with you. We may also use your information to generate aggregated and anonymized analytics that are shared with enterprise customers that have embedded the Allspice widget in their own website or other properties, to enable them to understand widget engagement on their properties. We also use your information to personalize your experience, to save you time when you visit our Platform and use our Services, to better understand your needs, and to provide personalized recommendations for our Services.
Security and Fraud Prevention. We use your information to detect, investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including fraudulent transactions. We also use your information to enforce our terms and procedures, prevent against security incidents, and prevent the harm to other users of our Services.
Legal Obligations. We use your information to comply with our legal and regulatory obligations, to establish and exercise our rights, and to defend against legal claims.
Business Functions. We use your information to support our core business functions, including to maintain records related to business management, loss prevention, collecting amounts owed, and identifying and repairing errors or problems in the Platform.

6. How Do We Disclose Your Information?

We may disclose or share your information with affiliated and non-affiliated third-parties, including in the following scenarios:

With your Consent. We may disclose or share your information with your consent, which may be obtained in writing; online, through "click-through" agreements; when you accept the terms of use on our Platform; orally, either in person or on the phone; or by other means.
In a Business Transfer. We may disclose or share your information as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as a business asset in the transaction.
To Enterprise Partners. We share aggregated and anonymized analytics regarding use of the Allspice Widget with enterprise partners (third-party business entities that have integrated the widget into their websites or applications). This data includes usage metrics, engagement statistics, and performance data, but does not include information that can be used to identify or contact you, except as expressly permitted by applicable law.
To Other Non-Affiliated Third Parties. We may disclose or share your information with certain non-affiliated third parties to facilitate your access and use of our Platform, our Services, and to provide us with certain business functions, including but not limited to sharing your information with brand partners, internet service providers, advertising networks, data analytics providers, governmental entities, operating systems and platforms, social media networks, payment processors, and other service providers who provide us a service (e.g., customer service, auditing, marketing, debugging to identify and repair errors that impair existing intended functionality on our Platform, and/or protecting against malicious, deceptive, fraudulent, or illegal activity).
For Legal Process And Protection. We may disclose or share your information to satisfy any law, regulation, legal process, governmental request, or where we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to: (1) enforce or apply our agreements; (2) protect our interests, property, or safety of others; (3) in connection with claims, disputes, or litigation; and (4) to protect our Platform.

7. Analytics and Advertising

We use analytics services, such as Google Analytics, to help us understand how users access and use the Service. In addition, we work with agencies, advertisers, ad networks, and other technology services to place ads about our products and services on other websites and services. For example, we place ads through Google and Facebook that you may view on their platforms as well as on other websites and services.

As part of this process, we may incorporate tracking technologies into our own Platform and Communications as well as into our ads displayed on other websites and services. Some of these tracking technologies may track your activities across time and services for purposes of associating the different devices you use, and delivering relevant ads and/or other content to you ("Interest-based Advertising").

We also use audience matching services to reach people (or people similar to people) who have visited our Service or are identified in one or more of our databases ("Matched Ads"). This is done by uploading a customer list to a technology service or incorporating a pixel from a technology service into our own Service, and the technology service matching common factors between our data and their data. For instance, we incorporate the Facebook pixel on our Service and may share your email address with Facebook as part of our use of Facebook Custom Audiences. Some technology services, such as LiveRamp, may provide us with their own data, which is then uploaded into another technology service for matching common factors between those datasets.

As indicated above, vendors may act as our service providers, or in certain contexts, independently decide how to process your information. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

For further information on the types of tracking technologies we use on the Service and your rights and choices regarding analytics, Interest-based Advertising, and Matched Ads, please see the What Type of Information Do We Collect? and Your Rights and Choices sections.

8. How Do We Protect Your Information?

Although no system can guarantee the complete security of your information, we take all commercially reasonable steps to ensure your information is protected in alignment with all applicable laws and regulations, as appropriate to the sensitivity of your information.

9. How Long Do We Keep Your Information?

We keep your information for as long as is necessary in accordance with the purpose for which it was collected, our business needs, and our legal and regulatory obligations. If we dispose of your information, we will do so in a way that is secure and appropriate to the nature of the information subject to disposal.

10. Third Party Sites

Our Platform and Services may contain links to, or be embedded into, third party websites, applications and other services. The Allspice widget may be embedded on websites or applications operated by third-party business entities that have integrated the widget. We are not responsible for and disclaim all liability for the content, accuracy, availability, functionality, security, or practices of any third-party, including any website, mobile application, or other service operated by a third party. Subject to your opt-out or consent preferences, we may also use third party advertisers, ad networks, and other advertising, marketing and promotional companies to service advertisements on our Platform and Services.

Please note that the third party services may operate independently from us. We do not control these third-party websites, applications and services and we are not responsible for their information practices. Your use of third party websites, applications and services is governed by their own privacy policies or notices, which we strongly suggest you review.

11. Your Rights and Choices

A. Account

You may access, update, or remove certain information that you have provided to us through your account through the in-app settings page, through your account settings on our website, or by sending an email to the email address set out as set out in the Contact Us section below. We may require additional information from you to allow us to confirm your identity.

Please note that we will retain and use information about you as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

B. Communications

The following is information about how to opt out of receiving certain communications from us, depending on means of delivery:

E-mails. You can opt-out of receiving promotional emails from us at any time by following the instructions as provided in emails to click on the unsubscribe link, or emailing us at the email address set out as set out in the Contact Us section below with the word UNSUBSCRIBE in the subject field of the email. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or our ongoing business relations.
Push Notifications. If you have opted-in to receive push notification on your device, you can opt-out at any time by adjusting the permissions in your device or uninstalling our mobile application.

C. Cookies and Tracking Technologies

The following disclosures relate to your rights and choices in connection with cookies and other tracking technologies:

Do Not Track. Your browser settings may allow you to automatically transmit a "Do Not Track" signal to online services you visit. We do not currently monitor or take action with respect to "Do Not Track" signals. For more information on "Do Not Track," visit http://www.allaboutdnt.com.
Cookies and Pixels. Most browsers accept cookies by default. You can instruct your browser, by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations.
Mobile Application and Location Technologies. You can stop all collection of information via our mobile application by uninstalling the mobile application. You can also reset your device Ad Id at any time through your device settings, which is designed to allow you to limit the use of information collected about you. You can stop all collection of precise location data through the mobile application by uninstalling the application or withdrawing your consent through your device settings.

Please be aware that if you disable or remove tracking technologies some parts of the Service may not function correctly.

D. Analytics and Interest-Based Advertising.

Google provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/dlpage/gaoptout and by Google Analytics for Display Advertising or the Google Display Network at https://www.google.com/settings/ads/onweb/.

The companies we work with to provide you with targeted ads are required by us to give you the choice to opt out of receiving targeted ads. Most of these companies are participants of the Digital Advertising Alliance ("DAA") and/or the Network Advertising Initiative ("NAI"). To learn more about the targeted ads provided by these companies, and how to opt out of receiving certain targeted ads from them, please visit: (i) for website targeted ads from DAA participants, https://www.aboutads.info/choices; (ii) for app targeted ads from DAA participants, https://www.aboutads.info/appchoices; and (iii) for targeted ads from NAI participants, https://www.networkadvertising.org/choices/. Opting out only means that the selected participants should no longer deliver certain targeted ads to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., in connection with the participants' other customers or from other technology services).

To opt out of us using your data for Matched Ads, please contact us as set forth in the Contact Us section below and specify that you wish to opt out of matched ads. We will request that the applicable technology service not serve you Matched Ads based on information we provide to it. Alternatively, you may directly contact the applicable technology service to opt out.

You may also limit our use of information collected from or about your mobile device for purposes of serving targeted ads to you by going to your device settings and selecting "Limit Ad Tracking" (for iOS devices) or "Opt out of Interest-Based Ads" (for Android devices).

Please note that if you opt out using any of these methods, the opt out will only apply to the specific browser or device from which you opt out. We are not responsible for the effectiveness of, or compliance with, any opt out options or programs, or the accuracy of any other entities' statements regarding their opt out options or programs.

E. Your Legal Rights Under Applicable Laws

Depending on where you reside, you may have certain legal rights in relation to your information.

CA Residents: If you are a resident of California, please see our California Privacy Notice below.
Nevada Residents: If you are a resident of Nevada, please see our Nevada Privacy Notice below.
Washington Residents: If you are a resident of Washington, please see our Washington Health Privacy Notice below.
Connecticut Residents: if you are a resident of Connecticut, please see our Connecticut Health Privacy Notice.
Virginia, Colorado, Utah, Texas, Oregon, and Other State Residents: If you are a resident of Virginia, Colorado, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Kentucky, Nebraska, Rhode Island, Indiana, or Florida, please see our Additional State Privacy Rights below.
EU/EEA Residents: If you are a resident of the European Union or European Economic Area, please see our EU/EEA Privacy Notice below.

For more information about how to exercise applicable legal rights under a respective law, please see Exercising Legal Rights Requests below.

12. Children

Our Platform and Services are not intended for children under the age of 13. This includes any links to other websites that we provide for our convenience. We don't knowingly collect the information of children under 13 for any reason.

13. Changes to Our Privacy Policy

We may change this Policy from time to time. Any and all changes will be reflected on this page, and where appropriate provided in person or by another electronic method. The effective date will be stated at the top of this Policy. You should regularly check this page for any changes to this Policy.

14. Accessibility

To print a copy of this Privacy Policy, please click here [].

If you require a copy of this Privacy Policy in an alternative format, please Contact Us.

15. Contact Us

If you have any comments or questions, please contact us through the following methods:

Physical Address: 188 Valley Street, Suite 101, Providence RI 02909

Email: support@allspicelabs.com

16. California Privacy Notice

A. ADDITIONAL CALIFORNIA RESIDENT PRIVACY DISCLOSURES

Under the California Consumer Privacy Act of 2018 and any subsequent amendments including the California Privacy Rights Act of 2020 (collectively, "CCPA"), California residents are entitled to the following additional disclosures about our data processing. These disclosures apply solely to individuals who live in the State of California ("California Residents"). All terms used in this section have the same meaning as when used in the CCPA.

In the preceding 12 months, we have collected the categories of Personal Data: identifiers, including name, email, and username; internet or other similar network activity; geolocation data, and inferences drawn from other categories or personal information. For more details about the specific types of Personal Data we have collected, the purposes for which we have collected Personal Data and the sources of that information, please refer to the descriptions above in the "What Information Do We Collect?" and "How Do We Use Your Information?" sections.
The business and commercial purposes for which we collect Personal Data are described in this Privacy Policy. The categories of third parties to whom we "disclose" this information for a business purpose are described in the "How Do We Disclose Your Information?" section above.
We may also sell or share information to the extent our use of Cookies and tracking technologies for targeted advertising or analytics purposes constitutes a "sale" or "share" under the CCPA. Your opt-out rights are described in the "Your Rights and Choices" section above. In the preceding 12 months, we have sold or shared the following categories of Personal Data with our targeted advertising and analytics partners: identifiers and internet or other similar network activity.
We do not knowingly sell the Personal Data of minors under age 18.

You have certain rights regarding the Personal Data we collect or maintain about you. Please note that these rights are not absolute, and there may be cases when we decline your request as permitted by law. These rights include:

Right to know: You have the right to access categories of Personal Data we process and the purpose.
Right to access: You have the right to request that we disclose what Personal Data we have collected and maintained about you in the past 12 months.
Right to delete: You have the right to request that we delete Personal Data collected or maintained by us, subject to certain exceptions.
Right to correct: You have the right to request that we correct any inaccurate Personal Data that we maintain about you.
The right to request information concerning the categories of Personal Data (if any) that we disclose to third parties or affiliates for their direct marketing purposes.
The right to opt-out of the sale of your Personal Data.
Right to limit the use of sensitive personal information: You have the right to direct businesses to only use your sensitive personal information for limited purposes.
The right to appeal: You can appeal any decision by us to deny your privacy rights under applicable laws.
The right to non-discrimination: You will not receive any discriminatory treatment when you exercise one of your privacy rights.

We will attempt to respond to California Resident requests in a timely fashion. Only you, or an agent legally authorized to act on your behalf, may make a request related to your Personal Data. After submitting a request, we may ask you to provide information that will enable us to verify your identity in order to comply with your request. We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or someone authorized to act on such person's behalf.

Further, in many instances, we do not collect types of Personal Data that enable us to identify you. As such, if we do not have information that permits us to verify your identity, we may deny your requests to know or delete.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before fulfilling your request.

B. CALIFORNIA'S "SHINE IN THE LIGHT" LAW

If you are a California resident and have an account with us, you have the right to request information from us once per calendar year regarding the customer information we share with third parties for the third parties' direct marketing purposes. To request this information, please send an email to support@allspicelabs.com with 'Request for California Privacy Information' in the subject line and in the body of your message. We will provide the requested information to you via an email response.

C. CALIFORNIA'S "ERASER BUTTON" LAW

If you are a California resident under 18 years old and a registered user of the Platform (as defined above), you can request that we remove content or information that you have posted to our website or other online services. Fulfillment of the request may not ensure complete or comprehensive removal (e.g., if the content or information has been reposted by another user). To request removal of content or information, please send an email to support@allspicelabs.com.

17. Nevada Privacy Notice

A. Sale Of Personal Information

If you are a Nevada resident, you have the right to submit a request directing us not to make any sale of your personal information. We do not sell your personal information as defined under Nevada law. However, to request email confirmation that we do not sell your personal information, please send an email to support@allspicelabs.com with "Nevada Opt-Out of Sale" in the subject line and in the body of your message. We will provide the requested information to you via an email response.

B. Health Data Privacy Notice

You have certain rights over how we process your health data under Nevada law. For the purpose of this section, "health data" refers to information that is linked or reasonably capable of being linked to you and that is used to identify any past, present, or future health status of you. This may include any health condition or treatment.

What categories of health data do we collect from you, and why do we collect it? When you engage with our Platform we offer to help identify applicable products and recipes, we may collect information related to your allergies or other general health information related to dietary needs. The purpose of this collection is to provide you with product recommendations.
Who do we collect your health data from, and how do we collect it? We collect your health data when you directly engage with us through our Platform to use our shopping list features, recipe selections, and other uses related product recommendations.
How do we use your health data? We use your health data to determine appropriate product recommendations.
Do we share your health data, and with whom? Your consumer health data is shared with Google Firebase and Google Cloud, for the purpose of data storage.
How will you notify me of any material changes to this notice? See the section entitled Changes above.
Will any third parties track my health data across other websites? No third parties other than Google Firebase and Google Cloud will collect your health data over time and across different websites or online services when you use our Platform.
Your Nevada Health Data Rights. You have a right to submit a request for access, deletion, and appeal. To exercise these rights, see Exercising Your Legal Rights below.

18. Washington Health Privacy Notice

If you are a Washington resident, the following disclosures are provided to you pursuant to the Washington MY Health MY Data Act. For the purpose of this section, the phrase "health data" means information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. Physical health status can include individual health conditions or treatment.

What categories of health data do we collect from you, and why do we collect it? When you engage with our mobile application we offer to help identify applicable products and recipes, we may collect information related to your allergies or other general health information related to dietary needs. The purpose of this collection is to provide you with product recommendations.
Who do we collect your health data from, and how do we collect it? We collect your health data when you directly engage with us through our Platform to use our shopping list features, recipe selections, and other uses related product recommendations.
How do we use your health data? We use your health data to determine appropriate product recommendations.
Do we share your health data? Your consumer health data is shared with Google Firebase and Google Cloud, for the purpose of data storage.
What rights do you have concerning your health data? You have a right to submit a request for access, deletion, and appeal. To exercise these rights, see Exercising Your Legal Rights below.

19. Connecticut Health Privacy Notice

If you are a Connecticut resident, the following disclosures are provided to you pursuant to the Connecticut Data Privacy Act as it relates to consumer health data. For the purpose of this section, the phrase "consumer health data" means any personal data used to identify a consumer's physical or mental health condition or diagnosis.

What categories of consumer health data do we collect from you, and why do we collect it? When you engage with our mobile application we offer to help identify applicable products and recipes, we may collect information related to your allergies or other general health information related to dietary needs. The purpose of this collection is to provide you with product recommendations.
Who do we collect your consumer health data from, and how do we collect it? We collect your consumer health data when you directly engage with us through our Platform to use our shopping list features, recipe selections, and other uses related product recommendations.
How do we use your consumer health data? We use your consumer health data to determine appropriate product recommendations.
Do we share your consumer health data? Your consumer health data is shared with Firebase and Google Cloud, for the purpose of data storage.
What rights do you have concerning your health data? You have a right to submit a request for access, correction, deletion, and portability. In addition, we will not sell your consumer health data without first obtaining your consent. To exercise these rights, see Exercising Your Legal Rights below.

20. Additional State Privacy Rights

If you are a resident of Virginia, Colorado, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Kentucky, Nebraska, Rhode Island, Indiana, or Florida, you may have certain rights under your state's comprehensive privacy law. These rights may include:

Right to Access: You have the right to confirm whether we are processing your personal data and to access such data.
Right to Correct: You have the right to correct inaccuracies in your personal data.
Right to Delete: You have the right to delete personal data that you have provided to us, subject to certain exceptions.
Right to Data Portability: You have the right to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format (available in certain states).
Right to Opt Out: You have the right to opt out of: (a) the processing of your personal data for purposes of targeted advertising; (b) the sale of your personal data; (c) profiling in furtherance of decisions that produce legal or similarly significant effects (available in certain states).
Right to Appeal: If we decline to take action on your request, you have the right to appeal our decision.
Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights.

Please note that certain states have specific requirements regarding health data, sensitive data, or data concerning minors. We process such data in accordance with applicable state law requirements. To exercise these rights, see Exercising Your Legal Rights below.

21. EU/EEA Privacy Notice

If you are located in the European Union (EU) or European Economic Area (EEA), the following additional disclosures apply to our processing of your personal data under the General Data Protection Regulation (GDPR).

A. Legal Basis

We process your personal data on the following legal bases:

Consent: When you have given us explicit consent to process your personal data for specific purposes, including for AI Features, marketing communications, and certain cookies and tracking technologies.
Contract Performance: When processing is necessary to perform our contract with you (i.e., to provide the Platform and Services you have requested).
Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. Our legitimate interests include operating and improving our Platform, conducting analytics, preventing fraud, and ensuring security.
Legal Obligation: When processing is necessary to comply with our legal obligations.

B. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access (Article 15): You have the right to obtain confirmation as to whether we process your personal data and, if so, to access such data and receive information about how it is processed.
Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.
Right to Erasure / "Right to be Forgotten" (Article 17): You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing.
Right to Restriction of Processing (Article 18): You have the right to request restriction of processing of your personal data in certain circumstances, including where you contest the accuracy of the data or object to processing.
Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object (Article 21): You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes (including profiling).
Right to Withdraw Consent (Article 7): Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right Not to be Subject to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. Our AI Features provide recommendations and suggestions but do not make automated decisions that produce legal or similarly significant effects concerning you.
Right to Lodge a Complaint (Article 77): You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

To exercise these rights, see Exercising Your Legal Rights below.

22. Exercising Legal Rights Requests

If you are a resident of any state with or jurisdiction with privacy rights described in this Privacy Policy, you may exercise your respective legal rights with respect to your personal information or consumer health data by us by emailing us at support@allspicelabs.com.

We will take reasonable steps to verify your identity before processing your request. We may request additional information from you to authenticate your request and confirm you are the individual about whom we collected information. You may designate an authorized agent to submit requests on your behalf. We will require written proof that the agent is authorized to act on your behalf and may require you to verify your identity directly with us.

We will respond to verified requests within the timeframes required by applicable law, typically within 45 days of receipt. We do not charge a fee to process your request unless it is excessive, repetitive, or manifestly unfounded. If we determine a fee is warranted, we will notify you of the fee and obtain your approval before proceeding.

There are certain circumstances where applicable law allows us to retain certain information and we will not be able to delete such information. In such instances, we will inform you of what information cannot be deleted.