This policy applies to all processing of personal data carried out by Neurotransvision LTD and has the objective of informing the user regarding the way in which Neurotransvision LTD carries out the processing of personal data (including details of the type of personal data collected and the purpose of processing) and regarding the rights of the user in relation to their personal data.
In case of having any questions about the Privacy Policy, the user can contact Neurotransvision LTD through the following means:
The user may establish direct and effective communication with Neurotransvision LTD by written communication sent to any of the indicated addresses or also by sending an email to the address: seb@neurotransvision.com
In addition, information of the officer in charge of processing your personal data is listed below:
In compliance with current regulations on the protection of personal data, especially:
Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016 on the protection of natural persons regarding the processing of personal data and the free circulation of these data (hereinafter, the 'GDPR').
Argentine law No. 25,326 on the protection of personal data, its regulatory decree 1558/01 and its complementary norms (the 'Argentine LPDP').
The General Data Protection Law of Brazil, Law No. 13,709, (the 'LGPD').
The California Consumer Privacy Act (CCPA), Assembly bill No. 375.
The Virginia Consumer Data Protection Act (VCDPA).
The Colorado Privacy Act (CPA)
The Connecticut Data Privacy Act (CTDPA)
Canada’s Anti-Spam Legislation (CASL) & Personal Information Protection and Electronic Documents Act (PIPEDA).
Australian Privacy Act No. 1988 (APA).
Mexican Federal Law on the Protection of Personal Data in Possession of Private Parties (LFPDPPP).
Colombian protection of personal data law No. 1581.
Singapore Personal Data Protection Act 2010 ('PDPA').
Thailand's Personal Data Protection Act BE 2562 (PDPA).
Switzerland's new Federal Act on Data Protection (nFADP).
India Digital Personal Data Protection Act, 2023 (DPDPA).
Neurotransvision LTD collects personal data in its possession when the user:
Neurotransvision LTD collects information when visiting their web page, and mainly by completing its registration forms.
The following data is collected: full name, email, phone number, date of birth, nationality, address and credit information.
As a rule, when personal data is requested to use a service or access certain content, its delivery will not be mandatory, except for those cases where it is specifically indicated that it is data required for the provision of the service. In this case, the user may freely choose not to register and/or not to contract the services.
The user declares and guarantees that all the data provided by him are true and correct and undertakes to keep them updated. The changes may be communicated to the Data Protection Delegate or to the address indicated in Section 2 hereof.
Likewise, the user acknowledges that the data required by Neurotransvision LTD are necessary, adequate, and not excessive to carry out the purposes expressed in Section 5 hereof, which would be impossible to fulfill if said data are not provided.
Any false or inaccurate statement that occurs as a result of the information and data given, as well as the damages that such information may cause, will be the responsibility of the user.
The personal data requested to the user will be used for the following purposes:
To provide our Service and fulfill your requests. We use your information to provide and maintain our Service, to process and fulfill your requests, to communicate with you about your use of our Service or changes to our Service, to respond to your inquiries, and for other customer service and business administration purposes. For example, when you enroll in a newsletter, we may use your personal information to deliver that newsletter to you.
Identification and authentication purposes. We may use your information for identification and authentication purposes. For example, when you enter your account login ID and password to enter one of our registration or login portals, we use your login credentials to authenticate your identity.
Personalization. We use your information to tailor the content and information that we may send or display to you, to offer location customization, and personalized help and instructions, and to otherwise personalize your experience while using the Service. For example, if you allow us to collection geolocation data, we use this information to deliver content that is around your specific location and identify business location/listings around your location.
Marketing and promotional purposes. We may use your information to send you news and newsletters, event updates, and to communicate with you about new features, offers, events, or products, or to otherwise contact you about information we think may be of interest to you. We may also use your information to display advertisements to you on our site (including to sell advertising space on the Service) and on other unaffiliated websites and services.
Research and reporting. We may use your information to administer surveys and questionnaires (online and offline) for research and reporting purposes to help us better serve individuals by learning more about their needs and the quality of the products, services, and educational information we provide. The survey responses may be utilized to determine the effectiveness of our Service, various types of communications, advertising campaigns and/or promotional activities.
Combining information. We (and our third party business partners on our behalf) may merge, co-mingle, or otherwise combine information, including your personal information, in furtherance of the purposes described above.
To comply with legal obligations. We may use your information to comply with our legal obligations or to exercise or defend our rights or the rights of a third party, including complying with law enforcement or government authority requests and participating in compliance audits.
To protect us and others. We may use your information where we believe it necessary to investigate, prevent, or take action regarding suspected or actual illegal activities, fraud, situations involving potential threats to the safety of any person or to otherwise enforce this Policy, our Terms and Conditions, and the integrity of the Service.
Deidentified data. We may also deidentify or anonymize your data in such a way that you may not reasonably be re-identified by us or another party, and we may use this deidentified data for any purpose permitted under applicable law. To the extent we deidentify any data originally based on personal information, we will maintain and use such data in deidentified form and will not attempt to reidentify the data.
The data subject to treatment will not be used for purposes other than or incompatible with those mentioned above and that motivated its collection. Notwithstanding the foregoing, it is stated that the recorded data may be used, in addition to the purposes for which it was expressly collected, for the purpose of carrying out statistics, managing incidents or conducting market studies. However, in the event that personal data is processed for a purpose other than that initially specified when collecting said data, a compatibility analysis will be carried out by Neurotransvision LTD in accordance with applicable regulations. The processing will only be authorized if the original purpose is compatible with the new purpose or allowed in accordance with an independent legal basis. In these cases, the user will be informed of the changes in purpose or legal justification for the processing of their data.
We remind the user that they can oppose the sending of commercial communications (unsubscribe) and stop receiving emails from Neurotransvision LTD, reliably notifying Neurotransvision LTD, which will proceed to interrupt in the shortest possible time after receiving such communication. For this purpose, it may send an email to the address indicated in Section 2, a postal mail addressed to the address indicated in Section 2 hereof, or directly follow the unsubscribe instructions detailed at the end of each email of Neurotransvision LTD.
We will use the information we collect about you for the following purposes:
If we want to use your information for any other purpose, we will ask for your consent and use your information only when we receive your consent and then only for the purpose(s) for which consent will be granted, unless we are required by law to do otherwise.
We will retain your personal information with us for 24 months after user accounts remain idle or for as long as necessary to fulfil the purposes for which it was collected, as detailed in this Privacy Policy.
By providing personal data to Neurotransvision LTD, the user declares to accept its processing fully and without reservation by Neurotransvision LTD. The user gives his/her free, express and informed consent to Neurotransvision LTD's use of the data collected for the purposes indicated in Section 5, as well as its incorporation into a Neurotransvision LTD database.
The Neurotransvision LTD carries out the processing of legitimised user data: (i) the contracting of Neurotransvision LTD services by the user, in accordance with the terms and conditions that are made available to the user at the end of the completion of the service request form (prior to possible contracting) and which the user (after reading them), and if the user agrees, can accept by ticking the box that has been included for this purpose; and (ii) the free, informed and unambiguous consent of the user, made after reviewing this privacy policy, where Neurotransvision LTD informs you of the processing it will carry out with your data, and if you agree, by ticking the box that has been included for this purpose in the service request form. Data processing that is not covered by any of the above legal bases will be carried out if Neurotransvision LTD considers it necessary to protect a legitimate interest and only if it does not infringe the fundamental rights and freedoms of the user.
The data will be destroyed or archived when it is no longer strictly necessary or relevant for the purposes described in Section 5 above. In particular, personal data will be kept for as long as the business relationship is in force (and to the extent that you have not previously requested their deletion) and for as long as obligations, indemnities and/or liabilities may arise under the business relationship or for the services provided.
Neurotransvision LTD informs you that it will retain information essential to identify the origin of the data stored for the duration of the client's relationship with Neurotransvision LTD and/or revocation of the user's consent in accordance with the information in Section 5 of this Privacy Policy and/or as long as required by applicable law.
Neurotransvision LTD will keep collected personal data private and confidential, and will not use it for purposes other than those set out in Section 5 hereof. Neurotransvision LTD requires its employees and third parties providing services that access the contents of the databases to sign confidentiality and personal data processing agreements (or include such obligations in the service agreements it signs with such providers, as indicated in the following paragraph).
The user's personal data collected by Neurotransvision LTD will not be transferred, sold, exchanged, transmitted and/or communicated to third parties outside Neurotransvision LTD without the user's consent, except for legal obligation and/or for the purpose of providing the services to the user. This does not include certain employees and service providers enabling Neurotransvision LTD to keep the Site operational, fulfil the objectives set out in Section 5 of this document and/or provide services to the user, who have undertaken the obligation to maintain the confidentiality of the data provided and undertake to comply with applicable regulations on the protection of personal data, at the time of contracting. Contracts with service providers stipulate the purpose, scope, content, duration, nature and purpose of data processing, the type of personal data, the categories of data subjects and the obligations and responsibilities of Neurotransvision LTD and contracted third parties.
In particular:
Neurotransvision LTD may share the personal information provided with parent companies, affiliates, subsidiaries, related companies and/or intermediaries related to Neurotransvision LTD.
Neurotransvision LTD may share certain user-provided personal information internally within Neurotransvision LTD, with certain departments, such as administration, marketing, or IT.
Social Networks. Neurotransvision LTD also uses social networks, such as Facebook or Instagram, and has integrated functions of these networks into its services. The user may only use these social networks to the extent that they are registered in them and have accessed the corresponding social network with their user. These social networks have their own privacy policies and their own terms and conditions, over which Neurotransvision LTD has no interference or control.
Finally, you should be aware that Neurotransvision LTD may (and that Neurotransvision LTD reserves the right to) disclose your information in the following cases:
Business transfer: If we or our subsidiaries are acquired, merged, or invested in by another company, or if any of our assets are transferred or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected about you to the other company. As part of the business transfer process, we may disclose certain information about you to lenders, auditors, and outside advisors, including lawyers and consultants.
Compliance with the law: We may disclose your personal information to comply with the law, a legal proceeding, a court order, or other legal process, such as in response to a court order or subpoena.
Protection and Facilitation of Rights: We may disclose your personal information when we believe it is appropriate to investigate, prevent, or take action against illegal activities, suspected fraud, situations that may pose potential threats to the safety of any person, or violations of our Terms and Conditions or this Policy. This disclosure may also include using your personal information as evidence in litigation in which we are involved. Additionally, we may disclose your personal information when necessary to assist you in exercising your rights under the Terms and Conditions of Neurotransvision LTD and this Privacy Policy.
Reasons related to public safety, national defense, or public health: In situations where there are well-founded reasons related to the safety of the community, national defense, or public health, your personal information could be disclosed.
Aggregate, anonymized, or de-identified information: We may disclose aggregate, anonymized, or de-identified information about you for any purpose permitted by applicable law.
Consent: We may disclose your personal information with your consent.
Neurotransvision LTD declares its intention to adopt the necessary technical and organisational measures to ensure the security, integrity and confidentiality of the data in accordance with the provisions of RGPD,, ,the Argentine LPDP,, ,LGPD,, ,CCPA,, ,VCDPA,, ,CPA,, ,CTDPA,, ,PIPEDA-CASL,, ,APA,, ,LFPDPPP,, ,Colombian Law,, ,PDPA Singapore,, ,PDPA Thailand,, ,nFDPA Swiss, and ,DPDPA in order to prevent its tampering, loss, consultation or unauthorised processing.
In particular, all the credit data provided is transmitted via SSL (Secure Socket Layer) and encrypted in the database of the payment platform of the provider of these payment services. It is stated that credit data (credit card number, among others) are not stored in the Neurotransvision LTD servers or in Google Drive. In order to guarantee the confidentiality of the processing, the payment service provider is contractually obliged to respect the confidentiality of the information.
Neurotransvision LTD does not guarantee absolute privacy when using the Site, since the possibility that unauthorised third parties may have knowledge of it cannot be excluded. The user acknowledges that the existing technical means that provide security are not impregnable and that even when all reasonable security precautions are taken, it is possible to suffer manipulation, destruction and/or loss of information. In the event that a security incident is detected and entails a significant risk to the data owner, such event will be reported without delay to the competent control authority, together with the corrective and remedial measures implemented and/or to be implemented.
Neurotransvision LTD is not responsible for the loss or deletion of data by users. Similarly, Neurotransvision LTD accepts no responsibility for possible damage caused by computer viruses.
Finally, the user must also take measures to protect their information. Neurotransvision LTD insists that you take every precaution to protect your personal information while on the Internet. At the very least, it is advisable to change your password periodically, using a combination of letters and numbers, and to make sure you are using a secure browser.
The data owner user may at any time exercise the rights of access, rectification, cancellation, opposition, limitation of processing, portability, confidentiality and deletion of his/her personal data, in accordance with the provisions of articles 15 and following of the RGPD, the provisions of the Argentine LPDP, the provisions of the LGPD, the provisions of the CCPA, the provisions of the VCDPA, the provisions of the CPA, the provisions of the CTDPA, the provisions of the PIPEDA-CASL, the provisions of the APA, the provisions of the LFPDPPP, the provisions of the Colombian law, the provisions of the PDPA-Singapore, the provisions of the PDPA- Thailand, the provisions of the nFDPA, the provisions of the DPDPA, as applicable.
The exercise of these rights may be carried out by the user him/herself by means of an e-mail addressed to seb@neurotransvision.com, or by written communication addressed to the Data Protection Officer at the following address seb@neurotransvision.com, or by any of the methods provided for in the applicable regulations referred to above. Neurotransvision LTD may request the data necessary to validate the identification of the data owner.
The deletion of some data shall not be carried out where it may cause damage to the legitimate rights or interests of third parties, or where there is a legal obligation to retain the data.
If you are located in the UK or EEA, and subject to national or local law exemptions, you have certain data protection rights in certain circumstances. Please contact us if you would like to exercise any of these rights.
Neurotransvision LTD has appointed delegate for the application and control of this Privacy Policy and the relationship with the application authority to Sebastian Frederic Werner who can be contacted by the following means:
The staff of Neurotransvision LTD whose functions are related to the processing of personal data are trained in order to ensure better protection of personal data and the rights of data subjects.
The Site may contain links to third party websites, with or without advertising content, whose privacy policies are foreign to Neurotransvision LTD. The linked sites are not related to Neurotransvision LTD and, their existence in no way presupposes that there is any kind of suggestion, invitation or recommendation to visit the target sites or any kind of link or association between Neurotransvision LTD and such sites. Neurotransvision LTD is not responsible for the content, use and activities of these linked sites, or for any actual or potential, material or moral, direct or indirect damages suffered by users and derived from the information contained in such sites or the relationship that users may establish with third parties whose services have been published on the Site. Notwithstanding the above, any feedback on these linked sites will be useful to Neurotransvision LTD in order to improve the services and/or ensure the integrity of the Site. Neurotransvision LTD undertakes to do everything possible to prevent the existence on its Site of links to sites with illegal content.
At Neurotransvision LTD, we recognize the importance of protecting the privacy of children. Our commitment to safeguarding the personal information of minors is unwavering. We may collect and process personal information from children under the age of 13, but only in compliance with all applicable laws and regulations, including obtaining parental or guardian consent as required.
If you are a parent or guardian and you believe that we have collected personal information from your child without appropriate consent, please contact us immediately, and we will take prompt action to address the situation.
For residents of California: We do not sell the personal information of California consumers who are 16 years old or younger unless we have obtained prior parental authorization. If your child is under the age of 13, we insist on receiving parental or guardian consent for the collection and processing of their personal information. If your child falls within the age range of 13 to 16 years, they can opt-in to allow the sale of their personal information. Our websites and services designed for children will incorporate age verification and ensure the necessary consents are obtained.
For EU residents: We do not collect or process personal information of individuals in the EU under the age of 16 without explicit consent from a parent or guardian. Our websites and services directed towards children will include age verification and require the appropriate consents.
When you visit the Site, Neurotransvision LTD may store certain information on your computer in the form of a "cookie" or similar file. The Site uses cookies to (i) track advertising, (ii) collect traffic data from the Site, and (iii) improve the user experience when using the Site.
The user should be aware that, in order to browse the Site, it is not necessary for him or her to allow the installation of cookies sent by the Site. This may only be required in relation to certain services. You may delete cookies from your computer hard drive, prevent access to your computer through your browser or by choosing the corresponding option when asked about the possibility of using cookies for these purposes and in accordance with Neurotransvision LTD Cookie Policy.
Cookies are files of information that a website or the provider of certain services on the site transfers to the hard drive of the user's computer via the browser. Cookies by themselves cannot personally identify the user (although they may contain the user's IP address) but they allow them to recognise the user's browser, and to capture and store certain data (the user's operating system, the domain name of the website from which the Site was linked, among others). Neurotransvision LTD reserves the right to hire the services of third parties to analyse and understand the users of the Site, who may not use the information collected for purposes other than improving Neurotransvision LTD's services.
Your use of the Site constitutes your acknowledgement and approval of Neurotransvision LTD's Privacy Policy and Neurotransvision LTD's Terms and Conditions, if any. Likewise, the user accepts Neurotransvision LTD's Privacy Policy and Neurotransvision LTD's Terms and Conditions by completing the request for services.
You may have certain rights regarding our processing of your personal information under applicable local law. If our processing of your personal information is governed by such laws, this section provides you with additional information regarding your rights and our processing of your personal information under applicable local law.
MARKETING COMMUNICATIONS
We may send periodic promotional emails to you. You may opt-out of promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about your account or any services you have requested or received from us.
DATA RETENTION
Your personal information will be held for only so long as it is necessary for the purpose for which it was originally collected, and in accordance with applicable local law. We will retain your personal information for the period necessary to fulfill the purposes outlined in this Policy. When assessing retention periods, we first examine whether it is necessary to retain the personal information collected and, if retention is required, work to retain the personal information for the shortest possible period permissible under applicable law.
To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of the personal information, the purposes for which we process the personal information, and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
YOUR PRIVACY CHOICES AND RIGHTS
Depending on the jurisdiction in which you live, you may have the following rights under applicable local law:
These rights may be limited or denied in some circumstances. For example, we may retain your personal information where required or permitted under applicable law.
You may also opt-out of our “sale” or “sharing” of your personal information through privacy preference signals recognized under applicable local law, such as the Global Privacy Control (GPC), but please note that this signal will be linked to your browser only. For more information on the GPC and how to use a browser or browser extension incorporating the GPC signal, see https://globalprivacycontrol.org/.
VERIFICATION PROCESS
In order to protect your information, we will confirm a requestor’s identity before responding to any request. To start the process, you must provide your name and email. We will ask you at least one question, and you must reply by email with the correct answer for each question based on your previous interaction with us. If we still cannot verify your identity as required by applicable laws, we will let you know and may ask additional questions. Otherwise, we will acknowledge your request and contact you later with our full response.
We will only send verification questions from seb@neurotransvision.com. Before sending a verification response, please double-check the email address. If you receive an email that appears to be from us but is not from our verification email address listed above, do not respond.
Any information we gather through this process will only be used for consumer verification, security procedures, or fraud-prevention. We will delete any verification information as soon as practical after processing your request.
AUTHORIZED AGENTS
You may designate an authorized agent to exercise your rights under applicable laws on your behalf.
Pursuant to applicable laws:
You must provide the authorized agent written permission to exercise your rights under applicable laws on your behalf.
We may deny a request from an authorized agent on your behalf if the authorized agent does not submit proof that he, she, or it has been authorized by you to act on your behalf if we request such proof, as permitted by applicable laws.
Even if you use an authorized agent to exercise your rights under applicable laws on your behalf, pursuant to applicable laws we may still require that you verify your own identity directly to us.
FINANCIAL INCENTIVES
"Financial incentive" means a program, benefit, or other offering, including payments to consumers as compensation, for the disclosure, deletion, sale, or sharing of personal information.
The law permits financial incentives or a price or service difference if it is reasonably related to the value of the consumer's data. A business must be able to explain how the financial incentive or price or service difference is reasonably related to the value of the consumer's data.
The explanation must include:
We do not offer financial incentives to collect personal information and we will not discriminate against you if you exercise any of the rights provided by applicable laws set forth in this Privacy Policy. Please note that a legitimate denial of a request for information, deletion, or to opt-out is not discriminatory, nor is charging a fee for excessive or repetitive consumer requests as permitted by applicable laws.
APPEALS
If we decline to take action regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please email us at Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may contact the Attorney General to submit a complaint.
CALIFORNIA RESIDENTS
California Civil Code Section 1798.83, also known as the 'Shine The Light' law permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below and include the email address associated.
With your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g., backups, etc.)."
This is the current version of the Neurotransvision LTD Privacy Policy, updated on April 22, 2024.
Neurotransvision LTD may at any time and without prior notice, modify this Privacy Policy. Such modifications will be operative from their publication on the Site or when they are notified to users by any means, whichever occurs first. The user must keep informed about the terms included here by entering periodically.
We believe that privacy is important. As such, we only collect the information needed to conduct business and improve your experience. We will never sell your data and we will not share your data without your permission. Our Privacy Policy below, and our list of Subprocessors covers a list of the data we collect, how and why we use it, and where it is kept.
Thank you for visiting our Site and/or using Heights, an app designed to allow you to build and manage your own online education program. This Privacy Policy, like our Terms of Service, is an integral part of using our service, and you must completely agree to it in order to use our website and service.
Throughout this document, we may use certain words or phrases, and it is important that you understand the meaning of them. The following is a non-exhaustive list of definitions of words and phrases found in this document:
“App” refers to our Heights app, which provides a platform for creating and managing online education programs;
“Heights” refers to our company, known as “Velora Studios, LLC”; our Site; our Service; our App; or a combination of all or some of the preceding definitions, depending on the context in which the word is used;
“Privacy Policy” refers to this Privacy Policy;
“Service” refers to the services that we provide through our Site, including our Site itself, our education platform creation services, our App, and any other services we may provide online or offline;
“Site” refers to our website, www.heightsplatform.com;
“Subprocessor” refers to an entity which processes personal data on behalf of Heights so that we can provide our Service;
“User” refers to users of our App, and general visitors to our Site;
“You” refers to you, the person who is governed by this Privacy Policy.
Identifying Information
We collect certain personal information from you when you sign up to our Service that can be used to identify you, such as your name, e-mail address, credit card information, IP address, time zone information, password, and any other information that we may deem relevant to provide our Service to you. The information we collect from you, to the extent that it is private, is disclosed only in accordance with our Terms of Service and/or this Privacy Policy. We will never sell your personal info to third parties, and we won’t use your name or company in our marketing materials without your permission.
Non-Identifying Information
Whenever you visit our Site, we may collect non-identifying information from you, such as your IP address, referring URL, browser, operating system, cookie information, and Internet Service Provider. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, this information alone cannot usually be used to identify you.
We may use your information to:
Users may in some cases be able to review and edit the personal information they have provided to us by logging into your account on the Site and editing their account. Although most changes may occur immediately, information may still be stored in a web browser’s cache. We take no responsibility for stored information in your cache, or in other devices that may store information, and disclaim all liability of such. In addition, we may, from time to time, retain residual information about you in our backup and/or database.
We use cookies to create a session and remember a User as they use our Site, in order to distinguish them from other Users. We also use them to remember your preferences, compile statistical data about the usage of our Site, protect against malicious usage of our Site and optimize the speed of our Site. For this reason, it is necessary that you enable cookies in your browser in order to use our Service, and you hereby acknowledge that we have informed you of our use of cookies and that you consent to our use of cookies in relation to your computer system. There are four primary uses for different types of cookies we may use:
| Cookie Type | Purpose |
|---|---|
| Operation Essential | These cookies are necessary for us to provide our Service. They help to recognize your account status, protect your account security, and remember your preferences. |
| Analytics | These cookies help us to maintain and continuously improve our Service. We use this type of cookie to help improve your experience using our Service. |
| Advertising | We use these cookies to serve advertisements that we believe may be relevant to your interests, and to measure the effectiveness of these advertisements. We also may use the information provided by this type of cookie for frequency capping purposes (ie: to ensure we are not serving the same advertisement to you too many times). |
| Third Party | Subprocessors and other businesses we have contracted may use cookies for the same purposes as described above. |
Revoking permission of certain cookies that are not operation essential for us to provide our service:
Heights uses the Facebook Conversion Tracking Pixel, a service of Facebook, Inc. (https://www.facebook.com/policy.php). This cookie is an advertising type cookie which allows us to record the results of our advertisement performance for marketing purposes. You can revoke the permission for Facebook to track this at the following link: https://www.facebook.com/ads/website_custom_audiences/
Heights uses Google Analytics, a service of Google, Inc. (https://policies.google.com/privacy?hl=en) which allows us to track visits to our website and other browser data so that we can improve your experience. Our particular use of Google Analytics keeps your IP address anonymized before Google records it. This anonymized, or masked IP address, will not be connected to any other data on Google. This is an analytics type cookie. You can prevent analysis of your browser behavior across all websites using Google Analytics by installing this browser plugin: http://tools.google.com/dlpage/gaoptout. Google Analytics Advertising Features may also use anonymized insights into your device behaviors, and you can access and or delete such data via Google's "My Activity" page.
Heights may post links to third party websites on its Site. These third party websites are not screened for privacy or security issues by Heights, and you release us from any liability for the conduct of these third party websites.
Please be aware that this Privacy Policy, and any other policies in place, in addition to any amendments, does not create rights enforceable by third parties or require disclosure of any personal information relating to members of the Service or Site. Heights bears no responsibility for the information collected or used by any advertiser or third party website. Please review the privacy policy and terms of service for each site you visit through third party links.
Although you are entering into an Agreement with Heights to disclose your information to us, we do use third party individuals and organizations to assist us, including contractors, web hosts, and others.
Throughout the course of our provision of our Service to you, we may delegate our authority to collect, access, use, and disseminate your information. For example, our web host stores the information that you provide us, and we may hire outside contractors to perform maintenance or assist us in securing our website. A current list of vendors is available upon request.
It is therefore necessary that you grant the third parties we may use in the course of our business the same rights that you afford us under this Privacy Policy. For this reason, you hereby agree that for every authorization which you grant to us in this Privacy Policy, you also grant to any third party that we may hire, contract, or otherwise retain the services of for the purpose of operating, maintaining, repairing, or otherwise improving or preserving our website or its underlying files or systems. You agree not to hold us liable for the actions of any of these third parties, even if we would normally be held vicariously liable for their actions, and that you must take legal action against them directly should they commit any tort or other actionable wrong against you.
Without limiting the generality of the foregoing, you authorize us to use the following third party services which may also store data about you:
| Supplier | Data Type | Anonymized | Discarded | Archived |
|---|---|---|---|---|
| Algolia | Search queries | Yes | Automatically after ~24 hours | |
| Amazon Web Services | Media files | Yes | After trial or subscription ended | |
| Bunny | Media files | Yes | After trial or subscription ended | |
| CloudFlare | Media files | Yes | After trial or subscription ended | |
| Continually | Email, name | |||
| Continually | Browser identifiers | |||
| Google Analytics | Browser identifiers | Yes | ||
| Help Scout | Email, name | |||
| Help Scout | Browser identifiers | |||
| Heroku | Email, name | After trial or subscription ended | ||
| Heroku | Password | Bcrypt encryption | After trial or subscription ended | |
| Heroku | Account data/media files | After trial or subscription ended | ||
| Kit | Email, name | |||
| Plerdy | Browser identifiers | Yes | Automatically after 6 months | |
| Posthog | Account analytics | Yes | ||
| OpenAI | Account data | After trial or subscription ended | ||
| Rollbar | Error logs | Automatically after 30 days | ||
| Scout APM | Operation heuristics | Yes | Automatically after 30 days | |
| Sendgrid | Email, name | |||
| SparkLoop | Email, name, referral data | |||
| Stripe | Credit card data | PCI Compliant | ||
| Transloadit | Media files | Yes | Automatically after ~24 hours |
Users have the option to make certain community channels or posts publicly visible and indexable by search engines. In these public areas, you should have no expectation of privacy. Content you post or share in such areas may be viewed, copied, or otherwise shared by third parties, and we cannot control or prevent further distribution by those external parties. This includes indexing by search engines or caching on third-party websites, which may persist even if you later remove the content from our Service.
If you choose to post personal or sensitive information — whether yours or that of a third party — in these publicly visible areas, you acknowledge and represent that you have all necessary rights or consents to do so. Heights is not responsible for the use, misuse, or further distribution of content you make publicly available in these channels. If you wish to remove publicly posted content, you may do so from within your account or by contacting us. Please note, however, that removing content from our platform does not guarantee its removal from third-party caches or archives.
You authorize us to allow third party Site and App visitors to view and download data to their respective devices (not limited to mobile phones, tablets, laptops, computers), whether these third party visitors access this content via our Site, App or view and download this content via any mobile application which displays it. Without limiting generality, you understand that the ability of other parties to view information you save in our App and Site is a part of the Service we are providing to you.
At times it may become necessary, for legal purposes, to release your information in response to a request from a government agency or a private litigant. You agree that we may disclose your information to a third party where we believe, in good faith, that it is desirable to do so for the purposes of a civil action, criminal investigation, or other legal matter. In the event that we receive a subpoena affecting your privacy, unless we are legally prevented from it, we will notify you to give you an opportunity to file a motion to quash the subpoena, or we may attempt to quash it ourselves, but we are not obligated to do either. We may also proactively report you, and release your information to, third parties where we believe that it is prudent to do so for legal reasons, such as our belief that you have engaged in fraudulent activities. You release us from any damages that may arise from or relate to the release of your information to a request from law enforcement agencies or private litigants.
By providing information to the Site that forms the basis of communication with you, such as contact information, you waive all rights to file complaints concerning unsolicited email from Heights since, by providing such information, you agree to receive communication from us other anyone else covered under this Privacy Policy. However, you may unsubscribe from marketing communications by clicking on the unsubscribe links in our marketing emails, or by notifying Heights that you no longer wish to receive solicitations or information and we will remove you from the database. We may still send certain transactional emails required in order to provide you notice to important alerts regarding your account in our Service.
We take certain measures to enhance the security of our Site and Service, such as by using SSL Certificates. Your data is encrypted in transit between you and Heights for account and payment related pages. Should you be accessing our service through a custom domain (ie: a domain other than heightsplatform.com), ensure that the domain used to access our service also has HTTPS if you want your data to be encrypted throughout our entire App. We make routine, secure backups of your data, and we use multiple techniques to eliminate points of failure. We also conduct security reviews on our Service periodically and ensure that third party contractors and employees only have access to the information that is necessary for them to perform their job. However, we make no representations as to the security or privacy of your information. It is in our best interest to keep our website secure, but we recommend that you exercise precautions and use anti-virus software, firewalls, and other precautions such as not telling others your password to protect yourself from security threats. If you need to report an exploit, or you have noticed and incident with your account, please contact us at security@heightsplatform.com.
In the event that your private data are disclosed to unauthorized people (ie: hackers), Heights will send email notifications to all possibly affected parties. We may also make an announcement on our Site directly.
We retain your personal information for the duration of our business relationship, and afterwards for as long as necessary for legitimate business purposes until you exercise your right to erase your personal information. When you request your account and personal information be deleted, we’ll ensure that nothing is stored on our servers past 30 days. Data that you choose to delete from your account while it is active will also be deleted within 30 days, though most data is deleted instantly.
The General Data Protection Regulation (“GDPR”) gives people under its protection certain rights with respect to their personal information collected by us on the Site. Accordingly, Heights recognizes and will comply with GDPR and those rights, except as limited by applicable law. The rights under GDPR include:
Many of these rights can be exercised by logging in to our App and directly updating or deleting your account data. If you have any questions about exercising these rights, please contact us at privacy@heightsplatform.com.
This section pertains only to residents of California. Heights permits residents of California to use its services. Therefore, it is the intent of Heights to comply with the California Business and Professions Code §§ 22575-22579 and the California Consumer Privacy Act of 2018 (“CCPA”). If you are a California resident, you may request certain information regarding our disclosure of personal information to any third parties for their direct marketing purposes. Various provisions throughout this Privacy Policy address requirements of the Californian privacy statutes. In summary, you must presume that we collect electronic information from all visitors.
Below are the rights you have, though these are not absolute. In certain cases we may decline your request as permitted by law.
You may contact us at privacy@heightsplatform.com with any questions or to exercise these rights listed above. We may require government identification to process your request and to confirm your residency.
Individuals under 13 years of age are not allowed to use our Service. If you become aware of a User who is under the required age to use our Service, please notify us immediately at privacy@heightsplatform.com and provide us with full details as to why you believe they are below that age and we will address the issue. If you are a User who is reported in this manner, we may require you to provide suitable proof of age, such as a copy of government identification, in order to continue using our Site and/or Service.
Your information may be transferred to - and maintained on - computers located outside of your state, province, country or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. Heights transfers Personal Information to the United States and to multiple third party Subprocessors (List of Subprocessors). We enter into GDPR-compliant data processing agreements with each of these Subprocessors. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
Like our Terms of Service, we may amend this Privacy Policy from time to time. When we amend this Privacy Policy, we will update this page. We may send out an email notification to notify you if more significant changes are made. You must read this page each time you access our Site and Service and notify us at privacy@heightsplatform.com with details sufficient to identify your account if you do not agree to the amendments, so that we may terminate your account. You may also contact us via mail with questions at:
Attn: Velora Studios, LLC
16192 Coastal Highway
Lewes, Delaware 19958
United States
Last Modified: March 17, 2025