GRYD.IO LLC

United States

1. Overview: Rewardify is committed to safeguarding the privacy and security of user data. This data retention policy outlines the guidelines for collecting, storing, and deleting user information. 2. Types of Data: Rewardify collects user API data, email addresses, and profile data to enhance the user experience and facilitate peer recognition within teams. 3. Data Retention Periods: • User API Data: User API data is retained for a period of 1 year, after which it is securely deleted. • Email Addresses: Email addresses are stored for the duration of the user's active engagement with Rewardify. Users who deactivate their accounts will have their email addresses removed after 1 year. • Profile Data: Profile data is retained for 1 year and is then securely deleted upon user request. 4. Archival Procedures: Archived data, if any, will be stored in compliance with legal obligations and may be retained for audit or compliance purposes. Archival procedures ensure data integrity during storage. 5. Storage Security Measures: User data is stored securely using industry-standard encryption protocols. Access controls and monitoring systems are in place to prevent unauthorized access. 6. User Consent and Preferences: Users have the right to manage their data preferences. Rewardify provides mechanisms for users to access, edit, or delete their data. Users can also opt out of specific data processing activities. 7. Data Deletion Policies: Upon user request or the expiration of data retention periods, Rewardify ensures prompt and secure deletion of user data from active databases and backups. 8. Compliance with Regulations: This policy aligns with relevant data protection laws and regulations. Any updates to this policy will be communicated to users in accordance with legal requirements. 9. Contact Information: For inquiries or requests related to data retention, users can contact our support team at support@rewardify.ai

1. Overview: This policy outlines the procedures for the archival and removal of user data to comply with the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). 2. Data Archival: • Data deemed necessary for archival purposes, in compliance with legal obligations or business needs, will be securely stored with restricted access. • Archived data will be retained for a period specified by applicable laws, regulations, or legitimate business needs. 3. Data Removal: • Upon user request or the expiration of the data retention period, personal data will be promptly and securely removed from active databases and archives. • Users can request data removal by contacting our support team at support@rewardify.ai 4. Consumer Rights (CCPA): • Users have the right to request information about the categories of personal information collected, and the right to have their personal information deleted. • Upon receiving a verified consumer request, personal information will be promptly deleted, and the user will be notified. 5. Data Subject Rights (GDPR): • Users have the right to access, rectify, erase, and restrict the processing of their personal data. • Data subject rights will be honored, and any requests for data removal will be processed promptly. 6. Security Measures: • Appropriate security measures will be implemented to protect archived data during storage, and access will be restricted to authorized personnel. 7. Data Breach Response: • In the event of a data breach, where personal data may be compromised, affected individuals and relevant supervisory authorities will be notified as per GDPR requirements. 8. Compliance Monitoring: • Regular reviews of this policy will be conducted to ensure ongoing compliance with the CCPA and GDPR, and updates will be made as needed.

Data Storage Policy 1. Overview: This policy outlines the procedures and guidelines for the secure storage of data to ensure confidentiality, integrity, and compliance with relevant data protection laws and regulations. 2. Data Classification: • Data will be classified based on sensitivity and criticality to the organization. • Classification levels include Public, Internal, Confidential, and Highly Confidential. 3. Data Storage Locations: • Internal servers and secure cloud-based storage solutions will be designated for data storage. • Data will not be stored on personal devices unless authorized and adequately secured. 4. Access Controls: • Access to stored data will be restricted based on job roles and responsibilities. • Regular access reviews will be conducted to ensure appropriateness. 5. Encryption: • All sensitive and confidential data at rest will be encrypted using industry-standard encryption algorithms. • Data transmitted between systems will be encrypted to prevent unauthorized interception. 6. Data Backup: • Regular backups of critical data will be performed to prevent data loss due to system failures, accidental deletions, or cyber threats. • Backup procedures will include testing for data recovery. 7. Data Retention: • Data will be retained based on legal requirements, business needs, and data usage purposes. • A data retention policy will govern the duration and conditions of data storage. 8. Data Deletion: • Upon expiration of the data retention period or user request, data will be securely deleted from active storage and backups. • Verification processes will ensure complete and irreversible data removal. 9. Data Security Measures: • Security measures, including firewalls, intrusion detection/prevention systems, and antivirus software, will be implemented to safeguard stored data from unauthorized access and cyber threats. 10. Employee Training: • Employees will be provided with training on data storage policies, including data classification, access controls, and secure storage practices. 11. Compliance Monitoring: • Regular audits and assessments will be conducted to ensure compliance with data protection laws, regulations, and internal policies. 12. Incident Response: • In the event of a data breach or unauthorized access, an incident response plan will be activated to address and mitigate the impact

yes

no

Users can request data removal by contacting our support team at support@rewardify.ai Receipt of Request: We receive the data deletion request through our designated channels and record it. Verification: We verify the identity of the requester to ensure they are the rightful owner of the data. Data Identification: We locate and identify all instances of the individual's data across our systems. Data Deletion: The identified data is securely deleted from all relevant systems to ensure it cannot be recovered. Documentation: We maintain a record of the deletion request and its fulfillment for compliance purposes. Confirmation: We notify the requester once their data has been successfully deleted. Follow-up: We continue to monitor our systems to ensure the deleted data does not reappear and address any issues that may arise.

no

no

yes

support@rewardify.com

no

no

yes

no