Constrafor

Privacy Policy Overview

*This is a plain-English summary, not legal advice. The policy appears broad and leaves several important details unspecified.*

1. Data Collection & Use

Constrafor may collect:

• Identity and contact data: name, phone number, email, company, username, and profile information.
• Account credentials: usernames and passwords.
• Information about other users: details about people you add to the Services and their roles or permissions.
• Financial information: credit-card or other financial-account details for purchases.
• User content: anything uploaded, entered, posted, reviewed, or communicated through the Services.
• Communications and applications: customer-support requests, correspondence, survey responses, promotional sign-ups, and job applications.
• Technical and behavioral data: IP address, browser and device details, operating system, identifiers, timestamps, pages viewed, links clicked, features used, crash reports, and session data.
• Location data: precise physical location through GPS/satellite, cellular, Wi-Fi, Bluetooth, beacons, or similar technologies, if you opt in.
• Information from other sources: public websites, social networks, companies, organizations, and third-party partners.

The stated purposes include providing and monitoring the Services, processing orders, customer support, security and fraud prevention, analytics, research, service improvement, personalized advertising, promotions, legal compliance, and enforcing the Terms of Use.

Important risks: The policy does not provide a detailed data-retention schedule. It says information may be kept as long as needed for the collection purposes or legal compliance. Required cookies cannot be disabled through the Services, and disabling cookies through your browser may impair functionality. The company does not honor “Do Not Track” signals.

Gmail data

For Gmail API features, the company says it stores the minimum Gmail data needed to provide the authorized “Cru” functionality, does not sell, share, or use Gmail data for advertising, and allows deletion through the “Cancel Cru Subscription” button. Active data is removed promptly, backups within 25 days, but some data may remain for up to 180 days under Google-related retention practices. The reference to “Cru” appears inconsistent with the rest of the policy and should be clarified.

2. User Rights and Choices

The policy expressly provides or describes these choices:

• Location: withdraw access through mobile-device permissions.
• Cookies: manage or disable many cookies through browser settings, subject to functionality limitations.
• Analytics: opt out of Google Analytics using Google’s browser add-on.
• Behavioral advertising: opt out through industry tools such as AboutAds.info or the Network Advertising Initiative. This does not eliminate advertising entirely.
• Gmail data: request deletion using the specified subscription-cancellation control.
• California Shine the Light: California residents may request information about entities receiving personal information for their own direct-marketing purposes during the prior calendar year.

The policy does not clearly describe broad rights to access, correct, export, or delete ordinary account data, nor does it provide a general privacy-request procedure or response deadlines. It also does not clearly address rights under laws such as the CCPA/CPRA or GDPR.

3. Third-Party Sharing

Information may be shared with:

• Hosting, storage, security, analytics, customer-support, application-development, tracking, reporting, and quality-assurance providers.
• Advertisers and advertising networks for interest-based advertising across websites and services.
• Affiliates, business partners, researchers, publications, and others in aggregated or de-identified form.
• Companies offering financial, lending, insurance, or other products—even where the company does not control those parties’ subsequent use.
• Buyers or successor entities during a merger, acquisition, sale, or change of control.
• Government authorities, courts, or others where legally required or needed to address fraud, security, legal violations, or safety concerns.
• Parties you authorize or direct.

Social-media plug-ins may allow platforms such as Facebook, Twitter, or Instagram to collect information about your activity. Linked third-party sites are governed by their own policies.

4. AI/ML Training

The policy does not expressly state that personal data, uploaded content, communications, or Gmail data are used to train artificial-intelligence or machine-learning models. It does permit broad “research,” “data analysis,” service-improvement, aggregated, and de-identification activities. Users should obtain written clarification before entering confidential or proprietary information, because the policy does not specifically exclude such information from model training or product-development use.

5. Key User Obligations and Restrictions

• Users represent that they are at least 18, although the Services are also described as not intended for children under 13.
• You should have authority and appropriate consent before uploading information about other individuals or connecting another person’s data.
• You remain responsible for information and content you submit.
• You should protect account credentials and use caution because internet transmission is not guaranteed secure.
• Cookie or location restrictions may reduce functionality.
• Continued use after policy changes constitutes acceptance.

6. Liability and Disputes

The policy provides no specific arbitration, governing-law, venue, or dispute-resolution terms. Those provisions may appear in the separate Terms of Use.

Constrafor disclaims any guarantee that transmitted information will remain secure and says users provide information at their own risk. It does not state a specific damages cap or comprehensive liability disclaimer in this document. For third-party websites, advertisers, and financial/insurance providers, Constrafor disclaims responsibility for their privacy practices and use of data.

For FCRA-related consumer reports, the company states that it collects information only for a permissible purpose, with authorization, generally provides it only to the authorized requesting end user, and applies reasonable security measures. The policy does not explain how to submit a consumer-report dispute or exercise all FCRA rights.

7. Policy Changes

Changes may be made at any time. The company will post the revised policy on this page and identify the update date; material changes will also be indicated on the homepage. No separate notice is promised. Continued use of the Services after posting means acceptance, so users should review the policy periodically.

Terms of Use: Key User Implications

> Scope: This agreement governs Constrafor’s SaaS services and support. It is primarily a commercial services contract and does not contain a complete privacy policy or detailed consumer-data rights framework.

1. Data Collection & Usage

What data is addressed

• Customer Data: Non-public data supplied by the customer to enable Constrafor to provide the services. The agreement does not specify categories of personal data, sensitive data, account information, usage logs, cookies, device data, or retention/security standards.
• Account information: Customers create administrative usernames and passwords. Customers are responsible for account and password security.
• Service and usage data: Constrafor may collect and analyze information relating to the provision, use, and performance of the services and related systems, including information concerning Customer Data and data derived from it.

How Constrafor may use it

Constrafor may use service-related information and data:

• To improve and enhance the services;
• For development, diagnostic, and corrective purposes; and
• For other Constrafor offerings.

Constrafor may disclose this information in aggregate or otherwise de-identified form in connection with its business. The agreement does not explain how de-identification is performed or whether data can be re-identified.

Important gap

There is no detailed privacy policy, data-processing addendum, breach-notification obligation, security standard, data-location provision, or specific treatment of sensitive or regulated data in the text provided. Customers handling personal, health, financial, government, or other regulated information may need additional contractual protections.

2. User Rights Regarding Data

The customer appears to retain its proprietary interest in Customer Data, while Constrafor retains ownership of the SaaS platform, software, improvements, and technology developed for the services.

Upon termination:

• Constrafor must make Customer Data available for electronic retrieval for 30 days.
• After that period, Constrafor may delete the data and is not required to retain it.

The agreement does not provide specific rights to:

• Correct, delete, or restrict processing during the subscription;
• Receive a portable copy in a particular format;
• Object to particular uses;
• Obtain confirmation of security incidents; or
• Exercise statutory privacy rights.

3. Third-Party Sharing

The agreement permits disclosure of service-related information in aggregate or de-identified form. It also anticipates third-party providers performing maintenance or supporting service availability, but does not identify those providers or describe their access to Customer Data.

Constrafor may use the customer’s name and trademarks in its marketing materials and website. It may not use them in press releases, references, or case studies without prior written consent.

Confidential information generally must be protected and not disclosed, but those obligations:

• End five years after disclosure; and
• Do not prevent legally required disclosure or disclosure of information already public or independently developed.

4. AI/ML Training

The agreement does not expressly state that Customer Data will or will not be used to train artificial-intelligence or machine-learning models.

However, Constrafor’s broad right to collect, analyze, and use information concerning Customer Data and derived data to improve services and for “other development” purposes could potentially encompass AI/ML development, depending on how the clause is interpreted. Customers concerned about model training should seek an express restriction, such as a prohibition on using identifiable Customer Data or prompts for training, and clarification regarding de-identified or aggregated data.

5. Key Customer Obligations and Restrictions

Customers must:

• Comply with Constrafor’s published policies, applicable laws, and regulations;
• Protect equipment, accounts, passwords, and files;
• Pay fees, taxes, overage charges, and invoices on time; and
• Use the service lawfully and according to the agreement.

Customers may not:

• Reverse engineer, decompile, disassemble, modify, or create derivative works from the service or software;
• Remove proprietary notices;
• Use the service for timesharing, service-bureau purposes, or another party’s benefit;
• Violate export-control laws.

The customer is responsible for all uses of its account and equipment, even without its knowledge or consent. It must indemnify Constrafor for claims arising from unlawful or improper use.

Billing disputes must be raised within 60 days of the relevant billing statement. Late amounts may incur 1.5% monthly interest, collection costs, and termination.

6. Liability and Disputes

• Services are provided largely “as is.”
• Constrafor does not guarantee uninterrupted, error-free service or particular results.
• Neither party is generally liable for indirect, consequential, special, incidental, exemplary damages, business loss, data loss/corruption, or substitute-service costs.
• Except for indemnity obligations and certain confidentiality or license-restriction breaches, liability is capped at fees paid in the preceding 12 months.
• The prevailing party in an enforcement action may recover attorneys’ fees and costs.
• Delaware law governs. The agreement does not specify an exclusive court or arbitration procedure.
• Either party may terminate for material breach with 30 days’ notice; nonpayment may permit termination without notice.

7. Changes and Notice

• Constrafor may change fees or add charges at the end of the initial or renewal term with 30 days’ notice, including by email.
• Customers must comply with Constrafor’s “standard published policies then in effect,” allowing those policies to change over time.
• The agreement does not provide a clear general process for amending the Terms or notifying customers of other substantive changes. Users should monitor email, published policies, and renewal notices.