Your privacy is important to us. This privacy statement explains how BreadButter IO. (“Bread & Butter”, “us”, “we”) collects and uses your personal information.
The product-specific details sections provide additional information relevant to Bread & Butter products. This statement applies to the Bread & Butter products listed below, as well as other Bread & Butter products that display this statement. References to Bread & Butter products in this statement include Bread & Butter services, websites, apps, and software.
This Policy applies to the processing of Individual Customer Personal Data that Bread & Butter receives in Canada concerning Individual Customers who reside in the European Union and Switzerland. Bread & Butter provides products and services to businesses and consumers.
This Policy does not cover data from which individual persons cannot be identified or situations in which pseudonyms are used. (The use of pseudonyms involves the replacement of names or other identifiers with substitutes so that identification of individual persons is not possible.)
Responsibilities and Management
Bread & Butter has designated a Privacy Officer to oversee its information security program, including its compliance with GDPR. The Privacy Officer will review and approve any material changes to this program as necessary. Any questions, concerns, or comments regarding this Policy also may be directed to privacyofficer@BreadButter.io
Bread & Butter will maintain, monitor, test, and upgrade information security policies, practices, and systems to assist in protecting the Personal Data that it collects. Bread & Butter personnel will receive training, as applicable, to effectively implement this Policy. Please refer to Security of Personal Data for a discussion of the steps that Bread & Butter has undertaken to protect Personal Data.
Collection and Use of Personal Data
Bread & Butter provides the ability for its customers to integrate with authentication services provided by Identity Providers (IDPs). To operate effectively and provide Bread & Butter customers with the best experience with our products, Bread & Butter collects Personal Data from individual Participants.
Personal Data We Collect
The data we collect depends on the products and features a Bread & Butter Participant uses and can include the following:
Name and contact data. We may collect first and last name, email address, postal address, phone number, and other similar contact data.
Credentials. We collect passwords, password hints, and similar security information used for authentication and account access for Local Login feature only. Credentials are not stored or accessed for Identity Provider authentication.
Demographic data. We collect data about a Participant such as preferred language.
Device and Usage data. We collect data about a Participant’s device and how a Participant and their device interacts with Bread & Butter and our products. For example, we collect:
ALL content, when transported between Bread & Butter products, is done using HTTPS (TLS 1.1 or higher).
We also collect the content of messages sent to us, such as feedback, product reviews, or questions and information provided for customer support. When a Participant contacts us, such as for customer support, phone conversations or chat sessions with our representatives may be monitored and recorded.
Product-specific sections below describe data collection practices applicable to the use of those products.
Bread & Butter does not disclose personal information to third parties for purposes that are materially different than what it was originally collected for. Should this change in the future, we will provide individuals with the option to opt-out.
Reasons We Share Personal Data
We may share personal data among Bread & Butter-controlled affiliates and subsidiaries. We also may share personal data with vendors or agents working on our behalf for the purposes described in this statement. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal data to provide those functions. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. We may also disclose personal data as part of a corporate transaction such as a merger or sale of assets. Finally, we will access, transfer, disclose, and preserve personal data, including Participant content when we have a good faith belief that doing so is necessary to:
Additionally, we may contact you from time to time for the purpose of providing product or service updates or other such information, including by regular mail as well as through in-product notifications.
Disclosures / Onward Transfers of Personal Data
Except as otherwise provided herein, Bread & Butter discloses Personal Data only to Third Parties who reasonably need to know such data only for the scope of the initial transaction and not for other purposes. Such recipients must agree to abide by confidentiality obligations.
Bread & Butter may provide Personal Data to Third Parties that act as agents, consultants, and contractors to perform tasks on behalf of and under our instructions. For example, Bread & Butter may store such Personal Data in the facilities operated by Third Parties. Such Third Parties must agree to use such Personal Data only for the purposes for which they have been engaged by Bread & Butter and they must either:
Bread & Butter also may disclose Personal Data for other purposes or to other Third Parties when a Data Subject has consented to or requested such disclosure. Please be aware that Bread & Butter may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. Bread & Butter is liable for appropriate onward transfers of personal data to third parties.
Pursuant to the Privacy Shield Frameworks, EU and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to privacyofficer@Bread & Butter.com. If requested to remove data, we will respond within a reasonable timeframe. We will provide an individual opt-out or opt-in choice before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to privacyofficer@BreadButter.io
Cookies & Similar Technologies
Security of Personal Data
Bread & Butter is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit any data (such as messages, attachments, etc.) over the Internet, we protect it using HTTPS encryption.
Where We Store and Process Personal Data
Personal data collected by Bread & Butter may be stored and processed in your region, in the United States, or in any other country where Bread & Butter or its affiliates, subsidiaries, or service providers maintain facilities. Bread & Butter maintains its services in Canada. Typically, the primary storage location is in the customer’s region or in the United States, often with a backup to a data center in another region. The storage location(s) are chosen to operate efficiently, to improve performance, and to create redundancies to protect the data in the event of an outage or other problem. We take steps to ensure that the data we collect under this privacy statement is processed per the provisions of this statement and the requirements of applicable law wherever the data is located.
Our Retention of Personal Data
Bread & Butter retains personal data for as long as necessary to provide the products and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types in the context of different products, actual retention periods can vary significantly. The criteria used to determine the retention periods include:
Changes to This Privacy Statement
We will update this privacy statement when necessary to reflect customer feedback and changes in our products. When we post changes to this statement, we will revise the “last updated” date at the top of the statement. If there are material changes to the statement or in how Bread & Butter will use your personal data, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this privacy statement to learn how Bread & Butter is protecting your information
How to Contact Us
If you have any concerns, technical or support questions, please submit an email to Bread & Butter Support.
Enforcement and Dispute Resolution
Complaints can also be submitted to:
BreadButter IO, Inc. c/o Privacy Officer ADDRESS Email: privacyofficer@BreadButter.io
Other Important Privacy Information
Below you will find additional privacy information you may find important.
GDPR Privacy Rights
Bread & Butter adheres to applicable data protection laws in the European Economic Area, which if applicable includes the following rights:
As applicable under French law, you can also send specific instructions to us regarding the use of your personal data after your death.
When we process personal data about you, we do so with your consent and/or as necessary to provide the products you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests of Bread & Butter as described in the “How We Use Personal Data” and “Reasons We Share Personal Data” sections above.
Add authentication & API event tracking to your website/app with a script tag & configuration