Policies

Who We Are

Open Flash Platform is the data controller responsible for the processing of personal data described in this Privacy Policy.

Email: contact@openflashplatform.org
Address: 305 Main Street, Ste 300, Redwood City, CA 94063

What Data We Collect

We collect the following types of personal data when you visit and interact with https://openflashplatform.org:

Cookie consent preferences. We record your choices about cookies and similar technologies through our consent management system (Trustwards).

Device and connection information. When you access the website, we receive technical information such as your IP address, browser type, device information, and similar technical identifiers needed to deliver the website and maintain its security and performance.

Website usage data (with your consent). If you allow analytics cookies, we collect information about how you use the website, such as pages viewed, interactions, and approximate location derived from IP address, to understand how the website is used and improve it.

Social media interaction data (with your consent). If you interact with embedded social media features or content, information may be collected through those features (for example, information about your interaction with the embedded content and related identifiers) depending on your settings and choices.

Sources of data:
We collect data directly from you when you submit information to us (for example, when you contact us).
We collect data automatically when you use the website (for example, device and connection information).
We collect data through cookies and similar technologies; non-essential cookies are used only after you make a choice through our cookie controls.

Providing device and connection information is necessary to load and protect the website. Providing cookie choices is optional, and you can use the website even if you do not consent to non-essential cookies.

How We Use Your Data

We use your personal data for the following purposes, based on your consent where indicated:

Operating the website and managing your cookie choices. We use your cookie consent preferences to apply your selections and to maintain a record of those choices. Legal basis: consent.

Measuring and improving website performance (analytics). If you consent to analytics cookies, we use usage data to understand how visitors use the website and to improve content and user experience. Legal basis: consent.

Personalized advertising. If you consent to advertising cookies, we use advertising-related identifiers and interaction data to support personalized advertising and related measurement. Legal basis: consent.

Social media features. If you consent to social media-related cookies or similar technologies, we use related data to enable social media content and measure interactions with that content. Legal basis: consent.

Who We Share Your Data With

Based on our website scan, we did not detect third-party providers (other than our own systems) receiving personal data through the website.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

Based on our website scan, we did not detect third-party providers receiving personal data through the website. As a result, we do not identify international transfers to third-party providers for the processing described in this policy.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Account data: Until the account is deleted

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods)

Security logs and technical records: 12 months

Analytics data: until consent is withdrawn or according to the analytics tool retention settings

Advertising/marketing tracking data: until consent is withdrawn

Social media integration data: until consent is withdrawn

Your Rights

Depending on where you live and which laws apply, you may have the following rights regarding your personal data:

Access and information. You can request access to the personal data we hold about you and receive information about how we use it.

Correction. You can ask us to correct inaccurate or incomplete personal data.

Deletion. You can ask us to delete your personal data in certain circumstances.

Restriction. You can ask us to restrict the processing of your personal data in certain circumstances.

Portability. You can request a copy of certain personal data in a structured, commonly used format and ask us to transfer it where technically feasible.

Objection. You can object to certain processing of your personal data in certain circumstances.

Withdraw consent. Where we rely on consent, you can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before you withdrew consent.

Automated decision-making. You have the right not to be subject to automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Additional rights for California consumers. You may have rights to know, delete, correct, opt-out of sale or sharing, limit the use and disclosure of sensitive personal information, and not be discriminated against for exercising your rights.

Additional rights for Brazilian data subjects. You may have rights to confirmation of processing, access, correction, anonymization/blocking/deletion of unnecessary data, portability, deletion of data processed with consent, information about sharing, and withdrawal of consent.

Additional rights for Canadian individuals. You may have rights to access your personal information, challenge accuracy and completeness, withdraw consent (subject to legal or contractual restrictions), and complain to the Privacy Commissioner of Canada.

How to exercise your rights: Contact us at contact@openflashplatform.org. We may need to verify your identity before fulfilling your request.

Response times: We aim to respond within one month where GDPR/LGPD apply, within 45 days for CCPA/CPRA requests (with a possible 45-day extension with notice), and within 30 days where PIPEDA applies.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at contact@openflashplatform.org.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission over the Internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security. We take reasonable precautions to reduce risk and to help protect the data we process.

Data Breach Notification

If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay when required. Our notification will describe, as appropriate, the nature of the breach, the likely consequences, and the measures taken or proposed to address it. We maintain procedures to detect, report, and investigate security incidents.

If you suspect a security issue, please contact us at contact@openflashplatform.org.

How to Lodge a Complaint

We encourage you to contact us first at contact@openflashplatform.org so we can try to resolve your concern.

If you are located in the EU/EEA, the UK, or Switzerland, you have the right to lodge a complaint with the competent data protection authority in your jurisdiction.

If you are a California consumer, you may contact the California Privacy Protection Agency (CPPA): https://cppa.ca.gov/

If you are located in Brazil, you may contact the ANPD (Autoridade Nacional de Proteção de Dados): https://www.gov.br/anpd/

If you are located in Canada, you may contact the Office of the Privacy Commissioner of Canada (OPC): https://www.priv.gc.ca/

Updates to This Policy

We review and update this Privacy Policy periodically. The “Last updated” date at the top of this policy indicates when changes were last made. If we make significant changes, we will provide a notice on the website or, where appropriate, by email. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: contact@openflashplatform.org
Address: 305 Main Street, Ste 300, Redwood City, CA 94063
Data Controller: Open Flash Platform

California Privacy Rights (CCPA/CPRA)

This section applies to California consumers.

Notice at Collection (categories collected in the last 12 months): We collect identifiers and online identifiers (such as IP address and cookie-related identifiers), internet or other electronic network activity information (such as interactions with the website), and information related to your cookie consent choices. We do not collect special categories of data for the purposes described in this policy.

Business and commercial purposes for collection: We collect this information to operate and secure the website, to record and apply your privacy choices, to measure and improve website performance (when you allow analytics), to support personalized advertising (when you allow advertising cookies), and to enable social media features (when you allow related cookies or similar technologies).

Sale and sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Your rights: You have the right to know what personal information is collected, used, shared, or sold; the right to delete personal information; the right to correct inaccurate personal information; the right to opt-out of the sale or sharing of personal information through a “Do Not Sell or Share My Personal Information” request; the right to limit the use and disclosure of sensitive personal information; and the right to not be discriminated against for exercising your rights.

How to submit a request: You can submit a request by emailing contact@openflashplatform.org. Please describe your request with enough detail for us to understand and respond.

Verification: We will take reasonable steps to verify your identity before responding. The information we ask for will depend on the nature of the request and the sensitivity of the information involved.

Response timing: We respond to verifiable consumer requests within 45 days. If we need more time, we may take an additional 45 days and will notify you of the reason for the extension.

Global Privacy Control: Where required, we treat Global Privacy Control (GPC) signals as valid requests to opt out of sale or sharing.

Brazilian Data Protection (LGPD)

This section applies to individuals in Brazil.

Legal basis: For the processing described in this policy, we rely on your consent, including for analytics, advertising-related tracking, and social media integrations that use cookies or similar technologies. You may withdraw your consent at any time through our cookie controls or by contacting us.

Your rights: You may request confirmation that we process your data, access to your data, correction of incomplete/inaccurate/outdated data, anonymization/blocking/deletion of unnecessary or excessive data, portability (where applicable), deletion of personal data processed with consent, information about sharing, and withdrawal of consent.

How to exercise rights and contact our DPO: To exercise your rights or contact our Data Protection Officer, email contact@openflashplatform.org.

Complaints: You also have the right to petition the ANPD (Autoridade Nacional de Proteção de Dados).

Canadian Privacy Rights (PIPEDA)

This section applies to individuals in Canada.

Accountability: We are responsible for personal information under our control and we have policies and practices designed to help protect it.

Meaningful consent: We seek meaningful consent for the collection, use, and disclosure of personal information where required. For cookies and similar technologies used for analytics, advertising, and social media features, we provide choices through our cookie controls so you can decide whether to allow non-essential technologies.

Access and correction: You may request access to your personal information and you may challenge the accuracy and completeness of the information and have it amended as appropriate.

Withdrawing consent: You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect the availability of certain features that rely on that consent (such as analytics, advertising-related tracking, or social media features).

Complaints: If you have concerns, you may contact us at contact@openflashplatform.org. You also have the right to complain to the Office of the Privacy Commissioner of Canada (OPC).