Last Updated: December 2, 2020

This Privacy Policy is part of the End User License Agreement (located at https://www.covasoftware.com/legal/eula) governing your use of the Services. This Privacy Policy applies to Personal Information (as defined below) collected by or on behalf of Cova, through or in conjunction with the Services, by email, phone or any other interactions and anywhere else we post or display this Privacy Policy. By accessing or using the Services, you accept and agree to the terms of this Privacy Policy in effect at the time of your use.

Who We Collect Personal Information From and Why We Process It

Cova collects and processes Personal Information from you, our:

• Clients, using Cova Services to power your storefronts and businesses;
• End-Users, making use of Cova Services being offered by our Clients;
• Website Visitors, looking to learn more about our Services or to contact Cova support; and
• Prospective Teammates, looking to make a big impact with a career at Cova.

Generally, we collect Personal Information from you to provide you with our Services, to fulfill a contractual obligation (for example, to process payments), to improve our Services, or where we need your personal information for a legitimate business interest, such as:

• verifying your or your business’ identity;
• preventing risk and fraud;
• answering questions or providing other types of support;
• providing, securing, debugging and improving our Services and website;
• providing reporting and analytics;
• testing out features or additional services;
• assisting with marketing, advertising, or other communications;
• understanding your needs and eligibility for products and services;
• complying with legal and regulatory requirements; or
• enforcing our Terms of Use and / or compliance with this Privacy Policy.

Unless otherwise stated, Cova acts as a "Service Provider" (sometimes referred to at law as a processor) of End User Personal Information on behalf its Clients, who themselves determine the purposes and means of processing your Personal Information (sometimes referred to at law as a "Data Controller"). If you are an End-User of one of our Clients, your Personal Information is subject to the terms of service, privacy policy, and other policies of that Client. As a Service Provider, we are only permitted to process End-User Personal Information in accordance with Client instructions, and may direct you to the relevant Client to answer any questions or respond to any requests you may have.

The Services are not designed for use by users who have not reached the age of majority, and we do not intentionally collect Personal Information from children through the Services. You represent and warrant to us that you have reached the age of majority where you are using the Services. You are only authorized to use the Services if you have reached the age of majority where you access the Services and agree to abide by all applicable laws and the Terms.

How We Collect, Use and Share Your Personal Information

"Personal Information" is information that directly or indirectly identifies you or can reasonably be used to identify you as an individual. We may use Personal Information to create aggregated and anonymized information ("Blind Data"). Blind Data does not and cannot reasonably be used to identify you as an individual.

Unless we have your consent or as stated in a separate agreement, we only share your Personal Information with third parties in the following circumstances:

• Processors and Sub-Processors (e.g. cloud storage and infrastructure, transactional APIs, etc.): to provide you with our Services;
• Other Service Providers, Partners, Contractors or Vendors: for analytics and reporting, marketing, auditing, communicating with you, managing our customer database, managing our recruitment process and conducting background checks (for Prospective Teammates);
• Affiliates and Successor Entities: if we merge with or are acquired by another company, are involved in a bankruptcy, or if the ownership or control of all or part of our Services or their assets changes, information about you may be transferred to such entities; and
• Law Enforcement, Government Agencies, and Professional Advisors: to prevent or investigate suspected fraud, threats to physical safety, illegal activity, or violations of a contract or our policies, or to comply with a law or regulation, or if we are otherwise legally required to do so, such as in response to a court order or legal process, or to establish, protect, or exercise our legal rights or to defend against legal claims or demands.

Additional terms specific to any Service where we collect Personal Information will describe the information we collect and the use of that information with regard to that particular Service. The following Services current have additional terms:

• Cova Website: www.covasoftware.com/privacy-policy
• Queue Management: www.covasoftware.com/legal/queue-terms-of-use  

Please refer to the corresponding sections of the additional terms for details on the following:

• Information We Collect: This section describes the categories of personal information we collected and the categories of sources from which the information was collected.
• Use of Information: This section describes the business or commercial purposes for which we collected the information.
• Information Sharing: This section lists the categories of third parties with whom we shared personal information.

 

Your Rights and Choices

Under applicable data privacy laws in the US and Canada, you may have certain rights with regard to your Personal Information. Those rights may only apply in certain circumstances and may be subject to limitations or exceptions. A summary of those rights is provided below as well as information on how to exercise your rights. Please note that we may require certain identifying information about you as necessary for us to verify your request in accordance with applicable law.

• Right to Know: You may request us to disclose the categories of personal information we collected about you, the purposes for which we collected, sold or disclosed that information, and the categories of third parties to whom we disclosed the information in the last 12 months. To exercise this right, please email your request to support@covasoftware.com and include “Disclosure Request” in the subject line of your message.
• Right to Access: You have the right to request access to the personal information specific to you individually, that we collected, used, disclosed and/or sold about you in the last 12 months. To exercise this right, please email your request to support@covasoftware.com and include “Access Request” in the subject line of your message.
• Right to Delete: You have the right to request us to delete the personal information we have collected or maintain about you. Please note that certain exceptions may apply to your right to delete information, such as when we must retain personal information as required or permitted by law and we will also maintain a record of your deletion request. We will notify you if any such exceptions apply to your request. To exercise this right, please email us at support@covasoftware.com and include “Deletion Request” in the subject line of your message.

We will not discriminate against you for exercising the rights outlined in this section, and your use of the Service will be limited and altered only to the extent permitted by law or as a direct and foreseeable consequence of the exercise of your rights. We may also offer certain financial incentives, charge reasonable fees related to your requests, or deny your right to know, right to access or right to deletion in accordance with applicable law.

You can exercise these rights yourself or you can designate an authorized agent to make a request on your behalf. If you would like an authorized agent to submit a request on your behalf, please send us an email at support@covasoftware.com for instructions and details on proof and information required for use of an authorized agent.

 

Your Use of Others’ Personal Information

As a Client of our Services, you may provide us with the Personal Information of others (for example, the names and addresses of your customers or employees). As your service provider, we only process (collect, use, disclose, etc.) such information as directed by you for the exclusive purpose of providing you our Services. For example, we will never use your customers’ or employees’ information to independently market or advertise to them unless they are also using our Services directly. We also do not and will not “sell” your customers’ information as that term is defined under California law.

You are responsible for the Personal Information of others that you disclose to us via our Services and for ensuring that your instructions regarding the processing of such information complies with applicable data protection laws. You should, at a minimum, ensure your customers understand how you (and how we on your behalf) collect and process their personal information by posting a privacy policy on your store that describes the information you collect, how you use it, and who you share it with.

Notice to California Residents

The information in this section applies to residents of California with regard to Personal Information subject to this Privacy Policy. If you have any questions about this Privacy Policy or would like to receive a printed copy, please contact us at support@covasoftware.com.

How We Collect, Use and Share Your Personal Information

In accordance with the California Consumer Privacy Act of 2018 ("CCPA"), we describe in additional terms specific to any Service where we collect personal information (as defined by the CCPA) the personal information we collected about California residents in the last 12 months, the sources of that information, our business or commercial purposes for collecting the information, and the third parties with whom we shared that information. Please refer to the How We Collect, Use and Share Your Personal Information section in this Privacy Policy for details.

 

Your Rights and How to Exercise Them

Under the CCPA, California residents have certain rights with regard to their personal information. A summary of those rights is provided in the section on Your Rights and Choices as well as information on how to exercise your rights. Those rights may only apply in certain circumstances and may be subject to limitations or exceptions. Please note that we will require certain identifying information about you as necessary for us to verify your request in accordance with applicable law.

 

Information Security

We use commercially reasonable efforts designed to protect Personal Information via maintenance of standard physical, electronic, and procedural safeguards. Despite our actions and precautions, no Internet data transmissions are completely secure, and they are subject to theft, fraud, destruction, alteration, disclosure, unauthorized access and other misuse.

The security of your Account and Personal Information depends on you performing your responsibility to control access to your devices and applications, including maintaining physical possession of your device, and keeping your passwords and PINs confidential and not sharing them with anyone. It is also your responsibility to alert us if you believe the security of information in any part of the Service has been compromised.

Retention and Disposal of Personal Information

We retain Personal Information to provide, maintain, and augment the Service, and to comply with legal requirements and standard business practices. We retain Personal Information for as long as (a) we have a business need, or (b) applicable laws, regulations, or government orders require. When we dispose of Personal Information, we use reasonable procedures to erase or render it unreadable (for example, shredding documents and wiping electronic media). We may retain Blind Data for so long as it is relevant to our business model, in our discretion.

General

Privacy of Children

We do not knowingly collect Personal Information from children under the age of 13. If we learn that we have inadvertently done so, we will take commercially reasonable steps to delete that Personal Information.

Enforcement

If you violate our Privacy Policy or the Terms, we may prevent you from using the Services. If you believe another person has committed such a violation, please contact us.

 

Changes to this Privacy Policy

This Privacy Policy will change from time to time to maintain compliance with applicable law and regulations. We reserve the right to modify this Privacy Policy at any time in our sole discretion by posting the most recent version (which will supersede any other version and become effective as of the last updated date indicated) on this webpage. If we make material changes to this Privacy Policy, we will make a prominent post on the Cova blog www.covasoftware.com/news. Your continued use of the Services following posting of these changes constitutes acceptance of the terms as they exist at the time of your usage. You agree to review this Privacy Policy on a regular basis and remain in compliance with any modifications.

Contact Us

For any questions regarding this Privacy Policy, please contact us at support@covasoftware.com or 1-844-667-2682.