Privacy Policy

This Privacy Policy describes how Knit, Inc. f/k/a Purpics, Inc. and our subsidiaries and affiliates (collectively “Knit,” “we,” “us,” or “our”) handle personal information when you use our websites and other digital properties that link to this Privacy Policy (collectively, the “Site”), our mobile application (the “App”), participate in our panels, events or activities, receive our emails and marketing communications, or engage with us on our social networks (collectively with the Site and the App, the “Service”).

Summary

We provide qualitative and quantitative market research services and analysis for our clients and brand partners. When you use our Service, you are participating in market research efforts that we perform for our clients and brand partners. In short, we provide our clients and brand partners with (1) your answers to the survey questions and (2) access to our Site where our clients and brand partners can view any video responses you may provide us. As described in more detail below, we seek to provide our clients and brand partners with as little personal information as possible about you while still serving our clients and brand partners. The only types of your personal information that we provide to our clients and brand partners are (a) your video and audio likeness within the videos you record (b) the city and state in which you live and (c) any information that you may share with us in the surveys you take or videos you record while using the Service.

Personal Information We Collect

Information you give us. Personal information that you may provide through the Service or otherwise includes:

Images, videos, and other content that you upload or submit to us through the Service, such as by participating on a panel, answering survey questions or uploading content, including pictures, video, captions and other text, audio, and metadata associated with those files;
Survey responses and other feedback you provide to us;
Contact information, such as your first name, last name, address, email address and telephone number (but only if you provide it to us);
Communications, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online;
Marketing information, such as your preferences for receiving marketing communications and details about how you engage with them; or
Other information that you choose to provide but is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Information from third-party sources. We may combine personal information we receive from you with the personal information we obtain from other sources, such as:

Third-party platforms. If you choose to connect the Service to a social media or other third-party platforms, such as when you log in using a social media account, we will collect the information shared by the platform such as your username or handle, name, image, profile data, and other information. We will treat any information that you or the platform may provide to us in accordance with this Privacy Policy. When you visit or interact with our pages on one of those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use, and processing of your personal information.
Business partners, such as clients and brand partners, joint marketing partners, and affiliates of such entities.
Public sources, such as publicly-available social media profiles, directories, and other third party sources.

Data collected automatically. We, our service providers, and our business partners may automatically log the following information about you, your computer or mobile device, and your activity over time on the Service and other online services:

Device data, such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, unique identifiers, and general location information such as city or town. (We do not collect this data directly, but we have access to it from some of our service providers.)
Usage data, pages or screens you viewed on our Site and App, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen or with our email communications, access times, and duration of access.
Cookies, which are text files stored on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently and remembering your preferences, enabling functionality, helping us understand user activity and patterns, facilitating online advertising and measuring the effectiveness of our ads.
Javascript libraries, which are snippets of code within web pages that execute when certain actions take place.
Web beacons, also known as pixel tags or clear GIFs, which are typically used to demonstrate that a webpage or email was accessed or opened, or that certain content within it was viewed or clicked, typically to compile statistics about usage of websites and the success of marketing campaigns.
Software development kits, or SDKs, which are used to incorporate third-party computer code into our App that allows our third-party service providers or advertising partners to collect data directly from it for a variety of purposes, including to provide us with analytics regarding the use of the App, to integrate with social media, add features or functionality to our app, or to facilitate online advertising.

How We Use Your Personal Information

We use your personal information for the following purposes or as otherwise described to you in this Privacy Policy or at the time of collection:

Service delivery. We use your personal information to:

provide, operate, maintain, and improve the Service;
communicate with you regarding the Service, including by sending you Service announcements, technical notices, updates, security alerts, and support and administrative messages;
analyze and share your survey responses, videos and feedback with our clients and brand partners, which information may be used by such parties for their marketing and advertising purposes;
process your Service transactions and process any related payments;
understand your opinions, needs and interests, and personalize your experience with the Service; or
provide support for the Service and respond to your requests, questions and feedback.

Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and develop other products and services. As part of these activities, we may create aggregated, de-identified or other anonymous data from the personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Service.

Marketing. We and our clients and brand partners may collect and use your personal information for marketing and advertising purposes:

Direct marketing. If you request information from us, use the Service or participate in our surveys, promotions or events, we may send you Knit-related marketing communications as permitted by law but will provide you with the ability to opt-out.

Compliance and protection. We may use your personal information to:

protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
audit our internal processes for compliance with legal and contractual requirements and internal policies;
enforce our Terms of Use Agreement or our Master Service Agreements (or similar agreements) with our clients and brand partners;
protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft; or
comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.

Other purposes with your consent. In some cases, we will ask for your consent to collect, use or share your personal information for other purposes. For example, we may ask for your consent to send you marketing emails where required by law or to post your testimonial or endorsement.

How We Share Your Personal Information

We may share your personal information with the following parties and as otherwise described in this Privacy Policy or at the time of collection:

Subsidiaries and affiliates. We may disclose your personal information to our subsidiaries and corporate affiliates for use consistent with this Privacy Policy.
Our clients and brand partners. We may share your personal information with our partner brands and clients. For example, when you participate in one of our surveys or provide us videos, we will disclose the information you provide to our clients or partner brands. Please note that once we share your personal information with another company in the above circumstances, the information received by the other company is controlled by that company and becomes subject to the other company’s privacy practices and may be used by our clients or partner brands for marketing, advertising and other similar uses.
Service providers. We may work with companies and individuals to help provide the Service on our behalf or help us operate the Service or our business (such as IT, customer support, hosting, website analytics, email delivery, marketing and advertising, research, and event management). They are permitted to use your personal information only to help us operate the Service or our business as authorized under our contracts with them.
Professional advisors. We may disclose your personal information to professional advisors, such as lawyers, bankers, investment bankers, auditors, and insurers, where necessary in the course of the professional services they render to us.
Compliance and protection. We may disclose your personal information as we believe appropriate to government or law enforcement officials or private parties (a) for the compliance and protection purposes described above; (b) as required by law, lawful requests or legal process, such as to respond to subpoenas or requests from government authorities; (c) where permitted by law in connection with any legal investigation; and (d) to prosecute or defend legal claims.
Business transfers. We may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business deal (or potential business deal) such as a merger, consolidation, acquisition, reorganization or sale of all or substantially all of our assets, or in the event of bankruptcy.

Your Choices

Access, delete or update your information. You may review, update, correct or delete the personal information in your registration profile by logging into your account or emailing us at info@goknit.com.

Opt-out of marketing communications. You may opt out of marketing-related emails by logging in and changing your account settings or by following the opt-out prompt in the email. You may continue to receive Service-related and other non-marketing emails.

Advertising choices. You can limit the use of your information for interest-based advertising by:

Browser settings. Blocking third-party cookies in your browser settings or using ad-blocking browser plug-ins/extensions. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Service and our Site may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit allaboutcookies.org.
Mobile device settings. Using your mobile device settings to limit the use of the advertising ID associated with your mobile device for interest-based advertising purposes.
Platform settings. Using Google’s and Facebook’s interest-based advertising opt-out features:
Google: https://adssettings.google.com/
Facebook: https://www.facebook.com/about/ads
Ad industry tools. Opting out of interest-based ads from companies participating in the following industry opt-out programs:
Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
Digital Advertising Alliance:
https://optout.aboutads.info, which lets you opt-out of interest-based ads on websites.
AppChoices mobile app: available at https://www.youradchoices.com/appchoices, which lets you opt-out of interest-based ads in mobile apps.

The opt-out preferences described above must be set on each device or browser for which you want them to apply. Not all companies that serve interest-based ads participate in the ad industry opt-out programs described above, so even after opting-out, you may still receive some cookies and interest-based ads from other companies. If you opt-out of interest-based advertisements, you will still see advertisements online but they may be less relevant to you.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Declining to provide your personal information. If you do not provide the information indicated as required or mandatory within the Service, or that is otherwise necessary to provide a requested service or feature within the Service, that portion or all of the Service may be unavailable to you and we may deactivate your account.

Third-party platforms or social media networks. If you choose to connect to the Service via a third-party platform or social media network, you may have the ability to limit the information that we may obtain from the third party at the time you log in to the Service using the third-party’s authentication service or otherwise connect your account. Subsequently, you may be able to control your settings through the third party’s platform or service. If you withdraw our ability to access certain information from a third-party platform or social media network, that choice will not apply to information that we have already received from that third party.

Security

The security of your personal information is important to us. We take organizational, technical and physical measures designed to protect the personal information we collect, both during transmission and once we receive it. However, no security safeguards are 100% secure and we cannot guarantee the security of your information.

International Data Transfers

Knit is headquartered in the United States and has service providers in other countries, and your personal information may be collected, used and stored in the United States or other locations outside of your home country. Privacy laws in the locations where we handle your personal information may not be as protective as the privacy laws in your home country.

Third-Party Sites and Services

The Service may contain links to other websites and services operated by third parties, such as social media platforms, advertising services and other websites and applications. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third-party websites, applications or services, and are not responsible for their actions. Other websites and services follow different rules regarding their collection, use and disclosure of your personal information. We encourage you to read their privacy policies to learn more.

Children

Kids Privacy Assured by PRIVO: COPPA Safe Harbor Certification

Knit, Inc. is a member of the PRIVO Kids Privacy Assured COPPA safe harbor certification Program (the “Program”). The Program certification applies to the digital properties listed on the certification page that is viewable by clicking on the PRIVO Seal. PRIVO is an independent, third-party organization committed to supporting online services to safeguard children’s personal information collected online. The PRIVO COPPA safe harbor certification Seal posted on this page indicates Knit has established COPPA compliant privacy practices and has agreed to submit to PRIVO’s oversight and consumer dispute resolution process. If you have questions or concerns about our privacy practices, please contact us at 757.818.5977 or info@goknit.com. If you have further concerns after you have contacted us, you can contact PRIVO directly at privacy@privo.com.

The Service is not generally directed at, and (other than as set forth in this Privacy Policy) Knit does not knowingly acquire or receive personal information from, children under the age of 13. However, from time to time we may offer surveys that are intended for children or teens. If a survey requires a child or teen’s participation, we will obtain parental consent prior to collecting any personal information. To obtain parental consent, Knit will collect a parent’s name and email address, and such collection will be subject to the terms of this Privacy Policy. Knit partners with PRIVO to verify the parent and is COPPA Safe Harbor certified. All information collected for verification is stored securely and not used for any other purpose. For more information on PRIVO please see here: https://www.privo.com/platform-privacy-policy.

When a child or teen with full verifiable parental consent participants in a survey, we collect the user’s age, IP address, estimated location, gender and ethnicity to determine if they are eligible to participate in the survey. Participants provide answers by recording video, recording voice or typing an answer into a provided field. Each survey asks various types of questions and users are invited to freely answer in the form of text or recording. Therefore, a user may freely volunteer personal information. Any personal information collected in responses will not be used for any other purpose other than as outlined in this Privacy Policy.

Survey data is shared with the following service providers:

Pipe Services S.R.L. is used to record video and audio from surveys. Videos are securely stored temporarily on Pipe until they are transferred to the Knit database, at which time they are deleted by Pipe.
Qualtrics powers the Knit surveys and stores all information provided via the survey.
Knit uses Open AI and AI technologies to aggregate and evaluate survey data.
Survey and participant data is stored on Amazon Web Services and MongoDB.

We will not knowingly collect information from users under the age of 18 without the consent of such individual’s parent or legal guardian. If we learn that we have collected personal information from a user under the age of 18 without prior parental consent we will take appropriate steps to delete that individual’s personal information and restrict that individual from future access to the service, until such consent has been obtained. If a parent has any questions about our data privacy collection and use practices, or to request access to review or delete a child’s information, please contact us at info@goknit.com.

California Privacy Rights

We incorporate this section to identify additional consumer protections that were recently established under California law.

When you use the Service, we may automatically collect personal information such as technical data about the device that you are using and your browsing patterns. We collect this information by using cookies, server logs and similar technologies. You may choose to give us additional personal information, such as your name, employer, address, email and telephone number. We also collect the following information from you when you provide us with video responses: (1) your video and audio likeness, (2) the city and state in which you live, (3) information you voluntarily provide to us in your video responses, and (4) inferences made based on items (1), (2) and (3).

We use this personal information in several ways, including providing our services to our clients and brand partners, monitoring website activity, and enabling you to communicate with us and request information.

We disclose (which may constitute a “sale” under California law) the following information to our clients and brand partners: (1) your video and audio likeness, (2) the city and state in which you live, (3) information you voluntarily provide to us in your video responses, and (4) inferences made based on items (1), (2) and (3). Other than according to the foregoing sentence, we do not and will not sell the personal information that we collect from you through the Service, as described in this Privacy Policy.

Under no circumstance do we sell your personal information to any party other than our clients and brand partners. Our clients and brand partners use this information for general market research and related analysis.

We will not charge or penalize you for requesting information and otherwise exercising your rights as described in this Privacy Policy, but we may reasonably limit the number of requests you may make and impose appropriate charges as permitted by law.

In some instances, you may request that we delete your personal information, consistent with your general right to request that we, as a business, delete any of your personal information that we have collected from you. We will comply with your requests to the fullest extent allowed by applicable law.

If you use an authorized agent to request information or exercise your rights, that authorized agent must meet the same authentication requirements that apply to the requests that we may receive directly from you. We may verify requests made by authorized agents to ensure security and comply with regulations and our internal policies.

Mandatory California Privacy Disclosures

We also make the following disclosures for the purpose of complying with California law:

We collected the following categories of personal information in the last 12 months: characteristics of protected classifications under applicable law, internet or other electronic network activity information, geolocation data at the level of city and state, audio, electronic, visual or similar information and inferences drawn from the information above.
The sources of personal information we collected are: directly from you and from certain partners that operate the Service.
The business or commercial purpose of collecting the personal information above is described in more detail in the section of this Privacy Policy under the heading “How We Use Your Personal Information.”
We shared the information we collected with our clients and brand partners. As defined by California law, this may mean that we “sold” the personal information we collected to our clients and brand partners. Our business and commercial purpose of sharing or “selling” personal information is to allow our clients and brand partners to have access to market research insights provided by you.

Your California Privacy Rights

To exercise any of the rights list below, please email us at info@goknit.com.

Right to Know. You have the right to request that we disclose to you the categories of personal information we have collected about you, as well as the sources of that personal information. You may also request that we disclose to you the purposes and categories of third parties with whom such personal information is shared.
Right to Access. You have the right to request, up to two times per year, access to categories and specific personal information about you that we have collected and shared with our clients and brand partners.
Right to Delete. You have the right to request that we delete personal information we collect from you, subject to exceptions allowed by law.
Right to Correct. You have the right to request that we correct inaccurate personal information that we maintain about you, subject to exceptions allowed by law.
Right to Opt Out of Sale or Sharing. You have the right to “opt out” of the “sale” or “sharing” of your “personal information” to or with “third parties” (as each of those terms is defined by California law).
Right to Not Receive Discriminatory Treatment. You have the right to not be discriminated against on the basis of exercising the rights above.

Privacy Rights of European Data Subjects

Under the General Data Protection Regulation (“GDPR”), EU/ European Economic Area, (collectively, “European Data Subjects”) have the following rights concerning their Personal Information:

Withdrawal of Consent. If processing is on the basis of consent, you may have the right to withdraw consent to our processing at any time.
Access and Rectification. You may have the right to access, correct, and update your personal information.
Deletion/Erasure. You may have the “right to be forgotten” through the erasure or deletion of your personal information.
Portability. You may have the right to move, copy, and/or transfer certain Personal Information from our service to another service.
Stop Processing. If processing is on the basis of legitimate interests, you may have the right to object to the processing of your personal information and to ask us to restrict the processing of your personal information, subject to certain limitations.
Submit a Complaint. You have the right to submit a complaint to a data protection authority about our collection and use of your Personal Information. Contact details for the EU/EEA here.

Lawful basis

We process the personal information of European Data Subjects on the following lawful bases:

Legitimate Interests. Where the processing is necessary for the purposes of the legitimate interests pursued by Knit or by a third party and not overridden by your fundamental rights and freedoms (e.g., product development and security purposes);
Performance of a Contract. Where the processing is necessary for the performance of a contract with you (e.g., to deliver the service you have requested);
Consent. Where you have given explicit consent to the processing of your Personal Information for one or more specific purposes (e.g., new and unexpected processing activities); and
Legal Obligation: Where processing is necessary for compliance with a legal obligation to which Knit is subject (e.g., compliance with laws and regulations).

‍

Exercising your rights under the European Data Protection Laws

You, or an authorized agent, may exercise your rights by submitting a request to info@goknit.com.

We respond to and process requests promptly and within the timeframes required by the European Data Protection Laws. Please note that all requests are subject to proper prior verification before processing.

If you are the authorized agent of an individual making a request, you may have to take additional steps to verify your identity and demonstrate that you can exercise the individual’s rights on their behalf.

‍

Transfer of European Data Subject personal information

‍

Retention of European Data Subject personal information

Knit retains personal information for a period commensurate with the purposes for which the personal information was collected or obtained. The criteria used to determine the retention of personal information includes any time necessary for legal and compliance purposes. Personal information may be retained in archival format (e.g., data backups) beyond its retention period.

‍

Data protection inquiries

You may contact Knit’s Privacy Team at the following:

General Data Protection Regulation (GDPR) – European Representative

Under Article 27 of the GDPR, we have appointed an EU Representative to act as our data protection agent. Our nominated EU Representative is:

Instant EU GDPR Representative Ltd.
Adam Brogden
contact@gdprlocal.com
Tel +35315549700
INSTANT EU GDPR REPRESENTATIVE LTD
Office 2,
12A Lower Main Street, Lucan Co. Dublin
K78 X5P8
Ireland
UK General Data Protection Regulation (GDPR) – UK Representative
Under Article 27 of the UK Data Privacy Act, we have appointed a UK Representative to act as our data protection agent. Our nominated UK Representative is:

GDPR Local Ltd.
Adam Brogden
contact@gdprlocal.com
Tel +44 1772 217800
1st Floor Front Suite
27-29 North Street, Brighton
England

Colorado Privacy Rights

Colorado law provides Colorado residents with the following rights. To exercise any of these rights, please email info@goknit.com.

Right to Access. You have the right to see and know what personal data we have collected about you. We will provide it in a usable format.
Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to exceptions allowed by law.
Right to Correct. You have the right to request that we correct inaccurate personal data.
Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as each of those terms is defined by Colorado law).

‍

Connecticut Privacy Rights

Connecticut law provides Connecticut residents with the following rights. To exercise any of these rights, please email info@goknit.com.

Right to Access. You have the right to see and know what personal data we have collected about you. We will provide it in a usable format.
Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to exceptions allowed by law.
Right to Correct. You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as each of those terms is defined by Connecticut law).

Texas Privacy Rights

Connecticut law provides Connecticut residents with the following rights. To exercise any of these rights, please email info@goknit.com.

Right to Access. You have the right to see and know what personal data we have collected about you. We will provide it in a usable format.
Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to exceptions allowed by law.
Right to Correct. You have the right to request that we correct inaccurate personal data.

Texas Privacy Rights

Texas law provides Texas residents with the following rights. To exercise any of these rights, please email info@goknit.com or go to the contact us page and fill out the contact us form.

Right to Access. You have the right to see and know what personal data we have collected about you. We will provide it in a usable format.
Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to exceptions allowed by law.
Right to Correct. You have the right to request that we correct inaccurate personal data.
Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as each of those terms is defined by Texas law).

‍

Utah Privacy Rights

Utah law provides Utah residents with the following rights. To exercise any of these rights, please email info@goknit.com.

Right to Access. You have the right to see and know what personal data we have collected about you. We will provide it in a usable format.
Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to exceptions allowed by law.
Right to Correct. You have the right to request that we correct inaccurate personal data.

‍

Virginia Privacy Rights

Virginia law provides Virginia residents with the following rights. To exercise any of these rights, please email info@goknit.com.

Right to Access. You have the right to see and know what personal data we have collected about you. We will provide it in a usable format.
Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to exceptions allowed by law.
Right to Correct. You have the right to request that we correct inaccurate personal data.
Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as each of those terms is defined by Virginia law).

‍

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices. If we make material changes to this Privacy Policy, we will notify you by posting the new privacy policy on our website and changing the effective date listed at the top of the policy. If required by law, we will also notify you of changes in another way that we believe is reasonably likely to reach you, such as via email (if you have an account linked to a valid email address) or another manner through the Service.

Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes in the Service (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the posting of any updated Privacy Policy indicates your acceptance of the update or modification(s).

How to Contact Us

If you have any questions or concerns about our Privacy Policy, please contact us.

Knit, Inc.
301 Congress Avenue
Floor 12
Austin, Texas 78701
Email: info@goknit.com
Phone: 757.818.5977

Privacy Policy & Notice of California and Other State Privacy Rights