Last Updated: March 22 2023
Cantina is the controller of the personal information we hold about you in connection with your use of the Services. This means that we determine and are responsible for how your personal information is used.
What information do we collect and for what purpose?
Generally, we collect personal information from our users in order to provide you with a personalized, useful and efficient experience. The categories of information we collect can include:
- Information you provide.
When you apply to be a member of Cantina or create an account, we need to collect some information about you. We may collect and store personal information you provide to us when you apply for or register for our Service, including your name, phone number, email address, password, photo or avatar, and location. We may also collect any communications between you and Cantina and any other information you provide to Cantina.
- Data collected through the use of the Service.
We collect information about how you use the Service, your actions on the Service, and content you post to the Service, including the groups you belong to, your interaction with your friends and with others on the Service, and photos and videos you post to the Service through in-app messages, chat, photos, videos (“User Content”). To share photos and video, we will access your device camera roll and camera with your permission. If you need to update your permissions, you can do so in the “Settings” app of your device. Please remember that Cantina may, but has no obligation to, monitor, record, and store User Content in order to protect your safety or the safety of other users, to assist with regulatory or law enforcement efforts, or to protect and defend our rights and property. You consent to the recording, storage and disclosure of such communications you send or receive for these purposes.
- Information we receive from social networking sites.
We may receive personal information about you from third parties and combine that with information we collect through our Service. For example, we may obtain information when you login through a third party social network or authentication service, such as Facebook or Google. These services will authenticate your identity and provide you the option to share certain personal information with us, which could include your name, email address, address book and contacts, or other information. Similarly, when you interact with our site through various social media, such as when you like, follow, or share our content through Facebook, Twitter, Pinterest, Instagram or other sites, we may receive information from the social network including your profile information, profile picture, user ID associated with your social media account, and any other information you permit the social network to share with third parties. If you permit the social network to share your friends list or contact list information, we may use information about your connections on social media to let you know what your friends are doing on our Service, and to let your friends know what you are doing on the Service, and we may use it to suggest new friends you may want to connect with. The data we receive is dependent upon your privacy settings with the social network. Please understand that your Cantina contacts may post information about you on their social media sites and we cannot control what our users post on third party websites and services. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to our website or Service.
- Address Book Information.
With your permission, Cantina may access your contact list available on your mobile device or in your email accounts in order to locate your friends and contacts on the Service and to invite your friends and contacts to connect with our Service. When we invite your friends to join the Service, we will include your name and photo to let them know that you are the person extending the invitation. After sending these invitations, we may also send reminder emails to your invitees on your behalf, which may also include your name and photo. We will store these contacts for purposes of alerting you when your contacts join Cantina at a later time so that you may connect with them on the Service, and to suggest friends and connections to other members of Cantina. Cantina may also use the information collected from your contact list and your friends’ contact lists to suggest new friends you may want to connect with on the Service. We make these recommendations based on your address book information as well as your friends’ address book information and try to find common friendships or connections to introduce you to.
- Information we receive from third parties.
From time to time, we may receive information about you from third parties and other users. We may also collect information about you that is publicly available.
- How we use information generally.
We use this information to operate, maintain, and provide to you the features and functionality of the Service, to personalize content and messaging that may be most relevant to you, to develop and improve our products and services, as well as to communicate directly with you, such as to send you email messages and push notifications, and permit you to communicate with others on the Service or on social media or invite others to join or come back to the Service (including by facilitating SMS/text message communications when you consent to receive SMS/text messages from other users that are sent via the Cantina platform or service). We may also send you Service-related emails or SMS/text messages (e.g., account verification, change or updates to features of the Service, technical and security notices). For more information about your communication preferences, see “Your Choices Regarding Your Information” below.
- How we use information to customize the Service and our Advertising.
We may use your information to customize the Service and our communications and messaging to you and to others in all media, in which it may appear now or in the future. For example, we analyze the information provided by you and others, including, for example, information provided in your address book, your Cantina connections, and, subject to your privacy settings, your friends and connections on social media, to suggest other users you may know or that you may want to connect with on the Service. We may include your photo or avatar in email communications and invitations promoting our Service that are tailored to the recipient. For example, if you ask us to invite a friend to join Cantina, we may send an email invitation to that friend that includes a photo of you (to let them know you are the person extending the invitation) as well as a photo of one or more other users that we believe may know the same friend. Similarly, we may include your photo in invitations sent by other Cantina users to recipients we think may know you. We may also use information about you and your activities on the Service, including your photo, to provide personalized content, including targeted content and advertising on our site as well as on other sites and services, including on Facebook. We use data to help make the advertisements we show more relevant to you and to others, but we do not use your content in your email, chat, or video calls to target ads to you. By using our Service you agree that we may use your information to customize your content and provide you with more targeted advertising, as well as to customize the content and promotional messaging we send to others. If you choose not to provide personal data, we may not be able to provide the Service to you or respond to your other requests.
We, and our third party partners, may automatically collect certain types of usage information when you visit our Service, read our emails, or otherwise engage with us. We typically collect this information through a variety of tracking technologies, including cookies, web beacons, embedded scripts, location-identifying technologies, file information and similar technology (collectively, “tracking technologies”). For example, we may collect information about your device and its software, such as your IP address, browser type, Internet service provider, platform type, device type, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your account, and other such information. We also collect information about the way you use our Service, for example, the site from which you came and the site to which you are going when you leave our website, the pages you visit, the links you click, how frequently you access the Service, whether you open emails or click the links contained in emails, whether you access the Service from multiple devices, and other actions you take on the Service. When you access our Service from a mobile device, we may collect unique identification numbers associated with your device or our mobile application (including, for example, a UDID, Unique ID for Advertisers (“IDFA”), Google AdID, or Windows Advertising ID), mobile carrier, device type, model and manufacturer, mobile device operating system brand and model, phone number, and depending on your mobile device settings, your geographical location data, including GPS coordinates (e.g., latitude and/or longitude) or similar information regarding the location of your mobile device, or we may be able to approximate a device’s location by analyzing other information, like an IP address. We may collect analytics data, or use third-party analytics tools such as Google Analytics, to help us measure traffic and usage trends for the Service and to understand more about the demographics of our users. You can learn more about Google’s practices at http://www.google.com/policies/privacy/partners, and view its currently available opt-out options at https://tools.google.com/dlpage/gaoptout. We may also work with third party partners to employ technologies, including the application of statistical modeling tools, which permit us to recognize and contact you across multiple devices. Although we do our best to honor the privacy preferences of our users, we are unable to respond to Do Not Track signals set by your browser at this time.
We use or may use the data collected through cookies, log file, device identifiers, location data and clear gifs information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our Service; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website and our Service; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our service.
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note that doing so may negatively impact your experience using the Service, as some features and services on our Service may not work properly. Depending on your mobile device and operating system, you may not be able to delete or block all cookies and you may not be able to block non-cookie technologies and these browser settings that block cookies may have no effect on such techniques. You may also set your e-mail options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our e-mail and performed certain functions with it.
We may share your personal information in the instances described below. For further information on your choices regarding your information, see the “Your Choices Regarding Your Information” section below.
Remember, our Service allows you to connect and interact with others. Your profile information, including your name, photo, and other personal information, will be available publicly to other members of the Service by default when you create a profile, interact with others on the Service in public groups, and post content to public spaces.
- The public and other members of the Service.
Your profile information and content you post to public areas of the Service, including public groups, will be viewable by others on the Service and the public. We may include your public information, including your name and photo, in customized content and promotional messaging to other users or potential users. Please do not provide personal information you would not want to be public. You may be able to control the visibility of some of your information and actions in your Settings (see “Your Choices Regarding Your Information” below);
- Other users of the Service.
We share your information with third parties with whom you communicate with on the Service. You control who you want to communicate with and what information you share. Sharing information with others on our platform is done at your own risk;
- Third parties at your request.
For example, you may have the option to share your activities on Cantina with your friends through email, text or on various social media sites;
- Other brands owned or controlled by Cantina.
- Third party vendors, consultants and other service providers.
That perform services on our behalf, in order to carry out their work for us, which may include identifying and serving targeted advertisements, content or service fulfillment, or providing analytics services;
- Other parties in connection with any company transaction.
Such as a merger, sale of all or a portion of company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by another company or third party or in the event of bankruptcy or related or similar proceedings;
- Third parties as required.
We may also share information with others in an aggregated and anonymous form that does not reasonably identify you directly as an individual.
Your choices regarding your information.
- Profile and Data Sharing Settings.
You may update your profile information, such as your user name and profile photo, and may change some of your data sharing preferences on your Settings page.
- Access to your Device Information.
You may control the app’s access to your device information through your “Settings” app on your device. For instance, you can withdraw permission for the app to access your photo stream and camera.
We may communicate with you via in-app notifications. We require your permission to send you notifications when you create an account. You may opt-out of receiving notifications by adjusting your app notification settings on your mobile device. If you turn off notifications from Cantina, you will not receive any notifications regarding your messages or updates from your friends or groups.
- SMS Text Notifications.
You may opt-out of receiving promotional SMS text messages at any time. Please note that unsubscribing from promotional text messages will not prevent you from receiving SMS texts from Cantina directly relating to your use of the Services, such as for account login (e.g. we may send you a security verification code). To unsubscribe from promotional SMS texts, you can reply STOP to any one of our promotional text messages. For more information, see our Terms of Service.
- Marketing Communications.
If you do not wish to receive promotional emails, you can click the “unsubscribe” button on promotional email communications. Note that you are not permitted to unsubscribe or opt-out of non-promotional messages regarding your account, such as account verification, donation confirmations, change or updates to features of the Service, or technical and security notices.
- Data Retention.
We will retain your information for as long as your account is active or as needed to provide you services and communicate with you. Please contact us at email@example.com if you wish to delete your account permanently from our systems. Please be aware that we will not be able to delete any content you have shared with others or with social media sites.
- Deleting or Anonymizing Your Content.
If you are under 18 years of age, you may request that the User Content that you posted to the Service be deleted or anonymized such that your personal information will not be identifiable publicly on our Service by contacting us at firstname.lastname@example.org. While we will use all commercially reasonable efforts to delete or anonymize your User Content upon request, please be aware that due to the social nature of our Service, you may not be able to completely remove all of your personally identifiable User Content if, for example, that content has been stored, republished, or reposted by another user or a third party. We may also maintain your information in identifiable form for our internal use, even if your personal data is no longer visible to the public on our Service.
- Modifying or Deleting Your Information.
If you have any questions about reviewing, modifying, or deleting your information, you can contact us directly at email@example.com. We may not be able to modify or delete your information in all circumstances.
Third party tracking and online advertising.
- Interest Based Advertising.
We participate in interest-based advertising and use third party advertising companies to serve you targeted advertisements based on your browsing history. We may share, or we may permit third party online advertising networks, social media companies and other third party services, to collect, information about your use of our website and apps over time so that they may play or display ads on our Service, on other devices you may use, and on other websites, apps or services, including on Facebook. These third parties may collect information such as click stream information, browser type, time and date you visited the site, mobile device identifiers, app usage, and/or general geolocation data and other information. We and our third party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics and market research.
- Social Media Widgets and Advertising.
Our Service may include social media features, such as the Facebook Like button, Google Plus, LinkedIn, Snapchat, Instagram, Twitter or other widgets. These social media companies may recognize you and collect information about your visit to our Service, and they may set a cookie or employee other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.
We display targeted advertising to you through social media platforms, such as Facebook, Twitter, Google+ and others. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our Service while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics. These advertisements are governed by the privacy policies of those social media companies that provide them. For example, we may work with Facebook to display interest-based ads to you or to your friends on Facebook through a tool offered by Facebook called the Custom Audience Tool. This tool allows us to personalize our ads based on you or your friends’ experience on our Service in order to provide ads tailored for each specific recipient. We do not share personal information about your activities on our Service with Facebook, but we share a hashed email address or phone number which permits Facebook to identify our advertising audience based on the information that Facebook collects from its users. If you do not want to receive interest-based ads on Facebook, you can adjust your ad preferences through your Facebook settings. If you do not want us to use your content to personalize advertising that we direct to your friends on Facebook, you may email us at firstname.lastname@example.org.
- Cross-Device Linking.
We, or our third party partners, may link your various devices so that content you see on one device can result in relevant advertising on another device. We do this by collecting information about each device you use when you are logged in to our Service. We may also work with third party partners who employ tracking technologies, or the application of statistical modeling tools, to determine if two or more devices are linked to a single user or household. We may share a common account identifier (such as an email address or user ID) with third party advertising partners to help recognize you across devices. We, and our partners, can use this cross-device linkage to serve interest-based advertising and other personalized content to you across your devices, to perform analytics and to measure the performance of our advertising campaigns.
- Interest-based advertising.
To learn about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative’s online resources, at http://www.networkadvertising.org/choices, and/or the DAA’s resources at www.aboutads.info/choices. You may also manage certain advertising cookies by visiting the EU-based Your Online Choices at www.youronlinechoices.eu
- Cross-device linking.
Please note that opting-out of receiving interest-based advertising through the NAI’s and DAA’s online resources will only opt-out a user from receiving interest-based ads on that specific browser or device, but the user may still receive interest-based ads on his or her other devices. You must perform the opt-out on each browser or device you use.
- Mobile advertising.
You may also be able to limit interest-based advertising through the settings on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest based ads” (Android). You may also be able to opt-out of some – but not all – interest-based ads served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app.
Some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again.
- Google Analytics and Advertising.
We may also utilize certain forms of display advertising and other advanced features through Google Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, the DoubleClick Campaign Manager Integration, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the Doubleclick advertising cookie) or other third party cookies together to inform, optimize, and display ads based on your past visits to the Service. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences or by vising NAI’s online resources at http://www.networkadvertising.org/choices .
Third-party integrations / service providers
Our Service uses certain Google services, such as the Youtube API. Cantina uses the YouTube API to display videos in the app. You can connect your account using OAuth authentication, a secure mechanism to give Cantina access to your Google account data without letting it know your password.
- Data Retention
We will usually store the personal information we collect about you for no longer than necessary to fulfill the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time, until set retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax and accounting requirements set by a legislature, regulator or other government authority.
To determine the appropriate duration of the retention of personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations.
Once retention of the personal data is no longer necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if this is not possible (for example, because personal data has been stored in backup archives), then we will securely store the personal data and isolate it from further processing until deletion or deidentification is possible.
- Children’s Personal Information
Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from, children under the age of 16. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 16 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. In the event that we learn that we have inadvertently collected personal information from a child under the age of 16 without parental consent, we will delete that information as quickly as possible.
Links to third party websites.
The Services may contain links to and from third party websites of our business partners, advertisers, and social media sites and our users may post links to third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share information. We are not responsible for the privacy practices or the content on the websites of third party sites.
10 Jay St, 4th FL
Brooklyn, NY 11201
U.S. State Privacy Disclosures
For residents of the States of California, Colorado, Nevada, and Virginia: These Additional U.S. State Privacy Disclosures (“U.S. Disclosures”) supplement the information contained in our Privacy Notice by providing additional information about our personal data processing practices relating to individual residents of these States. For a detailed description of how we collect, use, disclose, and otherwise process personal data in connection with our services, please visit our Privacy Notice. Unless otherwise expressly stated, all terms defined in our Privacy Notice retain the same meaning in these U.S. Disclosures.
For the purposes of these U.S. Disclosures, personal information does not include publicly available information or deidentified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to you.
Collection and Use of Personal Information
The following personal data elements we collect may be classified as “sensitive” under certain privacy laws (“sensitive information”): username and password.
Cantina only uses or discloses sensitive personal information for the following purposes, where such use or disclosure is necessary and proportionate for those purposes: for performing services you have requested; for detecting security incidents, fraud and other illegal actions; to ensure the physical safety of natural persons; to perform services on behalf of the business (where the sensitive information is reasonably necessary and proportionate for this purpose); or for short term transient use. Cantina collects and processes sensitive information without the purpose of inferring characteristics about a consumer.
Your Privacy Choices
Depending on your state of residency, you may be able to exercise the following rights in relation to the personal information about you that we have collected (subject to certain limitations at law):
- The Right to Know. The right to confirm whether we are processing personal data about you, including:
- The categories of personal data collected;
- The categories of sources of the personal data;
- The purposes for which the personal data were collected;
- The categories of personal data disclosed to third parties (if any), and the categories of recipients to whom the personal data were disclosed;
- The categories of personal data shared for cross-context behavioral advertising purposes (if any), and the categories of recipients to whom the personal data were disclosed for those purposes; and
- The categories of personal data sold (if any), and the categories of third parties to whom the personal data were sold.
- The Right to Access and Portability. The right to obtain access to the personal data we have collected about you and, where required by law, the right to obtain a copy of the personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
- The Right to Request Deletion. You have the right to request the deletion of personal information that we have collected from you, subject to certain exceptions.
- The Right to Correction. You have the right to request that any inaccuracies in your personal information be corrected, taking into account the nature of the personal information and the purposes of the processing of your personal information.
- The Right to Opt Out of Sales or Sharing for Targeted Advertising. You have the right to direct us not to “sell” personal information we have collected about you to third parties for monetary or other valuable consideration, or “share” your personal information to third parties for cross-context behavioral advertising purposes. If you are under the age of 16, you have the right to opt in, or to have a parent or guardian opt in on your behalf, to such sales.
Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.
How to Exercise Your Privacy Rights
To submit a request to exercise one of the privacy rights identified above, please submit a request by:
- Emailing us at email@example.com with the subject line “Data Subject Rights Request,”
- Filling out our Individual Rights Request Form
We may need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account, if you have one. We will only use personal information provided in connection with a Consumer Rights Request to review and comply with the request.
In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
To Exercise Your Opt-Out Rights
Unless you have exercised your Right to Opt-Out, we may disclose or “sell” your personal information to third parties for monetary or other valuable consideration, or “share” your personal information to third parties for cross-context behavioral advertising purposes. The third parties to whom we sell or share personal information may use such information for their own purposes in accordance with their own privacy policies.
You do not need to create an account with us to exercise your Right to Opt-Out. However, we may ask you to provide additional personal information so that we can properly identify you to track compliance with your opt-out request. We will only use personal information provided in an opt-out request to review and comply with the request. If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems.
To exercise the Right to Opt-Out, you may submit a request by clicking the links below:
Submitting Authorized Agent Requests
In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.
Appealing Privacy Rights Decisions
Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted using the Individual Rights Request Form.
In the last 12 months, we have collected the following categories of personal information:
- Identifiers, such as your name and email address;
- California Customer Records (Cal. Civ. Code § 1798.80(e)), such as your username and password and phone number;
- Commercial Information, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
- Internet/Network Information, such as device information, logs and analytics data;
- Geolocation Data, such as your approximate location based on your IP address;
- Sensory Information, such as photo or avatar, and videos.
- Other Personal Information, including information you submit into the feedback form and any communications between you and Cantina, as well as information we receive from social networking sites and address book information; and
- Inferences, such as information generated from your use of the Service reflecting predictions about your interests and preferences.
We collect this information from the following sources: directly from you, from our business partners and affiliates, from your browser or device when you visit our websites or use our Service, or from third parties that you permit to share information with us.
The categories of third parties to whom we disclose your personal information for a business purpose may include: (i) other brands and affiliates in our family of companies; (ii) our service providers and advisors; (iii) marketing and strategic partners; (iv) ad networks and advertising partners; (v) analytics providers; and (vi) social networks.
In the previous 12 months, we have disclosed the following categories of personal information to third parties for a business purpose: All of the categories of personal information we collect, explained above.
Sales of Personal Information and Sharing for Targeted Advertising. In the previous 12 months, we have sold the following categories of personal information to third parties, subject to your settings and preferences and your Right to Opt Out:
- Commercial Information
- Internet / Network Information
Minors Under Age 16
We do not sell the personal information and do not have actual knowledge that we sell the personal information of minors under 16 years of age. Please contact us at firstname.lastname@example.org to inform us if you, or your minor child, are under the age of 16.
10 Jay St, 4th FL
Brooklyn, NY 11201