Costco Companion Privacy Policy

Last updated: Nov 8, 2022

We want you to understand how and why Gravi Opus Studios, LLC. (“Costco Companion”, “Costco Companion App”, “we”, or “us”) collects, uses, and shares information about you when you use our sites, mobile apps, widgets, and other online products and services (collectively, the “Services”) or when you otherwise interact with us or receive a communication from us.

What We Collect (and How it is Used and Shared)

Information You Provide to Us

We collect information you provide to us directly when you use the Services. This includes:        

Account information                

If you create a Costco Companion account, we may require you to provide a username and password. Your username is public, and it doesn’t have to be related to your real name. You may also provide other account information, like an email address, bio, or profile picture. We also store your user account preferences and settings.        

Content you submit                

We collect the content you submit to the Services. This includes adding products, reviews, comments, spottings, prices, and your reports and other communications. Your content may include text, links, images, gifs, and videos.

Actions you take                

We collect information about the actions you take when using the Services. This includes your interactions with content, like voting, saving, hiding, favoriting, and reporting. It also includes your interactions with other users, such as following, friending, and blocking. We collect your interactions with products, like your reviews.

Other information                

You may choose to provide other information directly to us. For example, we may collect information when you fill out a form, participate in Costco Companion-sponsored activities or promotions, apply for a job, request customer support, or otherwise communicate with us.

Information We Collect Automatically

When you access or use our Services, we may also automatically collect information about you. This includes:        

Log and usage data                

We may log information when you access and use the Services. This may include your IP address, user-agent string, browser type, operating system, referral URLs, device information (e.g., device IDs), device settings, mobile carrier name, pages visited, links clicked, the requested URL, and search terms.

Information collected from cookies and similar technologies                

We may receive information from cookies, which are pieces of data your browser stores and sends back to us when making requests, and similar technologies. We use this information to improve your experience, understand user activity, personalize content and advertisements, and improve the quality of our Services.

Location information

We may receive and process information about your location. For example, with your consent, we may collect information about the specific location of your mobile device (for example, by using GPS or Bluetooth). We may also receive location information from you when you choose to share such information on our Services, including by associating your content with a location, or we may derive your approximate location from other information about you, including your IP address.        

Other Information

We may also use information from Apple's TrueDepth camera to provide enhanced functionality in the Costco Companion app camera if you choose to use it. Information from the TrueDepth camera is used in real time — we don't store this information on our servers or share it with third parties.

--

We use information about you to:

Much of the information on the Services is public and accessible to everyone, even without an account. By using the Services, you are directing us to share this information publicly and freely.

When you submit content (including a product, review, or comment) to a public part of the Services, any visitors to and users of our Services will be able to see that content, the username associated with the content, and the date and time you originally submitted the content.

Your Costco Companion account has a profile page that is public. Your profile contains information about your activities on the Services, such as your username, prior product additions and reviews, spottings, and how long you have been a member of the Services.

We do not sell your personal information. However, in addition to the personal information that is displayed publicly as described above, we may share personal information in the following ways:

How We Protect Your Information

We take measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration, and destruction. For example, we use HTTPS while information is being transmitted. We also enforce technical and administrative access controls to limit which of our employees have access to nonpublic personal information.

We store the information we collect for as long as it is necessary for the purpose(s) for which we originally collected it. We may retain certain information for legitimate business purposes or as required by law.

Your Choices

You have choices about how to protect and limit the collection, use, and sharing of information about you when you use the Services. Some of these choices are available to everyone who uses Costco Companion, while others only apply if you have a Costco Companion account.

Accessing and Changing Your Information                

You can access and change certain information through the Services.

Deleting Your Account                

You may delete your account information at any time from the user preferences page. You can also submit a request to delete the personal information Costco Companion maintains about you by following the process described in the Your Rights - Data Subject and Consumer Information Requests section below. When you delete your account, your profile is no longer visible to other users and disassociated from content you posted under that account. Please note, however, that the posts, comments, and messages you submitted prior to deleting your account will still be visible to others unless you first delete the specific content. We may also retain certain information about you as required by law or for legitimate business purposes after you delete your account.        

Controlling Advertising and Analytics                

Some analytics providers we partner with may provide specific opt-out mechanisms and we may provide, as needed and as available, additional tools and third-party services that allow you to better understand cookies and how you can opt out.

We also offer you choices about receiving personalized advertisements. You can also use device-level settings to control personalized advertisements on Android (“Reset advertising ID” and “Opt out of Ads Personalization”) and iOS (“Limit Ad Tracking”) devices. You may also generally opt out of receiving personalized advertisements from certain third-party advertisers and ad networks. To learn more about these advertisements or to opt out, please visit the sites of the Digital Advertising Alliance and the Network Advertising Initiative, or if you are a user in the European Economic Area, Your Online Choices.        

Controlling Promotional Communications                

You may opt out of receiving some or all categories of promotional communications from us by following the instructions in those communications or by updating your email options in your account preferences here. If you opt out of promotional communications, we may still send you non-promotional communications, such as information about your account or your use of the Services.        

Controlling Mobile Notifications                

With your consent, we may send promotional and non-promotional push notifications or alerts to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.        

Controlling Location Information                

You can control how we use location information inferred from your IP address for content recommendation purposes via the Safety and Privacy settings on your account. If you initially consent to our collection of more precise location information from your device, you can subsequently stop the collection of this information at any time by changing the preferences on your mobile device.

Your Rights

Data Subject and Consumer Information Requests

Requests for a copy of the information Costco Companion has about your account—including EU General Data Protection Regulation (“GDPR”) data subject access requests and California Consumer Privacy Act (“CCPA”) consumer information requests—can be submitted following the process described here.

All other data subject and consumer requests under data protection laws should be sent via email to Costco Companiondatarequests@Costco Companion.com from the email address that you have verified with your Costco Companion account. Other inquiries related to your privacy rights can be submitted here.

Before we process a request from you about your personal information, we need to verify the request via your access to your Costco Companion account or to a verified email address associated with your Costco Companion account. You may also designate an authorized agent to exercise these rights on your behalf. Costco Companion does not discriminate against users for exercising their rights under data protection laws to make requests regarding their personal information.

International Data Transfers

Gravi Opus Studios, LLC. is based in the United States and we process and store information on servers located in the United States. We may store information on servers and equipment in other countries depending on a variety of factors, including the locations of our users and service providers. By accessing or using the Services or otherwise providing information to us, you consent to the processing, transfer, and storage of information in and to the U.S. and other countries, where you may not have the same rights as you do under local law.

When we transfer the personal data of users in the EEA, UK and/or Switzerland, to Gravi Opus Studios, LLC., we rely on the Standard Contractual Clauses approved by the European Commission for such transfers or other transfer mechanisms deemed ‘adequate’ under applicable laws.

Please direct any inquiries or complaints regarding our compliance with the Privacy Shield principles to the point of contact listed in the Contact Us section below. If we do not resolve your complaint, you may submit your complaint free of charge to JAMS. Under certain conditions specified by the Privacy Shield principles, you may also be able to invoke binding arbitration to resolve your complaint. We are subject to the investigatory and enforcement powers of the Federal Trade Commission. In certain circumstances, we may be liable for the transfer of personal data from the EU, Switzerland, or the UK to a third party outside those countries.

For more information about the Privacy Shield principles and to view our certification, please visit the U.S. Department of Commerce’s Privacy Shield site.

Additional Information for EEA Users

Users in the European Economic Area have the right to request access to, rectification of, or erasure of their personal data; to data portability in certain circumstances; to request restriction of processing; to object to processing; and to withdraw consent for processing where they have previously provided consent. These rights can be exercised using the information provided under Your Choices above or as described in the Your Rights - Data Subject and Consumer Information Requests section above. EEA users also have the right to lodge a complaint with their local supervisory authority.

As required by applicable law, we collect and process information about individuals in the EEA only where we have a legal basis for doing so. Our legal bases depend on the Services you use and how you use them. We process your information on the following legal bases:

You have consented for us to do so for a specific purpose;

We need to process the information to provide you the Services, including to operate the Services, provide customer support and personalized features and to protect the safety and security of the Services;

It satisfies a legitimate interest (which is not overridden by your data protection interests), such as preventing fraud, ensuring network and information security, enforcing our rules and policies, protecting our legal rights and interests, research and development, personalizing the Services, and marketing and promoting the Services; or

We need to process your information to comply with our legal obligations.

Additional Information for California Users

The California Consumer Privacy Act (CCPA) requires us to provide California residents with some additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it.

In the last 12 months, we collected the following categories of personal information from California residents, depending on the Services used:

Identifiers, like your Costco Companion username, email address, IP address, and cookie information.

Commercial information, including information about transactions you undertake with us.

Internet or other electronic network activity information, such as information about your activity on our Services and limited information about your activity on the services of advertisers who use our advertising technology.

Geolocation information based on your IP address, or more specific location information if you authorize your device to provide it to us.

Audiovisual information in pictures, audio, or video content submitted to Costco Companion.

Professional or employment-related information or demographic information, but only if you explicitly provide it to us, such as by applying for a job or filling out a survey.

Inferences we make based on other collected data, for purposes such as recommending content, advertising, and analytics.

You can find more information about (a) what we collect and sources of that information, (b) the business and commercial purposes for collecting that information, and (c) the categories of third parties with whom we share that information in the What We Collect (and How it is Used and Shared) section above.

If you are a California resident, you have additional rights under the CCPA, including the right to request access to or deletion of your personal information, and information about our data practices, as well as the right not to be discriminated against for exercising your privacy rights. These rights can be exercised as described in the Data Subject and Consumer Information Requests section above.

Children

Children under the age of 13 are not allowed to create an account or otherwise use the Services. Additionally, if you are in the EEA, you must be over the age required by the laws of your country to create an account or otherwise use the Services, or we need to have obtained verifiable consent from your parent or legal guardian.

Changes to This Policy

We may change this Privacy Policy from time to time. If we do, we will let you know by revising the date at the top of the policy. If the changes, in our sole discretion, are material, we may also notify you by sending an email to the address associated with your account (if you have chosen to provide an email address) or by otherwise providing notice through our Services. We encourage you to review the Privacy Policy whenever you access or use our Services or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy. By continuing to use our Services after Privacy Policy changes go into effect, you agree to be bound by the revised policy.

Contact Us

To send a GDPR data subject request or CCPA consumer request, or if you have other inquiries about your privacy rights, follow the steps in the Your Rights - Data Subject and Consumer Information Requests section above.

If you have other questions about this Privacy Policy, please contact us at:

Gravi Opus Studios, LLC.

2705 41st Ave

Apt 5A

Long Island City, NY 11101

Or:

privacy@costcocompanion.app