Privacy Policy

Product-specific privacy notices

Some Corepass products have additional privacy notices that explain product-specific data practices. Those notices supplement this Privacy Policy. Where a product-specific notice provides more specific information about a product’s data practices, that notice applies to those practices.

Remy in Chrome

Learn how the Remy browser extension accesses and handles browser data in the Remy in Chrome privacy notice.

Information we collect

Depending on how you interact with the Services, we may collect the following categories of information:

• Account and contact information: Your name, email address, postal address, phone number, organization, job title, account preferences, and other information you provide when you create an account, request support, or communicate with us.
• Account credentials: Information used to authenticate your account, together with security and account settings. If you use a third-party sign-in provider, we may receive account information from that provider according to your settings with the provider.
• Product content: Prompts, instructions, code, files, documents, messages, and other content that you submit to a Service or authorize it to access. When you ask Remy to perform a browser-related task, product content may also include relevant page content, screenshots, URLs, page structure, console output, and browser diagnostic information. The information processed depends on the task you request and the features you use.
• Identity and verification information: If you use a Corepass product that provides lending, identity, or compliance-related functionality, we may collect information such as your date of birth, government identification details or copies, and verification results that you or an authorized customer provides. This category does not apply to every Corepass product.
• Payment and transaction information: If you purchase a paid Service, we may receive billing details, subscription information, and transaction records. Payment card information may be collected and processed directly by our payment service providers.
• Device, usage, and diagnostic information: IP address, device and browser type, operating system, device identifiers, pages or features used, dates and times of access, referring pages, performance information, error reports, and similar technical information.
• Approximate location: General location inferred from information such as your IP address.
• Communications: Records of support requests, feedback, survey responses, emails, and other correspondence with us.
• Cookies and similar technologies: Our websites and service providers may use cookies and similar technologies to keep you signed in, remember preferences, understand use of our websites, and maintain and improve the Services. You can manage cookies through your browser settings, although disabling some cookies may affect functionality.

We collect information directly from you, automatically through your use of the Services, from organizations that provide or administer a Service for you, and from service providers or partners that support the features you choose to use. We may combine information from these sources where permitted by applicable law.

How we use personal information

We may use personal information to:

• Provide, operate, maintain, and support the Services.
• Process your requests and enable product features, including user-requested AI and browser-related functionality.
• Create and administer accounts, authenticate users, process transactions, and provide customer support.
• Personalize your experience and remember your settings and preferences.
• Monitor performance, troubleshoot problems, analyze use, and improve or develop our products and features.
• Protect the Services, users, and Corepass; detect and prevent fraud, abuse, security incidents, and violations of our terms.
• Send service-related messages and, where permitted, marketing communications. You may opt out of marketing emails using the unsubscribe instructions in those messages.
• Comply with applicable law, enforce our agreements, and establish, exercise, or defend legal claims.
• Carry out another purpose disclosed to you when we collect the information or with your direction or consent.

Where applicable law requires a legal basis, we rely on one or more of the following: performance of a contract, our legitimate interests, compliance with legal obligations, and your consent. The legal basis depends on the Service, the information involved, and the context in which it is processed.

How we disclose personal information

We may disclose personal information in the following circumstances:

• Service providers: To vendors that perform services for us, such as cloud hosting, payment processing, security, analytics, communications, customer support, identity verification, and AI model or infrastructure services. The information provided depends on the Service and feature you use. These providers process information subject to contractual terms and applicable law.
• Your organization and integrations: To an organization that provides or administers your account, or to a third-party product or integration when you or your organization directs us to connect the Services to it.
• Affiliates: To companies under common ownership or control with Corepass for purposes consistent with this Privacy Policy.
• Legal and safety reasons: When we reasonably believe disclosure is necessary to comply with law or legal process, investigate fraud or security issues, enforce our agreements, or protect the rights, property, or safety of Corepass, our users, or others.
• Business transactions: In connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, including related due diligence.
• At your direction: When you ask us to disclose information or otherwise consent to the disclosure.

We may also use or disclose information that has been aggregated or de-identified so that it cannot reasonably be linked to you. We do not sell personal information for monetary consideration. Some privacy laws define “sale” or “sharing” more broadly; where those laws apply, you may exercise the relevant choices described in the “Your privacy rights and choices” section below.

Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain security, comply with legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the Service, the type of information, how it is used, account and contract requirements, and applicable law.

When personal information is no longer required, we take reasonable steps to delete or de-identify it, subject to technical limitations, backup cycles, and legal retention requirements.

Your privacy rights and choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Request access to personal information we hold about you.
• Request correction or deletion of personal information.
• Receive a portable copy of certain personal information.
• Object to or request restriction of certain processing, where applicable.
• Withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before withdrawal.
• Opt out of marketing emails using the unsubscribe link in the message.
• Opt out of a sale or sharing of personal information, or limit certain uses of sensitive personal information, where those rights apply.
• Appeal our decision on a privacy request where applicable law provides that right.
• Lodge a complaint with a data protection authority in your country or region.

We will not discriminate against you for exercising a privacy right. To submit a request, contact us using the details in the “Contact us” section below. We may need to verify your identity and authority before completing a request. If another person submits a request for you, we may require proof that the person is authorized to act on your behalf. We may deny or limit a request where permitted by applicable law and will explain our decision when required.

If you use the Services through an organization, that organization may control your account or product content. In that case, please direct requests concerning information controlled by the organization to the organization first.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for protecting your credentials and for using available account security features.

International data transfers

Corepass and its service providers may process personal information in the United States and other countries whose data protection laws may differ from those where you live. Where required by applicable law, we use recognized safeguards for international transfers, which may include contractual protections or other lawful transfer mechanisms.

Children’s privacy

The Services are intended for business and professional use and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so that we can review the information and take appropriate action. Individual Services may have a higher minimum age stated in their applicable terms.

Third-party services and links

The Services may contain links to or integrations with third-party websites, applications, or services. This Privacy Policy does not apply to third parties’ independent data practices. We encourage you to review their privacy notices before providing information to them.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our products, practices, or legal obligations. When we make changes, we will update the “Last updated” date at the top of this page. If changes materially affect how we process personal information, we may provide additional notice where appropriate or required by law.

Contact us

For privacy questions or to exercise your privacy rights, contact us at support@corepass.com.

Corepass, Inc.
2740 Sand Hill Rd, Suite 100
Menlo Park, CA 94025