For U.S. residents, ProdigyBuild processes your personal data in compliance with applicable U.S. state data privacy laws, including the California Consumer Privacy Act (CCPA). This section of our Privacy Statement provides the necessary information required by the CCPA and other U.S. state data privacy laws, which complements our Privacy Statement.

Sale: We do not sell your personal data, and therefore, there is no opt-out option for the sale of personal data.

Sharing: We may “share” your personal data for targeted advertising purposes. However, you have the choice to opt out of sharing data for cross-contextual advertising purposes and manage additional privacy preferences on ProdigyBuild’s Enterprise Marketing pages by selecting “Managing Your Cookie Preferences.” Below are the categories of personal data shared in the past 12 months, along with additional details:

Categories of Personal Data Shared:

  • Usage information and Interactions

Categories of Recipients:

  • Advertisers

Business or Commercial Purpose for Sharing:

  • To support ProdigyBuild’s enterprise marketing efforts

Rights: You have several rights concerning your personal data. You have the right to:

  • Request disclosure of the personal data we collect, use, disclose, share, and sell
  • Request deletion of your personal data
  • Correct your personal data
  • Restrict the use and disclosure of your sensitive data
  • Opt out of future “sharing” of personal data for targeted advertising purposes

You can make these requests yourself or through an authorized agent. If you choose to use an authorized agent, we provide detailed guidance on how to exercise your privacy rights.

For detailed information on how to exercise these rights, please refer to the “Your choices regarding our processing of your personal data” section in the ProdigyBuild Privacy Statement. You can also use ProdigyBuild’s User Migration API to access and download your data. For more information, please review the “Requesting an archive of your personal account’s data” section.

If you have a ProdigyBuild account, you must utilize the provided tools to exercise your rights, which requires logging in to your ProdigyBuild account. If you have additional requests or questions after logging in, you may contact ProdigyBuild using the address provided in the “How to contact us” section, including through our web form.

If you do not have an account, you can exercise your rights by contacting us as described above. We may request additional information to validate your request before proceeding. You can also submit a request based on these rights via our contact form.

You have the option to opt out of “sharing” information for cross-contextual behavioral advertising purposes and make additional privacy choices related to ProdigyBuild’s Enterprise Marketing pages by selecting “Managing Your Cookie Preferences.” Furthermore, exercising your privacy rights ensures you will not receive discriminatory treatment. We do not discriminate against you if you choose to exercise your privacy rights.

Additionally, under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal information to a business with which they have established a business relationship for personal, family, or household purposes (“California Customers”) have the right to request information regarding the disclosure of personal information to third parties for direct marketing purposes. We want to clarify that we do not disclose personal information to third parties for their direct marketing purposes as defined by this law. If you are a California Customer, you may request further information about our compliance with this law by emailing us at (privacy [at] ProdigyBuild [dot] com). Please note that businesses are obligated to respond to one request per California Customer per year and may not be required to respond to requests made through means other than the designated email address.

California residents under the age of 18 who are registered users of online sites, services, or applications have the right under California Business and Professions Code Section 22581 to remove or request the removal of content or information they have publicly posted. To remove such content or information you have publicly posted, please submit a Private Information Removal request. Alternatively, you can send a detailed description of the specific content or information you wish to have removed to ProdigyBuild support. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online, and certain circumstances may prevent or not require removal according to the law. If you have any questions about our privacy practices concerning California residents, please contact us via our contact form.

Personal Information

Please refer to the table below for details regarding the categories of personal information we collect, the purposes for processing, and the categories of third-party recipients with whom we share this information. For a comprehensive description of the data included in each category, please consult the GitHub Privacy Statement.

Category of Personal Data Purposes of Processing Categories of Third-Party Recipients

Category of Personal Data Sources of Personal Data Purposes of Processing Recipients
Registration information Users and customers who use create an account Provide and personalize our Services; authenticate and provide account access; respond to user and customer questions; help, secure, and troubleshoot; honor users rights; and marketing Service providers and user-directed entities
Demographic information Users and customers, third-party data brokers Provide and personalize our Services; product improvement and development; help, secure, and troubleshoot; and marketing Service providers and user-directed entities
Payment and billing information Users and customers, financial institutions Transact commerce; provide our Services; process transactions; fulfill orders; help, secure, and troubleshoot; and detect and prevent fraud Service providers and user-directed entities
Content and files Users and customers Provide our Services; safety; compliance; and help, secure, and troubleshoot; honor user rights Service providers and user-directed entities
Feedback and ratings Users and customers Provide our Services; product improvement; product improvement and development; marketing; customer support; and help, secure, and troubleshoot Service providers and user-directed entities
Transaction information, subscription and licensing data Users and customers Provide, personalize, and activate our Services; customer support; help, secure, and troubleshoot; and marketing Service providers and user-directed entities
Usage information and Interactions Users, customers, website visitors Provide and personalize our Services; product improvement and development; marketing; and help, secure and troubleshoot Service providers and user-directed entities
Geolocation information Users, customers, website visitors Provide and personalize our Services; product improvement and development; marketing; and help, secure and troubleshoot Service providers and user-directed entities

Sensitive Data Categories

Under applicable U.S. state data privacy laws, we may collect, process, or disclose certain personal data that is considered “sensitive data.” This type of data may be obtained when you participate in surveys, include it in your account profile, or engage in specific community-oriented repositories. It’s important to note that sensitive data is a subset of personal data. In the list below, we provide an overview of the sensitive data categories we collect, the sources from which we obtain this data, the purposes for processing it, and the categories of third-party recipients with whom we may share it.

Sensitive Data Type Purposes of Processing Recipients
Account log-in, financial account, debit or credit card number, and the means to access the account (security or access code, password, credentials, etc.) Transact commerce; process transactions; fulfill orders; provide our Services; help, secure, and troubleshoot; and detect and prevent fraud Service providers and user-directed entities
Racial or ethnic origin, religious or philosophical beliefs, or union membership Provide and personalize our products; product development; help, secure, and troubleshoot; and marketing Service providers and user-directed entities
Medical or mental health, sex life, or sexual orientation Provide and personalize our products; product development; help, secure, and troubleshoot; and marketing Service providers and user-directed entities
Contents of your mail, email, or text messages Provide our products; safety; compliance; and help, secure, and troubleshoot Service providers and user-directed entities

ProdigyBuild’s Consent for Sensitive Data Collection and Processing

ProdigyBuild seeks your consent to collect and process sensitive data or does so at your explicit direction. We handle your sensitive data responsibly and only utilize or disclose it for the following purposes:

  1. Service Provision: We use sensitive data to perform the services, fulfill transactions, or provide goods that you reasonably expect from us.
  2. Security and Integrity: We employ sensitive data to ensure the security and integrity of our services, combat malicious activities, fraud, or illegal acts, and protect individuals’ physical safety. We process sensitive data to the extent necessary and proportionate for these purposes.
  3. Transient Use: Sensitive data may be used temporarily (including non-personalized advertising) as long as it is not used for profiling or altering an individual’s experience outside the current interaction with ProdigyBuild.
  4. Business Operations: Sensitive data is processed to operate our business effectively. This includes maintaining accounts, providing customer service, processing orders/transactions, verifying customer information, processing payments, offering financing, providing analytics, storage, and similar services.
  5. Quality and Safety: We may utilize sensitive data to verify or enhance the quality, safety, or functionality of ProdigyBuild’s services or devices.
  6. Compliance with Applicable Law: Sensitive data may be processed for activities required by law or any other lawful purposes.

The charts provided above outline the primary sources, purposes of processing, and recipients for each category of personal data. The personal information categories mentioned above are used for the purposes described in the “ProdigyBuild Privacy Statement” section of our Privacy Statement, which includes meeting legal obligations, improving internal operations, and conducting research. We may also disclose these personal information categories for business or compliance purposes. For further information, please refer to the “ProdigyBuild Privacy Statement” section of our Privacy Statement.

Not in a Position to Identify Data (NPI)

In certain situations, ProdigyBuild processes data in a state called “Not in a Position to Identify Data” (NPI) or de-identified data. NPI data is processed in a way that prevents the identification of individuals without additional steps. We maintain NPI data in its de-identified state unless permitted by applicable law, and we do not attempt to re-identify individuals associated with NPI data.

Disclosures of Personal Data for Business or Commercial Purposes

As described in the “How We Share the Information We Collect” section, we share personal data with third parties for various business and commercial purposes. The primary purposes for which we share personal data align with the processing purposes listed in the table above. We also disclose the personal information categories mentioned above for business purposes. For more details, please refer to the “ProdigyBuild Privacy Statement” section of our Privacy Statement.