Last updated May 15, 2024

ATTENTION: PLEASE READ THIS PRIVACY NOTICE CAREFULLY BEFORE YOU ACCESS, DOWNLOAD, OR OTHERWISE USE OUR SERVICES. THIS PRIVACY NOTICE IS INCORPORATED BY REFERENCE INTO THE MINDR TERMS OF USE. ANY TERMS DEFINED IN THE TERMS OF USE THAT ARE NOT DEFINED IN THIS PRIVACY NOTICE SHALL HAVE THE SAME MEANING IN THIS PRIVACY NOTICE.

CST Buyer Company dba Mindr (“We” or “Mindr”) is committed to safeguarding the privacy of users of the Mindr products and website. This Privacy Notice applies to Mindr products and services, including the Mindr website and any related interactions with our live agents, mobile applications, contests, sweepstakes, promotions, surveys, and forums (collectively, “Services”). This Privacy Notice describes the information We collect through your use of our Services, how We use it, how We share it, how We protect it, and the choices you can make about your information. It does not apply to other Mindr products or services that link to a different privacy notice.

NOTICE: By continuing to use our Services, you acknowledge (a) that you have read and understood this Privacy Notice; and (b) this Privacy Notice shall have the same force and effect as a signed agreement.

Unless explicitly stated otherwise, any new products, services or features that enhance the current Services shall be subject to this Privacy Notice unless they link to a different privacy notice.

California consumers can find specific disclosures, including “Notice at Collection” details by clicking here.

Mindr reserves the right to modify this Privacy Notice at any time in its sole discretion, in accordance with applicable law. You acknowledge that it is your responsibility to check this Privacy Notice periodically for any changes. Your continued use of the Services following the posting of changes will mean that you accept and agree to any changes to the Privacy Notice.

I. Information We Collect

The personal information We collect depends on how you interact with us, the Services you use, and the choices you make.

We collect information from you when you submit a request or inquire about our products or services, when you use our Services, or otherwise contact or interact with us. The information We collect may come from the following sources:

• Information you provide to us directly;
• Information we collect automatically when you use our website or other Services;
• Information you voluntarily share with our affiliated entities;
• Information you voluntarily share with third-party partners that We work with;
• Information that is publicly available; and
• Information you provide us when you apply for a job with Mindr.

Types of information that We may collect from you, our affiliated entities and external third-party sources include:

• Your name;
• Contact information including email address, telephone number, and address;
• Date of birth;
• Personal information provided by Linkedin, Google, and Microsoft if you connect with these websites or applications through our Services;
• Information collected from your interactions with our website and other Services;
• Demographic information collected from third party sources to enhance your user profile;
• Your device information including, but not limited to, deterministic or probabilistic data, your device’s Internet Protocol address, Device ID, Mobile Device Advertising ID (MAID), other PPI (Persistent Personal Identifiers), your page visits, and other general online analytics information. Additional information collected is described in the Analytics and Cookies sections below;
• Information you provide us in connection with a job application;
• Any other information that you voluntarily provide to us.

We may record conversations you have with an agent, either via chat or on the phone. These recordings are collected and stored by us to perform quality assessments in connection with providing you the Services. We do not share these recordings with any third parties, except to the extent necessary to comply with a legal obligation. Our chat or phone providers may have access to the recordings solely to provide their services to us (please see Section III(A) below for more information).

We may combine all the information We collect from or about you and use it in the manner described in this Privacy Notice.

II. How We Use Your Information

We use the information that We collect for several purposes, including:

• The purposes for which you provided the information;
• To provide you with the products or services you reasonably expect from us;
• To provide information about our products and services or other information that We think may be of interest to you;
• To process and respond to your inquiries and requests;
• To connect you with third-party providers or our affiliated entities to provide you with your requested products and services;
• To promote and advertise our and our affiliated entities’ products and services to you;
• To contact you for market research purposes and to use this information to customize our Services according to your interests;
• To administer, operate, and improve our Services or to further the mission of Mindr;
• To personalize and enhance your experience using our Services;
• To provide you with occasional news, updates, or related product or service information;
• To engage with you on social media platforms;
• To allow you to use our mobile application;
• To generate and review reports and data about our user base and Services usage patterns;
• To analyze the accuracy, effectiveness, usability or popularity of our Services;
• To compile aggregate data for internal and external business purposes;
• To prevent fraud and abuse of our Services and to otherwise protect users and visitors and our business;
• To comply with the law; and
• To perform other business activities as needed, or as described elsewhere in this Privacy Notice.

III. How Your Information is Disclosed

Information may be disclosed to third parties in accordance with our Privacy Notice or as otherwise permitted by law. Please note that a user may choose not to share certain information as described in “Your Choices Regarding Your Information” section below.

A. Third Party Service Providers and Business Partners

We use third party service providers and business partners to perform functions in connection with our Services, such as administration services; marketing or advertising services; performance analytics services; technical services relating to the maintenance, servicing, and upgrading of our products; hosting services; customer service; data migration services; and analytical services, among others (collectively, “Business Functions”). We may disclose your information in connection with these Business Functions for a business purpose as defined in the California Consumer Privacy Act, amended by the California Privacy Rights Act. For more information, please find our State Privacy Notice here.

We may also use the following third-party service providers and business partners to perform functions in connection with our online Services, such as email marketing and other marketing services, site analytics, social sharing, relationship management, functions related to analyzing and improving our Services usefulness, reliability, user experience, and operation, storing data, and as otherwise described in this Privacy Notice. Some of these third-party service providers and business partners include the following, which may change from time to time:

• Adobe Typekit. We use Adobe Typekit to serve fonts on our website and to enhance the performance of our website. Adobe Typekit may collect information relating to your JavaScript version, the amount of time it takes for You to download and apply fonts, and whether you are using an ad blocker and the effects of Your ad blocker on website rendering. For more information on Adobe Typekit, please visit Adobe Typekit’s privacy policy:  https://www.adobe.com/privacy/policies/typekit.html.
• Advertising Platforms. We use third-party advertising platforms to serve ads to you about our and our affiliated entities’ products and services across multiple platforms. These platforms may also function as marketing optimization and email marketing platforms. These third-party platforms may collect information such as your browser information, Internet Protocol address, name, email address, cookie data, and other general analytics information to allow us to provide customized ads to you. For example, We use DoubleClick/Google Ads to improve advertising. DoubleClick/Google Ads is a Google/Alphabet service used for advertising. For more information on the information DoubleClick/Google Ads will collect, please visit  https://support.google.com/admanager/answer/2839090?hl=en&ref_topic=7395141. If You wish to opt-out of DoubleClick/Google Ads’ use of cookies, please visit  https://support.google.com/ads/answer/2662922?hl=en&ref_topic=7048998  or use the targeted advertising controls described in the “Your Choices” section below.
• SiteImprove. We use SiteImprove as a web analytics service to analyze the usage behavior of our visitors in order to improve the functionality of our websites. For more information on SiteImprove, please visit SiteImprove’s privacy policy: https://www.siteimprove.com/privacy/.
• Social Media Platforms. In some cases, We may use social media platforms to serve ads to you about our and our affiliated entities’ products and services, as well as allow you the ability to integrate your experience on our website with your social media. For example, we may use the following:
  • LinkedIn. By clicking on the LinkedIn button on our Services, you will be automatically transported to the official LinkedIn profile for Mindr.
• Other Website Trackers. We use third-party service providers to provide marketing services for us, performance analytics, or to create demographic profiles to understand our customer’s needs better. These service providers may match users who visit our websites with other identifying information they may already have. In the course of providing their services to us, these third-party service providers may collect your device’s Internet Protocol address and other PPI (Persistent Personal Identifiers) to allow us or them to contact you about our and our affiliated entities’ products and services.

We also may share your personal information with these providers and partners to market and promote our Services to you online, or through offline advertising methods such as direct mail. If you opt-in to a short code or SMS campaign with us, We may share your personal information with service providers, however, they will not use your information for their own text message marketing purposes.

B. Business Changes

If We become involved in a merger, acquisition, sale of assets, joint venture, securities offering, bankruptcy, reorganization, liquidation, dissolution, or other transaction or if the ownership of all or substantially all of our business otherwise changes, We may transfer Your information to a third-party or parties in connection therewith.

C. Affiliated Entities

We may share your information with our affiliated entities for purposes consistent with this Privacy Notice. We also may share your personal information with our affiliated entities for their direct marketing and promotional purposes and so they can provide services to you. Our affiliated entities will be required to maintain that information in accordance with this Privacy Notice.

D. At Your Direction

We may share your information with third-parties for purposes consistent with this Privacy Notice and with your direction or authorization.

E. Investigations and Law

We may disclose information about you to third parties if We believe that such disclosure is necessary to:

• Comply with the law or guidance and cooperate with government or law enforcement officials or private parties;
• Investigate, prevent or take action regarding suspected illegal activities, suspected fraud, the rights, reputation, safety, and property of us, users or others, or violations of our policies or other agreements with us;
• Comply with legal and contractual requirements in connection with the Services, such as providing information about you pursuant to a court order, or to parole officers and other authorized monitoring entities;
• Respond to claims and legal process (for example, subpoenas); and/or,
• Protect against legal liability.

F. Aggregated Information

We may share aggregated information relating to users of our Services with affiliated entities or third parties. This aggregated information does not contain personal information about a particular user or information that may be reasonably linked to a unique user.

G. Analytics

We use third-party analytics tools to better understand who is using our Services and how people are using them. These tools may use cookies and other technologies to collect information about your use of our Services and your preferences and activities. These tools collect information sent by your device about your use of our Services and other information that assists us in improving our Services. This information may be used to analyze and track data, determine the popularity of certain content, and better understand your online activity, among other things.

For example, We use Google Analytics to better understand who is using our Services and how people are using them. Google Analytics uses cookies to collect and store information such as Service pages visited, places where users click, time spent on each Service page, Internet Protocol address, type of operating system used, location-based data, device ID, search history, gender, age, and phone number. We use this information to improve our Services and as otherwise described in this Privacy Notice. Please see http://www.google.com/policies/privacy/partners/ for information about how Google Analytics uses this information, and visit  https://tools.google.com/dlpage/gaoptout for information about the Google Analytics Opt-out Browser Add-on. Google may track your activity over time and across websites.

H. Cookies and Other Tracking Technologies

We, along with third parties, use cookies, pixels, local storage objects, web beacons and other similar technologies. These technologies are used for tracking, analytics, advertising, and personalization and optimization of the Services.

Cookies are small files that are transferred to and stored on your computer through your Web browser (if you allow it) that enable the website’s or service provider’s system to recognize your browser and capture and remember certain related information. You can instruct your browser to either stop accepting cookies, clear your browser cookies or adjust browser settings yourself. But if you do not accept certain cookies, you may not be able to use all portions of the Services due to functionality limitations. Here are the types of cookies that may be deployed by your browser:

• Persistent cookies remain on the visitor’s computer after the browser has been closed.
• Session cookies exist only during a visitor’s online session and disappear from the visitor’s computer when they close the browser software.
• Flash cookies (also known as local shared objects) are data files that can be created on your computer by the websites you visit and are a way for websites to store information for later use. Flash cookies are stored in different parts of your computer from ordinary browser cookies. You can disable the storage of flash cookies. For additional information about managing and disabling flash cookies, please visit  http://helpx.adobe.com/flash-player/kb/disable-local-shared-objects-flash.html.

Web beacons are small strings of code that provide a method for delivering a graphic image on a Web page or in an email message for the purpose of transferring data. You can disable the ability of web beacons to capture information by blocking cookies.

We use cookies and other tracking technologies on our Services to help us understand and save your preferences and interests so We can personalize your future visits. We also use cookies and tracking technologies to compile aggregate data about website traffic and website interactions so that We can offer better website experiences and tools in the future.

Some of our business partners, such as our analytics providers, advertising networks, social sharing provider, and social media connections, also use cookies and other tracking technologies on our website, which may track users across websites and over time.

IV. Security

We implement a variety of security measures to protect the safety of your personal information when you enter, submit, or access your personal information.

While We take reasonable measures to protect the information you submit via our Services against loss, theft and unauthorized use, disclosure, or modification, We cannot guarantee its absolute security. No Internet, email, or mobile application transmission is ever fully secure or error free. Email or other messages sent through our Services may not be secure. You should use caution whenever submitting information through our Services and take special care in deciding which information You provide us.

We cannot guarantee that transmissions of your personal information will be fully secure and that third parties will never be able to defeat our security measures or the security measures of our partners. WE ASSUME NO LIABILITY FOR THE DISCLOSURE OF YOUR INFORMATION DUE TO TRANSMISSION ERRORS, THIRD-PARTY ACCESS, OR CAUSES BEYOND OUR CONTROL.

Any information collected through our Services is stored and processed in the United States. If you use our Services outside of the United States, you consent to having your data transferred to the United States.

V. Data Retention Policy, Managing Your Information

Unless otherwise required by law, We will retain your personal information to the extent necessary to fulfill the purpose for which that personal information was collected. Please note that We may be required to retain your personal information for a reasonably longer period of time to the extent necessary to comply with regulatory or legal obligations, resolve disputes, enforce our agreements or for any other business purpose in accordance with applicable laws.

We may maintain anonymized or aggregated data, including usage data, for analytics purposes. Please note that some or all of the information We have collected may be required for our Services to function properly.

VI. Links to Other Websites or Applications

This Privacy Notice applies only to our Services. Our Services may contain links to other websites or apps or may forward users to other websites or apps that We may not own or operate and to which this Privacy Notice does not apply. The links from our Services do not imply that We endorse or have reviewed these websites or apps. The policies and procedures We describe here do not apply to these websites or apps. We neither can control nor are responsible for the privacy practices or content of these websites or apps. We suggest contacting these websites or app providers directly for information on their privacy policies. Nonetheless, We seek to protect the integrity of our Services, and welcome any feedback about these linked websites and mobile applications.

VII. Your Choices Regarding Your Information

You have choices regarding the use of Your information.

• Access, Portability, Correction, and Deletion – If you wish to access, copy, download, correct, or delete personal information about you that We hold, you may do so by contacting us in writing via the address listed in the “How to Contact Us” section below.

• Marketing Opt-Out – You can opt-out of receiving promotional or marketing communications that We provide to you or that you consent to receive, as applicable. If you receive promotional email or SMS messages from us, you can opt-out by following the directions in that message, Alternatively, for mail, email, phone, or text message, contact us by writing to CST Buyer Company, LLC, Attn: Marketing Opt Out, 11035 Aurora Avenue, Des Moines, IA 50322, with your request and include (i) your name and account number (if applicable), (ii) if you are requesting communications to cease via mail, email, phone, or text message, (iii) the specific mailing address(es), phone number(s) or email address(es) to which the opt-out applies, and (iv) the specific business to which your opt-out request applies. (e.g., Mindr).

• Do Not Track – Your browser or device may offer you a “Do Not Track” (DNT) option, which allows you to signal to operators of websites, web applications, mobile applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and/or across different websites or applications. Unlike the GPC described above, there is not a common understanding of how to interpret the DNT signal; therefore, our websites and Services do not respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the GPC, cookie controls, and advertising controls described above.

• Targeted advertising – To opt-out from or otherwise control targeted advertising, you have some options. First, you can use the Global Privacy Control setting in a web browser or browser extension as described below. Second, you can use the opt-out controls offered by the organizations our advertising partners may participate in, which you can access at:
  • United States: NAI (http://optout.networkadvertising.org) and DAA (http://optout.aboutads.info/)
  • Canada: Digital Advertising Alliance of Canada (https://youradchoices.ca/)
  • Europe: European Digital Advertising Alliance (http://www.youronlinechoices.com/)

Third, you can use the other cookie or mobile ID controls described below. These choices are specific to the device or browser you are using. If you access our services from other devices or browsers, take these actions from those systems to ensure your choices apply to the data collected when you use those systems.

• Data sales – Some privacy laws define “sale” broadly to include some of the disclosures described in the “Disclosure of Your Information” section of this Privacy Notice. To opt from such data sales, please use our form or a browser GPC setting as described below.

• Browser or platform controls –
  • Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.
  • Global Privacy Control. Some browsers and browser extensions support the “Global Privacy Control” (GPC) or similar controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When We detect such a signal, We will make reasonable efforts to respect your choices indicated by a GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal.

• Denying request – If you send us a request to exercise your rights or these choices, to the extent permitted by applicable law, We may decline requests in certain cases. For example, We may decline requests where granting the request would be prohibited by law, could adversely affect the privacy or other rights of another person, would reveal a trade secret or other confidential information, or would interfere with a legal or business obligation that requires retention or use of the data. Further, We may decline a request where We are unable to authenticate you as the person to whom the personal information relates, the request is unreasonable or excessive, or where otherwise permitted by applicable law. If you live in a jurisdiction that provides for a right to appeal denied requests, and you receive a response from us informing you that We have declined your request, in whole or in part, you may appeal that decision by submitting your appeal using the contact method described at the bottom of this Privacy Notice.

• California Consumers – Please see the California Notice for additional details on how to exercise your rights.

VIII. Children

Our Services are not intended for children under 15 years of age. We do not knowingly collect personal information from an individual under age 15. If You are under the age of 15, please do not submit any personal information through our Services. If you have reason to believe that We may have accidentally received personal information from an individual under age 15, please contact us immediately as provided in Section XI, below.

IX. Changes to Privacy Notice

We reserve the right to update or modify this Privacy Notice at any time without prior notice, however you will be notified if We make any material changes that affect the use of your personal information before it takes effect. If you do not agree with the changes to how your personal information will be used, please do not continue to use this website. Your continued use of the website or Services after you have been notified of changes to the Privacy Notice will mean that you accept and agree to the changes to this Privacy Notice. Please review this Privacy Notice periodically, and especially before you provide any information. This Privacy Notice was made effective on the date indicated above.

X. How to Contact Us

Please feel free to contact us by calling 1-844-535-0260 or by writing to Mindr, Privacy Notice, 11035 Aurora Avenue, Des Moines, IA 50322, if you have any questions about this Privacy Notice.

If you are a resident of the state of California, USA, please see our State Privacy Notices which discusses additional privacy rights you may have under applicable law regarding the processing of your personal information.