Last Updated: December 4, 2019;
Effective: January 1, 2020
How we collect and store information depends on how you access and use the Platform. We collect information in multiple ways including when you provide information directly to us, when you permit third parties to provide information to us, and when we passively collect information from you, such as information collected from your browser or device.
Information You Provide Directly to Us
The information you provide directly to us may concern you or others and may include, but is not limited to: (a) name; (b) zip code; (c) email address; (d) home or business telephone number; (e) home, business or mailing address; (f) demographic information (e.g., gender, age, political preference, education, race or ethnic origin, and other information relevant to user surveys and/or offers); (g) date of birth; (h) insurance information; (i) photographs; (j) information about your project, request or need; (k) video or audio files; (l) in certain circumstances, payment and/or identity verification information; and/or (m) any other content you include in communications with other users through the Platform or communications with us. It may also include information specific to services you are requesting or offering through the Platform, such as a business name, service description, qualifications and credentials. You are not required to provide us with such information, but certain features of the Platform may not be accessible or available, absent the provision of the requested information.
Information from Affiliates, Social Networking Sites, and other Non-affiliated Third Parties
We may collect information about you or others through Thumbtack affiliates or through non-affiliated third parties. For example, you may be able to access the Platform through a social networking account, such as Facebook. If you access the Platform through your Facebook account, you may allow us to have access to certain information in your Facebook profile. This may include your name, profile picture, gender, networks, user IDs, list of friends, location, date of birth, email address, photos, videos, people you follow and/or who follow you, and/or your posts or "likes." Social networking sites, such as Facebook, have their own policies for handling your information. For a description of how these sites may use and disclose your information, including any information you make public, please consult the sites' privacy policies. We have no control over how any third-party site uses or discloses the personal information it collects about you.
We may collect information about you or others through non-affiliated third parties. For example, to the extent permitted by law, we may, in our sole discretion, ask for and collect supplemental information from third parties, such as information about your credit from a credit bureau, or information to verify your identity or trustworthiness, or for other fraud or safety protection purposes. We may combine information that we collect from you through the Platform with information that we obtain from such third parties and information derived from any other products or services we provide.
If you send text messages with a Customer Member or Service Member using the telephone number for that Member available on the Platform, we may use a third-party service provider to track these text messages. We track these text messages for fraud prevention, to ensure appropriate charging of Fees, to enforce these Terms, and for quality and training purposes. As part of this process, Thumbtack and its service provider will receive in real time and store data about your text message, including the date and time of the text message, your phone number, and the content of the text message.
Information That is Passively or Automatically Collected
Location Information. When you use the Platform, we may collect general location information (such as IP address). If you install our mobile app, we may ask you to grant us access to your mobile device's geolocation data. If you grant such permission, we may collect information about your precise geolocation, and we may use that information to improve the Platform, including providing you with location-based features (e.g. for identification of Pro Services available near you). To deliver customized content and advertising, we may share your location information with our agents, vendors, or advertisers. If you access the Platform through a mobile device and you do not want your device to provide us with location-tracking information, you can disable the GPS or other location-tracking functions on your device, provided your device allows you to do this. See your device manufacturer's instructions for further details. If you disable certain functions, you may be unable to use certain parts of the Platform.
We may also use local shared objects (also known as "Flash cookies") to assist in delivering special content, such as video clips or animation. Flash cookies are stored on your device, but they are not managed through your web browser. To learn more about how to manage Flash cookies, you can visit the Adobe website and make changes at the Global Privacy Settings Panel.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but your browser may allow you to modify your browser settings to decline cookies if you prefer. If you disable cookies, you may be prevented from taking full advantage of the Platform, because it may not function properly. Flash cookies operate differently than browser cookies, and cookie management tools available in a web browser may not affect flash cookies. As we adopt additional technologies, we may also gather additional information through other methods.
We may use your information for any of the following reasons:
We may display information related to your business, including your name or your business’s name, publicly on your profile, except to the extent we tell you we will not display such information. If the information you provide us upon signing up for an account differs from the information you provide us as part of the verification data we collect, we have sole discretion in determining which information will be displayed publicly on your profile. We may combine information that we collect from you through the Platform with information that we obtain from affiliated and nonaffiliated third parties, and information derived from any other products or services we provide. We may aggregate and/or de-identify information collected through the Platform. We may use de-identified or aggregated data for any purpose, including without limitation for research and marketing purposes and may also share such data with any third parties, including without limitation, advertisers, promotional partners, sponsors, event promoters, and/or others.
We may, either directly or through third parties we engage to provide services to us, review, scan, or analyze your communications with other users exchanged via the Platform or as otherwise described in this Policy for fraud prevention, risk assessment, regulatory compliance, investigation, product development, research and customer support purposes. For example, as part of our fraud prevention efforts, we may scan and analyze messages to prevent fraud or improper actions. We may also scan, review or analyze messages for research and product development purposes, as well as to debug, improve and expand product offerings. By using the Platform or engaging in off-Platform communications tracked by Thumbtack, you consent that Thumbtack, in its sole discretion, may, either directly or through third parties we engage to provide services to us, review, scan, analyze, and store your communications, whether done manually or through automated means.
Unless otherwise described in this Policy, we may also share the information that we collect from you through the Platform as follows:
Please be advised that some information you provide and/or that we collect will be publicly accessible. For instance, registration for an Account requires that you provide us with your name. If you register through Facebook, the Platform will use the name associated with your Facebook account. Your name (full name, or in some instances, your first name and last initial) may be visible to other users. Depending on the circumstances, your name may be attached to your Content or information, such as scheduling of Pro Services, service requests, reviews, participating in discussions or forums, messaging, and profile information. Certain other people, including other users with whom you have interacted via the Platform, will see information about you that is attached to your name. For example (but without limitation), if you are a Customer Member seeking Pro Services, the description you provide of your desired services, along with your name, will be shown to some Pro Members registered in the relevant category along with your name. Thus, other users may be able to personally identify you based on Content you provide. Similarly, the information we collect, including but not limited to when you last accessed the Platform, may be shared with other Members with whom you are interacting or otherwise made public.
We invite you to post Content on or through our Platform, including, but not limited to, your comments, pictures, Service Member profile, and any other information. However, please be careful and responsible whenever you are online. If you choose to post User Content on or through the Platform, such as through Member-to-Member messaging or through our review boards, forums, blogs, or other postings, that information: (a) may be or may become publicly available; (b) may be collected and used by third parties with or without our knowledge; and (c) may be used in a manner that may violate this Policy, the law, or your personal privacy.
We may use third-party web analytics services on the Platform, such as those of Google Analytics. These service providers use the sort of technology described in the Information That Is Passively or Automatically Collected section above to help us analyze how users use the Platform, including by noting the third-party website from which you arrive. The information collected by the technology will be disclosed to or collected directly by these service providers, who use the information to evaluate your use of the Platform. We also use Google Analytics for certain purposes related to advertising, as described in the following section. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-Out Browser Add-on.
If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your computer to deliver tailored marketing, you may visit the Network Advertising Initiative's Consumer Opt-Out Link and/or the Digital Advertising Alliance's Consumer Opt-Out Link to opt-out of receiving tailored advertising from companies that participate in those programs. To opt out of Google Analytics for Display Advertising or customize Google Display Network ads, you can visit the Google Ads Settings page. Please note that to the extent advertising technology is integrated into the Platform, you may still receive advertising content even if you opt out of tailored advertising. In that case, the advertising content will just not be tailored to your interests. Also, we do not control any of the above opt-out links and are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms. If your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different computer or change web browsers, your NAI or DAA opt-out may no longer be effective. Additional information is available on NAI's and DAA's websites, accessible by the above links.
When using a mobile application you may also receive tailored in-application advertising content. Each operating system-iOS for Apple devices, Android for Android devices, and Windows for Microsoft devices-provides its own instructions on how to prevent the delivery of tailored in-application marketing content. You may review the support materials and/or the privacy settings for the respective operating systems in order to opt-out of tailored in-application advertising. For any other devices and/or operating systems, please visit the privacy settings for the applicable device or contact the applicable platform operator.
Our services are not designed for minors under 18. Only persons 18 years of age or older may use the Platform. If we discover that an individual under 18 has provided us with personal information, we will close the account and delete the personal information to the extent required by the Children's Online Privacy Protection Act. We may, where permitted by law, retain certain information internally for purposes described in this Policy.
We employ physical, procedural, and technological security measures to help protect your personal information from unauthorized access or disclosure. Thumbtack may use encryption, passwords, and physical security measures to help protect your personal information against unauthorized access and disclosure. No security measures, however, are 100% failsafe. Therefore, we do not promise and cannot guarantee, and thus you should not expect, that your personal information or communications will not be collected, disclosed and/or used by others. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, keeping your log-in and password private, and not recycling passwords from other websites or accounts. Thumbtack is not responsible for the unauthorized use of your information nor for any lost, stolen, or compromised passwords, or for any activity on your Account via unauthorized password activity.
The Platform may contain links to other websites or resources over which Thumbtack does not have any control. Such links do not constitute an endorsement by Thumbtack of those external websites. You acknowledge that Thumbtack is providing these links to you only as a convenience, and further agree that Thumbtack is not responsible for the content of such external websites or the protection and privacy of information you provide while visiting such external websites.
We may send periodic emails to you. You may opt out of promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt out of receiving emails about recommendations or other information we think may interest you, we may still send you emails about your Account or any services you have requested or received from us.
If you are a California resident (as defined by the California Consumer Privacy Act), you may have certain rights. For more information, please see the Supplemental Privacy Notice for California Residents below.
Under Nevada law, certain Nevada consumers may opt out of the sale of “personally identifiable information” for monetary consideration to a person for that person to license or sell such information to additional persons. “Personally identifiable information” includes first and last name, address, email address, phone number, Social Security Number, or an identifier that allows a specific person to be contacted either physically or online.
We do not engage in such activity; however, if you are a Nevada resident who has purchased or leased goods or services from us, you may submit a request to opt out of any potential future sales under Nevada law by NevadaOptOut@thumbtack.com. Please note we will take reasonable steps to verify your identity and the authenticity of the request. Once verified, we will maintain your request in the event our practices change.
THIS POLICY IS CURRENT AS OF THE EFFECTIVE DATE SET FORTH ABOVE. THUMBTACK MAY, IN ITS SOLE AND ABSOLUTE DISCRETION, CHANGE THIS POLICY AT ANY TIME. THUMBTACK WILL POST ITS UPDATED POLICY ON THE PLATFORM, SEND YOU A MESSAGE OR OTHERWISE NOTIFY YOU WHEN YOU ARE LOGGED INTO YOUR ACCOUNT. THUMBTACK ENCOURAGES YOU TO REVIEW THIS POLICY REGULARLY FOR ANY CHANGES. YOUR CONTINUED ACCESS TO OR USE OF THE PLATFORM WILL BE SUBJECT TO THE TERMS OF THE THEN-CURRENT POLICY.
Our computer systems are currently based in the United States, so your personal data will be processed by us in the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. If you create an Account with the Platform as a visitor from outside the United States, by using the Platform, you agree to this Policy and you consent to the transfer of all such information to the United States, which may not offer a level of protection equivalent to that required in the European Union or certain other countries, and to the processing of that information as described in this Policy.
California law requires us to disclose information regarding the categories of personal information that we have collected about California consumers, the categories of sources from which the information was collected, the business or commercial purposes (as each of those terms are defined by applicable law) for which the information was collected, and the categories of parties with whom we share personal information.
We or our service providers may collect the below categories of information for the following business or commercial purposes (as those terms are defined in applicable law):
Examples of these types of uses are identified below. We may also use the below categories of personal information for compliance with applicable laws and regulations, and we may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent identification of any particular user or device.
|Categories of Personal Information We Collect||Categories of Sources||Examples of Uses||Categories of Third Parties With Which We May Share That Information|
|Identifiers (such as account information, name, email address, address, phone number, or social network account and profile data)||
|Commercial information (such as transaction data)||
|Financial data (such as payment information)||
|Internet or other network or device activity (such as IP address, unique device, advertising, and app identifiers, browsing history or other usage data)||
|Location information (general location, and, if you provide permission, precise GPS location)||
|Sensory information (such as audio recordings if you call our customer service)||
|Inferences about your project preferences and traits||
|Other information that identifies or can be reasonably associated with you (such as user generated content, e.g. reviews)||
If you are a California resident (as defined by the California Consumer Privacy Act), you may have certain rights. California law may permit you to request that we:
You may have the right to receive information about the financial incentives that we offer to you, if any. You also have the right to not be discriminated against (as provided for in applicable law) for exercising certain of your rights referenced herein. Certain information may be exempt from such requests under applicable law. In addition, we need certain types of information so that we can provide our services to you. If you ask us to delete it, you may no longer be able to access or use our services.
If would like to exercise any of these rights, on or after January 1, 2020, please submit a request at email@example.com or visit http://help.thumbtack.com/data-privacy. You will be required to verify your identity before we are able to fulfill your request, for instance by logging into the Thumbtack platform. You can also designate an authorized agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney, signed by you, for the agent to act on your behalf. You will still need to verify your identity directly with us.
The California Consumer Privacy Act (CCPA) sets forth certain obligations for businesses that “sell” personal information. Thumbtack shares certain personal information of Customer Members with select Service Members to better enable those Customer Members to find a Service Member who can provide a service the Customer Member has expressed interest in. To opt out of such sharing, you may click here beginning on January 1, 2020.
California law may require us to compile the following metrics for the previous calendar year: the number of rights requests received, complied with, and denied, as well as the median number of days within which we responded to those requests. To the extent this obligation applies to Thumbtack, we will update this section after the CCPA has been in effect for a year.
California Shine the Light
If you are a California resident, you may ask for a list of third parties that have received your information for direct marketing purposes during the previous calendar year. If we have shared your information, this list will contain the types of information shared, and we will provide this list at no cost. To make such a request, contact us at firstname.lastname@example.org.
California Do-Not-Track Disclosure
Thumbtack is committed to providing you with meaningful choices about the information collected on our Platform for third party purposes. That is why we have provided links (above) to the NAI "Consumer Opt-Out" link, the DAA opt-out link, and a Google opt-out link. However, Thumbtack does not currently recognize or respond to browser-initiated Do-Not-Track signals, as the Internet industry is currently still working on Do-Not-Track standards, implementations, and solutions.