1. About This Privacy Policy

This Privacy Policy applies to Retifact.com (“Retifact,” “we,” “us,” or “our”) and Retifact-operated tools, applications, features, and services.

It also applies, where relevant, to Retifact services that are integrated with, operated for, connected with, or made available to members of Sumrria and Sumrria.com.

This policy explains:

• What information we may collect;
• How information may be collected;
• Why information is collected;
• How information may be used;
• How Retifact and Sumrria-connected services interact;
• How link and traffic analytics work;
• How email and newsletter information may be processed;
• When information may be disclosed to service providers;
• How information may be retained and deleted;
• What privacy choices and rights may be available to you.

2. Retifact and Sumrria

Sumrria members may access certain Retifact tools from Sumrria.com without creating a separate Retifact account.

For example, a logged-in Sumrria member may select a tool on Sumrria.com and be securely directed to Retifact.com.

To facilitate this connection, Retifact may receive information such as:

• A Sumrria user or account identifier;
• Authentication information or a security token;
• Authentication timestamps or expiration information;
• Membership or eligibility information where necessary;
• Information required to associate Retifact data with the correct Sumrria member.

Authentication information is used to verify access and connect the appropriate Retifact tools and records with the correct Sumrria member.

Retifact does not require Sumrria to provide information that is unnecessary for providing the connected service.

3. Information We May Collect

The information Retifact collects depends upon the tools and services you use.

Account and Authentication Information

We may process:

• User identifiers;
• Account identifiers;
• Authentication tokens;
• Session information;
• Login or access timestamps;
• Membership or service eligibility information;
• Security and fraud-prevention information.

Contact Information

When voluntarily provided, we may process information such as:

• Name;
• Email address;
• Contact information;
• Support communications;
• Other information you choose to provide.

Technical Information

When you use Retifact, our systems may automatically receive technical information including:

• Internet Protocol (IP) address;
• Hashed or otherwise transformed IP information;
• Browser information;
• Device category;
• Operating-system information;
• User-agent information;
• Date and time information;
• Referring website or source;
• Requested pages or links;
• General network information;
• Security and bot-detection signals.

4. Link Shortener and Link Tracker Data

Retifact may provide a Smart Link Tracker, URL shortener, or similar link-management system.

When a Retifact shortened or tracked link is visited, we may process information necessary to redirect the visitor and provide analytics to the owner of the link.

This information may include:

• The shortened link or link identifier;
• Date and time of the visit;
• Referral source;
• Device category;
• Approximate geographic location;
• Bot or automated-traffic classification;
• Hashed IP information;
• Click and visitor statistics.

5. IP Addresses and IP Hashing

Retifact may process an IP address when a visitor accesses a tracked link or other Retifact service.

For certain analytics functions, Retifact may transform an IP address into a cryptographic hash or similar identifier rather than storing the original IP address in the applicable analytics record.

Hashed IP information may be used to estimate unique visitors, detect repeated activity, identify suspicious traffic, prevent fraud, and generate analytics.

Hashing is a privacy and security measure, but depending upon applicable law and the circumstances, hashed or pseudonymous information may still be considered personal information.

6. Geographic Information

Retifact may use an IP address or third-party geolocation service to estimate a visitor’s general geographic location.

This may include information such as:

• Country;
• Region or state;
• Approximate city.

Retifact’s link-tracking tools are not intended to determine a visitor’s precise physical location.

Geographic information based on IP addresses is approximate and may be inaccurate, particularly when a visitor uses a VPN, proxy, cellular network, corporate network, privacy service, or other routing technology.

7. Bot and Automated-Traffic Detection

Retifact may analyze technical signals such as browser or user-agent information to estimate whether traffic appears to originate from a person, crawler, bot, automated system, security scanner, search engine, or similar technology.

Bot-detection information may be used for:

• Traffic analytics;
• Fraud prevention;
• Security;
• Service integrity;
• Distinguishing estimated human and automated visits.

Bot detection is an estimate and may not always be accurate.

8. Referral and Device Analytics

Retifact may record the referring website or source associated with a visit when that information is provided by the visitor’s browser or device.

We may also classify devices into general categories such as:

• Desktop;
• Mobile;
• Tablet.

These analytics are provided for informational purposes and may not always be accurate.

9. Retifact / Sumrria Mailer

Retifact may provide email, newsletter, mailing-list, or campaign-management services for eligible users, including eligible Sumrria members.

The service may be branded as:

Sumrria Mailer

and may use an email address such as:

sumrria.mailer@retifact.com

The specific sender address, delivery provider, return path, tracking configuration, or other technical details may change as the service develops.

10. Mailer User Information

When a user accesses or uses the mailer, Retifact may process:

• The user’s Sumrria or Retifact identifier;
• Campaign names;
• Email subject lines;
• Email content;
• Templates;
• Recipient lists;
• Subscriber information;
• Campaign dates and times;
• Sending status;
• Delivery information;
• Bounce information;
• Complaint information;
• Unsubscribe information;
• Campaign analytics;
• Other information required to provide the mailing service.

11. Subscriber and Recipient Information

Users of the Retifact/Sumrria Mailer may submit information relating to their own subscribers or recipients.

This may include:

• Email addresses;
• Names, when supplied;
• Subscription status;
• Unsubscribe status;
• Campaign history;
• Bounce or delivery status;
• Engagement information;
• Other information voluntarily submitted by the mailer user.

12. Email Tracking

Depending upon the newsletter software, delivery provider, recipient’s email application, privacy settings, and features enabled by the sender, Retifact or its service providers may process email engagement information.

This may include:

• Delivery status;
• Bounces;
• Unsubscribe activity;
• Spam or abuse complaints;
• Link clicks;
• Email opens where technically available;
• Campaign engagement statistics.

Email-open information may be generated through technologies such as tracking pixels or similar mechanisms where supported and legally permitted.

Email engagement statistics are estimates. Privacy technologies, image blocking, proxy services, automated security scanners, and email-provider features may cause statistics to be inaccurate.

13. Unsubscribe and Suppression Information

Retifact may maintain unsubscribe and suppression records to prevent recipients from receiving marketing messages they have opted out of receiving.

Suppression information may include an email address or another identifier necessary to recognize an opted-out recipient.

Even if other information is deleted, Retifact may retain the minimum information reasonably necessary to:

• Honor an unsubscribe request;
• Prevent future prohibited mailings;
• Maintain suppression lists;
• Comply with legal obligations;
• Prevent abuse or fraud.

14. Why We Process Information

Depending upon the service, Retifact may process information to:

• Provide Retifact tools and services;
• Authenticate Sumrria members;
• Maintain user-specific accounts and records;
• Create and manage shortened links;
• Redirect visitors to requested destinations;
• Generate click and traffic analytics;
• Estimate unique visitors;
• Provide approximate geographic analytics;
• Identify suspected bots or automated traffic;
• Provide email and newsletter services;
• Deliver email campaigns;
• Manage subscribers;
• Process unsubscribe requests;
• Manage bounces and complaints;
• Provide campaign analytics;
• Detect fraud, abuse, spam, and security threats;
• Provide technical support;
• Maintain and improve the Services;
• Comply with applicable legal obligations;
• Protect Retifact, Sumrria, users, recipients, and third parties.

15. Sources of Information

Retifact may receive information:

• Directly from you;
• Automatically from your browser or device;
• From Sumrria when you access a connected service;
• From visitors interacting with tracked links;
• From users who submit subscriber or recipient information;
• From email delivery providers;
• From hosting, security, analytics, or technical service providers;
• From fraud and abuse detection systems;
• As otherwise permitted by applicable law.

16. Cookies and Similar Technologies

Retifact may use cookies, sessions, local browser storage, tracking technologies, or similar mechanisms where necessary or appropriate.

These technologies may be used for:

• Authentication;
• Security;
• Session management;
• User preferences;
• Analytics;
• Fraud prevention;
• Service functionality.

You may be able to control certain cookies through your browser settings. Blocking necessary cookies may prevent some Retifact functionality from working correctly.

Where applicable law requires consent for non-essential cookies or similar technologies, Retifact will seek such consent as required.

17. Third-Party Service Providers

Retifact may use third-party companies and service providers to help operate its services.

These providers may include:

• Web-hosting providers;
• Cloud-infrastructure providers;
• Email delivery providers;
• Newsletter or mailing software providers;
• DNS and domain providers;
• Security and anti-abuse providers;
• Geolocation providers;
• Analytics providers;
• Database and backup providers;
• WordPress and plugin providers;
• Technical support providers;
• Other vendors necessary to provide the Services.

These service providers may process information as necessary to provide services to Retifact and may be subject to their own contractual, legal, security, and privacy obligations.

18. Email Delivery Providers

Retifact may use one or more third-party email delivery providers to transmit messages generated through the Retifact/Sumrria Mailer.

Information transmitted to an email provider may include:

• Recipient email address;
• Sender information;
• Email subject;
• Email content;
• Message identifiers;
• Delivery information;
• Technical information necessary to deliver and monitor the message.

Once Retifact selects or changes an email delivery provider, this Privacy Policy may be updated to identify that provider or provide additional information about the applicable processing.

19. Information Sharing

Retifact may disclose information when reasonably necessary to:

• Provide the Services;
• Operate connected Sumrria services;
• Use hosting or infrastructure providers;
• Deliver email;
• Provide analytics;
• Detect and prevent fraud or abuse;
• Protect the security of Retifact or Sumrria;
• Comply with applicable law or valid legal process;
• Protect users, recipients, Retifact, Sumrria, or third parties;
• Complete a merger, acquisition, restructuring, financing, or sale of business assets, subject to applicable law.

20. Sale of Personal Information

Certain privacy laws may define “sale” or “sharing” more broadly than an ordinary exchange of information for money.

If Retifact introduces advertising, analytics, or other practices in the future that constitute a sale or sharing of personal information under applicable law, this Privacy Policy and any required privacy-choice mechanisms will be updated accordingly.

21. Retifact and Sumrria Data Sharing

Because certain Retifact services are integrated with Sumrria, information may be exchanged between Retifact and Sumrria where reasonably necessary to:

• Authenticate a Sumrria member;
• Determine eligibility for a connected tool;
• Associate user data with the correct member;
• Provide customer support;
• Prevent fraud or unauthorized access;
• Process account suspension or deletion;
• Operate connected services;
• Comply with legal obligations.

Retifact and Sumrria will not intentionally exchange more personal information than is reasonably necessary for the applicable connected service.

22. Account Deletion

If a Sumrria member account is deleted, Sumrria may notify Retifact so that Retifact can delete, deactivate, anonymize, or otherwise process records associated with that user’s connected Retifact services.

For example, Retifact may remove shortened links and associated analytics records connected with a deleted Sumrria account.

Some information may be retained when reasonably necessary for:

• Legal compliance;
• Security;
• Fraud prevention;
• Dispute resolution;
• Enforcement of agreements;
• Backup integrity;
• Unsubscribe and suppression compliance;
• Other legitimate purposes permitted by law.

23. Deleted Shortened Links

When a user deletes a Retifact shortened link, the link and associated records may be deleted or deactivated according to the functionality of the applicable service.

A previously issued shortened URL may subsequently redirect to Sumrria.com, Retifact.com, an informational page, or another destination selected by Retifact.

24. Data Retention

Retifact retains information for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining records, preventing fraud, resolving disputes, maintaining security, honoring unsubscribe requests, and complying with applicable law.

Retention periods may vary depending upon the type of information and service.

For example:

• Active link records may be retained while the link remains active;
• Traffic analytics may be retained while needed to provide historical statistics;
• Campaign records may be retained while needed for account history and compliance;
• Security logs may be retained for fraud and abuse prevention;
• Suppression records may be retained to honor unsubscribe requests;
• Backups may temporarily contain information after deletion from active systems.

25. Data Security

Retifact uses reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss, or misuse.

Security measures may include:

• HTTPS encryption;
• Authentication controls;
• Signed or token-based access;
• Access restrictions;
• Database protections;
• IP hashing or pseudonymization where appropriate;
• Security monitoring;
• Spam and abuse controls;
• Software updates;
• Backups;
• Other security measures appropriate to the Services.

No internet service or electronic storage system can guarantee absolute security. Accordingly, Retifact cannot guarantee that unauthorized access, loss, or misuse will never occur.

26. User Responsibility for Subscriber Data

Users of the Retifact/Sumrria Mailer are responsible for protecting subscriber information they upload or manage through the Services.

Users must not upload subscriber data they obtained unlawfully or do not have the legal right to process.

Retifact may restrict or terminate access where subscriber data is being used for spam, fraud, phishing, unlawful marketing, or other prohibited activity.

27. Children’s Privacy

Retifact’s business, marketing, analytics, link-management, and mailing tools are not intended to knowingly collect personal information from children in violation of applicable law.

If we learn that personal information from a child has been collected in circumstances requiring parental consent and such consent was not obtained, we may delete or otherwise appropriately process the information.

28. International Users

Retifact may be accessible from countries outside the United States.

Information may be processed in the United States or in other countries where Retifact or its service providers operate.

Data-protection laws may differ between jurisdictions.

Where applicable law requires specific safeguards for international transfers of personal information, Retifact will seek to use appropriate safeguards as required.

29. Your Privacy Rights

Depending upon where you live and whether a particular privacy law applies to Retifact, you may have rights concerning your personal information.

These rights may include the right to:

• Request information about personal information collected about you;
• Request access to certain personal information;
• Request correction of inaccurate personal information;
• Request deletion of certain personal information;
• Request information concerning how personal information is used or disclosed;
• Opt out of certain uses, sales, or sharing where applicable;
• Limit certain uses of sensitive personal information where applicable;
• Withdraw consent where processing is based upon consent and applicable law provides that right;
• Receive certain information in a portable format where applicable;
• Object to or restrict certain processing where applicable;
• Exercise privacy rights without unlawful discrimination.

These rights are not absolute and may be subject to legal exceptions, verification requirements, and jurisdictional limitations.

30. California Privacy Rights

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, if the law applies to Retifact and the applicable processing.

Depending upon applicability, these rights may include:

• The right to know what personal information is collected;
• The right to know the categories and sources of personal information;
• The right to know the purposes for collecting or using personal information;
• The right to know categories of third parties receiving information;
• The right to request deletion, subject to exceptions;
• The right to request correction of inaccurate information;
• The right to opt out of sale or sharing where applicable;
• The right to limit certain uses of sensitive personal information where applicable;
• The right not to receive discriminatory treatment for exercising applicable privacy rights.

Retifact does not sell personal information for monetary consideration.

If Retifact becomes subject to additional California disclosure, notice-at-collection, opt-out, or Global Privacy Control requirements, appropriate mechanisms will be implemented as required.

31. Do Not Sell or Share My Personal Information

Retifact does not currently operate its Services for the purpose of selling personal information for monetary consideration.

If Retifact engages in activity in the future that constitutes “selling” or “sharing” under an applicable privacy law, Retifact will provide legally required notices and opt-out mechanisms.

32. Global Privacy Control and Browser Signals

Certain jurisdictions may require websites to recognize legally valid browser-based opt-out preference signals, including Global Privacy Control, when the website engages in covered sale or sharing activity.

Retifact will respond to legally recognized privacy preference signals where required by applicable law and relevant to Retifact’s data practices.

Browser “Do Not Track” signals are not necessarily standardized across all services and jurisdictions. Retifact may not respond to ordinary Do Not Track signals unless required by applicable law.

33. Exercising Your Privacy Rights

Where applicable, you may submit a privacy request by contacting Retifact through the contact information provided on Retifact.com.

We may need to verify your identity before fulfilling certain requests.

Verification helps prevent unauthorized individuals from accessing, modifying, or deleting another person’s information.

We will respond to valid privacy requests within the period required by applicable law.

34. Authorized Agents

Where applicable law permits, you may designate an authorized agent to submit certain privacy requests on your behalf.

Retifact may require reasonable verification of the agent’s authority and may also require verification of the identity of the individual whose information is involved.

35. Non-Discrimination

Retifact will not unlawfully discriminate against an individual for exercising privacy rights provided by applicable law.

36. Legal Requirements and Protection of Rights

Retifact may preserve or disclose information when reasonably necessary to:

• Comply with applicable law;
• Respond to valid legal process;
• Respond to court orders or lawful governmental requests;
• Investigate fraud or abuse;
• Protect Retifact’s systems;
• Protect Sumrria or connected services;
• Protect users or email recipients;
• Enforce applicable Terms of Service;
• Protect the rights, property, or safety of Retifact, Sumrria, users, recipients, or others.

37. Business Transfers

If Retifact or relevant business assets are involved in a merger, acquisition, financing, restructuring, sale, transfer, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

38. External Websites

Retifact may contain shortened links, advertisements, affiliate links, or other links that direct visitors to third-party websites.

Retifact is not responsible for the privacy practices of websites operated by third parties.

Visitors should review the privacy policies of third-party websites before providing personal information.

39. Changes to This Privacy Policy

Retifact may update this Privacy Policy as its services, technology, providers, or legal obligations change.

When this policy is updated, the “Last Updated” date at the top of the policy may be revised.

Material changes may be communicated through the website or another appropriate method where required by law.

40. Contact Retifact

If you have questions about this Privacy Policy, Retifact’s privacy practices, or wish to submit a privacy request, you may contact Retifact through the contact information made available on Retifact.com.

Website:
Retifact.com

41. Sumrria-Related Questions

For questions specifically concerning your Sumrria membership or Sumrria account:

Website:
Sumrria.com

Email:
info@sumrria.com

42. Sumrria Mailer

Email transmitted through the connected Retifact/Sumrria mailing service may use:

Sumrria Mailer
sumrria.mailer@retifact.com

Recipients who no longer wish to receive applicable marketing communications should use the unsubscribe mechanism contained in the applicable email.