Privacy Policy

Who we are

Sandbox Media Corporation, doing business as Gostiki (“Gostiki,” “we,” or “us”) provides a marketing platform that allows clients to reach their customers, to understand how their customers interact with those communications and other content, and to customize marketing based on their customers’ interests. This Privacy Policy explains how Gostiki collects, uses and discloses information from job applicants, website visitors, and our current and prospective clients (“clients” or “you”) when you use our websites, platform, mobile application, and other online products and services (collectively, the “Services”) that link to this policy or when you otherwise interact with us. This policy also describes the personal information practices of our related bodies corporate (including Gostiki Canada, Gostiki Ireland, and Gostiki Brazil), who help us provide the Services. However, this policy does not apply to the information that our clients import into our Services, such as the email addresses of your customers or business contacts (“Contact Data”) or to the end users, customers, or business contacts to whom that Contact Data may belong. For additional information about the use of Contact Data in connection with our Services, please consult our Terms of Service, available at [insert link to terms of service].

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you an email notification). We encourage you to review the Privacy Policy whenever you access the Services or otherwise interact with us to stay informed about our information practices and the choices available to you.

Collection of Information

The types of personal information that Gostiki collects will depend on the nature of your dealings with us.

Information You Provide to Us

We collect information you provide directly to us. For example, we collect information when you create an account, participate in any interactive features of the Services, fill out a form, make a purchase, participate in a contest or promotion, communicate with us via third party social media sites, interact with a message board, apply for a job, request customer support, use our platform or otherwise communicate with us. The types of information we may collect include: (1) identifiers, such as your full name, phone number, email address, postal mail address, unique personal identifier, online identifier, internet protocol address, (2) commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies, (3) professional or employment-related information such as company name, company payment information, and business contact information (e.g., business phone number, address, or email); and (4) any other information you choose to provide.

Information About Your Use of the Services

Usage Information

We collect information about your use of the Services, such as the ways in which you use our platform, the way you respond to us when we send you emails or communications or your preferences when you interact with our Services.

Information We Collect Automatically When You Use the Services

When you access or use our Services, we automatically collect information about you, including:

Log Information: We log information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address, your general location and the page you visited before navigating to our Services.
Transactional Information: When you make a purchase, we collect information about the transaction, such as purchase details, purchase price, and date and location of the transaction. We or a designated third party may collect payment and credit card information when you subscribe to our paid Services or purchase additional services.
Device Information: We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers and mobile network information.
Information Collected by Cookies and Other Tracking Technologies: We and our service providers use various technologies to collect information, including cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular, and count visits. Web beacons are electronic images that may be used in our Services or emails and help deliver cookies, count visits and understand usage and campaign effectiveness. For more information about cookies, and how to disable them, please see “Your Choices” below or visit our “Cookie Policy” available at [insert link to cookie policy].

Information We Derive

We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your location based on your IP address. We may also infer information about your email and contact preferences based on how you respond to our communications with you, what information you find helpful, and what type of communication language most resonates with you.

Information We Collect From Other Sources

We may also obtain information from other sources and combine that with information we collect through our Services. For example, we may collect information about you from third parties, including but not limited to social media sites, credit bureaus, data enrichment providers, fraud prevention vendors and partners, and publicly available sources. Additionally, if you create or log into

your account through a third-party site, we may have access to certain information from that site, which could include information such as your name, account information, and other information you make available, in accordance with the authorization procedures determined by such third-party site.

Integrations with Other Services

You may have the option of integrating our Services with other services, technologies or platforms on your desktop, permitted websites and/or your mobile phone. For example, we may offer you widgets that have countdowns to various launches as well as the opportunity to connect the Services with other third-party services that you use in your business. These integrations may require you to input information about you or result in the disclosure of information about you from the Services to a third party, or cause the Services to receive information about you from a third party with whom you instruct us to integrate. These integrations may (i) check for updates automatically and transmit your information to their server and/or engine; (ii) send information entered into or accessed by the technology to its server and/or engine; (iii) be visible to the public if embedded on publicly available webpages (such as social networking webpages); or (iv) transmit information about you to or from the Services, depending on the policies of that website. Please note that when you enable an integration between the Services and a third party, any information about you that is transmitted to a third party will be subject to the policies and procedures of that third party and not of Gostiki.

Connecting Your Email Account

Should you choose to connect your email account to our platform, you will be using a set of features built using technology from Nylas, Inc. By signing up or using the Nylas application, you understand and agree that Nylas, Inc. and its affiliates who provide Nylas (“Nylas”), will have access to your information and will be permitted to use that information for specific, limited purposes to provide the Services to you, in accordance with our agreement with Nylas. This integration is a completely optional service and is not required to use our platform.

Google OAuth:

You have the option of integrating aspects of your Google email metadata with your account through our integration with Nylas. We will ask for your consent to connect your Google account to your Gostiki account. This step is optional but can very valuable in helping you to make the best use of our platform by tracking your interactions with your leads and customers.

When you connect your Google account with the Gostiki platform through Nylas, we will have access to certain information such as the email meta headers (sender, recipient, and date), the email message body and subject line (“Google Data”).

We only process Google Data you make available to us through this integration in order to provide the Service to you and to improve the Services, consistent with Google’s Limited Use Requirements. We do not independently access the Google Data ourselves unless we first obtain your consent to view the Google Data (e.g., to provide you with tech support), we need to do so for internal security purposes, to comply with applicable law, or where the data is fully aggregated and anonymized for internal use purposes and cannot be used to identify you or your email recipients.

In addition, we will only transfer the Google Data to others if necessary to provide or improve user-facing features that are prominent in the Services, to comply with applicable laws, or as part of a merger, acquisition, or sale of assets. We also do not use Google Data for advertising purposes.

At any time, you can disconnect your Google account and delete this data in your account or by reaching out to legal@gostiki.com and requesting that it be deleted.

Use of Information

We use the information we collect to provide, maintain, and improve our Services, such as to administer your account and provide you with insights to help you optimize your use of our platform.

We may also use the information we collect to:

  • Provide and deliver the products and services you request, process transactions and send you transaction-related information, including confirmations and invoices.
  • Send you technical notices, updates, security alerts, and support and administrative messages.
  • Respond to your comments, questions, and requests and provide customer service.
  • Communicate with you about products, services, offers, promotions, rewards, and events offered by Gostiki and others, and provide news and information we think will be of interest to you.
  • Monitor and analyze trends, usage, and activities in connection with our Services.
  • Audit related to a current interaction with the consumer and concurrent transactions, including but not limited to, counting ad impressions of unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity.
  • Debug to identify and repair errors impairing existing intended functionality.
  • Undertake internal research for technical development and demonstration.
  • Undertake activities to verify or maintain the quality or safety of a service owned, manufactured for, or controlled by Gostiki, and to improve, upgrade, or enhance the service owned, manufactured for, or controlled by Gostiki.
  • Detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of Gostiki and others.
  • Personalize and improve the Services and provide advertisements, content, or features that match user profiles or interests.
  • Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards.
  • Comply with our legal and financial obligations.