Privacy Policy

Effective: 6/17/25

Welcome

This Privacy Policy (“Privacy Policy”) is designed to help you understand how Superna LLC and its Affiliates (collectively “Superna,” “we,” or “us”) collects and uses the information, including Personal Data, that you share with us when you use https://superna.io/, https://www.supernaeyeglass.com/, and any other website operated by Superna (each a “Site” and collectively the “Sites”), that you provide in connection with products and services provided by Superna (the “Offerings”), or that you otherwise provide to Superna. Except where otherwise expressly indicated in this Privacy Policy or on the Sites, this Privacy Policy applies only to information collected on the Sites and through the Offerings. It also describes the choices available to you regarding our use of your Personal Data and how you can access and update this information.

Before submitting information to the Sites or Offerings or otherwise using the Offerings, please review this Privacy Policy carefully. BY USING OR ACCESSING THE SITES OR OFFERINGS AND/OR COMMUNICATING WITH SUPERNA VIA MAIL, EMAIL, OR TELEPHONE, YOU INDICATE YOUR UNDERSTANDING AND ACCEPTANCE OF THE TERMS OF THIS PRIVACY POLICY. You are responsible for providing us with accurate information. If you prefer that we not collect your Personal Data, please do not provide it to us. WHEN YOU SUBMIT YOUR PERSONAL AND OTHER INFORMATION ON THE SITES OR THROUGH YOUR USE OF THE OFFERINGS, YOU HEREBY CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF SUCH INFORMATION AS SET FORTH IN THIS PRIVACY POLICY. IF YOU DO NOT ACCEPT THESE TERMS, DO NOT USE THE SITES OR OFFERINGS.

Please carefully read this Privacy Policy as it may have changed since your last visit to the Sites. Continued use of the Sites or Offerings indicates your understanding and acceptance of any changes made to this Privacy Policy posted to the Sites. This Privacy Policy does not apply to the privacy practices of any third-party websites to which the Sites or Offerings may link. For capitalized terms not defined herein, please see the definitions provided in the Terms of Use.

Definitions

“Affiliate” means any corporation, partnership, or other entity now existing or hereafter organized that directly or indirectly controls, is controlled by or under common control with Superna.

“Customer” means an entity receiving Offerings from Superna pursuant to a separate written agreement with Superna.

“Offerings” means the software, subscription services, and support and professional services that Superna provides Customers to help protect, manage, and secure their unstructured data.

“Personal Data” has the meaning set forth in Section 1 of “Information We Collect”.

“Site User” means any person who uses the Sites, which includes browsing the Sites or submitting a Site Form.

International Site Users

Superna is headquartered in Canada and has operations and service providers in Canada, the United States, and around the world. The Sites and Offerings are governed by United States law. If you are outside the United States when you visit a Site, use the Offerings, or engage in communications with a Superna agent via mail, e-mail or telephone, please be aware that you consent to our use and our service providers’ use of your Personal Data worldwide and to the transfer of your Personal Data to countries outside of your country of residence, including the United States. Please be aware that the United States and jurisdictions other than the one in which you are located may have a lower standard of data protection laws compared to your own jurisdiction. In certain circumstances, courts, regulatory agencies, law enforcement agencies, or security authorities in those other countries may be entitled to access your Personal Data.

Information We Collect

We collect the information that you share with us, including:

1. Personal Data: “Personal Data” as it is called in some countries, is information that reasonably can be used to personally identify you. We maintain one or more databases in the United States to store your Personal Data and may retain it as reasonably required to fulfill the purposes identified herein. Personal Data that we collect depends on how you use the Sites or Offerings.

We may collect your Personal Data when you:

• submit questions or comments to Superna;
• utilize the live Superna chat box on the Site;
• request information or materials from Superna;
• participate in surveys from or provide Feedback to Superna;
• request a demo of any Offering;
• purchase an Offering from Superna, or any Superna reseller;
• register for an Offering;
• inquire about or apply for a position at Superna;
• request or use Technical Support or Professional Services; or
• you submit any such information to Superna.

We may collect the following types of Personal Data:

• your first and last name;
• your business physical address (including street name, city/town, state/province, country, postal code);
• your e-mail address;
• your telephone number; and
• any other identifier that permits Superna to make physical or online contact with you.

2. General Information: When you visit the Sites or use the Offerings, we may collect various categories of general non-personal information (“General Information”). When possible, General Information may be linked to Personal Data. We do this to improve the Offerings that we offer you, and for purposes of our analytics.

We may collect the following General Information:

• IP address
• Operating system information
• Device identifiers, such as type of device you use
• Geolocation
• Web browser information
• Page view statistics
• Browsing history
• Usage information and click tracking
• Usage Data and Product Data, as defined in the applicable Superna Agreement

 

3. Cookies & Other Online Identification Tools: Please see our Cookies Policy below for information about how Superna utilizes cookies and other online identification tools.

 

4. Widgets: Our Sites may include Social Media Features, such as the Facebook Like button and Widgets, such as the Share this button or interactive mini programs that run on our Sites. These features may collect your IP address, which page you are visiting on our Sites, and may set a cookie to enable the feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our Sites. Your interactions with these features are governed by the privacy policy of the company providing the features.

How We Use Personal Information

Except as specified in this Privacy Policy, Superna does not rent, sell, trade, or disclose your Personal Data to third parties without your informed prior consent.

Some specific examples of how Superna may use your Personal Data are:

1. To analyze, adjust, customize, deliver, improve, and operate the Sites and Offerings to better meet your needs;
2. To provide help or support in relation to the Offerings;
3. To facilitate communication between Superna and you;
4. To provide you with information that may interest you, such as our newsletters or emails about Offerings (this information contains a link allowing you to opt out);
5. The provide you with marketing and promotional information about Offerings we believe may interest you (this information contains a link allowing you to opt out);
6. To administer a survey or questionnaire;
7. In a Customer testimonial posted on the Sites;
8. To enforce Superna’s agreements with you;
9. To provide you with important administrative information regarding the Sites and Offerings, such as changes to this Privacy Policy, our Terms of Use, and our other policies; and
10. To prevent fraud and other prohibited or illegal activities.

Disclosure Of The Information That We Collect

Unless you have consented or as otherwise described in this Privacy Policy, we will not disclose your Personal Data except for:

1. We may share your information with our Affiliates who perform services or functions for Superna and who may use your information for purposes similar to the purposes for which Superna collects such information. Superna requires all such companies to comply with the terms of this Privacy Policy.

 

2. Business Partners. We may share your information with third parties who provide products and services that integrate with or relate to the Offerings. Superna does not control the use of this information by these entities, which will be subject to their privacy policies. If you do not want your information shared with these entities, you can choose not to use the applicable integration or service.

 

3. Fulfillment of Services. Superna may retain other companies and individuals to perform functions consistent with our Privacy Policy on our behalf. If you request something from the Sites (for example, a scheduled demo, a callback, or specific marketing materials), we will use the information you provide to fulfill your request or inquiry and to help us do this, we may share information with others, such as Superna’s business partners, resellers or distributors, financial institutions, shipping companies, and postal or government authorities involved in fulfillment. Examples include Customer support specialists, web hosting companies, fulfillment companies (e.g., companies that fill product orders or coordinate mailings), data analysis firms, payment services firms, and email service providers. Such third parties may be provided with access to Personal Data needed to perform their functions but may not use such information for any other purpose.

 

4. Compliance with Law and Fraud Protection. We may disclose any information, including, without limitation, Personal Data, we deem necessary, in our sole discretion and without your prior permission, to comply with any applicable law, such as to comply with a subpoena, regulation, binding orders of a data protection agency, legal process or governmental request. We also may be required to disclose an individual’s Personal Data in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. Superna reserves the right to disclose your Personal Data if we believe you have violated or are violating our Terms of Use or in order to protect or defend Superna’s rights or property, even without a subpoena, warrant, or other court order. We also may access or disclose your Personal Data to act in urgent circumstances to protect the personal safety of users of the Offerings or members of the public.

 

5. Sale or Transfer of Information. In the event of a sale, merger, liquidation, dissolution, or sale or transfer of substantially all of the assets of Superna to an Affiliate or a third party, Personal Data or other information collected through the Sites, or the Offerings may be sold, assigned, or transferred to such Affiliate or third party. In the unlikely event of an insolvency, bankruptcy, or receivership, your information also may be transferred as a business asset. By using the Sites and Offerings and submitting your information to us, you consent to the sale and transfer of your information as described in this paragraph. You will be notified via email and/or a prominent notice on our Sites, of any change in uses of your Personal Data, as well as any choices you may have regarding your Personal Data.

 

6. Some of our pages utilize framing techniques to serve content from certain technology providers while preserving the look and feel of our Sites. Please be aware that you are providing your Personal Data to these third parties and not to us directly.

 

7. Links. The Sites or Offerings may allow you to connect with other websites or get access to products or services that we do not control. If you visit such sites or use such services, we recommend that you review and understand any applicable privacy practices before sharing your information with those services.

Controlling Your Personal Information

If you tell us that you do not want us to use your Personal Data to contact you, Superna will comply with the applicable law. In certain cases, Superna will only contact you if instructed to do so. In either case, you may instruct Superna to stop sending you emails, newsletters, text messages, or other information. Superna may, however, continue to use your Personal Data to contact you in conjunction with your use of the Offerings. Please note that if you use more than one name or email address when communicating with Superna or using the Sites or Offerings, you may continue to receive communications from Superna to any name or email address not specified by you in an opt-out request. We will also provide an individual opt-out or opt-in choice before we share your data with third parties, other than as specified in this Privacy Policy, or before we use it for a purpose other than as specified in this Privacy Policy. To limit the use and disclosure of your Personal Data, please submit a written request to privacy@superna.net .

Withdrawal Of Consent

Where you have provided your consent for us to use or process your Personal Data, you can withdraw your consent at any time by emailing us at privacy@superna.net . Please see the “Cookies” section below for information about withdrawing your consent for cookies. We process your Personal Data for marketing purposes with your consent, and at any time after providing consent, you have the right to object to our processing of data about you in order to send you promotions, special offers, and marketing, and we will stop processing the data for that purpose. This option does not apply to communications primarily for the purposes of contracts, support, software updates, or other administrative and transactional notices.

Access Requests

The residents of certain jurisdictions have the right to access the Personal Data that Superna maintains about them and are able to correct, amend, or delete that information where it is inaccurate or has been processed in violation of the privacy principles. If you would like to modify or delete your Personal Data, please submit a request at legal@superna.net  with clear instructions about what you would like modified or deleted. We will respond to your request within 30 days after a complete request is received. Please note that we cannot modify all information provided to us, such as anonymized data. We will comply with requests to modify information to the extent that we are able to do so.

We will retain your information for as long as necessary to provide you with our Offerings. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Customer Testimonials

We may post Customer testimonials on the Sites, which may contain Personal Data. We obtain the Customer’s consent via email prior to posting the testimonial to post their name along with their testimonial. To request removal of your Personal Data from testimonials please contact us by submitting a request at legal@superna.net .

Security

Superna has implemented technical, administrative, and physical security measures to protect your information from unauthorized access and use as described. While Superna strives to protect your information, no data transmission over the Internet is 100% secure, and consequently, we cannot ensure the security of any information.

Our Sites Are Not For Use By Minors

NOTICE TO CHILDREN UNDER 18 AND THEIR PARENTS OR LEGAL GUARDIANS: THE SITES AND OFFERINGS ARE INTENDED FOR ADULTS. We do not knowingly or intentionally collect information from minors (individuals below 18 years). If you are under 18, please do not provide any Personal Data to Superna. To use the Sites, you must be the age of legal majority in your place of residence. By using the Sites, you hereby represent that you are at least the age of legal majority in your place of residence. We do not use an application or other mechanism to determine the age of users of the Sites. All information provided to Superna will be treated as if an adult provided it. If, however, we learn that a minor has submitted information about himself or herself to us, we delete the information as soon as possible. If you know of anyone under the age of 18 who has provided us with information, please contact us immediately, and we will delete the information.

Third-Party Links

We may provide links to third-party websites that we do not own or control. We are not responsible for the information collection practices of any website that we do not own or control. We encourage you to review and understand the privacy practices and policies of third-party websites before providing any information to or through them.

Modifications

We may occasionally update this Privacy Policy to reflect changes in our practices. When we post modifications to this Privacy Policy, we will revise the “Effective” date at the top of this web page. The modified Privacy Policy will be effective immediately upon posting on the Sites. Your continued use of the Sites or Offerings after the posting of the modified Privacy Policy constitutes your agreement to abide and be bound by it. We encourage you to periodically review this page for the latest information on our privacy practices. If you object to any modification, your sole recourse is to stop using the Sites and Offerings.

State-Specific Privacy Rights

Superna acknowledges that under data privacy laws in several states (including but not limited to California, Colorado, Connecticut, and Virginia), individuals have certain rights associated with their Personal Data and other information. Please see the section below for Specific Provisions for California Residents. Superna does not, at this time, disclose Personal Data to third parties for their direct marketing purposes. If Superna changes this policy, we will update this provision and provide instructions on how you may request details concerning such information.

SPECIFIC PROVISIONS FOR CALIFORNIA RESIDENTS

This section of the Privacy Policy applies only to individuals who reside in California. The California Consumer Privacy Act of 2018 (“CCPA”) provides additional rights to know, delete and opt out, and requires businesses collecting or disclosing Personal Information to provide notices and means to exercise rights.

California Notice of Collection

In the past 12 months, we or our service providers have collected the following categories of information enumerated in the CCPA in connection with the Sites and the Offerings:

• First and last name, billing, or other physical address (including street name, city/town, state/province, postal code, and country of origin), e-mail address, and telephone number, to the extent you are interacting with our Sites or ordering or using the Offerings;
• Information about Site and Offering usage;
• Any other identifier that permits Superna to make physical or online contact with you;
• Internet activity, including history of visiting and interacting with our Sites, browser type, browser language and other information collected automatically by the Sites or Offerings; and
• Any other information you have chosen to provide to us through the Sites or Offerings.

For more information on information we collect, including the sources we receive information from, review the section above titled “Information We Collect.” We collect and use these categories of Personal Information for the business purposes described in the “How We Use Personal Information” section, including to provide, manage and improve our Sites. Superna does not generally sell information as the term “sell” is traditionally understood. However, to the extent “sale” under the CCPA would be interpreted to include any of the activities described in the “Disclosure of the Information that We Collect” section, we will comply with applicable law as to such activity.

Right to Know and Delete

If you are a California resident, you have the right to delete Personal Information we have collected about you, and you have the right to know certain information about our data practices in the preceding 12 months. In particular, you have the right to request the following:

• Categories of Personal Information we have collected about you;
• Categories of sources from which the Personal Information was collected;
• Categories of Personal Information about you we disclosed for a business purpose or sold;
• Categories of third parties to whom the Personal Information was sold or disclosed for a business purpose;
• Business or commercial purpose for collecting or selling the Personal Information; and
• Specific pieces of Personal Information we have collected about you.

To exercise any of these rights, please submit a request to us at legal@superna.net In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within ten (10) days. We may require specific information from you to help us verify your identity and process your request. Please note that, in many instances, Superna does not collect types of Personal Information that enable us to identify you. As such, if we do not have information that permits us to verify your identity, we may deny your requests to know or delete. A request for access can be made by you only twice within a twelve (12) month period.

Right to Opt Out

Under the CCPA, you have the right to opt out of the sale of your Personal Information to third parties at any time. Superna does not “sell” your Personal Information as it is currently defined under the CCPA. You may contact us by emailing us a legal@superna.net  if you have any questions or concerns.

Authorized Agent

You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent’s permission to do so and verify your identity directly.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights.

California Do-Not-Track Notice

We may collect information about your online activity while using and after visiting our Sites. Superna does not support Do Not Track signals, and therefore, we do not respond to such signals.

Site Users And Customers From The EU/EEA

Notwithstanding the July 10, 2023, ruling by the European Court of Justice confirming the adequacy of the EU-US Privacy Shield Framework, Superna continues to take adequate measures designed to protect the transfer of Personal Data of individuals in the European Economic Area (EU Member States, Iceland, Liechtenstein, and Norway) (“EEA”), such as relying on the European Commission-approved Standard Contractual Clauses (“SCCs”) as a legal mechanism for such transfer, or other adequate transfer mechanism as required under relevant data protection laws, as well as additional safeguards, where appropriate. A copy of these clauses may be obtained by contacting us at the email address listed below.

For transfers to or from the United Kingdom (“UK”), we make use of the SCCs, as adapted for the UK. For individuals located in the EEA or the UK, the terms “Personal Data” as used in this Privacy Policy, are equivalent to “personal data” under applicable European and UK data protection legislation. If you are located in the EEA, the UK, or Switzerland, you have certain rights and protections under applicable law regarding the processing of your Personal Data, as defined by the General Data Protection Regulation (“GDPR”) and the following notices apply to you:

Legal Basis for Processing: When we process your Personal Data, we will do so in reliance on the following lawful bases:

• To perform our responsibilities under our contract with you (e.g., providing the Offerings you requested).
• When we have a legitimate interest in processing your Personal Data to operate our business or protect our interests (e.g., to provide, maintain, and improve our Offerings, conduct data analytics, and communicate with you).
• To comply with our legal obligations (e.g., to maintain a record of your consents and track those who have opted out of non-administrative communications).
• When we have your consent to do so (e.g., when you opt in to receive non-administrative communications from us). When consent is the legal basis for our processing your Personal Data, you may withdraw such consent at any time.

Data Retention: We store Personal Data for as long as reasonably necessary to comply with our legal, regulatory, or other compliance obligations. We store other data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

All EU-based individuals, irrespective of nationality have certain individual rights under the GDPR, such as:

1. The right to be informedabout the collection and use of your Personal Data. At the point where Personal Data is collected from the data subject, as defined in the GDPR, or obtained from another source, there is a requirement to inform the data subject about our use of that Personal Data and the rights of data subjects over it. Compliance with this right is provided within this Privacy Policy.
2. The right of accessto find out what information is stored about you. You have the right to obtain confirmation as to whether or not your Personal Data is being processed, and where that is the case, all necessary information to make the process transparent. You also have the right to obtain a copy of your Personal Data being processed.
3. The right to rectify your Personal Data if it is inaccurate or incomplete.
4. The right to erasureto enable you to request the deletion or removal of Personal Data in certain circumstances.
5. The right to restrict processingto ‘block’ or suppress processing of Personal Data in certain circumstances.
6. The right to data portabilityallowing you to obtain and reuse your Personal Data for your own purposes or the transfer to another organization, in a machine-readable form.
7. The right to objectto the processing of all or some of your Personal Data under certain specified circumstances, including legitimate interest or performance of a task in the public interest/exercise of official authority (including profiling), direct marketing and/or for purposes of scientific/historical research and statistics.
8. Various rights in relation to automated decision-making (decisions made solely by automated means without any human involvement) and profiling (automated processing of Personal Data to evaluate certain things about an individual).

Superna agrees to abide by the GDPR and provide an adequate level of data protection for Personal Data received from the EU/EEA and processed as applicable. If you would like to exercise these rights, please submit a request to legal@superna.net .

Severability

The invalidity or unenforceability of any provisions of this Privacy Policy in any country shall not affect the validity or enforceability of any other provision of this Privacy Policy, which shall remain in full force and effect.

Complaints

In the event that you wish to make a complaint about how we process your Personal Data, please contact us, and we will endeavor to address your concern. This is without prejudice to your right to raise a complaint with the data protection supervisory authority in the EU member state in which you live or work where you think we have infringed data protection laws.

You can also send us any request or inquiry via regular mail to:

Attention:         Superna LLC

945 Concord Street, Unit 213

Framingham, Massachusetts 01701

United States of America

OR

Superna, Inc

343 Preston Street, 11th Floor

Ottawa, Ontario

K1S 1N4

Canada

 

 

 

 

SUPERNA COOKIES POLICY

Last Updated: [insert date posted]

Cookies & Other Online Identification Tools

Superna LLC and its Affiliates (“Superna,” “us,” “we,” or “our”) uses cookies and web beacons on our Sites and our Offerings. By using the Sites or Offerings, you consent to the use of cookies.

This Cookies Policy contains information on what “cookies” are, the types of cookies and beacons Superna uses on its Sites and within its Offerings, if any, how to change your browser’s cookie policy, and where to get more information about cookies. If you have further questions that this page does not answer, please email privacy@superna.net .

What Is A Cookie?

A “cookie” is a small file or tool sent from a website to your web browser and stored on your computer. A “session cookie” is comprised of temporary bits of information that are erased once you exit your web browser or turn off your computer. A “persistent cookie” is comprised of more permanent bits of information that are placed on the hard drive of your computer and stay there until you delete the cookie. A persistent cookie enables a website to recognize you when you return.

How Superna Uses Cookies

Superna uses various types of session and persistent cookies to help you access and navigate the Sites more efficiently, to customize your experience of the Sites and Offerings, to store certain information that you previously provided (such as username and password), to authenticate users and to statistically monitor how many users are using the Sites and Offerings. In addition, Superna may track and collect information about your online activity while using the Offerings and after you leave the Sites. Superna and the Offerings do not support Do Not Track signals and therefore we do not respond to such signals. Such cookies are not “strictly necessary” for the Sites and Offerings and collect Personal Data. If you have concerns about our use of cookies, we suggest that you set your browser to notify you when a cookie is placed or decline the receipt of cookies; however, certain features of the Sites and Offerings may not function properly or be available if your browser is configured to disable cookies.

Superna also may use web beacons (a.k.a. clear GIFs, web bugs or pixel tags) to personalize your experience of the Sites and Offerings. Web beacons usually are not visible to you and are delivered by a web browser as part of a web page request or in an email. Web beacons collect General Information, such as the number and time of interactions with an email containing a web beacon, or the type of browser used. Web beacons may be used alone or in conjunction with cookies; when web beacons are used with cookies, they may link General Information to Personal Data.

Third-party vendors, including Google, LinkedIn, and Meta, may use cookies to serve ads to you while you are using the Sites and Offerings based on your prior visits. For more information about how Google Analytics collects and uses data and how to opt out, visit https://policies.google.com/technologies/ads or https://policies.google.com/technologies/partner-sites. The use of cookies by our partners and third-party vendors is not covered by our Privacy Policy. We do not have access or control over these cookies. Our partners use session ID cookies to provide us with information about how you use our Offerings.

Turning Cookies On/Off In Your Browser

If you would like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser. In addition you can learn more about opting-out of the collection and use of information for ad targeting at http://www.aboutads.info/choices and http://www.youronlinechoices.eu/ (if applicable).