GitLab Stock

What information we collect about you

We collect information about you when you provide it to us, when you use our Services, and when other sources provide it to us.

We collect information from you when you input it or otherwise provide it directly to us.

Account Information:  We collect information about you when you create an account or sign up for Services. For example, you provide your name, email address and phone number when you create an account. Depending on the Services you elect, you also provide your address, date of birth and taxpayer ID, such as a social security number or other government issued ID number. We collect this information to verify your identity and to help the government fight the funding of terrorism and money-laundering activities, as required by US law. If you register or use the Services through third-party sites or applications, such as Google, we may gather information from them.

Bank, Brokerage and Other Payment Information:  To transact with us, you provide your banking information, including bank account and routing number, to permit you to send funds to us or receive funds from us by wire, or in the United States, by ACH transfer. You may also elect to provide us alternative payment information for some payments, such as credit card details or payment services such as Venmo. If you invest with us in an investment where a private company experiences an IPO (or a direct listing or other exit event), you may provide us your brokerage information to enable us to send you shares following the exit event.

Buyer Information:  To make investments with us, you provide us information concerning your investment objectives, risk tolerance, time-horizon, investment objectives, as well as information concerning your income and/or net worth. For investments related to some issuers, you may also provide us information concerning your employment or provide representations that you are not affiliated with, or employed by, a competitor of that issuer. If you express interest in investing in a particular investment opportunity, you provide us information about your interest which may include the investment amount and other information regarding your interest in making an investment.

Seller Information:  To sell private company equity with us, you provide us information and documents concerning your ownership of shares or options. If you are a seller, you also provide us information and documents reflecting your vesting and other attributes applicable to your shares or options. You may also be asked to provide your spouse’s name and email address if you are married.

Support Information:  The Services include customer support, where you may choose to submit information or questions concerning a problem you are experiencing with a Service or questions you have about a Service. You may also provide, or be asked to provide, screenshots, documentation or information to help us address your problem or respond to your question.

Trust Information:  If you purchase or sell securities held in the name of the trust, you provide us with additional information and documents concerning the identity and contact information of individuals related to the trust.

Trusted Contact Person:   You are permitted, but not required, to provide the name and contact information of a Trusted Contact Person who can be contacted about your account. For more information about FINRA’s Trusted Contact Person program, please click here

Verification Information and Documents:  If required to help us verify your identity, you may provide us a copy of your driver’s license, passport or other government issued ID. If required to help us verify your residence, you may provide us with a utility bill, lease or other proof of residence. You may also provide us other verification documents, such as bank statements reflecting the source of funds, to meet U.S. Bank Secrecy Act or anti-money laundering, US Treasury department rules or regulations or other legal requirements.

Voluntary Information:  If you authorize your accountant, financial advisor, lawyer or relative to receive information about our Services on your behalf, or to take actions on the Site on your behalf, you provide us the name and contact information for the person you authorize. If you are a selling shareholder and have a preferred representative at your current or former company with whom you’d like us to communicate, you provide us the name and contact information of that preferred representative.

We collect information about you when you use our services, including visiting the Site and taking certain actions within the Services.

Your use of the Services:  We keep track of certain information about you when you visit the Site and interact with any of our Services. We collect information about the pages within the Site you visit, the links you click on, the type, size and names of files you upload or download, and the search terms you use. If you invite others to use the Site, we retain information about your referral.

Device and Connection Information:  We collect information about your computer, phone, tablet or other device you use to access the Services. This device information may include your operating system, browser type, IP address, URLs of referring pages, and device identifiers.

Cookies, Web Beacons, Pixel Tags and Other Tracking Technologies:  EquityZen and its third-party providers, such as our analytics and advertising partners, use cookies, web beacons, pixel tags other tracking technologies to provide functionality and to recognize you across different devices. “Cookies” are simple text files stored on your device for use by a browser. “Web Beacons” or “pixel tags” are small images, often transparent, on a website or email that are used to observe if you have accessed content. Using cookies, web beacons or pixel tags, or other tracking technologies are standard practices on internet web sites. We use persistent cookies to make it easier for you to navigate the Site and track whether you are logged into the Site. A persistent cookie remains on your device’s hard drive for an extended of time. You can remove persistent cookies by following the directions provided in your internet browser’s “help” file. If you reject persistent cookies, you will still be able to view the Site, but your ability to use some areas of the Site, such as automatically-generated recommendations, will be limited.

We receive information about you from third-party services and business partners.

Third-Party Identity Verification Partner:  We receive information about you from a third-party identity verification partner to help us confirm your identity, prevent fraud, money-laundering and other illegal activity, and to satisfy legal requirements relating to the Services.

Marketing and Advertising Services and Partners:  We receive information about you and your activities on and off the Services from third-party partners, such as Google, Mixpanel, LinkedIn and other advertising, social media and market research partners who provide us with information about your engagement with, and interest in our Services.

How we use information we collect

We use the information we collect based on the Services you choose to receive. The specific purposes are described below.

To provide the Services and personalize your experience:  We use information about you to provide the Services to you, including to process transactions for you, authenticate you when you log in, verify your identity, and, if you are seeking to invest, determine your eligibility for investments. We also use information you provide to validate that information, comply with legal requirements, provide customer support and communicate with you, and operate and maintain the Services.  For example, we use the banking information you provide to send you funds when they are due to you, from selling securities on the Site or when proceeds are due to you from investments made through the Site. We also use information about you to personalize your experiences using the Services. We use information about you and your activities to provide an integrated experience, such as allowing you to access the Services from multiple devices.

To communicate with you about the Services:  We use your contact information to send communications to you (typically via email) about your transactions, including confirming the terms on which you purchase or sell securities, updating you on the status of transactions and related deadlines, responding to your questions or comments, and providing information received from the issuer or, when applicable, other parties to your transactions. If you are eligible to invest through the Site, we send you email notifications about potential investment opportunities available through the Site. We also provide tailored communications to you based actions you take on the Site. For example, if you start the investment process on the Site, we will use your contact information to remind you to come back and complete the investment process. We also send you communications about the Services as part of onboarding to help you understand and use the Services.

To operate the Services:  We share information about you as needed with our own service providers, including financial institutions, fund administrators, accountants, auditors, lawyers, payment providers, information technology staff, advisors and our affiliates. We only share information to the extent it is required to fulfill our obligations to you and to regulators, and to operate the Site and the Services.

For research and development:  We strive to make our Services better, smarter, faster, more secure and easier to use. We collect information about how people use the Services and feedback provided directly to us to identify trends and problems, usage and activity patterns, and areas for integrating and improving our Services. We may also test and analyze certain new features with some users before rolling out the features to all users.

To market, promote and drive engagement with the Services:  We use your contact information and information about how you use the Services to send promotional communications that may be of interest to you, including by email and by displaying our content on other websites and applications, such as on platforms including Google or Facebook. These communications are intended to increase engagement and what you get out of the Services, including information about new features, new content, and events we think may be of interest to you. We also communicate with you about new products and services and promotions. We do not--and do not plan to--rent, sell, or share information about you with other people or with non-affiliated companies.

For safety and security: We use information about you and your Service use to verify your identity, accounts and activity, to monitor suspicious or fraudulent activity, and to identify violations of Service policies.

As required by law or regulations:  We retain information about you that is required by US law or regulation, including those applicable to the sale of securities or operating an investment advisor or broker-dealer. In general, we are required to retain these records for at least three years, and up to six years (and in some circumstances, longer). We may keep some information longer to meet our needs and those of our customers, even after you close or deactivate your account, including for backup, archives, contract enforcement, dispute resolution. We may access and disclose information about you with US, state or international regulators where we believe doing so is required or appropriate to comply with laws, regulations or other legal processes or law enforcement requests, such as court orders or subpoenas.

For a merger, sale or other asset transfer:  If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, creation of a trust or other affiliated entity, receivership or sale of EquityZen’s assets, or other corporate transaction affecting EquityZen, your information may be shared, transferred or sold under a duty of confidentiality as part of a transaction as permitted by law aor by contract.

Legal bases for processing (for EEA users):  If you are an individual residing in the European Economic Area (EEA), we collect and process information about you only where we have legal bases for doing so under applicable EU laws, including the General Data Protection Regulation.  The legal bases depend on the Services you use and how you use them. This means we collect and use your information only where:

• We need it to provide you the Services, including to operate the Services, perform a contract with you, take necessary steps prior to performing a contract or at your request, provide customer support, and to protect the safety and security of the Services;
• It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the Services, to personalize services you receive, and to protect our legal rights and interests;
• You give us consent to do so for a specific purpose; or
• We need to process your data to comply with a legal requirement.

If you have consented to our use of information about you for a specific purpose, you may change your mind at any time, but this will not affect any processing that has already taken place.  Where we are using your information because we or a third party (e.g. your employer) have a legitimate interest to do so, you may object to that use though, in some cases, this may mean no longer using the Services. To do so, please email us at support@equityzen.com.

How we share information we collect

We manage a private company equity marketplace, and we want it to work well for you.  This means sharing information through the Services and with certain third parties.  We share information we collect about you in the ways discussed below, including in connection with possible business transfers, but we are not in the business of selling information about you to advertisers or other third parties.

With affiliates of EquityZen:   If you are a party to a prospective or actual transaction, we share information about you with our affiliates, including our broker-dealer, EquityZen Securities LLC, and our investment advisor, EquityZen Advisors LLC, to provide you Services relating to that transaction.

With companies and service providers:   If you are a party to a prospective or actual transaction, we will give the other party (or other parties) to the transaction the information they need to evaluate and enter that transaction. If you enter into a transaction with a third-party company, such as by becoming a shareholder, that company will receive information about you subject to its own privacy policy, and may be required to disclose that information to its own board members, officers, investors or shareholders. We also provide your information where necessary for a transaction or to comply with legal requirements. For example, we may provide certain aspects of your information to our financial institutions, payment processors, fund administrators, accountants, auditors, lawyers, payment providers, third-party hosting service, email and technology providers, information technology staff, advisors, affiliates, marketing and analytics partners, or third-party verification services. We may share information about you with US, state or international regulators where we believe doing so is required or appropriate to comply with laws, regulations or other legal processes or law enforcement requests, such as court orders or subpoenas. We may share aggregate (non-personally identifiable) information with third-parties such as advertisers, national industry organizations, and prospective affiliates, or as permitted or required by law, or to protect our rights. We may also share information about you to protect the security and integrity of our Services, to protect EquityZen’s interests, or those of other persons or the public, and under referral programs with our partners or under joint marketing arrangements.

With Third-Party Sites:   The Site may contain links to third party web sites and may redirect you to third party web sites ("Third Party Sites"). These sites include, among others, service providers who have a relationship with the Company. Third Party Sites are not under our control, and we are not responsible for any Third Party Sites, or the accuracy, sufficiency, correctness, reliability, veracity, completeness, or timeliness of their information, links, changes or updates.. The inclusion or access to Third Party Sites does not imply an endorsement thereof by the Company, or of the provider of such content or services, or of any third party web site. The Company reserves the right to terminate any link or linking program at any time. Please be aware that when you enter a third party web site, any information you provide, including financial information, is subject to the terms of use and privacy policy of that site.

With your consent:   We share information about you where you have given us consent to do so for a specific purpose.  For example, we may disclose information to your financial advisor, accountant attorney or spouse, or other individual you authorize to receive information about your account.

Business Transfers:   We may share or transfer information we collect under this privacy policy in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. You will be notified via email and/or a prominent notice on the Services if a transaction takes place, as well as any choices you may have regarding your information.

How we store and secure information we collect

We take steps to ensure that your information is treated securely and in accordance with this policy. While we use industry-accepted security principles, practices, and tools, the internet is not 100% secure and we cannot ensure or guarantee the security of data, during transmission through the Internet or while stored on our systems or otherwise in our care. We do not accept liability for unintentional disclosure.

By using the Service or providing personal data to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Service. If we learn of a security breach, we may attempt to notify you electronically by posting a notice on the Service or sending an email to you. You may have a legal right to receive this notice in writing.

We use a data hosting service provider in the United States to host the information we collect, and we use technical measures to secure your data. We use industry-accepted practices, including 256-bit encryption, to protect customer-related information and also use field-level encryption on highly sensitive data. Information is encrypted at rest and in transit from client to web to web server, including proxies, and to the database. We require third parties who perform services for EquityZen to agree to keep your information confidential. If you are outside the United States, by using the Services or visiting the Site, you will transfer data to the United States and are permitting your information to be used in accordance with this Privacy Policy.

Other important privacy information

You have choices and rights available to you when it comes to your information. They are summarized below.

Your rights as a California resident:   Residents of California have the right to request from us certain information with respect to the types of personal information we share with third parties for those third parties’ direct marketing purposes and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by emailing us at support@equityzen.com specifying the email address associated with your account and your full legal name.

Your rights as a Vermont resident:   We do not share nonpublic personal financial information we collect about Vermont residents to non-affiliated third parties except for our everyday business purposes or as otherwise permitted by law. If you wish to revoke any authorization to share your nonpublic personal financial information, please contact us for assistance at support@equityzen.com, though we will no longer be able to provide you Services or access to the Site.

If you are a European Economic Area resident:  If you are an EEA data subject, you may review, correct or update the personal data you provide at any time. If you would like to do so, please contact us for assistance at support@equityzen.com . In the event of a data breach, we will endeavor to notify you within 72 hours of detection of a breach that we conclude poses significant risks to your rights and freedoms under the General Data Protection Regulation. You may also lodge a complaint with a supervisor authority in the EEA member state in which you reside.

Access to your data and documents:  You may review, correct or update the personal data you provide at any time. You may access your documents relating to your transactions at any time by logging in under the “My Documents” and the “My Transactions” section of the Site. If you need assistance, please contact us at support@equityzen.com.

Unsubscribe options:   If you chose to use the Services, you will receive periodic emails or other electronic communications from us which, based on the information you provide, may be of interest. If you no longer wish to receive our communications, you may unsubscribe by following the instructions included in each communication.

Children’s Privacy: The Site and our Services are not directed to any person under the age of 18. If you become aware that your child has provided us with personal data without your consent, please contact us at support@equityzen.com. We do not knowingly collect or solicit information from, market to, or accept services from children.

Lost or Stolen Information: You must promptly notify us if you become aware that any information provided by or submitted to the Site is lost, stolen or used without permission.

Changes to this Policy: Each time you visit the Site or use the Services, the current version of the Policy will apply. When you use the Site, you should check the date of this Policy (which appears at the top of the Policy) and review any changes since the last version. Our business changes frequently and this Policy is subject to change from time to time. Unless stated otherwise, our current Policy applies to all information that we have about you. We may require you to affirmatively assent to a revised version of this Policy as a condition of continuing to use the Site or our Services.

Contact us: Your information is controlled by EquityZen Inc.If you have any questions or concerns about how your information is handled you may contact us at:

EquityZen Inc.

45 West 27th Street, Suite 200

New York, New York 10001

(877) 490-6121

support@equityzen.com

All trademarks, service marks and other proprietary materials are the property of EquityZen Inc. 2018. All rights reserved.