craigslist Privacy Policy

DATED 2020-09-15 · VERSION 20201001_rev01 · COMPARED WITH 20200802_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20200802_rev01 to 20201001_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 [craigslist](https://www.craigslist.org/) > [about](https://www.craigslist.org/about/) > privacy policy
+## craigslist Privacy Policy (updated July 31, 2020)
+## craigslist Privacy Policy (updated September 15, 2020)
 [terms of use](https://www.craigslist.org/about/terms.of.use) | [feedback](https://forums.craigslist.org/)
+This policy details how data about you is used when you access our websites and services (together, "CL") or interact with us. If we update it, we will revise the date, place notices on CL if changes are material, and/or obtain your consent as required by law.
+This policy details how data about you is used when you access our websites and services, including via our mobile applications (together, "CL") or interact with us. If we update it, we will revise the date, place notices on CL if changes are material, and/or obtain your consent as required by law.
+### 1\. Protecting your privacy
+#### 1\. Protecting your privacy
 - We take precautions to prevent unauthorized access to or misuse of data about you.
 - We do not run ads, other than the classifieds posted by our users.
 - We do not share your data with third parties for marketing purposes.
 - We do not engage in cross-marketing or link-referral programs.
 - We do not employ tracking devices for marketing purposes.
 - We do not send you unsolicited communications for marketing purposes.
 - We do not engage in affiliate marketing (and prohibit it on CL).
 - We do provide email proxy & relay services to reduce unwanted email.
 - Please review privacy policies of any third party sites linked to from CL.
 - We do not respond to "Do Not Track" signals (see allaboutdnt.com).
+### 2\. Data we use to provide/improve our services and/or combat fraud/abuse:
+#### 2\. Data we collect, use and disclose:
+- data you post on or send via CL, and/or send us directly or via other sites
+- credit card data, which is transmitted to payment processors via a security protocol (e.g. SSL).
+- data you submit or provide (e.g. name, address, email, phone, fax, photos, tax ID).
+- web log data (e.g. web page views, access times, IP address, HTTP headers).
+- data collected via cookies and similar technologies (e.g. preferences, searches, "favorites," anti-abuse metrics).
+- data about your device(s) (e.g. screen size, DOM local storage, plugins).
+- data from 3rd parties (e.g. phone type, IP geo-location).
+Below is a list of all the types of data we have collected in the last 12 months, where we got it, why we collected it and the categories of third parties to whom we disclosed it. We do not sell your data to third parties. Please note that disclosure to "Payment processors" applies when you pay for a craigslist post using a credit card.
+### 3\. Data we store
+<table><tbody><tr><td><b>Data type</b></td><td><b>Where we got it</b></td><td><b>Why collected</b></td><td><b>Disclosed to</b></td></tr><tr><td>First and last name</td><td>User entry</td><td>Facilitating transactions and personalizing your use of CL</td><td>Payment processors</td></tr><tr><td>Email address</td><td>User entry</td><td>Account creation, user-to-user and CL-to-user communications and combatting fraud/abuse</td><td>No one</td></tr><tr><td>Phone number</td><td>User entry</td><td>User-to-user communications, combatting fraud/abuse, personalizing your use of CL</td><td>Payment processors and phone verification service providers</td></tr><tr><td>Mailing or street address</td><td>User entry</td><td>Account and post creation, CL communicating with corporate users, facilitating transactions and personalizing your use of CL</td><td>Payment processors</td></tr><tr><td>Credit card data</td><td>User entry</td><td>Facilitating your transactions</td><td>Payment processors</td></tr><tr><td>Geographic location (latitude and longitude)</td><td>User entry, IP/geolocation providers</td><td>Personalizing your use of CL and combatting fraud/abuse</td><td>No one</td></tr><tr><td>Photos and other data you voluntarily provide, post on or send via CL</td><td>User entry</td><td>Facilitating and personalizing your use of CL</td><td>No one</td></tr><tr><td>Saved searches, account preferences, favorite/hidden postings</td><td>User entry</td><td>Facilitating and personalizing your use of CL</td><td>No one</td></tr><tr><td>HTTP browser cookie</td><td>User's browser, CL web server</td><td>Facilitating and personalizing your use of CL and combatting fraud/abuse</td><td>No one</td></tr><tr><td>Information about your device and browser such as device ID, browser version, operating system, plugins</td><td>User's browser, mobile app</td><td>Facilitating and personalizing your use of CL and combatting fraud/abuse</td><td>No one</td></tr><tr><td>IP address</td><td>User's browser, mobile app, IP/geolocation providers</td><td>Combatting fraud/abuse</td><td>Service providers that help us combat fraud/abuse</td></tr><tr><td>Web page views, access times, HTTP headers</td><td>User's browser, mobile app</td><td>Combatting fraud/abuse</td><td>No one</td></tr></tbody></table>
+- We retain data as needed for our business purposes and/or as required by law.
+We may share some or all of the above listed data in the following circumstances:
+- to respond to subpoenas, search warrants, court orders, or other legal process.
+- to protect the rights, property, or safety of CL users, CL, or the general public.
+- at your direction (e.g. if you authorize us to share data with other users).
+- in connection with a merger, bankruptcy, or sale/transfer of assets.
+#### 3\. Data we store
+- We retain data as needed to facilitate and personalize your use of CL, combat fraud/abuse and/or as required by law.
 - We make good faith efforts to store data securely, but can make no guarantees.
 - You may access and update certain data about you via your account login.
+### 4\. Circumstances in which we may disclose user data:
+#### 4\. California Users:
+- to vendors and service providers working on our behalf (e.g. payment processing, account verification, fraud prevention).
+- to respond to subpoenas, search warrants, court orders, or other legal process.
+- to protect our rights, property, or safety, or that of users of CL or the general public.
+- with your consent (e.g. if you authorize us to share data with other users).
+- in connection with a merger, bankruptcy, or sale/transfer of assets.
+- in aggregate/summary form, where it cannot reasonably be used to identify you.
+To learn more about the California Consumer Privacy Act and how it applies to you, please visit the [California Attorney-General's website](https://oag.ca.gov/privacy/ccpa).
+**California Users** (capitalized terms have the meaning given by the California Consumer Privacy Act ("CCPA")):
+**Right to know:** You have the right to request that we disclose the data we collect, use and disclose, and other information relating to data we collect about you.
+- We do not Sell Personal Information ("PI").
+- In the last 12 months, we collected these categories of PI: (1) Identifiers; (2) PI described in Cal. Civ. Code §1798.80(e); (3) Commercial information; (4) Internet and other network activity information; and (5) Geolocation data.
+- In the last 12 months, we have disclosed for a Business Purpose: (1) Identifiers; (2) Payment information; and (3) Commercial information.
+- The CCPA grants CA residents in certain circumstances: (1) the right to request for the last 12 months specific pieces of PI, categories of PI, categories of sources of PI, Business Purpose or Commercial Purpose for collecting PI, and categories of Third Parties with whom we have shared PI; (2) the right to request deletion of PI; and (3) the right not to be discriminated against for exercising the rights listed above.
+- To exercise CCPA rights, please submit a request via [craigslist.org/about/ccpa](https://craigslist.org/about/ccpa) or ccpa@craigslist.org. Exercise is subject to verification (e.g. via our existing authentication practices for registered users or via information provided by you matching information we have already collected) and certain exceptions, and will be processed in accordance with applicable law. An authorized agent may make a request for you by providing written permission signed by you.
+- CA residents under age 18 registered as CL users may request (via eraser@craigslist.org) and obtain removal of content or information publicly posted on CL. Removal does not ensure complete or comprehensive removal of said content or information.
+- If you have any questions or concerns about CL's privacy policy and practices please email to privacy@craigslist.org.
+**Right to delete:** You have the right to request the deletion of data that we have collected from you, subject to certain exceptions.
+**International Users** - By accessing CL or providing us data, you agree we may use and disclose data we collect as described here or as communicated to you, transmit it outside your resident jurisdiction, and store it on servers in the United States. For more information please contact our privacy officer at privacy@craigslist.org.
+**Right to non-discrimination:** You have the right not to receive discriminatory treatment for exercising the rights listed above.
+You may submit a request to know or delete via [craigslist.org/about/ccpa](https://www.craigslist.org/about/ccpa) or ccpa@craigslist.org .
+Only you, or someone you authorize to act on your behalf, may make a request to know or delete your data. An authorized agent may make a request on your behalf by providing written permission signed by you.
+We will need to confirm your identity before processing your request by asking you to log into your existing account (if you are a registered user) or by asking you for additional information, such as a government issued ID, to confirm your identity against information we have already collected.
+If you are a registered CL user under the age of 18, you may request (via eraser@craigslist.org) and obtain removal of content or information publicly posted on CL. Please note that removal does not ensure complete or comprehensive removal of said content or information from the Internet.
+#### 5\. International Users
+By accessing CL or providing us data, you agree we may use and disclose data we collect as described here or as communicated to you, transmit it outside your resident jurisdiction, and store it on servers in the United States. For more information please contact our privacy officer at privacy@craigslist.org .
+#### 6\. Contact
+If you have any questions or concerns about CL's privacy policy and practices please email privacy@craigslist.org .