Content

Our Services are used by customers and their designated users to create, distribute, and share information (“Content”) from a variety of sources. While principally technical in nature, this Content may include personal information about you, obtained by our customers or provided by you through provisioning the Services, through Services features such as comments, transactional activities such as shopping cart and order submittals, and other means. All Content, including your login information under the customer’s account, is owned by our customers, and Documoto has no control over this Content. As a provider of the Services, acting under the direction of our customers, Documoto is acting in the role of a “Processor” (as defined by the GDPR) for all Content managed by the Services. Accordingly, the customer’s privacy policy, not this privacy policy, applies to information of which we are a processor.

Other Information

Documoto collects data about you through your interactions with our Websites, through your interactions with our Services, and through your interactions with Documoto personnel. We also collect information about you from third-party sources that extend or enrich information that you have provided.

Information You Provide

When you interact with our websites, you may volunteer information such as name, email address, and other personally identifiable information. You may also provide information through your use of the Services, such as updating your profile or adding an email address. During interactions with Documoto personnel, you may provide any type of information to Documoto at your discretion. If you transact business with us, you may be asked to provide further information such as billing address, credit card number, or other financial information. However, aside from financial information required to transact business, we do not request sensitive information from you. If you attend events such as webinars, whether directly through Documoto or via a Documoto partner, you may provide personal data such as your name, email, and phone number.

Information Others May Provide

Our customers, through their interaction with the Services, may provide us with information on you that they require for your use of the Services or that is needed to provision your account.

Information from Other Sources

We may obtain other information about you, including personal and non-personal information, from publicly available sources, or from third parties that provide data enrichment services. We use these sources to obtain additional information about you such as your address and location, your employer, and other demographic data.

Information from Tracking Technologies

Our Websites and Services use several technologies to collect information about you, your browser, your computer, and how you are interacting with us. Some of these technologies are provided by third parties, which are not covered under this Policy.

• Our Services and Websites utilize cookies to provide a personalized online experience and to track your online activities, including the pages you visited, the links you clicked, and other activities. We do not allow any cookies used for tracking or advertising outside of Documoto.
• Internet information. We may use standard internet techniques to collect technical and implicit information about you, such as your IP address, your IP country and location, date/time stamps, referring URL, and other information.
• Website monitoring. Our Services and Websites may also use technologies to monitor your interactive session, such as tracking the time you spend on various pages, your mouse movements, and your overall navigation through the Services and Websites.
• Emails sent to you by the Websites and Services may contain standard technologies such as web beacons to track your reading of the email and your navigation through any of the links within the email. This tracking enables us to understand the usefulness and effectiveness of these emails and associated campaigns and activities.
• We may use providers such as Google Analytics to collect and process non-personal information about you, which we use to better understand the usage of our Websites and Services.

Our Websites and Services are intended to be used by adults only. We do not knowingly collect any personal information from children under the age of 13.

Where We Store Information About You

Our principal data center is located in the United States. Information may also be sent to servers in other countries around the world.

How We Use and Share Your Information

Our usage of your information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business, which are not overridden by your interests and fundamental rights. We use your information within Documoto for the following purposes:

• To provide you with access to the Services and the functionality contained within them.
• To personalize your experience with the Services and Websites.
• To assist our customers where they are providing support to you.
• To perform normal business operations such as billing, order fulfillment, legal, and administration.
• To notify you regarding the status of the Services and Websites.
• To provide you with support and incident assistance on the Services and Websites.
• To communicate with you by phone, email, postal mail, or other means such as social media and text messages.
• To help us with our marketing and sales efforts.
• To email tailored sales and marketing information to you, if you have not opted out of these communications.
• To compile analytics and statistics on your use of our Services and Websites so that we can better understand how they are used and how we might improve them.
• To detect, resolve, and prevent inappropriate, unauthorized or illegal activity, to preserve your or our rights, or to ensure compliance with our Terms of Use or this Policy.

How We Share Your Information

All of the information we collect about you is used only for Documoto purposes. We do not share information with others except as detailed below, and we do not sell your information to third parties. However, we may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.

• Authorized service providers. We may share information with third party service providers where it is required to perform a business activity, such as processing a credit card, delivering an email, supporting our Websites and Services, or other functions. We share only the information needed to perform the business activity, and the service provider is not permitted to use your personal information for any other purpose.
• Legal authorities. We may share your information with legal authorities, without your consent, in response to a lawful demand. This could include, for example, subpoenas, warrants, or court orders, compliance with relevant laws, or be in connection with any legal process. Mergers and Acquisitions. If another company acquires, or plans to acquire, our company, business, or our assets, we will also share information with that company, including at the negotiation stage.

How We Protect Your Information

We utilize a variety of controls and procedures to prevent unauthorized use and disclosure of your personal information. Our Websites and Services have appropriate hardware and software restrictions that limit access. We grant access to employees only to the minimum extent needed to conduct their job responsibilities.

Your information security is a shared responsibility between you and your partner companies, including Documoto. No system can ever be perfectly secure, and while we have undertaken many actions to secure your information, we cannot promise that your information will always remain secure. Please always take care to protect your personal information, avoid unsecure mechanisms such as email when communicating personal information, and notify us immediately at privacy@documoto.com if you suspect any unauthorized access or compromise of your personal information.

In the event that we are required by law to inform you of a breach to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

In some cases, your information may be stored and managed by third party solution providers such as Google or Hubspot, which are not covered under this Policy.

As a multi-national company, we transmit information between and among our affiliates.  As a result, your information may be processed in a foreign country where privacy laws may be less stringent than the laws in your country.  Nonetheless, where possible we take steps to treat personal information using the same privacy principles that apply pursuant to the law of the country in which we first received your information. Documoto uses Standard Contractual Clauses to legally transfer data out of the EU. By submitting your personal information to us you agree to the transfer, storage and processing of your information in a country other than your country of residence including, but not necessarily limited to, the United States.  If you would like more information concerning our attempts to apply the privacy principles applicable in one jurisdiction to data when it goes to another jurisdiction you can contact us using the contact information below.

How You Can Manage Your Information

If you have concerns regarding personal or sensitive information that may be contained within Content, or you would like to review, modify, or delete Content, please notify the appropriate Documoto customer directly. We can assist you with finding and contacting the customer. You may request that your data be provided to you in an accessible format so that you may use your data for your own purposes. Importantly, it may not always be possible to honor all deletion requests because in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.

You can utilize features within your web browser to restrict or prevent the use of cookies. If you do so, your ability to utilize the Websites and Services may be substantially limited.

You may opt out of sales and marketing emails by following the instructions in any email that is sent to you, or contact Documoto at privacy@documoto.com. We may still send you important transactional, event, or administration emails to you, even if you have opted out of sales and marketing emails.

If you would like to review, modify, or delete any of your personal information, please email privacy@documoto.com or file a ticket at support.documoto.com. Typically, we retain your personal information for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Again, you may request that your data be provided to you in an accessible format so that you may use your data for your own purposes. It may not always be possible to honor all deletion requests because in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.

If you would like to object to our use or disclosure of your personal information, please email privacy@documoto.com or file a ticket at support.documoto.com.

If you are not satisfied with our response, and are in the European Union, you may have a right to lodge a complaint with your local supervisory authority.

How We Update This Policy

We may update this Policy from time to time to reflect changes to our practices or to ensure compliance with legal frameworks. For significant and material changes, we will attempt to notify you by email using the address in your account, and/or we will post the notice through the Websites and/or Services prior to the change taking effect. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy. We will note the effective date of the latest version at the beginning of the Privacy Policy.