This Privacy Policy constitutes an agreement between the Service Provider and the Customer and is incorporated into and governed by the Terms of Service. Privacy Policy describes what information we collect and use about you and what information is shared with third parties. Protecting the privacy and integrity of your personal data is our top priority.
1. Information we may collect about you
1.1. We collect different types of information to provide you with the Services reliably and securely.
- Your usage information — We collect information on how you use the Services. We may collect information like IP addresses, the type of browser, the device, the operating system you use, or the actions you take when using our Services. We use this information in our legitimate interest to monitor the availability and quality of our services and individual features, improve our Services, develop new products, features, and functionality, and ensure the security of your account and your data. We may also use third-party tools to collect visitor behaviour and demographic information on our Services. If we have your consent, we also use this information to better tailor our website and the advertising we show you to your interests.
- Other information — We may receive information about you, including your Personal Data, from third parties we are working closely with (like Qualified Trust Service Providers, other Service Providers integrated into our Services, business partners, subcontractors, credit rating agencies) on the basis of agreement or from cookies on the basis of consent. We will treat this information as Personal Data in accordance with this Privacy Policy.
2. Disclosure of your information
2.1. We do not share any personal information with third parties unless one of the following circumstances applies:
- Lawful requests — we may disclose Personal Data when we have a good belief that access, use, preservation or disclosure of such information is necessary to:
- satisfy any applicable law, regulation, legal process or enforceable governmental request;
- satisfy applicable laws especially subject to financial entities that have additional obligations for audits;
- enforce our Terms of Service, including investigations of potential violations;
- protect against imminent harm to our rights, property or safety, or that of our users or public as required or permitted by law.
- Business transfers — we may share and/or transfer your Personal Data if we become involved in any merger, acquisition, reorganisation, sale of assets, or bankruptcy.
3. Information security
3.1. All our Services have been designed from the ground up to be secure.
3.2. All Personal Data is hashed (SHA256) and encrypted (AES-256-CBC).
3.3. Unless specified otherwise, all Personal Data is stored for no longer than 24 hours. After this period the data is removed from our databases.
3.4. We do not collect your credit card information. Only anonymized customer ID is stored on our databases.
4. Retention policy
4.1. Once you delete your User Account from the Services, the content (Customer Data) is deleted within 7 days of the date of closure. Your account information and billing information are retained for a period of 10 years in accordance with Lithuanian accounting and taxation laws.
4.2. We retain information about your activity (the actions you take when using our Services) in system logs to ensure our Services are provided reliably and securely. Such information related to your activity may contain Customer Data and/or Personal Data. This information is stored in our backups for 90 days.
4.3. The abovementioned information will be removed from our data backups within one week after the end of the retention period.
4.4. Free user accounts may be deleted after two years of inactivity in accordance with our Terms of Service.
5. Data Controller
5.1. You’re acting as a Data Controller for your uploaded data (Customer Data) that contains Personal Data. We are not responsible for any Personal Data stored at the discretion of our Customers, including but not limited to Address Book entries, Invitations or Documents.
5.2. We are neither responsible for the manner in which our Customers collect, handle, disclose, distribute nor otherwise process such data.
6. Data location
6.1. We process your personal data within the EU/EEA. When selecting our partners, we make sure they provide us with the possibility to limit data processing to the EU/EEA, if possible. In the event that your data is transferred outside of the EU/EEA by one of our partners, we ensure in our agreements that this happens in accordance with applicable data protection law. Under no circumstances will we transfer your Customer Data outside of the EU/EEA.
7. Changes and updates
7.1. We may revise this Privacy Policy from time to time and will post the most current version on our website.
8. Contact us
8.1. If you have any questions, concerns or complaints about this Privacy Policy, you may contact us by email at [email protected].
Last updated: 2024-09-01