We — meaning Paper Boat Ltd., doing business as Prodeology (also "we," "our," or "us") — prepared this Privacy Policy to help you understand our practices with respect to the collection, use, and disclosure of information we collect from you through: (i) Prodeology.com, its subdomains, and any other website where Prodeology’s Terms of Service are posted; (ii) Prodeology’s online hosted services; and (iii) Prodeology’s “Software,” meaning, collectively, our browser extensions, mobile applications, other downloadable apps, application programming interfaces (“APIs”), and tools and documentation ((i) through (iii) collectively, our “Service” or “Prodeology”).
We collect information from you when you:
We also collect information about you from our business partners, including referral partners and resellers, and third parties that help us with sales and marketing efforts, such as prospecting. We may also obtain publicly-available business contact information.
Below is additional information about what we collect, depending on how you interact with the Service:
“Content” includes all information, data, and other content, in any form or medium, that is collected, downloaded, or otherwise received, directly or indirectly, from you (or on your behalf) by or through the Service. It also includes information you provide when connecting a third-party account, product, or service to the Service. You (and anyone who can interact with your use of the Service) own and control the nature of any Content, subject to any applicable terms and conditions including our Terms of Service and this Privacy Policy. Our collection, use, and disclosure practices with respect to Content are distinct from those with respect to other sorts of information, as explained in Section 2.a. below.
We may upload Content automatically with your authorization from third-party services (such as from your Google Drive). See Section 1.c. below.
“Customer Information” consists of information related to your access or use of our Service, the creation of accounts, or that otherwise identifies you as a customer or end user of the Service. Customer Information includes:
If you are an end user using the Service through an account created on your behalf by an Prodeology customer (such as an employer, an organization of which you are a member, or another individual), we may collect and process Customer Information about you on behalf of the Prodeology customer with whom your use of the Service is associated.
If you create your account using a service provided by a third party such as Google or Apple, or a single-sign-on service provided by a third party such as Okta, we may collect Customer Information about you from the third-party service (such as your username or user ID associated with that third-party service). If you create your account using such a third-party service, or if you give us permission by changing the settings on your Prodeology account, we may also collect, and you authorize us to collect, information about your personal contacts as may be stored within that third-party service, which we may use to facilitate your invitation of collaborators to Prodeology. By choosing to create an account using a third-party service, you also authorize us to collect Customer Information necessary to authenticate your account with the third party.
Certain aspects of Prodeology allow you to link or integrate third-party products and services to enable certain features and functionalities with Prodeology. For example, you can connect your Google Drive account to generate Content in Prodeology from information and data contained in your Google Drive or integrate with third-party services using Prodeology extensions. If you choose to use these features or functionalities, you may be asked to create an account with a third party that provides such features or functionalities or link your existing third-party service account with Prodeology (and, by doing so, agree to the privacy policy and/or terms and conditions of that third party). You may also be asked to authorize Prodeology to collect information from the third party on your behalf. We will then collect information (such as your username or user ID associated with that third-party service) from you and/or that third party as necessary to enable Prodeology to access your data and content stored with that third-party service. Once the authentication is complete, we have the ability to access information you provided to us or was otherwise collected by the third-party service in accordance with the privacy practices of that third party. We will store the information and data we collect and associate it with your Prodeology account, and we will use that information and data to enable the integration of Prodeology with the third-party service and to perform actions requested or initiated by you, or that are reasonably necessary to carry out instructions provided by you.
We collect information about how you use Prodeology and your actions on Prodeology, including your IP addresses, browser types, operating systems, ISPs, platform types, device types, and mobile device identifiers such as make and model, and mobile carrier. We may also use tools, including third-party tools, to collect analytics data. Some of this information is collected through the use of cookies and other tracking technologies, such as web beacons, pixels, session replay scripts, and similar technologies. Please see our Cookie Policy for more information about our use of cookies and similar tracking technologies.
Notwithstanding anything to the contrary in this Privacy Policy, we will not use or access your Content except: to provide, maintain, improve, or optimize use of Prodeology; where you (or the organization through which you have an account) explicitly approve access (e.g., during a customer support inquiry); in response to lawful requests by law enforcement or government authorities; in response to subpoenas, court orders, or other legal process or requests, as required by applicable law as determined in our discretion; where necessary (in our sole discretion) to ensure the stability and security of Prodeology and our systems (e.g., where we have reason to believe specific Content is degrading server stability); and where necessary (in our sole discretion) to protect the rights, privacy, safety, or property of you, us, or others. Notwithstanding the foregoing, you acknowledge and agree that we may retain, take possession of, delete, or deny you access to your Content if we believe, in our sole discretion, that some or all of your Content, or your use of Prodeology, violates our Terms of Service. We also may analyze metadata related to Content (such as total number of records, file size, API volume, access logs, etc.).
We use the information we collect for a variety of purposes, and how we use it depends on what we collect and which Service (or features of the Service) you use. These purposes may include:
We disclose information we collect for specific purposes, including:
We may transfer to and process your personal information in countries outside of the jurisdiction where you are located for the various purposes described above. When required by law, we will ensure that we rely on an appropriate legal mechanism for the transfer, such as your consent, standard contractual clauses (or their equivalent), or adequacy decisions. You may ask us, using the contact information in Section 9 of this policy, for more information about the specific basis we use for transferring your data.
We store your personal information for no longer than necessary for the purposes for which it was collected, including for the purposes of satisfying any legal or reporting requirements, and in accordance with our legal obligations and legitimate business interests. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorized use or disclosure of your personal data; the purposes for which we process your personal data; and the applicable legal requirements.
You may access, correct, amend, or delete Content within Prodeology. You own all Content you upload provided you have lawful title thereto. Content you delete (including Content containing personal information) may be retained in archived or backup copies in order to enable you to use certain features like revision history and base snapshots. For instructions on how to permanently delete Content from your Prodeology account, please contact us at support@prodeology.com. Please note that permanent deletion of Content through this process may impair or disable some features of the Service (such as revision history and base snapshots) with respect to that Content.
We may use some of the information we collect for marketing purposes, including to send you promotional communications about new Prodeology features, products, events, or other opportunities. If you wish to stop receiving these communications or to opt out of use of your information for these purposes, please follow the opt-out instructions by clicking "Unsubscribe" (or similar opt-out language) in those communications. You may also contact us at support@prodeology.com to opt out.
You also may have certain rights with respect to your data depending on the jurisdiction in which you live. Please see the jurisdiction-specific sections below for a description of those rights.
Prodeology is not intended for use by children under the age of 16 (or other age as required by local law) and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take reasonable steps to delete such information from our files as soon as is practicable. If you learn that your child has provided us with personal information without your consent, you may contact us at support@prodeology.com.
Any information that we collect is subject to the Privacy Policy in effect at the time such information is collected. We may, however, revise the Privacy Policy from time to time. If a revision is material, as determined solely by us, we will notify you, for example via email. The current version will always be posted to our Privacy Policy page.
If you have any questions about our privacy practices, including this policy, you may contact us by email at support@prodeology.com or by mail at Prodeology, 799 Market St., 8th Floor, San Francisco, CA 94103.
The disclosures in this section apply solely to residents of the European Economic Area ("EEA"), Switzerland, and the United Kingdom ("UK"), and describe how we collect, use, disclose, and otherwise process personal data about you. Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the General Data Protection Regulation ("GDPR"). Prodeology is the controller of the personal data we hold about you in connection with your use of the Service.
We collect and process your personal data for purposes set forth in this Privacy Policy. Where required by law, we obtain your consent to use and process your personal data for these purposes. Otherwise, we rely on another authorized legal basis (including but not limited to the performance of a contract or legitimate interest) to collect and process your Personal Data.
From time to time we may contact you with information about our products and services, including sending you marketing or advertising messages and asking for your feedback on our products and services. For some marketing or advertising messages, we may use personal data we collect about you to help us determine the most relevant marketing or advertising information to share with you. You can unsubscribe at any time from our marketing or advertising emails by clicking on the unsubscribe link at the bottom of the email or by contacting us at support@prodeology.com.
In addition, when you give us your consent, we may provide your information to third parties for targeted advertising or we may allow our advertising partners to collect data about you for that purpose using cookies or similar technologies. For more information, please see our Cookie Policy.
You have the following rights in respect of your personal data that we hold: (i) right of access; (ii) right of portability; (iii) right to rectification; (iv) right to erasure; (v) right to restriction; (vi) right to withdraw consent; and (vii) right to object.
You also have the right to lodge a complaint to your local data protection authority. Information about how to contact your local data protection authority is available here.
If you wish to exercise one of these rights, please submit a request by:
Due to the confidential nature of data processing we may ask you to provide proof of identity when exercising the above rights.
The disclosures in this section apply solely to individual residents of the State of California and provide additional information about how we collect, use, disclose, and otherwise process personal information within the scope of the California Consumer Privacy Act of 2018, as amended, including its implementing regulations ("CCPA"). Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the CCPA.
Certain data elements we collect and use to provide the Service may be deemed "sensitive personal information" under CCPA. These include your username and password to access your account and contents of any messages you send through our email integration feature. We do not use or disclose such sensitive personal information to “infer” characteristics as defined under the CCPA, or for any purpose other than that which is necessary to provide the Service as specified in the CCPA.
We use cookies and similar tracking technologies that enable certain advertising networks, social media companies, analytics services, and other third-party businesses to collect and disclose your personal information directly from your browser or device when you visit or interact with our Service or otherwise engage with us online. In some cases, we may upload personal information to certain of these partners for advertising or analytics purposes.
To opt out of these “sales” or “sharing” of personal information (as these terms are defined under the CCPA or other applicable US state privacy laws), you must submit a request to support@prodeology.com.
Note that the above opt-out right does not apply where we have appropriately limited our partners to be our “service providers” or “processors” (as these terms are defined under the CCPA or other applicable US state privacy laws).
To learn more about GPC, please visit http://globalprivacycontrol.org.
As a California resident, you may be able to exercise the following rights in relation to the personal information about you that we have collected (subject to certain limitations at law):
You also have the right to be free of discrimination for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our Service or engage with you in the same manner.
Please see Section 11.b. above to exercise your right to opt out of personal information sales or sharing.
To exercise your rights to know, correct, or delete, please submit a request by emailing support@prodeology.com with the subject line "California Rights Request"
We will need to verify your identity before processing your request. In order to verify your identity, we will generally require either the successful login to your account (if applicable) and/or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to know, correct, or delete, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline a request to exercise the right to know, correct, or delete, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
We do not sell or share the personal information of consumers we know to be less than 16 years of age. Please contact us at support@prodeology.com to inform us if you, or your minor child, are under the age of 16.
In addition to the rights described above, California's "Shine the Light" law (Civil Code Section §1798.83) permits California residents that have an established business relationship with us to request certain information regarding our disclosure of certain types of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year.
To make such a request, please send an email to support@prodeology.com.
The disclosures in this section apply solely to individual residents of the States of Colorado, Connecticut, Virginia, and Utah. Privacy laws in these states give residents certain rights with respect to their personal data, when they take effect over the course of 2023. Those rights include:
To submit a request to exercise your access, deletion, or correction privacy rights, please email us at support@prodeology.com with the subject line “Privacy Rights Request” and let us know in which state you live. Please see Section 11.b. for a description of how to exercise your right to opt-out of targeted advertising or sales.
Residents of Colorado, Connecticut, and Virginia may appeal a refusal to take action on a request by contacting us by email at support@prodeology.com.
For residents of the State of Nevada, Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. Although we do not currently sell covered information, please contact us at support@prodeology.com to submit such a request.
If you live in Canada, you have the following rights:
You may submit a request by contacting us at support@prodeology.com with the subject line “Canadian Privacy Rights Request”. Before we honor your request, we will need to verify your identity.
