1. What Information We Collect and How?
- Create or register an account, or administer your account
- Input, post, or upload information, data, or other content through the Service
- Submit questions, requests, or other communications to us via various communication channels
- Contact us for customer support or technical support
- Visit any of our websites or download any of our applications
- Participate in promotions, user conferences, webinars, demonstrations, contests, sweepstakes, surveys, or other marketing events
- Participate in research activities
- Interact with other OrgOrg users and guests on our community forums
- Integrate third-party products and services with your OrgOrg account
We also collect information about you from our business partners, including referral partners and resellers, and third parties that help us with sales and marketing efforts, such as prospecting. We may also obtain publicly-available business contact information.
Below is additional information about what we collect, depending on how you interact with the Service:
a. Your Content
We may upload Content automatically with your authorization from third-party services (such as from your Google Drive). See Section 1.c. below.
b. Customer Information
- Identifiers. This includes your name, mailing address, email address, postal code, telephone number, and other similar identifiers.
- Customer Records. This includes username and password, payment information, company name, job title, business email address, and department.
- Protected Classification Characteristics. This includes age and gender.
- Commercial Information. This includes information about products or services purchased, obtained or considered.
- Internet/Network Activity Information. This includes your browsing history, log and analytics data, information about the device(s) used to access the Service, domain server, search history and information regarding your interaction with our Service, and other usage data.
- Audio/Visual Information. This includes pictures you provide or upload in connection with our Service, and the content and audio or video recordings of phone or video calls between you and us that we record where permitted by law.
- Profession/Employment Information. This includes your current employer, title, and location.
- Other Personal Information. This includes personal information you provide to us in relation to a survey, comment, question, request, or inquiry, and information you provide when you connect a third-party account, product or service to the Service.
- Inferences. This includes inferring your location using your IP address, or using data from your use of our Service to make predictions about your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
If you are an end user using the Service through an account created on your behalf by an OrgOrg customer (such as an employer, an organization of which you are a member, or another individual), we may collect and process Customer Information about you on behalf of the OrgOrg customer with whom your use of the Service is associated.
c. Third-Party Integrations
If you create your OrgOrg account with a Google Workspace or Google consumer account, we may collect Customer Information about you from the third-party service (such as your username or user ID associated with that third-party service). If you create your account using such a third-party service, or if you give us permission by changing the settings on your OrgOrg account, we may also collect, and you authorize us to collect, information about your personal contacts as may be stored within that third-party service, which we may use to facilitate your invitation of collaborators to OrgOrg. By choosing to create an account using a third-party service, you also authorize us to collect Customer Information necessary to authenticate your account with the third party.
d. Automatically-Collected Information
2. How We Use the Information We Collect
a. Use of Content
b. Use of Other Information
We use the information we collect for a variety of purposes, and how we use it depends on what we collect and which Service (or features of the Service) you use. These purposes may include:
- Fulfilling our Contract with You and Providing the Services to You. This includes use for the purpose of: (i) responding to requests or inquiries from you; (ii) providing customer support or technical assistance; (iii) contacting you to provide product updates or information about products you have requested or purchased; (iv) creating, managing, or administering your information and account, including identifying you with your account or the account of an OrgOrg customer; and (v) auditing relating to interactions, transactions, and other compliance activities.
- Analyzing and Improving our Services Pursuant to our Legitimate Interest. This includes use for the purpose of: (i) deriving market insights, ways to improve the Service, and performing other business analysis or research; (ii) customizing existing and future product offerings and other aspects of the Service to you and other users; (iii) securing the Service and our systems, and protecting your information and data; (iv) detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; and (v) measuring interest in and engagement with our Service and short-term, transient use, such as contextual customization of ads.
- Marketing Our Products and Services. This includes use for the purpose of: (i) tailoring and providing you with information about OrgOrg products, services, and events that you may be interested in, including by email or phone, (ii) monitoring the performance of our advertisements and marketing efforts, and (iii) communicating with you about your engagement with our Service.
- Legal Obligations and Rights. This includes use for the purpose of: (i) establishing, exercising, investigating, prosecuting, or defending against legal claims; (ii) complying with laws or responding to lawful requests and legal process; (iii) protecting the rights and property of OrgOrg, our agents, customers, and others, including to enforce our agreements, policies, or Terms of Service; (iv) detecting, suppressing, or preventing fraud; (v) reducing credit risk and collecting debts owed to us; (vi) protecting the health and safety of OrgOrg, our customers, or any person; or (vii) fulfilling other requirements under applicable law.
- Participation in any OrgOrg partner program. This includes use for the purpose of enabling or supporting participation in any such program, which may involve the provision by OrgOrg partners of implementation, training, app-building, base-building, or other similar services.
- Consent. This includes use for other purposes that are clearly disclosed to you at the time you provide personal information, or with your consent.
- Aggregated or De-Identified Data. This includes use of aggregated or de-identified information for a wide variety of statistical, analytical, and Service improvement purposes.
- Other Purposes. This includes use for our other, legitimate business purposes, or as permitted by applicable law.
3. How We Disclose Information
- When you ask us to, or otherwise give your specific consent (for example, by requesting additional permissions only when needed for features like user directory sync), you consent to our making that Content visible to OrgOrg users or website guests;
- With affiliates and subsidiaries to provide you with aspects of the Service, such as customer support;
- With vendors that help us provide you with aspects of the Service, such as data storage, hosting, customer support, and payment processing, or that help us with marketing and email campaigns, to advertise, gain insights, and perform analytics into how the Service is used and how it might be improved;
- With an employer or other organization (or employees or other OrgOrg users associated with such an employer or other organization) on whose behalf you use the Service, that created an OrgOrg account on your behalf, or that owns, manages, or is associated with the email domain for an email address on your account;
- With the owner or collaborator of an OrgOrg workspace to which you have access or on which you are a collaborator as necessary to identify you to such owner or collaborator or enable you to collaborate as intended;
- With partners in any OrgOrg partner program, when you elect to work with one of our partners for implementation, training, app-building, base-building, or other similar services.
- As necessary to comply with applicable law, including governmental requests and law enforcement requests, and otherwise to protect the rights, privacy, safety, or property of you, us, or others;
- As necessary in the event of a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer, financing, or other disposition of all or any portion of our business, assets, or stock;
4. Transfers of Information
We may transfer to and process your personal information in countries outside of the jurisdiction where you are located for the various purposes described above. When required by law, we will ensure that we rely on an appropriate legal mechanism for the transfer, such as your consent, standard contractual clauses (or their equivalent), or adequacy decisions. You may ask us, using the contact information in Section 9 of this policy, for more information about the specific basis we use for transferring your data.
5. Retention of Information
We store your personal information for no longer than necessary for the purposes for which it was collected, including for the purposes of satisfying any legal or reporting requirements, and in accordance with our legal obligations and legitimate business interests. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorized use or disclosure of your personal data; the purposes for which we process your personal data; and the applicable legal requirements.
6. Managing Your Information
You may access, correct, amend, or delete Content within OrgOrg. You own all Content you upload provided you have lawful title thereto. Content you delete (including Content containing personal information) may be retained in archived or backup copies in order to enable you to use certain features like revision history and base snapshots. For instructions on how to permanently delete Content from your OrgOrg account, please contact us at firstname.lastname@example.org. Please note that permanent deletion of Content through this process may impair or disable some features of the Service (such as revision history and base snapshots) with respect to that Content.
b. Other Information
We may use some of the information we collect for marketing purposes, including to send you promotional communications about new OrgOrg features, products, events, or other opportunities. If you wish to stop receiving these communications or to opt out of use of your information for these purposes, please follow the opt-out instructions by clicking “Unsubscribe” (or similar opt-out language) in those communications. You may also contact us at email@example.com to opt out.
You also may have certain rights with respect to your data depending on the jurisdiction in which you live. Please see the jurisdiction-specific sections below for a description of those rights.
7. Information from Children
OrgOrg is not intended for use by children under the age of 16 (or other age as required by local law) and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take reasonable steps to delete such information from our files as soon as is practicable. If you learn that your child has provided us with personal information without your consent, you may contact us at firstname.lastname@example.org.
9. Contact Us
If you have any questions about our privacy practices, including this policy, you may contact us by email at email@example.com.
10. EEA, UK, Swiss-Specific Disclosures
The disclosures in this section apply solely to residents of the European Economic Area (“EEA”), Switzerland, and the United Kingdom (“UK”), and describe how we collect, use, disclose, and otherwise process personal data about you. Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the General Data Protection Regulation (“GDPR”). OrgOrg is the controller of the personal data we hold about you in connection with your use of the Service.
a. Lawful Basis of Processing
b. Marketing and Advertising
From time to time we may contact you with information about our products and services, including sending you marketing or advertising messages and asking for your feedback on our products and services. For some marketing or advertising messages, we may use personal data we collect about you to help us determine the most relevant marketing or advertising information to share with you. You can unsubscribe at any time from our marketing or advertising emails by clicking on the unsubscribe link at the bottom of the email or by contacting us at firstname.lastname@example.org.
c. Your Privacy Rights
You have the following rights in respect of your personal data that we hold: (i) right of access; (ii) right of portability; (iii) right to rectification; (iv) right to erasure; (v) right to restriction; (vi) right to withdraw consent; and (vii) right to object.
You also have the right to lodge a complaint to your local data protection authority. Information about how to contact your local data protection authority is available here.
If you wish to exercise one of these rights, please submit a request by emailing email@example.com with the subject line “European Rights Request”.
Due to the confidential nature of data processing we may ask you to provide proof of identity when exercising the above rights.
11. California-Specific Disclosures
The disclosures in this section apply solely to individual residents of the State of California and provide additional information about how we collect, use, disclose, and otherwise process personal information within the scope of the California Consumer Privacy Act of 2018, as amended, including its implementing regulations (“CCPA”). Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the CCPA.
a. Sensitive Personal Information
Certain data elements we collect and use to provide the Service may be deemed “sensitive personal information” under CCPA. These include your username and password to access your account and contents of any messages you send through our email integration feature. We do not use or disclose such sensitive personal information to “infer” characteristics as defined under the CCPA, or for any purpose other than that which is necessary to provide the Service as specified in the CCPA.
b. Sales and Sharing of Personal Information (Targeted Advertising)
To opt out of these “sales” or “sharing” of personal information (as these terms are defined under the CCPA or other applicable US state privacy laws), you must:
- Enable Global Privacy Control (“GPC”) on your browser; and
- Submit a request by emailing firstname.lastname@example.org.
Note that the above opt-out right does not apply where we have appropriately limited our partners to be our “service providers” or “processors” (as these terms are defined under the CCPA or other applicable US state privacy laws).
To learn more about GPC, please visit http://globalprivacycontrol.org.
c. California Privacy Rights
As a California resident, you may be able to exercise the following rights in relation to the personal information about you that we have collected (subject to certain limitations at law):
- The Right to Know any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity:
- The specific pieces of personal information we have collected about you;
- The categories of personal information we have collected about you;
- The categories of sources of the personal information;
- The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
- The categories of personal information we have sold or shared and the categories of third parties to whom the information was sold or shared; and
- The business or commercial purposes for collecting, selling, or sharing the personal information.
- The Right to Request Deletion of personal information we have collected from you, subject to certain exceptions.
- The Right to Request Correction of inaccurate personal information.
- The Right to Opt Out of Personal Information Sales or Sharing to third parties now or in the future.
You also have the right to be free of discrimination for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our Service or engage with you in the same manner.
d. How to Exercise Your California Privacy Rights
Please see Section 11.b. above to exercise your right to opt out of personal information sales or sharing.
To exercise your rights to know, correct, or delete, please submit a request by emailing email@example.com with the subject line “California Rights Request”.
We will need to verify your identity before processing your request. In order to verify your identity, we will generally require either the successful login to your account (if applicable) and/or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to know, correct, or delete, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline a request to exercise the right to know, correct, or delete, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
e. Minors Under Age 16
f. California's “Shine the Light” Law
In addition to the rights described above, California's “Shine the Light” law (Civil Code Section §1798.83) permits California residents that have an established business relationship with us to request certain information regarding our disclosure of certain types of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year.
To make such a request, please send an email to firstname.lastname@example.org.
12. Disclosures to residents of Colorado, Connecticut, Virginia, and Utah
The disclosures in this section apply solely to individual residents of the States of Colorado, Connecticut, Virginia, and Utah. Privacy laws in these states give residents certain rights with respect to their personal data, when they take effect over the course of 2023. Those rights include:
- Right to Access Information. You have the right to access and obtain a copy of your personal data.
- Right to Request Deletion. You have the right to request that we delete personal data provided by or obtained about you.
- Right to Correct. You have the right to correct inaccuracies in your personal data.
- Right to Opt-Out of Targeted Advertising. You may ask us not to use or disclose your information for the purposes of targeting advertising to you based on your personal data obtained from your activity across different businesses, services, websites, etc.
- Right to Opt Out of Personal Information Sales. to third parties.
To submit a request to exercise your access, deletion, or correction privacy rights, please email us at email@example.com with the subject line “Privacy Rights Request” and let us know in which state you live. Please see Section 11.b. for a description of how to exercise your right to opt-out of targeted advertising or sales.
Residents of Colorado, Connecticut, and Virginia may appeal a refusal to take action on a request by contacting us by email at firstname.lastname@example.org.
13. Nevada-Specific Disclosures
For residents of the State of Nevada, Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. Although we do not currently sell covered information, please contact us at email@example.com to submit such a request.
14. Canada-Specific Disclosures
If you live in Canada, you have the following rights:
- Right to Access. You can ask us to: (i) confirm that we have personal information about you, and (ii) provide you a copy of that information.
- Right to Correct. You can ask us to correct any inaccurate or incomplete personal information that we have about you.
You may submit a request by contacting us at firstname.lastname@example.org with the subject line “Canadian Privacy Rights Request”. Before we honor your request, we will need to verify your identity.