Last amended: July 21, 2018
Effective date: July 21, 2018
How we collect information
We collect the following personal information from you:
Information that you provide to us about yourself
When you sign up for the Services, we ask you for information such as:
Contact Information, such as name, email address, mailing address, or phone number;
Billing Information, such as credit card number and billing address;
Unique Identifiers, such as username, account name or password;
Information about your business, such as company name, company size, business type.
If you do not provide this information, we will not be able to provide the Services to you.
Information you provide to us about your customers, end users, and contacts
For the provision of our Services to you, you provide us with information which may identify your customers, end users or employees. Such information includes:
- Content of web pages processed by Paperplane.
You may also provide us personal information about your contacts such as name and email address where we can send receipts of your purchases. When you provide us with personal information about your contacts we will only use this information for the specific reason for which it is provided. If you believe that one of your contacts has provided us with your personal information and you would like to request that it be removed from our database, please contact us at the contact information below.
Information collected automatically
Paperplane allows Google Analytics to use these technologies to analyze trends, administer the website and identify potential improvements to our service.
Purpose and Legal basis of the Processing
To the extent EU data protection law applies to our processing of information about you, we act as the “data controller”. To the extent EU data protection law applies to our processing of your customer or end user data, you serve as the “data controller” or “data processor” and we serve as the “data processor” or “data sub-processor”.
To perform the Services: We use your information to identify you, process your payment, provide you with technical support and assistance; and communicate with you about the Services via email. For example we will contact you to notify you of any issues with the Services or any suspicious activity in your account. The legal basis for these uses in the performance of the contract with you.
To Optimize or improve the Services: We use your information to authenticate you, prevent fraud and abuse of our Services and perform research. The legal basis for these uses is our legitimate interest in the improvement and optimization of our service offerings and in ensuring the security of our services and we apply appropriate safeguards to protect your information (see the section “Rights with respect to your information” below).
How we share your information
We share information with service providers, as required by law, and in connection with the protection and enforcement of our legal and contractual rights.
With service providers
We share your information with third parties who provide services on our behalf to help with our business activities. This includes: payment processing, providing customer service, sending marketing communications (this does not include information about your customers), conducting research and analysis and providing cloud computing infrastructure. The legal basis for sharing this information is our legitimate interest in providing our Services efficiently and we implement measure to safeguard your information.
With public authorities or law enforcement
In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose your personal information as required by law (such as to comply with a subpoena or other legal process), when we believe in good faith that disclosure is necessary to protect our rights, when we believe there is a violation to our Terms of Service (see Paperplane Terms of Service), to protect your safety or the safety of others, to investigate fraud, to respond to a government request, if we are involved in a merger, acquisition, or sale of all or a portion of our assets, or if we are involved in a bankruptcy or liquidation proceeding. The legal basis for this is our legitimate interest in protecting our legal rights and those of others, compliance with legal obligations and our legitimate interest in fulfilling legal obligations imposed by legal authorities outside of the EU.
Prevent fraud and abuse of the Services
We will share information to prevent or detect fraud or to address technical issues and if we believe it is necessary to investigate, prevent, or take action regarding situations that involve abuse of the Services infrastructure. The legal basis for this is our legitimate interest in the maintaining the security of our Services.
We also process and share information in an aggregated, de-identified manner, where the information is shared as part of a statistical report and does not contain personal information.
The security of your personal information is important to us. We implement adequate measures to protect the personal information submitted to us, both during transmission and once it is received. We takes steps to ensure that all source code, files and data remain private and confidential. Due to the sensitive nature of source code we take this very seriously and make it our primary concern for all customers. We restrict access to personal information to Paperplane employees, contractors and agents who need to know that information in order to operate, develop or improve our service. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations. If you have any questions about the security of your personal information, you can contact us at the contact information below.
Rights with respect to your information
Upon request we will provide you with information about whether we hold any of your personal information. You may access, correct, obtain a copy of or request deletion of your personal information by contacting us at the contact information below. We will respond to your request within a reasonable timeframe. In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.
Paperplane acknowledges that you have the right to access your personal information. Paperplane has no direct relationship with your customers or end users whose personal data it processes. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to the Paperplane customer (the data controller). If requested to remove data we will respond within a reasonable timeframe. In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here.
Your choices with respect to the information
Promotional Email communication
You may sign-up to receive email or newsletters or other communications from us. If you would like to discontinue receiving this information, you may update your email preferences by using the “Unsubscribe” link found in emails we send to you or by contacting us at the contact information below.
To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on.
We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements. In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.
Even if you cancel your account, keep in mind that the deletion by our third party providers may not be immediate and that the deleted information may persist in backup copies for a reasonable period of time.
Policy regarding children
The Services are not directed to children under the age of 16. We do not knowingly collect Personal Information from children under 16. If you are under 16, please do not use the Services and do not provide any personal information to us. If you become aware that a child under 16 has provided us with personal information without your consent, please contact us at firstname.lastname@example.org. If you are a California resident under the age of 18 and you wish to remove publicly available content, please contact us at email@example.com with the subject line “California Eraser”.
Transfers of information not from the EEA
However, in connection with these transfers of personal information, your personal information may be subject to privacy laws that may not provide the same protection as your country of residence. For example, government entities in such other countries may have certain rights to access your personal information. By using this Site or using our Service that this privacy notice relates to you are consenting to this transfer of your personal information.
We may need to update this policy from time to time. Unless otherwise required by law, we will notify you before we make such changes and give you an opportunity to review them before they go into effect. We encourage you to periodically review this page for the latest information on our privacy practices.
Privacy questions or feedback