GDPR

How do we store your data?

We securely store your data at our service providers, who are GDPRcompliant. We will keep your data for as long as required by law, until we nolonger have a valid reason for keeping it, or until you request us to stopusing it. Once this time period has expired, we will delete your personal information from our servers and databases.

What are your data protection rights under GDPR?

We want you to be fully aware of all of your data protection rights under the GDPR. Every user located in a country which has adopted the GDPR is entitled to the following:

• The right toaccess – You have the right to request copies of your data. We may charge you asmall fee for this service.
• The right torectification – You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make arequest, we have one month to respond to you. If you would like to exercise anyof these rights, please contact us at the address or e-mail identified in theContact Us section at the end of this document.

We may ask you to verify your identity before responding to such requests.

• The right toaccess – You have the right to request copies of your data. We may charge you asmall fee for this service.
• The right torectification – You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Information Collected

What data does Clickout collect about our users?

• Username
• Email address
• Company Name (Optional)
• Phone Number (Optional)
• Job Title (Optional)
• IP addresses tosupport secure authentication
• Clickout usage statistics (e.g. user content created)

The followingadditional information may be collected by third parties, but is not stored directly by Clickout:

• Billing information (Stripe)
• Helpdesk tickets (Hubspot)
• Customer Activity (Hubspot)

Information Use

When we ask for information, we do so at the time thatit’s required. We do not ask for, store or collect information that we do notneed. This data is primarily used for:

• Verifying and creating accounts
• Providing essential software services
• Communicatingwith users about support tickets and service updates
• Ascertaining location to ensure compliance with local laws andregulations

Cookies and Session Tracking

When you use our Services, we may automaticallycollect and store information, through cookies or similar technology. We usecookies to collect standard account data and visitor behavior information.Cookies help us understand your preferences based on previous or current siteactivity, which enables us to provide you with improved services. Collected information may include:

• The date and time you used our Services
• The Internet address of the web site from which you linked to us
• The page from which you exit our Services
• Interactions made while visiting the web site
• The average number of pages visited and the average time spent on ourServices
• The Internet address from which you accessed our Services (IP address)

We use cookiesin a range of ways to improve your experience on our website and in ourServices and app, including:

• Understanding how you use our Services
• Keeping you signed in to your account
• Improve site functionality and customer service
• Remembering your site and service preferences

Our Services usethe following types of cookies:

• Functionality Cookies – used to recognize you on our website and app andto remember your account preferences
• Advertising Cookies – used to collect information about your visit toour website or app, the content you viewed, the links you followed andinformation about your browser, device, the date and time of your visit, thewords you searched for, the items you clicked on, and the page you last visitedbefore exiting our Services. We sometimes share some limited aspects of thisdata with third parties for advertising purposes. We may also share online datacollected through cookies with our advertising partners

We use GoogleAnalytics to analyze user patterns on our website. Google Analytics usescookies to allow us to see how you use our website so we can improve yourexperience. Google’s ability to use and share information collected by GoogleAnalytics, about your visits to the site, is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizingyou on return visits to the site by disabling cookies in your browser. If youprefer to not have data reported by Google Analytics, you can install the Google Analytics Opt-out Browser Add-on.

We may use remarketingservices to advertise to you on third-party websites, after you visit ourwebsite. This allows us to display advertisements to visitors who may not havecompleted a task on our website, such as filling out a request for informationor purchasing items in their cart. Remarketing may take the form of anadvertisement on the Google search results page or a site in the Google DisplayNetwork. We use Google AdWords, a remarketing service provided by Google, Inc.You can opt-out of Google Analytics for Display Advertising and customize theGoogle Display Network ads by visiting the Google Ads Settings page. Google also recommends installing the Google Analytics Opt-out Browser Add-on for your web browser. Google Analytics Opt-outBrowser Add-on provides visitors with the ability to prevent their data frombeing collected and used by Google Analytics.

Third Party Service Access

We do not sell, rent, trade, or otherwise transferyour personally identifiable information to outside parties without advancenotice. This does not include website hosting partners and other parties whoassist us in operating our website, conducting our business, or serving our users,so long as those parties agree to keep this information confidential.

On rareoccasions, we may disclose specific information upon governmental request, inresponse to a court order, or when required by law to do so. We may also shareinformation with companies assisting in fraud protection or investigation. Wedo not provide information to these agencies or companies for marketing orcommercial purposes.

The following isa list of third party services that may access your data at various times:

• Google Analytics
• Amazon AWS
• Stripe

Data Retention

We will retain your data only for as long as isnecessary for the purposes set out in this agreement. We will retain and useyour data to the extent necessary to comply with our legal obligations (forexample, if we are required to retain your data to comply with applicablelaws), resolve disputes, and enforce our legal agreements and policies.

Data Storage and Security

Your data is securely stored in industry-leading datacenters. These include servers protected by PGP encryption protocols, SSLcertificates, and password and API keys that are regularly cycled.

In addition to this, the following precautions have been made:

• Database access is strictly limited to those requiring it
• Server access is strictly limited to those requiring it

Administrator roles are designed such that those performing routine administrative tasks donot gain access to data that is not relevant to their role

Handling a Potential Data Breach

In the unlikely case of a data breach, the following steps will be followed:

• Site, server and database access will temporarily be disabled
• All of our passwords and security certificates will be changedº
• Our users will be emailed and notified of the breach
• An internal investigation will be started to ascertain as much as we canabout the breach
• The Clickout site, server and databases will be re-enabled once they’vebeen proven to be secure
• Changes will be made, and documented, to prevent a similar breach in thefuture
• A follow up an email will be sent to all of our users, detailing what welearned from the investigation, along with the steps to prevent future breaches

How can I delete my data?

Please contact us at beltran@clickout.io to request your account,and its associated data, to be deleted from the Clickout, and associated,servers.

How can I export my data?

Please contact us at beltran@clickout.io to request your account,and its associated data, to be exported from Clickout

‍