Effective from the 25th of May 2018
Where we provide the Services under contract with an organisation (for example your employer) that organization controls the information processed by the Services. For more information, please see Notice to End Users.
We collect information about you in 4 ways. When you voluntarily provide it to us, when you voluntarily give us permission to obtain, when other sources provide it to us, or when you use our Services.
1) The information you provide to us:
- Personal Information: When you sign up to our Services, you provide us certain information, including your name, country, language, email address, how you intend to use our Services, or anything else you may be asked and decide to provide.
- Personal Design Assets: When you create content using our Services, you may choose to upload images, icons, fonts, videos, files, as well as add textual content.
- Business Information: Our Services can be used for business purposes. If you are authorized to create or manage an account on behalf of an organisation, you may choose to provide information related to that organisation.
- Business Brand Assets: When you manage or create content for an organisation, you may choose to upload logos, images, icons, fonts, videos, files, as well as add textual content on behalf of that organisation.
- Information you provide through our support channels: Our Services provide customer support channels, where you may choose to submit information regarding a problem you are experiencing. Whether you email us, open a support ticket, speak to one of our representatives directly or otherwise engage with our support team, you will be asked to provide contact information, a description of the problem you are experiencing, screenshots or information that would be helpful in resolving the issue.
Legal basis for processing
Other users of the Services: Other users of the Services may provide information about you. For example, we may receive your email address from a user when they provide it in order to invite you to the Services. Similarly, an administrator of an organisation may provide information they may find useful for content creation, for example, they may provide us with your name, email address and telephone number, so that a business cards can be easily created with your details.
Partners: We work with partners who provide consulting, implementation, training around the Services we offer. Some of these partners also help us to market, promote and resell our products. We receive information from these partners, such as billing information, contact information, company name, what services you purchased or may be interested in, evaluation information you have provided, events you have attended, and what country you are in.
Advertising Partners: We receive information about you and your activities on and off the Services from third-party advertising partners who provide us with information about your interest in and engagement with our Services and online advertisements.
Usage Details: Your usage details such as time, frequency, duration and pattern of use, features used and the amount of storage used will be recorded by us in order to enhance your experience of the Services and to help us provide you the best possible service.
Device Information: We also collect information about the device you’re using the Service on, including what type of device it is, what operating system you’re using, device settings, unique device identifiers, and crash data. Whether we collect some or all of this information often depends on what type of device you’re using and its settings. For example, different types of information are available depending on whether you’re using a Mac or a PC, or an iPhone or an Android phone.
We use technical measures to secure your data and in order to prevent loss of data due to errors or system failures, we also keep backup copies of data including the contents of your user account.
While we implement safeguards designed to protect your information, no security system is impenetrable and due to the inherent nature of the Internet, we cannot guarantee that data, during transmission through the Internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.
We may retain and use your personal information and data as necessary to comply with our legal obligations, resolve disputes, and enforce our rights. If you have a personal account and have requested account deletion, we will delete your information within 72 hours. If the Services are made available to you through an organisation (e.g., your employer), we retain your information as long as required by the administrator of your account. For more information, see “Notice to the End User”.
You can exercise choices regarding your information by logging into the Services and using settings available within the Services or your account as described below. For all other requests, you may contact us as provided in the Contact Us section below to request assistance.
Profile information: Access and change information in you profile at any time. If you have a personal account you can choose whether your profile is public (anyone can follow you) or private (people will have to request your permission to follow you). If your account is linked to an organisation, your profile will be public to the organisation users as specified by the company administrators as per “Notice to End Users”.
Content Privacy: If you have a personal account, you can choose if the content you create is visible only by you (and the people you choose to collaborate with), by your followers or by everybody. If the Service you are using does not offer an option to change the content privacy, the content will be private by default. If your account is linked to an organisation, the content you create on behalf of that organisation may be visible to the organisation users as specified by the company administrators even if marked as private as per “Notice to End Users”.
Content Information: You can also modify information on the content created using the platform at any time. However if your account is linked to an organisation, the content created on behalf of that organisation, the changes you make may be visible to the organisation users as specified by the company administrators as per “Notice to End Users”
Unlink your account to third-party apps: Where you have asked us to share data with third parties, for example, by installing third-party apps, you will need to contact those third-party service providers directly to have your information deleted or otherwise restricted. If you have unresolved concerns, you may have the right to complain to a data protection authority in the country where you live, where you work or where you feel your rights were infringed.
Deactivate your account: You can choose to deactivate your account at any time. You may also choose to delete all your information completely. See “The right to be forgotten” for more details.
From email notifications: You may opt out of receiving promotional communications from us by using the unsubscribe link within each email, updating your email preferences within your Service account settings menu, or by contacting us as provided below to have your contact information removed from our promotional email list or registration database. Even after you opt out from receiving promotional messages from us, you will continue to receive transactional messages from us regarding our Services. You can opt out of some notification messages in your account settings.
From organisation email notifications: You may opt out from receiving emails from organizations you have joined for businesses purposes. These emails are not triggered by us, but by the company who uses our Services.
From push notifications: You can disable push notifications from us through your device & browser settings.
From retargeting advertising: You may be able to opt out of receiving personalized advertisements from other companies who are members of the Network Advertising Initiative or who subscribe to the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising. For more information about this practice and to understand your options, please visit: aboutads.info, optout.networkadvertising.org and youronlinechoices.eu
The right to be forgotten
We have made very easy for you to delete your information. All our products feature a “delete me” button under your account settings. If you have a personal account, you can simply click delete account, and all your information will be deleted within 72 hours. If your account is linked to an organisation, we may have to request their permission first, see “Notice to the end user”.
Extracting Your information
All content created using our platform can be exported as JPEG, PNG or PDFs. Original files can simply be downloaded as is. Should you request it, we can also provide you with a CSV file with all the information we stored regarding your account.
Notice to End Users
Children’s information: The Services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact us.
Policies Changes: We may change this policy from time to time, and when we do, we will revise the updated date at the top of this page. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. If you continue to use our Services after those changes are in effect, you agree to the revised policy. If the changes are significant, we may provide more prominent notice or obtain your consent as required by law.
Links: Please note that content created and displayed through our Services may contain links to third party websites. We hereby disclaim any liability in relation to the privacy practices of other websites.
Notice to End Users
Many of our products are intended for use by organizations. Where the Services are made available to you through an organisation account (e.g. your employer, supplier or client), that organisation is the administrator of the Services and is responsible for the accounts and/or Service sites over which it has control.
If this is the case, please direct your data privacy questions to your administrator, as your use of the Services is subject to that organization’s policies. We are not responsible for the privacy or security practices of an administrator’s organization, which may be different than this policy.
Administrators are able to:
- View and disclose content you created or uploaded on the account.
- Modify and take ownership of content you created/uploaded on the account.
- Require you to reset your account password;
- Restrict, suspend or terminate your access to the Services;
- Access information in and about your account;
- Access or retain information stored as part of your account;
- Install or uninstall third-party apps or other integrations
In some cases, administrators can also:
- Restrict, suspend or terminate your account access;
- Change the email address associated with your account;
- Change your information, including profile information;
- Restrict your ability to edit, restrict, modify or delete information
Even if the Services are not currently administered to you by an organisation, if you use an email address provided by an organization (such as your work email address) to access the Services, then the owner of the domain associated with your email address (e.g. your employer) may assert administrative control over your account and use of the Services at a later date. You will be notified if this happens.
If you do not want an administrator to be able to assert control over your account or use of the Services, use your personal email address to register for or access the Services. If an administrator has not already asserted control over your account or access to the Services, you can update the email address associated with your account through your account settings in your profile. Once an administrator asserts control over your account or use of the Services, you will no longer be able to change the email address associated with your account without administrator approval.
Please contact your organization or refer to your administrator’s organizational policies for more information.