KEEPSOLID, INC. PRIVACY POLICY

1. SCOPE OF THIS PRIVACY POLICY

This privacy policy statement (“Privacy Policy”) describes how KeepSolid, Inc. and our affiliates (“KeepSolid,” “we,” “us,” or “our”) obtain, use, store, change, disclose, and delete our users’ (“you,” or “your”) personal data as it relates to KeepSolid’s products, services, websites, mobile and desktop applications, and marketing practices. This Privacy Policy is a part of and is incorporated into the KeepSolid, Inc. End User Agreement between KeepSolid and you. We ask that you read this Privacy Policy carefully as it contains important information on how and why we collect, store, use, and share personal information, your rights in relation to your personal information and on how to contact us in the event you have a privacy concern or complaint.

For the purposes of this Privacy Policy, the term “personal data” means any information relating to an identified or identifiable natural person. The term “personal data” does not include any information that has been anonymized, such that the natural person to which such information relates is not identifiable.

If you have any privacy or personal data concern related to any of KeepSolid’s products, services, or practices, please contact us at [email protected].

Please review our other relevant policies and agreements:

END USER AGREEMENT

Certain KeepSolid products and services have the following additional Privacy Policy Addenda, which cover our privacy practices regarding such products and services:

KEEPSOLID SIGN ADDENDUM

2. WHAT PERSONAL DATA WE COLLECT AND HOW WE COLLECT IT

IMPORTANT:YOUR FAILURE TO PROVIDE CERTAIN PERSONAL DATA MAY MAKE OUR WEBSITES AND APPLICATIONS OPERATE NOT AS INTENDED OR NOT OPERATE AT ALL FOR YOU. YOUR FAILURE TO PROVIDE CERTAIN PERSONAL DATA MAY ALSO MAKE IT IMPOSSIBLE FOR US TO PROVIDE SOME OF OUR PRODUCTS AND SERVICES TO YOU, BECAUSE OUR PRODUCTS AND SERVICES REQUIRE CERTAIN MINIMUM PERSONAL DATA IN ORDER TO OPERATE AS WE INTEND.

  1. PERSONAL DATA THAT YOU PROVIDE

    Upon your registration for and use of KeepSolid’s products and services, we collect certain personal data directly from you, in each case only if applicable, including the following:

    1. First and last name (either through the registration field or through your social media login);
    2. Company name;
    3. Email address;
    4. Country;
    5. Username and password (in a “hashed” format);
    6. (Certain products only) Public and private keys (in a “hashed” format);
    7. (Certain products only) User uploaded document content and preview;
    8. Team members and their contact information;
    9. Other profile information that you choose to provide to us; and
    10. Any other information that you choose to provide to us by completing a web form, sending to us an email, online chat, forum postings, and any other similar means.
  2. PERSONAL DATA THAT WE COLLECT AUTOMATICALLY

    Upon your use of a KeepSolid’s website and activation and/or use of a KeepSolid app, we collect certain personal data from you, in each case only if applicable, including the following:

    1. IP address;
    2. Browser type and operating system;
    3. Device name, code, manufacturer, and language;
    4. Time zone, connection type, WiFi network name;
    5. (Certain products only) Total amount of web traffic for each session and session dates;
    6. Number of your devices using KeepSolid’s products and services;
    7. Other data collected in accordance with our Cookies Policy; and
    8. KeepSolid website/app usage, including version used, activation date, and updates installed.
  3. PERSONAL DATA THAT WE COLLECT FROM OTHER SOURCES

    We may also collect personal data, such as names and contact information, from third parties, such as marketing, research, sales lead generator companies, social networks, as well as from any publicly-accessible sources. We also collect your payment history regarding our products and services (but not your payment information) from third-party payment processors, such as Google, Apple, PayPal, Amazon, Stripe, and Paymentwall.

  4. KEEPSOLID SIGN

    When you use KeepSolid Sign, we collect the following additional personal data from you and from other sources as it relates to documents uploaded and signed using KeepSolid Sign, including:

    1. Document content and preview;
    2. Keys used to encrypt documents and related digital certificates;
    3. Date and time that you take certain actions, such as logging in/out, and viewing and signing the documents;
    4. IP Address, browser and device information, location information when used to take an action on a document;
    5. Identification information of the signers of a document, to the extent such settings are available and utilized by the creator of the document; and
    6. Signature and initials.

We may obtain your personal data from other users of KeepSolid Sign. For example, other users of KeepSolid Sign provide us with your name and email address as a recipient of a KeepSolid Sign document. We may also collect identification information about you provided by other users of KeepSolid Sign to verify the identity of the individual accessing a KeepSolid Sign document.

3. HOW WE USE PERSONAL DATA

We use your personal data on the following legal bases, and for the following purposes:

  1. Based on your consent, including:
    1. Contacting you by any means with offers and other marketing regarding KeepSolid’s products and services;
    2. Accessing your device information relating to your use of KeepSolid’s websites and applications, except when we use this personal data based on other legal bases; and
    3. Analyzing, personalizing, and improving our products, services, and marketing.
  2. For the performance of a contract, or in order to take steps prior to entering into a contract, including:
    1. To process an order you have made and to provide you with our products and services for which you paid or which you receive in a free trial;
    2. Carry out or exercise our rights and obligations arising from any orders;
    3. Accepting, crediting, and tracking payments and any failure to pay related to your use of KeepSolid’s products and services; and
    4. Communicating with you and providing you with support and troubleshooting services related to KeepSolid’s products and services.
  3. For compliance with our legal obligations, including:
    1. Carry out or exercise our rights and obligations arising from any orders; and
    2. In the process of litigation and regulatory investigations, when appropriate or necessary.
  4. For the purposes of our legitimate interests, or the legitimate interests of our other users and other third parties, including:
    1. To process an order you have made and to provide you with our products and services for which you paid or which you receive in a free trial;
    2. Analyzing, personalizing, and improving our products, services, and marketing, unless our actions in this regard require our specific consent;
    3. Discovering issues in our products, services, websites, and applications;
    4. Detecting and preventing fraud, illegal activity, and any other activity that infringes upon the legal rights of KeepSolid, our other users, or other third parties;
    5. Carry out or exercise our rights and obligations arising from any orders; and
    6. In the process of litigation and regulatory investigations, when appropriate or necessary.

4. WHEN AND WHY WE SHARE PERSONAL DATA

KeepSolid does not sell or rent your personal data to any third parties without your consent. We will request and obtain your consent prior to selling or renting your personal data to any third parties. We do, however, need to share your personal data to run our everyday business. We share your personal data with our affiliates and third-party service providers for everyday business purposes, including to:

  1. Store, transfer, and manage your personal data;
  2. Process your purchases of our products and services;
  3. Manage and service your KeepSolid account;
  4. Detect and prevent fraud, illegal activity, and any other activity that infringes upon the legal rights of KeepSolid, our other users, or other third parties; and
  5. Sell and market our products and services.

We may share your personal data when appropriate or necessary to respond to legal process, including lawful:

  1. subpoenas from government authorities and/or private entities;
  2. court orders; and
  3. interrogatories, depositions, and other discovery processes in the context of litigation and regulatory investigations.

We may share your personal data if we are, or propose to be, acquired by or merge with another entity or entities, or if we sell, or propose to sell, all or substantially all of our assets to another entity or entities, in which case we would share your personal data with such entity or entities.

We make personal data regarding a specific Document available to users of KeepSolid Sign who are listed as Participants on such Document. We require this in order to permit our users to effectively use KeepSolid Sign.

5. YOUR RIGHTS REGARDING YOUR PERSONAL DATA

You can limit your sharing and our use of your personal data when it is based on your consent. For example, you can control our use of cookies by using the settings of your internet browser. Please be aware that your limit on our use of personal data may cause our websites and applications to appear and function not as intended. You can also limit our use of your personal data for our marketing purposes. Click here to set your marketing preferences.

  1. If the laws of some countries apply to you, you may have the right to do the following:
  2. Request access to your personal data;
  3. Request correction of your personal data or supplementation of your personal data for completeness;
  4. Request erasure of your personal data under certain circumstances, such as when the personal data is processed based on your consent;
  5. Request restriction of processing of your personal data under certain circumstances;
  6. Request transfer of your personal data to another entity under certain circumstances, such as when the personal data is processed based on your consent and the processing of your personal data is carried out by automated means;
  7. Withdraw consent to the processing of your personal data where the processing is based on your consent, without affecting the lawfulness of processing based on consent before its withdrawal; and
  8. File a complaint with your local supervisory authority.

RIGHT TO OBJECT

If the laws of some countries apply to you, you may have the “right to object” to our processing of your personal data when such processing is based on our, or a third party’s, legitimate interests. We will stop processing your personal data, unless:

  1. We demonstrate compelling legitimate grounds for the processing which overrides your interests, rights and freedoms; or
  2. Such processing is necessary for the establishment, exercise or defense of legal claims.

If you object, we will stop processing your personal data for direct marketing purposes.

In order to request to exercise any of your rights, we may require you to provide us with detailed information about your request. Your rights are also subject to certain other limitations contained in the applicable law.

6. WHERE AND HOW WE STORE AND TRANSFER PERSONAL DATA

We use appropriate physical, electronic, technical, and organizational measures to secure and protect your personal data to ensure a level of security appropriate to the risk. You should understand, however, that no safeguards are guaranteed to prevent unauthorized disclosure and/or use of personal data. Because of that, we cannot guarantee or warrant that your personal data will never be exposed. We use third-party service providers globally to store and transfer personal data. We work with our third-party service providers to put in place adequate protections to ensure the security of personal data when it is stored and transferred.

7. HOW LONG WE STORE PERSONAL DATA

We do not store certain personal data (i.e. Section 2(B)(i-iv)) that we collect automatically. We store some of your personal data that we collect from you and from other sources as long as you remain a user of our products and services. We retain personal data necessary for compliance with our legal obligations and contractual performance for the longer of: (i) the required time period under applicable law; (ii) or seven years.

8. COPPA

The Children’s Online Privacy Protection Act (“COPPA”) is a United States federal law enacted to give parents increased control over what information is collected from their children online and how such information is used. The law applies to websites and services directed to, and which knowingly collect information from, children under the age of 13. Our products and services are not directed to children under the age of 13, nor do we knowingly collect information from children under the age of 13. If you are under the age of 13, please do not provide personal information of any kind whatsoever to KeepSolid. If a child provides us with personal information, a parent or legal guardian of that child may contact us to obtain that information and/or delete it from our records by sending an email to [email protected].

9. CHANGES TO THIS PRIVACY POLICY

We may make changes to this Privacy Policy (and/or other applicable policies and Addenda) as the applicable laws, relevant technologies, and our data processing practices change. We will notify you of changes to this Privacy Policy (and/or other applicable policies and Addenda) by posting the updated policy on our website and in our applications and other products and services. The changes to this Privacy Policy (and/or other applicable policies and Addenda) shall become effective upon such posting (as indicated by the date following “Last Updated:” at the top of this Privacy Policy and/or other applicable policies and Addenda), or as otherwise required by applicable law. We encourage you to review this Privacy Policy (and other applicable policies and Addenda) on a periodic basis.