Skip to content

Latest commit

 

History

History
183 lines (95 loc) · 17.5 KB

privacy_policy.md

File metadata and controls

183 lines (95 loc) · 17.5 KB

Privacy Policy

Last updated: February 7, 2020

Jelly Labs PBC ("Jelly", us", "we", or "our") operates the www.jellypbc.com website (the "Service").

This Privacy Policy informs you of our policies regarding the collection, use and disclosure of information, including Personal Information (defined below) about you, when you use our Service. We will not use or share your Personal Information with anyone except as described in this Privacy Policy.

We use your Personal Information for providing and improving the Service and as otherwise described in this Privacy Policy. By using the Service, you agree to the collection, use and disclosure of information in accordance with this Privacy Policy. Unless otherwise defined in this Privacy Policy, capitalized terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Information Collection

While using our Service, we may ask you to provide us with certain information that can be used to contact or identify you. This information may include, but is not limited to, your name, email address and profile photo ("Personal Information").

When you send us an email message or otherwise contact us, we may receive Personal Information about you including your name, email address, and in the contents of messages or attachments that you may send to us, as well as other information you choose to provide, and that may be associated with your communications.

Should you choose to subscribe for Personal, Team, or Enterprise Service plans, you will provide payment information, including, but not limited to, payment card number, expiration date, security code and billing address.

Should you opt-in to use the Google Contacts feature within Jelly, we will have the ability to view your contacts via the Google People API. The sole use of this data is to populate the auto-completion of your contacts when sending invitation emails. Jelly will not use this data for any other purpose.

We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics. When you access the Service by or through a mobile device, this Log Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use and other statistics.

In addition, we may use third party services that collect, monitor and analyze this Log Data to provide analytics and other data to help us increase our Service’s functionality and to help us advertise our products and services. Please consult section “Information Sharing with Third Parties” below for additional information regarding our service providers. These third party service providers may use cookies, pixel tags, web beacons or other storage technology to collect and store Log Data or information from elsewhere on the internet. They have their own privacy policies addressing how they use Log Data and we do not have access to, nor control over, third parties’ use of cookies or other tracking technologies. If you wish to opt out of the collection of such Log Data, please send us an email at the contact information below, or install a browser analytics blocker plug-in (e.g., Ghostery). See http://www.aboutads.info/choices for more information on other mechanisms for exercising your choice to opt-out.

Cookies

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and transferred to your device. We use cookies to collect information in order to improve the Services. We use cookies to gather general information about your use of the Service, the files you have designated for backup, the configuration of your computer and your computer’s interaction with the Service, and stores this information in log files. We use this information to understand traffic on and downloads from our Service, enabling us to improve the Service, provide the best online experience possible, and improve our customer service. Our third party services also use cookies as described above.

You can instruct your browser, phone and/or device to refuse all cookies or to indicate when a cookie is being sent. The Help feature on most browsers provide information on how to accept cookies, disable cookies or to notify you when receiving a new cookie.

If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.

Information Use

We collect this information, including Personal Information, for the purpose of:

  • providing the Service;

  • identifying and communicating with you, including newsletters and marketing materials, as described further below;

  • responding to your requests, including customer service inquiries;

  • processing your payments and otherwise servicing your purchase orders;

  • improving the content, products, services, and features of the Service, including to help us advertise our Service as described below in “Marketing Our Service”;

  • creating anonymized and aggregated data sets that may be used for a variety of functions, including research, internal analysis, analytics, and other functions;

  • analyzing your usage of the Service; and

  • responding to valid legal process and valid requests from government authorities.

Communications

We may contact you with newsletters and other marketing information that may be of interest to you. You may opt out of receiving any, or all, of these marketing communications from us by following the “unsubscribe” link or instructions provided in any email we send or by contacting us. Please note that we may still send you transactional or administrative messages related to the Service even after you have opted out of receiving marketing communications.

Information Sharing with Third Parties

We may share your Personal Information outside Jelly in the following limited circumstances to which you consent:

Service Providers: We work with third party service providers to perform services on our behalf related to our Service. These third party service providers include, but are not limited to Stripe, Google, and their respective affiliates. We use these third party service providers in connection with the Service’s hosting infrastructure, payment processing, logon functionality, analytics related to the Service, marketing campaigns as described below, and customer service efforts. We may share your Personal Information with such service providers in connection with the procurement of such services. Please consult section “Links to Other Sites” below and the third party’s privacy policy for additional information.

Marketing our Service: We do not use or share your information, including Personal Information, to advertise any third party’s products or services via the Service. We may use and share your Personal Information with third party service providers to market our own Service and grow our Service’s user base, such as to provide targeted marketing about our own Service via third party platforms.

Workspaces Accessible by Other Users: As further explained in our Terms and Conditions, when you submit Personal Information in a workspace that can be accessed by others, such Personal Information may be displayed to other users in the same or connected workspaces. For example, your Personal Information may be included in your notes or reminders in a workspace which can be viewed by other users collaborating with you in that workspace. Further, your email address or photo may be displayed with your workspace profile to other users collaborating with you in that workspace.

Enterprise Workspaces: Jelly will share and disclose Enterprise Content in accordance with an Enterprise’s instructions, including any applicable terms in the Subscription Agreement and an Enterprise administrator’s use of Service’s administrative functionality, and in compliance with applicable law and legal process. We may also allow an Enterprise to access the profile information of Authorized Users, including to allow such Enterprise to validate that such Authorized User is actually authorized by such Enterprise to use the Service.

Referral or Shared Content: When you request our referral services to forward or share certain content with a friend, such as an email inviting a friend to use the Service or sharing certain content from the Service with a friend.

Compliance With Law: We will disclose your Personal Information where required to do so by law or subpoena or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Service.

Sale or Merger: If we directly or indirectly undergo a business transition (including a proposed transaction), like a merger, acquisition by another company, or sale of all or part our assets, we may disclose or transfer information collected from, and about, you (including your Personal Information), to the successor organization in (or in anticipation of) the transition.

Security

The security of your Personal Information is important to us. However, please be aware that no method of transmission over the internet, or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the Personal Information we have collected from you.

International Transfer

Information collected while you use the Service, including your Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside United States and choose to provide information to us, please note that we transfer the information, including your Personal Information, to United States and process it there.

Your consent to this Privacy Policy followed by your submission of such Personal Information represents your agreement to that transfer.

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Service. Please keep in mind that information you post on public or semi-public venues, including information you share on third party social networking platforms (such as Facebook or Twitter) may also be viewable by other users of the Service and/or users of those third-party online platforms without limitation as to its use by us or by a third party. When you provide information to a third-party online platform, the information you provide may be separately collected by that third-party. The information the third-party online platform collects is subject to the third-party online platform’s privacy practices. Privacy choices you make on the third-party online platform will not apply to our use of the Information we collect directly through our Service. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of Personal Information by third parties.

Children's Privacy

We do not knowingly collect Personal Information from Children under 13. If you are a parent or guardian and you learn that your Children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child under age 13 without verifiable parental consent, we will take steps to remove that information from our servers.

California Privacy Rights

California residents that have an established business relationship with us can request a notice disclosing the categories of Personal Information we have shared with third parties during the preceding calendar year for the third parties’ direct marketing purposes. To make such a request from us, if entitled, please use the contact information listed below.

If you are under 18 years of age and a California resident using the Service, at any time you can request that we remove content you have provided or posted. Please contact us at the information below for our assistance, including to request removal of your information or content. Note that the removal of information or content may not ensure complete or comprehensive removal of that information or content posted through the Service.

Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and Service that you do not wish such operators to track certain of your online activities over time and/or across different websites. If your browser is set to “Do Not Track”, we at Jelly will attempt to honor this functionality. However, as explained in the “Information Collection” section above, our third party service providers may use their own cookies, pixel tags, web beacons or other storage technology to collect and store Log Data or information from elsewhere on the internet, and we do not have access to, nor control over, a third parties’ use of cookies or other tracking technologies.

Changes To This Privacy Policy

This Privacy Policy is effective as of the “LAST REVISED” date specified at the top of this Privacy Policy and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, and/or by placing a prominent notice on the Service.

Questions or Concerns Regarding the Privacy Policy

If you have questions or concerns regarding privacy using our Service, please contact us at: founders@jellypbc.com.


Security Practices

Last updated: February 7, 2020

We take the security of your data very seriously. Here is a quick list of our security practices:

  • We use SSL everywhere, within the data center and out.
  • Your data is encrypted at rest in our database.
  • We run 100% on the cloud, within a virtual private network that cannot be accessed via the public internet, except via our public-facing proxy servers.
  • We perform quarterly independent security audits using established security firms.
  • We will notify you within 72 hours of learning about a data breach.
  • All employees receive regular security training.
  • We are in the process of obtaining our SOC2 certificate.

GDPR

Last updated: February 7, 2020

At Jelly, we are committed to complying with GDPR. We offer several data portability and management tools and we ask for consent for data collection.

Data Processing Addendum

The terms of the data processing addendum ("Jelly DPA") available below are hereby incorporated by reference and shall apply to the extent Jelly processes any Personal Data (as defined in the Jelly DPA) that is subject to the GDPR on Customer’s behalf.

TODO: Jelly DPA.pdf

Data Portability & Management Tools

  • Import

    We currently provide tools to import from text and images from PDF. We plan to add more import options in the future, based on user feedback.

  • Export

    Jelly supports exporting. It is possible to export pages individually to markdown format by navigating to them and selecting the export option from the page settings menu.

  • Workspace deletion

    A workspace can be deleted at any time from the workspace settings menu. Upon requesting to delete a workspace, all content will immediately become inaccessible. After 30 days, the content will be deleted from our servers and can no longer be recovered.

  • Workspace settings

    We provide tools to manage other workspace settings, such as name, members, and allowed email domains from our workspace settings menu.

Consent

For European customers, we show a consent dialog during signup that explains our data collection practices. Therefore, our lawful basis for collecting personal data is consent.

We use cookies to securely identify your account and keep you signed in.

We may use analytics services to improve the product and troubleshoot customer issues.

A customer may withdraw their consent and delete their account at any time by deleting their workspaces via email request to founders@jellypbc.com.

Sub-Processors


Contact us if you have any questions:

Jelly Labs PBC founders@jellypbc.com