Privacy Policy

Last Updated: November 13, 2020

Data Protection Information

Introduction
Your privacy is important to us at Cloudleaf which is why we are happy to maintain stringent personal data protection measures to ensure you do not receive unsolicited contact from either Cloudleaf or any third party.

In accordance with new privacy legislation we are making a continuous effort to update and improve this privacy policy. This includes changing the way data are used, improving the way consent is secured, and making it easier for you to control and amend your personal information.

This privacy policy is intended to give you confidence in the privacy and security of the personal information we obtain from you. So, whether you visit our blog, subscribe to our newsletter, or become one of our clients, we promise that your data will remain confidential, and your experience with Cloudleaf will be nothing but enjoyable!

Contact Information
Cloudleaf, Inc. operates this website.
Please contact us at dataprivacy@cloudleaf.io

Or via mail at:

Cloudleaf
Data Privacy
2150 North First Street
4th Floor
San Jose, CA. 95131

This Privacy Notice applies to information we collect when you:

  • interact with our websites, including downloading resource information (“Website”);
  • use our online products and services including customer account management]applications, the Cloudleaf Access or SSNI Portal, contact links, and web forms (“Services”); and
  • register or attend any of our events (“Events”) or download collateral.

This Privacy Notice may not apply to information processed by Cloudleaf if such processing is governed by separate agreements between Cloudleaf and its Customers. Our SaaS services are covered by customer contracts.

Our Commitment to Security
We have put in place appropriate administrative, technical, and physical safeguards to help prevent unauthorized access, maintain data security and properly use the information we collect from and about you. However, no system can be completely secure, and we do not guarantee that unauthorized disclosures and access will not happen. Although we take appropriate measures to safeguard against unauthorized disclosures of information, we cannot assure you that your personal information or other information will never be disclosed in a manner that is inconsistent with this Privacy Policy.

Our website sessions and databases are encrypted end-to-end and protected as outlined in this Privacy Policy.

Children
Websites, Services, and Events are intended for use by persons age 16 or older. Cloudleaf does not seek to collect personally identifiable information about children under the age of 16. No information should be submitted or posted on Cloudleaf’s websites by users under the age of 16. Should we become aware we have inadvertently collected information, Cloudleaf’s policy is to delete it immediately.

Information You Provide to Us
We may collect data, including personal information, that you provide directly to us via the Website, Events, or Services. For example, we collect information when you:

  • Request information about our services, offerings, or research and reports;
  • Register online for an account;
  • Place an order for our Services;
  • Register for our Events; or
  • Request customer support.

The types of personal information we may collect include:

  • Name;
  • Position;
  • Username;
  • Email address;
  • Postal address;
  • Professional experience as submitted to our career’s portal;
  • Phone number;
  • IP Address; and
  • Any other information you choose to provide within an email, request, or otherwise.

Data processing by visiting our website
When you visit our website, it is technically necessary that data are transmitted to our web server via your internet browser. The following data are recorded during a connection for communication between your internet browser and our web server:

Cloudleaf.com Domain

  • The date and time of the request
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • The web browser, system language, operating system and device type used
  • IP address of the requesting computer
  • The amount of data transferred

We collect the listed data to ensure a smooth connection to the website and to enable a comfortable use of our website by the users. In addition, the log file serves the purpose of evaluating system security and stability, as well as providing administrative functions.

Legal Basis for Processing Personal Information
We will normally collect personal information from you, with your consent, where the processing is in our business interests and not overridden by your data protection interests or fundamental rights and freedoms. Typically, our business interests include: improving, maintaining, providing, and enhancing our technology, products, content, and services; ensuring the security of the Services; and conducting marketing activities.

If you have signed up for the Services on your own behalf, we may need your personal information to perform a contract with you. In some limited cases, we may also have a legal obligation to collect personal information from you.

Where required by law, we will collect your personal information only where we have your consent to do so.

Information We Collect Automatically
When you use our Websites and Services, we may collect Log and Device information automatically.

  • Log Information: We may collect log information about your internet use, including the type of browser you use, access times, pages viewed, your IP address, and the page you visited before navigating to our Services.
  • Device Information: We may collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers, and mobile network information.

Contact via contact form or via e-mail
If you send us enquiries via contact form or e-mail, your details from the enquiry form or e-mail, including the contact data you have provided there, will be stored for the purpose of processing the enquiry and following-up questions. You are required to provide your name and an e-mail address to contact us. Your company name is optional. Under no circumstances will we pass on this data without your consent.

Information We Collect from Other Sources
Referral Information: We may collect personal information about a person whom you choose to refer to Cloudleaf. In doing so, you represent that you have the permission of that person to share such information with Cloudleaf.

We may also obtain information from other sources. For example, we may collect personal information about you from third parties, including industry lead generators, event coordinators, and publicly available sources.

If Cloudleaf obtains personal data from a source other than the data subject, our first communication to the data subject will include the necessary disclosures. Email will be the first communication method and will include a link to the privacy policy to ensure the necessary disclosures are provided at the time of our first communication with the data subject.

Use of Information
We may combine the information we collect about you and use this information for various purposes, including to:

  • Deliver the Services you request and process related transactions;
  • Provide, maintain, and improve our online products and services;
  • Send you technical notices, updates, security alerts, and support messages;
  • Respond to your comments or questions to provide customer service;
  • Communicate with you about products, services, offers, and events offered by Cloudleaf;
  • Monitor and analyze trends, usage, and activities in connection with products and services;
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities;
  • Personalize and improve the Events, Websites, Services and content offered; and
  • Carry out any other purpose described to you at the time the information was collected.
  • Use and disclose information as required by law

Cloudleaf does not sell personal information, ever.

Sharing of Information
We do not rent or sell your information to third-party advertisers for their own marketing purposes. We may share information about you as follows or as otherwise described in this Privacy Notice:

  • With vendors, consultants, and other service providers who need access to such information to carry out work on our behalf in support of the purposes described above;
  • In response to a request for information, if we believe disclosure is in accordance with, or required by, any applicable law, regulation, or legal process, including in connection with lawful requests by law enforcement, national security, or other public authorities;
  • If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property, and safety of Cloudleaf or others;
  • In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company;
  • Between and among Cloudleaf and our current and future parents, affiliates, subsidiaries, and other companies worldwide under common control and ownership; and with your consent or at your direction.

Security and Retention
Cloudleaf takes reasonable physical, technical, and administrative measures and contractually requires our suppliers to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. Since the Internet is not completely secure, we cannot warrant or ensure the security of personal information you provide.

We will retain your personal information as needed to fulfill the purposes for which it was collected. We will retain and use your personal information as necessary to comply with our business requirements, legal obligations, resolve disputes, protect our assets, and enforce our agreements.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we collect or process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Once that period of time has elapsed, the, the corresponding data is routinely deleted. If data is necessary for contract fulfilment or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if it is no longer necessary for these purposes or if you make use of your right of revocation or objection.

Managing Your Data
You have the right to (1) request a copy of the personal information Cloudleaf holds about you, (2) correct any inaccuracies within such data, or (3) delete the data. You may address such requests via dataprivacy@cloudleaf.io Cloudleaf will use reasonable efforts to supply, correct, or delete information that we hold about you in accordance with applicable laws.

Please note that we may still use aggregated and de-identified personal information that does not identify you or any individual; Cloudleaf may also retain information as needed in order to comply with legal obligations and resolve disputes.

Secondary Use of Data
Cloudleaf does not engage in secondary processing and only processes personal data for specified and legitimate purposes. Cloudleaf does not use collected data for a secondary purpose that is incompatible with the purpose for which it was collected.

Automated Processing
Cloudleaf does not make decisions about individuals based solely on automated processing (i.e., without human involvement) which have a legal or similarly significant effect on them.

Data Subject Rights
Your rights
You have the following data rights as listed below. Cloudleaf is committed to providing you choices and control over data processing. In this section we list different ways of influencing data collection and processing.

Right to access, rectification, erasure, restriction, to object and to data portability
You have the right to check what kind of personal data has been collected about you. Upon your request we will modify, remove or supplement any incorrect, unnecessary, incomplete or outdated personal data. You may also have a right to restrict the processing of your personal data or when the processing is based on our legitimate interests, to object to the processing on grounds relating to your particular situation. If your personal data are being processed automatically based on your consent or in connection with a contract between you and us, you may request your personal data to be provided in a structured, commonly used and machine-readable format and your personal data to be transferred to another data controller, when technically feasible.

Right to withdraw consent
If the processing of your personal data is based on your consent, you have the right to withdraw your consent to such processing at any time.

If there is another processor involved, we will follow-up that the processor to make sure the information is no longer processed. If Cloudleaf receives a valid objection to processing for direct marketing purposes, Cloudleaf will no longer process for these purposes.

Opt-out from direct marketing communications
You have the right to prevent your information from being used for direct sales or marketing purposes, and for electronic direct marketing purposes. You can opt-out from receiving marketing material by emailing dataprivacy@Cloudleaf.io or in the event of a marketing email, you can click the unsubscribe link.

Rights of Individuals to Access Personal Information
A copy of your personal information will be made available upon your request. Please contact Cloudleaf at dataprivacy@cloudleaf.io

Right of objection
You can exercise your rights of access and request corrections, suppression, or deactivations with applicable data protection laws. If you need additional assistance, or help accessing, correcting, suppressing, or deleting your personal information, please submit a request via email at dataprivacy@cloudleaf.io

We make good faith efforts to honor reasonable requests to access, correct, suppress, or delete your data. We will respond to your request within 30 days or as otherwise mandated by applicable data protection laws, in plain clear language. If we are unable to honor your good faith request, we will provide you with an explanation, free of charge. Under certain circumstances, you have rights under applicable data protection laws in relation to the access, correction, suppression, or deletion of your personal information. Should you wish to exercise those rights, please submit a request via email at dataprivacy@cloudleaf.io

However, Cloudleaf may, at its sole discretion, 1) refuse to fulfil; or 2) charge a reasonable fee for fulfilling of several similar consecutive requests or requests that are manifestly unfounded or excessive. Cloudleaf is also entitled to decline requests on statutory grounds.

Please note that we may need to request specific information from you to confirm your identity and right to access your personal information. This is a security measure to ensure personal information is not disclosed to any person or third party who does not have a right to receive it. To efficiently process your request, we may contact you for further information. With your permission, we may also share your personal information with Cloudleaf business partners or vendors and, they may send you information about products or services that may be of interest to you. To opt-out of receiving information from third parties for their marketing purposes, please submit a request via email at dataprivacy@cloudleaf.io

Cloudleaf offers individuals the ability to limit the use and disclosure of personal information
If you wish to limit the use and disclosure of your personal information, please contact us at the following email:

Complaints
If you wish to make a complaint about how Cloudleaf is using your personal information, exercise any of the rights set out above, or if you have any questions or comments about privacy issues, please contact us at dataprivacy@cloudleaf.io.

Security of Your Personal Information
We intend to protect the personal information entrusted to us and treat it securely in accordance with this Privacy Policy. Cloudleaf implements physical, administrative, and technical safeguards designed to protect your personal information from unauthorized access, use, or disclosure. We contractually require that our suppliers protect such information from unauthorized access, use, and disclosure. Notwithstanding the measures Cloudleaf takes to protect your personal information, it does not guarantee the security of any personal information you provide to us or third parties.

Independent Recourse Mechanism for Privacy Shield Complaints
Cloudleaf commits to resolve complaints about our collection or use of your personal information. Please contact Cloudleaf at dataprivacy@cloudleaf.io

Subject to Investigatory and Regulatory Powers of the FTC
Cloudleaf is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

Liability for onward transfers to third parties
Cloudleaf has liability for onward transfers to third parties unless we can prove we were not a party to the events giving rise to the damages.

Cookies and Tracking Analytics
What Are Cookies
Cookies are small text files stored on your hard drive or in device memory to collect internet log and visitor behavior information. Web beacons are electronic images that may be used in our Services or emails to help deliver cookies, count visits, and understand usage and campaign effectiveness.

How Do We Use Cookies
Cloudleaf uses cookies to improve your experience on our website, including:

  • Keeping you signed in;
  • Understanding how you use our website; and
  • Saving a language or local website preference.

What Types Of Cookies Do We Use
Cloudleaf utilizes the following types of cookies:

  • Strictly Necessary Cookies;
  • Performance Cookies;
  • Functional Cookies; and
  • Targeting Cookies.

How To Manage Cookies
You can opt-out of each cookie category (except strictly necessary cookies) by clicking on the “Cookies Settings” button here or the link at the bottom of the page.

Cookies Settings
Please note that while this Privacy Notice covers all Websites and Services, the cookie customization is unique to each of our global websites and applies only to the applicable website.

Social Media Links
Social networks (e.g. Facebook, Twitter and Linkedin) are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link you will be redirected to the page of the respective provider. Only after forwarding is user information transmitted to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective data protection regulations of the providers you use.

Advertising and Analytics Services Provided by Others
We may utilize web analytics services to improve web experience or serve personalized advertisements on our behalf across the Internet and in applications. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of the Website and Services, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in apps, links clicked, and website conversion information. This information may be used by Cloudleaf to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity. For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit https://optout.aboutads.info. Your device may also include a feature that allows you to opt out of having certain information collected through apps used for behavioral advertising purposes.

“Do Not Track”
Some laws require that Cloudleaf acknowledge how we respond to web browser Do Not Track settings. Cloudleaf adheres to the “Do Not Track” settings in your browser and does not monitor or track your browsing history.

Links To Other Web Sites
This Privacy Notice does not cover links within this site which link to other websites. If you have questions about how a site uses your information, please check that site’s privacy statement.

Additional Information for California Residents
The sections below provide information organized in accordance with the California Consumer Privacy Act (“CCPA”) for residents of California about how we handle certain personal information we have collected over the past 3 years.

Categories of Personal Information. This Privacy Policy discloses the categories of personal information that we collect, use, and disclose in order to operate our business over the past 12 months.

Collect. The section above entitled Collecting Your Personal Information discloses the categories of personal information that we collect.

Use. The section above entitled Uses of Your Personal Information discloses how we use your personal information.

Disclose. The sections above entitled the types of Third Parties to which Cloudleaf discloses personal information and the purposes for doing so and Disclosure of Personal Information In Response To Lawful Requests By Public Authorities discloses how we may share your personal information.

Cloudleaf does not sell your personal information to third parties. Cloudleaf may share your personal information with third parties and third parties may collect your personal information as described above in the Uses of Your Personal Information. In addition, as described in the section Use of Cookies and Web Technologies, we may work with third parties who may use cookies to provide personalized content to you.

Since Cloudleaf sells enterprise products to businesses, and not directly to consumers, we do not knowingly collect any information from children.

Requests for Deletion, Copy and Right to Know Your Information. California consumers have the right to make the following requests, which we endeavor to honor from non-California residents as well:

Deletion. You have the right to request deletion of personal information that we have collected about you.

Copy and Right to Know. You have the right to request a copy of the specific pieces of personal information that we have collected about you over the past 12 months, including the categories of information, sources, and purposes of collection, as well as categories of third parties we have shared it with.

Designated Agent. You may designate an agent to make a request on your behalf. That agent must have access to your account in order for us to verify the request.

You may submit deletion, copy and right to know requests by emailing us at dataprivacy@cloudleaf.io

Non-Discrimination. Cloudleaf will not discriminate against you, including by denying or providing a different level or quality of goods or services should you choose to exercise your options under the CCPA.

Your California Privacy Rights under California’s Shine-the-Light Law. California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the types of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit your request in an email to dataprivacy@cloudleaf.io Cloudleaf also offers an opt-out option as stated above.

Updating the Privacy Notice
We reserve the right to update this Privacy Notice as we regularly need to develop our business processes, related policies, and follow up the changing personal data legislation. We encourage you to review this Privacy Notice from time to time for any amendments. Additional questions can be sent by email to dataprivacy@cloudleaf.io or mail:

Cloudleaf, Inc.
Data Privacy Council
2150 North First Street
4th Floor
San Jose, CA 95131