Effective Date: June 9, 2019
At Olak, we believe that you should be in complete control of your data. You decide whom you want to share your data with and for how long. We also believe the lesser we know about you, the better. After all, that is one of the best defenses against increasing data breaches and theft. Here we describe how we collect, use and safeguard your personal information.
2) GENERAL INFORMATION:
We are committed to the protection of your privacy while you use our Services.
The Party responsible for the processing of your personal data is Olak, Inc. The Data Controller may be contacted at firstname.lastname@example.org.
The Data Controller and operator of the Services are one and the same.
Please be advised the data processing activities take place in the United States, outside the European Economic Area. Data may also be transferred to companies within the United States, but will only be done so in a manner that complies with the EU's General Data Protection Regulation or GDPR. The location where the data processing activities take place is as follows:
5201 Great America Pkwy, Suite 320
Santa Clara CA 95054
5) MODIFICATIONS AND REVISIONS:
6) THE PERSONAL DATA WE RECEIVE FROM YOU:
Depending on how you use our Services, you will be subject to different types of Personal Data collected and different manners of collection:
First and last name, email address, unique username, profile picture
Personal Data may be asked for in relation to:
Any additional Personal Data including your photos, documents are collected in encrypted form. If You have not explicitly opted in for 'Easy Password Recovery', these keys exist only in your possession and we have no ways of decrypting or accessing this data.
However, if you opt in for 'Easy Password Recovery', we would end up collecting these keys in order to let You recover Your Account and Personal Data if you forget Your password.
You can also share Your Personal Data with other users if you choose. Shared Personal Data is encrypted in a way that can only be decrypted using receiving user's cryptographic keys.
However, if You share Your Personal Data with enterprise or business user, it may not be in encrypted form. This is to allow enterprise or business user to efficiently search through many user's data.
When you opt in for generating PDF forms, the Personal Data filled in the form would be temporarily uploaded to server. Once PDF is generated, we discard this Personal Data. Additionally, when you opt in for automatic detection of personal details from documents, they will temporarily be collected on server unencrypted and as soon as processing is over, they will be disposed of. These Personal Data is not retained unless you explicitly consent to let us use it for diagnosis and further improvement of the Services.
We also collect things like Personal Data size, the time each field was last updated, Personal Document size, upload time, name of the Personal Data fields being shared and usage activity. Many of them are necessary to support continuous sharing and to deliver services to you.
7) THE PERSONAL DATA WE RECEIVE AUTOMATICALLY:
Cookies: We may collect information from you through automatic tracking systems (such as information about your browsing preferences) as well as through information that you volunteer to us (such as information that you provide during a registration process or at other times while using the Services, as described above).
A cookie consists of a reduced set of data transferred to your browser from a web server and it can only be read by the server that made the transfer. This is not executable code and does not transmit viruses.
Technical cookies: Technical cookies, which can also sometimes be called HTML cookies, are used for navigation and to facilitate your access to and use of the site. They are necessary for the transmission of communications on the network or to supply services requested by you. The use of technical cookies allows the safe and efficient use of the site.
You can manage or request the general deactivation or cancelation of cookies through your browser. If you do this though, please be advised this action might slow down or prevent access to some parts of the site.
Cookies may also be retransmitted by an analytics or statistics provider to collect aggregated information on the number of users and how they visit the Services. These are also considered technical cookies when they operate as described.
Temporary session cookies are deleted automatically at the end of the browsing session - these are mostly used to identify you and ensure that you don't have to log in each time - whereas permanent cookies remain active longer than just one particular session.
Third-party cookies: We may also utilize third-party cookies, which are cookies sent by a third-party to your computer. Permanent cookies are often third-party cookies. The majority of third-party cookies consist of tracking cookies used to identify online behavior, understand interests and then customize advertising for users.
Third-party analytical cookies may also be installed. They are sent from the domains of the aforementioned third parties external to the site. Third-party analytical cookies are used to detect information on user behavior on our Services. This place anonymously, in order to monitor the performance and improve the usability of the site. Third-party profiling cookies are used to create profiles relating to users, in order to propose advertising in line with the choices expressed by the users themselves.
Support in configuring your browser: You can manage cookie through the settings of your browser on your device. However, deleting cookies from your browser may remove the preferences you have set for these Services.
Log Data: Like most websites and mobile applications, our Services also makes use of log files which store automatic information collected during user visits. The different types of log data could be as follows:
The aforementioned information is processed in an automated form and collected in an exclusively aggregated manner in order to verify the correct functioning of the site, and for security reasons. This information will be processed according to the legitimate interests of the Data Controller.
For security purposes (spam filters, firewalls, virus detection), the automatically recorded data may also possibly include Personal Data such as IP address, which could be used, in accordance with applicable laws, in order to block attempts at damage to the Services or damage to other users, or in the case of harmful activities or crime. Such data are never used for the identification or profiling of the user, but only for the protection of the Services and our users. Such information will be treated according to the legitimate interests of the Data Controller.
8) HOW PERSONAL DATA IS STORED:
We use secure physical and digital systems to store your Personal Data when appropriate. We ensure that your Personal Data is protected against unauthorized access, disclosure, or destructions.
Please note, however, that no system involving the transmission of information via the internet, or the electronic storage of data, is completely secure. However, we take the protection and storage of your Personal Data very seriously. We take all reasonable steps to protect your Personal Data.
Personal Data is stored throughout your relationship with us. We delete your Personal Data upon request for cancelation of your account or other general request for the deletion of data.
In the event of a breach of your Personal Data, you will be notified in a reasonable time frame, but in no event later than two weeks, and we will follow all applicable laws regarding such breach.
9) PURPOSES OF PROCESSING OF PERSONAL DATA:
We primarily use your Personal Data to help us provide a better experience for you on our Services and to provide you the information you may have requested, such as use of our Services.
Information that does not identify you personally, but that may assist in providing us broad overviews of our customer base, will be used for market research or marketing efforts. Such information may include, but is not limited to, interests based on your cookies.
Personal Data that may be considering identifying may be used for the following:
10) DISCLOSURE OF PERSONAL DATA:
Although our policy is to retain very little Personal Data about you that is accessible to us, we may disclose it if we believe that it is reasonable to do so in certain cases, in our sole and exclusive discretion. Such cases may include, but are not limited to:
11) OPTING OUT OF TRANSMITTALS FROM US:
From time to time, we may send you informational or marketing communications related to our Services such as announcements or other information. If you wish to opt-out of such communications, you may contact email@example.com. You may also click the opt-out link which will be provided at the bottom of any and all such communications.
Please be advised that even though you may opt-out of such communications, you may still receive information from us that is specifically about your use of our Services or about your account with us.
By providing any Personal Data to us, or by using our Services in any manner, you have created a commercial relationship with us. As such, you agree that any email sent from us or third-party affiliates, even unsolicited email, shall specifically not be considered SPAM, as that term is legally defined.
12) MODIFYING, DELETING, AND ACCESSING YOUR INFORMATION:
If you wish to modify or delete any information we may have about you, or you wish to simply access any information we have about you, you may do so from your account settings page or by contacting us.
13) ACCEPTANCE OF RISK:
14) YOUR RIGHTS:
You have many rights in relation to your Personal Data. Specifically, your rights are as follows:
15) CONTACT INFORMATION: