PromucFlow_constructor/app/client/public/privacy-policy.html
albinAppsmith f38415c6ab
fix: font family changes to PT root in privacy and tnc pages (#33992)
## Description

Privacy and Term & conditions pages was not using latest platform font
PT root since it was served as normal HTML files. This PR addresses that
issue.


Fixes #33427 

## Automation

/ok-to-test tags="@tag.Sanity"

### 🔍 Cypress test results
<!-- This is an auto-generated comment: Cypress test results  -->
> [!TIP]
> 🟢 🟢 🟢 All cypress tests have passed! 🎉 🎉 🎉
> Workflow run:
<https://github.com/appsmithorg/appsmith/actions/runs/9382277755>
> Commit: 75416ef2dea7c8b696ed2f880a2af8a575f37be5
> Cypress dashboard url: <a
href="https://internal.appsmith.com/app/cypress-dashboard/rundetails-65890b3c81d7400d08fa9ee5?branch=master&workflowId=9382277755&attempt=1"
target="_blank">Click here!</a>

<!-- end of auto-generated comment: Cypress test results  -->




## Communication
Should the DevRel and Marketing teams inform users about this change?
- [ ] Yes
- [x] No


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- **New Features**
- Introduced new font styling across various pages using the PT Root UI
font family for a consistent look and feel.

- **Style**
- Updated `404.html`, `privacy-policy.html`, and
`terms-and-conditions.html` to include a link to the new
`font-style.css` stylesheet.
- Removed redundant `font-family` declarations from
`privacy-policy.html` and `terms-and-conditions.html`.

- **Documentation**
- Added `licence.txt` for the PT Root UI font, detailing the SIL Open
Font License.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2024-06-05 16:21:56 +05:30

287 lines
39 KiB
HTML

<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="content-type">
<title>Appsmith | Privacy Policy</title>
<link rel="shortcut icon" href="./static/img/favicon-orange.ico">
<link rel="stylesheet" href="./font-style.css">
<style type="text/css">
.c25 {
background-color: #ffffff;
margin: 0;
color: #4c5664;
font-size: 14px;
line-height: 1.28581;
}
.container {
padding: 45px 0;
margin: 0 auto;
max-width: 940px;
}
li {
margin-bottom: 18px;
}
li.li-bullet-0:before {
font-size: 14px;
margin-left: -18pt;
white-space: nowrap;
display: inline-block;
min-width: 18pt;
}
ol {
margin: 0;
padding: 0;
}
table td,
table th {
padding: 0;
}
a {
color: #e15615;
}
a .icon {
line-height: 1.428571429;
}
a:hover .icon {
text-decoration: underline;
}
button {
outline: none;
}
h1,
h2,
h3,
h4,
h5,
h6 {
margin: 0 0 18px;
font-weight: 400;
color: #202939;
font-weight: 500;
}
p {
margin: 0 0 20px;
}
strong {
font-weight: 500;
}
.c6 {
color: #202939;
font-weight: 700;
text-decoration: none;
vertical-align: baseline;
font-size: 13pt;
font-style: normal;
}
.c33 {
color: #333333;
text-decoration: none;
vertical-align: baseline;
font-size: 12pt;
font-style: normal;
}
.c12 {
text-decoration: none;
vertical-align: baseline;
font-style: normal;
}
.c34 {
font-weight: 400;
font-size: 11pt;
}
.c21 {
font-weight: 500;
}
.c3 {
margin-bottom: 0;
}
.c23 {
display: block;
padding: 15px 0;
}
.c9 {
font-weight: 500;
display: block;
margin: 0 0 8px;
}
.c20 {
font-weight: 500;
}
</style>
</head>
<body class="c25">
<div class="container">
<h1 class="c22" id="h.suvoipl6jav5"><span class="c32">Privacy Policy of Appsmith</span></h1>
<p class="c2"><span class="c5">Appsmith collects some Personal Data from its Users.</span></p>
<p class="c24 c31"><span class="c12 c21"></span></p>
<p class="c2"><span class="c5">Users may be subject to different protection standards and broader standards may therefore apply to some. In order to learn more about the protection criteria, Users can refer to the applicability section.</span></p>
<p class="c30"><span class="c13">This document contains </span><span class="c7"><a class="c17" href="https://www.google.com/url?q=https://www.iubenda.com/privacy-policy/63628157/full-legal?preview%3Dtrue%26an%3Dno%26ifr%3Dtrue%26height%3D696%23california_info&amp;sa=D&amp;source=editors&amp;ust=1620062741316000&amp;usg=AOvVaw2vO1MUMmMNTqEw-lugs5lT">a section dedicated to Californian consumers and their privacy rights</a></span><span class="c5">.</span></p>
<p class="c2"><span class="c5">This document can be printed for reference by using the print command in the settings of any browser.</span></p>
<h2 class="c14" id="h.a9utlzsjbl6e"><span class="c6">Owner and Data Controller</span></h2>
<p class="c3"><span class="c5">Appsmith Inc.</span></p>
<p class="c3"><span class="c5">2261 Market Street #4147</span></p>
<p class="c3"><span class="c5">San Francisco CA, 94114</span></p>
<p class="c4"><span class="c13 c20">Owner contact email:</span><span class="c5">&nbsp;privacy@appsmith.com</span></p>
<h2 class="c14" id="h.egnkp6rwcrk6"><span class="c6">Types of Data collected</span></h2>
<p class="c3"><span class="c5">Among the types of Personal Data that Appsmith collects, by itself or through third parties, there are: Tracker; Usage Data; Credentials for third party integrations.</span></p>
<p class="c4"><span class="c5">Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.</span></p>
<p class="c4"><span class="c5">Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using Appsmith. Credentials are necessarily required if Users wish to avail the relevant services provided by Appsmith.</span></p>
<p class="c4"><span class="c5">Unless specified otherwise, all Data requested by Appsmith is mandatory and failure to provide this Data may make it impossible for Appsmith to provide its services. In cases where Appsmith specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.</span></p>
<p class="c4"><span class="c5">Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.</span></p>
<p class="c4"><span class="c5">Any use of Cookies &ndash; or of other tracking tools &ndash; by Appsmith or by the owners of third-party services used by Appsmith serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document.</span></p>
<p class="c4"><span class="c13">Users are responsible for any third-party Personal Data obtained, published or shared through Appsmith and confirm that they have </span><span class="c13">the third party&#39;s consent to provide the Data to the Owner</span><span class="c5">. Appsmith does not store User data processed as part of its Services. All such data is transient in nature and documented as such for each service.</span></p>
<h2 class="c14" id="h.oarq0blsfoy8"><span class="c6">Mode and place of processing the Data</span></h2>
<h3 class="c10" id="h.bu9gjmf9zeq5"><span class="c12 c9">Methods of processing</span></h3>
<p class="c2"><span class="c5">The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. All sensitive User information is encrypted within the Appsmith infrastructure.</span></p>
<p class="c2"><span class="c5">The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of Appsmith (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.</span></p>
<h3 class="c10" id="h.locz42k5l1fs"><span class="c12 c9">Legal basis of processing</span></h3>
<p class="c2"><span class="c5">The Owner may process Personal Data relating to Users if one of the following applies:</span></p>
<ul class="c11 lst-kix_t0kqo2e3iqv8-0 start">
<li class="c8 li-bullet-0"><span class="c5">Users have given their consent for one or more specific purposes. Note: Under some legislations the Owner may be allowed to process Personal Data until the User objects to such processing (&ldquo;opt-out&rdquo;), without having to rely on consent or any other of the following legal bases. This, however, does not apply, whenever the processing of Personal Data is subject to European data protection law;</span></li>
<li class="c8 li-bullet-0"><span class="c5">provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;</span></li>
<li class="c8 li-bullet-0"><span class="c5">processing is necessary for compliance with a legal obligation to which the Owner is subject;</span></li>
<li class="c8 li-bullet-0"><span class="c5">processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;</span></li>
<li class="c8 li-bullet-0"><span class="c5">processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.</span></li>
</ul>
<p class="c4"><span class="c5">In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.</span></p>
<h3 class="c10" id="h.6t3y0se9mfs7"><span class="c12 c9">Place</span></h3>
<p class="c2"><span class="c5">The Data is processed at the Owner&#39;s operating offices and in any other places where the parties involved in the processing are located.</span></p>
<p class="c2 c24"><span class="c5"></span></p>
<p class="c2"><span class="c5">Depending on the User&#39;s location, data transfers may involve transferring the User&#39;s Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.</span></p>
<p class="c4"><span class="c5">If broader protection standards are applicable, Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.</span></p>
<p class="c4 c24"><span class="c5"></span></p>
<p class="c4"><span class="c5">If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquire with the Owner using the information provided in the contact section.</span></p>
<h3 class="c10" id="h.daadm5b89imf"><span class="c12 c9">Retention time</span></h3>
<p class="c2"><span class="c5">Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.</span></p>
<p class="c4"><span class="c5">Therefore:</span></p>
<ul class="c11 lst-kix_vlc376fegpg3-0 start">
<li class="c8 li-bullet-0"><span class="c5">Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.</span></li>
<li class="c8 li-bullet-0"><span class="c5">Personal Data collected for the purposes of the Owner&rsquo;s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.</span></li>
</ul>
<p class="c4"><span class="c5">The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.</span></p>
<p class="c4 c24"><span class="c5"></span></p>
<p class="c4"><span class="c5">Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.</span></p>
<h2 class="c14" id="h.opusymf8i0zj"><span class="c6">The purposes of processing</span></h2>
<p class="c3"><span class="c5">The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Analytics, Registration and authentication and Tag Management.</span></p>
<p class="c4"><span class="c5">For specific information about the Personal Data used for each purpose, the User may refer to the section &ldquo;Detailed information on the processing of Personal Data&rdquo;.</span></p>
<h2 class="c14" id="h.20ocdwocj58c"><span class="c6">Detailed information on the processing of Personal Data</span></h2>
<p class="c3"><span class="c5">Personal Data is collected for the following purposes and using the following services:</span></p>
<ul class="c11 lst-kix_go3rf556dix5-0 start">
<li class="c15 li-bullet-0"><span class="c9">Analytics<br></span><span class="c13">The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.<br></span><span class="c20 c23">Google Analytics (Google LLC)<br></span><span class="c13">Google Analytics is a web analysis service provided by Google LLC (&ldquo;Google&rdquo;). Google utilizes the Data collected to track and examine the use of Appsmith, to prepare reports on its activities and share them with other Google services.<br>Google may use the Data collected to contextualize and personalize the ads of its own advertising network.<br>Personal Data processed: Tracker; Usage Data.<br>Place of processing: United States &ndash; </span><span class="c7"><a class="c17" href="https://www.google.com/url?q=https://policies.google.com/privacy&amp;sa=D&amp;source=editors&amp;ust=1620062741321000&amp;usg=AOvVaw0BuIrjspNtR6hPOqTza3cM">Privacy Policy</a></span><span class="c13">&nbsp;&ndash; </span><span class="c7"><a class="c17" href="https://www.google.com/url?q=https://tools.google.com/dlpage/gaoptout?hl%3Den&amp;sa=D&amp;source=editors&amp;ust=1620062741321000&amp;usg=AOvVaw2UHfess__OHpeoKyR63lvU">Opt Out</a></span><span class="c5">.<br>Category of personal information collected according to CCPA: internet information.<br>This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers.</span></li>
<li class="c15 li-bullet-0"><span class="c9">Registration and authentication<br></span><span class="c13">By registering or authenticating, Users allow Appsmith to identify them and give them access to dedicated services.<br>Depending on what is described below, third parties may provide registration and authentication services. In this case, Appsmith will be able to access some Data, stored by these third-party services, for registration or identification purposes.<br>Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to find out more, please refer to the description of each service.<br></span><span class="c23 c20">Google OAuth (Google LLC)<br></span><span class="c13">Google OAuth is a registration and authentication service provided by Google LLC and is connected to the Google network.<br>Personal Data processed: various types of Data as specified in the privacy policy of the service.<br>Place of processing: United States &ndash; </span><span class="c7"><a class="c17" href="https://www.google.com/url?q=https://policies.google.com/privacy&amp;sa=D&amp;source=editors&amp;ust=1620062741322000&amp;usg=AOvVaw2emh-O20AMTr8b4WcRmwE3">Privacy Policy</a></span><span class="c13">.<br>Category of personal information collected according to CCPA: internet information.<br>This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers.<br></span><span class="c23 c20">GitHub OAuth (GitHub Inc.)<br></span><span class="c13">GitHub OAuth is a registration and authentication service provided by GitHub Inc. and is connected to the GitHub network.<br>Personal Data processed: various types of Data as specified in the privacy policy of the service.<br>Place of processing: United States &ndash; </span><span class="c7"><a class="c17" href="https://www.google.com/url?q=https://help.github.com/en/articles/github-privacy-statement&amp;sa=D&amp;source=editors&amp;ust=1620062741322000&amp;usg=AOvVaw3a3OoyrXFVeAbK-ylrhxgj">Privacy Policy</a></span><span class="c5">.<br>Category of personal information collected according to CCPA: internet information.<br>This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers.</span></li>
<li class="c15 li-bullet-0"><span class="c9">Tag Management<br></span><span class="c13">This type of service helps the Owner to manage the tags or scripts needed on Appsmith in a centralized fashion.<br>This results in the Users&#39; Data flowing through these services, potentially resulting in the retention of this Data.<br></span><span class="c23 c20">Segment (Segment Inc.)<br></span><span class="c13">Segment is a tag management service provided by Segment.io, Inc.<br>Personal Data processed: Tracker; Usage Data.<br>Place of processing: United States &ndash; </span><span class="c7"><a class="c17" href="https://www.google.com/url?q=https://segment.com/docs/legal/privacy/&amp;sa=D&amp;source=editors&amp;ust=1620062741322000&amp;usg=AOvVaw09_UR6vZ68ex60doVjBmbq">Privacy Policy</a></span><span class="c5">.<br>Category of personal information collected according to CCPA: internet information.<br>This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers.</span></li>
</ul>
<h3 class="c29" id="h.6yxcmsespftt"><span class="c6">Limited Use Disclosure Related to Google</span></h3>
<p><span class="c13">Appsmith&rsquo;s use and transfer to any other app of information received from Google APIs will adhere to the </span><span class="c13 c28"><a class="c17" href="https://www.google.com/url?q=https://developers.google.com/terms/api-services-user-data-policy%23additional_requirements_for_specific_api_scopes&amp;sa=D&amp;source=editors&amp;ust=1620062741323000&amp;usg=AOvVaw2D6dOGNA_OQYecNjilQ3dA">Google API Services User Data Policy</a></span><span class="c13">, including the Limited Use requirements.</span></p>
<h2 class="c14" id="h.lv55vuzcs6te"><span class="c6">The rights of Users</span></h2>
<p class="c3"><span class="c5">Users may exercise certain rights regarding their Data processed by the Owner.</span></p>
<p class="c4"><span class="c5">Users entitled to broader protection standards may exercise any of the rights described below. In all other cases, Users may inquire with the Owner to find out which rights apply to them.</span></p>
<p class="c4"><span class="c5">In particular, Users have the right to do the following:</span></p>
<ul class="c11 lst-kix_i0huiho9659t-0 start">
<li class="c8 li-bullet-0"><span class="c13 c20">Withdraw their consent at any time.</span><span class="c5">&nbsp;Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.</span></li>
<li class="c8 li-bullet-0"><span class="c13 c20">Object to processing of their Data.</span><span class="c5">&nbsp;Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.</span></li>
<li class="c8 li-bullet-0"><span class="c13 c20">Access their Data.</span><span class="c5">&nbsp;Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.</span></li>
<li class="c8 li-bullet-0"><span class="c13 c20">Verify and seek rectification.</span><span class="c5">&nbsp;Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.</span></li>
<li class="c8 li-bullet-0"><span class="c13 c20">Restrict the processing of their Data.</span><span class="c5">&nbsp;Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.</span></li>
<li class="c8 li-bullet-0"><span class="c13 c20">Have their Personal Data deleted or otherwise removed.</span><span class="c5">&nbsp;Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.</span></li>
<li class="c8 li-bullet-0"><span class="c13 c20">Receive their Data and have it transferred to another controller.</span><span class="c5">&nbsp;Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User&#39;s consent, on a contract which the User is part of or on pre-contractual obligations thereof.</span></li>
<li class="c8 li-bullet-0"><span class="c13 c20">Lodge a complaint.</span><span class="c5">&nbsp;Users have the right to bring a claim before their competent data protection authority.</span></li>
</ul>
<h3 class="c10" id="h.exv90w17ieef"><span class="c12 c9">Details about the right to object to processing</span></h3>
<p class="c2"><span class="c5">Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.</span></p>
<p class="c4"><span class="c5">Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn, whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.</span></p>
<h3 class="c10" id="h.37ts0h2l4wz8"><span class="c12 c9">How to exercise these rights</span></h3>
<p class="c2"><span class="c5">Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.</span></p>
<h2 class="c14" id="h.pw4xy2au0nq7"><span class="c6">Applicability of broader protection standards</span></h2>
<p class="c3"><span class="c5">While most provisions of this document concern all Users, some provisions expressly only apply if the processing of Personal Data is subject to broader protection standards.</span></p>
<p class="c4"><span class="c5">Such broader protection standards apply when the processing:</span></p>
<ul class="c11 lst-kix_8q0h9wgenjc-0 start">
<li class="c8 li-bullet-0"><span class="c5">is performed by an Owner based within the EU;</span></li>
<li class="c8 li-bullet-0"><span class="c5">concerns the Personal Data of Users who are in the EU and is related to the offering of paid or unpaid goods or services, to such Users;</span></li>
<li class="c8 li-bullet-0"><span class="c5">concerns the Personal Data of Users who are in the EU and allows the Owner to monitor such Users&rsquo; behavior taking place in the EU.</span></li>
</ul>
<h2 class="c14" id="h.9r1bsphxhvhl"><span class="c6">Additional information about Data collection and processing</span></h2>
<h3 class="c10" id="h.tyb911gdfuu2"><span class="c12 c9">Legal action</span></h3>
<p class="c2"><span class="c5">The User&#39;s Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of Appsmith or the related Services.</span></p>
<p class="c2"><span class="c5">The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.</span></p>
<h3 class="c10" id="h.y1y4a9t0r8o8"><span class="c12 c9">Additional information about User&#39;s Personal Data</span></h3>
<p class="c2"><span class="c5">In addition to the information contained in this privacy policy, Appsmith may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.</span></p>
<h3 class="c10" id="h.vviuuchrkf9r"><span class="c12 c9">System logs and maintenance</span></h3>
<p class="c2"><span class="c5">For operation and maintenance purposes, Appsmith and any third-party services may collect files that record interaction with Appsmith (System logs) use other Personal Data (such as the IP Address) for this purpose.</span></p>
<h3 class="c10" id="h.i695du1gigab"><span class="c12 c9">Information not contained in this policy</span></h3>
<p class="c2"><span class="c5">More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.</span></p>
<h3 class="c10" id="h.h14ihjpx57ap"><span class="c12 c9">How &ldquo;Do Not Track&rdquo; requests are handled</span></h3>
<p class="c2"><span class="c5">Appsmith does not support &ldquo;Do Not Track&rdquo; requests.</span></p>
<p class="c2"><span class="c5">To determine whether any of the third-party services it uses honor the &ldquo;Do Not Track&rdquo; requests, please read their privacy policies.</span></p>
<h3 class="c10" id="h.yns0nwnnc8b6"><span class="c12 c9">Changes to this privacy policy</span></h3>
<p class="c2"><span class="c5">The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within Appsmith and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.</span></p>
<p class="c2 c24"><span class="c5"></span></p>
<p class="c2"><span class="c5">Should the changes affect processing activities performed on the basis of the User&rsquo;s consent, the Owner shall collect new consent from the User, where required.</span></p>
<h2 class="c14" id="h.gfqdz4gi5r9y"><span class="c6">Information for Californian consumers</span></h2>
<p class="c3"><span class="c5">This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running Appsmith and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as &ldquo;we&rdquo;, &ldquo;us&rdquo;, &ldquo;our&rdquo;).</span></p>
<p class="c4"><span class="c5">The provisions contained in this section apply to all Users who are consumers residing in the state of California, United States of America, according to &quot;The California Consumer Privacy Act of 2018&quot; (Users are referred to below, simply as &ldquo;you&rdquo;, &ldquo;your&rdquo;, &ldquo;yours&rdquo;), and, for such consumers, these provisions supersede any other possibly divergent or conflicting provisions contained in the privacy policy.</span></p>
<p class="c4"><span class="c5">This part of the document uses the term &ldquo;personal information&ldquo; as it is defined in The California Consumer Privacy Act (CCPA).</span></p>
<h3 class="c10" id="h.kt3hf4ia1kt8"><span class="c9 c12">Categories of personal information collected, disclosed or sold</span></h3>
<p class="c2"><span class="c13">In this section we summarize the categories of personal information that we&#39;ve collected, disclosed or sold and the purposes thereof. </span><span class="c12 c13 c20">You can read about these activities in detail in the section titled &ldquo;Detailed information on the processing of Personal Data&rdquo; within this document.</span></p>
<h4 class="c16" id="h.t6ednl1b7tt0"><span class="c0">Information we collect: the categories of personal information we collect</span></h4>
<p class="c4"><span class="c5">We have collected the following categories of personal information about you: internet information.</span></p>
<p class="c4"><span class="c5">We will not collect additional categories of personal information without notifying you.</span></p>
<h4 class="c16" id="h.7czwjv7dn8c4"><span class="c0">How we collect information: what are the sources of the personal information we collect?</span></h4>
<p class="c4"><span class="c5">We collect the above mentioned categories of personal information, either directly or indirectly, from you when you use Appsmith.</span></p>
<p class="c4"><span class="c5">For example, you directly provide your personal information when you submit requests via any forms on Appsmith. You also provide personal information indirectly when you navigate Appsmith, as personal information about you is automatically observed and collected. Finally, we may collect your personal information from third parties that work with us in connection with the Service or with the functioning of Appsmith and features thereof.</span></p>
<h4 class="c16" id="h.oyf17a1gvotu"><span class="c0">How we use the information we collect: sharing and disclosing of your personal information with third parties for a business purpose</span></h4>
<p class="c4"><span class="c5">We may disclose the personal information we collect about you to a third party for business purposes. In this case, we enter a written agreement with such a third party that requires the recipient to both keep the personal information confidential and not use it for any purpose(s) other than those necessary for the performance of the agreement.</span></p>
<p class="c4"><span class="c5">We may also disclose your personal information to third parties when you explicitly ask or authorize us to do so, in order to provide you with our Service.</span></p>
<p class="c4"><span class="c5">To find out more about the purposes of processing, please refer to the relevant section of this document.</span></p>
<h4 class="c16" id="h.39j3kbp5kv6e"><span class="c0">Sale of your personal information</span></h4>
<p class="c4"><span class="c13">For our purposes, the word &ldquo;sale&rdquo; means any &ldquo;selling, renting, releasing, disclosing, disseminating, making available, transferring or otherwise communicating orally, in writing, or by electronic means, a consumer&#39;s personal information by the business to </span><span class="c13 c20">another business or a third party, for monetary or other valuable consideration</span><span class="c5">&rdquo;.</span></p>
<p class="c4"><span class="c5">This means that, for example, a sale can happen whenever an application runs ads, or makes statistical analyses on the traffic or views, or simply because it uses tools such as social network plugins and the like.</span></p>
<h4 class="c16" id="h.1760565afo10"><span class="c0">Your right to opt out of the sale of personal information</span></h4>
<p class="c4"><span class="c5">You have the right to opt out of the sale of your personal information. This means that whenever you request us to stop selling your data, we will abide by your request.</span></p>
<p class="c4"><span class="c5">Such requests can be made freely, at any time, without submitting any verifiable request, simply by following the instructions below.</span></p>
<h4 class="c16" id="h.7snd6bv4xedd"><span class="c0">Instructions to opt out of the sale of personal information</span></h4>
<p class="c4"><span class="c5">If you&rsquo;d like to know more, or exercise your right to opt out in regard to all the sales carried out by Appsmith, both online and offline, you can contact us for further information using the contact details provided in this document.</span></p>
<h4 class="c16" id="h.vj1nj21d4nat"><span class="c0">What are the purposes for which we use your personal information?</span></h4>
<p class="c4"><span class="c5">We may use your personal information to allow the operational functioning of Appsmith and features thereof (&ldquo;business purposes&rdquo;). In such cases, your personal information will be processed in a fashion necessary and proportionate to the business purpose for which it was collected, and strictly within the limits of compatible operational purposes.</span></p>
<p class="c4"><span class="c5">We may also use your personal information for other reasons such as for commercial purposes (as indicated within the section &ldquo;Detailed information on the processing of Personal Data&rdquo; within this document), as well as for complying with the law and defending our rights before the competent authorities where our rights and interests are threatened or we suffer an actual damage.</span></p>
<p class="c4"><span class="c5">We will not use your personal information for different, unrelated, or incompatible purposes without notifying you.</span></p>
<h3 class="c10" id="h.p9gri18wizun"><span class="c12 c9">Your California privacy rights and how to exercise them</span></h3>
<h4 class="c16" id="h.u2onyj3g8ha8"><span class="c0">The right to know and to portability</span></h4>
<p class="c4"><span class="c5">You have the right to request that we disclose to you:</span></p>
<ul class="c11 lst-kix_yps5gi9ubern-0 start">
<li class="c8 li-bullet-0"><span class="c5">the categories and sources of the personal information that we collect about you, the purposes for which we use your information and with whom such information is shared;</span></li>
<li class="c8 li-bullet-0"><span class="c5">in case of sale of personal information or disclosure for a business purpose, two separate lists where we disclose:</span></li>
</ul>
<ul class="c11 lst-kix_yps5gi9ubern-1 start">
<li class="c19 li-bullet-0"><span class="c5">for sales, the personal information categories purchased by each category of recipient; and</span></li>
<li class="c19 li-bullet-0"><span class="c5">for disclosures for a business purpose, the personal information categories obtained by each category of recipient.</span></li>
</ul>
<p class="c4"><span class="c5">The disclosure described above will be limited to the personal information collected or used over the past 12 months.</span></p>
<p class="c4"><span class="c5">If we deliver our response electronically, the information enclosed will be &quot;portable&quot;, i.e. delivered in an easily usable format to enable you to transmit the information to another entity without hindrance &ndash; provided that this is technically feasible.</span></p>
<h4 class="c16" id="h.4zq9q2riagvh"><span class="c0">The right to request the deletion of your personal information</span></h4>
<p class="c4"><span class="c5">You have the right to request that we delete any of your personal information, subject to exceptions set forth by the law (such as, including but not limited to, where the information is used to identify and repair errors on Appsmith, to detect security incidents and protect against fraudulent or illegal activities, to exercise certain rights etc.).</span></p>
<p class="c4"><span class="c5">If no legal exception applies, as a result of exercising your right, we will delete your personal information and direct any of our service providers to do so.</span></p>
<h4 class="c16" id="h.ycielz9ppcvp"><span class="c0">How to exercise your rights</span></h4>
<p class="c4"><span class="c5">To exercise the rights described above, you need to submit your verifiable request to us by contacting us via the details provided in this document.</span></p>
<p class="c4"><span class="c5">For us to respond to your request, it&rsquo;s necessary that we know who you are. Therefore, you can only exercise the above rights by making a verifiable request which must:</span></p>
<ul class="c11 lst-kix_2wxtqknvkcsj-0 start">
<li class="c8 li-bullet-0"><span class="c5">provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative;</span></li>
<li class="c8 li-bullet-0"><span class="c5">describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.</span></li>
</ul>
<p class="c4"><span class="c5">We will not respond to any request if we are unable to verify your identity and therefore confirm the personal information in our possession actually relates to you.</span></p>
<p class="c4"><span class="c5">If you cannot personally submit a verifiable request, you can authorize a person registered with the California Secretary of State to act on your behalf.</span></p>
<p class="c4"><span class="c5">If you are an adult, you can make a verifiable request on behalf of a minor under your parental authority.</span></p>
<p class="c4"><span class="c5">You can submit a maximum number of 2 requests over a period of 12 months.</span></p>
<h4 class="c16" id="h.5pjylyrknh7r"><span class="c0">How and when we are expected to handle your request</span></h4>
<p class="c4"><span class="c5">We will confirm receipt of your verifiable request within 10 days and provide information about how we will process your request.</span></p>
<p class="c4"><span class="c5">We will respond to your request within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.</span></p>
<p class="c4"><span class="c5">Our disclosure(s) will cover the preceding 12 month period.</span></p>
<p class="c4"><span class="c5">Should we deny your request, we will explain to you the reasons behind our denial.</span></p>
<p class="c4"><span class="c5">We do not charge a fee to process or respond to your verifiable request unless such request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind it.</span></p>
<br />
<p class="c1"><span class="c26">Latest update: May 03, 2021</span></p>
</div>
</body>
</html>