Last Updated: February 4, 2019
Information You Provide to Us. We collect information you provide directly to us. For example, we collect information when you sign up to receive information about the Services, create an account or profile, use interactive features of the Services, make a purchase, participate in our contests, promotions, and surveys, communicate with us via third-party social media sites, apply for a job, request customer support, or otherwise communicate with us. The types of information we may collect directly from you include your name, username, password, email address, phone number, billing and shipping address, demographic information, and any other information you choose to provide.
If you use our Services in connection with products or services offered by a third-party partner (e.g., your email service provider), you may provide us with information about your account with the third party in order to enable this functionality, such as the email address and password associated with your account.
When you make a purchase from us, we will collect and store limited payment information from you, such as payment card type, payment card expiration date, and a limited subset of your payment card number in order to process your payment. We do not collect or store full payment card numbers and all transactions are processed by a third-party payment processor.
Information We Collect Automatically. When you access or use our services or products, we automatically collect information about you, and we may associate it with information that you provide directly to us. For example, we may collect:
Information We Collect From Other Sources. We may also obtain information from other sources and combine that with information we collect through our Services. For example, we collect information about you from those who correspond with you via email, or from third-party service providers who share certain profile information about you, or we may collect information about you when you post content to our pages or feeds on third-party social media sites.
We may use information about you for various purposes, including to:
We may also share aggregated or de-identified information with third parties.
Our Services may offer social sharing features and other integrated tools (such as the Facebook “Like” button), which let you share actions you take on our Services with other media, and vice versa. Your use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the entities that provide these features.
We may work with third-party social platforms, such as Facebook, to serve ads to you as part of a customized campaign, unless you notify us that you prefer not to have information about you used in this way by sending an email to firstname.lastname@example.org indicating the email address you wish to have removed from customized ad campaigns.
We implement security safeguards to protect your information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.
CloudMagic is based in the United States and the information we collect is governed by U.S. law. The information we collect may be transferred, processed, and stored in the United States and other countries, where you may not have the same rights and protections as you do under local law. By accessing or using our products or services or otherwise providing information to us, you consent to the processing, transfer, and storage of information in and to the United States and other countries.
We are awaiting approval of our certification under the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks (collectively, the “Privacy Shield”) with respect to personal data we collect from the EU and Switzerland and transfer to the U.S., and will continue to apply the Privacy Shield protections to the applicable data. For more information about the Privacy Shield, please visit the Privacy Shield website. Under the Privacy Shield, we remain responsible and liable for any personal data that we share with third parties for external processing on our behalf, as described in the “Sharing of Information” section above, unless we prove we are not responsible for the event giving rise to the damage. If you have an inquiry regarding our certification, contact us at email@example.com. Privacy Shield participants are subject to the authority of the U.S. Federal Trade Commission. You may also refer your complaint to our designated Privacy Shield dispute resolution provider, once we have certified. In certain circumstances, the Privacy Shield provides the right to invoke binding arbitration to resolve complaints (see Annex I to the Privacy Shield Principles for more details).
Data Retention. Our data retention periods are based on business needs and legal requirements. We store the information we collect about you for as long as is necessary for the purposes for which we originally collected it, or as needed to provide the products or services to you, unless a longer retention period is required or permitted by applicable law.
You may request that we delete your information, but note that we may retain certain information as reasonably needed to comply with law, meet regulatory requirements, or for legitimate purposes. We may also retain cached or archived copies of information about you for a certain period of time.
You may also ask us to provide you access to, or a copy of, your information, or correct the information we have about you.
If you wish to make these requests, please email firstname.lastname@example.org. You may also delete your Newton account at any time.
Promotional Communications. You may opt out of receiving promotional communications from CloudMagic by following the instructions in those communications. If you opt out of receiving promotional communications, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.
Read Receipts. Read Receipts is a Newton feature that allows you to see the read/unread status of your sent emails and the date and time your email is first opened without any notification to the recipient. In order to provide this feature, we collect and track information about your sent email and your recipient's actions like email open time. If you do not wish to use this feature, for example because you are based in the European Economic Area or correspond extensively with European Economic Area residents for commercial (not personal or household) purposes and do not have the necessary consents of your email recipients, you can opt out of using Read Receipts.
Sender Profiles. Sender Profiles is a Newton feature that shows you personal information about certain people that email you. We obtain and store this information from third-party partners by providing these partners with sender email addresses. If you do not wish to use this feature, you can opt out of using Sender Profiles.
We will process your data where we have lawful bases to do so. Lawful bases can include consent (e.g., if you sign up for a promotion), to perform our responsibilities under our contract with you (e.g., to provide Services to you, process payments), and for our legitimate interests, provided that the processing doesn’t outweigh your rights and freedoms.
We rely on several legitimate interests in processing your data. For example, we process your data to detect and prevent fraud, understand our users and industry trends, develop and improve our products and services, and send you marketing communications.
Where we rely on consent to process your data, you have the right to withdraw your consent at any time. You may also have a right to object to, or request that we restrict, certain processing of your personal data.
When you use Read Receipts or Sender Profiles, or share your contacts with us, you are the data controller of your contact’s or email recipient’s personal information and CloudMagic processes this information on your behalf. As between you and CloudMagic, you are responsible for obtaining consent from your contacts and email recipients.
Residents of the European Economic Area may also lodge a complaint with the supervisory authority where they reside.