Your Privacy Rights

This policy was last updated on July 8th, 2020

Welcome

We are Amitree (“Amitree,” “we,” “us,” or “our”), and we make Folio, which helps professionals organize and manage their email.

We take your privacy seriously and we believe it is important to tell you how we collect, use and protect your information when you use Folio, use our applications, or access our website (the “Services”).

This privacy policy applies to the Services, and sets out how we collect, store, process, transfer, share and use data that identifies or is associated with you, and information regarding our use of cookies and similar technologies.

Before accessing or using our Service, please read this privacy policy carefully. By accessing or using our Service, you understand and consent to our collection, storage, use and disclosure of your personal information as described in this privacy policy.

Information we collect and why

We collect and use information to provide, improve, and protect our Services. By using the Services, you grant us the rights to use your information to enable us to offer the Services to you, to improve the Services, and other uses, all stated in this Privacy Policy and in our Terms of Service. Those are the only rights we have to the information you provide.

Information you give to us. We collect personal information about you when you voluntarily submit information directly to us, by using the Services, or by communicating with us by phone, email or other means. If you choose not to provide personal information, we may not be able to provide the Services to you or respond to your other requests. Any information you provide belongs to you.

Information we receive from other sources. We work with third parties, including, for example but not limited to, subcontractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, and may receive information about you from them, subject to your agreements with them.

Information we receive from other sources. We work with third parties, including, for example but not limited to, subcontractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, and may receive information about you from them, subject to your agreements with them.

Use of your information. We may link or combine the personal information we collect and/or receive about you and information we collect automatically to provide the Services and provide you with a personalized experience.

We may anonymize and aggregate any of the personal information we collect (so that it does not identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the Services, and developing new products and features, and share such anonymized information with others to provide or improve the Services you receive, if we are permitted to do so by your email provider.

Information we collect. The table in the Addendum sets out the categories of personal information we collect from you and from other sources, and how we use that information. The Information includes:

“Personally Identifiable Information” (“PII,” or "Personal information") is private information about you that identifies you, such as your first name or first initial and last name, together with other information, such as your account number, credit or debit card number. Generally, this is information you give us when you sign up for your account, otherwise communicate with us, or by connecting your email account to use the Services. Personal information does not include: publicly available information that is lawfully made available to the general public from federal, state, or local government records, or de-identified or aggregated information.

Account and Billing Information. We collect, and associate with your account, information like your name, email address, phone number, and account activity. For users that purchase a paid version of the Services, our corporate affiliates and third-party payment processors may collect and store billing, address and credit card information on our behalf, or we may do this ourselves. We use account data to administer accounts and keep track of billing and payments.

Service Use Information. Our Services are designed to help professionals better organize and manage their email and collaborate with others. When you use our Services, you provide us with access to information like your email, files, content, messages, contacts, detailed information about your projects, and so on. When you authenticate your Google or Microsoft account, you give us permission to access your account according to the terms and restrictions specified by your account provider. For example, we may securely access or store your name, your email address, your emails, and your contact list (including any images attached to contacts in the list). We use Service Use Information to effectively deliver the organization and workflow features of Folio.

Usage Information. We collect information related to how you use the Services, including actions you take in your account (like sharing, editing, and viewing). This information is automatically collected, and is collected so that we can improve the Services and provide quality customer care.

Other Information. We also collect information from and about the devices you use to access the Services. This includes things like IP addresses, the type of browser and device you use, the web page you visited before coming to our sites, and identifiers associated with your devices. Your devices (depending on their settings) may also transmit location information to the Services. This information is automatically collected.

Third-Party Websites

We may provide links to websites that we do not own or operate (“third-party websites”). Those links are provided for your convenience. If you follow the link and visit those third-party websites, they too may collect information about you. We do not have control over what information they collect. We do not have independent access to that information. The collection and use of your personal information by third-party websites is governed by the privacy policy applicable to that third-party website. We are not responsible for the content or privacy practices of non-Amitree websites or services, even if we link to them. We encourage you to review the privacy policy for each third-party website before using it.

Sharing and Disclosure of Your Personal Informaiton

We will not share your personal information with any third parties except as described in this privacy policy or in connection with the Services. We may use and share Information in the following ways:

Understanding and improving our Services: We carry out research and analyze trends to better understand how users are using the Services and improve them. We share information with third-party analytics services to obtain, compile and analyze information (that may include personally identifying information) about how users are using and interacting with the Services. Some information is automatically collected from or about you when you use our Services. By agreement, any data we share with third parties is restricted and may not be used by the third party except to provide us with information. If the data collected is sensitive (i.e., from email or your cloud storage), the data will only be transferred to third-parties to provide or improve user-facing features that are prominent in the Services, with your explicit written permission, or as permitted in this section, below (e.g., business partners, business , transfers, and protection of Amitree).

The analytics services may also collect: the time of an event, how you came to Amitree’s site, what search engine and search keywords you may have used to get to our site, information about the device you are on such as your operating system, and browser, as well as your city/country location, tokens and IDs for push notifications.

We may provide your personal information to these analytics providers for obtaining statistics and other information about how users are using and interacting with the Services. We have no responsibility for the technologies, tools or practices of the third parties that provide analytics products and services to us. Your web browser may not permit you to block the use of these techniques, and that browser settings that block conventional cookies may have no effect on such techniques.

Business Partners, Vendors, Suppliers, and Sub-Contractors: We employ other companies and people to perform tasks on our behalf and need to share your personally identifiable information with them to provide products or services to you; for example, we may use third-party hosting providers or software developers to help implement and maintain the Services. Our agents do not have any right to use the personal information we share with them beyond what is necessary to assist us in providing the Services to you. We remain responsible for their handling of your information per our instructions.

Business Transfers: If we are involved in a reorganization, merger, acquisition or sale of our assets, your personally identifiable information may be transferred as part of that deal. We will notify you (for example, via a message to the email address associated with your account) of any such deal and outline your choices in that event. Other than as may be ordered by a bankruptcy or other court, the use and disclosure of all transferred Personal Information will be subject to this Privacy Policy, or to a new privacy policy if you are given notice of that new privacy policy and are given an opportunity to affirmatively opt-out. Personal Information submitted or collected after a transfer, however, may be subject to a new privacy policy adopted by the successor organization.

Protection of Amitree and Others: We reserve the right to preserve and disclose any information that we believe is necessary to comply with law or court order, or is necessary for security purposes (such as investigating a bug or abuse).

With your Permission: We may provide links to third-party providers of services. To generate relevant results, information may be transmitted to the third-party provider when you click the link. By clicking on a link to the third-party website, you are granting us permission to transmit the information to the third-party website. This does not alter or modify our disclaimer regarding information collected by third-party websites.

For California Residents: Your Rights and Choices

If you are a California resident, the California Consumer Privacy Act (CCPA”) provides consumers with specific rights regarding their personal information. This section describes your CCPA rights and how to exercise them.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • sales, identifying the personal information categories that each category of recipient purchased; and
  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

Exceptions. We may deny your deletion request if retaining the information is necessary for us or our service providers to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Exercising Your Rights

To exercise your California rights, submit a verifiable consumer request to us by contacting us using the contact details at the end of this privacy policy.

Upon request, we will provide you with information about whether we hold any of your personal information. You may access, correct or request deletion of your personal information by logging into your account, or by contacting us at support@amitree.com.

We will respond to your request within 30 days.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Amitree does not sell personal information shared by you. Amitree has not sold personal information shared by you in the 12 months preceding the modification date for this policy. All use of personal information is done for the delivery, use, and improvement of the Service.

Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Cookies and Other Technologies

We use technologies like cookies and pixel tags to provide, improve, protect and promote our Services. Cookies help us with things like keeping you signed into the Services, so you do not need to reauthenticate repeatedly, understanding how you are interacting with our Services, and improving them based on that information. You can set your browser to not accept cookies, but this will limit your ability to use the Services. We use the following types of cookies:

Strictly necessary cookies. Cookies required for the essential operation of our Service, such as to authenticate you and prevent fraudulent use.

Analytical/performance cookies. Cookies that allow us to recognize and count the number of visitors and to see how visitors move around our Service when they are using it. This helps us to improve the way our Service works, for example, by ensuring that you can find information easily.

Functionality cookies. These cookies are used to recognize you when you return to our Service. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Targeting cookies. These are cookies that record your visit to our Services, the pages you have visited and the links you have followed. These cookies may be set through our site by our partners, such as Google and Facebook, to understand your use of our Services and show you relevant advertising on other sites. The cookies do not store personal information directly but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted content.

Security of Your Personal Information

We use diligent efforts to keep your information secure. We continue to work on features to keep your information safe. You can find out more about our efforts to keep your data secure here: www.amitree.com/security.

While no transmission of information via the internet is completely secure, we take reasonable measures to protect your personal information. We cannot guarantee the security of your personal information transmitted to us; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

We use third-party service providers such as Heroku and Amazon to host our services. You can read more about their security practices on their websites.

Retaining Your Information

We may retain your Information for as long as we need it to provide you the Services. If you delete your account, we'll also delete this information. There might be some latency in deleting this information from our servers and back-up storage and some information may not be completely removed from our logs and other records. We may retain this information if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements.

Children Under 13

It’s obvious, but the Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are under 13, do not register or attempt to register for the Services or send any personal information about yourself to us. It is not allowed. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under 13 may have provided us personal information, please contact us at privacy@amitree.com.

Communicating With You

We may communicate with you by email, telephone, or text message if you’ve provided us the means to do so. This includes communications about us, our products, and the Services. We may communicate with you about the Service, sending administrative emails and messages, and to inform you about changes in our Services, our Service offerings, and important Service-related notices, such as security and fraud notices. These emails and messages are considered part of the Services and you may not opt-out of them.

We may send emails about new product features or other news about Amitree. You can opt out of marketing and advertising communications at any time. If you do not want to receive these communications, please adjust your account settings or inform us by sending an email to: support@amitree.com.

Communicating With Us

You may update your personal information through your account page, where you can update basic account settings, such as your name, email, and other preferences.

If you have questions or to exercise any of your rights, contact us.

Email: support@amitree.com
Mail: Amitree, Inc.
2093 Philadelphia Pike #3004
Claymont, DE 19703

Attention: Privacy Officer.

Privacy Policy Changes

Our Privacy Policy may change from time to time. We will post any privacy policy changes on this page. You should check the date of this Privacy Policy (which appears at the top of this document) and review any changes since the last time you used the Services. We will alert you to changes by a) placing a notice on the www.amitree.com, b) sending you an email, or c) some other clear means of communication. If you’ve opted not to receive emails from us, or if you haven’t provided us with your email address, those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, it means you agree to all the changes.

Service Intended for United States and Canadian Residents

The Service is hosted on servers in the United States of America and is intended for use in the United States and Canada.

Addendum