--- title: TrueVault Privacy Policy - TrueVault description: TrueVault Privacy Policy - TrueVault --- - [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) - [GDPR Compliance](https://safe.truevault.com/gdpr-guide) - [Personal Data](https://safe.truevault.com/learn/what-is-personal-data) - [DSAR](https://safe.truevault.com/learn/explaining-gdpr-data-subject-requests) - [HIPAA](https://safe.truevault.com/learn/hipaa) - [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-phi) - [PHI](https://safe.truevault.com/protected-health-information) - [Resources](https://safe.truevault.com/learn/) - [Resource Center](https://safe.truevault.com/learn/) - [TrueVault Safe](https://safe.truevault.com/help/truevault-safe) - [About](https://safe.truevault.com/about-us) - [Contact](https://safe.truevault.com/contact-us) - [Careers](https://careers.truevault.com/) - Solutions - [GDPR Compliance](https://safe.truevault.com/solutions/gdpr-compliance) - [HIPAA Compliance](https://safe.truevault.com/hipaa-compliance) - [For Applications](https://safe.truevault.com/solutions/application-compliance) - [For Data Exchanges](https://safe.truevault.com/solutions/data-exchange-compliance) - [Developers](https://safe.truevault.com/resources/index) - [Pricing](https://safe.truevault.com/safe-pricing) - [Blog](https://safe.truevault.com/blog) - [Login](https://console.truevault.com/login) - [Get Started](https://safe.truevault.com/get-started) # TRUEVAULT PRIVACY POLICY Last Update: August 6th, 2019 This Privacy Policy by TrueVault, Inc., and affiliates and other entities (each, an Affiliate, with TrueVault and its affiliates collectively called here "TrueVault", “Us”, or "We") explains what type of information may be gathered or tracked on our Marketing Website (“Site”) or TrueVault Safe and TrueVault Atlas Cloud (collectively referred to as “Services”), how such information may be used, and with what other parties the information is or may be shared. #### **Section 1: Overview** TrueVault obtains Personal Data about you from various sources to provide our Services and to manage our Sites. “You” may be a visitor to one of our websites, a user of one or more of our Services (“User”), or a customer of a User (“Customer”). If you are a Customer, We will generally not collect your Personal Data directly from you. Your agreement with the relevant User should explain how the User shares your Personal Data with TrueVault, and if you have questions about this sharing, then you should direct those questions to the User. #### **Section 2: Collection of Personal Data** 1. Personal Data is any information that relates to an identified or identifiable individual.  2. One channel of acquiring Personal Data is when You proactively provide Personal Data through one of our Sites. The Personal Data that you provide directly to us through our Sites and Services will be mostly apparent from the context in which you provide the data.  In particular, When you contact us by email, chat, telephone, or via a contact form, we will store the data you share with us (your email address and possibly your name and phone number) in order to respond to your questions as well as to be able to provide you with the best possible service in the future. In addition to the apparent data, we will receive supplemental data including but not limited to: - IP address - Date and time of request - Content of the request - Access status / HTTP status codes - Browser information (e.g., screen size, language, version) - Operating system information (e.g. version, language) 3. A second channel by which we acquire personal data is when a User provides personal data for the purpose of operating our Services.  Through this channel, We may collect: - Names - Phone numbers - Email addresses - Usage behavior statistics - UP address - Date and time of request - Content of the request - Access status / HTTPS status codes - Browser information (e.g., screen size, language, version - Operating system information (e.g. version language)  4. A third channel which We use to collect Personal Data without proactive consent is through the utilization of publicly available resources if it is in compliance with regulatory standards, notably The General Data Protection Regulation (“GDPR”) Article 6(1)(f) legitimate interest provision. 5. All personal data collected by TrueVault is driven by necessity in order to deliver Services, respond to inquiries, improve the Site and Services, or else governed by GDPR Article 6(1) for applicable EU individuals. #### **Section 3: Your Rights**  1. You may exercise certain rights regarding their Personal Data. In particular, You have the right to do the following: - Withdraw consent to the processing of Personal Data where it has previously been given. - Object to the processing of Your Personal Data if the processing is carried out on a legal basis other than consent. - Learn how Your Personal Data is being processed, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing. - Verify the accuracy of Your personal Data and ask for it to be updated or corrected. - Under certain circumstances, You have the right, to restrict the processing of Your Personal Data. In this case, the Owner will not process Your Personal Data for any purpose other than storing it. - Under certain circumstances, You have the right, to obtain the erasure of Your Personal Data from the Owner. - Receive Your Data and have it transferred to another controller. You have the right to receive Your Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. 2. Users have the right to file a complaint with the appropriate data protection supervisory authority concerning our processing of your personal data. #### **Section 4: Cookie Policy** 1. Use of the Site or Services will lead to cookies being stored on your computer. Cookies are small text files that are stored on your hard drive and allocated to the browser used by you and are used to forward certain information to the site that installed the cookie. Cookies cannot execute programs or transmit viruses to your computer. They are used to make the website more user-friendly and effective.  2. Use of cookies This website uses the following types of cookies, the scope and function of which are explained below: - Transient cookies. Transient cookies are automatically deleted when you close your browser. These particularly include session cookies. Session cookies store what is called a session ID with which the various requests made by your browser are allocated to a collective session. This allows your computer to be recognized again when You return to our Site or Services. Session cookies are deleted when you log out or close your browser. - Persistent cookies. Persistent cookies are automatically deleted after a predetermined period of time that may vary between cookies. You can delete the cookies at any time in your browser’s security settings. 3. Your browser settings can be configured according to your wishes. For example, you can reject the acceptance of third-party cookies or all cookies. Please note that if you do this, you may not be able to use all of the functions of this website.  4. In order to improve our website as well as for economic interests, such as reminding interested website visitors of our offers (remarketing), we use third-party cookies as described below:  - Google Analytics - Analytics - [Privacy Policy and Cookie Policy](https://policies.google.com/technologies/types?hl=en-US) - Hubspot - Analytics - Marketing - TrueVault - Marketing - Analytics - Product development - [Privacy Policy and Cookie Policy](https://safe.truevault.com/privacy-policy?hsLang=en) 5, When you visit our website, we notify you of our use of the described third-party cookies. An option for preventing these cookies from being stored on your computer can be found in your browser’s settings.  #### **Section 5: Data Retention** 1. Personal Data shall be processed and stored for as long as required by TrueVault for the purpose they have been collected for, as determined by TrueVault, and not any longer.  2. Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after the expiration of the retention period.  #### **Section 6: EU - US Privacy Shield  Statement**  1. TrueVault has established a comprehensive privacy program to ensure TrueVault complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. TrueVault has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.  If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.  To learn more about the Privacy Shield program, and to view our certification, please visit [https://www.privacyshield.gov.](https://www.privacyshield.gov/) 2. For personal data transferred from the EU, if we transfer your personal data to a third party, we will ensure that the third party is contractually obligated to process your data only for limited, specific purposes consistent with this policy. We will also ensure that the third party will apply the same level of protection to that data as the EU-U.S. Privacy Shield Principles and will notify us if it makes a determination that it can no longer meet this obligation. TrueVault may be potentially liable if these requirements are not met. 3. Dispute Resolution Within the scope of this privacy notice, if a privacy complaint or dispute cannot be resolved through TrueVault’s internal processes, TrueVault has agreed to participate in the [VeraSafe Privacy Shield Dispute Resolution Procedure](https://www.verasafe.com/privacy-services/dispute-resolution/privacy-shield-dispute-procedure/). Subject to the terms of the VeraSafe Privacy Shield Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe under the Privacy Shield Dispute Resolution Procedure, please submit the required information to VeraSafe here: [https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/](https://www.verasafe.com/privacy-services/dispute-). In addition, when appropriate a binding arbitration option will also be made available to you in order to address residual complaints not resolved by any other means. 4. Under certain circumstances, we may be required to disclose your Personal Data in response to valid requests by public authorities, including to meet national security or law enforcement requirements. #### **Section 7: Children Online Privacy Protection Act (COPPA)** 1. TrueVault is concerned about the safety of children when they use the internet, and will never knowingly collect Personal Information from minors (children under 13 years of age, or any other age defined under applicable law) without prior verifiable parental consent that complies with those recommended practices and applicable rules put forth by the Federal Trade Commission. Our Site and Services are all expressly directed to people who are at least 13 years old or older. If we become aware that a minor is attempting to or has submitted Personal Information, we will not accept such Personal Information and will then take prompt steps to remove any such Personal Information from our records, Site and Services. #### **Section 8: Detailed Information on the processing of Personal Data for Site** 1. Personal data is collected for the following purposes and using the following services: 1. Algolia 2. Calendly 3. G Suite 4. Hubspot 5. Intercom 6. Outreach 7. Reply 8. RingCentral 9. Segment 10. Slack 11. Zoom #### **Section 9: Detailed information on the processing of Personal Data for Services** 1. In addition to the services outlined in Section 8, additional Personal data is collected for the following purposes and using the following services: 1. Atlassian 2. Chargebee 3. HelloSign 4. Mailchimp 5. QuickBooks Online 6. Stripe 7. TrueVault Atlas ### Questions regarding this policy. If you have questions concerning this Privacy Policy, please contact us at: [415.214.9795](tel:+14152149795) or [info@truevault.com](mailto:info@truevault.com). ### Modification to this Privacy Policy. TrueVault may, in its sole discretion, update this policy from time to time by posting a new or amended policy on this Site. If we make material changes to this policy affecting handling of your Personal Information we will provide you an opportunity to opt in under the terms of the revised policy through an email notice, or conspicuous notice on the Site or Services' home page, if applicable. After any such changes take effect, any newly collected Personal Information will be subject to the terms of the revised policy and all previously collected Personal Information will be handled in accordance with your response to our opt-in notice (per the revised policy if you opt in and under the previous policy if you do not opt in, which may, however, limit or prevent your further use of the Site and Services). If no material changes are made to this policy affecting treatment of your Personal Information, the amended policy shall be effective upon posting and your access to or use of the site following an update shall be deemed consent to the revised policy. We recommend you visit this page regularly and in particular before supplying any Personal Information to us via this Site or Services. This policy may not be otherwise amended by you without the written consent of TrueVault ### Company - [Blog](https://safe.truevault.com/blog) - [Contact Us](https://safe.truevault.com/contact-us-2019) - [Careers](https://truevault.workable.com) - [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/) ### Developers - [Patterns](https://safe.truevault.com/patterns) - [Documentation](https://docs.truevault.com/) - [Quick Start Guide](https://safe.truevault.com/quick-start-guide) - [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure) - [API Overview](https://safe.truevault.com/api-overview) ### Latest Posts ### Contact Us 201 Mission Street, 12th Floor San Francisco, CA 94105 Email: [hello@truevault.com](mailto:hello@truevault.com) 2021 © All Rights Reserved. [Privacy Policy](https://privacy.truevault.com/privacy-policy) | [Terms of Service](https://safe.truevault.com/terms-of-service?hsLang=en) - - -