Privacy Policy At ReviewStudio, we are committed to protecting your privacy and maintaining the security of your personal information. We provide this privacy policy to explain to you our online information practices and the choices you can make about the way your information is collected and used when you access our website and use our services at ReviewStudio.com. We work hard to earn and keep your trust, so we adhere to the following principles to protect your privacy: We will never sell, rent or otherwise provide your personal information to any third party for commercial purposes. Except as specifically provided for in this Policy, your personal information and posted content will only be shared with people you explicitly choose to share it with. Any personal information you provide will be secured with industry standard protocols and technologies. Please read this Policy to learn more about: What personally identifiable information of yours is collected; How your personal information is used and shared; What security procedures are in place to protect your personal information and any content that you post on our website; How ReviewStudio complies with the EU General Data Protection Regulation (GDPR) How to contact us. A Note About Children Children are not eligible to use our services or products, and we ask that minors (under the age of 16) do not submit any personal information to us or use our services or products. Our website does not target and is not intended to attract children under the age of 16. ReviewStudio does not knowingly solicit personal information from children under the age of 16. Information Collection Personal information means any information that may be used to identify you as an individual, such as your name, email address, a home, postal, or other physical address, or other information when needed to provide a service or product you have requested. Registration When you access and browse our website to learn more about our services, you do so anonymously. But ReviewStudio collects personal information when you register for an account to enable your access to our services. To create an account, you are required to provide your name and email address and choose a password. You are responsible for all actions taken with your user ID and password, including any fees that may be charged to your account. Therefore, we recommend that you do not disclose your password to any other person or entity. If you lose control of your password, you may lose control over your personal information and posted content. If you believe your password has been compromised for any reason, you should immediately change your password through your account profile. Unless you request deletion of your personal information as specified below, your personal information may be retained by ReviewStudio in compliance with this Policy to log software licenses granted. Cookies and Web Log Files Like many other commercial websites, the ReviewStudio website and service uses “cookies” to collect information about how you use the website and the service. This allows your computer and our website to speak to each other in a more efficient manner, allows you to navigate our website, authenticate you as the correct user, allows us to recognize your computer on return visits and helps us study traffic patterns on our website in order to improve the site and the services we provide. The cookie will only contain information that your computer is set to provide to the website server, and you can choose to reject all cookies, although this will affect the functionality of our website for technical reasons and may affect your ability to use our website at all. The ReviewStudio website and service also makes use of web log files that track how the site is being used. This data is used in the aggregate to help us analyze overall usage trends so that we can improve our services. It is not linked to personally identifiable information in any way. Accessing and Changing Your Account Information At any time, you can review the personal information you provided us and make any desired changes to the information, or to the settings for your ReviewStudio account by logging in to your account on this website and editing the information on your Profile or Settings page. You may also close your account, in which case we will remove your personal information and all data and content associated with it. Information Use and Sharing ReviewStudio is an online service dedicated to facilitating the review and approval process amongst professionals working with digital media. The information and content you choose to provide through your use of the service is used to help you work more effectively with other people you trust and choose to work with. Sharing Information and Content between Users The content you upload will only be shared with people you explicitly share it with. You may choose to protect your content by restricting access only to authenticated users you establish or by assigning a password to it. At your option, you may also share content with “guests” who do not require authenticated accounts or passwords to access it. It is up to you to decide the level of security that you wish to provide for the content you upload. Any annotations and comments you provide in reviewing content will include your name, timestamp and will be visible to all other people that the content is shared with. In addition, at the option of each user, automatic email notifications may inform other reviewers of the same content of the comments and other actions that are undertaken by other participants in that same review. Sharing Information With Third Parties We will not share your personal information outside ReviewStudio without your permission, except as specifically indicated in this Policy. Within ReviewStudio, data is stored in controlled servers with limited access. We limit access to personal information about you to employees we reasonably believe need to come into contact with such information to provide services or products to you or otherwise in order to perform their jobs. ReviewStudio may send your personal information to other companies or people only under one of the following circumstances: When we have your consent to share the information; When we need to share your information to carry out your instructions and to provide the services or products you have requested (for example, we use a credit card processing company to manage subscription fees); When we need to send the information to companies who work on behalf of ReviewStudio to provide a service or product to you. We will only provide those companies the minimal information they need to provide the service or product required; We will also disclose your personal information if required or necessary to do so by law or court order, in connection with judicial or other legal proceedings, other legal process served on ReviewStudio, to exercise our legal rights or defend against legal claims, to enforce our license terms and conditions, or in urgent circumstances, to protect personal safety, the public or our website. ReviewStudio Communications ReviewStudio will communicate with you through emails and notices posted on our website. Please be aware that you will receive certain emails from ReviewStudio relating to the proper functioning of your account, such as email notices when other users undertake certain actions on the content you share with them. You will also receive emails relating to scheduled site maintenance, new software releases and other issues that may affect your use of the site. Customized Content Information you provide upon registration or on your Profile page is also used to customize your experience on our websites. For example, when you log in to your account, we will display your name and current resource usage. Data Security Your ReviewStudio account information is password-protected for your privacy and security. ReviewStudio safeguards the security of the data you send us with physical, electronic, and managerial procedures. ReviewStudio uses industry-standard secure socket layer (SSL) encryption to enhance the security of data transmissions, including passwords, credit card information and profile data. Third Party Sites The ReviewStudio website may contain links to other websites not operated by ReviewStudio. ReviewStudio does not share your personal information with those websites and is not responsible for their privacy practices. Once you have left our website, you should check the applicable privacy policies of those websites to determine how they handle any information they collect from you. General Data Protection Regulation (GDPR) If you are a resident of the European Union (“EU”), United Kingdom, Lichtenstein, Norway, or Iceland, you may have additional rights under the EU General Data Protection Regulation (the “GDPR”) with respect to your Personal Data, as outlined below. For this section, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means information that can be used to individually identify a person, and “processing” generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure. ReviewStudio will be the controller of your Personal Data processed in connection with the services. Note that we may also process Personal Data of our customers’ end users or employees in connection with our provision of services to customers, in which case we are the processor of Personal Data. If we are the processor of your Personal Data (i.e., not the controller), please contact the controller party in the first instance to address your rights with respect to such data. If there are any conflicts between this section and any other provision of this Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following applies to you, please contact us at compliance@reviewstudio.com What Personal Data Do We Collect From You? We collect Personal Data about you when you provide such information directly to us or when Personal Data about you is automatically collected in connection with your use of our services. Information we collect directly from you: We receive Personal Data directly from you when you provide us with such Personal Data, including without limitation the following: First and last name Company name Email address Mailing address Telephone number Address IP Address Username (may be your email address) Browser information Credit card and credit card CVV Transaction and Billing Data Some Personal Data is automatically collected when you use our services, such as the following: IP address Device identifiers Web browser information Page view statistics Usage information Transaction information (e.g. transaction amount, date and time such transaction occurred) Cookies and other tracking technologies (e.g. web beacons, pixel tags, SDKs, etc.) Location information (e.g. IP address) Log data (e.g. access times, hardware and software information) How Do We Use Your Personal Data? We process Personal Data to operate, improve, understand and personalize our services. For example, we use Personal Data to: Create and manage user profiles Communicate with you about the services Process orders Contact you about service announcements, updates or offers Provide support and assistance for the services Personalize website content and communications based on your preferences Meet contract or legal obligations Respond to user inquiries Fulfill user requests Comply with our legal or contractual obligations Resolve disputes Protect against or deter fraudulent, illegal or harmful actions Enforce our Terms of service We will only process your Personal Data if we have a lawful basis for doing so. Lawful basis for processing include consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below: Contractual Necessity: We process the following categories of Personal Data as a matter of “contractual necessity”, meaning that we need to process the data to perform under our Terms of Service with you, which enables us to provide you with the services. When we process data due to contractual necessity, failure to provide such Personal Data will result in your inability to use some or all portions of the services that require such data. First and last name Email address Mailing address IP Address Credit card and credit card CVV Transaction and Billing Data Legitimate Interest: We process the following categories of Personal Data when we believe it furthers the legitimate interest of us or third parties. First and last name Email address Mailing address Examples of these legitimate interests include: Operation and improvement of our business, products and services Marketing of our products and services Provision of customer support Protection from fraud or security threats Compliance with legal obligations Completion of corporate transactions Consent: In some cases, we process Personal Data based on the consent you expressly grant to us at the time we collect such data. When we process Personal Data based on your consent, it will be expressly indicated to you at the point and time of collection. Other Processing Grounds: From time to time we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest. How and With Whom Do We Share Your Data? We share Personal Data with vendors, third party service providers and agents who work on our behalf and provide us with services related to the purposes described in this Privacy Policy or our Terms of Service. These parties include: Payment processors Fraud prevention service providers Analytics service providers Hosting service providers Telecommunications service providers We also share Personal Data when necessary to complete a transaction initiated or authorized by you or provide you with a product or service you have requested. In addition to those set forth above, these parties also include: Other users (where you post information publicly or as otherwise necessary to effect a transaction initiated or authorized by you through the services) Social media services (if you interact with them through your use of the services) Third party business partners who you access through the services Other authorized parties We also share information with third parties when you have given us consent to do so (as indicated at the point such information is collected). We also share Personal Data when we believe it is necessary to: Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies Protect us, our business or our users, for example to enforce our terms of service, prevent spam or other unwanted communications and investigate or protect against fraud Maintain the security of our products and services Furthermore, if we choose to buy or sell assets, user information is typically one of the transferred business assets. If we, or substantially all of our assets, were acquired, user information would be one of the assets that is transferred or acquired by a third party, and we would share Personal Data with the party that is acquiring our assets. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this policy. What Security Measures Do We Use? We seek to protect Personal Data using appropriate technical and organizational measures based on the type of Personal Data and applicable processing activity. For example, we use encryption and tokenization to keep your Personal data secure. What Rights Do You Have Regarding Your Personal Data? You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email compliance@reviewstudio.com. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request. Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data. Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data. Erasure: You can request that we erase some or all of your Personal Data from our systems. Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our services. Portability: You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible. Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes. Restriction of Processing: You can ask us to restrict further processing of your Personal Data. Right to File Complaint: You have the right to lodge a complaint about Company’s practices with respect to your Personal Data with the supervisory authority of your country or EU Member State. Changes to this Privacy Policy ReviewStudio may update this Policy from time to time. In the event there are significant changes in the way we treat your personal information, we will send a notice to the primary email address specified in your Profile or by displaying a prominent notice on our website. Questions or Comments If you have any questions about this Privacy Policy or our data practices generally, please contact us using the following information: Name: ReviewStudio Compliance Officer Physical address: 376 av. Victoria #200 Westmount, Québec H3Z 1C3 Canada This Policy was last modified on July 22nd, 2022.