This policy was last updated 29 September 2022

Coreograph Privacy Policy

Coreograph cares about the privacy of your data and we are committed to protecting it. This Privacy Policy explains what information we collect about you and why.

Summary

We encourage you to read this entire Privacy Policy. However, here is a brief overview of the most important points:

• We do not and will not sell your information. We don’t help companies advertise their products to you (read more)
• We operate on a subscription model for our software and services. We collect only the information necessary to administer your account (read more)
• We use a small number of trusted third parties to help provide our products (read more)
• We do not use cookies to provide, protect, and promote our products (read more)
• You can exercise your GDPR and CCPA rights (read more)
• If you have any questions or concerns about this policy, you can contact us at privacy@coreograph.com (read more).

Table of Contents

• Coreograph Privacy Policy
• Table of Contents
• What is the scope of this Privacy Policy?
• What is Coreograph’s business model?
• Information collection and use
• Information access and disclosure
• Data storage, transfer, retention, and deletion
• Will this Privacy Policy ever change?
• Privacy rights
• Contact us

What is the scope of this Privacy Policy?

This Privacy Policy is incorporated into Coreograph’s SaaS Terms of Service located at https://coreograph.com/terms-of-use, and applies to the information obtained by us through your use of Coreograph’s Site, Software, and Services (“Information”) as described in this Policy. Capitalized terms used in this Policy and not otherwise defined shall have the meanings provided for those terms in the SaaS Terms of Service.

What is Coreograph’s business model?

Coreograph offers a subscription model for use of our Software and Services. This is how we make money. We also offer a free ‘Browse mode’ to evaluate our Software, encouraging you to experiment with it and hoping that you like it and subscribe. We don’t help third parties to advertise their products to you. We also do not—and will not—sell your information.

Information collection and use

What Information does Coreograph collect about me?

When you interact with our Site, Software, and/or Services, we collect information that could be used to identify you (“Personal Data”). Some of the information we collect is stored in a manner that cannot be linked back to you (“Non-Personal Data”).

Information you provide us when you create an account

When you sign up for or use our Software and Services, you voluntarily give us certain Personal Data, including:

• Your email address and region. Your email address is our means of communication with you as well as a unique identifier of your account. We need your region to comply with data protection standards worldwide. Your data will be stored only in that region.

• Your payment information, if you are a paying customer. This is required to complete a commercial transaction on the Site. We use this information to enable and fulfill your transaction. We use Stripe (www.stripe.com) for handling payments.

Information we collect as you use the Site, Software, and/or Services

Certain information is associated with using the Site, Software, and/or Services, including:

• User Content. This consists of all text, documents, projects, or other content or information uploaded, entered, or otherwise transmitted by you in connection with your use of the Services and/or Software.

Automatically collected Information

Certain data about the devices you use to connect with Coreograph and your use of the Site, Software, and/or Services are automatically logged in our systems, including:

• Location information. This is the geographic area where you use your computer and mobile devices (as indicated by an Internet Protocol (IP) address or similar identifier) when interacting with our Site, Software, and/or Services.

• Log data. As with most websites and technology services delivered over the internet, our servers automatically collect data when you access or use our Site, Software, and/or Services and record it in log files. This log data may include IP address, browser type and settings, date and time of use.

• Usage information. This is information about the Coreograph Site, Software, and/or Services you use and how you use them. We may obtain data from third-party partners and service providers to analyze how users use our Site, Software, and/or Services. For example, we will know how many users access a specific page on the Site and which links they clicked on. We use this aggregated information to better understand and optimize the Site.

• Device information. This is data from your computer or mobile device, such as the type of hardware and software you are using (for example, your operating system and browser type), as well as unique device identifiers for devices that are using Coreograph Software.

• Cookies. We do not currently set any cookies in your browser for our Site, Software, and or Services. We may in the future use privacy-friendly third-party aggregated analytics on the Site. If this requires cookies, this privacy policy will be updated to reflect this change.

How does Coreograph use my Information?

We use, process, and store your Information as necessary to perform our contract with you and for our legitimate business interests, including:

• To help us provide and administer our Site, Software, and/or Services, authenticate users for security purposes, provide personalized user features and access, process transactions, conduct research, develop new features, and improve the features, algorithms, and usability of our Site, Software, and/or Services.
• To communicate with you about your use of our Site, Software, and/or Services, product announcements, and software updates, as well as respond to your requests for assistance, including providing account verification support if you’re having difficulty accessing your account.
• To send you product updates, newsletters or special offers about Coreograph, from which you can unsubscribe at any time. If you are located in the European Economic Area (EEA), Switzerland, or the UK, we will only send you marketing information if you consent to us doing so at the time you create your account or any point thereafter.
• To display User Content associated with your account and make sure it is available to you when you use our Services.
• To calculate aggregate statistics on the number of unique devices using our Site, Software, and/or Services, and to detect and prevent fraud and misuse of those.

Does Coreograph review User Content?

As a rule, Coreograph employees do not monitor or view your User Content stored in or transferred through our Site, Software, and/or Services, but it may be viewed if we believe the Terms of Service have been violated and confirmation is required, if we need to do so to respond to your requests for support, if we otherwise determine that we have an obligation to review it as described in the Terms of Service, or to improve our algorithms as described in the User Content section of our Terms of Service. Finally, your Information may be viewed where necessary to protect the rights, property, or personal safety of Coreograph and its users, or to comply with our legal obligations, such as responding to warrants, court orders, or other legal processes.

Information access and disclosure

Does Coreograph share my Information?

We only disclose Personal Data to third parties when…

• …we use service providers who assist us in meeting business operations needs, including hosting, delivering, and improving our Services. We also use service providers for specific services and functions, including email communication and customer support services. These service providers may only access, process, or store Personal Data pursuant to our instructions and to perform their duties to us.
• …we have your explicit consent to share your Personal Data.
• …we believe it is necessary to investigate potential violations of the Terms of Service, to enforce those Terms of Service, or to investigate, prevent, or take action regarding illegal activities, suspected fraud, or potential threats against persons, property, or the systems on which we operate our Site, Software, and/or Services.
• …we determine that the access, preservation, or disclosure of your Personal Data is required by law to protect the rights, property, or personal safety of Coreograph and users of our Site, Software, and/or Services, or to respond to lawful requests by public authorities, including national security or law enforcement requests.
• …we need to do so in connection with a merger, acquisition, bankruptcy, reorganization, sale of some or all of our assets or stock, public offering of securities, or steps in consideration of such activities (e.g., due diligence). In these cases some or all of your Personal Data may be shared with or transferred to another entity, subject to this Privacy Policy.

We may disclose Non-Personal Data publicly and to third parties—for example, in public reports about aggregated numbers of subscribers and general use of our Software and/or Services to partners under agreement with us, or as part of progress reports we may provide to users or investors.

Coreograph does not share your Personal Data with third parties for the purpose of enabling them to deliver their advertisements to you.

Does Coreograph sell or rent my Personal Data?

No, Coreograph does not sell or rent your Personal Data.

Does Coreograph use cookies?

No, Coreograph does not use cookies anywhere in its Site, Software, and/or Services.

Will Coreograph send me emails?

From time to time, we may want to contact you with information about product announcements, software updates, and special offers. You may opt out of such communications at any time by clicking the “unsubscribe” link found within Coreograph emails and changing your contact preferences. All Coreograph account holders will continue to receive transactional messages related to our Services, even if you unsubscribe from promotional emails.

For users in the region Europe (this includes the UK and Switzerland): We only send marketing communications to you with your prior consent.

Does Coreograph ever make any of my Personal Data or User Content public?

No, we do not share Personal Data or User Content except in the limited circumstances described in the “Does Coreograph share my Information?” section of the Policy.

Data storage, transfer, retention, and deletion

Where is my Information stored?

Information submitted to Coreograph Software and/or Services will be transferred to, processed, and stored in the Region (Americas, Europe, or Asia Pacific) you indicated during sign-up. Your Region should be the place where you are a resident. When you use the Software on your computing device, User Content you save will be stored locally on that device and synced with our servers. If you post or transfer any Information to or through our Site, Software, and/or Services, you are agreeing to such Information, including Personal Data and User Content, being hosted and accessed in said Region.

How secure is my Information?

Coreograph is committed to protecting the security of your Information and takes reasonable precautions to protect it. However, internet data transmissions, whether wired or wireless, cannot be guaranteed to be 100% secure, and as a result, we cannot ensure the security of Information you transmit to us, including Personal Data and User Content; accordingly, you acknowledge that you do so at your own risk.

We use industry-standard encryption to protect your data in transit and at rest.

Once we receive your data, we protect it on our servers using a combination of technical, physical, and logical security safeguards. The security of the data stored locally in any of our Software installed on your computing device requires that you make use of the security features of your device. We recommend that you take the appropriate steps to secure all computing devices that you use in connection with our Site, Software, and/or Services.

If Coreograph learns of a security system breach, we will attempt to notify you and provide information on protective steps, if available, through the email address that you have provided to us or by posting a notice on the Site. Depending on where you live, you may have a legal right to receive such notices in writing.

How can I delete my Personal Data from Coreograph?

You can remove your Personal Data from Coreograph at any time by deleting your account. Or you can email us as set out in the “Contact Us” section below to request deletion of your account by us. Please note that, for security reasons, subscribers of our paid services will first be instructed to cancel their subscriptions before they can delete their Coreograph account.

How long is Personal Data retained?

You can remove your Personal Data from Coreograph at any time by deleting your account as described above. However, we may keep some of your Personal Data for as long as reasonably necessary for our legitimate business interests, including fraud detection and prevention and to comply with our legal obligations including tax, legal reporting, and auditing obligations.

What happens if Coreograph closes my account?

If Coreograph closes your account due to your violation of the Terms of Service, then you may contact Coreograph to request deletion of your data. Coreograph will evaluate such requests on a case by case basis, pursuant to our legal obligations.

Will this Privacy Policy ever change?

As Coreograph evolves, we may need to update this Policy to keep pace with changes in our Site, Software, and Services, our business, and laws applicable to us and you. We will, however, always maintain our commitment to respect your privacy. We will notify you of any material changes that impact your rights under this Policy by email (to your most recently provided email address) or post any other revisions to this Policy, along with their effective date, in an easy-to-find area of the Site, so we recommend that you periodically check back here to stay informed of any changes. Please note that your continued use of Coreograph after any change means that you agree with and consent to be bound by the new Policy. If you disagree with any changes in this Policy and do not wish your information to be subject to it, you will need to delete your Coreograph account.

Your rights

Data protection laws may give you a number of legal rights in relation to the Personal Information that we hold about you. Not all data protection laws are the same so not all of these rights apply in all places. Also, some of these rights are subject to qualifications and limitations and exercising these rights may impact the services and products that we provide to you. However, we recognise that your Personal Information belongs to you only and that enables you to control how we use it. Your rights may include:

• the right to request access to the Personal Information that we process about you, including the right to obtain information on and copy of such data;
• the right to withdraw your consent to our processing of your Personal Information at any time. Please note, however, that we may still be entitled to process your Personal Information if we have another legitimate reason (other than consent) for doing so;
• in some circumstances, the right to receive some Personal Information in a structured, commonly used and machine-readable format and/or request that we transmit those data to a third party where this is technically feasible. Please note that this right only applies to personal data which you have provided to us;
• the right to request the Categories of Personal Information (under the CCPA) that we collect, insofar that this is not clear from this Policy
• the right to request that we rectify your Personal Information if it is inaccurate or incomplete;
• the right to request that we erase your Personal Information in certain circumstances. Please note that there may be circumstances where you ask us to erase your Personal Information, but we are legally entitled to retain it;
• the right to object to, and the right to request that we restrict, our processing of your Personal Information in certain circumstances. Again, there may be circumstances where you object to, or ask us to restrict, our processing of your Personal Information but we are legally entitled to continue processing your Personal Information and / or to refuse that request; and
• the right to lodge a complaint with the applicable Supervisory Authority if you think that any of your rights have been infringed by us.

You can exercise your rights by contacting us using the details set out in the “Contact us” section below. We may need to confirm your verifiable consumer request before completing your request, and, for example, may ask for you to login to your account and/or confirm data points we already have about you. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You can also designate an authorized agent to make a request on your behalf. To do so, you need to provide us with written authorization for the agent to act on your behalf. You will still need to verify your identity directly with us.

Contact us

You may contact us with any questions relating to this Privacy Policy by contacting us at privacy@coreograph.com.

For the purposes of this Policy, when we say “Coreograph,” “we,” or “us,” we mean Coreograph, (“Coreograph (Hong Kong),” “AIR Technology Group (Thailand) Co., Ltd .”).