PRIVACY POLICY

This section gives you all the information you need to know about how we collect and treat your personal identifying information through our websites.

What do we collect

MyScript collects limited personal identifying information your browser makes available whenever you visit a website, in this case www.myscript.com or www.nebo.app. This log information includes your Internet Protocol address, browser type and language, the date and time of your query.

How do we collect

Through your browser and/or through cookies that may uniquely identify you.

Basis for this collection

Some of this information is necessary for our website to function properly, such as place, date and time. For unnecessary cookies and analytics, the basis of the collection is your acceptance of our cookies banner.

What do we use it for

We use this information for internal analytics purposes to operate, develop and improve our websites and the services that they provide. We do not use this information to target advertising on our websites or any other websites. MyScript may use analytics tool providers to develop and analyze use of some MyScript Products. The data collected by the analytics providers will be used according to their respective privacy policies. You will find more information about analytics data on our cookies page.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with certain third-party service providers (notably AWS servers based in the US) in order to back up our data.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

The information that is stored in a cookie is kept for no longer than 6 months. All other information is kept for no longer than one year.

This section gives you all the information you need to know about how we collect and treat your personal identifying information if you sign up to be a MyScript developer through our developer site.

What do we collect

When signing up for an account you need to provide us with an email address & password to create the account. If you do not provide this personal identifying information we will be unable to create your account and so you will be unable to use MyScript technology. We will also collect your IP address. You can provide us with extra non-obligatory personal identifying information such as your full name, your company name, your position in the company, your town and your country which we use to personalize your experience and for analytics purposes.

How do we collect

This personal identifying information is collected through an online form when creating an account. For your information, this account can also be used if you register as a Nebo user.

Basis for this collection

Through the acceptance of this privacy policy and the terms and conditions of the developer portal when you create an account.

What do we use it for

We use this personal identifying information to contact you with developer news, and technology updates, etc. We may also contact you about research projects in order to improve our technology or to propose preferential commercial terms in order to distribute any applications you may have developed.

You may unsubscribe at any time by logging into your account here: https://sso.myscript.com/login. Once logged in, you can change all your preferences about emails that you receive in your profile under the section “Communication”. You may not opt out of legal notices informing you of a change in licensing terms, terms and conditions or this privacy policy.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with the following third-party service providers:

• AWS servers based in the European Union to back up your account data,
• Brevo mailing provider based in the European Union to organize and manage our mailing lists and send grouped mailings.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

In order to maintain your account active, we keep your personal identifying information until you delete your account. You can delete your account in your profile at any moment. Once you delete your account, it can take up to 12 months for back-up copies to be overwritten. If your account is inactive for more than 24 months in a row, we will send you a warning email asking you to sign in. If you do not do this within 2 months we will automatically delete your account. Please be aware that once an account is deleted it cannot be reactivated, the decision is irreversible.

Forum posts

If you choose to post on our developer forum your post and your name will be visible for all other forum visitors. Your posts will remain visible until you delete your account. At this moment your posts will automatically be deleted.

This section gives you all the information you need to know about how we collect and treat your personal identifying information if you are a Nebo user. It notably describes how we protect your Nebo notes.

What do we collect

As a Nebo user, you may choose to create a MyScript account or not. Doing so will enable you to synchronize your notes with a cloud storage service. When signing up for an account, you need to provide us with an email address & password to create the account. If you do not provide this personal identifying information we will be unable to create your account and so you will be unable to synchronize your Nebo notes to a cloud storage service or use the generative artificial intelligence features. You can provide us with extra non-obligatory personal identifying information such as your full name, your company name, your position in the company, your town and your country which we use to personalize your experience and for analytics purposes.

How do we collect

This personal identifying information is collected through an online form when creating an account. For your information, this account can also be used if you register to become a MyScript developer. We also collect the token for your chosen cloud storage platform through this platform in order to allow syncing.

Basis for this collection

Through the acceptance of this Privacy Policy.

What do we use it for

We use your personal identifying information for the below purposes:

• to allow you to synchronize your Nebo notes to a third-party cloud storage service and/or view or share your Nebo notes through Nebo Cloud, and
• to contact you with Nebo news & updates and/or about research projects in order to improve our technology if you opted in to receive these emails. At any time, you may opt in or out from our mailing lists in your account settings, under the section "Communication". https://sso.myscript.com/account/communication
• to contact you about updates to our terms and conditions and/or this privacy policy. You may not opt out of these mailings as it is our legal obligation to inform you.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with the following third-party service providers:

• AWS servers based in the European Union to back up your account data (not your notes),
• Brevo mailing provider based in the European Union to organize and manage our mailing lists and send grouped mailings,
• Survicate survey provider based in the European Union to ask you survey questions. Survicate does not have access to your account information, nor your notes. It only has access to limited information related to your use of Nebo. For example: your language or your device ID.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

In order to maintain your account active, we keep your personal identifying information until you delete your account. You can delete your account in your profile at any moment. Once you delete your account, it can take up to 12 months for back-up copies to be overwritten. If your account is inactive for more than 24 months in a row, we will send you a warning email asking you to sign in. If you do not do this within 2 months we will automatically delete your account. Please be aware that once an account is deleted it cannot be reactivated, the decision is irreversible.

Your Nebo Notes’ Content

Your Nebo notes are automatically stored locally on your device. We have no access to your Nebo notes through your device. Your notes are not automatically backed up.

If you have created an account, you may use a cloud service to view, share and synchronize your Nebo notes (such as Nebo Cloud, Dropbox, Google Drive or iCloud). You also need to read the privacy policy for each third-party cloud service.

If you use any available cloud service, you will be given the choice to share your notes with MyScript. MyScript will only access the content of your Nebo notes if you have enabled the sharing option. You may enable or disable this option at any time in the settings. If you enable the sharing option, we may use the content of your notes in order to develop, train and improve our algorithm, and conduct language-based research in accordance with our Legal Notice and Terms of Use. Only specifically authorized people within MyScript will have access to a note and we always hash the link between your account and your notes. Your shared notes are deleted from our servers either upon your request, or automatically when you delete your account. Disabling the sharing option does not delete your notes from our servers. Once you delete your account, it can take up to 12 months for back-up copies to be overwritten.

In case you request support, the MyScript support team may ask your permission to access a note in order to solve the problem. For more information about the way we treat your personal identifying information when you open a support ticket, please read our “Support Request” section.

Analytics

MyScript Nebo for iOS and Android use Firebase and Google Analytics 4 for crash reporting and as an analytics tool (based in the USA).

The data collected by Firebase and Google Analytics 4 is directly related to your interaction with the Software such as settings preferences, gesture performed, use of user interface elements, the in-app purchases of the Software, and installation unique user identification (for crash reporting purposes). Information about the device you use may also be collected such as the device model, the language installed on the device, the version of your operating system, and the carrier whom you are with.

For more information about how Firebase and Google Analytics 4 collects data, please refer to https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008. Please note we have turned off data sharing with Google to prevent Google representatives from accessing collected analytics data. Crash traces and their associated identifiers are kept for 90 days.

Nebo for Windows uses App Center analytics tool. The data collected by App Center is directly related to your interaction with Nebo for Windows such as settings preferences, gestures performed, use of user interface elements. Information about the device you use may also be collected such as the device model, the language installed on the device, the version of your operating system, the carrier whom you are with and your location.

For more information about App Center collecting data, please refer to https://privacy.microsoft.com/en-US/privacystatement.

You can opt in or out of analytics at any time in the privacy settings.

Nebo for iOS and Android use the mobile measurement partner “Adjust” for measuring the success rates of advertising campaigns. Adjust never has access to your Nebo notes or your account information, including your email address. You will have the opportunity to opt in or out when Nebo first starts. If you opt in, Adjust will have access to your device’s advertising ID. You can change your preferences at any time within your device settings.

Nebo's generative artificial intelligence features

You will need to create a MyScript account before being able to access Nebo’s generative artificial intelligence features (“AI Features”). The AI Features are powered by OpenAI. Your account information is not transferred to OpenAI. If you have access to AI Features and decide to insert all or any part of your content into these AI Features you are also uploading and sharing this content with OpenAI. Your content will be treated in accordance with OpenAI’s data usage policies. Your content is not systematically shared with OpenAI, only the specific part of the content or page that you insert into the AI Features. MyScript does not keep a record of any request or answer that is sent or received through the AI Features. If you are unsatisfied with the result generated from the AI Features you have the option to notify MyScript through an automatic notification window. This window will automatically generate a support ticket which will include the content on your page if you opted in to share with MyScript. The content of the support ticket will be treated in the same way as any other support ticket.

This section gives you all the information you need to know about how we collect and treat your personal identifying information if you are a Nebo Cloud user. It notably describes how we protect your Nebo notes.

What do we collect

If you choose to use Nebo Cloud services as part of your MyScript account, Nebo notes shared using this service will be stored on our third party secured servers. We may run analytic reports to gather data such as size, creation date and number of pages on these files, however we will not access the contents unless you have accepted to share, as described above in the “Nebo User” section.

We may also store the names and e-mail addresses of your contacts in order to create a contact list that you may use within Nebo Cloud but only if you opt in to this.

How do we collect

The information concerning your contacts is collected through your account when you enter the name and e-mail address.

The analytical information is collected through our servers when you publish to Nebo Cloud.

Basis for this collection

Through the acceptance of this Privacy Policy.

What do we use it for

We use this information for the two purposes below:

• to allow you to easily and quickly share and/or view your Nebo notes with your contacts through the Nebo Cloud, and
• to collect anonymous data about how the Nebo Cloud service is used by our clients.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with the following third-party service providers:

• AWS servers based in the US to store and back up the data shared on Nebo Cloud.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

We keep your personal identifying information and all data shared on Nebo Cloud until you delete your account. You can delete your account in your profile at any moment. Once you delete your account, it can take up to 12 months for back-up copies to be overwritten. If your account is inactive for more than 24 months in a row, we will send you a warning email asking you to sign in. If you do not do this within 2 months we will automatically delete your account. Please be aware that once an account is deleted it cannot be reactivated, the decision is irreversible.

This section gives you all the information you need to know about how we collect and treat your personal identifying information if you are a Nebo for Organizations user. It notably describes how we protect your Nebo notes.

What do we collect

As a Nebo for Organizations user, you automatically have a MyScript account. This enables you to synchronize your notes with a cloud storage service and share notes between different devices. We need to collect an email address & password and your organization’s name in order to create the account. If you do not provide this personal identifying information, we will be unable to create your account. You can provide us with extra non-obligatory personal identifying information such as your full name, your position in the organization, your town and your country which we use to personalize your experience and for analytics purposes.

How do we collect

This personal identifying information is collected through your organization when the organization issues you an account. For your information, this account can also be used if you register to become a MyScript developer. We also collect the token for your chosen cloud storage platform through this platform in order to allow syncing.

Basis for this collection

We need to collect this personal identifying information in order to carry out our contractual obligations with your organization.

What do we use it for

We use your personal identifying information for the two purposes below:

to allow you to synchronize your Nebo notes to a cloud storage service and or view or share your Nebo notes through Nebo Cloud, and

to contact you with Nebo news & updates and/or about research projects in order to improve our technology if you opted in to these categories. At any time, you may opt in or out from our mailing lists in your account settings here: https://sso.myscript.com/account/communication.

Once logged in, you can change all your preferences about emails that you receive in your profile under the section “Communication”.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with the following third-party service providers:

• AWS servers in the European Union for back up and storage,
• Brevo mailing provider based in the European Union to organize and manage our mailing lists and send grouped mailings.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

In order to maintain your account active, we keep your personal identifying information until you delete your account. You can delete your account in your profile at any moment. Once you delete your account, it can take up to 12 months for back-up copies to be overwritten. If your account is inactive for more than 24 months in a row, we will send you a warning email asking you to sign in. If you do not do this within 2 months we will automatically delete your account. Please be aware that once an account is deleted it cannot be reactivated, the decision is irreversible.

Your Nebo Notes’ Content

Your Nebo notes are automatically stored locally on your device. We have no access to your Nebo notes through your device. Your notes are not automatically backed up.

If you have created an account, you may use a cloud service to view, share and synchronize your Nebo notes (such as Nebo Cloud, Dropbox, Google Drive or iCloud). You also need to read the privacy policy for each third-party cloud service.

If you use any available cloud service, you will be given the choice to share your notes with MyScript. MyScript will only access the content of your Nebo notes if you have enabled the sharing option. You may enable or disable this option at any time in the settings. If you enable the sharing option, we may use the content of your notes in order to develop, train and improve our algorithm, and conduct language-based research in accordance with our Legal Notice and Terms of Use. Only specifically authorized people within MyScript will have access to a note and we always hash the link between your account and your notes. Your shared notes are deleted from our servers either upon your request, or automatically when you delete your account. Disabling the sharing option does not delete your notes from our servers. Once you delete your account, it can take up to 12 months for back-up copies to be overwritten.

In case you request support, the MyScript support team may ask your permission to access a note in order to solve the problem. For more information about the way we treat your personal identifying information when you open a support ticket, please read our “Support Request” section.

Analytics

MyScript Nebo for iOS use Flurry analytics tool. The data collected by Flurry is directly related to your interaction with MyScript Nebo for iOS and Android such as settings preferences, gestures performed, use of user interface elements. Information about the device you use may also be collected such as the device model, the language installed on the device, the version of your operating system, the carrier whom you are with and the IP address (personal identifying information). All of this information is not shared with Flurry but is backed up on our AWS servers, based in the European Union.

MyScript Nebo for iOS and Android also use Firebase and Google Analytics 4 for crash reporting and as an analytics tool (based in the USA).

The data collected by Firebase and Google Analytics 4 is directly related to your interaction with the Software such as settings preferences, gesture performed, use of user interface elements, the in-app purchases of the Software, and installation unique user identification (for crash reporting purposes). Information about the device you use may also be collected such as the device model, the language installed on the device, the version of your operating system, and the carrier whom you are with.

For more information about how Firebase and Google Analytics 4 collects data, please refer to https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008. Please note we have turned off data sharing with Google to prevent Google representatives from accessing collected analytics data. Crash traces and their associated identifiers are kept for 90 days.

Nebo for Windows uses App Center analytics tool. The data collected by App Center is directly related to your interaction with Nebo for Windows such as settings preferences, gestures performed, use of user interface elements. Information about the device you use may also be collected such as the device model, the language installed on the device, the version of your operating system, the carrier whom you are with and your location.

For more information about App Center collecting data, please refer to https://privacy.microsoft.com/en-US/privacystatement.

Android

MyScript Calculator for Android uses Firebase & Google Analytics 4 for crash reporting and for performance monitoring. The data collected by Firebase & Google Analytics 4 for crash reporting includes installation UUID (universally unique identifier) and crash traces. This data helps MyScript to associate crash data with specific instances of MyScript Calculator for Android. Crash traces and their associated identifiers are kept for 90 days. For more information about how Firebase collects data in order to provide service of Firebase Crashlytics, please refer to https://policies.google.com/privacy#intro. Please note we have turned off data sharing with Google to prevent Google representatives from accessing collected analytics data.

The data collected by Firebase and Google Analytics 4 for performance monitoring includes general device information, such as model, OS, carrier, country, etc. For more information about data collected for performance monitoring services provided by Firebase, please refer to https://support.google.com/firebase/answer/6318039#perfmon.

You will be prompted to accept or reject analytics when opening the application.

This section gives you all the information you need to know about how we collect and treat your personal identifying information if you ever make a support request through our support portal.

What do we collect

When you request support via our support portal, you will need to have an active account. This personal identifying information is necessary so that we can process your request and contact you with any questions we may have in order to clarify and resolve your request. If your request is about your Nebo notes, we may also need access to your notes in order to carry out a technical analysis and solve the problem.

How do we collect

We collect this via an online form: https://app-support.myscript.com/support/tickets.

If your support request requires further information (such as a note) we will ask for this via email, however you may send your notes to us straight away if you wish.

Basis for this collection

Through the acceptance of this Privacy Policy.

What do we use it for

We use this personal identifying information to contact you about your support request. We may find that your support request is particularly challenging and as such wish to conduct research. If your request requires us to start a research project, we may contact you asking for more information or inviting you to take part in the potential research project.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with the following third-party service providers:

• AWS servers based in the European Union to store and back up notes associated to a support request,
• OneDrive (by Microsoft) based in the European Union to transfer any heavy files containing repaired notes following a support request, (we may use another transfer service if you request it),
• Brevo mailing provider based in the European Union to organize and manage our mailing lists and send grouped mailings,
• Freshdesk (Freshworks) support service provider based in the European Union for managing support tickets.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

All support requests and associated files, such as .nebo files, are kept on record until you delete your account, or until you ask for them to be deleted. Once your account is deleted we automatically delete all information attached to it. Once you delete your account, it can take up to 12 months for back-up copies to be overwritten.

This section gives you all the information you need to know about how we collect and treat your personal identifying information if you or your company have entered into a contract with MyScript, notably a technology partnership.

What do we collect

When your company enters into a contract with MyScript such as a technology partnership agreement we need the name, email, address, position of certain people in the company such as the signatory, the accounts and the technology officer. This personal identifying information is obligatory in order to ensure the legality of the contract and correctly manage the administration of the contract. If you do not provide this personal identifying information, we will be unable to execute any possible agreement or partnership.

How do we collect

We collect this personal identifying information through the contract and through our technology portal where you may ask for support and deliveries.

This personal identifying information may be directly provided by you or by your company.

Basis for this collection

For the performance of the contract executed between your company and MyScript.

What do we use it for

We use this personal identifying information to contact you about the contract and/or the technology, in order to provide you with support, or manage invoicing and billing.

If you are a commercial contact, you will also be contacted about our upcoming events and/or technology developments.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with the following third-party service providers:

• AWS servers based in the US to back up our contractual data,
• Alwaysdata based in the European Union to back up our technology related data,
• Microsoft based in the European Union to send specific mailings,
• Brevo mailing provider based in the European Union to organize and manage our mailing lists and send grouped mailings,
• Salesforce based in the US to organize our contracts and sales contacts.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

We keep this personal identifying information for 5 years after the end of a contract. However due to our legal obligation (notably financial obligations) we may have to keep this information longer.

This section gives you all the information you need to know about how we collect and treat your personal identifying information if you wish to apply for a job opportunity through our website, an authorized third-party recruitment platform or if you wish to send us your CV.

What do we collect

When you apply for a job online we will ask you for your CV, your name, any contact details (email address, postal address and/or telephone number). This personal identifying information is necessary to process your application.

How do we collect

We ask you to fill out a form on our website or send an email to MyScript Human Resources team with your CV attached.

We also collect your personal identifying information when you apply for a job through an authorized third-party recruitment platform (notably Welcome to the Jungle and LinkedIn).

We equally receive propositions from third party recruiters that we work with directly, but we never share your CV with these recruiters.

Basis for this collection

We have a legitimate interest to collect this personal identifying information when processing applicants.

What do we use it for

Contacting you about job opportunities that could interest you or contacting you about a job that you have applied for. We will never contact you for any other reason.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with the following third-party service providers:

• AWS servers based in the US to back up our data,
• Microsoft based in the European Union to communicate with you about job opportunities.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

We will keep a copy of your CV and other personal identifying information for 2 years unless you expressly ask us to keep it for longer.

This section gives you all the information you need to know about how we collect and treat your personal identifying information if you have participated or are planning to participate in a user research project with MyScript or via an online meeting (ex. Zoom meeting) with MyScript teams.

What do we collect

When you wish to participate in a user research project with MyScript, we may ask you for the following non-obligatory personal data: your name, surname, email, telephone number, native language, current country and city, year of birth, occupation, level of studies, gender. If you don’t provide us the personal identifying information needed for a specific project, we will not be able to take your participation into account. As such, we may not be able to contact you about user research projects nor deliver any possible compensation to you in the framework of a user research project.

How do we collect

The MyScript User Research team will choose a communication channel that best fits the user research project. As such, we may ask you, for instance, to fill out an online form, to reply to questions by email or via face-to-face interviews (online or not). If our teams match your profile with a user research project, they will send you a User Agreement. In certain cases, they may ask your written authorization to register your voice and your image.

Basis for this collection

Through the acceptance of this privacy policy and the acceptance of any research agreement.

What do we use it for

We use your personal data for contacting you about user research projects that could interest you and for delivering any possible compensation in the framework of a user research project. The MyScript User Research team will never contact you for any other reason than user research projects.

Who do we share it with

We never sell your personal identifying information to any third parties.

We only share your personal identifying information with the following third-party service providers:

• AWS based in the US to store and back up our data,
• Alchemer based in the US to collect data as part of a research project,
• Brevo mailing provider based in the European Union to organize and manage mailings related to research projects,
• Apple Testflight based in the US to send unreleased version of our applications to research participants,
• Zoom based in the US to conduct interviews with research participants,
• Airtable based in the US to collect and collate research data.

Please note that we either

1. use third-party service providers that are certified to adhere to the Data Privacy Framework Principles or
2. have data protection addendums in place with all our third-party service providers that transfer your personal identifying information outside of the European Union. These data protection addendums ensure that sufficient measures are taken by our service providers to protect your personal identifying information in accordance with the European regulation on data protection (GDPR).

We may share your PII with government authorities if legally required to do so by a court order or government decision.

How long do we keep it for

Your personal identifying information related to a particular research project will be kept for a maximum of 5 years. Please note that this does not cover your personal identifying information related to your account. This data must be the object of a separate deletion request.