Privacy

Protection of your personal information and general information

In order to protect both the personal information and the general information that we receive from you through our website and the Services, we have implemented various security measures, including measures described in this Privacy Policy.

Confidentiality of Backflipt™ Data

Backflipt™ is a collaboration service.  Sharing information is at the heart of our value to you and your organization.  Our technology analyzes your information in order to intelligently help you share it.  We maintain information about your data (metadata) and use it to automatically present you and your colleagues with information of interest.  Our commitment to you is to give you control over the sharing of your information.  By default, your data that you import into Backflipt™ in connection with your use of our Services is your Private Data, Please refer to Privacy Policy for details.

Data Retention/Caching

Most organizations apply their own data retention and management policies for email.  Xenovus services are designed to respect these policies without requiring additional administration.

Privilege Management

Backflipt™ manages access to external conversations and internal collaborations using a revolutionary automated approach.  Intelligence within the service lets users control access in a simple, natural way.

Zero Administration Philosophy

Backflipt™ is designed with a goal of zero administration required.  Backflipt™ manages access privileges based on user actions such as sharing a file or adding people to email distribution lists.  Users have access to information in Backflipt™ based on these actions taken in email as well as actions taken with the Backflipt™ app.

User Control

When a user “Backflipts” an external conversation, the user becomes the owner of the internal collaboration.  The owner can invite specific people to follow the conversation or publish it more broadly within the organization.  Followers can see comments made in the external conversation, but they cannot participate.  Followers can participate in the internal collaboration associated with the external conversation they are following.

Technology

Backflipt™ encrypts all your data and only unencrypts it as necessary to display it or process it.

Data in Transit

All data in transit is encrypted and secured using Secure Sockets Layer (SSL).  There are two types of connection:  Xenovus service to Backflipt™, and Xenovus service to 3rd-party service providers.  Service providers include email service providers (Google, Microsoft, others) and storage service providers (Dropbox, Box and others).  Xenovus only exchanges information with services authorized by its users.

Data at Rest

Backflipt™ stores information (messages and documents), credentials and metadata.  For service providers that support OAuth (e.g. Google, Dropbox), no credentials are stored in the Xenovus service.  For service providers that do not support OAuth, the Xenovus service encrypts credentials as they are input by the user.  The credentials are decrypted within the Xenovus service and then transmitted via SSL to authenticate with the service provider.

Data at rest is stored in encrypted format using AES 256-bit encryption.  Data is received into a cache and encrypted in chunks at periodic intervals. The Xenovus Security Management software resolves decryption requests from the Xenovus service.

We take precautions to ensure that your personal information and data is protected.

  • We don’t sell your data.
  • We won’t send email to your contacts or post to social networks without your permission.
  • Backflipt software retrieves and temporarily stores your data in encrypted form as part of the Backflipt experience. Controls are in place to ensure that there is no human access to your data.
Secure Physical Location

Our servers are located in Amazon’s AWS data centers.  Amazon describes their extensive security policies and technologies here: https://aws.amazon.com/compliance/

Privacy Policy

1    INTRODUCTION

This Privacy Policy (“Privacy Policy” or “policy”) is an agreement between Xenovus in regards to this website and all related sub-domains, tools and services (“Website”, “Websites”, “Site” or “Sites”), and you, as the user of the Sites (“you” or “your”). This Privacy Policy also covers the use of the Backflipt™ Service through applications on Devices and APIs. A “Device” is any device used to access the Backflipt™ Service, including without limitation a computer, mobile phone, tablet, or other electronic device (the “Services”). By using the Services you are consenting to the collection, transfer, processing, storage, disclosure and other uses described in this Privacy Policy.

This Privacy Policy tells you when this policy is effective, what information we collect from you, how we might use it, how you can review or change the personal information you provided to us, how we may change this policy, and the steps we take to ensure that your personal information is protected.

Access to the Websites and the Services is also subject to the http://www.xenovus.com/termsofservice accessible on our Websites (the “Terms of Service”). Capitalized terms used but not defined in this Privacy Policy, shall have the meaning set forth in the Terms of Service. This Privacy Policy applies solely to information collected by or in connection with this Site.

2    AGREEMENT TO TERMS OF PRIVACY POLICY AND TERMS OF SERVICE

AGREEMENT TO TERMS. All activities in which you may engage on this website and when using the Services are voluntary. You are not required to provide any personal information to us unless you choose to access features on this site or the Services, which require the information. If you do not agree with the terms of this policy or other terms of service on this website, then you should immediately exit this website and discontinue using the site. The terms of service of this site are expressly incorporated herein by reference and made a part of this policy. By using our website, you signify that you agree to the terms of this Privacy Policy as well as to our terms of service.

3    EFFECTIVE DATE OF AND CHANGES TO PRIVACY POLICY

EFFECTIVE DATES. This Privacy Policy is effective as of Jan-2014, and will remain in effect except with respect to any of its provisions that are changed in the future, in which case the changes will become effective on the date they are posted on the website or we otherwise notify you of the changes. We reserve the right to change this Privacy Policy at any time. Changes, modifications, additions, or deletions will be effective immediately on their posting to this site. You should check this policy periodically as its terms may change from time to time. Your continued use of the site after we post any such modifications will constitute your acknowledgment of the modified policy and your agreement to abide and be bound by the modified policy. We will also revise the “last updated” date found at the end of this Privacy Policy when we post changes to it.

4    POLICY APPLICABLE TO ONLINE ACTIVITIES ONLY

DISCLAIMERS. The Privacy Policy does not extend to anything that is inherent in the operation of the Internet, and therefore beyond our control, and is not to be applied in any manner contrary to applicable law or governmental regulation. This Privacy Policy only applies to information collected through this site and the Services. Our websites may contain links to other websites operated by third parties. Xenovus is not responsible for the online information practices or policies of such third party websites, and this Privacy Policy does not apply to those websites.

5    PERSONAL INFORMATION WE MAY COLLECT

TYPES OF INFORMATION COLLECTED. We may ask you for certain information referred to on this site as “personal information,” which includes information that pertains to your identity. Such information may include, but is not limited to, items such              as your name, address, date of birth, age, gender, e-mail address, telephone number, or credit card or debit card number. You may be required to provide personal information to access or use certain parts of our website or features of the site or Services. If you do not provide the requested personal information, you may not be able to access or use the features of the site or Services where such information is requested.

When expressing an interest in obtaining additional information about the Services or registering to use the Services, Xenovus may require you to provide the Company with personal contact information, including your name, company name, phone number, and email address (“Required Contact Information”). When purchasing the Services, Xenovus may require you to provide the Company with financial qualification and billing information, such as billing name and address, credit card number, and the number of employees within the organization that will be using the Services (“Billing Information”). Xenovus may also ask you to provide, or otherwise allow you to share, additional information, which you may choose to share in your registration for or use of the Services (“Optional Information”). For example, Xenovus may obtain Optional Information by asking a user to import his or her contacts and email history by granting Xenovus access to the user’s third party services (for example, the customer’s email account) or to use the user’s social networking information if the user gives us access to his or her account on a social network service. In order to use the Backflipt™ Services, a user must link a third party email account to the user’s Backflipt™ Service account. We then import, create, and update versions of the user’s address book and emails for the user to access in the Backflipt™ Service. A user will also have the option to import and update versions of his or her calendar, social media contacts, and mobile phone call history, and the user can later choose to upload files to, or provide comments through, our Services. Required Contact Information, Billing Information, and Optional Information about users are referred to collectively as “Data About users”. With your permission (which you grant by signing up for or using our Services), Xenovus collects and stores information you provide or that we collect in order to administer our Services and/or as otherwise described in this Privacy Statement or our Terms of Service. If you or another user uploads a file or data to the Backflipt™ Service that has been previously uploaded by you or another user, we may associate all or a portion of the previous file or data with the applicable accounts rather than storing duplicates. In other words, information you provide that relates to a particular person may be added to or associated with data provided by another individual that relates to that same particular person. If a user ceases to use our Services, information that user provided may continue to be incorporated into data provided through the Backflipt™ Service.

6    OTHER INFORMATION WE MAY COLLECT

There may be other instances in which we collect information from you that is more general in nature (“general information”). Such information may include your Internet Protocol (IP) address, which enables us to identify your computer or device on a Transmission Control Protocol/Internet Protocol (TCP/IP) network, which includes the World Wide Web. Your computer has an IP address, which is required in order for you to communicate with others via the Internet. Such general information, including the click stream data and cookies, as mentioned below, may be collected from you whenever you access the site, whether or not you provide us with any personal information.

Click Stream Data

When you visit our website we may also collect “click stream data” (server address, domain name). This information can be combined with information you have provided to us by registering, for example, which will enable us to analyze and better customize your visits. We may use click stream data for traffic analysis or e-commerce analysis of our website, to determine which features of our site are most or least effective or useful to you.

Cookies

We may also use cookies to gather information about your visits to our website and enhance your experience. More information on how we use cookies is available in the section “Use of Cookies.”

How We Respond to “Do Not Track” Disclosures

We are strongly committed to not sharing nonpublic information with third parties.

Under this Privacy Policy, we may share your information only under particular situations, as described in this Policy. Because we protect all users in this manner, we do not change our behavior in response to a web browser’s “do not track” signal.

7    INFORMATION ABOUT YOU

We are not in the business of selling your information. We do use your personal data in specific ways. We collect personal data that you voluntarily provide, such as when you register for our service. We also use your information in the delivery of our service. For example, we display your name as a participant or follower of conversations and in the contact lists of others in your organization. We use personal and other information collected through our site and our services for the purposes described in this

Privacy Policy or elsewhere on our site. For example, we may use information we collect as follows:

  • To administer a content promotion survey or other site and to provide you with the relevant products or services.
  • To send you information or materials via e-mail about products, offers, and news we think might interest you. This information may relate to our products, offers, and news about us or our licensees or selected commercial partners. If you no longer wish to receive any e-mails from us, or if you want to modify your personal data or want your personal data to be deleted from our database, see Section 13.
  • To analyze visits to the website and learn about the interests of our visitors in aggregate and also on a personal level to better understand your interests and needs, so we can improve our products and services and deliver to you the type of content, features and promotions that you are most interested in, and to personalize and improve our site and our users’ experiences on our Site, such as content, or features that match their profiles or interests, and to increase our Site’s functionality and user friendliness
  • To create, organize, and update your contact records in your Backflipt™ account;
  • To enable you to share your information and communicate with other users;
  • To respond to your emails, submissions, questions, comments, requests, and complaints and provide customer service;
  • To send you confirmations, updates, security alerts, and support and administrative messages and otherwise facilitate your use of, and our administration and operation of, our Site; and
  • For any other purpose for which the information was collected.

8    PROTECTION OF YOUR PERSONAL INFORMATION AND GENERAL INFORMATION

Security Measures

In order to protect both the personal information and the general information that we receive from you through our website and the Services, we have implemented various security measures, including measures described in this Privacy Policy.

Risk of Interception

Please keep in mind, however, that whenever you give out personal information online there is a risk that third parties may intercept and use that information. While we strive to protect your personal information and privacy, we cannot guarantee the security of any information you disclose online. By using this site and the Services, you expressly acknowledge and agree that we do not guarantee the security of any data provided to or

received by us through this site or the Services and that any personal information, general information, or other data or information received from you through is provided to us at your own risk, which you expressly assume.

9    BACKFLIPT™ DATA HANDLING

Confidentiality of Backflipt™ Data

Backflipt™ is a collaboration service. Sharing information is at the heart of our value to you and your organization. Our technology analyzes your information in order to intelligently help you share it. We maintain information about your data (metadata) and use it to automatically present you and your colleagues with information of interest. Our commitment to you is to give you control over the sharing of your information. By default, your data that you import into Backflipt™ in connection with your use of our Services is Private Data. Private Data is maintained as confidential by Backflipt™ except as described in this Privacy Policy and is stored securely on our servers. We may share your data with third parties as permitted in this Privacy Policy and as provided in our Terms of Service, or as directed by the express actions of its users.

Data Retention/Caching

Most organizations apply their own data retention and management policies for email. Xenovus services are designed to respect these policies without requiring additional administration.

Privilege Management

Backflipt™ manages access to external conversations and internal collaborations using a revolutionary automated approach. Intelligence within the service lets users control access in a simple, natural way.

Zero Administration Philosophy

Backflipt™ is designed with a goal of zero administration required. Backflipt™ manages access privileges based on user actions such as sharing a file or adding people to email distribution lists. Users have access to information in Backflipt™ based on these actions taken in email as well as actions taken with the Backflipt™ app.

User Control

When a user “Backflipts” an external conversation, the user becomes the owner of the internal collaboration. The owner can invite specific people to follow the conversation or publish it more broadly within the organization. Followers can see comments made in  the external conversation, but they cannot participate. Followers can participate in the internal collaboration associated with the external conversation they are following.

Technology

Backflipt™ encrypts all your data and only unencrypts it as necessary to display it or process it.

Data in Transit

All data in transit is encrypted and secured using Secure Sockets Layer (SSL). There are two types of connection: Xenovus service to Backflipt™, and Xenovus service to 3rd-party service providers. Service providers include email service providers (Google, Microsoft, others) and storage service providers (Dropbox, Box and others). Xenovus only exchanges information with services authorized by its users.

Data at Rest

Backflipt™ stores information (messages and documents), credentials and metadata. For service providers that support OAuth (e.g. Google, Dropbox), no credentials are stored in the Xenovus service. For service providers that do not support OAuth, the Xenovus service encrypts credentials as they are input by the user. The credentials are decrypted within the Xenovus service and then transmitted via SSL to authenticate with the service provider.

Data at rest is stored in encrypted format using AES 128-bit encryption. Data is received into a cache and encrypted in chunks at periodic intervals. The Xenovus Security Management software resolves decryption requests from the Xenovus service.

Secure Physical Location

Our servers are located in Amazon’s AWS data centers. Amazon describes their extensive security policies and technologies here: https://aws.amazon.com/compliance/

10   NO USE OF THIS SITE BY PERSONS UNDER 18 PERMITTED

Only persons who are 18 years or older are intended or authorized to use this website. Personal registration information submitted by a person under the age of 18 will not be accepted. Any general information provided by a person under the age of 18 and gathered (for example, through the use of cookies) during his or her visit may be used as indicated in this policy (see Section 12). We are committed to protecting the privacy of children and have no intention of collecting personal data from children under the age of 18. We encourage parents and guardians of children under 18 to regularly check and monitor  their children’s use of e-mail and other activities online.

Notice Concerning Children

PLEASE NOTE: We are a general audience site, and do not direct any of our content specifically at children under 13 years of age. We understand and are committed to respecting the sensitive nature of children’s privacy online. If we learn or have reason to suspect that a site user is under age 13, we will promptly delete any personal information in that user’s account.

11   THIRD PARTIES

WHO MAY HAVE ACCESS TO YOUR INFORMATION. Other than Xenovus and its affiliates for the purposes set out above, and except as described in this policy, we do not sell, trade, or otherwise transfer your personal information or general information to third parties without informing you in advance. We provide some of our services through contractual arrangements with affiliates, services providers, partners and other third parties (collectively, “service partners”). Our service partners may use your personal information to operate our sites and to deliver their services. For example, your data may be transferred to website hosting partners and other parties who assist us in designing and operating the website, executing services, or helping us analyze collected data. These parties will only use your data for the purpose of carrying out the work as agreed with us and will be required to keep the information confidential and provide a seamless user experience. We will encourage our service partners to adopt and post privacy policies.

However, the use of your personal information by our service partners is governed by the privacy policies of those service partners and is not subject to our control.

RELEASE OF INFORMATION. We may release personal or general information without your consent for security purposes, when required by law, or to prevent imminent harm to any person or entity. We will disclose personal or general information upon receipt of a court order or subpoena, or to cooperate with a law enforcement investigation, which may include responding to requests and court orders from jurisdictions outside the United States. We fully cooperate with law enforcement agencies in identifying those who use our services for illegal activities. We reserve the right to report to law enforcement agencies any activities that we in good faith believe to be unlawful, as determined in our sole discretion. Release of your personal data for security purposes, as described in this privacy policy to any person or entity under any circumstances shall be based on a determination made solely by us, exercising our own discretion, permission for which is expressly granted by you to us in accordance with this policy. We reserve the right to disclose your personal information as otherwise required by law and when we believe that disclosure is necessary to protect our rights or the rights, property or safety of others; to comply with a judicial proceeding, court order, or legal process served on us or our websites; or in connection with an actual or proposed corporate transaction or insolvency proceeding involving all or part of the business or asset to which the information pertains.

Links to Third Parties

PURPOSE OF LINKS. For your convenience and to improve the usage of the website we may insert links to third parties on this site. This Privacy Policy does not apply to such third party websites. These links take you outside our service and off our Sites and are beyond our control. This includes links from partners that may use our logos as part of a co-branding agreement. The sites those links can take you to have their own separate privacy policies and although we seek to protect the integrity of our site, we are not liable for the content and activities of those sites. Your visits and access to such websites is at your own risk. Please note that those other sites may send their own cookies to users, collect data, or solicit personal information.

12   AUTOMATIC COLLECTION

We track the data you see in Backflipt™ and how you interact with it by automatically collecting certain information when you use our Site and our Services, such as your Internet Protocol (IP) address, your operating system, the browser type, the address of a referring site and your activity on our Site. We treat this information as private data if we combine it with or link it to any of the your personal information. Otherwise, it is used in aggregate form only. We use tracking data about individuals in an anonymous and aggregated form to inform us about how Backflipt™ is being used to help us provide a better user experience.

Use Of Cookies

A cookie is a small string of information that the website you visit transfers to your computer for identification purposes. Cookies can be used to follow your activity on the website and that information helps us to understand your preferences and improve your website experience. Cookies are also used for such activities as remembering your user name and password, if you use such a feature on this site. You can turn off all cookies, in case you prefer not to receive them. You can also have your computer warn you whenever cookies are being used. For both options you have to adjust your browser settings (such as Chrome, Safari, Firefox, Internet Explorer, or other browser). There are also software products available that can manage cookies for you. Please be aware, however, that when you choose to reject cookies, this choice may limit the functionality of the website you visit and you may lose access to some of its features.

13   DELETING OR MODIFYING PERSONAL INFORMATION

What Choices Do You Have Regarding the Use of Your Information?

You may “opt out” of receiving marketing or promotional emails from us by following the instructions in those emails or by emailing us at opt-out@xenovus.com. If you opt out, we may still send you non-promotional emails, such as emails about your Backflipt™ account or our ongoing business relations.

Additionally, you can choose to have all your personal information deleted from our database by unsubscribing to Backflipt™ service.

14   QUESTIONS OR COMMENTS

CONTACT INFORMATION. If you have any questions or comments relating to our website or the Privacy Policy, send an e-mail to privacy@xenovus.com or write

Attn: Privacy Compliance Officer, 2635, Old IronSides, #404, Santa Clara, CA, 95054. Last Updated: [Rev Date]

Copyright © 2015 Xenovus, Inc. All Rights Reserved.