Effective: 16 September 2020
We describe how we collect, use and handle your personal data when you use our websites, software and services (“Services”) here below.
We collect and use the following information to provide, improve, protect and promote our Services.
User information. We collect, and associate with your account, the information you provide to us when you do things such as sign up for your account, upgrade to a paid plan and set up two-factor authentication (such as your name, email address, phone number, payment info and physical address).
Your Material. Our Services are designed as a simple and secure way for you to encrypt and transfer your files, documents, photos, and so on (“Your Material”). To make that possible, we encrypt, process and transmit Your Material as well as information related to it. Your Material with others, as well as things like the size of the file, the time it was uploaded, and usage activity.
Contacts. You can choose to give us access to your contacts to make it easy for you to do things like share and encrypt Your Material, send messages and invite others to use the Services.
Usage information. We collect information relating to how you use the Services, including actions you take in your account. We use this information to provide, improve and promote our Services, and protect our users.
Device information. We also collect information from and about the devices you use to access the Services. This includes things like IP addresses, the type of browser and device you use, the web page you visited before coming to our sites, and identifiers associated with your devices. Your devices (depending on their settings) may also transmit location information to the Services. For example, we use device information to detect abuse and identify and troubleshoot bugs.
Cookies and other technologies. We use technologies such as cookies to provide, improve, protect and promote our Services. For example, cookies help us with things like remembering your username for your next visit, understanding how you are interacting with our Services, and improving them based on that information. You can set your browser to not accept cookies, but this may limit your ability to use the Services. We may also use third-party service providers that set cookies and similar technologies to promote our services.
Marketing. We give users the option to use some of our Services free of charge. These free Services are made possible by the fact that some users upgrade to one of our paid Services. If you register for our Services, we will, from time to time, send you information about upgrades when permissible. Users who receive these marketing materials can opt out at any time. If you don’t want to receive a particular type of marketing material from us, click the ‘unsubscribe’ link in the corresponding emails.
We sometimes contact people who don’t have an account. For recipients in the EU, we or a third party will obtain consent before getting in touch. If you receive an email and no longer wish to be contacted by us, you can unsubscribe and remove yourself from our contact list via the message itself.
Bases for processing your data. We collect and use the personal data described above in order to provide you with the Services in a reliable and secure manner. We also collect and use personal data for our legitimate business needs. To the extent that we process your personal data for other purposes, we ask for your consent in advance or require our partners to obtain such consent.
We may share information as discussed below, but we won’t sell it to advertisers or other third parties.
Others working for and with us. We use certain trusted third parties for the business purposes of helping us provide, improve, protect and promote our Services. These third parties will access your information to perform tasks on our behalf, and we’ll remain responsible for their handling of your information per our instructions.
Other users. Our Services display information such as your name, profile picture, device, email address and usage information to other users you collaborate with or choose to share with. When you register your Encl account with an email address on a domain owned by your employer or organisation, we may help collaborators and administrators find you and your team by making some of your basic information – such as your name, team name, profile picture and email address – visible to other users in the same domain. This helps you sync up with teams you can join and helps other users share files and folders with you.
Certain features let you make additional information available to others.
Other applications. You can choose to connect your Encl account with third-party services. By doing so, you’re enabling Encl and those third parties to exchange information about you and data in your account so that us and those third parties can provide, improve, protect and promote their services. Please remember that third parties’ use of your information will be governed by their own privacy policies and terms of service.
Enterprise admins. If you are a user of an Enterprise team, your administrator may have the ability to access and control your Encl Enterprise account. Please refer to your organisation’s internal policies if you have questions about this.
Law & order and the public interest. We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to: (a) comply with any applicable law, regulation, legal process or appropriate government request; (b) protect any person from death or serious bodily harm; (c) prevent fraud or abuse of our users; (d) protect our rights, property, safety or interest; or (e) perform a task carried out in the public interest.
Security. We have a team dedicated to keeping your information secure and testing for vulnerabilities. We continue to work on features to keep your information safe in addition to things like two-factor authentication. We deploy automated technologies to detect abusive behaviour and content that may harm our Services, you or other users.
Retention. When you sign up for an account with us, we’ll retain information you store on our Services for as long as your account exists or for as long as we need it to provide you the Services. If you delete your account, we’ll initiate deletion of this information after 30 days. Please note: (1) there might be some latency in deleting this information from our servers and backup storage, and (2) we may retain this information if necessary to comply with our legal obligations, resolve disputes or enforce our agreements. As a registered user, you can access, edit or delete Your Encrypted Material. Once you delete a Encrypted Material for any reason, Your Encrypted Material will also be automatically deleted within 30 days. For technical and support reasons, we may keep your data for 30 days from the date when you delete it. Please note that after your deletion, Your Encrypted Material will be destroyed in a way that those cannot be restored and will not be available again to anyone, including you.
You understand that once you shared all or a part of Your Encrypted Content by using Our Service with any person who accepted your invitation, such content goes out of your Control and remains accessible by such person to the extent you granted such person access, even if you select to delete or remove Your Encrypted Content. Therefore we ask you to pay special attention to whom you share Your Encrypted Content with.
Around the world. To provide you with the Services, we may store, process and transmit data in the United States and locations around the world – including those outside your country. Data may also be stored locally on the devices you use to access the Services.
You have control over your personal data and how it’s collected, used and shared.
If you would like to submit a data access request, ask for your personal data to be deleted or object to the processing of your personal data, please email us at firstname.lastname@example.org.
If we’re involved in a reorganisation, merger, acquisition or sale of our assets, your data may be transferred as part of that deal. We’ll notify you (for example, via a message to the email address associated with your account) of any such deal and outline your choices in that event.