Crooze Privacy Policy
Effective as of June 4, 2024, Crooze, Inc., and its subsidiaries, (collectively, “Crooze” or “we” or “us” or “our”), has updated the Crooze Privacy Policy (“Privacy Policy”) –
What this Privacy Policy covers
At Crooze, we take your privacy and the protection of your personal data seriously. Crooze is an Enterprise Content Management (ECM) solution that helps companies configure, manage, and deploy metadata, collaboration and document management-based applications. This Privacy Policy explains how information (including personal data as defined under GDPR) is collected, retained, used, disclosed, and transferred by Crooze, and the available choices you have with regard to your personal information. This Privacy Policy applies to information collected, used, or shared by Crooze when you use or access our website, products, or services (collectively, the “Crooze Services”).
Information that we collect
Crooze collects information in the following ways:
- Information that you give us:
We collect information directly from you when you register for an account and purchase paid Crooze Services. The types of information we may collect directly from you includes:
– Your first and last name
– Contact information (i.e., job title/position, company name, email address, phone number, physical business address),
– Credit card and other transactional and/or financial information. - Information we collect automatically from your use of our services: When you access the Crooze Services we collect information related to your usage of the Crooze Services and the devices you use to access the Crooze Services. This information includes:
– Usage Information: We may collect log information about but not limited to the features you use, types of content you access or create, actions you perform and how you configure your app.
– Log Information: We may collect log information about when you access and use our services including IP address you access the application from, access time, browser type, language, ISP (Internet Service Provider).
– Device Information: In addition to logging information, we may collect additional information from devices including the hardware model, operating system & version. We do not track any location-based information.
– Limited Information About Your Box Account: We collect limited information about the box.com account that you used during the Crooze Services sign-up process. The information collected is limited to your name, email address and link to your avatar. We may collect additional metadata information about your documents in Box such as file size, file type and creation/upload date. Content contained in files and folders that you chose to upload into the Box service are not stored in Crooze’s systems.
– Cookies/Tokens and Other Tracking Technology : We use cookies for a variety of purposes. For example, we use cookies and tokens to allow you to use our services without continually signing in. We may also collect information using 3rd party services such as Google Analytics. We may use tracking technology to help understand usage and the effectiveness of marketing efforts, for example to determine if an email has been opened. For information on what cookies are, which ones we use, why we use them, and how you can manage their use, please see the “Cookies and Other Tracking Technology” section below.
Use of information
We use the information that we collect to provide, maintain, protect and improve our services, or develop new products. We may use the information to:
- Enable you to collaborate with other users and send emails on your behalf.
- When you call or email us for support, we may need to access certain account information, such as access logs, user information (e.g., name, email address), and metadata information about your documents in Box.
- Inform you about upcoming changes/updates, improvements, new services, support, and administrative messages.
- Communicate with you about offers, promotions, events, or newsletters.
- Analyze trends, usage, and activities for marketing purposes.
- Investigate and prevent unauthorized access, abuse, or other illegal activities.
How we share information we collect
We will not share personal information about you with any third party except as described in this document. For example, we may share personal information including as follows:
Third Party Service Providers: We may provide your information to third party vendors and service providers that are working on our behalf or require access to your personal information (e.g., to process billing or provide customer support). These service providers use your information only as necessary to provide services to Crooze and/or the Crooze Services. For a list of approved Crooze service providers, please see the “Our Subprocessors” section below.
With your Crooze account administrator: If you are a member of a Business or Enterprise account, your administrator may be able to suspend or terminate your access, access information stored as part of your account or receive account information to satisfy legal or government requests. Note that the documents are stored in box.com and are covered by Box’s Privacy Notice.
For legal reasons: We may disclose your information to a third party if (a) we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request, (b) to enforce our agreements, policies and Terms of Service, (c) to protect the security or integrity of the our services, (d) to protect our service, our customers or the public from harm or illegal activities.
With your consent: We may share personal information with companies, organizations or individuals outside Crooze and our partners when we have your consent to do so.
Business transfers: We may share your information with our parent company, Box, Inc. (“Box”) and its respective affiliates in order to provide the Crooze Service. To learn more, please view the Box Privacy Notice. For a full list of Box affiliates, please visit the Box Subprocessor Page.
We may share aggregated, non-personally identifiable information publicly or with our partners.
Retention of Personal Information
We will retain your personal information for a period necessary to fulfill the purposes outlined in this Privacy Notice and in order to provide you the Crooze Service. We will also retain your information to comply with our legal obligations, resolve disputes, and enforce our agreements.
Cookies and Other Tracking Technology
Crooze (“we”) utilizes cookies on its website and applications (collectively, the “Crooze Services”). We use cookies for a variety of purposes. Cookies set by us are called “First-Party Cookies”. We utilize a variety of First-Party Cookies to power, improve and enable core Crooze Services. We use First-Party Cookies when you access our site or visit other sites and apps that integrate with the Crooze Services. Many of our cookies are required for reasons that are “strictly necessary” for the Crooze Services to operate, and we refer to these as “Strictly Necessary Cookies”. We also set functionality cookies which enhance the performance and functionality of the Crooze Services, and analytics cookies. Crooze also utilizes cookies created by Third Parties (also described as, “Third-Party Cookies”). Third-Party Cookies may be utilized for the purpose of engaging in marketing campaigns, customizing your website experience, or notifying you about the Crooze Services.
The chart below describes the First-Party Cookies and Third-Party Cookies served through the Crooze Services, including the Third Parties who serve them, their purpose, and how you can manage them. You may also manage your cookie preferences directly through the cookie provider and/or by changing your browser settings as detailed below.
| Cookie Type | Who Serves the Cookie? | Cookie Information and Management |
|---|---|---|
| Strictly Necessary | We use strictly necessary cookies to remember user preferences, settings, and other information that helps Crooze improve user experience. Please note, opting out of these cookies may impair your access to the Crooze Services. | |
Crooze
|
Crooze uses cookies to remember preferences and settings, authenticate users, manage sessions, maintain security, and determine if cookies are enabled. Users cannot opt out of Crooze Strictly Necessary, or they will be unable to access or use the Crooze Services. | |
| Functional | We and our Service Providers use functional cookies, web beacons and scripts to personalize and enhance user experience. | |
HubSpot
|
HubSpot is an inbound marketing and sales software that helps companies attract visitors, convert leads, and close customers. | |
New Relic Inc.
|
New Relic is a Software Analytics company that translates metrics across apps for developers to understand and act. | |
StatCounter
|
StatCounter is a web traffic analysis tool that is used to compute web usage. | |
Cookie Choices and How to Opt Out:
Most web browsers accept cookies by default. You may set your preferences to remove cookies, reject cookies, or prompt you before accepting a cookie. Please note, disabling a cookie or category of cookie does not delete the cookie from your device. You will need to do this yourself from within your browser. Browser specific information may be found at the following links:
- Mozilla Firefox Cookie opt-out
- Safari Cookie desktop browser opt-out; iOS
- Chrome Cookie desktop browser opt-out; Android; iOS
- Internet Explorer Cookie opt-out
- Microsoft Edge Cookie opt-out
Some mobile devices may allow you to manage your cookies. Please see the following instructions for:
- iOS (interest based advertising) – In the device Settings, select Privacy and then toggle on Limit Ad Tracking
- Android (interest based advertising) – Open Google Settings, click on Ads, and then toggle on Opt out of Ads Personalization
You may also opt out of interest-based advertising by using country specific self-regulatory tools:
Protection of Personal Information
We work hard to protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Some of the ways in which Crooze protects your personal information include:
- We protect our services using SSL where possible;
- We encrypt your personal information when it is in-transit and stored at-rest in our data centers;
- We keep the servers on which personal information is stored in a controlled environment with limited access;
- We review how we operate our services to guard against unauthorized access; and
- We restrict access to information to Crooze employees, contractors, third party vendors and service providers.
Our Subprocessors
To support Crooze in delivering the Crooze Services, we may engage third party service providers (“Subprocessors”) to assist with its data processing activities. Subprocessors and Crooze’s affiliates and subsidiaries may process, store or otherwise access certain personal information in order to support and/or improve the Crooze Services. Unless otherwise specified, capitalized terms that are used on this page have the meaning set forth in the Crooze Terms of Service or in a superseding written agreement between Crooze and a particular Crooze customer. This information is provided in compliance with Crooze’s EU General Data Protection Regulation (GDPR) and UK Data Protection obligations.
Before engaging any Subprocessor, Crooze performs due diligence of the Subprocessor’s privacy, information security, and data protection practices. We enter into written agreements with Subprocessors that enforce compliance with applicable data protection laws, security controls, confidentiality, and international data transfer requirements. We also restrict Subprocessor access to only what is necessary to maintain and provide the Crooze Services to our customers.
The following table identifies the Subprocessors used by Crooze, the type of services that may be provided, and the location where such subprocessing activities are performed.
| Subprocessor | Category of Services | Location |
|---|---|---|
| Amazon Web Services, Inc. | Cloud Computing | United States of America |
| MongoDB Atlas | DB Hosting | United States of America |
| Meteor Development Group Galaxy | Application Hosting | United States of America |
| Elastic Search | Cloud Computing | United States of America |
| Zendesk, Inc. | Customer Support | United States of America |
| Box, Inc. | Cloud Collaboration | United States of America |
Accessing and updating your personal information
We understand that your personal information is important to you, and that is why you have choices on how your personal information is used and shared. You may update, correct, delete, or request access to your personal information at any time, by emailing support@crooze.com. We will respond to your access request within the legally permissible timeframe.
Changes to this Notice
Crooze may alter or amend this Privacy Policy from time to time. If we do, we will make reasonable efforts to inform you of such changes through the Crooze website. If you subsequently continue to use the Crooze Services, this will be understood to imply that you accept the altered or amended Privacy Policy. In the event that you do not wish to accept the alterations or amendments, please stop using the services and delete any accounts you may have created on our systems.
Contact Crooze
Please contact us at support@crooze.com or 900 Jefferson Avenue, Redwood City, CA 94063 if you:
- Have any questions about Crooze’s Privacy Policy or practices;
- Wish to make a complaint or have a concern about our handling of your personal data; or
- Wish to report a possible breach of privacy laws.
Crooze will respond to your inquiry within the legally permissible timeframe.
California-Specific Notice
As required by the California Consumer Privacy Act of 2018 (“CCPA”), as amended, this California Notice at Collection (the “CA Notice”) supplements the information contained in the Crooze Privacy Notice. This CA Notice describes how Crooze collects, uses and shares the personal information of California residents (“consumers” or “you”) and how to exercise your rights under the CCPA.
Scope. When we say personal information in this CA Notice, we mean information that identifies, relates to, or could reasonably be linked to you or your household. This CA Notice applies to the personal information collected, used, or shared by Crooze when you use or access the Crooze Services.
The CCPA provides certain exemptions that may apply to Crooze’s collection of your personal information. These exemptions include personal information that we’ve collected from or about you that is publicly available (as described in Cal. Civ. Code Section 1798.140). As such, this CA Notice and the privacy rights described herein may not apply to you or to all your personal information.
Notice at Collection. We may collect personal information about you for a variety of purposes. For example, we may collect the below categories of personal information.
- Contact Information that we collect directly from you, which may include your name, email address and phone number.
- Commercial Information such as the Crooze products or services you’ve purchased, obtained or considered.
- Internet and other related network activity such as your IP address, session logs, device information, and how you interact with our website and applications in accordance with the Cookies section of this Privacy Policy.
- Geolocation Data which may include a subset of your internet and network activity such as your IP address.
- Sensitive Personal Information that you provide to us when you register an account, specifically your account log-in information and payment card details.
- Other Personal Information such as information you provide when you contact us directly.
Sources of Personal Information. The sources from which we collect Personal Information are described in the “Collection of Information” section of the Privacy Policy.
Use of Personal Information. We may use your personal information for the following business purposes:
- provide, operate, maintain, and improve the Crooze Services;
- communicate with you about services, features, surveys, newsletters, offers, promotions, contests and events, and provide other news or information about Crooze and our select partners; or
- as otherwise described in the “Use of Information” section of the Crooze Privacy Policy.
Crooze does not use or disclose sensitive personal information for purposes other than those permitted purposes under the CCPA.
“Sale” or “Sharing” of Personal Information. We may use your digital activity collected by third-party cookies to enhance, customize, improve and notify you about our Services. We may also use this information and share it with third parties for the purposes of “targeted advertising”. Sharing digital activity in this manner may be considered a “sale” or “sharing” of personal information under the CCPA. To learn more about our use of cookies, or to adjust your cookie preferences, please review the Cookies and Tracking Technologies section above. Additionally, we may share limited contact details with third parties for business development and, where legally permissible, sales and marketing purposes.
The Crooze Services are not directed to individuals under the age of 18 and we do not knowingly collect, “sell”, or “share” personal information from anyone under 18.
Your California Privacy Rights. Subject to verification of your request, you may exercise your privacy rights listed below in relation to the personal information Crooze has collected about you.
- The right to know what personal information Crooze has collected about you;
- The right to delete your personal information;
- The right to correct your personal information;
- The right to limit the use and disclosure of sensitive personal information;
- The right to opt-out of the “sale” or “sharing” of your personal information; and
- The right to non-discrimination for exercising your rights.
How To Exercise Your Rights. To exercise your California privacy rights, please contact us at support@crooze.com. We will promptly verify your request and respond within the applicable time frame of forty-five (45) days. Should we reasonably require additional time beyond the applicable time frame, we will notify you directly. You may also opt-out from the “sale” or “sharing” of your personal information by submitting this email template. To adjust your cookie settings, please refer to the “Cookies and Tracking Technologies” section above.
If we are unable to verify your identity as required by CCPA, we reserve the right to not process your request. Upon this determination, we will notify you of our decision along with any rights you may have to appeal the decision. As set forth in CCPA, we are only required to respond to certain rights requests twice in any twelve (12) month period. You may use an authorized agent to submit a request on your behalf, but we may ask your agent to provide information to verify that they have the proper authority to act on your behalf or ask you to verify your identity with us directly.
If you elect to exercise any of your rights, Crooze will not deny services, provide a different price or rate for our services, or provide a different level of service to you because you exercised such rights.
Prior Collection, Use and Sharing of Information. In connection with providing you the Crooze Service (the “business purpose”), we may share your personal information with third parties and other entities as described in this Privacy Notice.
As required by the CCPA, we are obligated to disclose the categories of personal information we’ve collected, the business purpose for the collection and the categories of third parties to whom we’ve disclosed your personal information. The table below sets out our practices over the last twelve (12) months.
| Categories of Personal Information | Business Purpose for Collecting Personal Information | Categories of Third Parties to whom Personal Information is Disclosed |
|---|---|---|
|
|
|
Retention of Personal Information. We retain your personal information as described in the “Sharing and Disclosure of Information” section of the Privacy Notice.
Updates to this CA Notice. We may update this CA Notice from time to time. When we make changes to this CA Notice, we will update the “Last Updated” date at the top of the page.
Contact Us. Should you have additional questions about this CA Notice, please contact us at support@crooze.com.
Other U.S. States
Some U.S. state privacy laws require specific disclosures for state residents and provide certain rights for state residents. Specifically, these state laws include the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), the Montana Consumer Data Privacy Act (“MCDPA”), the Oregon Consumer Privacy Act (“OCPA), and the Texas Data Privacy and Security Act (“TDPSA”) (collectively, “US State Privacy Laws”). This section describes how Crooze. collects, uses, and shares the personal information of U.S. state residents and how to exercise your rights under these state privacy laws.
Please note that the rights described in this section will depend on the applicable laws in your state of residence. If applicable, the privacy laws in your state of residence may also provide certain exemptions that apply to Crooze’s collection of your personal information, including personal information that we’ve collected from or about you that is publicly available. As such, the privacy rights described herein may not apply to you or to all your personal information.
Personal Information We Collect and How We Use It. Crooze collects certain categories of personal information when you use the Services, including identifiers, commercial information, internet or other related network activity, geolocation data tied to your IP address, and other personal information. A more detailed description of the personal data Crooze collects and how we use it is provided in the ” Information That We Collect,” and “Use of Information” sections of this Privacy Policy.
For purposes of U.S. state privacy laws, Crooze does not engage in profiling/automated decision making that produces legal or similarly significant effects. Taking into account the nature of the processing, Crooze will provide reasonable assistance and cooperate with you in a manner consistent with the processor obligations provided under US State Privacy Laws.
Sharing of Personal Data. In connection with providing you the Crooze Service, we may share your personal information to third parties and other entities as described in this Privacy Notice. Crooze does not sell or share personal information received by Crooze from or on behalf of the consumer when using or accessing the Crooze Services.
Targeted Advertising. Crooze may collect personal identifiers from you automatically. These identifiers include IP address, device identifiers, advertising ID and other information about your browser or device. We may collect this information via cookies and other tracking technologies and use it to enhance, customize, improve and notify you about our Services. We may also share it with third parties that operate in the advertising ecosystem for “targeted advertising”. This is further described in this Privacy Policy. Depending on your state of residence and applicable law, sharing digital activity in this manner may also be considered a “sale” of personal data.
Privacy Rights. Depending on the applicable laws in your state of residence, for example if you are a Colorado resident, you may have the right to the following:
- request to confirm whether we process your personal information and to access such personal information;
- request to correct inaccuracies in your personal information;
- request deletion of your personal information, subject to certain exceptions;
- request to obtain a copy of your personal information;
- request to opt-out of processing of personal information for purposes of targeted-advertising;
- request to opt-out of the “sale” of personal information; and
- opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
You may exercise your right to opt-out of the “sale” of personal data and targeted advertising by submitting this email template. To exercise the other rights listed above, submit a request or appeal denial of a request, please contact support@crooze.com. To adjust your cookie settings, please refer to the “Cookies and Tracking Technologies” section above.
We may need to verify your identity to process your request. If we are unable to verify your identity, we reserve the right to not process your request. If we refuse to take action on a request, we will provide instructions on how you may appeal the decision. We will respond to requests consistent with applicable law.
You may use an authorized agent to submit a request on your behalf, but we may ask your agent to provide information to verify that they have the proper authority to act on your behalf or ask you to verify your identity with us directly. If you elect to exercise any of your rights, Crooze will not deny services, provide a different price or rate for our services, or provide a different level of service to you because you exercised such rights.