Path: blob/master/src/packages/next/pages/policies/privacy.tsx
1450 views
import Footer from "components/landing/footer";1import Header from "components/landing/header";2import Head from "components/landing/head";3import { Layout } from "antd";4import withCustomize from "lib/with-customize";5import { Customize } from "lib/customize";6import A from "components/misc/A";7import { MAX_WIDTH } from "lib/config";89export default function Privacy({ customize }) {10return (11<Customize value={customize}>12<Head title="Privacy Policy" />13<Layout>14<Header page="policies" subPage="privacy" />15<Layout.Content16style={{17backgroundColor: "white",18}}19>20<div21style={{22maxWidth: MAX_WIDTH,23margin: "15px auto",24padding: "15px",25backgroundColor: "white",26}}27>28<div style={{ textAlign: "center", color: "#444" }}>29<h1 style={{ fontSize: "28pt" }}>CoCalc - Privacy Policy</h1>30<h2>Last Updated: February 20, 2025</h2>31</div>32<div style={{ fontSize: "12pt" }}>33<p>34Protecting your privacy is really important to us. With this in35mind, we’re providing this Privacy Policy to explain our36practices regarding the collection, use and disclosure of37information that we receive through our Services. This Privacy38Policy does not apply to any third-party websites, services or39applications, even if they are accessible through our Services.40Also, please note that, unless we define a term in this Privacy41Policy, all capitalized terms used in this Privacy Policy have42the same meanings as in our Terms of Service. So, please make43sure that you have read and understand our Terms of Service.{" "}44</p>45<h1>Revisions to this Privacy Policy</h1>46<p>47Any information that is collected via our Services is covered by48the Privacy Policy in effect at the time such information is49collected. We may revise this Privacy Policy from time to time.50If we make any material changes to this Privacy Policy, we’ll51notify you of those changes by posting them on the Services or52by sending you an email or other notification, and we’ll update53the "Revision history" below to indicate when those changes will54become effective.{" "}55</p>56<div id="purpose">57<h1>1 Purpose</h1>58<p>59This Privacy Policy is incorporated by reference into the60Sagemath Terms of Service (the <strong>“Terms”</strong>). The61terms <strong>“Sagemath”</strong>, <strong>“we”</strong>, and{" "}62<strong>“us”</strong> include Sagemath, Inc. and our63affiliates and subsidiaries. This Privacy Policy explains our64online and offline information practices, the kinds of65information we may collect, how we intend to use and share66that information, and how you can opt out of a use or correct67or change such information. All other terms not defined in68Section 13 or otherwise herein will have the meanings set69forth in the Terms.70</p>71</div>72<div id="scope">73<h1>2 Scope</h1>74<p>75This Privacy Policy applies to Personal Information that is76Processed by Sagemath in the course of our business, including77on Sagemath websites (each a <strong>“Site”</strong>), mobile78applications, forums, blogs, and other online or offline79offerings (collectively the <strong>“Services”</strong>). All80individuals whose responsibilities include the Processing of81Personal Information on behalf of Sagemath are expected to82protect that data by adherence to this Privacy Policy.83</p>84<p>85Sagemath complies with the EU-U.S. Data Privacy Framework86(EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the87Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set88forth by the U.S. Department of Commerce. Sagemath has89certified to the U.S. Department of Commerce that it adheres90to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF91Principles) with regard to the processing of personal data92received from the European Union in reliance on the EU-U.S.93DPF and from the United Kingdom (and Gibraltar) in reliance on94the UK Extension to the EU-U.S. DPF. Sagemath has certified to95the U.S. Department of Commerce that it adheres to the96Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF97Principles) with regard to the processing of personal data98received from Switzerland in reliance on the Swiss-U.S. DPF.99If there is any conflict between the terms in this privacy100policy and the EU-U.S. DPF Principles and/or the Swiss-U.S.101DPF Principles, the Principles shall govern. To learn more102about the Data Privacy Framework (DPF) program, and to view103our certification, please visit{" "}104<A href="https://www.dataprivacyframework.gov/">105www.dataprivacyframework.gov106</A>107. Additionally, Sagemath may protect information through other108legally valid methods, including international data transfer109agreements.{" "}110</p>{" "}111<p>112{" "}113This Policy applies to all Sagemath’s operating divisions,114subsidiaries, affiliates, and branches, including its U.S.115affiliates certified under the DPF program and any additional116subsidiary, affiliate, or branch of Sagemath that we may117subsequently form.{" "}118</p>{" "}119</div>{" "}120<div id="transparencynoticetypes-of-personal-information-we-collect-and-how-we-use-it">121<h1>1223 Transparency Notice - Types of Personal Information We123Collect and How We Use It124</h1>125<p>126The types of Personal Information we may collect (directly127from you or from Third-Party sources) and our privacy128practices depend on the nature of the relationship you have129with Sagemath and the requirements of applicable law. Some of130the ways that Sagemath may collect Personal Information131include:{" "}132</p>{" "}133<ul>134{" "}135<li>136{" "}137<p>138{" "}139You may provide Personal Information directly to Sagemath140through interacting with the Services, participating in141surveys, and requesting Services, or information.{" "}142</p>{" "}143</li>{" "}144<li>145{" "}146<p>147{" "}148As you navigate the Services, certain passive information149may also be collected about your visit, including through150cookies and similar technologies as described below.{" "}151</p>{" "}152</li>{" "}153</ul>{" "}154<p>155{" "}156We endeavor to collect only that information which is relevant157for the purposes of Processing. Below are the ways we collect158Personal Information and how we use it.{" "}159</p>{" "}160<div id="types-of-personal-information-we-collect">161{" "}162<h2> 3.1 Types of Personal Information We Collect </h2>163<p>164Sagemath collects Personal Information regarding its165current, prospective, and former clients, customers, users,166visitors, guests, and Employees (collectively{" "}167<strong>“Individuals”</strong>).{" "}168</p>169<p>170<strong>Information You Provide Directly to Us.</strong>{" "}171When you use the Services or engage in certain activities,172such as registering for an account with Sagemath, responding173to surveys, requesting Services or information, or174contacting us directly, we may ask you to provide some or175all of the following types of information:{" "}176</p>177<ul>178<li>179<p>180<strong>Communications with Us.</strong> We may collect181Personal Information from you such as email address,182phone number or mailing address when you choose to183request information about our Services, register for184Sagemath’s newsletter or a loyalty program that we may185offer, request to receive customer or technical support,186or otherwise communicate with us.{" "}187</p>{" "}188</li>{" "}189<li>190{" "}191<p>192{" "}193<strong>Surveys.</strong> We may contact you to194participate in surveys. If you do decide to participate,195you may be asked to provide certain information which196may include Personal Information. All information197collected from your participation in our surveys is198provided by you voluntarily.{" "}199</p>{" "}200</li>{" "}201<li>202{" "}203<p>204{" "}205<strong>Posting on the Services.</strong> Sagemath may206offer publicly accessible forums, blogs, and social207media pages. You should be aware that, when you disclose208information about yourself in on Sagemath’s forums,209blogs, and social media pages, the Services will collect210the information you provide in such submissions,211including any Personal Information. If you choose to212submit content to any public area of the Site, such213content will be considered “public” and will not be214subject to the privacy protections set forth herein.{" "}215</p>{" "}216</li>{" "}217</ul>{" "}218<p>219{" "}220<strong>Automatic Data Collection.</strong> We may collect221the following information automatically through our Services222or other methods of web analysis: your Internet protocol223(IP) address, cookie identifiers, details about your browser224or device, and information about how you use the Services.{" "}225</p>{" "}226<p>227{" "}228<strong>Information from Other Sources.</strong> We may229receive information about you from other public sources,230including through Third-Party services and organizations to231supplement information provided by you. This supplemental232information allows us to verify information that you have233provided to Sagemath and to enhance our ability to provide234you with information about our business, products, and235Services.{" "}236</p>{" "}237</div>{" "}238<div id="how-sagemath-uses-your-information">239{" "}240<h2> 3.2 How Sagemath, Inc. Uses Your Information </h2>{" "}241<p>242{" "}243We Process Personal Information about Individuals for the244following business purposes:{" "}245</p>{" "}246<p>247{" "}248<strong>249To Provide Products, Services, or Information Requested:250</strong>{" "}251</p>{" "}252<ul>253{" "}254<li>255Generally manage Individual information and accounts;{" "}256</li>{" "}257<li>258Respond to questions, comments, and other requests;{" "}259</li>{" "}260<li>261Provide access to certain areas, functionalities, and262features of Sagemath’s Services;{" "}263</li>{" "}264<li>265Contact you to answer requests for customer support or266technical support;{" "}267</li>{" "}268<li>Allow you to register for events. </li>{" "}269</ul>{" "}270<p>271{" "}272<strong>Administrative Purposes:</strong>{" "}273</p>{" "}274<ul>275{" "}276<li>Measure interest in Sagemath’s Services; </li>{" "}277<li>Develop new products and Services; </li>{" "}278<li>Ensure internal quality control; </li>{" "}279<li>Verify Individual identity; </li>{" "}280<li>281Communicate about Individual accounts and activities on282Sagemath’s Services and systems, and, in Sagemath’s283discretion, changes to any Sagemath policy;{" "}284</li>{" "}285<li>286Send email to the email address you provide to us to287verify your account and for informational and operational288purposes, such as account management, customer service, or289system maintenance;{" "}290</li>{" "}291<li>292Process payment for products or services purchased;{" "}293</li>{" "}294<li>Process applications and transactions; </li>{" "}295<li>296Prevent potentially prohibited or illegal activities;{" "}297</li>{" "}298<li>Enforce our Terms. </li>{" "}299</ul>{" "}300<p>301{" "}302<strong>303Marketing Sagemath Products and Services:304</strong>{" "}305</p>{" "}306<ul>307{" "}308<li>To tailor content; </li>{" "}309<li>310To notify you about offers, products, and services that311may be of interest to you;{" "}312</li>{" "}313<li>To provide Services to you; </li>{" "}314<li>315For other purposes disclosed at the time that Individuals316provide Personal Information;{" "}317</li>{" "}318<li>Otherwise with your consent. </li>{" "}319</ul>{" "}320<p>321{" "}322You may contact us at any time to opt out of the use of your323Personal Information for marketing purposes as set forth324below.{" "}325</p>{" "}326<ul>327{" "}328<li>329{" "}330<p>331{" "}332<strong>Research and Development.</strong> Sagemath may333use Personal Information to create non-identifiable334information that we may use alone or in the aggregate335with information obtained from other sources, in order336to help us to optimally deliver our existing products337and Services or develop new products and Services. We338may share anonymous Individual and aggregate data for339research and analysis purposes.{" "}340</p>{" "}341</li>{" "}342<li>343{" "}344<p>345{" "}346<strong>347Direct Mail, Email and Outbound Telemarketing.348</strong>{" "}349Individuals who provide us with Personal Information, or350whose Personal Information we obtain from Third Parties,351may receive periodic emails, newsletters, mailings, or352phone calls from us with information on Sagemath’s or353our business partners’ products and services or upcoming354special offers/events. We offer the option to decline355these communications at no cost to the Individual by356following the instructions set forth below.{" "}357</p>{" "}358</li>{" "}359<li>360{" "}361<p>362{" "}363<strong>364Anonymous and Aggregated Information Use.365</strong>{" "}366Sagemath may use Personal Information and other367information about you to create anonymized and368aggregated information, such as de-identified369demographic information, de-identified location370information, information about the computer or device371from which you access Sagemath’s Services, or other372analyses we create. Anonymized or aggregated information373is not Personal Information, and Sagemath may use such374information in a number of ways, including research,375internal analysis, analytics, and any other legally376permissible purposes. We may share this information377within Sagemath and with Third Parties for our or their378purposes in an anonymized or aggregated form that is379designed to prevent anyone from identifying you.{" "}380</p>{" "}381</li>{" "}382<li>383{" "}384<p>385{" "}386<strong>Sharing Content.</strong> Sagemath’s Services387may offer various tools and functionalities that allow388you to share content. For example, Sagemath allows you389to provide information about your colleagues, students,390or friends through our course management system and391referral services, such as inviting a collaborator to a392project. Our referral services may allow you to forward393or share certain content with others, such as emails394inviting them to use our Services. Email addresses that395you may provide in such situations will be used to send396the content or link you request, but will not be397collected or otherwise used by Sagemath or any other398Third Parties for any other purpose. The Services also399allow you to share your content with Third Parties such400as GitHub and NPM. Any Personal Information you choose401to share with these Third Parties is not covered by this402Privacy Policy. We encourage you to review the privacy403policy of these Third Parties before submitting your404Personal Information.{" "}405</p>{" "}406</li>{" "}407<li>408{" "}409<p>410{" "}411<strong>Other Uses.</strong> Sagemath may use Personal412Information to pursue our legitimate interests, such as413direct marketing, marketing research, network and414information security, and fraud prevention and any other415purpose disclosed to you at the time you provide416Personal Information or otherwise with your consent.{" "}417</p>{" "}418</li>{" "}419</ul>{" "}420</div>{" "}421<div id="cookies-pixel-tagsweb-beacons-analytics-information-and-interest-based-advertising">422{" "}423<h2> 3.3 Cookies and Pixel Tags (Web Beacons) </h2>{" "}424<p>425{" "}426We, as well as Third-Parties that provide content,427advertising, or other functionality on the Services, may use428cookies, pixel tags, local storage, and other technologies (429<strong>“Technologies”</strong>) to automatically collect430information through the Services.{" "}431</p>{" "}432<ul>433{" "}434<li>435{" "}436<p>437{" "}438<strong>Cookies.</strong> Cookies are small text files439placed in visitors’ computer browsers to store their440preferences. We use required cookies to make sure that441the Services work properly, for example for442authentication purposes. You may not opt-out of the use443of these cookies since it would be impossible for us to444provide the service otherwise. We do NOT use cookies for445marketing or advertising purpuses.{" "}446</p>{" "}447</li>{" "}448<li>449{" "}450<p>451{" "}452<strong>Pixel Tags/Web Beacons.</strong> A pixel tag453(also known as a web beacon) is a piece of code embedded454on the Services that collects information about users’455engagement on that web page. We do not use pixel tags456directly, but some of our service providers, namely457Salesloft and ZenDesk, may use similar technology to let458us know that email messages have been opened, acted on,459or forwarded. You can consult their privacy policies and460other documents following the links on our Third Parties461page at{" "}462<A href="/policies/thirdparties">463https://cocalc.com/policies/thirdparties464</A>{" "}465</p>{" "}466</li>{" "}467</ul>{" "}468</div>{" "}469<div id="third-party-websites-social-media-platforms-and-software-development-kits">470{" "}471<h2>4723.4 Third-Party Websites, Social Media Platforms, and473Software Development Kits{" "}474</h2>{" "}475<p>476{" "}477The Services may contain links to other websites and other478websites may reference or link to our Services. These other479domains and websites are not controlled by us, and Sagemath480does not endorse or make any representations about481Third-Party websites or social media platforms. We encourage482our users to read the privacy policies of each and every483website and application with which they interact. We do not484endorse, screen or approve, and are not responsible for the485privacy practices or content of such other websites or486applications. Visiting these other websites or applications487is at your own risk.{" "}488</p>{" "}489<p>490{" "}491The Services may include publicly accessible forums, blogs,492and social media pages You should be aware that Personal493Information which you voluntarily include and transmit494online in a publicly accessible forum, blog, or social media495page may be viewed and used by others without any496restrictions. By using such services you assume the risk497that the Personal Information provided by you may be viewed498and used by third parties for any number of purposes.{" "}499</p>{" "}500<p>501{" "}502We use Third-Party software development kits (503<strong>“SDKs”</strong>), such as the Stripe, Inc. SDK, as504part of the functionality of our Services.{" "}505</p>{" "}506</div>{" "}507<div id="third-party-payment-processing">508{" "}509<h2>3.5 Third-Party Payment Processing </h2>{" "}510<p>511{" "}512When you make purchases through the Services, we process513your payments through our Payment Processor, Stripe. The514Payment Processor collects information from and about you515that is necessary to process your payment and to prevent516abuse. This may include your name, email address, billing517address, tax identifies, IP address, and account numbers. We518do not get access to your full account numbers. You can519consult Stripe's privacy policy and other documents520following the links on our Third Parties page at{" "}521<A href="/policies/thirdparties">522https://cocalc.com/policies/thirdparties523</A>{" "}524</p>{" "}525</div>{" "}526</div>{" "}527<div id="human-resources-data">528<h1>4 Human Resources Data</h1>529<p>530Sagemath collects Personal Information from current,531prospective, and former Employees, their contact points in532case of a medical emergency, and beneficiaries under any533insurance policy (<strong>“Human Resources Data”</strong>).534The Human Resources Data we collect may include title, name,535address, phone number, email address, date of birth, passport536number, driver’s license number, Social Security number or537other government-issued identification number, financial538information related to credit checks, bank details for539payroll, information that may be recorded on a CV or540application form, language abilities, contact information of541third parties in case of an emergency and beneficiaries under542any insurance policy.{" "}543</p>{" "}544<p>545{" "}546We Process Human Resources Data for a variety of business547purposes including:{" "}548</p>{" "}549<ul>550{" "}551<li>552Workflow management, including assigning, managing and553administering projects;{" "}554</li>{" "}555<li>Human Resources administration and communication; </li>{" "}556<li>Payroll and the provision of benefits; </li>{" "}557<li>558Compensation, including bonuses and long-term incentive559administration, stock plan administration, compensation560analysis, including monitoring overtime and compliance with561labor laws, and company recognition programs;{" "}562</li>{" "}563<li>Job grading activities; </li>{" "}564<li>Performance and employee development management; </li>{" "}565<li>Organizational development and succession planning; </li>{" "}566<li>Benefits and personnel administration; </li>{" "}567<li>Absence management; </li>{" "}568<li>Helpdesk and IT support services; </li>{" "}569<li>Regulatory compliance; </li>{" "}570<li>571Internal and/or external or governmental compliance572investigations;{" "}573</li>{" "}574<li>Internal or external audits; </li>{" "}575<li>Litigation evaluation, prosecution, and defense; </li>{" "}576<li>Restructuring and relocation; </li>{" "}577<li>Emergency contacts and services; </li>{" "}578<li>Employee safety; </li>{" "}579<li>Compliance with statutory requirements; </li>{" "}580<li>581Processing of Employee expenses and travel charges; and{" "}582</li>{" "}583<li>Acquisitions, divestitures, and integrations. </li>{" "}584</ul>{" "}585</div>{" "}586<div id="onward-transfersagemath-may-disclose-your-information">587<h1>588<span>5</span> Onward Transfer — Sagemath May Disclose Your589Information{" "}590</h1>{" "}591<div id="information-we-share">592{" "}593<h2>594<span>5.1</span> Information We Share595</h2>596<p>597{" "}598We may share your information as described in this Privacy599Policy (e.g., with our Third-Party service providers; to600comply with legal obligations; to protect and defend our601rights and property) or with your permission.{" "}602</p>{" "}603<ul>604{" "}605<li>606{" "}607<p>608{" "}609<strong>610We Use Vendors and Service Providers.611</strong>{" "}612We may share any information we receive with vendors and613service providers. The types of service providers614(processors) to whom we entrust Personal Information615include service providers for: (i) provision of IT,616marketing, and related services; (ii) provision of617information and services you have requested; (iii)618payment processing; (iv) customer service activities;619and (v) in connection with the provision of the620Services.{" "}621</p>{" "}622</li>{" "}623<li>624{" "}625<p>626{" "}627<strong>Business Partners.</strong> Sagemath may share628your Personal Information with our business partners and629affiliates to provide you with a product or service that630you have requested. Sagemath may also provide Personal631Information to business partners with whom we may632jointly offer products or services, or whose products or633services we believe may be of interest to you. In such634cases, our business partner’s name will appear, along635with Sagemath. Sagemath requires our affiliates and636business partners to agree in writing to maintain the637confidentiality and security of Personal Information638they maintain on our behalf and not to use it for any639purpose other than the purpose for which Sagemath640provided them.{" "}641</p>{" "}642</li>{" "}643<li>644{" "}645<p>646{" "}647<strong>DPF.</strong> With respect to onward transfers648to Agents under DPF, DPF requires that Sagemath remain649liable should its Agents Process Personal Information in650a manner inconsistent with the DPF Principles.{" "}651</p>{" "}652</li>{" "}653<li>654{" "}655<p>656{" "}657<strong>Displaying to Other Users.</strong> The content658you post to the Services may be displayed on the659Services. Other users of the Services may be able to see660some information about you, such as your name. We are661not responsible for privacy practices of the other users662who will view and use the posted information.{" "}663</p>{" "}664</li>{" "}665<li>666{" "}667<p>668{" "}669<strong>670Disclosures to Protect Us or Others (e.g., as Required671by Law and Similar Disclosures).672</strong>{" "}673We may access, preserve, and disclose your Personal674Information, other account information, and content if675we believe doing so is required or appropriate to: (i)676comply with law enforcement or national security677requests and legal process, such as a court order or678subpoena; (ii) respond to your requests; (iii) protect679yours’, ours’ or others’ rights, property, or safety;680(iv) to enforce Sagemath policies or contracts; (v) to681collect amounts owed to Sagemath; (vi) when we believe682disclosure is necessary or appropriate to prevent683physical harm or financial loss or in connection with an684investigation or prosecution of suspected or actual685illegal activity; or (vii) if we, in good faith, believe686that disclosure is otherwise necessary or advisable.{" "}687</p>{" "}688</li>{" "}689<li>690{" "}691<p>692{" "}693<strong>694Merger, Sale, or Other Asset Transfers.695</strong>{" "}696If we are involved in a merger, acquisition, financing697due diligence, reorganization, bankruptcy, receivership,698sale of company assets, or transition of service to699another provider, then your information may be sold or700transferred as part of such a transaction as permitted701by law and/or contract.{" "}702</p>{" "}703</li>{" "}704</ul>{" "}705</div>{" "}706<div id="international-data-transfers">707{" "}708<h2>709{" "}710<span>5.2</span> International Data Transfers{" "}711</h2>{" "}712<p>713{" "}714You agree that all information collected via or by Sagemath715may be transferred, processed, and stored in the United716States, in the cloud, on our servers, on the servers of our717affiliates, or the servers of our service providers, in718order to provide the Services.{" "}719</p>{" "}720<p>721If you use Services that require you to select a geographic722location explicitly, such as compute servers or cloud file723systems, your data will be sent to the chosen location.724</p>725</div>{" "}726</div>{" "}727<div id="opt-out-right-to-object-to-processing">728{" "}729<h1>730{" "}731<span>6</span> Opt-Out (Right to Object to Processing){" "}732</h1>{" "}733<div id="general">734{" "}735<h2>736{" "}737<span>6.1</span> General{" "}738</h2>{" "}739<p>740{" "}741You have the right to object to and opt out of certain uses742of your Personal Information. Where you have consented to743Sagemath’s Processing of your Personal Information or744Sensitive Personal Information, you may withdraw that745consent at any time and opt out of further Processing by746contacting{" "}747<A href="mailto:[email protected]">[email protected]</A>748. Even if you opt out, we may still collect and use749non-Personal Information regarding your activities on our750Services and/or information from the advertisements on751Third-Party websites for non-interest based advertising752purposes, such as to determine the effectiveness of the753advertisements.{" "}754</p>{" "}755</div>{" "}756<div id="email-and-telephone-communications">757{" "}758<h2>759{" "}760<span>6.2</span> Email and Telephone Communications{" "}761</h2>{" "}762<p>763{" "}764If you receive an unwanted email from us, you can use the765unsubscribe link found at the bottom of the email to opt out766of receiving future emails. We will process your request767within a reasonable time after receipt. Note that you will768continue to receive transaction-related emails regarding769products or services you have requested. We may also send770you certain non-promotional communications regarding771Sagemath and our Services and you will not be able to opt772out of those communications (e.g., communications regarding773updates to our Terms or this Privacy Policy).{" "}774</p>{" "}775<p>776{" "}777We maintain telephone “do-not-call” and “do-not-mail” lists778as mandated by law. We process requests to be placed on779do-not-mail, do-not-phone and do-not-contact lists within 60780days after receipt, or such shorter time as may be required781by law.{" "}782</p>{" "}783</div>{" "}784<div id="mobile-devices">785{" "}786<h2>787{" "}788<span>6.3</span> Mobile devices{" "}789</h2>{" "}790<p>791{" "}792Sagemath may occasionally send you push notifications793through our mobile applications with notices that may be of794interest to you. You may at any time opt out from receiving795these types of communications by changing the settings on796your mobile device. Sagemath may also collect location-based797information if you use our mobile applications. You may opt798out of this collection by changing the settings on your799mobile device.{" "}800</p>{" "}801</div>{" "}802<div id="human-resources-data-1">803{" "}804<h2>805{" "}806<span>6.4</span> Human Resources Data{" "}807</h2>{" "}808<p>809{" "}810With regard to Personal Information that Sagemath receives811in connection with the employment relationship, Sagemath812will use such Personal Information only for813employment-related purposes as more fully described above.814If Sagemath intends to use this Personal Information for any815other purpose, Sagemath will notify the Individual and816provide an opportunity to opt out of such uses.{" "}817</p>{" "}818</div>{" "}819<div id="do-not-track">820{" "}821<h2>822{" "}823<span>6.5</span> “Do Not Track”{" "}824</h2>{" "}825<p>826{" "}827Do Not Track (<strong>“DNT”</strong>) is a privacy828preference that users can set in certain web browsers. DNT829is a way for users to inform websites and services that they830do not want certain information about their webpage visits831collected over time and across websites or online services.832Please note that we do not respond to or honor DNT signals833or similar mechanisms transmitted by web browsers.{" "}834</p>{" "}835</div>{" "}836</div>{" "}837<div id="rights-of-access-rectification-erasure-and-restriction">838{" "}839<h1>840{" "}841<span>7</span> Rights of Access, Rectification, Erasure,842Restriction, and to Object{" "}843</h1>{" "}844<p>845{" "}846In accordance with applicable law, you may have the right to:847(i) request confirmation of whether we are processing your848personal information; (ii) obtain access to or a copy of your849personal information; (iii) receive an electronic copy of850personal information that you have provided to us, or ask us851to send that information to another company (the “right of852data portability”); (iv) restrict our uses of your personal853information; (v) seek correction of inaccurate, untrue or854incomplete personal information; (vi) request erasure of855personal information held about you by Sagemath, subject to856certain exceptions prescribed by law; (vii) object to857processing of your personal information. If you would like to858exercise any of these rights, please contact us as set forth859below.{" "}860</p>{" "}861<p>862{" "}863We will process such requests in accordance with applicable864laws and free of charge. However, if the request is excessive865or repetitive, Sagemath may charge a reasonable fee. To866protect your privacy, Sagemath will take steps to verify your867identity before fulfilling your request.{" "}868</p>{" "}869</div>{" "}870<div id="data-retention">871{" "}872<h1>873{" "}874<span>8</span> Data Retention{" "}875</h1>{" "}876<p>877{" "}878Sagemath retains the Personal Information we receive as879described in this Privacy Policy for as long as you use our880Services or as necessary to fulfill the purpose(s) for which881it was collected, provide our Services, resolve disputes,882establish legal defenses, conduct audits, pursue legitimate883business purposes, enforce our agreements, and comply with884applicable laws.{" "}885</p>{" "}886</div>{" "}887<div id="security-of-your-information">888{" "}889<h1>890{" "}891<span>9</span> Security of Your Information{" "}892</h1>{" "}893<p>894{" "}895We take steps to ensure that your information is treated896securely and in accordance with this Privacy Policy. We897encrypt data storage and backups, use firewalls and access898control. You can learn more details about measures taken and899third party audits and certifications on our Trust page at{" "}900<A href="/policies/trust">901https://cocalc.com/policies/trust902</A>{" "}903Unfortunately, the Internet cannot be guaranteed to be 100%904secure, and we cannot ensure or warrant the security of any905information you provide to us. To the fullest extent permitted906by applicable law, we do not accept liability for907unintentional disclosure.{" "}908</p>{" "}909<p>910{" "}911By using the Services or providing Personal Information to us,912you agree that we may communicate with you electronically913regarding security, privacy, and administrative issues914relating to your use of the Services. If we learn of a915personal data breach, in accordance with GDPR we will inform916the Supervisory Authority within 72 hours. If there is a high917risk to your security or if required by the Supervisory918Authority, we will notify you electronically by posting a919notice on the Services or sending an e-mail to you.920</p>{" "}921</div>{" "}922<div id="childrens-privacy">923{" "}924<h1>925{" "}926<span>10</span> Children’s Privacy{" "}927</h1>{" "}928<p>929{" "}930The Services are not directed to children under 16 years of931age, and Sagemath does not knowingly collect Personal932Information from children under 16 years of age. If we learn933that we have collected any Personal Information from children934under 16 years old, we will promptly take steps to delete such935information.{" "}936</p>{" "}937</div>{" "}938<div id="redresscompliance-and-accountability">939{" "}940<h1>941{" "}942<span>11</span> Redress/Compliance and Accountability{" "}943</h1>{" "}944<p>945{" "}946If you have any questions about our privacy practices or this947Privacy Policy, please contact Sagemath by email at{" "}948<A href="mailto:[email protected]">[email protected]</A>.949We will address your concerns and attempt to resolve any950privacy issues in a timely manner.{" "}951</p>{" "}952<p>953{" "}954If you are a EU resident, you may contact our Ireland955Representative: Instant EU GDPR Representative Ltd, Adam956Brogden,{" "}957<a href="mailto:[email protected]">958[email protected]959</a>960, Tel +353 15 549 700,{" "}961<a href="https://sagemathinc.gdprlocal.com/eu">962https://sagemathinc.gdprlocal.com/eu963</a>964, INSTANT EU GDPR REPRESENTATIVE LIMITED Office 2 12A Lower965Main Street, Lucan Co. Dublin K78 X5P8 Ireland{" "}966</p>{" "}967<p>968{" "}969If you are a UK resident, you may contact our UK970Representative: GDPRLocal Ltd, Adam Brogden,{" "}971<a href="mailto:[email protected]">972[email protected]973</a>974, Tel +441 772 217 800,{" "}975<a href="https://sagemathinc.gdprlocal.com/uk">976https://sagemathinc.gdprlocal.com/uk977</a>978, GDPRLocal Ltd. 1st Floor Front Suite 27-29 North Street,979Brighton England BN1 1EB{" "}980</p>{" "}981<p>982{" "}983In compliance with the EU-U.S. DPF, the UK Extension to the984EU-U.S. DPF, and the Swiss-U.S. DPF, Sagemath commits to985resolve DPF Principles-related complaints about our collection986and use of your personal information. EU, UK, and Swiss987individuals with inquiries or complaints regarding our988handling of personal data received in reliance on the EU-U.S.989DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S.990DPF should first contact Sagemath at the contact information991provided above.{" "}992</p>{" "}993<p>994{" "}995In compliance with the EU-U.S. DPF, the UK Extension to the996EU-U.S. DPF, and the Swiss-U.S. DPF, Sagemath commits to997cooperate and comply respectively with the advice of the panel998established by the EU data protection authorities (DPAs), the999UK Information Commissioner’s Office (ICO) and the Gibraltar1000Regulatory Authority (GRA), and the Swiss Federal Data1001Protection and Information Commissioner (FDPIC) with regard to1002unresolved complaints concerning our handling of personal data1003received in reliance on the EU-U.S. DPF, the UK Extension to1004the EU-U.S. DPF, and the Swiss-U.S. DPF.{" "}1005</p>{" "}1006<p>1007{" "}1008Such independent dispute resolution mechanisms are available1009to citizens free of charge. If any request remains unresolved,1010you may contact the national data protection authority for1011your EU Member State.{" "}1012</p>{" "}1013<p>1014{" "}1015You may also have a right, under certain conditions, to invoke1016binding arbitration for complaints regarding DPF compliance1017not resolved by any of the other DPF mechanisms; for1018additional information, see{" "}1019<A href="https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2">1020www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=21021</A>1022. The Federal Trade Commission has jurisdiction over1023Sagemath’s compliance with the EU-U.S. DPF, the UK Extension1024to the EU-U.S. DPF, and the Swiss-U.S. DPF.{" "}1025</p>{" "}1026</div>{" "}1027<div id="other-rights-and-important-information">1028{" "}1029<h1>1030{" "}1031<span>12</span> Other Rights and Important Information{" "}1032</h1>{" "}1033<div id="changes-to-our-privacy-policy-and-practices">1034{" "}1035<h2>1036{" "}1037<span>12.1</span> Changes To Our Privacy Policy and1038Practices{" "}1039</h2>{" "}1040<p>1041{" "}1042We may revise this Privacy Policy from time to time in our1043sole discretion. If there are any material changes to this1044Privacy Policy, we will notify you as required by applicable1045law. You understand and agree that you will be deemed to1046have accepted the updated Privacy Policy if you continue to1047use the Services after the new Privacy Policy takes effect.{" "}1048</p>{" "}1049</div>{" "}1050<div id="california-privacy-rights">1051{" "}1052<h2>1053{" "}1054<span>12.2</span> California Privacy Rights{" "}1055</h2>{" "}1056<p>1057{" "}1058California law permits users who are California residents to1059request and obtain from us once a year, free of charge, a1060list of the Third Parties to whom we have disclosed their1061Personal Information (if any) for their direct marketing1062purposes in the prior calendar year, as well as the type of1063Personal Information disclosed to those parties. Sagemath1064does not share Personal Information with Third Parties for1065their own marketing purposes.{" "}1066</p>{" "}1067</div>{" "}1068<div id="supervisory-authority">1069{" "}1070<h2>1071{" "}1072<span>12.3</span> Supervisory Authority{" "}1073</h2>{" "}1074<p>1075{" "}1076If you are located in the European Economic Area, you have1077the right to lodge a complaint with a supervisory authority1078if you believe our processing of your Personal Information1079violates applicable law.{" "}1080</p>{" "}1081</div>{" "}1082<div id="compliance">1083{" "}1084<h2>1085{" "}1086<span>12.4</span> Compliance{" "}1087</h2>{" "}1088<p>1089{" "}1090This Policy shall be implemented by Sagemath and all its1091operating divisions, subsidiaries and affiliates. Sagemath1092has put in place mechanisms to verify ongoing compliance1093with DPF Principles and this Policy. Any Employee that1094violates these privacy principles will be subject to1095disciplinary procedures.{" "}1096</p>{" "}1097</div>{" "}1098</div>{" "}1099<div id="definitions">1100{" "}1101<h1>1102{" "}1103<span>13</span> Definitions{" "}1104</h1>{" "}1105<p>1106{" "}1107The following capitalized terms shall have the meanings herein1108as set forth below.{" "}1109</p>{" "}1110<ul>1111{" "}1112<li>1113{" "}1114<p>1115{" "}1116<strong>“Agent”</strong> means any Third Party that1117Processes Personal Information pursuant to the1118instructions of, and solely for, Sagemath or to which1119Sagemath discloses Personal Information for use on its1120behalf.{" "}1121</p>{" "}1122</li>{" "}1123<li>1124{" "}1125<p>1126{" "}1127<strong>“Employee”</strong> refers to any current,1128temporary, permanent, prospective or former employee,1129director, contractor, worker, or retiree of Sagemath or1130its subsidiaries worldwide.{" "}1131</p>{" "}1132</li>{" "}1133<li>1134{" "}1135<p>1136{" "}1137<strong>“Personal Information”</strong> is any information1138relating to an identified or identifiable natural person (1139<strong>“Individual”</strong>).{" "}1140</p>{" "}1141</li>{" "}1142<li>1143{" "}1144<p>1145{" "}1146<strong>“DPF Principles”</strong> means the seven (7)1147principles of the Data Privacy Framework: (1) notice, (2)1148choice, (3) accountability for onward transfer, (4)1149security, (5) data integrity and purpose limitation, (6)1150access, and (7) recourse, enforcement, and liability.1151Additionally, it includes the sixteen (16) supplemental1152principles described in the Data Privacy Framework: (1)1153sensitive data, (2) journalistic exceptions, (3) secondary1154liability, (4) performing due diligence and conducting1155audits, (5) the role of the data protection authorities,1156(6) self-certification, (7) verification, (8) access, (9)1157human resources data, (10) obligatory contracts for onward1158transfers, (11) dispute resolution and enforcement, (12)1159choice – timing of opt-out, (13) travel information, (14)1160pharmaceutical and medical products, (15) public record1161and publicly available information, and (16) access1162requests by public authorities.{" "}1163</p>{" "}1164</li>{" "}1165<li>1166{" "}1167<p>1168{" "}1169<strong>“Process”</strong> or{" "}1170<strong>“Processing”</strong> means any operation which is1171performed upon Personal Information, whether or not by1172automatic means, such as collection, recording,1173organization, structuring, storage, adaptation or1174alteration, retrieval, consultation, use, disclosure by1175transmission, dissemination or otherwise making available,1176alignment or combination, restriction, erasure, or1177destruction.{" "}1178</p>{" "}1179</li>{" "}1180<li>1181{" "}1182<p>1183{" "}1184<strong>“Sensitive Data”</strong> or{" "}1185<strong>“Sensitive Personal Information”</strong> is a1186subset of Personal Information which, due to its nature,1187has been classified by law or by policy as deserving1188additional privacy and security protections. Sensitive1189Personal Information includes Personal Information1190regarding EU residents that is classified as a{" "}1191<strong>“Special Category of Personal Data”</strong> under1192EU law, which consists of the following data elements: (1)1193race or ethnic origin; (2) political opinions; (3)1194religious or philosophical beliefs; (4) trade union1195membership; (5) genetic data; (6) biometric data where1196Processed to uniquely identify a person; (6) health1197information; (7) sexual orientation or information about1198the Individual’s sex life; or (8) information relating to1199the commission of a criminal offense.{" "}1200</p>{" "}1201</li>{" "}1202<li>1203{" "}1204<p>1205{" "}1206<strong>“Third Party”</strong> is any company, natural or1207legal person, public authority, agency, or body other than1208the Individual, Sagemath or Sagemath’s Agents.1209</p>1210</li>1211</ul>1212</div>1213<div id="revision-history">1214<h1>1215<span>14</span> Revision history1216</h1>1217{/* @ts-ignore */}1218<table1219cellPadding="5px"1220style={{ margin: "auto", border: "1px solid black" }}1221>1222<thead>1223<tr>1224<th align="left"> Title </th> <th> Effective Date </th>1225</tr>1226</thead>1227<tbody>1228<tr>1229<td> Sagemath Privacy Policy </td>1230<td> 2015-05-03 </td>1231</tr>1232<tr>1233<td> Updated Sagemath Privacy Policy </td>1234<td> 2018-10-05 </td>1235</tr>1236<tr>1237<td> Updated Sagemath Privacy Policy </td>1238<td> 2018-10-29 </td>1239</tr>1240<tr>1241<td>Update: Privacy Shield</td>1242<td> 2020-02-04 </td>1243</tr>1244<tr>1245<td>1246Update: temporarily remove mention of Privacy Shield1247</td>1248<td> 2020-02-06 </td>1249</tr>1250<tr>1251<td>Update: restore mention of Privacy Shield</td>1252<td> 2020-02-20 </td>1253</tr>1254<tr>1255<td>Update: revise JAMS link</td>1256<td> 2022-09-15 </td>1257</tr>1258<tr>1259<td>1260Update: Data Privacy Framework instead of Privacy Shield1261</td>1262<td> 2023-08-23 </td>1263</tr>1264<tr>1265<td>Update: clarify alignment with GDPR</td>1266<td> 2025-02-20 </td>1267</tr>1268</tbody>1269</table>1270<p>1271{" "}1272A revision control history for this web page can be found at1273<A href="https://github.com/sagemathinc/cocalc/commits/master/src/packages/next/pages/policies/privacy.tsx">1274{" "}1275github.com/sagemathinc/cocalc/commits/master/src/packages/next/pages/policies/privacy.tsx1276</A>1277.{" "}1278</p>{" "}1279</div>1280<h1>Questions?</h1>1281<p>1282Please contact us at{" "}1283<A href="mailto:[email protected]">[email protected]</A> if1284you have any questions about our Privacy Policy.1285</p>1286</div>1287</div>1288<Footer />1289</Layout.Content>{" "}1290</Layout>1291</Customize>1292);1293}12941295export async function getServerSideProps(context) {1296return await withCustomize({ context });1297}129812991300