Privacy Policy
Last updated: Aug 20, 2024
Umbrella’s Privacy Policy describes how Umbrella collects, uses, and discloses your information. This Privacy Policy also explains your choices surrounding how we use your personal information, which include how you can object to certain uses of the information and how you can access and update certain information.
Here are some important definitions to help you understand our terms and this Privacy Policy:
Umbrella Studios Inc., and our relevant affiliates are referred to as “Umbrella,” “we,” “us,” and “our.”
Our public websites, including www.umbrellaproduct.com, are referred to as the “Website.”
Our online software-as-service platform including any related APIs provided by Umbrella, together with all related mobile and desktop applications are collectively referred to as the “Services.”
Content submitted, posted or modified by users in the Service is organized into separated sections that are referred to as “Workspaces.”
Information we collect
We collect information when you provide it to us, when you use our Website or Services, and when other sources provide it to us, as further described below.
A. Information You Provide to Us
Account Creation: When you create an account or otherwise use the Services, we collect information such as your name, email address, password, role within your team or enterprise, and an optional profile photo.
Your Communications with Us: We collect information from you such as email address, phone number, or mailing address when you request information about our Services, register for our newsletter, request customer or technical support, or otherwise communicate with us. We also collect the contents of messages or attachments that you may send to us, as well as other information you choose to provide, and that may be associated with your communications.
Payment Information: When you purchase a subscription to the Services, you will need to provide payment information (e.g., financial account details, shipping information) to process your subscription. We use third-party payment providers to process payments on the Services. We may receive information associated with your payment information, such as billing address and transaction information, but we do not directly store payment information on the Services. Payment information is stored and processed by our payment providers on our behalf.
Surveys: We may contact you to participate in surveys. If you decide to participate, you may be asked to provide certain information which may include contact information and other information about you.
Interactive Features: We may offer interactive features such as forums, blogs, chat and messaging services, and social media pages. We and others who use our Website or Services may collect the information you submit or make available through these interactive features. Any content you provide via the public sections of these features will be considered “public” and is not subject to the privacy protections referenced herein. By using these interactive features, you understand that the information provided by you may be viewed and used by third parties for their own purposes.
Registration for Sweepstakes or Contests: We may run sweepstakes and contests. Contact information you provide may be used to inform you about the sweepstakes or contest and for other promotional, marketing and business purposes.
Conferences, Trade Shows, and Other Events: We may attend conferences, trade shows, and other events where we collect contact information from individuals who interact with or express an interest in the Services.
Job Applications. We may post job openings and opportunities on the Website or Services. If you reply to one of these postings by submitting your application, CV and/or cover letter to us, we will collect and use your information to assess your qualifications.
B. Information Collected Automatically
Automatic Data Collection: We keep track of certain information about you when you visit and interact with our Website or Services. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, details about your browser, operating system or device, location information (including inferred general location based off of your IP address), Internet service provider, pages that you visit before, during and after using the Website or Services, information about the links you click, information about how you interact with the Website or Services, including the frequency and duration of your activities, and other information about how you use the Website or Services. Information we collect may be associated with accounts and other devices.
Cookies, Pixel Tags/Web Beacons, and Analytics Information: We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Website or Services. Technologies are essentially small data files placed on your devices that allow us and our partners to record certain pieces of information whenever you visit or interact with our Services.
Analytics: We may also use third-party service providers to collect and process analytics and other information on our Website or Services. These third-party service providers may use Technologies to collect and store analytics and other information. They have their own privacy policies addressing how they use the analytics and other information and we do not have access to, nor control over, third parties’ use of cookies or other tracking technologies.
Cookies, Pixel Tags/Web Beacons, and Analytics Information: We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Website or Services. Technologies are essentially small data files placed on your devices that allow us and our partners to record certain pieces of information whenever you visit or interact with our Services.
Cookies, Pixel Tags/Web Beacons, and Analytics Information: We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Website or Services. Technologies are essentially small data files placed on your devices that allow us and our partners to record certain pieces of information whenever you visit or interact with our Services.
Should you choose to use the Google Contacts feature within our Services, we will have the ability to view your contacts via the Google People API. The sole use of this data is to populate the auto-completion of your contacts when sending invitation emails. Umbrella will not use this data for any other purpose.
Cookies, Pixel Tags/Web Beacons, and Analytics Information: We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Website or Services. Technologies are essentially small data files placed on your devices that allow us and our partners to record certain pieces of information whenever you visit or interact with our Services.
Umbrella Calendar requires you to authorize access to your calendar and events data held in your third party calendar service. Such third party calendar service is a Non-Umbrella Service as that term is defined in the Agreement. Should you choose to authorize an integration with your calendar provider, we will store your userID for that calendar provider and the authorization token to connect to the calendar provider’s API to give you the ability to use Umbrella Calendar to store, view and edit data from your calendars, and autocomplete contacts when you create events.
C. Information from Other Sources
You may also choose to integrate Umbrella Calendar with your third party conferencing provider. Such conferencing provider is a Non-Umbrella Service as that term is defined in the Agreement. Should you choose to authorize an integration with your conference provider, you will have the ability to add conferencing meetings to your calendar events, and to view and store any information associated with conferencing meeting invitations in Umbrella Calendar.
We may obtain information about you from other sources, including through third-party services and organizations. For example, if you access our Website or Services through a third-party application, such as a social networking site or a third-party login service, we may collect information about you from that third party that you have made available via your privacy settings. In addition, if you register a Umbrella account or associate a Umbrella account with an email address provisioned by your organization, we may obtain information from third party data enrichment providers to help us to better tailor business-to-business marketing and sales outreach to you.
How we use your information
We use your information for a variety of business purposes, including to:
Provide the Services or Requested Information, such as:
Fulfilling our contract with you;
Identifying and communicating with you, including providing newsletters and marketing materials;
Managing your information;
Processing your payments (which are processed and stored by our third-party payment processors on our behalf) and otherwise servicing your purchase orders;
Responding to questions, comments, and other requests;
Providing access to certain areas, functionalities, and features of our Services; and
Answering requests for customer or technical support.
Serve Administrative and Communication Purposes, such as:
Pursuing legitimate interests, such as research and development (including marketing research), network and information security, and fraud prevention;
Sending communications about new product features, promotions, Umbrella's strategic partners, and other news about Umbrella;
Measuring interest and engagement in our Services, including analyzing your usage of the Services;
Developing new products and services and improving the Services;
Ensuring internal quality control and safety;
Authenticating and verifying individual identities;
Carrying out audits;
Communicating with you about your account, activities on our Services and Privacy Policy changes;
Preventing and prosecuting potentially prohibited or illegal activities;
Enforcing our agreements; and
Complying with our legal obligations
Facilitating Collaboration in a Workspace: If you join a Workspace owned by another user or organization, or collaborate with other users on Umbrella, Umbrella may share basic information about you such as your name, email address, profile picture, Workspace name and Workspace ID with the other users or organizations.
Managing Workspaces for Organizations: If you register a Umbrella account or associate a Umbrella account with an email address provisioned by your organization, Umbrella may share information about you and any Workspaces owned or managed by you with your organization. Such information could include your name, email address, and profile picture, as well as the Workspace name, Workspace ID, membership size, creation date of your Workspace, email address, and content within your Workspace with your organization. If you registered to use Umbrella’s Services with such an email address, but you do not use the Services in connection with your organization and you do not wish for this information to be shared with your organization, you may transfer your account to a different email address. If you would like additional assistance, please contact hello@umbrellaconcierge.com.
Marketing of Products and Services: In accordance with applicable legal requirements, we may use your information to tailor and provide you with content and advertisements. If you have any questions about our marketing practices or if you would like to opt out of the use of your information for marketing purposes, you may contact us as set forth below.
Consent: We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.
De-identified and Aggregated Information Use: We may use de-identified and/or aggregated information that can no longer be reasonably linked to you or your device from the information we collect. De-identified and/or aggregated information is not subject to this Privacy Policy, and we may use and disclose such information in a number of ways, including research, internal analysis, analytics, and any other legally permissible purposes.
Process Information on Behalf of Our Customers: Our customers may choose to use our Services to process certain data of their own, which may contain information from or about you. Such personal information that is processed by us on behalf of our customers, and our privacy practices will be governed by the contracts that we have in place with our customers, not this Privacy Policy.
If you have any questions or concerns about how such information is handled or would like to exercise your rights, you should contact the person or entity (i.e., the data controller) who has contracted with us to use the Service to process this information. Our customers control the information in these cases and determine the security settings within the account, its access controls and credentials. We will, however, provide assistance to our customers to address any concerns you may have, in accordance with the terms of our contract with them.
How We Use Automatic Collection Technologies: Our uses of Technologies fall into the following general categories:
Operationally Necessary;
Performance Related;
Functionality Related; and
Marketing Related.
Cross-Device Tracking: Your browsing activity may be tracked across different websites and different devices or apps. For example, we may attempt to match your browsing activity on your mobile device with your browsing activity on your laptop. To do this our technology partners may share data, such as your browsing patterns, geo-location and device identifiers, and will match the information of the browser and devices that appear to be used by the same person.
Disclosing your information
We may disclose your information to the following categories of third parties:
Service Providers: We may disclose information we collect about you to our third-party service providers. The categories of service providers to whom we entrust your information include service providers for: (i) the provision of the Services; (ii) the provision of information, products, and other services you have requested, including Non-Umbrella Services as that term is defined in the Agreement; (iii) marketing and advertising; (iv) payment and transaction processing; (v) customer service activities; (vi) the provision of IT and related services; and (vii) fraud prevention and user authentication.
Business Partners: At your request, we may provide information to business partners to provide you with a product or service of interest to you. We may also provide information to business partners with whom we jointly offer products or services.
Affiliates: We may disclose information to our affiliated entities, who are under common ownership and/or control with us.
Advertising Partners: We do not disclose or use your information to advertise any third party’s products or services via the Services. However, as explained in detail in the “Information Collected Automatically” section above, we may disclose your information to third-party advertising partners to market our own Services and grow our Services’ user base, such as to provide targeted marketing about our own Services via third-party services. I Please see the “Your Choices” and “Your Rights” sections below for more information and to opt out.
We may disclose your information to other third parties, including other users, in the following circumstances:
Workspaces Accessible by Other Users: When you submit information in a workspace that can be accessed by others, such information may be displayed to other users in the same or connected workspaces. For example, your information may be included in your notes or reminders in a workspace which can be viewed by other users collaborating with you in that workspace. Further, your email address or photo may be displayed with your workspace profile to other users collaborating with you in that workspace.
Organizational Workspaces: We allow organizations to access the profile information of users within their workspace, including to allow such organization to validate that such user is actually authorized by such organization to use the Services.
Share Content with Friends or Colleagues: Our Services may allow you to provide information about your friends, and may allow you to forward or share certain content with a friend or colleague, such as an invitation email. You agree to only provide information about a friend or colleague with their consent.
Disclosures to Protect Us or Others: We may access, preserve, and disclose any information we store in association with you to external parties if we, in good faith, believe doing so is required or appropriate to: (i) comply with law enforcement or national security requests and legal process, such as a court order or subpoena; (ii) protect your, our, or others’ rights, property, or safety; (iii) enforce our policies or contracts; (iv) collect amounts owed to us; or (v) assist with an investigation and prosecution of suspected or actual illegal activity.
Disclosure in the Event of Merger, Sale, or Other Asset Transfer: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of some or all assets, or transition of service to another provider, then your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.
Data Use and AI Policy
Data Usage Limitation:
We are committed to protecting your privacy and ensuring that your data is used responsibly. Our policy is to handle user data with the utmost care and in accordance with the specific guidelines provided by Google. We do not engage in the following activities:
Transferring Data: We do not transfer your data to third parties or external entities without your explicit consent.
Selling Data: We do not sell, lease, or otherwise monetize your data.
Unauthorized AI Training: We do not use your data to create, train, or improve machine learning or artificial intelligence models beyond the scope of providing the specific user-facing feature or personalized model for your individual use case.
Purpose Limitation:
Any data collected is used solely for the purpose of delivering and enhancing the service you have requested. We ensure that any use of AI or machine learning is strictly limited to the specific functionalities intended for you and does not extend beyond the scope of providing personalized features or improving your direct user experience.
Data Protection and Security:
We implement stringent security measures to safeguard your data from unauthorized access and misuse. Your data is protected using industry-standard encryption and security protocols, ensuring that it remains secure throughout its lifecycle.
Transparency and Consent:
We are transparent about how your data is used and ensure you are informed before any data processing occurs. We obtain your consent for any data usage beyond the direct functionality of the service you are using.
Data Retention and Deletion:
We retain your data only for as long as necessary to fulfill the service or comply with legal obligations. Upon request or when no longer needed, we ensure that your data is securely deleted.
Ethical AI Practices:
We adhere to ethical standards in the use of AI, ensuring that any AI applications respect user privacy and avoid biased or unfair practices.
For any questions or concerns regarding our data use and AI policy, please contact us at hello@umbrellaconcierge.com.
International Data Transfers
All information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. When we engage in such transfers, we endeavor to safeguard your information consistent with the requirements of applicable laws.
Your Choices
General: You may have the right to object to or opt out of certain uses of your information. Where you have consented to the processing of your information for a specific purpose, you may withdraw that consent at any time by contacting us as described below. Even if you opt out, we may still collect and use your information for other purposes that were not based on your consent.
Email Communications: If you receive an email from us and do not want to receive future emails from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you certain non-promotional communications regarding us and our Services, and you will not be able to opt out of those communications (e.g., communications regarding the Services or updates to this Privacy Policy).
Mobile Devices: We may send you push notifications through our Apps. You may at any time opt out from receiving these types of communications by changing the settings on your mobile device. With your consent, we may also collect precise location information if you use our Apps. You may opt out of this collection by changing the settings on your mobile device.
“Do Not Track”: Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications that you do not wish such operators to track certain of your online activities over time and/or across different websites. Like most online services, we do not currently respond to Do Not Track signals. However, as discussed below in the “Your Privacy Rights” section, we do honor legally-recognized browser-based mechanisms (such as the Global Privacy Control designed to signal your opt out choices under certain state laws).
Cookies: You may stop or restrict the placement of Technologies on your device. Umbrella provides settings for you to update your preferences in our Services. These settings can be found in the footer of our website. If you have a Umbrella account and are logged in to the Services, you can access your Cookie settings in the “Settings & Members” menu under the “My notifications & settings” section.
Your Privacy Rights
Depending upon your location and in accordance with applicable laws, you may have the right to:
Access information about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic information transferred to another party.
Request Correction of your information where it is inaccurate or incomplete.
Request Deletion of your information, subject to certain exceptions prescribed by law.
Request Restriction or Object to Processing of your information.
Not be Discriminated Against by us for exercising your privacy rights.
If you would like to exercise any of these rights, please contact us as set forth below. We will process such requests in accordance with applicable laws, and in some circumstances may need to deny your request in whole or in party (e.g., if we have a legal obligation to maintain your information for a certain purpose). To protect your privacy, we will take steps to verify your identity before fulfilling your request, such as by requiring you to submit your request via your account. You have the right to submit a request through an authorized agent, but we will require the agent to provide us with your written permission, and we may need to confirm your identity before processing the agent’s request.
Depending on your location of residence, you may have the right to appeal our response to your request. In such circumstances, we will inform you of the right to appeal and the appeal process.
Data Retention
We store the information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.
Security of your Information
We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.
By using the Services or providing information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Services, by mail or by sending an email to you.
Third-Party Websites/Applications
The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk.
Children's Information
Our Services are intended for general audiences and are not directed at children. If we become aware that we have collected data without legally valid parental consent from children under an age where such consent is required, we will take reasonable steps to delete it as soon as possible.
Supervisory Authority
If you are located in the European Economic Area or the UK, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your information violates applicable law.
Data Privacy Framework
Umbrella Studios Inc. has certified to the U.S. Department of Commerce that Umbrella adheres to (1) the EU-U.S. Data Privacy Framework with regard to the processing of personal information received from the European Union, (2) the UK Extension to the EU-U.S. Data Privacy Framework, with regard to the processing of personal information received from the United Kingdom (and Gibraltar), and to (3) the Swiss-U.S. Data Privacy Framework with regard to the processing of personal information received from Switzerland (the “DPF”). The Federal Trade Commission has jurisdiction over our compliance with the DPF.
We remain responsible for all the personal information we receive under the DPF and that we subsequently transfer to third parties acting as agents on our behalf if they process personal information in a manner inconsistent with the DPF principles, unless we prove we are not responsible for the event giving rise to the damage.
If you have any question about our practices in relation to our participation in the DPF, or should you have any complaint in that regard, we encourage you to contact us directly, as set forth below. For any complaint that we cannot resolve directly Umbrella Studios Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) (for personal information received under the EU-US DPF), the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA) (for personal information received under the UK Extension to the EU-US DPF), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) (for personal information received under the Swiss-US DPF). Please contact us if you would like us to direct you to your data protection authority contacts.
You may, under certain conditions, invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms.
Changes to this Privacy Policy
Umbrella may update this Privacy Policy. The latest version of this Privacy Policy will always be available in this document. Please check this page occasionally to make sure you are aware of any updates. Please contact us for additional information.
