This Privacy Policy outlines how iWorkspace. (referred to as "iWorkspace," "we," "our," or "us") collects, stores, uses, and shares different categories of personal data:
This refers to personal data that we collect, process, and manage on behalf of our business customers ("Customers"). It includes information submitted to the iWorkspace cloud-based visual work management platform, as well as the desktop or mobile applications, integrations, add-ons, and extensions services associated with iWorkspace (collectively referred to as the "Platform"). We handle this Customer Data as a "data processor" under the instruction of our Customers, as contentsribed in our Data Processing Addendum. For more details, please refer to Section 9 below.
Therefore, this Privacy Policy, which explains iWorkspace's privacy and data processing practices as a "data controller," does not cover the processing of Customer Data. If you have any questions or requests regarding Customer Data, please contact your account administrator(s) directly.
This category includes the personal data of individuals who interact with iWorkspace on behalf of our Customers. It includes Account Admins, procurement and billing contacts, authorized signatories, and authorized users of the Platform (collectively referred to as "Users").
This refers to data relating to visitors of our websites (including www.iworkspace.io), participants in our events, and other potential customers, users, or partners (collectively referred to as "Prospects") who visit or interact with our websites, digital ads and content, emails, integrations, or communications under our control ("Sites," together with the Platform, referred to as the "Services").
If you are a Customer, User, or Prospect, please carefully read and fully understand this Privacy Policy.
You are not legally obligated to provide us with any of your personal data, and you have the freedom to choose whether or not to do so. If you prefer not to provide us with your personal data or have it processed by us or our service providers, simply refrain from visiting or interacting with our Sites and using our Services.
You may also choose not to provide us with "optional" personal data (fields typically marked as "not required" on forms). However, please note that without this information, we may not be able to offer you the full range of our Services or provide you with the best user experience.
Any capitalized term used in this Privacy Policy but not defined here will have the meaning ascribed to it in our Terms of Service ("Terms").
When we refer to "personal data" or "personal information" in this Privacy Policy, we are referring to information that can be used to identify, describe, or reasonably link to an individual. This includes information that is directly or indirectly associated with an individual. However, it does not include aggregated or anonymized information that cannot be reasonably linked to an individual.
This includes connectivity, technical, and usage data such as IP addresses and approximate locations derived from those IP addresses, device and application data (such as device type, operating system, mobile device or app ID, browser version, location, and language settings), system logs of actions and events associated with IP addresses, devices, and applications, cookies and pixels installed or used on your device, and recorded activity (sessions, clicks, feature usage, logged activities, and other interactions) of Prospects and Users in relation to our Services. We collect and generate this information automatically, using analytics and system monitoring tools (including cookies and pixels). These tools gather data on how often Prospects visit or use our Sites, which pages they visit and when, the source of their visit (such as a website, ad, or email), how Users interact with and use the Platform and its features, and technical data related to the performance, functionality, and stability of the Platform.
This includes names, email addresses, phone numbers, job positions, workplace details, profile pictures, login credentials, contract and billing information, and any other information provided by Account Admins and Users when signing up or logging into the Platform. This information may be submitted directly or through social media or organizational Single-Sign-On accounts. We collect this data from various sources, including you, our Customer (your employer), Users and colleagues associated with your organizational iWorkspace account, event organizers, and professional networking platforms like LinkedIn, ZoomInfo, Clearbit, and Cognism.
We collect personal data from forms and inquiries submitted to us, such as support requests, interactions on social media and messaging apps, event registrations, and participation in our communities and activities. This may include surveys, feedback, testimonials, expressed or inferred preferences and needs, and sensory information like phone calls and video conference recordings. Written correspondences, screen recordings, screenshots, and related information may also be recorded and analyzed for purposes like analytics, quality control, training, and record-keeping.
We collect and use personal data for various purposes. Firstly, we use it to fulfill our contractual obligations and provide you with our Services (Performance of Contract). Secondly, we process personal data to comply with legal requirements (Legal Obligations). Thirdly, we use personal data to support our legitimate interests, such as improving our Services, understanding usage patterns, conducting marketing activities, providing customer support, and ensuring the security of our platform (Legitimate Interests).
If you reside or use our Services in a jurisdiction where consent is the only or most appropriate legal basis for processing personal data, your acceptance of our Terms and this Privacy Policy will be considered as your consent for the processing of your personal data, unless required by law to obtain a different form of consent. If you want to withdraw your consent, please contact us at info@iworkspace.io.
More specifically, we utilize personal data for the subsequent objectives (and based on the appropriate legal grounds for processing mentioned alongside them):
Data Location: We and our authorized Service Providers (defined below) store, process, and maintain personal data in various locations for the proper performance and delivery of our Services, or as required by applicable law.
While privacy laws may differ across jurisdictions, iWorkspace, its affiliates, and Service Providers are committed to protecting personal data in accordance with this Privacy Policy, industry standards, and applicable legal mechanisms and contractual terms that require adequate data protection. We maintain these standards regardless of any lower legal requirements that may exist in the jurisdiction to which the data is transferred. For data transfers from the EEA, the UK, and Switzerland to countries that are not deemed to offer an adequate level of data protection, we and the relevant data exporters and importers enter into Standard Contractual Clauses approved by the European Commission, UK Information Commissioner's Office, and the FDPIC (as applicable). If you would like a copy of these clauses, please contact us as indicated in Section 9 below.
However, when iWorkspace processes personal data on behalf of a Customer, the processing of such data (which is included in the Customer Data) is limited to the locations permitted in our Data Processing Addendum and other commercial agreements with the Customer, as described in more detail in Section 8 below.
Data Retention: We will retain your personal data for a reasonable period of time necessary to maintain our relationship, provide you with our Services, and fulfill our legal and contractual obligations. This includes ensuring compliance with applicable laws and regulations, as well as protecting ourselves in the event of any potential disputes. We may need to retain your personal data for record-keeping purposes, bookkeeping requirements, and to have evidence of our relationship in case of legal issues that may arise after you stop using our Services. The retention period will be determined based on factors such as the type and sensitivity of the data, the potential risks involved in unauthorized use or disclosure, the purposes of processing, and legal requirements. Our data retention policy is implemented at our reasonable discretion. If you have any inquiries regarding our data retention policy, please reach out to us at info@iworkspace.io.
We may share personal data in the following situations:
Service Providers: We collaborate with carefully selected third-party companies and individuals, referred to as "Service Providers," who perform services on our behalf or in conjunction with our own offerings. These Service Providers include providers of Third Party Services (as defined in the Terms), such as hosting and server co-location services, communication and content delivery networks (CDNs), data and cybersecurity services, billing and payment processing services, fraud detection and prevention services, web and mobile analytics, email and communication distribution and monitoring services, session or activity recording services, call recording, analytics and transcription services, event production and hosting services, remote access services, performance measurement, data optimization and marketing services, social and advertising networks, content providers, lead generation and data enrichment providers, email, voicemail, video conferencing solutions, support and customer relationship management systems, third-party customer support providers, and our legal, compliance, financial advisors, and auditors. Depending on their specific roles and purposes in facilitating and enhancing our Services or other activities, our Service Providers may have access to personal data and may only utilize the data as stipulated in our agreements with them.
Partnerships: We collaborate with carefully selected business and channel partners, resellers, distributors, and providers of professional services related to our Services. This enables us to explore growth opportunities and enhance our local presence to provide tailored experiences for our existing and potential Customers and Users. In these cases, we may share relevant contact, business, and usage information with our partners, allowing them to engage with Customers and Users for specific purposes. It's important to note that any engagement with our partners that is unrelated to our Services and not directed by iWorkspace is governed by the partner's terms and privacy policy, not ours.
Application Providers and Event Sponsors: If you or your Account Admin instruct or permit us to do so, we may share your personal data, including your User Profile, contact details, and relevant usage data, with the providers of any third-party applications or integrations added to your Account. Similarly, if you register for an event hosted, organized, or sponsored by us, we may share your registration details with the hosts, organizers, speakers, service providers, and sponsors of that event, with your permission. This allows them to contact you with relevant information, offers, or to fulfill any promotions related to the event.
Customers and other Users: Your personal data may be shared with the Customer who owns the Account you are subscribed to as a User. This includes data and communications related to your User Profile. Other Users within the same Account may also have access to your personal data. Additionally, the Account Admin has the ability to monitor, process, and analyze your personal data and activities within the Services. This includes situations where you seek assistance from us to resolve an issue specific to a team you are a member of, which is managed by the same Customer. In cases where your personal data appears in private boards or boards with limited view privileges within that Account, the Account Admin(s) may still be able to access it on behalf of the Customer. Any content you submit to private boards can still be accessed, copied, and processed by the Account Admin(s). Your User Profile and personal data will also be visible to other authorized Users who have access to the same board(s) as you. It's important to note that iWorkspace is not responsible for and does not control any further disclosure, use, or monitoring of your data by the Customer. The Customer acts as the "Data Controller" for such data, as explained in Section 9 of our policy. If you register or access the Services using an email address belonging to your employer or organization (our Customer), and another team within the same organization wants to create an account on the Services, certain information about you, such as your name, profile picture, contact information, and general account usage, may become accessible to the Account Admin and other Users.
Services integrations: You or your Account Admin have the option to integrate your Account on the Services with third-party services, as long as such integration is supported by our Services. When you integrate with a third-party service, the provider of that service may receive certain relevant data from your Account on the Services or share relevant data from their service with our Services, depending on the nature and purpose of the integration. Please note that we do not receive or store your passwords for any of these third-party services, although we may require your API key to facilitate the integration. If you do not want your data to be shared with third-party services, please contact your Account Admin.
Feedback or Recommendations: If you submit a public review or feedback, we may choose to store and display it publicly on our Sites and Services. If you want to remove your public review, please contact us at info@iworkspace.io. In the event that you decide to send an invitation to others via email or message to use our Services, we may use the contact information you provide to automatically send the invitation on your behalf. The invitation email or message may include your name and email address.
Community Forum: Our Sites feature public blogs or forums. We also actively participate in various social channels and communities on external platforms. Any information you submit on these forums, blogs, and communities, including profile information associated with your User Profile, may be accessed, collected, and used by other individuals who have access to these Sites. Please note that due to the public nature of these forums, your posts and certain profile information may remain visible to others even if you terminate your User Profile. If you wish to request the removal of your information from publicly accessible Sites operated by us, please contact us using the information provided in Section 10 below and specify the Sites from which you want your information to be removed. In some cases, we may not be able to fulfill your request for removal, and if that happens, we will inform you and provide an explanation.
Legal Compliance: In exceptional circumstances, we may disclose your personal data or grant access to government and law enforcement officials in response to a subpoena, search warrant, court order, or similar legal requirement, or as required by applicable laws and regulations. Such disclosure or access may occur if we have a good faith belief that: we are legally obligated to do so; disclosure is necessary in connection with investigations, prevention, or action against actual or suspected illegal activities, fraud, or other misconduct; or such disclosure is necessary to protect the security or integrity of our products and Services.
Protection of Rights and Safety: We may share your personal data with others if we have a good faith belief that doing so will help protect the rights, property, or safety of iWorkspace, our Users, Customers, or members of the general public.
To provide and monitor our Sites and Services effectively, we utilize various technologies such as cookies, anonymous identifiers, pixels, and container tags. These technologies help us ensure proper functionality, analyze performance and marketing activities, and personalize your experience. Some of these cookies and files may be temporarily stored on your device. Certain cookies and technologies may contain personal data, such as an IP address, as indicated by a Prospect or User. For detailed information about our use of cookies and tracking technologies, please refer to our Cookie Policy. Depending on your location and activity on our Services, you may have access to the "Cookie settings" feature to manage your preferences. Opting out of specific cookies typically results in the generation of a new cookie that retains your choice, preventing the utilization of the opted-out cookies in your future visits. You can also manage your cookie preferences, accept, remove, or block cookies entirely through your browser settings.
While some web browsers transmit "Do Not Track" signals to websites, the interpretation and response to these signals vary among browsers, and there is no standardization. Therefore, we do not change our practices based on "Do Not Track" signals. However, most browsers allow you to control cookies, including accepting or rejecting them, and removing them. You can configure your browser to notify you when you receive a cookie or to block or remove cookies entirely.
Services and promotional communications are a part of our engagement with you, and we may use various channels such as email, phone, SMS, and notifications to communicate with you.
Communications about Services: We may contact you to provide important information related to our Services. This could include notifications about changes or updates to our Services, billing matters, login attempts, password reset notifications, and more. Additionally, other Users on the same Account may send you notifications, messages, and updates regarding their or your use of the Services. You have the ability to manage your communication and notification preferences through your User Profile settings or by following the instructions provided in the communications you receive. However, please note that certain essential Services communications, such as password resets or billing notices, cannot be opted out of.
Promotional Communications: We may also inform you about new features, additional offerings, events, special opportunities, or any other information that we believe you will find valuable as a Customer, User, or Prospect. We may send these notifications through various channels, including phone, mobile, email, the Services themselves, or our marketing campaigns on other websites or platforms. If you do not wish to receive such promotional communications, you can inform us at any time by sending an email to info@iworkspace.io, adjusting your communication preferences in your User Profile settings, or following the instructions provided in the promotional communications to unsubscribe, stop receiving messages, opt-out, or change your email preferences.
To safeguard your personal data stored with us, we employ standard security measures, including physical, procedural, and technical safeguards. These measures include encryption when necessary. However, it's important to note that despite our efforts, we cannot guarantee the complete protection and security of your personal data stored with us or with third parties mentioned in Section 4.
If you want to exercise your privacy rights granted by applicable laws (such as the EU or UK GDPR, the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), or the Colorado Privacy Act (CPA)), please contact us via email at info@iworkspace.io.
These rights may include the right to know or request access to specific pieces of personal data collected, categories of personal data collected, sources of personal data collection, purposes of collecting personal data, categories of third parties with whom we share personal data, as well as the right to request correction or deletion of your personal data held by iWorkspace. You may also have the right to restrict or object to the processing of your personal data, including the right to instruct us not to "sell" or "share" your personal data with third parties now or in the future. Additionally, you may have the right to receive a copy or transfer your personal data, or the right to equal services and prices without discrimination.
Please note that when you request to exercise your rights under this Privacy Policy or applicable law, we may provide instructions on how to fulfill your request through your User Profile settings, refer you to your Account Admin, or request additional information and documents, including personal data and credentials, to process your request properly. This may include verifying your identity to ensure that we can identify the relevant data in our systems and understand the nature and scope of your request. If your request relates to personal data processed on behalf of our Customer as their "data processor" or "service provider" (as explained in Section 9), we recommend that you submit your request directly to them, as they determine how to handle such data and requests. We will only fulfill your request if you provide sufficient information to reasonably verify your identity and demonstrate that the data is processed on behalf of our Customer, so that we can forward your request to them. We will retain any additional information you provide for legal purposes, such as proof of identity and the handling of each request, as described in Section 3.
Please be aware that any personal or confidential data related to others may be redacted from the data we provide to you.
Certain data protection laws, such as the GDPR or CCPA, differentiate between the roles of "data controller" and "data processor" in the processing of personal data. The data controller determines the purposes and means of processing, while the data processor processes the data on behalf of the data controller. In the context of our Services, we clarify how these roles apply and our responsibilities within them, to the extent that the relevant laws and regulations are applicable.
iWorkspace acts as the "data controller" for the personal data of Prospects, Users, and Customers, as outlined in Section 1 of this Privacy Policy. Therefore, we assume the responsibilities of a data controller as described in this policy, to the extent required by law.
As for personal data contained in Customer Data, which is submitted by our Customers and their Users to their Account's boards, items, and docs, iWorkspace serves as the "data processor." We process this data on behalf of our Customers, who are the "data controllers" of such data. We carry out the processing according to our Customer's reasonable instructions, subject to our Terms, Data Processing Addendum, and other commercial agreements with the Customer.
Our Customers are responsible for determining the usage of our Services and ensuring that adequate notice and informed consent have been obtained from individuals using the Services on their behalf or at their request, as well as individuals whose personal data is included in Customer Data processed through the Services. Our Customers must fulfill all legal requirements related to the collection, use, or other processing of data through our Services. Additionally, our Customers are responsible for handling any requests related to data subject rights under applicable law, submitted by their Users or individuals whose data is processed through the Services.
If you have any requests or inquiries regarding personal data that we process as a data processor on behalf of our Customers, such as accessing, correcting, or deleting your data, please contact the Customer's Account Admin directly.
This Privacy Policy provides details about the types of personal information we may collect, as well as the sources of such information (Section 1). It also explains our practices for retaining data (Section 3) and deleting data (Section 8). We have included information on how we process your information, including for "business purposes" as defined by the CCPA, CPRA, and similar state laws (Sections 1 to 7). It's important to note that we do not sell or share your personal information for purposes outlined in the CCPA or CPRA, nor do we disclose personal information that we control to third parties for direct marketing purposes. However, we may disclose personal data to third parties as described in Sections 4 and 5, such as our Customers (in relation to Customer Data processed on their behalf), authorized Service Providers, business partners, or as instructed by you or described in Section 4. If you wish, you can appoint an authorized agent to exercise your privacy rights on your behalf by providing written authorization or through a power of attorney. The authorized agent can submit a request to exercise these rights by emailing us. Rest assured, we will not discriminate against you or provide a lower quality of service for exercising your rights under the law. If you have any questions or want to exercise your rights under applicable US State privacy laws, please contact info@iworkspace.io
Updates and Modifications: We may periodically update and modify this Privacy Policy by publishing an amended version on our Services. The amended policy will become effective on the date of publication. When significant changes are made to this Privacy Policy, we will provide notice in an appropriate manner, such as displaying a prominent notice within the Services or sending an email. By continuing to use the Services after the changes have been implemented, you signify your acceptance of the updated policy.
Accessibility: Upon request, this Privacy Policy can be accessed using a screen reader. For more information, please contact
Third-Party Websites and Services: Our Services may contain links to third-party websites, services, and integrations with Third-Party Services (as defined in the Terms). The terms, privacy practices, and policies of these third parties govern their respective websites, services, and Third-Party Services, as well as any information you provide, submit, transmit, or use with or on those platforms. This Privacy Policy does not apply to such third-party entities. We recommend that you carefully review the terms and privacy policies of these websites, services, and Third-Party Services.
Our Services are not intended for children under the age of 16: We do not knowingly collect personal data from children, and we have no intention to do so. If we become aware that a person under the age of 16 is using the Services, we will take steps to prohibit and block their access, and we will make our best efforts to promptly delete any personal data associated with such individuals. If you believe that we may have collected personal data from a child, please contact us at info@iworkspace.io.
Questions, Concerns, or Complaints: If you have any comments, questions, or concerns about our privacy policy or practices, or if you have any complaints regarding the processing of your personal data by iWorkspace, please contact iWorkspace's support at info@iworkspace.io.