Last updated: 2020-11-01

Data Security And Privacy Policy

Document Control

Overview

Phase Locked Software Software takes security management seriously and as such only relies on secured and reliable infrastructures. Document Control (the "Software", "Application") is hosted on Heroku (a Salesforce company), a proven Platform as a Service (PaaS) provider.

Please be advised that Document Control for Confluence Cloud is connected to Atlassian data centers in the United States of America and other countries. That means that some data processing might happen in the United States of America if you choose to access Document Control through an Atlassian data center. Document Control does not store personal data in the application itself.

The Phase Locked software website is hosted in the EU.

Data storage

Document Control's specific data is stored on Heroku Postgress. No data about document contents, projects or users are stored. All data is backed up daily and backups are retained for seven days. Additional offsite backups are taken and stored externally with variable retention periods. Security of hosted data is provided by our hosting provider which applies security best practices.

When you contact support by email, we will store your email address and other contact data. These data are stored in the EU.

Logging

We collect application logs for security and error analysis. These logs contain traces of your data processing.

Facilities

Heroku's servers running Document Control are hosted in the US Region.

The Phase Locked Software website and support and email hosting are in the EU.

People and access

Our support team maintains an account on all cloud systems and applications for the purposes of maintenance and support. This support team accesses hosted applications and data only for purposes of application health monitoring and performing system or application maintenance, and upon customer request via our support system. Within Phase Locked Software, only authorized agents have access to application data.

Personal Data

We do not collect personal data from our customers other than information necessary for e.g. support and payment processing.

We do not use personal data except as necessary to identify our customers, provide our services, respond to technical issues, provide support and analyze (on an aggregated and anonymous basis) the use of our services.

If you opt in to sending automatic emails from the application, we will use your email address and name (if allowed by your privacy controls in your Atlassian account) to send you emails. These data may be processed by email providers and email routing anywhere in the world, and we do not control the routing of emails through the internet and other networks. By not opting in to sending automatic emails, no data will be processed or shared.

The Software is not meant to process personal data, but we may host personal data on behalf of our customers if they choose to upload personal data to the Software. Processing of personal data hosted on the Software is performed by our customers. We process such data only on the instructions of our customers or if required by law.

We do not disclose personal data to any third-party, except when authorized by our customers or if required by law.

Data Collected by Atlassian

Personal information required for licensing and billing is collected and processed by Atlassian and is governed by the Atlassian Marketplace Terms of Use and the Atlassian Privacy Policy. Phase Locked Software has limited access to this information as part of the reporting and analytics features provided by Atlassian to Marketplace partners.

This information can be used for delivering our services, for improvement of our services and analysis. It may also be used to contact you in connection service updates of add-ons, or other usage related issues, for which you are listed as a contact.

Data Subject Rights

Depending on your place of residence, you may be entitled to exercise rights provided by applicable law. In most cases, such exercise shall be directed at our customers.

You may contact Phase Locked Software for privacy related inquiries at privacy@phaselockedsoftware.com .

Study Randomizer

Please refer to: Privacy Policy for Study Randomizer