1. Our Commitment to Privacy
Personal privacy is important and We acknowledge and respect the desire of individuals for personal privacy.
2. Who Are We
Umso Software Inc., is a company formed under the laws of British Columbia, Canada (“Umso”, “Our”, “Us, and “We”) with a delivery address of #900-2025 Willingdon Avenue, Burnaby, B.C., Canada V5C 0J3.
We provide an online software application and related services enabling subscribers to build their own websites.
3. Key Terms
“Application” means Our proprietary Web-based software application called Umso™ and all associated documentation and other materials utilized by Subscribers or made available to you by Us for use in accessing the Website and using the Services to create a Subscriber Platform.
“End Users” refers to individuals who visit or use any Subscriber Platform and the related services of our Subscribers.
“personal information” refers to any information received, collected, or maintained by Us that identifies, or could be used to identify, an individual.
“Services” means the Application, the subscription to which provides you with an account or access to the functionality and feature set for the Application, to create a Subscriber Platform, whether the trial version, startup version, growth version, or business version or any other version available from time to time from Us, Our hosting services, or any other functions utilized by you or made available to you in conjunction with accessing the Website and the Application.
“Subscribers” are persons who have registered with Us to use Our Services.
“Subscriber Platform” means the website created by a Subscriber using the Application and Services.
“Users” means, depending on the context, unregistered visitors to Our Website and/or Subscribers.
“Web Site” means https://www.umso.com, any subdomains thereof, and any successor websites.
“you” and “your” refers to a User.
4. Application of this Policy
5. What is Personal Information?
“Personal information” is personally identifiable information such as your name, residential address, business address, and e-mail address or any other information that can be used to identify an individual or about an identifiable individual.
We are not in the business of collecting anyone’s personal information except to the extent it’s needed in relation to using Our Services, supporting the use of Our Services by Users, and communicating with Users and prospective Users.
We collect personal information when you provide it to Us, such as if you choose to communicate or register with Us before or after Using any of Our Services. This information may include details about yourself, including your name, telephone number, business mailing address, and email address to participate in any Services We may offer.
6. Collecting and Using your Personal Information
If you register for Our Services, purchase and/or register domain names, use any of Our Services, or when you contact Us directly (by email or a support ticket), you may provide Us personal information, such as your name, email address, phone number, payment information (for Subscribers), Goods and Services Tax or VAT number identification information you include in your communications with Us, and personal information contained in scanned identification documents (such as an ID card, driver’s license, passport, or official company registration documents).
When you visit Our Website, or download and/or use any of Our Services, We may collect personal information regarding your usage for security or fraud prevention purposes.
We also collect personal information on an aggregated basis, such as Users’ browsing and click-stream activity on or relating to the Services, and non-identifying personal information regarding Users’ computing device, operating system, internet browser, country, city, screen resolution, language, and keyboard settings, internet service provider, referring/exit pages, and date/time stamps.
We may receive personal information about you from third-party sources, such as security providers or fraud detection and prevention providers who assist Us in screening out visitors to the Website associated with fraud; and social media platforms (if you log-in or sign-up using your social media account, We may receive personal information from that service including your username and basic profile personal information).
We may also collect personal information of End Users, solely for and on our Subscribers’ behalf (as further described in Section 8 below). The personal information of End Users will include the country, city, referring source, pages visited on a Subscriber’s Platform, the computing device, software operating system, and log data.
We also collect personal information to allow Us to contact Users or potential Users in the normal course of business, including providing technical support services, providing information on our latest software announcements and software updates, or if you apply for employment with Us.
In summary, we use personal information for providing the Services; enabling Us to improve and expand the Services; supporting Our Subscribers; contacting Users including for promotional purposes; analyzing Our performance; for security purposes; and to comply with applicable laws.
7. Non-Personal Information
We also collect non-personally identifiable information about Users in a number of ways, including tracking visits to Our Website through your IP address, computer settings, or search keywords used which let Us know more about whether different aspects of Our Website are informative or of interest to potential Users and Subscribers.
We may collect, use, transfer, and disclose non-personally identifiable information for any purpose.
If We combine non-personally identifiable information with personal information, the combined information will be treated by Us as personal information for so long as it remains combined.
Anonymous or “non-personal” information gathered by Umso through accessing Our Website or communicating with Us may be used for technical, research, and analytical purposes. Information collected through surveys may be used by Us to analyze Our Services, target market, and to develop or enhance Our Services.
8. End Users of Subscribers
We may collect, store, and process certain personal information of End Users on behalf of Subscribers and at their direction. For example, each of our Subscribers can build their own forms to collect personal information of End Users and other data via their own website. Such personal information may then be stored with Umso, on the Subscriber’s behalf.
In this context, (a) We are considered a “Processor” and not a “Controller” (as both such capitalized terms are defined in the GDPR, and including their capitalized cognates) of such personal information of End Users; and (b) the Subscribers controlling and operating their own Subscriber Platforms are considered as the “Controllers” of such personal information of End Users, and are responsible for complying with all laws and regulations that may apply to the collection and control of such personal information of End Users, including all privacy and data protection laws of all relevant jurisdictions.
The Processing of the personal information of End Users occurs within the jurisdictions of the European Union, Canada, India, and/or the United States and such processing and transfer will be in accordance with our Data Processing Agreement for Users ("DPA").
You are responsible for the security, integrity, and authorized usage of personal information of End Users, and for obtaining the required consent and providing any required data subject rights and fair processing notices required for the collection and usage of such personal information.
If you are a User or an End User, We confirm that Umso has no direct relationship with End Users whose personal information We Process.
If you are a visitor, user, or customer of any of Our Users, and have any request regarding your personal information, please contact such User directly.
For example, if you wish to request to access, correct, amend, or delete any personal information of yours which is inaccurate and which is Processed by Us on behalf of Our Subscribers, please direct your query to the relevant User (who is the “Controller” of such data).
If We are requested by our Users to remove any personal information of End Users, We will respond to such requests in a timely manner upon verification and in accordance with applicable law (for example, 30 days under the GDPR). Unless otherwise instructed by a User, We will retain personal information of the subject End Users for the period set forth in Section 22 below.
9. The extent we share personal information and where it is stored
Unless you specifically authorize Us to release your personal information, or release is required or permitted by law, We will not sell, lease, license, or trade your personal information to any other third parties.
Personal information collected by Us is processed and stored in Oregon, in the United States of America. Subscribers’ websites and the personal information of End Users are Processed and stored in Toronto, Canada, Mumbai, India, and Frankfurt, Germany, and some of the personal information of End Users may also be Processed and stored in Oregon. To the extent We transfer personal information of residents of the EU anywhere outside of Europe, We will ensure that (a) there is a level of protection deemed adequate by the European Commission or (b) that the relevant Model Standard Contractual Clauses approved by the European Commission are in place.
Like other companies, we have business relationships with other service providers whose services complement our Services. We use:
- Alphabet Inc., a United States company, for its website analytics on Our Website;
- Amazon Web Services, a United States company for cloud services;
- Automattic, a United States company for its Akismet spam protection services;
- Profitwell, a subscription revenue analytics company in the United States;
- Pusher Limited, a company formed in England, for its cloud hosting services;
- Canny Inc., a United States user feedback platform;
- Functional Software Inc., a United States company, for its Sentry application monitoring and error reporting software service;
- NewRelic, a server monitoring company in the United States
- Wildbit LLC, a United States company for its Postmark email processing services;
- Stripe, a payment processor in the United States; and
- ZenDesk, a customer support services company in the United States;
- Atomical Creative Inc. a data analytics company in Canada;
- Mixpanel Inc., a product analytics company in the United States;
(collectively, “Other Service Providers”).
We and Our Other Service Providers that store or process your personal information on Our behalf are contractually committed to keep it protected and secured, in accordance with industry standards and regardless of any lesser legal requirements which may apply in their jurisdiction.
Thus personal information may be subject to disclosure in accordance with the laws applicable in Canada, the United States, the EU, Germany, and India as well as the jurisdictions where the Other Service Providers physically locate their servers or store their data in relation to the services provided to Us.
Your personal information and the personal information of End Users may be accessible to regulatory, law enforcement, and national security authorities of those jurisdictions, and may be subject to disclosure in accordance with the laws of those countries or jurisdictions. Such laws may or may not provide the same level of protection for personal information as do the applicable laws of the jurisdiction in which you or your End Users ordinarily reside.
We only share personal information with our Other Service Providers in the normal course of using their software services offered to Us as a user/subscriber, ancillary to our business of providing our Services. The type of personal information we share includes the scope of personal information we receive including identifiers, such as your name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers; and commercial information, such as information regarding the type of Services subscribed for from Us.
You are responsible to inform your End Users of the extent to which We collect, process, and use their personal information in the course of our provision of Services to you and on your behalf.
If Umso is involved in a merger, acquisition, or any form of sale of some or all of Our assets, We may transfer any and all personal information We collect to the relevant third party.
If we have any bona fide reason, We may share personal information if we believe doing so will help protect the rights, property, or personal safety of Umso, any of our Users, any End Users, or any member of the general public, with or without notice to you.
10. Informed Consent
For personal information of Our Users, We will only request personal information that We need and will only ask for it when it’s needed.
Generally, this is going to be in the context of doing business with Users or prospective Users interested in Our Services.
So if We ask you for personal information, it will either be self-evident why We’re asking for such information, or if not, We’ll explain to you why such personal information is needed and what We are going to do with it.
We will seek your prior consent to the collection, use, and disclosure of the information as required by applicable privacy legislation. Your consent may be provided orally, or through use of Our Website.
Some examples associated with Our processing of your personal information will relate to subscribing for our Services, technical support services, sending invoices, following up on payments, or responding to communications requesting more information about Us or Our Services.
You’ll always have the right at any time to remove your consent from any such processing or collection of your personal information by contacting Us by email at firstname.lastname@example.org. But withdrawing your consent is subject to certain allowable exceptions (e.g., We need the personal information to provide or to continue to provide Our Services, or, if the withdrawal of your consent would frustrate the performance of a legal obligation We may have. This is explained in more detail below under Section 19).
Note that if you decide to withhold or withdraw your consent to certain uses of your personal information, We may not be able to provide Our Services to you.
11. Storage under applicable law
Subject to applicable laws in British Columbia, in Canada, in the United States, and in the EU, We may collect, use, or store personal information without your consent in the following limited circumstances:
when the personal information is available from a public source (e.g. a telephone directory);
to protect Us, Our Users, and others with whom We may do business, from fraud;
to investigate an anticipated breach of an agreement or a contravention of law; or
when such collection, use, or disclosure of personal information is permitted or required by applicable law.
12. Cookies and Other Technologies
Yes, Umso and Our Other Service Providers use “cookies” to collect information, helping Us understand User behaviour and preferences insofar as Our Services are concerned.
A cookie is a small text file that is stored on the device you use to access a website.
“Cookies” contain a unique identification number that identifies your browser to Our computers each time you visit Our Website.
We may collect information about your mobile device, computer, or other hardware device from which you access Our Website including your IP address, operating system, and browser type. This is statistical data about Our Users’ browsing actions and patterns.
Knowing someone using your computer or device has downloaded Our Application or is interested in a particular Service helps Us make our marketing and email communications more relevant to your interests. We may provide you with customized advertisements, content, and information; monitor and analyze the effectiveness of Our Website content and third-party marketing activities; and monitor aggregate site usage metrics such as total number of visitors and pages viewed. And knowing your contact information helps Us provide you with better customer service.
13. Types of Cookies
We use the following types of cookies to help improve your engagement with Our Website, identify repeat visitors, and offer an improved personalized service than would otherwise be available without using cookies:
Essential Cookies: these enable you to browse the Website and use essential features like secure and private areas.
Analytical cookies: these allow Us to recognize and count Users and see how Users move around Our Website when using it. This helps us improve the way Our Website works, for example, by making it easier for Users to find what they are looking for.
Function cookies: these enable you to navigate Our Website and gain full access to its features and secure areas, including e-billing services. These are also used to recognize you when returning to Our Website. This may enable Us to personalize content (for example, greet you by name or acknowledge what region you are from).
Marketing cookies: are used to deliver advertisements more relevant to your personal interests, to limit the amount of times you see an ad and measure the effectiveness of ads.
Performance cookies: these allow Us to analyze and improve the performance of Our Website to provide you with a better visitor experience.
Preferences & Features cookies: these remember choices you made on previous visits to Our Website so We can provide enhanced, more personal features as well as enabling automated completion of forms with information previously provided.
Targeting cookies: these record your visits to Our Website, the pages you have visited, and the links you followed to affiliated Websites. We use this information to make Our Website more relevant to your interests.
Cookies We use include ones We design, as well as cookies from Our Other Service Providers. Information from cookies is retained by Us for up to two years.
The cookie table below provides you with information about the type, categories, purpose, and duration of cookies placed by Us and Our Other Service Providers.