This Privacy Notice applies to Personal Information we collect and process in connection with: (A) the Everlaw Service, Storybuilder by Everlaw, and any other products, services, and related applications offered by Everlaw (collectively, the “Service”); (B) Everlaw.com and other Everlaw websites, including our social media pages (collectively, the “Site”); (C) any interactions you have with, registrations for, attendance at, or otherwise partaking in our events, tutorials, or webinars (collectively, the “Marketing Activities”); or (D) your visit to our offices.
As mentioned above, for much of the personal information we process through our Service, we act as a processor on behalf of our Customer. This means it is primarily our Customer that controls what personal information we collect and process through the Service and how we use it, and we only process the information in accordance with their instructions.
This Privacy Notice does not apply to any personal information contained in Customer Data that Everlaw processes as a processor, as we only process that information on behalf of the Customer and in accordance with our Agreement with them. A Customer that has entered into an Agreement to use the Service (e.g. your employer, authorized reseller, or another entity or person) controls its instance of the Service and any associated Customer Data. If your personal information is contained in Customer Data and you have any questions about the specific settings and privacy practices the relevant Customer has made to share your personal information with us, please contact the relevant Customer or review its privacy notice.
Similarly, this Privacy Notice does not apply to any third party applications or software accessible via the Service or that integrate with the Service or any other third party products, services, or businesses. If you have any questions about the specific settings and privacy practices of such third parties, please contact the relevant third party product, service, or business to review its privacy notice.
If you are a resident of or a visitor from the European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland, we need a lawful basis to collect, use, or disclose your Personal Information. Our lawful basis will depend on the information concerned and the context in which it is processed.
We may process your Personal Information in order to perform a contract with you (such as to create and maintain your account). In other circumstances, we may process your information where the processing is in our legitimate interests and those interests are not overridden by your rights and freedoms (such as to inform you about changes in the Service or to monitor and analyze usage, trends, and activities in connection with the Service).
Where required, we may process your Personal Information where we have obtained your consent (for example, where we obtain your consent to send you promotional or marketing materials). Finally, we may need to process your Personal Information to comply with our legal obligations (such as to exercise, establish, or defend our legal rights or share your information with a law enforcement body or regulatory agency where disclosure is required by law).
If you have questions about the lawful basis on which we collect, use, or disclose your personal information, you can contact us at privacy@everlaw.com.
We (and the third parties we work with) use cookies and similar tracking technologies on the Site and Service to collect certain information about how you use the Site and Service and your computer or device. This includes Device Information and Cookie Information (as described above). We may also collect Service-Generated Data that demonstrates how you have interacted with the Site or Service. This information enables us to better understand how the Site and Service are being used and to improve the quality and relevance of the Site and Service.
Your browser or device may include “Do Not Track” functionality. Because there is not yet a common understanding of how to interpret Do Not Track signals, we do not currently respond to Do Not Track signals. However, you can opt out from the use of tracking technologies as explained in our Cookie Notice.
Other types of cookies, further described below, enable us to provide Site and Service functionality or to enhance visitors’ experience on our Site by providing them with personalized content and advertising:
- Advertising Cookies. We and the third parties we work with use cookies to serve advertisements on other websites that may be of interest to you, based on information collected about your use of the Site and other websites. To do so, these third parties may place or recognize a unique cookie or similar tracking technology on your browser. They may also employ technology that is used to measure and track the effectiveness of advertisements. You can learn more about ad-serving companies and the options available to limit their collection and use of your information by visiting the websites for the Network Advertising Initiative and the Digital Advertising Alliance.
- Analytics Cookies. We may allow third parties to provide analytics services for us to help analyze how people use the Site and Service, compile reports, and improve the quality and relevance of the Site and Service. These services (e.g. Google Analytics, Heap, Hotjar) may use cookies, web beacons, and other tracking technologies to identify the devices used by visitors to our Site, as well as when they visit other online sites and services. The information generated by these services is transmitted to and stored in the services and is subject to their privacy policies and notices.
Please see our Cookie Notice for more information about the types of cookies we use and your opt-out options.
We may place third party links in the Service or on our Site. When you click on a link from our Service or Site to a third party website, your activity and use is governed by that website’s policies, not by those of Everlaw. We are not responsible for the information practices of such third parties. We encourage you to review their privacy and user policies.
Everlaw is headquartered in the United States and has offices, employees, and service providers who operate around the globe. As a global business, Everlaw may process Personal Information in locations outside of the country where you are located because Personal Information is typically processed by centralized or regionalized operations like billing, support, and security.
Regardless of where Personal Information is processed, Everlaw applies the same protections described in this Privacy Notice. For individuals in the EEA, UK, or Switzerland, when transferring Personal Information across countries or regions we rely on certain legal mechanisms such as the European Commission’s Standard Contractual Clauses and additional safeguards. The Standard Contractual Clauses provide appropriate safeguards for the protection of the privacy and fundamental rights and freedoms of individuals and the exercise of the corresponding rights.
If you are a California resident, this section also applies to you and supplements the information contained elsewhere in this Privacy Notice.
This Privacy Notice already describes the information we collect and the sources of information. This section organizes that information around the personal information categories set out in the California Consumer Privacy Act (“CCPA”). In the past 12 months, we have collected the following information from the following sources:
- Identifiers (e.g. your email or username and password when you sign-up for an account with us), which we obtain from you when you sign up to the Service or otherwise in the course of our interactions;
- Commercial Information (e.g. products purchased or considered or other similar consuming histories or tendencies), which we obtain from you or our Customer when you sign up to the Service or otherwise in the course of our interactions;
- Usage Information (e.g. browser type, device information, and other information regarding your interactions with our Service), which we obtain from you automatically through our Site and Service;
- Professional and employment-related information (e.g. your employer’s name, company address, and phone number), which we obtain from you or our Customer in the course of our interactions;
- Troubleshooting and Support data (e.g. information about your account preferences or data you provide when you contact Everlaw for support), which we obtain from you in the course of our interactions; and
- Inferences drawn from any of the above information categories, which we generate during the course of our Agreement.
California law requires that we detail the categories of personal information that we share or disclose for “business purposes,” such as disclosures to service providers that assist us with securing our services or marketing our products. In the past 12 months, we have disclosed the following categories of personal information for our “business purposes”:
- Identifiers;
- Commercial information;
- Internet activity information;
- Professional and employment-related information;
- Troubleshooting and support data; and
- Inferences drawn from any of the above information categories.
Under the CCPA, California residents have the right to request that a business disclose certain information about the business’s collection and use of their personal information over the past 12 months. A California resident also has the right to ask such businesses to delete the personal information they have collected, and a business cannot discriminate against a California resident for exercising any of their rights under the CCPA.
If you wish to exercise any of your rights under the CCPA, please contact us at privacy@everlaw.com. You may also designate an agent to make requests to exercise your rights under the CCPA. We will take steps both to verify the identity of the person seeking to exercise their rights, and to verify that your agent has been authorized to make a request on your behalf through providing us with a signed written authorization or a copy of a power of attorney.
As a business covered by the CCPA, we do not sell your Personal Information. We may share Personal Information with third parties or allow them to collect Personal Information from our Site or Service if those third parties are authorized service providers or business partners who have agreed to our contractual limitations as to their retention, use, and disclosure of such Personal Information or if you use our Service to interact with third parties or direct us to disclose your Personal Information to third parties.
Under California law, California residents who have an established business relationship with Everlaw may choose to opt out of Everlaw’s disclosure of Personal Information about them to third parties for direct marketing purposes. If you choose to opt out at any time after granting approval, email privacy@everlaw.com. In accordance with California Civil Code Section 1789.3, California resident users are entitled to know that they may file grievances and complaints with the California Department of Consumer Affairs, 400 R Street, STE 1080, Sacramento, CA 95814; or by phone at (916) 445-1254 or (800) 952-5210; or by email to dca@dca.ca.gov.
You can access and control the Personal Information that we process about you as described in this section.
Individuals located in certain countries, including the EEA, the UK, Switzerland, and Brazil, have certain statutory rights in and to their personal data. Subject to any exemptions provided by law, you may have the right to request access to Personal Information, as well as seek to update, delete, or correct your Personal Information. If you are a user of the Service, you can usually do this by updating, correcting, or modifying your Account Information at any time by logging into your Everlaw account. If you are a resident of or a visitor from the EEA, UK, Switzerland, or Brazil, you can also object to our processing of your Personal Information, ask us to restrict the processing of your Personal Information, or request portability of your Personal Information.
For all requests regarding your Personal Information or questions about your rights per this Privacy Notice, please contact us at privacy@everlaw.com. We respond to all requests in accordance with our obligations under applicable data protection laws. Please note that we may need to verify your identity before we can respond to your request.
If you are a user of the Service, you can also update, correct, or modify your Account Information in a manner consistent with the functionality of the Service or contacting us at support@everlaw.com.
You may opt-out of receiving marketing communications from us by either selecting the relevant box on a communication consent form, by selecting to “unsubscribe” via a link in an email, or by emailing us with your specific request to privacy@everlaw.com. If you are a user of our Service and opt-out from receiving any marketing communications from us, we may still send you non-promotional communications, such as security alerts and notices related to your account or our ongoing business relations or other non-marketing purposes.
If we have collected and processed your Personal Information with your consent, then you may withdraw your consent at any time. As required by applicable law, we will apply your preferences going forward, within a reasonable amount of time. Even where you withdraw your consent, we may still process your Personal Information for other purposes, for example, to give effect to your request or to safeguard our business. In some circumstances, withdrawing your consent to our use or disclosure of your Personal Information will mean that you cannot use our Service. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal or our rights in the applicable Agreement, and it will not affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
If Everlaw cannot complete your request, we will inform you unless prohibited by law or regulation. Everlaw will not discriminate against you for exercising certain rights under applicable law.
If you are a resident of or a visitor from the EEA, UK, Switzerland, or Brazil, you have the right to submit a complaint to a supervisory authority if you believe that Everlaw has processed your Personal Information in a manner that is not compliant with applicable privacy and data protection laws, including the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the UK GDPR, the Swiss Data Protection Act, and the Brazilian General Data Protection Law. The specific contact details for each data protection authority are listed below:
- If you reside in the EU, the contact details are available here;
- If you reside in the UK, the contact details are available here;
- If you reside in Switzerland, the contact details are available here; and
- If you reside in Brazil, the contact details are available here.
We may change this Privacy Notice from time to time. Laws, regulations, and industry standards evolve, which make those changes necessary, or we may make changes to our Site or Service. We will post the changes to this page and revise the “Last Updated” date at the top of this Privacy Notice. If we make changes that materially alter your privacy rights, we will provide additional notice, such as notifying you directly by email or posting a notice in the Service prior to the change becoming effective.
If you are a user of the Service and do not wish your information to be subject to the revised Privacy Notice, you may deactivate your account with us by contacting privacy@everlaw.com and stopping the use of our Service. For further information about the privacy rights available to you, review the section titled Your Privacy Rights.