Privacy Policy

Introduction

Sogolytics (formerly SoGoSurvey) is Software as a Service (SaaS) based company that provides its clients tools to conduct two-way communication with their customers, employees, suppliers, and constituents. At Sogolytics, protecting the privacy of our clients, survey participants, and visitors is a core business principle. Like the postal service, we understand that the information we deliver belongs to our clients and their survey participants, not us.

Our practices stated in this Privacy Policy are applicable worldwide. Sogolytics is a global organization, with legal entities, business processes, management structures, and technical systems that cross borders. We may share information between Sogolytics entities and transfer it between our offices around the world. Some countries may provide less legal protection for personal information than the country in which the information was obtained. Even if a country does not have stringent requirements for protecting your privacy, we still handle information in the manner described here.

This Privacy Policy applies only to information collected by Sogolytics on our website at the URL https://www.sogolytics.com/ (the “Site”), our Sogolytics service platform owned and operated by Sogolytics LLC (“Sogolytics”, “we”, “us”, “our”), and any other service or product provided by Sogolytics that explicitly specifies the applicability of this Privacy Policy (collectively, “Service(s)”). This Privacy Policy does not apply to data collected on third party websites, apps, or services, or the use of Sogolytics’s platform and services by third parties for collection of information, even if such third parties are Sogolytics’s partners and display Sogolytics branding on their websites, apps, or services. Data collected by third parties is subject to their own privacy policies and practices. This Privacy Policy describes how Sogolytics collects, receives, uses, stores, shares, discloses, transfers, and processes your personal information (collectively, “Process”, “Processed”, “Processing”), as well as your rights and choices in determining what we do with the information that we collect or hold about you. This Privacy Policy does not govern the Processing of non-personal or anonymized information by Sogolytics.

This Privacy Policy is a part of Sogolytics’s Terms of Service. If any word or phrase has been defined within the Terms of Service, but has not been defined within this Privacy Policy, that word or phrase shall have the meaning that has been assigned to it under the Terms of Service.

If you have questions or concerns regarding this Privacy Policy, please contact us at privacy@sogolytics.com.

1. What Information does Sogolytics collect?

Sogolytics collects information about: (1) our customers (“Clients”); (2) the individuals who participate in, or are invited to participate in, any of our Clients’ surveys (“Survey Participants”); and (3) any visitor to our Site, apps, platforms, and Services, whether or not they are Clients, Survey Participants, or other visitors (collectively, “Visitors”). Collectively, the information collected about our Clients (“Client Information”), Survey Participants (“Participant Information”), and Visitors (“Visitor Information”) is referred to as “Information”.

1.1 All Visitors:

• If you choose to use our referral service on Sogolytics to share an article from our Service, we will ask you for your email address and your recipient’s email address. We will automatically send your recipient a one-time email in your name inviting him or her to visit the Site or Service to view the article.
• We collect certain information in accordance with the Section on “Cookies, web beacons, and other tracking technologies” below.
• If you share any personally identifiable information through comments or forms on our blog, forum, or public resources, it may be read, collected, or used by third parties to send unsolicited messages to you. You assume sole responsibility for the use of any personally identifiable information that you choose to submit in public view. To request removal of your personal information from our blogs, forum, or public resources, contact us at privacy@sogolytics.com. In some cases, we will let you know if we are unable to do so and why. We encourage all users to exercise caution when providing personal information in blogs, forums, and public posts.
• You can import contacts from Gmail or other address books to invite other individuals to become Sogolytics users. We do not collect the username and password for the email account from which you wish to import your contacts, and we only collect the contact email address for contacts that you select for that purpose.

1.2 Clients:

• When our Clients register on the Service, we ask for contact information including company name, name of contact, title of contact, telephone number, email address, User ID, password, and billing information which may include credit card numbers. We may ask our Clients to provide additional categories of information as mentioned in the sign-up form. Clients are required to provide us with Information that is necessary for us to provide our Services.
• Clients can log in to our Service using sign-in services such as Facebook Connect, Google Sign-in, or an Open ID provider. These services will authenticate your identity and provide you the option to share certain Information with us, such as your name and email address to pre-populate our sign-up form. Services like Facebook Connect give you the option to post information about your activities on this Service to your profile page to share with others within your network.

1.3 Survey Participants:

• We receive Participant Information from both Clients and Survey Participants. Clients provide us with contact information such as email address, and sometimes additional details including the name of each Participant. Before receiving such Information, we contractually require Clients to warrant that they have a pre-existing relationship with the Survey Participant and/or the Survey Participant’s permission to receive electronic messages.
• Survey Participants provide us with the Information requested by our Clients as well as all answers to the survey questions. Clients are the sole responsible party for the content of the surveys; We do not control the theme or questions asked in any survey. In order to enhance survey response rates, we track and record: (I) if and when a Survey Participant has responded to a survey and (ii) if and when a Survey Participant has received an invitation or a reminder to participate in a survey.

2. How does Process Information?

We use Client Information to provide our services to our Clients, Participant Information in accordance with Client instructions, and Visitor Information to improve the features and security of our Site and Services. We use personal information strictly in accordance with this Privacy Policy. If Sogolytics intends to use any personal information in a manner that deviates from this Privacy Policy, we will provide a notice of how we intend to use that Information as we collect it. The use of that specific Information will be limited to the use stated in the alternative disclosure.

2.1 All Visitors: We may use your Information:

• For our legitimate interests: To protect our legal rights, to improve the performance, features and security of our Site and Services by analyzing user behavior, or for detection or prevention of fraud or misuse of our Services or properties.
• For compliance with our legal obligations: For law enforcement purposes, for compliance with a legal requirement or court order.

2.2 Clients: We use Client Information to:

2.2.1. To fulfil our obligations to you

• To provide our services in the normal course of our business, including to contact you regarding technical support, discuss billing issues, or to bring to your attention any aspect of our mutual business such as changes to our agreements or this privacy policy.
• To provide you strictly service-related announcements when we consider it necessary to do so. For instance, we might send you an email if our service is suspended for maintenance. You may not opt-out of these necessary and non-promotional emails without terminating your account.
• Upon receiving a request for help or support from a Client, Sogolytics's authorized employees may, without seeking any additional permission or consent, undertake the following actions: (i) Access that Client’s account for the sole and limited purpose of providing help and support to the Client or their Survey Participants as per their request; (ii) Contact the Client's Survey Participants for investigation of issues; and (iii) Make necessary changes to resolve the issue.

2.2.2. For our legitimate interests: To provide you with product updates or to introduce new products and services. If you do not wish to receive promotional emails from us, please follow the unsubscribe instructions included in each promotional email.

2.3 Survey Participants: Sogolytics collects personal Information on its service platform under the direction of its Clients and has no direct relationship with the individuals whose personal data it processes. If you are a customer of one of our Clients and would no longer like to be contacted by one of our Clients that use our service, please directly contact the Client that you interact with. Personal Participant Information may be used by Sogolytics to:

• Send survey invitations and reminders at our Client’s direction.
• Fulfill the purpose for which the Client has engaged Sogolytics.
• Troubleshoot technical problems.
• Resolve disputes.
• Address complaints.
• Verify compliance with the Terms of Service.

2.4 Newsletters: If you subscribe to our newsletter(s), we will use your name and email address to send the newsletter(s) to you.

2.5 Testimonials: We may publish your comments, reviews, feedback, or testimonials regarding the Service. Such comments, reviews, feedback, or testimonials may contain personal information that has been provided by you as a part of the comment, review, feedback or testimonial. Except when we respond to a publicly available comment, review, feedback, or testimonial, we will seek your consent prior to publicly posting your name along with the comment, review, feedback, or testimonial. Please contact us at privacy@sogolytics.com if you want us to remove any comment, review, feedback, or testimonial that contains your personal information.

3. With whom does Sogolytics share Information?

Sogolytics does not use or disclose personal information for purposes that are materially different from those described in this policy. We will share your personal information with third parties only in the ways that are described in this privacy policy. Sogolytics will provide individuals with reasonable mechanisms to exercise their choices.

3.1 Participant Information with Client: Our business is the provision of tools that our Clients use to conduct meaningful surveys with their employees, suppliers, customers, and constituents. Accordingly, we provide Clients with access to Participant Information obtained in response to the surveys that Clients have conducted. Clients may use Participant Information in accordance their own privacy policy and applicable law.

3.2 As Explicitly Allowed by Clients or Participants: We may share or otherwise use Client Information as explicitly allowed by Clients and we may share Participant Information as either the Client or the Survey Participant expressly allows. For example, Clients are given the opportunity to either hide or make available to Survey Participants certain Client contact information in connection with any survey.

3.3 Agents Acting on Our Behalf: We may share some of your Information with other companies who provide us with technical and other services. They will be contractually granted access to only that Information which is necessary for them to perform their intended tasks and they will be prohibited from using the Information for any other purpose. We do not share any personally identifiable information with third parties who are not service providers.

3.4 For Legal Reasons: We may disclose your personal information as required by law such as to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims and when we believe in good faith that disclosure is necessary to protect our rights, or to protect your safety or the safety of others. In certain situations, Sogolytics may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also share your Information to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law.

3.5 Merger and Acquisition: If Sogolytics is involved in a merger, acquisition, or sale of all or a portion of its assets, Clients will be notified via email and/or a prominent notice on our Site or Service of any changes in ownership, Processing of personal Information, and choices available to Clients regarding any personal Information in our possession.

3.6 Marketing: If you are a Visitor or a Client, we may share your email address with third parties for the limited purpose of showing our advertisements to you. Where required by law, we may do so only with your consent.

4. What are your rights under this Privacy Policy?

Clients and other Visitors except Survey Participants: If you are a Client or a Visitor of the website other than a Survey Participant, you may exercise your rights by contacting us at privacy@sogolytics.com. In addition to this Section, please see Section 10 for additional clauses that are applicable to certain jurisdictions. We may, at our own discretion, require you to furnish proof of your identity and/or proof of authorization to undertake the requested action prior to granting any request under this Section. Where permitted by law and necessary to prevent abuse, Sogolytics may charge a fee for performance of its obligations under this Section.

Survey Participants: Sogolytics provides a platform for use by its Clients and acts only in accordance with the directions of its Clients. Once a Survey Participant has submitted a survey response, the Survey Participant will not be able to access his/her Information through the Service. Survey Participants may contact the Client that conducted the survey and that Client, in turn, will be able to view the Survey Participant’s collected Information and, where appropriate, work with us to access, modify, or delete such Information. Where required, Sogolytics will work with the Client to fulfill such requests within 30 days.
Clients may exercise the following rights for their data:

4.1 Data Ownership: Clients own all personally identifiable information that they bring to our platform, including the Information provided directly by the Clients and the Information obtained from Survey Participants in response to surveys. Sogolytics may Process the information in accordance with this Privacy Policy.

4.2 Right to Data Portability: Data may be exported from our system by Clients for external use in a format chosen by the Client from a list of formats provided by Sogolytics.

4.3 Right to be Forgotten: Sogolytics deletes Information in accordance with Section 5 below. Clients may delete any Information from their own accounts at any time. Deleted data may continue to exist in our backups for disaster recovery purposes in accordance with Section 5 below. Certain data or Information may not be deleted by Sogolytics in accordance with Section 5 below. We may refuse to grant this request if we consider the retention of your data or information to be necessary for us to protect our legal rights, for law enforcement purposes, for compliance with a legal requirement or court order, or for detection or prevention of fraud or misuse of our Service or properties.

4.4 Right to Access and Correction: Upon request by a Client, Sogolytics will inform the Client whether we hold any personal Client Information. Clients may view and modify their Client Information in our active database at any time. Certain categories of Client Information may not be modifiable through the Client’s account. The changed Information may remain in back-ups and records subject to Section 5 below.

4.5 Direct Marketing Communications: All direct marketing communications, such as emails, sent by Sogolytics contain instructions for unsubscribing from such communication. Alternatively, you may contact us at unsubscribe@Sogolytics.com.

5. Data storage and retention

We will use the following criteria to determine the duration for which your Information will be retained:

5.1 For the legitimate purposes of record keeping and to fulfil any legal obligations including but not limited to taxation, Sogolytics may retain your email address, contact information, name, invoices, transaction details, and the period for which you had subscribed to any Service, as long as necessary for such legitimate purposes, legal obligations, resolution of disputes, and/or enforcement of our agreements.

5.2 Personally identifiable Information will be retained as long as the Client continues to use our Service. Subject to this Section 5, upon account termination, account data will be retained for a minimum period of 30 days. Sogolytics may, but shall have no obligation to, retain or maintain data beyond the period of 30 days from the date of termination of the account.

5.3 To the extent that Client has transferred to Sogolytics or used Sogolytics services to store data under the General Data Protection Regulation Addendum ("GDPR Addendum"), Client shall be the sole responsible party for deletion of Personal Data (as defined under the GDPR Addendum) as required by Client, Client’s data subjects or applicable laws.

5.4 Subject to the restrictions under this Section 5, Clients can delete any data from their own accounts or exercise the right under clause 4.3 above at any time. Deleted data may continue to exist in our backups for disaster recovery purposes in accordance with this Section 5.

5.5 We may retain any Information until any dispute is resolved, or to protect our legal rights, or if we are obligated to do so by a law, court order, or law enforcement, or for prevention and detection of fraud or misuse of our Services or properties, or for enforcement of our agreements.

5.6 For disaster recovery, Client data back-ups are taken at regular intervals as long as the Client holds an active account with Sogolytics.

5.7 Once any Information has been deleted, it cannot be recovered.

6. How does Sogolytics protect the Information?

To prevent unwanted and unauthorized access to your information, we use the following methods, techniques, and technologies:

• The Service is hosted in a secure server environment that uses a firewall, among other technologies, to reasonably prevent access from outside intruders.
• We use security logs, train our employees, and limit access to only essential personnel.
• During transmission, your Information is protected with encryption.
• For disaster recovery, Client data back-ups are taken at regular intervals as long as the Client holds an active account with Sogolytics.

All our technologies and processes are not, however, guarantees of security. Please keep your User ID and password secret and let us know at privacy@sogolytics.com immediately if you learn or suspect that your account has been compromised or our security has been breached.

7. Cookies, web beacons, and other tracking technologies

As is true of most websites and services, we gather certain information automatically and store it in log files in order to improve the features and security of our products and services. This information may include Internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data, etc. We do not link this automatically collected data to other information we collect about you.

We, and third parties on our website, also use cookies and other tracking technologies. For information about the use of cookies and other tracking technologies on our website and Service(s), please see our Cookie Policy, incorporated herein by reference.

You can control the use of cookies as described in the Cookie Policy, but disabling cookies may limit your use of certain features or functions on our website or service.

8. Third-party website(s), app(s), software(s), or service(s)

The Services may, from time to time, contain links to the websites of our partner networks, advertisers, affiliates, or any other third-party websites, apps, or services. This Privacy Policy does not apply to data collected on third party websites, apps, or services, or the use of Sogolytics’s platform and services by third parties for collection of information, even if such third parties are Sogolytics’s partners and display Sogolytics branding on their websites, apps, or services. Data collected by third parties is subject to their own privacy policies and privacy practices. Please check the privacy policies and terms of service / terms and conditions of any third-party website, app, software, or service that you choose to visit or use. We do not accept any liability for any collection, storage, use / misuse, sharing, disclosure or transfer of data, viruses or other malware, or any other damage, loss or harm caused to you or anyone else as a result of your visit to any third-party website, app, or service, or use of any third-party software.

9. Changes in this Privacy Policy

As we are constantly improving our services and expanding our business, we retain the right to modify this privacy policy at any time. In the event we make any material changes, we will notify our Clients about the change by sending an email to the email address specified in the Client’s account, by means of a notice on the Site or a Service provided by Sogolytics, and/or through other reasonable means prior to the change becoming effective. The changes will be effective 14 days after the new policy has been notified or posted on the Site or Service. Information collected after the new policy is in effect will be used in conformance with the new policy. Information gathered under the old policy will continue to be used in conformance with that policy unless: (i) for Client Information, Client agrees for the Information to be used under the new policy, or (ii) for Survey Participant Information, we in conjunction with the Client, notify Survey Participants of the changes and the Survey Participant does not prohibit the use of the Information in conformance with the new policy.

Our latest Privacy Policy can always be found at our Site. We encourage you to periodically review this page for the latest information on our privacy practices.

10. Additional Information for Specific Territories

10.1 European Economic Area

This information is applicable only for (i) Clients, and (ii) Visitors except Survey Participants, if such Client or Visitor is located in the European Economic Area.

Sogolytics is committed to protecting all personal data received from the European Economic Area and the United Kingdom in compliance with GDPR. At present, Sogolytics stores all Information in the United States of America. Sogolytics reserves the right to offer an option to Clients to choose a different location for Processing (or only storage) of all or certain Information, such as Survey Participant Information.

If you are a Client of Sogolytics in the European Economic Area, you have the following rights available to you in addition to the rights listed above. We may, at our own discretion, require you to furnish proof of your identity and/or proof of authorization to undertake the requested action prior to granting any request under this Section. Where permitted by law and necessary to prevent abuse, Sogolytics may charge a fee for performance of its obligations under this Section.

10.3.1 Right to Restrict Processing: You may request for Processing of your data to be restricted under Article 18 of GDPR.

10.3.2 Right to Object: You may object to the Processing of your Information under Article 21 of GDPR.

10.3.3 Supervisory Authority: If you are unsatisfied with our response to your request, you have the right to complain to your supervisory authority. However, for speedy fulfilment of your rights, we request that you reach out to us at support1@sogolytics.com first, so that we can help you resolve any issue you may have faced in the fulfilment of your request.

Sogolytics uses the Sub-Processors listed at https://www.sogolytics.com/subprocessor-list/ (as updated from time to time) for the Processing of Information.

If you are a Client in the European Economic Area, you may contact our representative for fulfilment of your data subject rights. Our representative’s information is provided below:

Representative Name: Prighter.

Proof of representation: https://prighter.com/q/15956222

Submit a data subject request: https://prighter.com/dsrtool/15956222

10.2 Switzerland

This information is applicable only for transfers of data from Switzerland.
Sogolytics LLC. (“Sogolytics”) participates in and has certified its compliance with the Swiss-U.S. Privacy Shield Framework. Sogolytics is committed to subjecting all personal data received from Switzerland, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List.
[https://www.privacyshield.gov/list]

Sogolytics is responsible for the processing of personal data it receives under the Privacy Shield Framework and subsequently transfers to a third party acting as an agent on its behalf. Sogolytics complies with the Privacy Shield Principles for all onward transfers of personal data from Switzerland, including the onward transfer liability provisions.

With respect to personal data received or transferred pursuant to the Privacy Shield Framework, Sogolytics is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Sogolytics may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request

Under certain conditions, more fully described on the Privacy Shield website [https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint], you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

10.3 United Kingdom

This information is applicable only for (i) Clients, and (ii) Visitors except Survey Participants, if such Client or Visitor is located in the United Kingdom.

Sogolytics is committed to protecting all personal data received from the United Kingdom in compliance with UK’s Data Protection Act 2018 and UK-GDPR. At present, Sogolytics stores all Information in the United States of America. Sogolytics reserves the right to offer an option to Clients to choose a different location for Processing (or only storage) of all or certain Information, such as Survey Participant Information.

You have the following rights available to you in addition to the rights listed above. We may, at our own discretion, require you to furnish proof of your identity and/or proof of authorization to undertake the requested action prior to granting any request under this Section. Where permitted by law and necessary to prevent abuse, Sogolytics may charge a fee for performance of its obligations under this Section.

10.3.4 Right to Restrict Processing: You may request for Processing of your data to be restricted under Article 18 of UK-GDPR.

10.3.5 Right to Object: You may object to the Processing of your Information under Article 21 of UK-GDPR.

10.3.6 Supervisory Authority: If you are unsatisfied with our response to your request, you have the right to complain to your supervisory authority. However, for speedy fulfilment of your rights, we request that you reach out to us at support1@sogolytics.com first, so that we can help you resolve any issue you may have faced in the fulfilment of your request.

Sogolytics uses the Sub-Processors listed at https://www.sogolytics.com/subprocessor-list/ (as updated from time to time) for the Processing of Information.

You may contact our representative for fulfilment of your data subject rights. Our representative’s information is provided below:

Representative Name: Prighter.

Proof of representation: https://prighter.com/q/15956222

Submit a data subject request: https://prighter.com/dsrtool/15956222