Last updated: 2023-11-06
We’ll refer to our website as the “Site”.
We’ll refer to all the products and services we provide, individually and collectively, as the “Services”.
We’ll refer to you, the person or entity accessing our Site or using our Services, as “you” or “your” or (if you are a purchaser of our Services), our “customer”.
Data Controller: For general data protection regulation purposes, the “Data Controller” means the organization who decides the purposes for which, and the way in which, any Personal Information is processed. Our customers are the Data Controllers.
Data Processor: A “Data Processor” is an organization which processes Personal Information for a Data Controller. We are the Data Processor for our customers. As a Data Processor, we are bound by the requirements of the General Data Protection Regulations (the “GDPR”).
Data Processing: Data processing is any operation or set of operations (whether automated or not) performed upon Personal Information. Examples of data processing explicitly listed in the text of the GDPR are: collection, recording, organizing, structuring, storing, adapting, altering, retrieving, consulting, using, disclosing by transmission, disseminating or making available, aligning or combining, restricting, erasure or destruction.
Personal Information: Personal information is any information which is about you, from which you can be identified. Personal Information includes information such as an individual's name, address, telephone number, or e-mail address. Personal Information also includes information about an individual's activities, such as information about his or her activity on Site or our Services, and demographic information, such as date of birth, gender, geographic area, and preferences, when any of this information is linked to personal information that identifies that individual. Personal Information does not include "aggregate" or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of products, services, or users that is not personally identifiable or from which individual identities are removed.
How do we collect Personal Information?
In our service as a Data Processor, we collect Personal Information from Data Controllers in several ways:
Information you provide to us directly.
Information we may receive from third parties.
What information do we collect?
We may collect the following types of personal information from you:
- Account information within ILLA: user ID, username, and email address.
- Team information within ILLA: Team Identifier, team name, etc.
- Information about your use of our website and services: IP address, device type, screen resolution, browser type, operating system name and version, and language. This information may also include usage data, including pages accessed and links clicked on our website, the amount of time spent on those pages, and the pages referred or recommended to you.
- Your usage data within ILLA, such as pages accessed and features clicked on ILLA. Information you publish to or collect from other users of the service, such as page size and
- App ID of the App you publish. We use this information to operate, maintain, and provide you with the features and functionality of our service.
Detailed information on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
- Analytics The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior. Google Analytics (Google LLC) Google Analytics is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of ILLA, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. Personal Data processed: Mixpanel. Place of processing: United States.
- Registration and authentication By registering or authenticating, users allow ILLA to identify them and give them access to dedicated services. Depending on what is described below, third parties may provide registration and authentication services. In this case, ILLA will be able to access some Data, stored by these third-party services, for registration or identification purposes. Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to find out more, please refer to the description of each service. GitHub OAuth (GitHub Inc.) GitHub OAuth is a registration and authentication service provided by GitHub Inc. and is connected to the GitHub network.
Limited Use Disclosure Related to Google
ILLA’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What do we use Google data for?
When you want to connect ILLA Cloud to Google Sheets, we will request access to Google API to retrieve data from your Google Drive and Google Sheets. The specific requests and usage are as follows:
- To connect to Google Sheets using OAuth in read and write mode, we will request access to the following three APIs:
ILLA Cloud uses these three APIs for the following purposes:
- We use
https://www.googleapis.com/auth/driveto set your Drive access permission to read-only. This allows you and your users to read, create, modify, and delete files when accessing Google Sheets through ILLA Cloud.
- We use
https://www.googleapis.com/auth/spreadsheetsto access your spreadsheets. This enables you and your users to perform read, add, delete, and modify operations on spreadsheet data through ILLA Cloud.
- We use
https://www.googleapis.com/auth/drive.fileto list the accessible file names in your Drive. This helps you and your users quickly select the files they want to work with.
- To connect to Google Sheets using OAuth in read-only mode, we will request access to the following two APIs:
ILLA Cloud uses these three APIs for the following purposes:
- We use
https://www.googleapis.com/auth/drive.readonlyto set your Drive access permission to read-only. This allows you and your users to read files and no way to create, modify, and delete files when accessing Google Sheets through ILLA Cloud.
- We use
https://www.googleapis.com/auth/spreadsheets.readonlyto access your spreadsheets. This enables you and your users to read data and no way to add, delete, and modify data in spreadsheet through ILLA Cloud.
We do not store your data, and each time the data is displayed, it is directly fetched and shown to you through the API. Additionally, ILLA does not share your connection to Google data with any third parties through any means.
What do we use your Personal Information for?
To operate, maintain, and provide to you the features and functionality of the Services.
To compile statistics and analysis about use of our Site and our Services.
To personalize your experience.
To improve our Site and our Services — we continually strive to improve our site offerings based on the information and feedback we receive from you.
To improve customer service — your Personal Information helps us to more effectively respond to your customer service requests and support needs.
To send periodic emails — The email address you provide may be used to send you information, notifications that you request about changes to our Services, to alert you of updates, and to send periodic emails containing information relevant to your account.
If you purchase our Services, then to enable you to purchase, renew and appropriately use a commercial license to our Services.
We may also use Personal Information you provide to send you email marketing about ILLA products and services, invite you to participate in events or surveys, or otherwise communicate with you for marketing purposes. We allow you to opt-out from receiving marketing communications from us as described in the "Your Choices" section below.
We may need your Google OAuth to read your data in Google Sheets when you use the Google Sheets resource.
We may also use your Personal Information where necessary for us to comply with a legal obligation, including to share information with government and regulatory authorities when required by law or in response to legal process, obligation, or request.
We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose your Personal Information to government or law enforcement officials or private parties as we believe necessary or appropriate: (i) to respond to claims, legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal, unethical or legally actionable activity.
We will request your consent before we use or disclose your Personal Information for a materially different purpose than those set forth in this Policy.
Your Choices About Your Personal Information
We may use the information we collect or receive to communicate directly with you. We may send email marketing communications about ILLA. If you do not want to receive such email messages, you will be given the option to opt out. We will try to comply with your request(s) as soon as reasonably practical. Additionally, even after you opt out from receiving marketing messages from us, you will continue to receive administrative messages from us regarding our Services (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices).
Protection of Personal Information
ILLA cares about the security of your Personal Information, and we make reasonable efforts to ensure a level of security appropriate to the risk associated with the processing of your Personal Information. We maintain organizational, technical, and administrative procedures designed to protect your Personal Information against unauthorized access, deletion, loss, alteration, and misuse. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you believe that your interaction with us is not secure, please contact us immediately.
You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications from ILLA. Your privacy settings may also be affected by changes to the functionality of third-party sites and services that you add to the ILLA Service, such as single sign on. ILLA is not responsible for the functionality or security measures of any third party. Upon becoming aware of a breach of your Personal Information, we will notify you as quickly as we can and will provide timely information relating to the breach as it becomes known in accordance with any applicable laws and regulations or as is reasonably requested by you.
Who at ILLA may access your Personal Information?
Designated members of our staff may access Personal Information to help our customers with any questions they have, including help using our Services, investigating security issues, or following up on bug fixes with a customer. This activity is logged in our system for compliance, and we maintain different levels of access for its employees depending on their role in our company.
Do we disclose any information to outside parties?
Except as set out below, we do not sell, trade, or otherwise transfer to outside parties your Personal Information.
We may share your Personal Information with other companies owned by or under common ownership as ILLA, which also includes our subsidiaries (i.e., any organization we own or control).
We may disclose your Personal Information to third-party service providers (for example, drivePayment processing and data storage and processing facilities) that we use to provide the Services.
We limit the Personal Information provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such Personal Information.
We may contract with third-party service providers to assist us in better understanding our Site visitors.
These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.
We may also release your Personal Information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety.
In particular, we may release your Personal Information to third parties as required to (i) satisfy any applicable law, regulation, subpoena/court order, legal process or other government request, (ii) enforce our Terms of Service, including the investigation of potential violations thereof, (iii) investigate and defend ourselves against any third party claims or allegations, (iv) protect against harm to the rights, property or safety of ILLA, its users or the public as required or permitted by law and (v) detect, prevent or otherwise address criminal (including fraud or stalking), security or technical issues.
If you enable a public sharing of your ILLA applications, any information or content that you voluntarily disclose in your application becomes available to the public. If you remove information that you posted to the Services, copies may remain viewable in cached and archived pages of the Service, or if other users of the Services have copied or saved that information.
In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a merger, reorganization, joint venture, assignment, sale, or change of ownership, we may share Personal Information for the purpose of facilitating and completing the transaction.
How do we handle global transfers and processing of your Personal Information?
If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including Personal Information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. If we transfer your Personal Information from the E.U. and process it in the United States, we do so in accordance with applicable law. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Retention of your Personal Information
We retain your Personal Information for as long as we need to fulfill our Services. In addition, we retain Personal Information after we cease providing Services to you, to the extent necessary to comply with our legal obligations. Where we retain data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.
The Services may provide the ability to connect to other websites. These websites may operate independently from us and have their own privacy policies and notices, which we suggest you review. If the linked website is not owned or controlled by us, we are not responsible for its content, or the privacy practices
These Services are not directed to individuals under the age of thirteen, and we kindly request they not provide any Personal Information through the Services.
Other rights you have include the rights to:
Ask for a copy of your Personal Information.
Ask us to correct your Personal Information that is inaccurate, incomplete, or outdated.
Ask us to transfer your Personal Information to other organizations.
Ask us to erase certain categories or types of information.
If you choose to remove your Personal Information, you acknowledge that we may retain archived copies of your Personal Information in order to satisfy our legal obligations, or where we reasonably believe that we have a legitimate reason to do so.
Ask us to restrict certain processing.
You have the right to object to processing of Personal Information. Where we have asked for your consent to process information, you have the right to withdraw this consent at any time.
Residents of the European Economic Area and Switzerland: The Data Protection Officer can be contacted at firstname.lastname@example.org
If you would like to submit a data rights request (also known as a data subject access request), please email email@example.com。
Illa Soft, Inc