Platform Privacy Policy

Last Updated April 27, 2020.

Introduction

Infinipoint Ltd. (“us“, “we” or “Company“) are committed to protect the privacy of our customers (“Customer(s)“) who are licensed to access or use our web-based management console in the cloud (the “Console“) and any other online services offered by the Company (collectively, the “Services“); and any individual who is authorized by our Customers to use the Services or has access to any of the data managed and analyzed by the Company (“User(s)“).

Please note that the term “you” shall refer to Customers and Users, as applicable.

Our privacy policy (“Privacy Policy“) will help you understand what types of information we collect through the Services, how the Company use it, and what choices you have. We encourage you to read this Privacy Policy carefully and use it to make informed decisions. By using our Services, you agree to the terms of this Privacy Policy and your continued use of the Services constitutes your ongoing agreement to the Privacy Policy.

In this Privacy Policy, you will read about, among other things:

• What type of information we collect

• How we use the information

• With whom we share the information and for what purpose

• International transfer

• For how long we retain the information

• Your privacy rights

• How we protect your information

• Minors

• How to contact us

What type of information we collect

We may collect the following types of data and information from or about you:

Non-personal Information

The first type of information is un-identified and non-identifiable information pertaining to you, which may be made available or gathered via your use of the Services (“Non-personal Information“). We are not aware of the identity of the user from which the Non-personal Information is collected. Non-personal Information which is collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information about your device (e.g., the device you use, the type of browser and operating system your device uses, language preference, access time, the website’s domain name from which you linked to the Services, IT asset management information, list of the endpoints, etc.). We may use this information in order to administer the Services and analyze this information to improve and enhance the Services by expanding their features and functionality. Such information may also be used for troubleshooting errors and bugs as well as for research and analytics purposes about your use of the Services. We may also collect information about your activity on the Services for auditing purposes (e.g., log files, requests to our cloud environment, etc.).

For the avoidance of doubt, if we combine Personal Information with Non-personal Information, the combined information will be treated as Personal Information as long as it remains combined.

Personal Information

The second type of information is individually identifiable information, namely information that identifies an individual or may with reasonable effort identify an individual (“Personal Information“). Such information may include:

• Registration Information: When signing-up or registering to our Services, we may collect certain information that can be used to identify you (as the Customer’s point of contact or as a User) such as: username, email address, as well as other relevant details that are relevant to the Customer.

• Voluntary Information: We may collect information that you provide us voluntarily. For instance, when you respond to communications from us, ask our support, communicate with us via email or share additional information about yourself through your use of the Services. We may also collect the feedback, suggestions, complaints and reports that you send to us.

• Device Information: We may collect specific types of connection details and information with regard to your device, software or hardware that may identify you. Such information may include: online identifiers, device’s unique identifiers (e.g., MAC address), device serial number, and IP address.

Endpoints Information

The third type of information is endpoints information that may be any sort of data from the enterprise IT endpoints. By using the Console, we manage and analyze Customer’s logs and other data that are transmitted through our Customers’ systems and platforms. This data may include records of operations of Customer’s applications and systems and other information relating to Customer’s employees’ or end-users’ activities (“Endpoints Information“). It may also include data that a Customer or any User uses in connection with Customer’s account and any computational results that a Customer or any User derives from the foregoing through their use of the Console.

Such Endpoints Information is provided by the Customer (or its Users) and processed by us on our cloud-computing servers. The Company provides such services as a “data processor”, acting under the sole direction of its Customers and Users.

Please note that Endpoints Information is exclusively controlled by the Customer (or its Users), meaning that the Customer (or any Users authorized by the Customer to use the Console on its behalf), maintain ownership of their related Endpoints Information and determine their own policies regarding the data and content that is provided within the Endpoints Information, the access permissions and the retention periods of the Endpoints Information.

Please note that such Endpoints Information may include Personal Information. If you (as a Customer or a User) provide to us or to third-parties acting on our behalf any Personal Information relating to other individuals (e.g., employees, end-users, etc.) in connection with your use of the Console, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

For the avoidance of doubt, please note that with respect to login information that is provided by the Customer(s) or its User(s), the Company will act as a “data controller” and will handle such information in accordance with the provisions of this Privacy Policy.

If you have any reason to believe that our Services are misused, in any way, please do not hesitate to inform us at: [privacy@infinipoint.io].

Cookies and other technologies

We use cookies and LogRocket to gather, store, and track certain information related with your access to and activity through the Services, including when you visit our website.

A “cookie” is a small piece of information that a website assign to your device while you are viewing a website. Cookies are very helpful and may be used for various different purposes. These purposes include, among other things, allowing you to navigate between pages efficiently, enabling automatic activation of certain features, remembering your preferences and making the interaction between you and the Services quicker, easier and smoother.

We may use the following types of cookies:

• Session Cookies which are stored only temporarily during a browsing session in order to allow normal use of the system and are deleted from your device when the browser is closed.

• Persistent Cookies which are saved on your device for a fixed period and are not deleted when the browser is closed. Such cookies are used where we need to identify who you are for repeated visits (for instance, to allow us to store your preferences for the next sign-in).

• Third-Party Cookies which are set by other online services that run content on the page you view on your browser.

You may remove the cookies by following the instructions of your device preferences. However, if you choose to disable cookies (including first-party cookies), some features of the Services may not operate properly and your online experience may be limited.

You can find out more about LogRocket by visiting https://logrocket.com/privacy

How we use the information

We use the information in the manners described in this Privacy Policy. In addition to the purposes listed herein, the information we collect, which may include your Personal Information, is used for the following purposes:

• To set up Customers’ (or Users’) accounts;
• To identify and authenticate Users’ access to certain features of our Services;
• To provide the Services to our Customers (or Users) in connection with their respective Endpoints Information;
• To send you relevant updates, which are based on different features offered by the Services (e.g., sending e-mails to Customers that summarize statistical data about their IT environment);
• To support and troubleshoot our Services and to respond to your queries;
• To communicate with you and to keep you informed of our latest updates;
• To obtain Users’ feedback with regards to the Services;
• To perform a research or to conduct analytics in order to improve and customize the Services to Customers’ needs and interests;
• To investigate and resolve disputes in connection with your use of the Services;
• To detect and prevent fraudulent and illegal activity or any other type of activity that may jeopardize or negatively affect the integrity of the Services; and
• To investigate violations and enforce our policies, and as required by law, regulation or other governmental authority, or to comply with a subpoena or similar legal process or respond to a government request.

With whom we share the information and for what purpose

We do not rent or sell any Personal Information. We may share Personal Information with the following recipients: (i) our subsidiaries; (ii) affiliated companies; (iii) trusted subcontractors and third-party service providers (e.g., Google Cloud Platform); (iv) auditors or advisers of our business processes; and (v) any potential purchasers or investors in the Company.

We may share Personal Information with our recipients for any of the following purposes: (i) storing or processing Personal Information on our behalf (e.g., cloud computing service providers); (ii) assisting us with our business operations (e.g., processing and analyzing Endpoints Information); and (iii) performing research, technical diagnostics, personalization and analytics that will enable us to improve the Console and the Services.

We may also disclose Personal Information, or any information you submitted via the Services if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce our policies (including our agreements), including investigations of potential violations thereof; (iii) investigate, detect, prevent, or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues; (iv) establish or exercise our rights to defend against legal claims; (v) prevent harm to the rights, property or safety of us, our affiliates, our users, yourself or any third-party; (vi) for the purpose of collaborating with law enforcement agencies; and (vii) in case we find it necessary in order to enforce intellectual property or other legal rights.

Third party collection of information

Our Privacy Policy only addresses the use and disclosure of information we collect from you. To the extent that you disclose your information to other parties via the Services (e.g., by clicking on a link to any other website or location) or via other sites throughout the Internet, different rules may apply to their use or disclosure of the information you disclose to them.

You acknowledge that we are not responsible for the products, services, or descriptions of products or services that you receive from third-party sites or to the content or privacy practices of those sites, and that this Privacy Policy does not apply to any such third-party products and services. You are knowingly and voluntarily assuming all risks of using third-party sites to purchase products and services. You agree that we shall have no liability whatsoever with respect to such third-party sites and your usage of them.

International transfer

Since we operate globally, it may be necessary to transfer data, including Personal Information, to countries outside the European Union. In these instances, we will transfer your data only to such countries as approved by the European Commission as providing an adequate level of data protection or enter into legal agreements ensuring an adequate level of data protection.

For how long we retain the information

We retain the information that we collect from Customers and Users for as long as needed to provide our Services and to comply with our legal obligations, resolve disputes and enforce our agreements (unless we are instructed otherwise). Retention periods will be determined to take into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. Under applicable regulations, we may keep records containing Customers Personal Information, account opening documents, communications and anything else as required by applicable laws and regulations.

We may rectify, replenish or remove incomplete or inaccurate information, at any time and at our own discretion.

Please note that Endpoints Information obtained through our Services is fully controlled by the Customer. This means that the Customer (and not the Company) determines the policies and retention periods of the Endpoints Information.

Your privacy rights

Certain jurisdictions provide Users with certain statutory rights to their Personal Information. Subject to exemptions provided by law, and with proper identification, you may have the right to certain actions to your Personal Information such as:

• Right to verify your Personal Information (to access, delete, change or update any Personal Information relating to you. For example, if you believe that your Personal Information is incorrect, you may ask to have it corrected or deleted);
• Right to see what Personal Information about you we have;
• Right to request that we erase Personal Information about you (subject to any other legal obligation that may require us to keep that information);
• Right to restrict us from processing Personal Information pertaining to you (for example, you may request that we will stop using or sharing your Personal Information with third-parties); and
• Right to export Personal Information in a portable format.

If you wish to exercise any of these rights, contact us at: [privacy@infinipoint.io]. When handling your request, we will ask for additional information to confirm your identity (which may include Personal Information). However, please note that if you choose not to allow us to process your Personal Information, we may be prevented from providing our Services.

Please note that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements.

If you wish to raise a complaint on how we have handled your Personal Information, please contact us directly at: [privacy@infinipoint.io].

If you are not satisfied with our response or believe we are collecting or processing your Personal Information not in accordance with the laws, you can file a complaint to the applicable data protection authority.

How we protect your information

We take great care in implementing and maintaining the security of the Console, your information and Endpoints Information. We employ industry standard procedures and policies to ensure the confidentiality, integrity, and availability of your information and Endpoints Information, the safety of your Personal Information and prevent unauthorized use of any such information.

However, we cannot guarantee that hackers or unauthorized personnel will not gain access to information despite our efforts. You should note that by using our Services, your information would be transferred through third-party infrastructures that are not under our control (e.g., Google Cloud Platform). No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Information and Endpoints Information, we cannot guarantee its absolute security, and we make no warranty, express, implied or otherwise, that we will prevent unauthorized access to our Services.

If you believe that your privacy was not treated in accordance with our Privacy Policy, or if any person attempted to abuse our Services or acted in an inappropriate manner, it will be advisable to contact us directly at: [privacy@infinipoint.io].

Corporate transaction

We may share information, including Personal Information, in the event of a corporate transaction (e.g., sale of a substantial part of our business, merger, consolidation or asset sale of an asset or transfer in the operation thereof) of the Company. In the event of the above, the acquiring company or transferee will assume the rights and obligations as described in this Privacy Policy.

Minors

The Services are not designated to individuals under the age of 16. If you are under 16 years old, you should not use the Services nor provide any Personal Information to us.

We reserve the right to access and verify any Personal Information that is collected from you by us. In the event that we become aware that an individual under the age of 16 has shared any information, we will discard such information. If you have any reason to believe that a minor shared any information with us, it will be advisable to contact us at: [privacy@infinipoint.io].

Updates or amendments to the privacy policy

We may revise this Privacy Policy from time to time, in our sole discretion, and the most current version will always be posted on our website (as reflected in the “Last Revised” heading). In the event of a material change to the Privacy Policy, we will notify you through the Services or via email. We encourage you to review this Privacy Policy regularly for any changes.

Your continued use of the Services, following the notification of such amendments on our website, constitutes your acknowledgement and consent of such amendments to the Privacy Policy and your agreement to be bound by the terms of such amendments.

How to contact us

If you have any general questions regarding the Services or the information that we collect about you and how we use it, please contact us at: [privacy@infinipoint.io].

Information about us

The details of the Company are as follows:

Infinipoint Ltd.

2 Shvil ha-Merets, Tel Aviv, 6653518, Israel