Privacy Policy

This privacy policy extends DocumentCloud's terms and conditions, which may be found at https://www.documentcloud.org/terms. Your use of DocumentCloud, and any dispute over privacy, is subject to this Policy and our Terms of Service.

1. Information DocumentCloud collects about all users, including Document Contributors and non-contributing users:
1. When you read or download documents from DocumentCloud, we collect limited, anonymous data. For instance, our web server records the Internet Protocol address of the computer you are using, information about your browser and operating system, date and time of access and the internet address and page which referred you to our site. The information logged by DocumentCloud is automatically deleted at regular intervals. In addition, we analyze traffic to DocumentCloud using Google Analytics. Google Analytics is subject to the privacy policy of Google, Inc., which you can find at http://www.google.com/privacy. We use this information to generate statistics and measure site activity to improve the usefulness of the site to our visitors.
2. Documents available through DocumentCloud are stored on s3 servers provided by Amazon Web Services. Amazon Web Services is a subsidiary of Amazon.com (Their privacy policies may be found at http://aws.amazon.com/privacy/ and http://www.amazon.com/privacy respectively).
3. Documents available through DocumentCloud may contain links to, or appear on third-party websites. Any access to and use of such third party websites is not governed by this Policy, but instead is governed by the privacy policies of those third party websites, and DocumentCloud is not responsible for the information practices of such third party websites.
2. Information DocumentCloud collects about Document Contributors:
1. You are a Document Contributor if you upload files to DocumentCloud, either through our API or via the web interface.
2. We use cookies to store login information for registered users. The only personally identifying information stored in our application-wide cookie is your encrypted account id. Cookies expire after one month.
3. DocumentCloud is not intended as an anonymous publishing service. All Document Contributors must be associated with an organization or publication. As a Document Contributor, you are required to provide DocumentCloud with your full name. Your name and the name of your organization or publication may be made public alongside any documents you publish through DocumentCloud.
1. Organizations and publications who are using DocumentCloud may be listed at https://www.documentcloud.org/contributors.
2. Registered users may be able to determine, through searches or features not yet implemented, whether any individual is also a registered user of DocumentCloud. (see also, this is still the Internet.)
4. Other information which you provide to DocumentCloud, such as your email address or other contact information, will remain private. We will not share private contact information except as described below (see when DocumentCloud discloses information).
5. All documents uploaded to DocumentCloud are processed by OpenCalais, a subsidiary of Thomson Reuters. Their privacy policy may be found at http://www.opencalais.com/privacy.
6. Some documents in DocumentCloud are private:
1. We store private notes on behalf of Document Contributors and allow Document Contributors to upload documents that are not made public immediately and may never be made public. More information on how document privacy works is available in our documentation.
3. This is still the Internet:
1. DocumentCloud uses cookies to store login information for Document Contributors. If you are using a public computer, and you fail to log out or quit the browser after you finish your session, another person may be able to access your account.
2. Communications between you and DocumentCloud may pass through many machines, operating systems, programs, browsers, Web servers, networks, routers, Ethernet switches, Internet service providers, proxy servers, intranets, the public phone system, or other devices on your premises, at DocumentCloud, and in between. Some of these devices create logs of activities that are recorded on computer systems.
3. It is possible that the servers that host DocumentCloud could become compromised by others and that the information on DocumentCloud's computers could be collected and disseminated without the knowledge or consent of DocumentCloud.
4. Additional Terms for EU Users:
1. DocumentCloud processes personal data as both a “processor” and as a “controller” under the European Union’s General Data Protection Regulation. We process personal data as a processor when providing Services to our users, who may then make it available for access and use. We act as a controller when we process the personal data you provide to us through DocumentCloud’s site. This Section applies to our processing of personal data collected via the Site as a controller. To contact DocumentCloud about your personal data, see the section entitled “Contact Us” below.
2. DocumentCloud processes personal data to pursue its legitimate business interests, which are described above.
3. Please be aware that we may transfer your personal data to the United States where our servers are located. We will only transfer your personal information to the United States through the use of appropriate safeguards. DocumentCloud will retain your personal information for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws or regulations. For users with a registered account on the Site, DocumentCloud will retain the information provided by you for as long as you have an account on the Site.
4. You have the right to access your personal information, rectify inaccurate personal information kept about you, request the erasure of personal information that is no longer necessary for the purposes for which we have collected or processed the information, and to request that we restrict the processing of your personal information in certain circumstances, for example if you are contesting the accuracy of the data. If you wish to access your personal information, please contact DocumentCloud through the contact listed below in writing and allow reasonable time for the data to be collected. You also have the right to receive personal information you have provided to us in a commonly used and machine-readable format and to transmit that personal information to any controller without hindrance from us. Finally, you have the right to lodge a complaint with a supervisory authority.
5. Limitation of Liability
1. IMPORTANT: DocumentCloud is not responsible for breaches of privacy that may occur as a result of any user's failure to exercise best practices at public workstations, on public networks, or with respect to secure passwords. DocumentCloud is not responsible for breaches of privacy that may occur as a result of third party access over which we have no control. DocumentCloud is not responsible for breaches of privacy that may occur as a result of your use the Services, including, but not limited to, your disclosure of the private or confidential information of third parties.
6. When DocumentCloud discloses information:
1. DocumentCloud may disclose any information it collects from users if DocumentCloud believes in good faith that such action is necessary to comply with legal process.
2. Upon receipt of a subpoena or similar demand for user information, DocumentCloud will promptly notify the user of the request unless we reasonably believe we are legally prohibited from doing so. If we believe we are legally required to provide the information requested, we will provide it no sooner than 30 days after notifying the user, unless we reasonably believe we are legally required to provide it sooner.
7. Children's privacy:
1. DocumentCloud content is intended for adults. We do not knowingly collect personal information from children under 13 years old. If you are a parent or legal guardian of a child under age 13 who you believe has submitted personal information to DocumentCloud, please contact us immediately. If we discover that we have been provided with the personal information of a child under 13, we will delete such information from our systems.
8. Changes and updates to this notice:
1. We retain the right to make changes, in our sole discretion, to this Privacy Policy. We will post any updated policies to DocumentCloud's website.
9. Feedback about this policy:
1. We welcome your feedback about this policy and our software. Please email us your thoughts at support@documentcloud.org.
10. Contacting DocumentCloud
    1. See contact us for the complete array of ways to reach us for technical support or new account questions. Our mailing address is:

       DocumentCloud
       PO Box 29401
       1602 Frankford Ave
       Philadelphia, PA 19125-9998
       admin@documentcloud.org