(Last Updated on December 28, 2023; Version 2023/1.0)
What information do we collect?
In order to provide You with access to the Services, we may gather and process some or all of the following information:
- Content: any information that is submitted, stored or collected by or from users of the Services, other than Reviews and Comments, Registration Information, Customer Service Communications or Log Information.
- Reviews and Comments: information that is voluntarily provided by a user of the Services (such as questions and comments posted to the User Forum) intended for public disclosure, regarding the use of the applicable Service or the features provided by the applicable Service.
- Registration Information: any information provided when purchasing a license for, or voluntarily registering for use of a Service, and any information provided when requesting information about a Service or indicating interest in receiving information about a Service, including, but not limited to, first and last names, username and password, postal address, email address, phone number, employer, job title, and billing information.
- Customer Service Communications: any information that is reported to us about the operation of the Services, or in the context of a Support Services request, including bug reports or requests for enhancements.
- Log Information: When You use certain Services, Our servers, or those of Our third-party vendors, may automatically record basic information such as Your Internet Protocol address, other addressing information, the date and time of Your request and an authentication token used to validate the identity of You and Your computer.
The Services are not directed to persons under the age of 18. If You become aware that Your child has provided us with personal information without Your consent, please contact us at email@example.com. We do not knowingly collect or solicit information from, market to or provide services to persons under 18 years old. If we become aware that a person under 18 has provided us with personal information, we take steps to remove such information and, if applicable, terminate the person’s account.
How do we use this information and for what purpose?
We use Customer Service Communications to improve and support the Services. You may voluntarily provide suggestions, comments or other feedback to us with respect to Services or other items or information provided by Us with respect thereto. This Information is used for the purposes of reviewing this feedback and improving the Services. We are not required to hold such feedback in confidence, and such feedback may be used by us for any purpose without obligation of any kind. We reserve the right to utilize anonymous information for marketing purposes, for instance by displaying selected comments on the Services or in other communications or fora. Further, we may from time to time ask You to provide information on Your experiences which will be used to measure and improve quality. You are at no time under any obligation to provide any such data.
We will use Log Information to provide You with access to the Services and for statistical information.
If You are using one of the Services for Your business application, You are responsible for the use and privacy of Your users’ Content.
We ask for Registration Information in order to verify Your identity and to enable Your use of the Services. We use third party vendors to host and manage Our API management and log-in processes, Our accounts and marketing systems, and for billing services. Your Registration Information, including billing data, is stored by these vendors, and We have access to this information through Our vendor accounts. We rely on the protection measures and certifications offered by these vendors to protect Your Registration Information. Upon written request, Sleuth Kit Labs will provide You with the names of these vendors.
If You do not want to be kept informed in this way by e-mail, please contact us at firstname.lastname@example.org. Further, we reserve the right to use e-mail to notify You of any claims related to Your use of the Services, including without limitation claims of violation of third party rights.
Your Content is processed through virtual machines hosted via Amazon Web Services (“AWS”). Sleuth Kit Labs relies on the data protection measures and certification offered by AWS to protect Your Content. In general, except for access by AWS, and except as disclosed in the applicable agreements, we will not use, review or provide third parties access to Your Content except as specifically authorized by You. In particular, Our AWS hosted virtual machines normally process the Content submitted by an Authorized User and return the results of Our processing to the Authorized User that submitted the Content. We do not retain any of Your Content after it has been processed. However, if required by law, we reserve the right to pre-screen, review, flag, filter, modify, refuse or remove any or all Content from the Services.
We will also collect and use metadata related to Your use of the Services, such as anonymized Content and account metrics based on or generated by (i) Your use of the Services and/or (ii) Your Content (“Metadata”). Metadata will be used to generate anonymized and aggregated reports for analysis purposes. These reports will not contain personally identifiable information.
REVIEWS AND COMMENTS
We use Reviews and Comments, such as comments posted on Our users’ forum, for the purpose of providing content to other users of Our sites, and for improving Our products and services. In addition, we have the right to use, reproduce, modify, adapt, publish, perform, translate, create derivative works from, distribute, and display Reviews and Comments throughout the world in any media. However, if required by law, we reserve the right to pre-screen, review, flag, filter, modify, refuse or remove any or all Reviews and Comments from Our sites.
To whom do we transfer Your personal information?
We may share Your information with Our affiliates and other service providers that We utilize to provide the Services. As noted above, when registering for one of the Services, You may provide Your Registration Information directly to one of Our service providers, who may send us, or provide access to that information in order for Us to operate the applicable Service. We may also offer some of Our Services in connection with other service providers. Registration Information that You provide to us may be sent to those providers in order to deliver the service provided by them; similarly, personal information that You provide to those sites may be sent to us in order to operate the Services.
Sleuth Kit Labs may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, your Registration Information may be transferred to the external business partner. Sleuth Kit Labs may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to Sleuth Kit Labs, and they are required to maintain the confidentiality of your information.
Information collected by us may be stored and processed in any country in which We, Our affiliates, and Our third party service providers maintain facilities. We reserve the right to transfer information outside of the country where You reside and/or from which You use the Services. By using one of the Services You consent to any such transfer of information.
As we continue to develop Our business, we may sell or buy subsidiaries or business units. In such transactions as well as in the event all or some of Our assets are acquired by a third party, personal information of Our users will generally be one of the transferred business assets. We reserve the right to include Your personal information, collected as an asset, in any such transfer to a third party.
How do we protect Your personal information?
As noted above, Your Registration Information and Content are stored by, and processed by virtual machines hosted by Our third party vendors. We rely on the data protection measures and certifications offered by these third party vendors. We also take other appropriate organizational and technical measures to protect the data provided to us or collected by us, and do not retain it any longer than permitted in order to provide the Services or as required under relevant legislation, with due observance of the applicable obligations and exceptions under the relevant legislation. You should be aware that internet communications are not always secure. Although we or Our third party vendors do take what we consider appropriate steps to protect Your data, protection of information available over the internet is subject to attack from third parties, and accordingly we cannot promise You that third parties cannot access the information You provide when you use the Services.
In this regard, where applicable to the Service you are accessing, You are responsible for maintaining the security and confidentiality of Your account passwords and Your API Key. It is a condition of Your use that You agree we are not liable for any such disclosure. The security of Your account relies on Your protection of Your password and Your API Key. You are solely responsible for any and all activities that occur under Your account. You may not share Your password with anyone. We will never ask You to send Your password or other sensitive information to us in an email, although we may ask You to enter this type of information on our sites. Any email or other communication requesting Your password, asking You to provide sensitive account information via email, or linking to a website with a URL that does not begin with http://www.sleuthkitlabs.com should be treated as unauthorized and suspicious and should be reported to Us immediately at email@example.com. If You do share Your password with a third party for any reason, the third party will have access to Your account and Your personal information, and You may be responsible for actions taken using Your password.
If You believe someone else has obtained access to Your password, please change it immediately by logging in to Your account and changing Your account settings. If You believe that an unauthorized access has already occurred please report it immediately to firstname.lastname@example.org.
What rights do You have and how can You contact us?
If you use Our products or services, You can review and modify most of Your personal information at any time by accessing Your account. When Your account is closed, or upon Your request, we will use commercially reasonable efforts to remove Your personal information from our sites, although removed information may persist in backup or archived copies.
If You would like to exercise Your right to view, correct, complete or remove Your personal data, please contact us at email@example.com. Upon verification of Your identity, we will attempt to quickly fulfill Your request, provided we will not act contrary to applicable legislation.
How long is Your personal data kept by us?
What are cookies and how do we use them?
How far does Our responsibility extend?
Your California Privacy Rights
California Civil Code Section 1798.83 permits customers who are California residents and who have provided the Company with “personal information” (as that term is defined in Section 1798.83) to request certain information about the disclosure of that information to third parties for their direct marketing purposes. If You are a California resident with questions regarding this, please contact us at firstname.lastname@example.org or at Sleuth Kit Labs LLC, 1070 Broadway, Somerville, MA, 02144.