This Policy will apply where We are Controllers or Processors of personal data. This policy is applicable to Our Products (web platform, mobile applications, API based clients) and to Our public Site https://springworks.in/
By using the Site or any of our services that are listed below in the policy, you agree to the collection and use of information in accordance with this policy. If you are in any doubt regarding the applicable standards, or have any comments or questions about this Policy, please contact us at the contact details provided under this Policy.
You also reserve the rights and choices as to how we collect your Data and at any point in time can decline to provide any Personal Information that you want. However, when such information is necessary to provide you with any of our services, your refusal will restrict the usage of such features or services in part or in whole. The rights that you reserve, with regards to your personal information and how to exercise them have been enumerated in this policy.
This Policy applies to:
We may require basic information which identifies you as an individual (“Personal Information”), in order to transact business with you, on behalf of the company you work for, as our customer. We may also collect the following information, depending on the service being used:
We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, or data concerning health or sexual orientation, etc. This kind of Information might be sensitive and personal to you as an individual. If we ever need to collect any sensitive personal information, we would give you a detailed notice and would only collect after you give your consent to such collection in writing.
Most of the Data that we collect is provided to Us by You directly. This is done when you:
In addition to the above, we may also collect some Personal Information indirectly from third parties, such as our business partners, or members of your Community. Some of your Personal information like IP addresses and usage patterns are also collected by inbuilt tools within our services.
We will only use such Personal Information for the purposes mentioned below.
Our business transactions and Contractual agreements with You means that we need to process your Personal Information through our systems to provide you Our services. Thus we would process your collected personal data to provide you with our services. This is one of the major purposes for which we collect and store your Personal Information. Some of these processing may include International Data transfers. We process Personal Information through Our global IT systems, which include tools and systems that help us to administer customer accounts, orders and business transactions and share information across Our systems, and with related corporate entities We do such transfers after taking adequate measures. Such transfer may also be done based on our legitimate interests. More details regarding such transfers is provided in Clause 8.
You provide Personal Information to Us through our “registration” page, or by placing and processing orders, or by participating in a Community, in order to use the products which run on Our platforms, such as:
We use Personal Information that we collect to administer the products, platforms and services. More information as to why we process Personal Information is given below.
If you do not wish us to make use of your Personal Information in this way, please email[email protected]
We will process your Personal Information when it is necessary for our legitimate interests. This will help us to conduct our business more effectively and efficiently.
For instance we may use your Personal information to perform analytics, train, enhance, develop, support or cure any deficiency in our services. These functions help us improve our services. It also allows us to provide you with a customized and personalized service.
It is also in our legitimate interest to fulfill our Contractual obligations with You and provide you with agreed upon services.
We may also process your Personal Information as a response to comply with laws, or to comply with any request by a law enforcement agency or a Court order as mentioned under Clause 6.3.
However these legitimate interests will not override your interests, freedoms, rights with regards to your Personal Information as a User except as per the requirements and procedures established by law.
Employees, contractors and agents of Springworks may be given access to Personal Information which we collect, but their use will be limited to the performance of their duties and the reason for processing. Our employees, contractors and agents who have access to your Personal Information are required to keep that information confidential and are not permitted to use it for any other purposes.
If you enter into an agreement with us, you agree to certain Data Transfers to our Partners. When we permit a third party to access Personal Information, we will implement appropriate measures to ensure the information is used in a manner consistent with this Policy and that the security and confidentiality of the information is maintained. We will never sell, rent or disclose to unaffiliated third parties your Personal Information unless we have your permission or are required by law to do so.
We disclose the Personal Information We collect, to the following third parties:
Some of the Service providers with whom we share your Personal Information with are: Stripe, Loggly, Sentry, AWS, Slack, Tawk, Mailchimp, clearbit, New Relic, Atlassian, Sugoi Labs, Atlas(Mlabs).
As the parent company Springworks provides products, support and operational services to its subsidiary SpringRole India Private Limited operating out of India.
Further, some aspects of our services and products are processed through our subsidiary. Therefore, we share your Personal Information with our Indian subsidiary SpringRole India Private Limited. This allows us to provide smooth and effective services.
We may disclose Personal Information to third parties including Law enforcement agencies and Courts, when there are lawful grounds:
You can request correction, update and deletion of your Personal Information via e-mail sent to [email protected], and we will use reasonable efforts to contact you regarding your request. You may also withdraw consent provided to “Us”, to use your Personal information by writing us to [email protected]. To update or delete your Personal Information or correct an inaccuracy, we may ask you to verify your identity and cooperate with us in our effort.
You may exercise any other right available to you with regards to your Personal Information by contacting us at [email protected]. Your available rights with regards to your Personal Information are provided under Clause 10 of this policy.
As the Controller of Personal Information, we will collect your Personal Information as per the conditions mentioned above. We also would process your Information only for the purposes mentioned above. We will implement technical, physical and administrative measures against unauthorized processing of such information and against loss, destruction of, or damage to, Personal Information.
Except as expressly permitted by you under this Policy, we do not own, control or direct the use of Personal Information, and only access such information as reasonably necessary to provide the Service(s) (including to respond to support requests), as otherwise authorized by you or as required by law.
Unless we explicitly agree otherwise in writing, we will not process any sensitive Personal Information on our platform.
Further, If you are an EEA or Switzerland-based customer, then We are also responsible for compliance with the applicable data protection law as We are the “Controllers”. As the controller, it shall be our responsibility to inform You about the processing, and, where required, obtain necessary consent or authorization for any Personal Information that is collected as part of the Personal Information through Your use of the Service(s). We will take all steps reasonably necessary to ensure that the Personal Information is treated securely and in accordance with this Policy. We also ensure to keep our Data practices in accordance with the GDPR principles and guidelines.
As the “Controller” of Data, we may need to transfer Personal Information to countries other than the ones in which the information was originally collected. This is because our Affiliates, Related Entities and Business Partners may be based out of a different country(ies). We would only process and transfer your Personal Information to these Affiliates, Related Entities and Business Partners after informing you about such transfers and after obtaining your consent. Personal Information may be shared among related entities within Springworks as well.
As the parent company, Springworks provides products, support and operations services, and centralized corporate functions to its subsidiary - SpringRole India Pvt. Ltd.
Further, to process some of our transactions, we will transfer Personal Information to our servers in the United States. This is because our parent company in the United States, SpringRole Inc. hosts servers or utilize third party servers and applications necessary for providing you services.
In case you are a Citizen of the EU, EEA, Switzerland or the UK, all the Data transfers would match the security standards as set out under the GDPR. Further, If you are a resident of European Union, EEA, Switzerland or the United Kingdom and if your Data is transferred to any third country, which does not comply with adequate standards of privacy as specified by GDPR then such transfers would be done as per the Standard Contractual Clauses executed between the parties.
With regards to any Personal Information that is transferred to the United States, we are liable to regulatory enforcement powers of the US Federal Trade Commission.
In case you withdraw your consent for such transfers, we will stop the transfer of your Data to our subsidiary (SpringRole India Private Limited) and other business affiliates or partners. However, this may impact your User experience significantly and you may not be able to use our services partially or completely.
You are entitled to certain rights with regards to your Personal Information. Further, If you are an individual and resident of the EEA or Switzerland, You are classified as a “Data Subject” as per the GDPR. As a resident of EEA or Switzerland, you also have certain specific rights with respect to your Personal Information as mentioned below. To ensure best practices, we afford these rights to all our Users, or to all persons to whom this policy is applicable, even if they are not a resident of European Union.
We make it our utmost priority to inform you and safeguard your rights with regards to your Personal Information and Data. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. In case of any query you can write to us at [email protected]
As a User:
We will not charge any fees from you for exercising your rights. However, we may charge a fee for administrative purposes if we find your request to be excessive, alternatively we can also reject your excessive requests.
To make any requests with regards to your Data related rights, contact us at[email protected]. While you reserve a right to complain to a Data Protection Authority about our Data practices, we encourage you to first contact us with any questions or concerns. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
If you are resident of California and is a 'consumer' as defined under the California Consumer Privacy Act of 2018 ("CCPA") and We are a 'business' as defined under CCPA, then the following provisions applies to you:
Subject to the provisions of the CCPA, you have the right to request in the manner provided herein, for the following:
Right to request for information about the:
Right to request for deletion of any Personal Information collected about you by Us:
If you seek to exercise the foregoing rights to access or delete Personal Information which constitutes 'personal information' as defined in CCPA, please contact us at details provided under the Contact Information clause in this Policy. We respond to all requests we receive from you wishing to exercise your data protection rights within a reasonable timeframe in accordance with applicable data protection laws. By writing to us, you agree to receive communication from us seeking information from you in order to verify you to be the consumer from whom we have collected the Personal Information from and such other information as reasonably required to enable us to honour your request.
The details and list of the mode of collection, processing and sharing of Personal Information by Us is highlighted in the present Policy. We suggest you read it carefully and then proceed.
The Services are not directed to individuals under the age of 18 years, as on the date of accessing/ availing the Services provided by Us. We do not knowingly collect personal information from children under the age of 18 years. Any person under the age of 18 who wants to use our services, needs to provide the consent of his Guardian at [email protected]. In addition, any person below the age of 13 is not allowed to use our services under any circumstances.
If we become aware that a child under the age of 18 years without the consent of his/her Parent/Guardian or any Child under the age of 13 has provided Us with their Personal Information, then in that event We will take appropriate steps to delete such information, without undertaking any liability in that regard. We also encourage Parents/Guardians to monitor the internet usage of their children to ensure that they don’t access our services without your consent. If you become aware that a child has provided Us with their Personal Information, then please contact us on the details provided under the Contact Information clause incorporated under this Policy.
Our Company securely hosts your Data using AWS cloud Services. Your Data is stored in the United States AWS Region. We are committed to ensuring that your information is secure. We have put in place appropriate technical, physical and administrative procedures and protocols to safeguard and secure the information we collect in order to prevent unauthorised access, modification or disclosure. We have also prepared specific protocols to deal with any kind of breach should it happen.
However, while we ensure to maintain all the safety standards and procedures, you acknowledge that the Internet is a global environment and Our products allow users to send documents and communicate with other users. We are not responsible for the data protection or privacy practices or the content of other users’ sites. When your communications leave our platforms, we cannot be responsible for the protection and privacy of any information which you provide while visiting such sites and such sites are not governed by this Policy. You should review the data protection and privacy statements applicable to such sites.
To ensure safe and secure payments, we comply with the current standards of the industry. Our payment systems are compliant with ISO 27001 standards. Further, our payment systems are also compliant with Payment Car Industry (PCI) Data security standards.
Springworks reserves the right, in its discretion, to make changes to any part of the products, platforms or this Policy. Springworks may change this Policy from time to time by updating this page. You should check this page from time to time to ensure that you are aware of any changes. This Policy is effective from 26-Jul-2021. By continuing to use the products and services, you consent to this Policy as amended.
Springworks may send you marketing related communications from time to time. As a User you reserve a right to opt out of these marketing communications. You can opt-out of these marketing communications at any time by writing to us at [email protected].
You can also object to usage of your Personal Information for Analytics by writing to us at[email protected]
If you are a Customer of Springworks, we may need to communicate certain necessary information to you. This information might include product information, updates or related announcements. For instance: Information regarding maintenance of any product or our website. We assure you that we will send these announcements only when they are necessary. Such communications are not marketing communications and you may not opt out of them. The only way to Opt-out of these is by deactivating your account.
If you have any questions about this Policy, or wish to make a complaint about our data handling practices, you may contact:
SpringRole Inc, 1447 2nd Street Suite 200 Santa Monica, CA 90401 United States
Email: [email protected]
We will investigate any complaints received in writing and do our best to resolve them with you as soon as possible.