Isodate Privacy Policy 

Effective date: May 1st, 2020 

This Privacy Statement (the “Privacy Statement“) is provided by: 

Iso Date Ltd. 

20 Camden Street, Suite 200, Toronto, M5V 1V1 

Introduction 

This policy describes what information we collect when you use Isodate’s site and all  future services, mobile applications, products, and content (“Services”). It also provides  information about how we store, transfer, use, and delete that information, and what  choices you have with respect to the information. 

This policy applies to Isodate’s online video meeting tool, (the”Website”), as well as  other interaction (e.g. customer support conversations, user surveys and interviews  etc.) you may have with Isodate. 

This policy applies where we are acting as a Data Controller with respect to the  personal data of users of our Services; in other words, where we determine the  purposes and means of the processing of that personal data. For content and data that  you upload to or make available through the Service (“User Content”), you are  responsible for ensuring this content is in accordance with our Terms of Service, and  that the content is not violating other users’ privacy. 

How we collect, process and store information 

At Isodate we are committed to safeguarding the privacy of our users. Isodate may  collect, store and process various kinds of data, with different legal grounds, as listed  below. For the categories of data that require your consent, we will actively ask you for  consent before collecting any data. You can give and by visiting isodate.co 

The following is a list of data we collect, process or store, with the purpose and legal  ground listed for each item or group of items having the same purpose and legal  ground: 

• User account information. Users that choose to register in Isodate, will have to  provide a valid email address or phone number. The user can also choose to enter a  display name and/or add a profile picture that will be used to represent them in  conversations. 

The information may be used for the purposes of operating our website, providing our  services, ensuring the security of our website and services, maintaining back-ups of our  databases and communicating with you. This is required to deliver the Service to you as  user, by taking steps, at your request, to enter into and to fulfilling such a contract  (Terms of Service) cf. GDPR art. 6 (1) item b. 

• Transaction information. Customers that choose to purchase a paid version of the  Services provide Isodate (and our payment processors) with billing details such as  credit card information, billing email, banking information, location at the time of  transaction and/or a billing address. 

The transaction data may be processed for the purpose of supplying the purchased  services and keeping proper records of those transactions. This data may be used for  the purpose of delivering the Services to you. Processing this information is required for  fulfilling the contract we entered into with you, at your request (our Terms of Service) cf.  GDPR art. 6 (1) item b. Additionally, this information needs to be retained in order to  comply with accounting and tax regulation cf. GDPR art. 6 (1) item c. 

• Usage information. When you as a user interact with the Services, we collect and  process metadata to provide additional context about the way the Service is being used.  The usage data may include your IP address, geographical location, browser type and  version, operating system, referral source, length of visit, page views and website  navigation paths, as well as information about the timing, frequency and pattern of your  service use. The source of the usage data is our server software and our analytics  tracking system. 

o Product Analytics data. Isodate logs activities by you and other users when the users  interact with our website, when a page or an event is accessed or where there is a  conversation. We will never collect or record the content in conversations. 

o Technical log data. Like most digital services, our servers automatically collect  information when Websites or Services are accessed or used and record it in log files.  This log data may include the Internet Protocol (IP) address, the address of the web  page visited within the Services, browser type and settings, the date and time the  Services were used, information about browser configuration and plugins, language  preferences and cookie data. 

o Device information. Isodate may collect and process information about devices used  to access the Services, including type of device, what operating system is used, device  settings, application IDs, unique device identifiers and crash data. Whether we collect  and process some or all of this information depends on the type of device used and its  settings. 

o Location information. We receive information from you and other third-parties that  helps us approximate your location. We may, for example, use an IP address received  from your browser or device to determine approximate location. Isodate may also collect  location information from devices in accordance with the consent process provided by  your device. 

The legal basis for this processing is our legitimate interests cf. GDPR art. 6 (1) item f,  namely using this data for the purpose of ensuring the proper administration of our  website and business, analyzing the use of the website and services, monitoring and  improving our website and services, improving the user experience, preventing abuse, 

and assisting users with support inquiries. For information about cookies and how to opt  out of cookies, see our Cookie Policy. 

• Customer Support Information. We may process information that you send to us,  should you choose to submit a ticket to our support email. If you contact us, we may use  your Account, Event, Transaction or Usage Information to respond. 

Processing this information it is required for performing the contract we entered into with  you, at your request (our Terms of Service), as well as our legitimate interest of  handling your requests cf. GDPR art. 6 (1) item f. 

• Product & Marketing communication. We may process information that you provide  to us for the purpose of subscribing to our email newsletters. You can opt in to emails  such as digests, newsletters, and activity notifications through the website. The notification data may be processed for the purposes of sending you relevant  product information or newsletters. The legal basis for this processing is your consent  cf. GDPR art. 6 (1) item a. 
• Service and transactional notifications. Sometimes we’ll send you emails about your  account, service changes or new policies. You can’t opt out of this type of “service or  transactional” emails (unless you delete your account) as they are necessary  information for the Services. 

The legal grounds for processing this information is that it is required for performing our  commitment about communicating changes in plans and pricing to you in the contract  we entered into with you, at your request (our Terms of Service) cf. GDPR art. 6 (1) item  b, and our legitimate interest of communicating important information about your  account to you, cf. GDPR art. 6 (1) item f. 

• Correspondence information. We may process information that you choose to share  with us if you participate in a focus group, contest, activity or event, apply for a job,  interact with our social media accounts or otherwise communicate with Isodate The correspondence data may be processed for the purposes of communicating with  you and record-keeping. The legal basis for this processing is our legitimate interests cf.  GDPR art. 6 (1) item f, namely the proper administration of our website and business  and communications with users. 

How we process media (audio/video) 

We will never store any media sent between participants in an event.  Security 

The video router servers and all of our infrastructure adhere to strict security measures,  preventing any eavesdropping or interruption of the video/audio streams. 

Providing your personal data to others 

We may share information about with third parties in some circumstances, including:  (1) with your consent; 

(2) to a service provider or partner who meets our data protection standards;  (3) with academic or non-profit researchers, with aggregation, anonymization;  (4) when we have a good faith belief it is required by law, such as pursuant to a  subpoena or other legal process;  

(5) to protect the vital interest of others, when we have reason to believe that doing so  will prevent harm to someone or illegal activities. 

Our categories of service providers and partners are: 

• Hosting/infrastructure/storage providers 
• Payment processors 
• Analysis tools providers 
• Customer Support tools providers 
• Marketing and email providers 
• Recruiting tools providers 
• Internal communication tools providers 

Business Transfers 

We may disclose your personal data to any member of our future group of companies  (this means future subsidiaries, future ultimate holding company and all its subsidiaries)  insofar as reasonably necessary for the purposes, and on the legal bases, set out in this  policy. 

In the case where we are involved in a merger, acquisition, bankruptcy, reorganization  or sale of assets such that your information would be transferred or become subject to a  different privacy policy, we will notify you in advance and give you the option to delete  your data before the transfer. 

International transfers of your personal data 

In some circumstances your personal data may be transferred to countries outside the  European Economic Area (EEA). You acknowledge that personal data that you submit  for publication through our website or services may be available, via the internet, around  the world. We cannot prevent the use (or misuse) of such personal data by others.  

The hosting facilities for Account information stored by Isodate are situated in the United  States. The hosting facilities for Usage information are situated in the United States.  Transfers to the United States will be protected by appropriate safeguards, namely the  use of standard data protection clauses adopted or approved by the European  Commission, a copy of which can be obtained from https://ec.europa.eu/info/law/law topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data third-countries_en. 

Retaining and deleting personal data

Personal data that we process for any purpose or purposes shall not be kept for longer  than is necessary for that purpose or those purposes. 

We will retain your personal data as follows: 

• Transaction information will be retained for a minimum period of 5 years following date  of the transaction, and for a maximum period of 10 years following the date of the  transaction. 
• In some cases it is not possible for us to specify in advance the periods for which your  personal data will be retained. In such cases, we will determine the period of retention  based on the following criteria: 

1. Account information, event information will be retained until you decide to delete your  account with Isodate. 
2. Information about you used for product & marketing communication will be retained as  long as you have given us consent to use this information. 
3. The period of retention of usage information will be determined based on the need for  historical data to determine statistical validity and relevance for product decisions and  technical monitoring. 

Regardless of the provisions above, we may retain your personal data where such  retention is necessary for compliance with a legal obligation to which we are subject, or  in order to protect your vital interests or the vital interests of another natural person. 

Changes to this policy 

We can change these Terms at any time. If a change is material, we’ll let you know  before it takes effect. By using Isodate on or after that effective date, you agree to the  new Terms. If you don’t agree to them, you should delete your account before they take  effect, otherwise your use of the Service and Content will be subject to the new Terms. 

Managing and deleting your personal information 

If you have an Isodate account, you can access, modify or export your personal  information, or delete your account on the website. If you delete your account, your  information and content will be unrecoverable after that time. You may instruct us at any  time not to process your personal information for marketing purposes, by adjusting  your Privacy settings). We may withhold personal information that you request to the  extent permitted by law. 

Your rights 

As an individual you are granted rights according to the applicable data protection law:

• The right to access to your personal data 
• The right to rectification of your personal data 
• The right to object to and restriction of our processing of your personal data ● The also right to be forgotten; erasure of your data. 
• The right to data portability. 

If you have provided your consent to your processing of personal data, you may also  withdraw your consent at any time, by visiting our website. 

The rights are not absolute, and you may read more about your rights in the EU general  data protection regulation Chapter III, or at https://ec.europa.eu/info/law/law-topic/data protection/reform/rights-citizens_en 

To exercise your rights or if you otherwise have any questions regarding our processing  of your personal data, we encourage you to contact us as described below. However,  we also notify you that you may raise a complaint to a data protection authority. As a  Canadian company, Isodate uses the Office of the Privacy Commissioner of Canada as  a supervising authority. You may find further information on their website  https://www.priv.gc.ca/en/ 

You may contact your national/state supervisory authority, but Isodate will retain the  Office of the Privacy Commissioner of Canada as our lead supervisory authority.