Privacy Policy

Last updated: December 2, 2019

Tagplay, Inc. ("us", "we", or "our") operates the tagplay.co website (the "Service").

This page informs you of our policies regarding the collection, use and disclosure of Personal Information when you use our Service. For Tagplay, the protection and confidentiality of your data is of the utmost importance. If you have any concerns about privacy and personal data you may contact our Data Protection Officer at support@tagplay.co

We will not use or share your information with anyone except as described in this Privacy Policy.

We use your Personal Information for providing and improving the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible at tagplay.co

Data Collection And Use

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information when you sign up for Tagplay services may include your full name, email address, company, job title, company's industry and phone number ("Personal Information"). Employees of Tagplay will not have access to your password. If you decide to use services offered by Tagplay that are subject to a charge, you are required to provide the name, address, email address and phone number of your organization for payment reasons. This information is processed by our payment processor. Credit card information is never available to Tagplay, but is only transmitted to and stored with our payment processor (See Appendix 1).

We collect this information for the purpose of providing the Service, identifying and communicating with you, responding to your requests/inquiries, servicing your purchase orders, and improving our services.

With the approval of Tagplay's customer, trusted Tagplay employees can view posts users gather within Tagplay to be able to better understand how Tagplay is used and to be able to better help the customer.

To provide you with a better service, user and organization data may also be stored in third-party CRM systems or similar tools for sales and marketing purposes. (See Appendix 1)

You may choose to sign up for our newsletter and service status updates provided via email. We will store your name and email address, and share this information with third party processors to deliver these services (See Appendix 1). You may choose to unsubscribe from these email updates at any time. We will also occasionally send important service updates to all registered users via email, using the same third-party processors.

Tagplay is the data controller for the personal data of our service users according to relevant data protection law.

With the approval of the customer, Tagplay collects and processes "Customer Data", which means any data, content, or information Tagplay has access to retrieve using 3rd party API services, Tagplay has a developer contract with and follows the platform's terms. This data may be name, Workplace groups customer belongs to and content posted into groups and are collected to be able to provide services to the customer.

These third party services can be Workplace, Facebook, Twitter, Instagram, Youtube and Slack.

Data collected through the use of APIs and SDKs

Tagplay allows customers to integrate their uploaded content into their internal systems and/or third-party systems delivered by other parties through an Application Programming Interface (API). Tagplay by design does not determine what systems it may be configured to interoperate with but typical examples of classes of such systems are content delivery (e.g. HTML rendering systems, native mobile applications, digital signage systems).

The SDKs can, however, be configured by the user/client of our service to send the identity (user ID) of logged-in users to our APIs in order to facilitate, for example, access control. This would be a user-based decision/parameter defined by client and therefore out of our control.

Tagplay logs the originating IP address of an end user to avoid fraudulent use (e.g., denial of service attack).

Data gathered through automatic data collection

When you access the Tagplay Services via a browser or other means, certain data is automatically transmitted for technical reasons. The following data is logged and stored separately from any other data you may transmit to us for a limited time: IP address, date and time of access, browser type and version, operating system, URL of the website visited prior to ours, amount of data transmitted, and performance numbers such as latencies and caching. This data is collected for purposes of security, troubleshooting, and aggregate statistics, and is never associated with any particular individual.

Logged-in users will also transmit authentication information through cookies or headers to allow our systems to authenticate and authorize the request and make decisions based on the logged-in user. This information is never stored together with the access logs mentioned above, but other information that is explicitly provided by the user to perform operations may, however, be logged and associated with the user in order to provide audit logs and similar.

When visiting our website at tagplay.co we collect aggregate statistics about your actions on our website and store these with a third-party processor for analytics and statistics to improve our website and service. The collected data does not include any personal information, and it is not possible for us to trace this back to any individual. (See Appendix 1)

If the user should encounter any errors while using our services, we will temporarily log information relevant to the error, including the information listed above, with a third party processor in order to notify us of the error and aid with debugging.

Deletion of your data

Your data will be deleted from our systems and third-party processors once it is no longer required for the aforementioned purposes. We delete or anonymize logs within 90 days of collection. If you delete your user account, your personal data will be removed from our systems without unreasonable delay, and at the latest within 90 days, unless applicable legislation or legal process prevents us from doing so. To the extent that Sanity is legally obliged to archive data, such data will be blocked and will not be available for productive use.

Customer-controlled data may be deleted via our API. We retain a complete history of all changes to a dataset, including deleted documents, with a maximum retention period given by the project's plan. Custom retention periods can be configured for the entire dataset or by document type for customers with our custom history retention feature. Customers can also permanently delete a document and all history via a purge mutation through our API. Note that user-specified document IDs will be retained in our systems indefinitely (until the entire dataset is deleted), for technical reasons - we strongly recommend that document IDs never contain personal or sensitive data. Deleted assets may remain available in public CDN caches until the configured expiry time.

Data may in certain cases remain in the systems of our subprocessor Google Cloud Platform for as long as 180 days, as outlined in their terms of service, although it will generally be removed much sooner. This data is not available to us.

Location of your data

Your personal data will be stored on servers within the EU/EEA hosted by our subprocessor Google Cloud Platform - primarily in data centers in London, United Kingdom, but also at other Google data centers throughout the EU. Your data may be stored transiently or cached in any country in which Google or its agents maintain facilities.

We also employ certain third-party processors outside of the EU (primarily in the US) to deliver our services, which may process personal data for which we are a controller. Under such circumstances, adequate safeguards for such transfer to third countries are in place, including EU-U.S. Privacy Shield and data processing agreements compatible with EU standard clauses accepted by the European Commission. Customer-controlled data is always permanently stored within the EU. (See Appendix 1)

Data Protection Rights

You have the following data protection rights to review, correct or remove your personal information:

  • You can request access, correction, updates or deletion of your personal information through email: support@tagplay.co
  • You can object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
  • If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
  • You have the right to complain to data protection authority about our collection and use your personal information. Contact details for protection authorities are available here.

Cookies

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and transferred to your device. We use cookies to collect information in order to improve our services for you.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help feature on most browsers provide information on how to accept cookies, disable cookies or to notify you when receiving a new cookie.

If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on. (See Appendix 1)

Service Providers

We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services and/or to assist us in analyzing how our Service is used.

These third parties have access to your Personal Information only to perform specific tasks on our behalf and are obligated not to disclose or use your information for any other purpose. (See Appendix 1)

Communications

We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

Security

The security of your Personal Information is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store, in order to protect it from unauthorized access, destruction, use, modification, or disclosure.

However, please be aware that no method of transmission over the internet, or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the Personal Information we have collected from you.

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

Only persons age 18 or older have permission to access our Service. Our Service does not address anyone under the age of 13 ("Children").

We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you learn that your Children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a children under age 13 without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

This Privacy Policy is effective as of December 2, 2019 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@tagplay.co

APPENDIX 1

Privacy Information Regarding Third-party Services.

The following text lists the third-party services currently used by CMS in conjunction with Tagplay.co and provides links to the privacy policies for each third-party service provider. Tagplay reserves the right to change these processors at its own discretion, without notifying customers beyond updating this list, provided that data, terms, and purposes of the processing are compatible with our current terms of service and privacy policy.

Category: Hosting

  • Google Cloud (https://cloud.google.com/security/privacy/)
    Tagplay uses services provided by Google Ireland Limited, with offices at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google acts as a subcontractor and data processor, inter alia for hosting our services and all related data through their Google Cloud Platform offering.

    Purpose and use: Tagplay's software and databases are stored and run on virtual servers provided by Google Cloud.

  • Cloudinary (https://cloudinary.com/privacy)
    Purpose and use: Tagplay's software uploads photo and video content to Cloudinary when it is added straight to the Tagplay platform, through the "Add Post" function or Tagplay's email input support.

Category: CRM

  • Hubspot (https://legal.hubspot.com/privacy-policy)
    Purpose and use: Hubspot is a marketing, sales, CRM and customer service software. Tagplay may send the contact info (name, email, company, job, phone number) of their clients to Hubspot for sales, marketing and customer support purposes. Tagplay sometimes uses Hubspot's tracking services to know if e-mails have been opened and read, and discover companies visiting Tagplay.co.
  • Intercom (https://www.intercom.com/terms-and-policies)
    Purpose and use: Intercom is a customer support software. Tagplay may send the contact info (name, email, company, job, phone number) of their clients to Intercom for customer support purposes. Tagplay sometimes uses Intercom's tracking services to know if active customer support or e-mails have been seen and discover companies using Tagplay.co.
  • Harvest (https://www.getharvest.com/privacy-policy)
    Purpose and use: Harvest is a CRM and invoice creation software. Tagplay may send the contact info (name, email, company, job title, company address and phone number) of their clients in order to create, send and manage invoice and track payments.

Category: Payment

  • Stripe (https://stripe.com/us/privacy)
    Purpose and use: Stripe is an online payment provider that Tagplay uses to handle payments for its services. Tagplay itself does not process payment information. Stripe securely stores credit card numbers, subscriptions and invoices for the service.

Category: Advertising Tools

  • Facebook (https://www.facebook.com/about/basics/)
    Purpose and use: CMS will use Facebook Ads to deploy digital display ads and video ads across the Facebook platform to consumers.How to Opt Out for this service: Opt-out choices are: Members can choose to opt out of tracking on third party sites by adjusting their advertising preferences in their Facebook account. Facebook honors all "Limit Ad Tracking" settings on mobile devices. On Facebook, all ads, give users the ability to: Hide this ad: If a user chooses this, the user will not see the ad again. This is specific to the ad ID within the campaign only; Hide all ads. Ad Choices: http://youradchoices.com/

Category: Web Analytics

Category: Embeds

  • Facebook (https://www.facebook.com/policy)
    Purpose and use: Tagplay's site, widgets and displays may embed content from Facebook, including scripts used by Facebook to track viewing activity.
  • Instagram (https://help.instagram.com/519522125107875)
    Purpose and use: Tagplay's site, widgets and displays may embed content from Instagram, including scripts used by Instagram to track viewing activity.
  • Twitter (https://twitter.com/en/privacy)
    Purpose and use: Tagplay's site, widgets and displays may embed content from Twitter, including scripts used by Twitter to track viewing activity.
  • Youtube (https://www.youtube.com/yt/about/policies/)
    Purpose and use: Tagplay's site, widgets and displays may embed content from Youtube, including scripts used by Youtube to track viewing activity.
  • Facebook Workplace (https://www.facebook.com/workplace/legal)
    Purpose and use: Facebook Workplace hosts all content posted into Workplace when Workplace integration in Tagplay is used.
  • Slack (https://slack.com/policy)
    Purpose and use: Slack hosts all content posted into Slack when Slack integration in Tagplay is used.