Privacy Policy

Who we are

Ethogram, Portugal (“Ethogram”, “we”, “us”) is the controller of the personal data described in this policy, except where we act as a processor for our customers, as explained below.

Contact: [email protected].

Data we collect

• Account and profile data: name, email address, sign-in credentials, and the projects, team memberships and invitations you create or receive.
• Usage and device data: how you use our website and dashboard, such as pages viewed, features used, clicks, timestamps and referrer, along with IP address, approximate location derived from it, and browser and device information.
• Communications: messages you send us and related correspondence.
• Data from third parties: information from sign-in providers such as Google when you use them, from teammates who invite you to a project, and from business partners.
• Inferences and aggregated data: information we derive from the above, such as usage patterns and statistics.

Some of this data is needed to create an account and provide the service. Without it, we cannot provide the service to you.

How we use it

• To provide, maintain, improve and develop the service and new products and features. Legal basis: performance of our contract with you, and our legitimate interest in running and growing our business.
• For analytics, research and personalisation, to understand how the service is used and tailor it. Legal basis: our legitimate interests in improving the service, or consent where the law requires it.
• For security and fraud prevention, including protecting accounts and detecting abuse. Legal basis: our legitimate interests in keeping the service and its users safe.
• To communicate with you, including service messages, product updates and, where permitted, marketing. You can opt out of marketing at any time; where the law requires consent, we ask for it first. Legal basis: contract, legitimate interests or consent.
• To comply with the law and enforce our terms, and to establish, exercise or defend legal claims. Legal basis: legal obligation and our legitimate interests.

We may use aggregated or de-identified data, which no longer identifies you, for any purpose, including research, benchmarks and publications. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

Customer data

When customers add Ethogram to their websites, the service collects request, visit and behavior data about the agents and visitors that reach those sites, as configured by the customer (“Customer Data”). For Customer Data, the customer is the controller and Ethogram is the processor, acting on the customer's instructions under our Data Processing Agreement, available on request at [email protected].

We may also use Customer Data in aggregated or de-identified form to improve the service and for research. If you visited a website that uses Ethogram, please contact that website's owner about your data.

Cookies

We use cookies and similar technologies for essential functions, such as keeping you signed in, and may use them for preferences, analytics and performance. Where the law requires it, we ask for your consent before using non-essential cookies.

Sharing

We do not sell personal data. We share it with:

• service providers that help us run Ethogram, including hosting and infrastructure, email delivery, authentication, analytics, customer support, payment processing once paid plans exist, and professional advisers;
• our affiliates;
• a buyer or successor in a merger, acquisition, financing or sale of assets;
• authorities or others where the law requires it, or to protect our rights, users or the public;
• anyone else with your consent or at your direction.

Hosting and transfers

Data is hosted and processed in the European Union and the United States. Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses and the EU-U.S. Data Privacy Framework, where applicable. You can request more information at [email protected].

Retention

We keep personal data for as long as your account is active and as long as needed for the purposes described in this policy, including legal, accounting, security and dispute-resolution needs. Customer Data is kept as set out in the Data Processing Agreement.

You can delete your account from your account settings. If you are the only owner of a project, you first need to delete it or make someone else an owner. Residual copies may remain in backups for a limited period.

Security

We use technical and organisational measures appropriate to the risk to protect personal data. No system is completely secure.

Your rights

Under the GDPR, you can ask to access, correct or delete your personal data, restrict or object to its processing, and receive it in a portable format. You can object to direct marketing at any time, and withdraw consent at any time without affecting earlier processing. To exercise these rights, email [email protected].

You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt), or to the authority in the EU country where you live or work.

Children

Ethogram is a business service and is not meant for anyone under 16.

Changes

We may update this policy from time to time. Changes take effect when posted here, and we may notify you of material changes.

Contact

Privacy questions and requests: [email protected]. See also our Terms of Service.