1. Information we collect and store
Files
Cloak and Vault Enterprise Security-as-a-Service implement optional and user-configured Privacy-by-Design features. With Privacy-by-Design enabled, Clault and its service providers cannot read the encrypted files you store in our services. For ease of use, your keys are created and may be recovered on our servers; if you upgrade or configure for full Privacy-by-Design, Clault does not store your master key and cannot decrypt your files even on lawful third-party requests such as a subpoena or court order. Users are responsible for safeguarding their master key, which is required for key and data recovery.
We collect and store the files you upload, download, or access with our Service ("Files"). If you add a file that has previously been uploaded by you or another user, we may associate all or a portion of the previous file with your account rather than storing a duplicate.
2. Information you provide
Cloak Apps collects a minimal set of user information to enable the services we provide. Examples include your name, phone number, email address, and home and business postal addresses.
We do not collect credit-card information; corporate billing is handled through standard corporate processes.
When you invite others to join Clault using our referral page, we send them a one-time email for the referral. You may also provide us with your contacts' email addresses when sharing folders and files with them.
When you register an account, we collect personal information such as your name, phone number, credit card or other billing information, email address, and home and business postal addresses. You may also ask us to import your contacts by giving us access to your third-party services (e.g. your email account), or to use your social-network information if you give us access to those services. When you invite others to join, we send them a one-time email. You may also provide us with your contacts' email addresses when sharing folders or files. We may also receive Personal Information through other users (for example, if they have tried to share something with you or refer us to you).
3. Cookies
Cloak Apps minimises the use of cookies. We do not save your password in cookies.
We use cookies to collect information and improve our Services. A cookie is a small data file we transfer to your Device. We may use "persistent cookies" to save your registration ID and login password for future logins; we may use "session ID cookies" to enable certain features of the Service, to better understand how you interact with it, and to monitor aggregate usage and web-traffic routing. You can instruct your browser to stop accepting cookies or to prompt you before accepting them. If you do not accept cookies, you may not be able to use all aspects of the Service.
4. How we use personal information
4.1 Personal information
In the course of using the Service, we may collect personal information that can be used to contact or identify you ("Personal Information"). Personal Information is or may be used to: (i) provide and improve our Service, (ii) administer your use of the Service, (iii) better understand your needs and interests, (iv) personalise and improve your experience, and (v) provide or offer software updates and product announcements. If you no longer wish to receive communications from us, please follow the "unsubscribe" instructions provided in any of those communications, or update your account settings.
In the course of using the Service, we may collect personal information that can be used to contact or identify you ("Personal Information"). Personal Information is or may be used to: (i) provide and improve our Service, (ii) administer your use of the Service, (iii) better understand your needs and interests, (iv) personalise and improve your experience, and (v) provide or offer software updates and product announcements. If you no longer wish to receive communications from us, please follow the "unsubscribe" instructions provided in any of those communications, or update your account settings.
4.2 Geo-location information
Cloak Apps services may collect real-time location-based information (for example, GPS) from our users — with your consent.
Some Devices allow applications to access real-time location-based information (for example, GPS). Our mobile apps do not collect such information from your mobile device while you download or use them as of the date this policy went into effect, but may do so in the future with your consent to improve our Services. Some photos and videos you place in our service may contain recorded location information. We may use this information to optimise your experience. If you do not wish to share files embedded with your geo-location information, please do not upload them. Some of the information we collect from a Device, for example its IP address, can sometimes be used to approximate the Device's location.
5. Analytics
We collect some information ourselves using logging — such as IP address — which can sometimes be correlated with Personal Information. We use it for the purposes above and to monitor and analyse use of the Service, for the Service's technical administration, to increase its functionality and friendliness, and to verify that users have the authorisation needed for the Service to process their requests. We use Google Analytics for our website. For our iOS and Android apps we use Flurry Analytics, which users can opt out of at flurry.com/user-opt-out.html.
We collect some information (ourselves or via third-party services) using logging and cookies — such as IP address — which can sometimes be correlated with Personal Information. We use this information for the above purposes and to monitor and analyse use of the Service, for technical administration, to increase functionality and friendliness, and to verify users have the authorisation needed for the Service to process their requests. As of the date this policy went into effect, we use Google Analytics.
6. Information sharing and disclosure
6.1 Your use
Cloak Apps is an enterprise security solution. Your personal information is used only for corporate collaboration, such as file sharing with your work associates during use of our services. We do not publish your information to public or guest users. We do not sell your personal information to third parties. Clault does not share or disclose your information to third-party applications without your consent.
We display your Personal Information in your profile page and elsewhere on the Service according to the preferences you set. Any information you choose to provide should reflect how much you want others to know about you. Please consider carefully what you disclose in your profile page and your desired level of anonymity. You can review and revise your profile information at any time. We do not sell your personal information to third parties. We may share or disclose your information with your consent, for example if you use a third-party application to access your account. Some Service features allow you to make information public; public information may be broadly and quickly disseminated.
6.2 Service providers, business partners, and others
We may use trusted third-party companies and individuals to help us provide, analyse, and improve the Service (including but not limited to data storage, maintenance services, database management, web analytics, payment processing, and feature improvement). These third parties may access your information only to perform tasks on our behalf and under obligations similar to those in this Privacy Policy.
As of the date this policy went into effect, we use Amazon's S3 storage service to store some of your information (for example, your Files). For Cloak Apps services with Privacy-by-Design protection (configured by you), your storage files are encrypted and the file text contents are not visible to Amazon S3. You can find more information on Amazon's data security from the S3 site.
We may use trusted third-party companies and individuals to help us provide, analyse, and improve the Service. These third parties may access your information only to perform tasks on our behalf and under obligations similar to those in this Privacy Policy. As of the date this policy went into effect, we use Amazon's S3 storage service to store some of your information (for example, your Files).
6.3 Third-party applications
Cloak Apps services do not currently enable third-party applications. We have plans to do so in the future. We may share your information with a third-party application with your consent.
We may share your information with a third-party application with your consent — for example, when you choose to access our Services through such an application. We are not responsible for what those parties do with your information, so make sure you trust the application and that it has a privacy policy acceptable to you.
7. Compliance with laws and law-enforcement requests
7.1 Protection of Clault's rights
We may disclose to parties outside Clault files stored in your Clault services and information about you when we have a good-faith belief that disclosure is reasonably necessary to (a) comply with a law, regulation, or compulsory legal request; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse of Clault or its users; or (d) protect Clault's property rights.
If Privacy-by-Design product features are enabled or configured, your Clault files will be transferred to a law-enforcement agency still encrypted as set forth above — we are unable to decrypt them.
We may disclose to parties outside the service files stored in your service and information about you when we have a good-faith belief that disclosure is reasonably necessary for the same reasons. If we provide your files to a law-enforcement agency, we will remove our encryption from them before providing them. However, we will not be able to decrypt any files that you encrypted.
8. Business transfers
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you (for example, via email and/or a prominent service notification).
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you (for example, via email).
We may disclose your non-private, aggregated, or otherwise non-personal information — such as usage statistics of our Service.
We may disclose your non-private, aggregated, or otherwise non-personal information — such as usage statistics of our Service.
9. Changing or deleting your information
If you are a user under a registered company, you may review, update, correct, or delete the Personal Information provided in your account profile by changing your "user settings". If your personally identifiable information changes, or if you no longer want our service, you may update or delete it on your account settings. In some cases we may retain copies of your information if required by law.
For questions about your Personal Information on our Service, please contact support@cloakapps.com.
If you are a registered user, you may review, update, correct, or delete the Personal Information provided in your registration or account profile by changing your "account settings". If your personally identifiable information changes, or if you no longer want our service, you may update or delete it on your account settings. In some cases we may retain copies of your information if required by law.
10. Data retention
We retain your information for as long as your account is active or as needed to provide you services. If you wish to cancel your account or request that we no longer use your information, you may delete your account. We may retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. We will try to delete your information quickly upon request, but there may be latency in deleting from our servers, and backed-up versions might exist after deletion. We do not delete from our servers files that you have in common with other users.
Your undeleted Vault files are stored encrypted.
We retain your information for as long as your account is active or as needed to provide you services. If you wish to cancel your account, you may delete it. We may retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. There may be latency in deleting from our servers, and backed-up versions might exist after deletion. We do not delete files that you have in common with other users.
11. Community
To build active community-based technical support for our services, we may offer publicly accessible community services such as blogs, forums, and wikis. Any information you provide in these areas may be read, collected, and used by others. Your posts may remain even after you cancel your account.
For questions about your Personal Information on our Service, please contact support@cloakapps.com.
Our site may include links to other websites whose privacy practices may differ from ours. If you submit personal information to those sites, your information is governed by their privacy statements. We encourage you to read the privacy statement of any website you visit.
Our Service offers publicly accessible community services such as blogs, forums, and wikis. Any information you provide in these areas may be read, collected, and used by others. Your posts may remain even after you cancel your account.
Our site includes links to other websites whose privacy practices may differ from ours. If you submit personal information to those sites, your information is governed by their privacy statements. We encourage you to read the privacy statement of any website you visit.
12. Security
The security of your information is important to us. Cloak Apps provides end-to-end security protection of your files and messages. Vault protects Document-in-Storage, Document-in-Transit, and Document-in-Use. Our solution has optional Privacy-by-Design features and incorporates other advanced protection.
We follow generally accepted standards to protect the information submitted to us, both during transmission and once we receive it. No method of electronic transmission or storage is 100% secure, however, so we cannot guarantee absolute security. If you have any questions, please contact support@cloakapps.com.
The security of your information is important to us. When you enter sensitive information (such as a credit-card number) on our order forms, we encrypt the transmission using secure socket layer technology (SSL).
We follow generally accepted standards to protect the information submitted to us, both during transmission and once we receive it. No method of electronic transmission or storage is 100% secure, however, so we cannot guarantee absolute security.
13. Our policy toward children
Cloak Apps provides a file-security solution for work teams; our solutions are not directed to persons under 13. We do not knowingly collect personally identifiable information from children under 13. If a parent or guardian becomes aware that their child has provided us with Personal Information without their consent, please contact support@cloakapps.com. If we become aware that a child under 13 has provided us with Personal Information, we will take steps to delete such information.
Our Services are not directed to persons under 13. We do not knowingly collect personally identifiable information from children under 13. If we become aware that a child under 13 has provided us with Personal Information, we will take steps to delete it.
14. Contacting us
If you have any questions about this Privacy Policy, please contact us at support@cloakapps.com.
15. Changes to our Privacy Policy
This Privacy Policy may change from time to time. If we make a change that we believe materially reduces your rights, we will provide you with notice (for example, by email). We may provide notice of changes in other circumstances as well. By continuing to use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.