For our educational edition, please also see our school / student privacy policy.
PRIVACY POLICY
Introduction
This privacy policy (“Policy”) is designed to inform users of the Storyboard That service, including all associated websites (collectively, the “Service”) about how Clever Prototypes, LLC (“Clever Prototypes,” “we” or “us”) gathers and uses personal information collected by us in connection with the Service. We will take reasonable steps to protect user privacy consistent with the guidelines set forth in this policy and with applicable U.S. laws. In this policy, “user” or “you” means any person using or otherwise benefiting from the Service or otherwise submitting personal information to Clever Prototypes via the Service. BY ACCESSING OR USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTAND, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THESE TERMS, DO NOT USE THE SERVICE.
What Information Do We Collect?
Limited Personal Information:
We collect the following personal information in connection with the Service:
- (a) if you register as a Clever Prototypes user directly, we will collect the personal information you submit to us to build your user profile, including your name, email address, and zip code;
- (b) if you pay fees by credit card, we may collect the name, expiration date and credit card number for the relevant card;
- (c) if you communicate with us by email, we will collect your email address. All of this information is referred to in this Policy as “Personal Information”.
Other Personal Identifiers:
Apart from the limited personal information described above, Clever Prototypes does not collect and does not wish to receive any personally identifying information. Without limitation, you shall not submit to Clever Prototypes any social security number, financial account number, credit or debit card number (other than the number of the card paying for the Service), driver’s license number or government ID number.
When parents or guardians (or schools and/or teachers acting in an educational context) create accounts for students under 13 years of age, we may collect personally identifiable information – including first name, last name, and email address – regarding the students on whose behalf such accounts are created for the sole purpose of rendering the Service. Students under 13 years of age who use the Service under the supervision of a parent or guardian (or school and/or teacher acting in the educational context) are not prevented from uploading personally identifiable information as part of using the Service. We do not collect, maintain, use, or share student information except as needed to provide and improve the Service, or as authorized by the parent, guardian, or (in the case of a student 13 years of age or older) the student.
We will use commercially reasonable physical, technical, and administrative safeguards to protect all such personally identifiable information.
Hashing of Email Addresses
As part of using single sign-on technologies to access the Service and as part managing access for Users, we may create and store hashed information regarding a User’s email address. A hashed email address consists of a unique alphanumerical value that is identical each time an email address is passed through a hashing algorithm, but not the email address itself. This permits us to identify Users with the same email address across multiple sign-on services without storing the email address.
User Data:
The Service allows all users to create storyboards using data provided by Clever Prototypes and, optionally, data provided by users. All data uploaded by users is referred to in this Policy as “User Data.”
Web Tracking Information:
We, and our third party service providers, may use web tracking technologies such as cookies, web beacons, pixel tags and clear GIFs in order to operate the Service efficiently and to collect data related to usage of the Service. Such collected data (“Web Tracking Information”) may include the address of the websites you visited before and after you visited the Service, the type of browser you are using, your Internet Protocol (IP) address, what pages in the Service you visit and what links you clicked on, and whether you opened email communications we send to you. In order to collect Web Tracking Information and to make your use of the Service more efficient, we may store cookies on your computer. We may also use web tracking technologies that are placed in web pages on the Service or in email communications to collect information about actions that users take when they interact with the Service or such email communications, and Clever Prototypes’ Contractors (as defined herein) may also do so. We do not correlate Web Tracking Information to individual user Personal Information, except for internal operational, product development, and administrative purposes of the Service. Some Web Tracking Information may include data, such as IP address data, that is unique to you. You may be able to modify your browser settings to alter which web tracking technologies are permitted when you use the Service, but this may affect the performance of the Service.
What are the Legal Bases for Our Collection and Use of Personal Information?
We rely on the following legal grounds to process your Personal Information:
- Performance of a contract – We need to collect and use your Personal Information to perform our agreement with you to deliver the Service as described in this Privacy Policy.
- Consent – We may use or disclose some of your Personal Information as described in this Privacy Policy subject to your consent.
- Legitimate interests – We may use your Personal Information for our legitimate interests to improve our products and services and the Service. Consistent with our legitimate interests and any choices that we offer or consents that may be required under applicable laws, we may use technical information as described in this Privacy Policy.
How Do We Use the Information We Collect?
Personal Information:
Your Personal Information may be supplemented with additional information regarding your activities on the Service; to the extent that such information is linked specifically to you, we will treat that additional information as your Personal Information. We may use your email address to send you marketing materials about Clever Prototypes and its products and services. We may also use Personal Information for the internal operational, product development, and administrative purposes of the Service.
User Data:
We collect and stores User Data in order to provide the Service to you, and it may be used for the internal operational, product development, and administrative purposes of the Service If you create storyboards that incorporate User Data with a Free Account, or if otherwise marked for publication, User Data will be accessible to the public via the Service and via third-party search engines.
Web Tracking Information:
We use Web Tracking Information to administer the Service and to understand how well our Service is working, to store your user preferences, and to develop statistical information on usage of the Service. This allows us to determine which features and content users like best to help us improve our Service, to personalize your user experience, and to measure overall effectiveness.
Aggregate Information:
We will also create statistical, aggregated data relating to our users and the Service for analytical purposes. Aggregated data is derived from Personal Information and User Data but in its aggregated form it does not duplicate or reveal any User Data or relate to or identify any individual. This data is used to understand our customer base and to develop, improve and market our services.
What Information Do We Disclose to Third Parties?
We do not sell Personal Information or User Data, nor do we use or disclose Personal Information or User Data for the building of personal profiles or for the targeting of advertisements to students. We collect, use, disclose, and retain the Personal Information of students only for the authorized purposes for which the Personal Information was collected.
Personal Information and User Data:
We will not disclose your Personal Information or User Data to any third parties except as follows:
- (i) to third party contractors engaged to provide services on our behalf (“Contractors”), such as performing marketing, analyzing data and usage of the Service, hosting and operating the Service or providing support and maintenance services for the Service, or providing customer service. We enter into agreements with all Contractors that require Contractors to use the Personal Information they receive only to perform services for us, and protect the security and privacy of Personal Information received from us.
- (ii) when we have your consent to share the information.
- For Student PII third parties must adhere to privacy and security as stringent or greater than ours
User Data is not disclosed to third parties, except to the extent it is included in storyboards created under Free Accounts, or otherwise shared by or made public by the user.
Email Communications:
If you register and provide your email address, we will send you administrative and promotional emails. If you wish to opt out of promotional emails, you may do so by following the “unsubscribe” instructions in the email, or by editing your account settings. All users receive administrative emails, and so you cannot opt out of them while you remain registered.
Web Tracking Information:
We disclose Web Tracking Information to Contractors, in order to analyze the performance of the Service and the behavior of users, and to operate and improve the Service.
Aggregate Information:
We may disclose aggregated data that does not contain Personal Information or User Data to any third parties, such as potential customers, business partners, and funding sources, in order to describe our business and operations.
Network Operators:
Use of the Service may involve use of the services of third party telecommunications carriers. Such carriers are not our contractors, and any information that a carrier collects in connection with your use of the Service is not “Personal Information” and is not subject to this Privacy Policy. We are not responsible for the acts or omissions of telecommunications carriers.
Legal Exception:
Notwithstanding the above, we may in any event use Personal Information and other information collected through the Service to the extent required by law or legal process, to resolve disputes, to enforce our agreements (including this Privacy Policy and the Terms of Service https://www.storyboardthat.com/about/terms-of-use) with you, or if in our reasonable discretion use is necessary to protect our legal rights or to protect third parties.
Additional Disclosures:
We reserve the right to disclose any information we collect in connection with the Service, including Personal Information, (a) to any successor to our business as a result of any merger, acquisition, asset sale or similar transaction; and (b) to any law enforcement, judicial authority, or governmental or regulatory authority, to the extent required by law or if in our reasonable discretion disclosure is necessary to enforce or protect our legal rights or to protect third parties.
In the event of a sale/merger all student PII would be subject to the same standards as this policy or given an option to opt out within 90 days of the change of company structure. During the transition window, the data will be subject to the standards defined in the policy when last accepted.
Privacy Settings/Opt Out
If you would like your name and email address permanently removed from our database, please contact us at Help@StoryboardThat.com. We will promptly delete your name and email address and you will no longer receive email from Clever Prototypes. Your removal from the mailing list or database will not remove User Data you have submitted to us or records of past use of the Service, nor delete information stored in our data backups and archives. User Data, including User Data submitted, data on past queries and data stored in backups and archives will be maintained and/or deleted in the ordinary course of Clever Prototypes’ business. Clever Prototypes does not provide copies of User Data to its customers.
Your Choices About Your Information
You have the right to:
- request an accounting of all Personal Information that we possess that pertains to you in an electronically portable format (e.g., electronic copies of information attached to an email).
- request that we change any Personal Information that pertains to you.
- request that we delete any Personal Information that pertains to you.
To request an accounting of your Personal Information, a change to your Personal Information, or deletion of your Personal Information, contact Help@StoryboardThat.com.
If you are a resident of the European Union and have a complaint about our use or processing of your Personal Information, you have a right to lodge a complaint with a national Data Protection Authority. Each European Union member nation has established its own Data Protection Authority; you can find out about the Data Protection Authority in your country here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
If you have consented to the collection, processing, and/or transfer of your Personal Information, you have the right fully or partially to withdraw your consent. To withdraw your consent, please contact Help@StoryboardThat.com. Once we have received notification that you withdraw your consent, we will no longer process your information for the purposes to which you consented unless there are compelling legitimate grounds for further processing or for the establishment, exercise, or defense of legal claims.
General
Security:
We use reasonable security precautions to protect the security and integrity of your Personal Information in accordance with this policy and applicable law. However, no Internet transmission is completely secure, and we cannot guarantee that security breaches will not occur. Without limitation of the foregoing, we are not responsible for the actions of hackers and other unauthorized third parties that breach our reasonable security procedures.
Links:
The Clever Prototypes Service may contain links to other websites as services, including payment services. Clever Prototypes is not responsible for the privacy practices or the content of those websites. Users should be aware of this when they leave our Service and review the privacy statements of each third party website. This Privacy Policy applies solely to information collected by the Service.
Amendments:
Clever Prototypes may modify or amend this policy from time to time. If we make any material changes, as determined by Clever Prototypes, in the way in which Personal Information is collected, used or transferred, we will notify you of these changes by modification of this Privacy Policy, which will be available for review by you at the Service. Notwithstanding any modifications we may make, any Personal Information collected by Clever Prototypes from you will be treated in accordance with the privacy policy in effect at the time information was collected, unless we obtain your consent otherwise.
Children:
Clever Prototypes does not knowingly collect or maintain personally identifiable information from persons under 13 years of age, and the Service may only be used by persons under 13 years of age under the supervision of a school, parent, guardian, or teacher. If you are under 13 years of age, you may not register for the Service on your own, and you may not provide any Personal Information. If Clever Prototypes learns that personally identifiable information of persons less than 13 years of age has been provided, then Clever Prototypes will take the appropriate steps to delete this information. To make such a request, please contact us at Help@StoryboardThat.com.
Geographic Location
We offer the service in several geographic regions. We define a geographic region as the location where a user is located.
Users Within the United States
For users within the United States, we process data in data centers located in the United States. We have adopted reasonable physical, technical, and organizational safeguards against accidental, unauthorized, or unlawful destruction, loss, alteration, disclosure, access, use, or processing of user data in our possession. We comply with state and federal laws governing the protection of personal information.
Users Within the European Union
For users within the European Union, we transfer data from the European Union to data centers located in the United States for processing. Such processing is performed in accordance with Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and free movement of such data, known as the General Data Protection Regulation (“GDPR”). This includes the imposition of required safeguards with respect to accidental, unauthorized or unlawful destruction, loss, alteration, disclosure, access, use or processing of data. Transfers of European Union user data to processors in the United States are made in accordance with the GDPR and subject to the appropriate transfer mechanism, primarily the Standard Contractual Clauses as approved by the European Commission.
Users in Other Regions
For users not within the United States or the European Union, we transfer data from such regions to the United States for processing. For such users, we have adopted reasonable physical, technical, and organizational safeguards against accidental, unauthorized, or unlawful destruction, loss, alteration, disclosure, access, use, or processing of user data in our possession that substantially mirror protections available to users located within the United States.
Retention and Deletion
We will only retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected and processed, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements. In the case of Personal Information of students, we will not knowingly retain Personal Information of students beyond the time period required to support the authorized educational purpose for which the information was collected, or as authorized by the parent, guardian, or student 13 years of age or older, or as required by applicable law.
In some circumstances, we may anonymize your Personal Information so that it can no longer be associated with you, at which point it will no longer be treated as Personal Information.
It is our policy to retain Personal Information for up to 6 years once such personal information is no longer necessary to deliver the Service and to delete such personal information thereafter. This means that, if you close your account with us, we will delete Personal Information associated with your account after no more than 6 years. Regarding other types of information we collect as described in this Privacy Policy, it is our policy to retain such personal information for 1 month and to delete such personal information thereafter.
About Us
We are based in the United States of America at:
75 2nd Avenue
Suite 140
Needham, MA 02094
Users in the United States and regions other than the European Union can contact us at the above address.
Our representative in the EU for GDPR purposes is Foley Hoag AARPI. You can contact our representative at 153 rue du Faubourg Saint-Honoré, 75008 Paris, France.
In the event of material changes to the privacy policy users will be emailed and presented the new terms upon logging in.
Effective Date of this policy: January 25, 2014
Last Updated: September 20th, 2022
