Enso Privacy Policy

ENSO PRIVACY POLICY

Thank you for visiting ensoanalytics.com or one of the Enso websites (together, the “Site”) operated by Enso International Inc. (“Enso”), or for downloading and using the Enso software (“Enso Software”). We provide this privacy policy ("Privacy Policy") explaining our online information practices and the choices you can make about the way your information is collected and used when you access or use the Site or Enso Software. Please read this Privacy Policy carefully to learn how we collect, use, share, and otherwise process information relating to individuals (“Personal Data”), and to learn about your rights and choices regarding your Personal Data. Enso is the controller of your Personal Data as described in this Privacy Policy, unless specified otherwise.

This Privacy Policy does not apply to you to the extent:

• We gather or use Personal Data collected through Enso sites, services and products that do not display or link to this Privacy Policy or that have their own privacy policies.
• We process your Personal Data in the role of a processor or service provider on behalf of our enterprise customers, when we license the Enso Software to our enterprise customers through which our enterprise customers (or their affiliates): (i) send electronic communications to others; or (ii) otherwise collect, use, share or process Personal Data via the Enso Software. We have contractually committed ourselves to only process such information on behalf of and under the instruction of the respective enterprise customer. Where applicable, this means that the customer is the "data controller" or "business" and we use such information as a "processor" or "service provider". This Privacy Policy does not apply to such processing.

An enterprise customer is a customer which has entered into an enterprise end user license agreement or enterprise master services agreement or comparable agreement with us for more than five named users.

However, if you are an enterprise customer named user, and you participate in our Enso Community Hub or provide Personal Data through the Site for any purpose other than downloading the Enso Software, this Privacy Policy will apply.

1. Introduction

Enso provides Enso Software for data preparation and analytics. Enso Software empowers full lifecycle workflow from discovery to production in a single platform.

2. Personal Data You Provide to Us or Which is Automatically Collected Through the Site or the Enso Software:

When you visit our Site or register for the Enso Software, Enso collects Personal Data about you. We use this Personal Data for the business purpose of providing our products and services, as well as marketing our products and services to new and potential customers. This may include providing you with personalized recommendations and customized content on our Site.

Categories of Personal Data. The categories of Personal Data we may collect from users of the Enso Software and visitors to our Site are:

• Identifiers: This includes, for example, your name, nickname, username, email address, phone number, postal address (including ip code or postal code as applicable), Internet Protocol address, and cookies or other identifiers which we assigned to uniquely identify you or which others assigned to uniquely identify you. We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our products and services.
• Internet or other electronic network activity information: This includes, for example, device screen size, device type (unique device identifiers), browser information, your interactions with our Site and preferred language used to display our Site. We obtain this information automatically in the course of your interactions with our Site. We and our third-party partners may collect information about the devices and computers you use to access the Site, such as browser type, language, operating system, the referring web page, pages visited, and hyperlinks clicked. When you use the Site or Enso Software, we may collect usage information sent to us by your computer, mobile, or other access device that tells us how you are using the Site or Enso Software and other information about your internet activity (“Usage Information”), including the pages you visit, the links you click, videos you watch, and other similar actions on the Site and during your use of Enso Software, the number of times you open the application, the number of times you open a workflow in the application, and we may collect information on which Enso components that you use in your workflows, the number of records that you run in each workflow, and the sources and destinations of your data. We may also use third-party tools to collect Usage Information you provide to us or information about how you use the Site or Enso Software and may record your mouse movements, scrolling, clicks and keystroke activity on the on the Site or with the Enso Software. These tools may also record Usage Information you enter when you interact with our Site or the Enso Software or engage in chat features through our Site.
• Geo-location data: When you access the Site, we may derive the approximate location of your device automatically from your IP address. We may combine this information with other location-based information in the course of your interactions with our Site, such as your postal code and the use of Google Analytics. If you initially consent to our use of Google Analytics, you can subsequently stop the collection of this information at any time by changing the cookie preferences for the Site on your computer or device by selecting Cookie Preferences on the home page of the Site. If you do so, certain features on the Site may no longer function properly.
• Audio, Video and other Electronic Data: This includes audio, electronic, visual or similar information such as chat and any interaction that you may have with us (such as for customer service purposes) as well as your profile photo. It also includes any information you submit in our Enso Community Hub or other Enso community forums, chat or message boards, and feedback or testimonials you provide about our products and services. We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our products and services.
• Professional or employment-related information: This includes your job title, education information, and other biographical information including professional interests and areas of expertise. We obtain this information if you provide it to us upon registering as a member of our Enso Community Hub.
• Profiles and Inferences: This includes inferences drawn from any of the information identified above to create a profile reflecting preferences, characteristics, predispositions, behavior, and attitudes. We obtain this information automatically in the course of your interactions with our Site and Enso Software.

The sources from which we collect Personal Data are:

• Directly from you: For example, when you create an account, make a purchase, apply for or accept an employment position with us, etc.
• Directly and indirectly from an activity on our Site or your use of the Enso Software.
• Service providers who provide services on our behalf such as those used to fulfil orders, process your payments and requests, verify your information, monitor activity on our products and services, provide analysis and analytics, maintain databases, administer and monitor emails and marketing, administer and send mobile messages, and provide consulting services.
• Third party data providers but only where these third parties have confirmed to us that they either have your consent or are otherwise legally permitted or required to disclose your Personal Data to us. We may also obtain information about you from other sources, including but not limited to social media platforms, marketing partners, mailing list providers, publicly available sources and other third parties. For example, if you connect your social media account to your Account or create or log into your Account through a social media site, certain information from your social media account will be shared with us, which may include information that is part of your profile. In addition, we may supplement the information that you provide us and/or the information we collect from you with demographic, social, and other information about you that we receive from other sources. Once we combine information from other sources with your information collected pursuant to this policy, we apply this policy to the combined information as long as it is combined. We use this information to maintain and improve the accuracy of the records we hold about you and to send you personalized content. We may also obtain information about you from other sources. For example, we may collect information about you from third parties, including but not limited to mailing list providers and publicly available sources. When you interact with our customers, their admins, online communities and other users on our Website, App or Services, we may collect from them any content or information you choose to share or provide.

3. How Enso Uses Personal Data

We use Personal Data collected through our products and services, both individually and combined together, for purposes described in this Privacy Policy or disclosed to you in connection with our products and services. For example, we may use your information to:

• Create your account
• Provide, maintain, and improve the Site and Enso Software and to enhance and personalize your experience
• Provide and deliver products and services you request
• Send you Enso Software-related information updates, technical notices, security alerts, and support and administrative messages
• Send you marketing communications and personalized content such us showing you articles and news about relevant analytics topics.
• Respond to your enquiries, comments, questions, and requests, and to provide customer service
• Enable you to send and receive messages to other registered users and post comments
• Facilitate contests, sweepstakes and promotions and process and deliver entries and rewards
• Monitor and analyze trends, usage, effectiveness and activities to improve the quality and relevance of our Site and the Enso Software, including our offers, advertising, communications features, functionality and customer service
• Survey your opinions through surveys or questionnaires
• Serve and measure the effectiveness of advertising
• Protect the integrity of our products and services and enforce our Terms of Use and other applicable terms, including to detect and prevent fraud and unauthorized activities, to secure our systems and the Site, and prevent activities that may violate our policies or be illegal
• Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and prosecute those responsible for that activity
• Carry out any other purpose described to you at the time the information was collected or permitted by law.

We may use Personal Data we collect from or about you to create aggregated or de-identified data that does not specifically identify you.

4. Personal Information Enso discloses

We share Personal Data with other Enso companies who help us to provide you with products and services.

We also share Personal Data with third parties for the business purposes of providing our products and services and marketing our products and services to existing and potential customers. The categories of these third parties with whom we share Personal Data are:

• Hosting and infrastructure providers;
• IT services;
• Email service providers;
• Site analytics;
• Legal and compliance services;
• Payment processors.

We share all of the categories of Personal Data with these third parties when we need to do so in order to provide you with Enso products and services.

We may also share Personal Data with the following:

• Competent law enforcement bodies, regulators, government agencies, courts or other third parties where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
• Actual or potential buyers (and their agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your Personal Data only for the purposes disclosed in this Privacy Policy;
• Other Users of the Enso Software or Enso Community Hub if you provide or share your Personal Data with them. In that event, they may use it for their own purposes. If you post information or content, such as by posting photos, commenting on a blog, sharing a workflow, or participating in online communities, or when you interact with the Site through social media sites, plug-ins or other applications, depending upon your privacy settings, this information may become public on the Internet. We cannot prevent further use of this information. You can control what data you share through privacy settings available on some social media sites. Please refer to those third-party sites’ privacy policies and terms of use to learn more about their privacy practices, which we do not control.
• Other persons where you have given your consent or at your specific direction.

5. Cookies and other tracking technologies

We (and our third-party partners and service providers) use different technologies to collect and use your Personal Data, including cookies, embedded scripts, mobile SDKs, location-identifying technologies and web beacons. For reference, cookies are small data files stored on your hard drive or in device memory that help us improve our Site and your experience, see which areas and features of our Site are popular, and count visits. Web beacons (also known as “pixel tags” or “clear GIFs”) are electronic images that may be used on our Site or in our emails to help deliver cookies, count visits, and understand usage.

6. Children's Privacy

In accordance with our Terms of Use, the Site is not designed for use by individuals under the age of 16. Accordingly, we do not intend to or knowingly collect Personal Data from anyone we know to be under 18 years of age. If we learn that we have collected or received personal information from a child under the age of 16, we will take reasonable steps to delete that information. If you believe we have collected personal data from anyone under 18, please contact us at the email address listed below.

7. Security

We have implemented various security policies, rules and technical and organizational measures to protect and safeguard the Personal Data that we collect and process about you. These measures are designed to provide a level of security appropriate to the risk of processing your Personal Data.

8. Additional Notice to California Residents

If you are a California resident, the following information also applies to you and supplements the information contained in this Privacy Policy. California law requires we provide disclosures to you about what Personal Data we collect by reference to the enumerated categories of Personal Data set forth within California law. To address this obligation, we have identified the relevant enumerated California category for the Personal Data described in the Categories of Personal Data section of our Privacy Policy above:

• Identifiers including name and email address.
• User Records including password, email address, user ID.
• Internet/network information including information about your device, browser and network and information about how you use our service and interact with us.
• Geolocation data, including general geographic information based on IP address.
• Sensory Information, including profile picture.
• Professional/employment information, including the business or organization an individual represents, their title with that business or organization and information relating to their role with the business or organization, which we use to communicate with the individual about the business or organization they represent.
• Sensitive personal data, including account log-in information in combination with any required security or access code, password or credentials allowing access to an account.
• Other personal data, including communication preferences, inquiry information, personal information an individual permits us to see when interacting with us through social media, and personal information an individual provides us in relation to a question, request, inquiry, survey, contest or promotion.
• Inferences, including our predictions about interests and preferences and related information from the Services.

How we use and share information

We collect and use Personal Data for the business and commercial purposes as described in the section "How Enso Uses Personal Data" above. Enso does not share your Personal Data except as approved by you or as otherwise described in this Privacy Policy. We do not sell any of your information, and we do not process or otherwise share sensitive information for the purpose of targeted advertising.

We only use or disclose information for the following purposes, where such use or disclosure is necessary and proportionate for those purposes: for performing services you have requested, to comply with our legal and regulatory obligations, for detecting security incidents, fraud and other illegal actions, to ensure the safety of natural persons, to perform services on behalf of the business, or for solely internal purposes, consistent with our Privacy Policy and any other expectations we’ve set with you. We only collect and process sensitive information without the purpose of inferring characteristics about a consumer.

Under the California Consumer Privacy Act (CCPA), "sale" is defined very broadly and includes a wide array of data sharing. We share the following categories of Personal Data identifiers/contact information, Internet or other electronic network activity information, and inferences drawn from the above. We share that information withdata analytics providers. The business or commercial purposes of “sharing Personal Data is for third-party companies to perform services on our behalf, such as marketing, advertising, and audience measurement. We do not have any actual knowledge that we "sell" Personal Data of consumers under 16 years of age.

Most modern web browsers give you the option to send a Do Not Track signal to the sites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a site should respond to this signal, and we do not take any action in response to this signal.

California Privacy Rights

If you are a California resident, you have the following consumer privacy rights:

• Right to Know: You have the right to request that we disclose to you the Personal Data we have collected, used, disclosed and sold over the past 12 months, and information about our data practices.
• Right to request deletion: You can request that we delete Personal Data about you. Although you may request deletion, we are allowed, under California law, to keep certain Personal Data. You can submit a request to delete to privacy@ensoanalytics.com.
• Right to Opt-Out of "Sale" of Personal Data: You can opt out of the "sale" of your Personal Data to "third parties" by clicking on this link as those terms are defined in the CCPA).
• Right to be Notified of Financial Incentives: You have the right to be notified of any financial incentives offers and their material terms, the right to opt-out of such incentives at any time and may not be included in such incentives without your prior informed opt-in consent. We do not offer any such incentives at this time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

California law also permits you to request certain information regarding the disclosure of your Personal Data by us and our related companies to third parties for the third parties’ direct marketing purposes. We do not disclose your Personal Data to third parties for their own direct marketing purposes.

In addition to the specific forms listed above, you can exercise any of these rights by contacting us at privacy@ensoanalytics.com and providing us with your name, email address and address (including postal code or zip code) or by submitting a request to us through your Enso account. We may verify your identity by asking you to submit a request through your password protected Enso account and by providing us with your California zip code or other proof of California residency.

You can also authorize an agent to submit a request on your behalf. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with California probate law. Authorized agents that are business entities must be registered with the California Secretary of State to conduct business in California. Where you use an agent, we will ask for verification of your authorization, namely a copy of your written authorization for the agent to submit the request on your behalf.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We do not discriminate against any consumer for exercising their consumer rights.

9. European Privacy Information

If you are a visitor to our Site from the European Economic Area, United Kingdom, Switzerland and certain other territories in Europe, the following information also applies to you and supplements the information contained in this Privacy Policy.

Data Subject Rights

You have the following data protection rights:

• Right to access, correct, or request deletion: You may be able to do some of this in your Enso account or by contacting us.
• Right to object, or ask us to restrict processing: In certain circumstances, you can request that we stop processing your Personal Data.
• Right to request portability: In certain circumstances, you can request that we transfer Personal Data that you have provided to us in a structured, commonly used, machine-readable format.
• Right to opt-out of marketing communications: You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you or by contacting us.
• Right to withdraw your consent: You can withdraw your consent at any time if you previously gave us consent for processing of your Personal Data. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.
• Right to complain: You have the right to complain to your local data protection authority. For more information, please contact your local data protection authority.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. If you would like to exercise any of these rights or would like further information please contact us using the contact details provided under the “How to contact us” heading below.

Legal Basis

Our legal basis for collecting and using the Personal Data is usually as follows:

• Performance of a contract: where we need the Personal Data to perform a contract with you, for example setting up and administering your account and providing our products and services
• Legal obligation: where we have a legal obligation to collect Personal Data from you, for example to comply with financial, accounting and other legal obligations
• Legitimate interests: where the processing is in our legitimate interests and not overridden by your rights, for example to analyze and improve how our products and services are used, and to provide you with customer service
• Consent: where we have your consent to do so, for example in relation to certain types of marketing

International Data Transfers

Your Personal Data may be transferred to, and processed in, countries other than the country in which you are resident. Specifically, our Site servers are located in the United States and the European Union, and our group companies and third party service providers and partners operate around the world. This means that when we collect your Personal Data, we may process it in any of these countries.

Although legal requirements may vary from country to country, Enso has taken appropriate safeguards to require that your Personal Data will remain protected in accordance with this Privacy Policy. In particular, the United Kingdom, Switzerland and the European Union recognizes the United States as a territory that provides adequate protection for Personal Data that is received from the EEA, Switzerland and UK based on Enso’s self-certification under the EU-US and Swiss-US Data Privacy Framework (“DPF”), and the UK extension to the EU-US DPF.

When we transfer your Personal Data to any other territories, we will take such measures as are appropriate to safeguard your information in accordance with applicable law.

Data retention

We retain Personal Data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process your Personal Data, we will either delete or anonymize it or, if this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.

10. Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

You can see when this Privacy Policy was last updated by checking the “Last updated” date displayed at the top of this Privacy Policy.

11. How to contact us

If you have any comments or questions regarding our Privacy Policy, or if you want to exercise your rights, please contact us at privacy@ensoanalytics.com. We will address any issue to the best of our abilities as soon as possible and respond to requests within the time required under applicable law.