d o c d a d d y

Privacy Policy

Last updated: February 13, 2025
For specific information on our use of cookies, please reference our Cookie Policy.

1. Introduction

Doc Daddy Inc. (“Doc Daddy”, “us”, or “we”) and Infogram (“Infogram SIA”, “us”, or “we”) take the privacy of our customers, business partners, and shareholders seriously. We are committed to safeguarding Your privacy while providing You with high-quality solutions. You will find here the details of our global privacy policy. Doc Daddy and Infogram have established their data protection and privacy program based on each of the European Union (EU) General Data Protection Regulation (GDPR) and the United Kingdom (UK) GDPR. As local data protection regulations may differ, we do monitor those differences where we operate or have an ecosystem partner. You will find reference to specific regional or local regulations that provide residents of those locations specific rights and require specific handling, as may be applicable, at the end of this document.

This Privacy Policy applies to the https://Doc Daddy.com and infogram.com websites (each, a “Website”), associated software (including Doc Daddy Desktop) and any other applications and services that specifically state that this Privacy Policy applies to them (the Websites, associated software and such applications and services are collectively referred to as the “Services,” “Doc Daddy Services” or “Infogram Services”). It excludes services that have separate privacy policies that do not incorporate this Privacy Policy. Please note that if you are using Doc Daddy or Infogram within another solution, such as Zoom, Webex, Meet or Teams, the privacy policies of those platforms may apply separately to you while we continue to abide by the commitments made herein with regard to your use of Doc Daddy and Infogram.

This Privacy Policy explains what Personal Data we collect from you, how we use that Personal Data, how you can review or change or exercise your rights with respect to your Personal Data , when this policy is effective, how we may change this policy, and the steps we take to protect your Personal Data. We share your Personal Data only with your consent or as described in this Privacy Policy.

Doc Daddy complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Doc Daddy has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Doc Daddy has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/ In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Doc Daddy commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.

High-Level Overview of Our Approach to Privacy

We recognize and respect your privacy. That means we only collect Personal Data we must have to fulfill our commitments and obligations to you. If we do not need the information, we do not request it.
We implement technology solutions (including encryption), process controls, and trained people to secure the data we do collect.
We greatly limit who has access to your Personal Data to those with a job role that specifically supports a business purpose to support or fulfill our obligations.
We do not transact business with minors nor do we use the information of minors for any commercial purposes.
We collect Personal Data via our websites (including our contact form) and via information you provide to us.
We have a record retention policy governing how long we retain information. We only keep your information as long as we need to in order to fulfill our obligations to you and to meet any legal or regulatory requirements we are subject to (i.e., taxes, know your customer, payroll).
This privacy policy addresses all Personal Data we may collect across customers and partners, etc. For this reason, you may find some data references that seem odd to you; this is likely because we do not collect that type of information for your category.
We do use cookies, primarily those for analytic data that are aggregated (not specific to you). We may use some cookies to customize your experience; particularly if you have a customer portal or supplier portal account.
We honor your rights to: 1) access, correct, delete your Personal Data and limit processing of your Personal Data; 2) receive Personal Data so that you can have another processor use it and 3) lodge a complaint with a supervisory authority / data protection authority.

The Doc Daddy and Infogram Data Processing Principles

We process your Personal Data in compliance with relevant laws, fairly and in a transparent manner.
We process your Personal Data only for legitimate purposes and as described in this Privacy Policy.
We make reasonable efforts to keep your Personal Data accurate and up to date.
We take reasonable steps to ensure that inaccurate Personal Data is erased or rectified.
We keep your Personal Data in a form that enables us to identify you for no longer than is necessary for the purposes for which your Personal Data is processed.
We process your Personal Data in a manner that ensures appropriate security of your Personal Data, including against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

2. Definitions Used in This Privacy Policy

Designated Countries: means countries in the European Union (“EU”), European Economic Area (“EEA”), and Switzerland.

Personal Data: means information that we collect from and/or about you as a natural person (private individual), that can be used to identify you, or that is combined with information that can identify you directly or indirectly (in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person). “Personal Data” is synonymous with “personal information” or “personally identifiable information.” Services: without regard to whether it is provided through the Website(s) or the Application(s), means all the services described in the Terms of Service.

User: means any person who uses the Service(s).
User Content: means any presentations or other content, such as text, files, documents, graphics, images audio and video that you create or make available through the Services.
You: means any user of the Doc Daddy Services or Infogram Services.

3. Changes to this Privacy Policy

We review our Privacy Policy on a regular basis. This Privacy Policy may be amended from time to time, and if we make material changes to it, we will provide you notice through the Services, or by other appropriate means (including but not limited to email, via this page or via the user interface).

Your continued use of our Services after a revised privacy policy is posted will constitute your acknowledgment that the collection, use, and sharing of your personal data are subject to the updated policy. The “effective date” of this Privacy Policy is referenced and displayed at the beginning of it.

Data Controller

Doc Daddy or Infogram will be the controller of your Personal Data provided to, or collected by or for, or processed in connection with, our Services. In the case of content information you provide (see “Content Information (User Content)” section below) you control such information, you should be solely liable for it and it is outside our control.As a registered user or site visitor, the collection, use and sharing of your Personal Data is subject to this Privacy Policy (which includes our Cookie Policy and any other documents referenced in this Privacy Policy) and updates.

4. What Personal Data We Collect and Why

We collect information about you when you use our services. In addition, third parties may collect information about you when you use our services. Collected information may include or reflect personal information that could identify you, as well as non-personal information. We collect the following information from and about you:

Information you Share

True and Accurate
You represent and warrant that all information submitted through the Website will be true and accurate information. Pseudonymized or de-identified information or other erroneous or false information is prohibited and serves as a basis to terminate your account without recourse.

Account Information

You don’t have to create an account to use some of our service features, such as searching and viewing public presentations. If you do choose to create an account and become a member, you must provide us with some Personal Data so that we can provide our services to you including your name, email address and/or phone number, occupation, title, and a password. If you choose to authenticate using a third-party account (e.g., Google), you authorize us to obtain account information from the third-party platform.

Payment Information

In order to gain access to specific premium features within our Services, you must provide us with payment information, including your credit or debit card number, card expiration date, CVV code, and billing address.

Support Information

The Services also include our customer support, where you may choose to submit information regarding a problem you are experiencing. For example, if you designate yourself as a technical contact, open a support ticket, speak to one of our representatives directly or otherwise engage with our support team, you will be asked to provide contact information, a summary of the problem you are experiencing, and any other documentation, screenshots or information that would be helpful in resolving the issue.

Survey Information

From time to time, we may ask our registered users or visitors to participate in surveys. These surveys are optional. If you choose to participate, any information you provide to us, including Personal Data, will be linked with your account in our system. If you would not like your information to be used in this way, you have the option to not participate in surveys or, if you do participate, to provide us only with information you consent to our use of in accordance with this Privacy Policy.

Content Information (User Content)

Parts of our Services allow users to upload, create and stream user content, including presentations, messages, comments, images, videos, and other materials. If you choose to upload Personal Data through these means in a manner that makes it visible to the public, we will consider that information public and will not limit its use or disclosure in the manner described in this Privacy Policy.You may create a profile and upload content such as presentations, videos, text, photographs, and artwork. Your profile may display information about you and your activities. This information may be accessed by others. Your videos may be viewed and otherwise accessed by others, and associated metadata (e.g., titles, descriptions, tags, etc.) are viewable by others. Your interactions with other users (e.g., comments, "likes") may be seen by others.

We may associate certain content information (such as titles, metadata, and digital art assets) that is stored in your presentations, infographics, videos or other free-form content inputs, such as comments, with Personal Data about you or others. Information in your presentations, videos, and infographics belong to you, and you are responsible for making sure that your content complies with our Terms of Service. If your content is made public, anyone (including us) may view its contents and potentially make other uses of it. If you have included private or sensitive information in your public presentations, videos or other content, Personal Data, such as your name, address, email addresses, and the like, that information may be indexed by search engines or used by third parties. If the user content you create through a paid Doc Daddy account that is not accessible or viewable by other Doc Daddy users or the public (“Private User Content”) is shared privately, those you have shared it with may use it in a manner inconsistent with our Terms of Use, and/or inconsistent with your wishes, including disclosing it publicly. Please exercise discretion concerning those you share your Private User Content with.

5. Information You Share About Others

Contact Information

Some components of the Services allow you and others to share User Content and send personal messages with other registered users and non-registered users. To use this feature, you must provide us with Personal Data about others including an email address for each recipient. For example, when collaborating on a presentation you may want feedback from other team members or non-team members and you can do so by adding those members as collaborators.

6. Additional Information We Receive About You

Use of the Services

When you visit our websites, sign in into our Services, interact with our email notifications, or visit a third-party service that includes content from our Services, we may receive information about you, or combine such information with other Personal Data. This service usage information includes data such as your IP address, browser type, operating system, the referring web page, pages visited within our Services, location, your mobile carrier, device information (including device and application IDs), search terms, and cookie information.

Third-Party Services

We may provide links to online services that we do not own or operate. These services fall outside of this Privacy Policy and we have no control over the data they collect. For example, if you click on an advertisement, you may be taken to the advertiser's website. Once on a third-party site, your data may be collected by others. We encourage you to read the privacy policies of such services before using them.

You may use content and/or functionality from third-party services in your presentations, videos and User Content. This Privacy Policy covers our websites and apps, but does not cover any third-party site, content, or app.

Services you link to your account

We receive information about you when you or your administrator integrate or link a third-party service with our Services, including information from the third party who provides the linked service. For example, if you create an account or log into the Services using your Google credentials, we receive your name and email address as permitted by your Google profile settings in order to authenticate you. We also provide options within the Services that enable you to link to services such as Slack and Salesforce, so you can receive real-time notifications and integrate content within those platforms. Our Doc Daddy video feature allows you to upload videos and stream through other platforms. To learn more about these third parties’ privacy practices, please consult their privacy policies.

Cookies, Web Beacons and Other Similar Technologies

The Services, our service providers, linked services, and third-party content and/or functionality that appears on the Services may use cookies and other tracking tools including web beacons, pixel tags, clear GIFs, and the like. Please see our cookie policy for more information about these technologies.

Our Partners and Service Providers

We rely on a number of other companies, agents, and/or contractors to perform services on our behalf and to assist us in operating and providing the Services to you. For example, we may engage such service providers to provide marketing, communications, website hosting, infrastructure, large language model (“LLM”) providers and IT services, to personalize and optimize the Services, provide customer service, collect debts, and analyze and enhance data. In the course of providing such services to us, these companies may obtain information about you, including Personal Data, and that information will be shared with us. We do not authorize these companies to use or disclose your Personal Data except in connection with providing the services we request from them.

Sensitive Personal Data

Doc Daddy does not collect sensitive personal data.

7. How Your Personal Data is Collected

We collect Personal Data and other information from You in a variety of ways, including:

the submission of Personal Data by You to Doc Daddy or Infogram through our Services;
the submission of a paper or online order for Doc Daddy or Infogram solutions;
from our partners or service providers;
through the use of our Services;
when We and You communication by email, telephone, chat, or otherwise;
provision of Your Personal Data to us by our business partners; and
the use of Cookies.

We will not contact You by telephone or email to request information such as account numbers or account passwords. We recommend that You do not open or respond to e-mails requesting this type of information and that You contact us if You receive such a request.

8. List of Our Data Processors

You can find many of our partners and service providers (data processors) here.

We rely on a number of other companies, agents, and/or contractors to perform services on our behalf and to assist us in operating and providing the Services to you. For example, we may engage such service providers to provide marketing, communications, website hosting, infrastructure and IT services, to personalize and optimize the Services, provide customer service, collect debts, and analyze and enhance data. In the course of providing such services to us, these companies may obtain information about you, including Personal Data, and that information will be shared with us. We do not authorize these companies to use or disclose your Personal Data except in connection with providing the services we request from them.

We may involve new partners and service providers, including for short trial periods, to assist us in operating and providing the Services to You.

Another of our service providers is Google Analytics, which collects information such as how often users visit this site, what pages they visit when they do so, and what other sites they used prior to coming to this site. To learn more about how Google Analytics collects and uses your data when you use the Service, and how you can control the information sent to Google Analytics, please review https://www.google.com/policies/privacy/partners .

9. Information We Do Not Collect

The Services are for a general audience and, as such, Doc Daddy does not knowingly collect or solicit any information from anyone under the age of 13 or knowingly allow such persons to register for the Service. Doc Daddy does not, in policy or practice, intend to collect any information of those age 13 and under and we strictly conform to a policy to not market, advertise, share or sell the Services to minors under 13. We understand and are committed to respecting the sensitive nature of children’s privacy online. If you are a user between the ages of 13 and 18, you may only use our Services through an account established by a parent or guardian, with that parent or guardian’s permission – provided that in your jurisdiction there is no requirement for you or your parent to provide any consent to us for a minor’s use beyond what is already provided in our Terms of Service and this Privacy Policy. By way of example, in some Designated Countries users as old as 16 may be required to have their parent or guardian submit a specific consent to us, and in those countries users under 16 years of age may not use our Services.

Also, in certain Designated Countries minors at or beyond the age of 13 might be permitted by local laws to give consent directly to their personal data processing parental or guardian permission. We urge you to familiarize yourself with your jurisdiction’s requirements on this subject.

We do not knowingly collect Personal Data about children not authorized to use our Services – if you believe we have unknowingly collected such information, please contact us at privacy@docdaddy.com or hello@infogram.com and we will delete the information immediately.

We do not intentionally collect sensitive Personal Data, such as genetic data, health information, or religious information. Although we do not request or intentionally collect such sensitive Personal Data, we realize that you might store this kind of information in your account, such as in a presentation, video, and/or infographic. If you store any sensitive Personal Data on our servers, you are consenting to our storage, processing, and use of that information in accordance with this Privacy Policy.

10. Your Consent to Collect and Use Personal Data

In certain situations, we collect and use Your Personal Data with Your explicit consent. You may withhold or withdraw Your consent for us to process Your Personal Data. Certain Personal Data is required for Us to provide the Services to You or to meet our legal obligations, and Your withholding or withdrawal of consent to use that Personal Data may prevent us from providing the Services that You have requested. Other Personal Data is not required for Us to provide the Services to You but is used by Us to provide You with better service or for marketing, communications, and other legitimate purposes as explained in this Privacy Policy.

11. How we use and process your Personal Data

General

In most cases, we process your Personal Data to provide you with the Services. However, other purposes may apply, as set forth below.We process your Personal Data in compliance with our legal obligations and with this Privacy Policy. We provide an adequate level of protection to your Personal Data by E.U. data protection regulations and standards, even in cases when we transfer your Personal Data outside the Designated Countries, for example by using approved standard contractual clauses or binding corporate rules.The legal bases for processing depend on the services you use and how you use them. We collect and use your information when:

We need it to provide you the Services and thereby to perform our contractual obligations to you, including to operate and improve the Services, provide customer support and personalized features and to protect the safety and security of the Services;
It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the Services and to protect our legal rights and legitimate interests or those of third parties, and to comply with our legal obligations; or
You have provided consent.

Details

We use the information we collect from and about you to:

Provide the Services

Provide the Services to you, including to process transactions with you, authenticate you when you log in, provide customer support, operate and maintain the Services, and to ensure their secure, reliable, and robust performance.

Develop Services and Research

Conduct research and development for the further development of our Services. In particular, we use collective learnings about how people use our Services and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Services. In some cases, we apply these learnings across our Services to improve and develop similar features or to better integrate the services you use. We also test and analyze certain new features with some users before rolling the feature out to all users.

Personalize and Improve Experiences

Include tailored features that personalize your experience, enhance your productivity, and improve your ability to collaborate effectively with others by automatically analyzing your activities and those of your team to provide better content, notifications, and recommendations that are most relevant for you and your team. For example, we may use your email domain to infer your affiliation with a particular organization or industry to personalize the content and experience you receive on our websites and/or communications. Where you use multiple Services (e.g., Doc Daddy Desktop, Doc Daddy on the web or mobile device, Infogram), we combine information about you and your activities to provide an integrated experience, such as to allow you to find information from one Service while searching from another or to present relevant information as you travel across our websites.

For Services Improvement through Artificial Intelligence

We may analyze your Public User Content (including any Personal Data you choose to include therein) and related data to train our algorithms, models and AI products and services, to develop, improve and provide our Services, including Doc Daddy AI.

Communicate with you about the Services

Send communications via email, phone and within the Services, including confirming your purchases, reminding you of subscription expirations, responding to your comments, questions, and requests, providing customer support, and sending you technical notices, updates, security alerts, and administrative messages. We send you email notifications when you or others interact with you on the Services, for example, when you are mentioned on a comment. We also provide tailored communications based on your activity and interactions with us. For example, certain actions you take in the Services may automatically trigger a feature or third-party app suggestion within the Services that would make that task easier. We also send you communications as you onboard to a particular Service to help you become more proficient in using that Service. These communications are part of the Services and in most cases, you cannot opt-out of them. If an opt-out is available, you will find that option within the communication itself or in your account settings.

Market

Send you information or materials via email about products, offers, and news we think might interest you. In specific cases where we have your consent and you have provided us additional contact information, we may contact you through other channels including telephone. These communications are aimed at driving engagement and maximizing what you get out of the Services, including information about new features, survey requests, newsletters, and events we think may be of interest to you. We also communicate with you about new product offers, promotions, and contests of Doc Daddy, Infogram, or our licensees or selected commercial partners. You can control whether you receive these communications as described below under "Your Choices & Obligations" section.

Advertise

Target ads to registered users, visitors, and others through a variety of advertising partners. In some cases, we also use information including service usage information, and information from web beacons, pixels, and cookies, and device identifiers that we collect as mentioned above to better understand how to promote and advertise our Services to you. For example, we use Facebook Custom Audiences to promote specific our Services on through Facebook’s ad platform. We do not promote other products or services that are not related to Doc Daddy or Infogram.

Provide customer support

Investigate, respond to and resolve complaints and Service issues (e.g., bugs).

Promote Safety and Security

Verify accounts and activity to prevent, detect and monitor suspicious or fraudulent activity and to identify violations of Service policies including our Terms of Service or this Privacy Policy and/or attempts to harm our Members or Visitors.

Pursue Legitimate Interests and Legal Rights

Where required by law or where we believe it is necessary to protect our legal rights, legitimate interests and those of others, we may use or disclose information about you in connection with legal claims, compliance, regulatory, and audit functions, and in connection with the acquisition, merger or sale of a business.

Accomplish other objections, with your consent

We use information about you where you have given us consent to do so for a specific purpose not listed above. For example, we may publish testimonials or featured customer stories to promote the Services, with your permission. If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we or a third party (e.g. your employer) have a legitimate interest to do so, you have the right to object to that use though, in some cases, this may mean no longer using the Services.If you have any questions about the lawful bases upon which we collect and use your personal data click here to learn how to get in touch with our Data Protection Officer.

12. Who we Share your Personal Data With

We share the Personal Data we collect from and about you in the following ways:

When you collaborate with others

When you share User Content with other users, they have the ability to share, edit, copy and download that content based on settings you or your administrator select. Your profile information may be visible to other users.

When you share User Content publicly

If your User Content is public-facing (the “Public User Content”), third parties, search engines (e.g., Google), archives, and other members of the public will have access to such content, and to any Personal Data included in this content, and may use it for their own purposes. Please use discretion concerning what you include in your public-facing presentations, videos, and other content.

If your Public User Content is designated as “reusable” within your account settings, we may share this content (excluding your username) with our AI third-party partners who may use this content for their own commercial purposes, including without limitation, to train and improve their AI algorithms and models or to conduct AI research and development.

When you work with a team / with your employer

If you register for or access the Services using an account that is associated with a team or organization, information about you including your account, service usage, and user content will be accessible to that organization’s administrator. In order to enable sharing and collaboration within an organization, we also share your account information with other registered users within the same organization.

Community forums

Information you contribute to blogs, forums, and related discussion areas – along with your profile information – may be read, collected, and used by any member of the public who accesses these websites. Your posts and certain profile information may remain even after you terminate your account. We urge you to consider the sensitivity of any information you input into these Services.

Third-party service providers

We use others to help us provide our Services. This includes helping us do application development, hosting, maintenance, backup, storage, virtual infrastructure, payment processing, fraud detection, marketing, and analysis. Third-party service providers have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes. All our service providers must meet our security and privacy standards before they gain access to any of your information.

Advertising

We work with several third-party advertisers and/or ad networks, to place ads promoting our Services on their third-party platforms. The types of information we share with advertising partners include: device identifiers (e.g., session information) or your contact information based on your consent. You can control whether we may share this information with our advertising partners as described below. Should you choose to opt out of such ads, you can communicate what your preferences by updating your cookie settings (clicking on the green cookie on your screen in the app) at any time.

Linked Services

In the event you opt to link your account with third-party services, Personal Data including account information (e.g., full name, email address, username), other information such as referrer headers and IP addresses, and if user content is being shared the content itself, will become available to them, and to users with access to that platform. The linked services may also share certain information with us. The sharing and use of that Personal Data will be described in, or linked to, a consent screen when you opt to link the accounts.

Doc Daddy and Infogram Companies

We share information we have about you with other Doc Daddy affiliates including Infogram (Latvia) or Doc Daddy.com Kft. (Hungary) in order to operate and improve products and services and to offer other Doc Daddy or Infogram affiliated services to you.

Doc Daddy and Infogram Companies

Law, Harm, and the Public Interest

We may share information about you with a third party if we believe that sharing is reasonably necessary to (a) comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements, (b) enforce our agreements, policies and terms of service, (c) protect the security or integrity of our Services, (d) protect us, our customers or the public from harm or illegal activities, or (e) respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person.

Business Transfers

We may share or transfer information we collect under this Privacy Policy in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. You will be notified via email and/or a prominent notice on the Services if a transaction takes place, as well as any choices you may have regarding your information.

Aggregate Insights

We may produce and share aggregated insights that do not identify you. For example, we may choose to publish statistics regarding how many members live in the U.S. versus how many live in Europe. If you complete a survey that asks for employment information, we may publish statistics regarding which professions are most likely to use or not use our Services.

With your consent

We share information about you with third parties when you give us consent to do so.

Do Not Sell my Personal Information

We will not sell Your Personal Data and have not sold any Personal Data in the preceding 12 months. We do share your data with some of our advertising partners. You have the right to opt out as outlined in the Advertising section.

13. How to Exercise Your Privacy Rights and Choices

These rights we honor for all customers and partners without regard for the governing data protection regulation for the domiciled country of those individuals. These rights we commit to honor meet or exceed the rights granted by the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR and the California Consumer Privacy Act 2018, as amended (CCPA), granted to their respective habitual residents of their in-scope countries. We are fully aligned with the EU-U.S. Data Protection Framework, the UK Extension to the EU-U.S. Data Protection Framework and the Swiss-U.S. Data Protection Framework (collectively, the “DPF”) and thus petitioned to be certified which may be verified here . As a part of our submission to the DPF, we are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). Should you have a claim in which you believe we failed to abide by the DPF Principles, under certain conditions, you may invoke your right to binding arbitration by delivering notice to us and following the procedures and subject to conditions set forth in Annex I of the DPF Principles. We further acknowledge and inform you that we are obliged to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We have further committed that our compliance with the DPF be subject to the review of the applicable EU data protection authority. We also acknowledge that we have liability for onward transfers of your Personal Data to third parties when in violation of the DPF Principles and the commitments and notices of this Policy. All our customers or partners may exercise the rights below by sending an email to privacy@Doc Daddy.com, hello@infogram.com. Please note that we may ask you to verify your identity before taking further action on your request.

14. US State Privacy Rights

This section summarizes rights that we respect and support for those subject to the protection of their state’s data privacy protections. We include additional, state specific information on this page. Please note that, as not all states have a data privacy regulation in effect, rights may vary by your state of residence. State residents subject to the above regulations have additional rights afforded to them under their respective state laws. For more information regarding the CCPA, please visit our CCPA Information Page .

Categories of Personal Data collected and processed by Doc Daddy and Infogram

For more details about the Personal Data we have collected in the past year, please see section 4. "What Personal Data We Collect and Why". and " List of Our Data Processors

Doc Daddy and Infogram do not “sell” the Personal Data of users.

Making a request in relation to your Personal Data

The aforementioned regulations give residents (where applicable) and / or consumers various rights with respect to the Personal Data we collect, including the right to (subject to certain limitations):

Request to access the Personal Data we have about you
Request correction of your Personal Data; and
Request that we delete all of your Personal Data.

15. How We Secure and Store Your Information

General Security

In order to protect both the Personal Data and the general information that we receive from you through your use of the Services, we have implemented various security measures. For example, when you enter Personal Data (such as your contact information) on our online forms, we encrypt that information using transport layer security (TLS). We also follow generally accepted industry standards to protect the Personal Data submitted to us, both during transmission and once we receive it.

Risk of Interception

Please keep in mind, however, that whenever you give out Personal Data online there is a risk that third parties may intercept and use that Data. While we strive to protect your Personal Data and privacy, we cannot guarantee the security of any information you disclose online. We cannot guarantee the security of any data provided to or received by us through your use of the Services, and any Personal Data, general information, or other data or information is provided to us at your own risk.

How Long We Keep Your Personal Data

We store the Personal Data we collect as described in this Privacy Policy for as long as you use the Services, or as necessary to fulfill the purpose(s) for which it was collected, provide the Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

To determine the appropriate retention period for Personal Data, we may consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Data, certain risk factors, the purposes for which we process your Personal Data, and whether we can achieve those purposes through other means.

Once you delete your account, a presentation or a video we may not be able to recover it. If you have previously made a presentation or a video public, the presentation or the video or its parts, including the incorporated data, may still be discoverable via search engines and similar online resources and therefore viewable and accessible by any third parties. We have no control over search engines; however, you may send a request for deletion to major search engines in some cases.

If we receive legal process pertaining to your account or have other legal document retention requirements, we will retain your data for as long as we in good faith believe is necessary to comply with our preservation obligations. Similarly, if we believe that your account has been involved in wrongdoing, we may preserve your Personal Data to defend or assert our rights.

16. Cross-Border Data Transfers

In accordance with the GDPR and other applicable privacy laws, we may transfer your Personal Data from your country of residence to the U.S. (or other countries) and we process Personal Data both inside and outside of the United States and rely on legally-provided mechanisms to lawfully transfer data across borders (e.g., Standard Contractual Clauses).

Some of the third parties described in this Privacy Policy, which provide services to us under contract, are based in other countries that may have laws that are different, and potentially not as protective, as the laws of your country of residence. When we share information of our users in the Designated Countries, with such third-party service providers, where required by applicable privacy laws, we make use of the European Commission-approved Standard Contractual Data Protection Clauses or other appropriate legal mechanisms to safeguard such transfers of Personal Data, including our certification under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, as described below.

17. Limitation of Liability

We use reasonable efforts to comply with the terms of this Privacy Policy and applicable law regarding the processing of Your Personal Data. Except as provided by applicable law, we shall not be responsible for direct or indirect damages that may result from non-compliance with this Privacy Policy.

18. Non-Discrimination

We will not discriminate against You for exercising any of the rights granted to You by your national or regional data protection regulation. Unless permitted by the applicable data protection regulation, as applicable, we will not:

Deny You goods or services;
Charge You different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties’
Provide You a different level or quality of goods or services; or
Suggest that You may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the applicable data protection regulation that can result in different prices, rates, or quality levels. Any regulation permitted financial incentive (currently provided for under the CCPA) we offer will reasonably relate to Your Personal Data’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires Your prior opt in consent, which You may revoke at any time.

19. Contact – Dispute Resolution

We are committed to ensuring the privacy of personal data: You can contact the our Data Protection Officer via privacy@Doc Daddy.com or hello@infogram.com if:

you have any questions about this Privacy Policy;
you encounter any issue when having access to your Personal Data or related to your rights as described above;
you believe that we are not complying with the applicable local data protection laws of your country; or
you have a reason to believe that the security of your Personal Data has been compromised or misused.

When you want to report a claim by lodging a complaint to our Data Protection Officer, you will need to send a letter to the address mentioned at the end of this Privacy Policy or submit your claim using the email address referenced above containing (in addition to the information required by the form and depending on the type of rights) the name or reference of the concerned processing and any additional information as reasonably requested by our Data Protection Officer.If your usual place of residence is in the European Union, Lichtenstein, Norway or Iceland, you have a right to file a complaint with your local data protection authority.

Date of Entry into Force of the Privacy Policy and Changes to it

This Privacy Policy may be updated from time to time in accordance with certain requirements and circumstances, or where required by applicable laws and regulations so please check back periodically for updates. We may change this Privacy Policy at any time without prior notice. All changes are effective immediately after they are posted on Doc Daddy’s or Infogram’s websites. If major changes occur to this Privacy Policy, we may post a notice on the Doc Daddy or Infogram website or platform.

Contact Information

If you have any questions, comments, or concerns relating to our Service or this Privacy Policy, please send an email to privacy@Doc Daddy.com or hello@infogram.com or write to us at:

Doc Daddy Inc / Infogram
2041 East Street, PMB610
Concord, CA 94520
We will make every effort to resolve your concerns.