CoCalc -- privacy.tsx

GitHub Repository: sagemathinc/cocalc
Path: blob/master/src/packages/next/pages/policies/privacy.tsx
⁶⁰⁸⁹ views
1
import Footer from "components/landing/footer";
2
import Header from "components/landing/header";
3
import Head from "components/landing/head";
4
import { Layout } from "antd";
5
import withCustomize from "lib/with-customize";
6
import { Customize } from "lib/customize";
7
import A from "components/misc/A";
8
import { MAX_WIDTH } from "lib/config";
9

10
export default function Privacy({ customize }) {
11
  return (
12
    <Customize value={customize}>
13
      <Head title="Privacy Policy" />
14
      <Layout>
15
        <Header page="policies" subPage="privacy" />
16
        <Layout.Content
17
          style={{
18
            backgroundColor: "white",
19
          }}
20
        >
21
          <div
22
            style={{
23
              maxWidth: MAX_WIDTH,
24
              margin: "15px auto",
25
              padding: "15px",
26
              backgroundColor: "white",
27
            }}
28
          >
29
            <div style={{ textAlign: "center", color: "#444" }}>
30
              <h1 style={{ fontSize: "28pt" }}>CoCalc - Privacy Policy</h1>
31
              <h2>Last Updated: January 5, 2026</h2>
32
            </div>
33
            <div style={{ fontSize: "12pt" }}>
34
              <p>
35
                Protecting your privacy is really important to us. With this in
36
                mind, we’re providing this Privacy Policy to explain our
37
                practices regarding the collection, use and disclosure of
38
                information that we receive through our Services. This Privacy
39
                Policy does not apply to any third-party websites, services or
40
                applications, even if they are accessible through our Services.
41
                Also, please note that, unless we define a term in this Privacy
42
                Policy, all capitalized terms used in this Privacy Policy have
43
                the same meanings as in our Terms of Service. So, please make
44
                sure that you have read and understand our Terms of
45
                Service.{" "}
46
              </p>
47
              <h1>Revisions to this Privacy Policy</h1>
48
              <p>
49
                Any information that is collected via our Services is covered by
50
                the Privacy Policy in effect at the time such information is
51
                collected. We may revise this Privacy Policy from time to time.
52
                If we make any material changes to this Privacy Policy, we’ll
53
                notify you of those changes by posting them on the Services or
54
                by sending you an email or other notification, and we’ll update
55
                the "Revision history" below to indicate when those changes will
56
                become effective.{" "}
57
              </p>
58
              <div id="purpose">
59
                <h1>1 Purpose</h1>
60
                <p>
61
                  This Privacy Policy is incorporated by reference into the
62
                  Sagemath Terms of Service (the <strong>“Terms”</strong>). The
63
                  terms <strong>“Sagemath”</strong>, <strong>“we”</strong>, and{" "}
64
                  <strong>“us”</strong> include Sagemath, Inc. and our
65
                  affiliates and subsidiaries. This Privacy Policy explains our
66
                  online and offline information practices, the kinds of
67
                  information we may collect, how we intend to use and share
68
                  that information, and how you can opt out of a use or correct
69
                  or change such information. All other terms not defined in
70
                  Section 13 or otherwise herein will have the meanings set
71
                  forth in the Terms.
72
                </p>
73
              </div>
74
              <div id="scope">
75
                <h1>2 Scope</h1>
76
                <p>
77
                  This Privacy Policy applies to Personal Information that is
78
                  Processed by Sagemath in the course of our business, including
79
                  on Sagemath websites (each a <strong>“Site”</strong>), mobile
80
                  applications, forums, blogs, and other online or offline
81
                  offerings (collectively the <strong>“Services”</strong>). All
82
                  individuals whose responsibilities include the Processing of
83
                  Personal Information on behalf of Sagemath are expected to
84
                  protect that data by adherence to this Privacy Policy.
85
                </p>
86
                <p>
87
                  Sagemath complies with the EU-U.S. Data Privacy Framework
88
                  (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the
89
                  Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set
90
                  forth by the U.S. Department of Commerce. Sagemath has
91
                  certified to the U.S. Department of Commerce that it adheres
92
                  to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF
93
                  Principles) with regard to the processing of personal data
94
                  received from the European Union in reliance on the EU-U.S.
95
                  DPF and from the United Kingdom (and Gibraltar) in reliance on
96
                  the UK Extension to the EU-U.S. DPF. Sagemath has certified to
97
                  the U.S. Department of Commerce that it adheres to the
98
                  Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF
99
                  Principles) with regard to the processing of personal data
100
                  received from Switzerland in reliance on the Swiss-U.S. DPF.
101
                  If there is any conflict between the terms in this privacy
102
                  policy and the EU-U.S. DPF Principles and/or the Swiss-U.S.
103
                  DPF Principles, the Principles shall govern. To learn more
104
                  about the Data Privacy Framework (DPF) program, and to view
105
                  our certification, please visit{" "}
106
                  <A href="https://www.dataprivacyframework.gov/">
107
                    www.dataprivacyframework.gov
108
                  </A>
109
                  . Additionally, Sagemath may protect information through other
110
                  legally valid methods, including international data transfer
111
                  agreements.{" "}
112
                </p>{" "}
113
                <p>
114
                  {" "}
115
                  This Policy applies to all Sagemath’s operating divisions,
116
                  subsidiaries, affiliates, and branches, including its U.S.
117
                  affiliates certified under the DPF program and any additional
118
                  subsidiary, affiliate, or branch of Sagemath that we may
119
                  subsequently form.{" "}
120
                </p>{" "}
121
              </div>{" "}
122
              <div id="transparencynoticetypes-of-personal-information-we-collect-and-how-we-use-it">
123
                <h1>
124
                  3 Transparency Notice - Types of Personal Information We
125
                  Collect and How We Use It
126
                </h1>
127
                <p>
128
                  The types of Personal Information we may collect (directly
129
                  from you or from Third-Party sources) and our privacy
130
                  practices depend on the nature of the relationship you have
131
                  with Sagemath and the requirements of applicable law. Some of
132
                  the ways that Sagemath may collect Personal Information
133
                  include:{" "}
134
                </p>{" "}
135
                <ul>
136
                  {" "}
137
                  <li>
138
                    {" "}
139
                    <p>
140
                      {" "}
141
                      You may provide Personal Information directly to Sagemath
142
                      through interacting with the Services, participating in
143
                      surveys, and requesting Services, or information.{" "}
144
                    </p>{" "}
145
                  </li>{" "}
146
                  <li>
147
                    {" "}
148
                    <p>
149
                      {" "}
150
                      As you navigate the Services, certain passive information
151
                      may also be collected about your visit, including through
152
                      cookies and similar technologies as described below.{" "}
153
                    </p>{" "}
154
                  </li>{" "}
155
                </ul>{" "}
156
                <p>
157
                  {" "}
158
                  We endeavor to collect only that information which is relevant
159
                  for the purposes of Processing. Below are the ways we collect
160
                  Personal Information and how we use it.{" "}
161
                </p>{" "}
162
                <div id="types-of-personal-information-we-collect">
163
                  {" "}
164
                  <h2> 3.1 Types of Personal Information We Collect </h2>
165
                  <p>
166
                    Sagemath collects Personal Information regarding its
167
                    current, prospective, and former clients, customers, users,
168
                    visitors, guests, and Employees (collectively{" "}
169
                    <strong>“Individuals”</strong>).{" "}
170
                  </p>
171
                  <p>
172
                    <strong>Information You Provide Directly to Us.</strong>{" "}
173
                    When you use the Services or engage in certain activities,
174
                    such as registering for an account with Sagemath, responding
175
                    to surveys, requesting Services or information, or
176
                    contacting us directly, we may ask you to provide some or
177
                    all of the following types of information:{" "}
178
                  </p>
179
                  <ul>
180
                    <li>
181
                      <p>
182
                        <strong>Communications with Us.</strong> We may collect
183
                        Personal Information from you such as email address,
184
                        phone number or mailing address when you choose to
185
                        request information about our Services, register for
186
                        Sagemath’s newsletter or a loyalty program that we may
187
                        offer, request to receive customer or technical support,
188
                        or otherwise communicate with us.{" "}
189
                      </p>{" "}
190
                    </li>{" "}
191
                    <li>
192
                      {" "}
193
                      <p>
194
                        {" "}
195
                        <strong>Surveys.</strong> We may contact you to
196
                        participate in surveys. If you do decide to participate,
197
                        you may be asked to provide certain information which
198
                        may include Personal Information. All information
199
                        collected from your participation in our surveys is
200
                        provided by you voluntarily.{" "}
201
                      </p>{" "}
202
                    </li>{" "}
203
                    <li>
204
                      {" "}
205
                      <p>
206
                        {" "}
207
                        <strong>Posting on the Services.</strong> Sagemath may
208
                        offer publicly accessible forums, blogs, and social
209
                        media pages. You should be aware that, when you disclose
210
                        information about yourself in on Sagemath’s forums,
211
                        blogs, and social media pages, the Services will collect
212
                        the information you provide in such submissions,
213
                        including any Personal Information. If you choose to
214
                        submit content to any public area of the Site, such
215
                        content will be considered “public” and will not be
216
                        subject to the privacy protections set forth
217
                        herein.{" "}
218
                      </p>{" "}
219
                    </li>{" "}
220
                  </ul>{" "}
221
                  <p>
222
                    {" "}
223
                    <strong>Automatic Data Collection.</strong> We may collect
224
                    the following information automatically through our Services
225
                    or other methods of web analysis: your Internet protocol
226
                    (IP) address, cookie identifiers, details about your browser
227
                    or device, and information about how you use the
228
                    Services.{" "}
229
                  </p>{" "}
230
                  <p>
231
                    {" "}
232
                    <strong>Information from Other Sources.</strong> We may
233
                    receive information about you from other public sources,
234
                    including through Third-Party services and organizations to
235
                    supplement information provided by you. This supplemental
236
                    information allows us to verify information that you have
237
                    provided to Sagemath and to enhance our ability to provide
238
                    you with information about our business, products, and
239
                    Services.{" "}
240
                  </p>{" "}
241
                </div>{" "}
242
                <div id="how-sagemath-uses-your-information">
243
                  {" "}
244
                  <h2> 3.2 How Sagemath, Inc. Uses Your Information </h2>{" "}
245
                  <p>
246
                    {" "}
247
                    We Process Personal Information about Individuals for the
248
                    following business purposes:{" "}
249
                  </p>{" "}
250
                  <p>
251
                    {" "}
252
                    <strong>
253
                      To Provide Products, Services, or Information Requested:
254
                    </strong>{" "}
255
                  </p>{" "}
256
                  <ul>
257
                    {" "}
258
                    <li>
259
                      Generally manage Individual information and accounts;{" "}
260
                    </li>{" "}
261
                    <li>
262
                      Respond to questions, comments, and other requests;{" "}
263
                    </li>{" "}
264
                    <li>
265
                      Provide access to certain areas, functionalities, and
266
                      features of Sagemath’s Services;{" "}
267
                    </li>{" "}
268
                    <li>
269
                      Contact you to answer requests for customer support or
270
                      technical support;{" "}
271
                    </li>{" "}
272
                    <li>Allow you to register for events. </li>{" "}
273
                  </ul>{" "}
274
                  <p>
275
                    {" "}
276
                    <strong>Administrative Purposes:</strong>{" "}
277
                  </p>{" "}
278
                  <ul>
279
                    {" "}
280
                    <li>Measure interest in Sagemath’s Services; </li>{" "}
281
                    <li>Develop new products and Services; </li>{" "}
282
                    <li>Ensure internal quality control; </li>{" "}
283
                    <li>Verify Individual identity; </li>{" "}
284
                    <li>
285
                      Communicate about Individual accounts and activities on
286
                      Sagemath’s Services and systems, and, in Sagemath’s
287
                      discretion, changes to any Sagemath policy;{" "}
288
                    </li>{" "}
289
                    <li>
290
                      Send email to the email address you provide to us to
291
                      verify your account and for informational and operational
292
                      purposes, such as account management, customer service, or
293
                      system maintenance;{" "}
294
                    </li>{" "}
295
                    <li>
296
                      Process payment for products or services purchased;{" "}
297
                    </li>{" "}
298
                    <li>Process applications and transactions; </li>{" "}
299
                    <li>
300
                      Prevent potentially prohibited or illegal activities;{" "}
301
                    </li>{" "}
302
                    <li>Enforce our Terms. </li>{" "}
303
                  </ul>{" "}
304
                  <p>
305
                    {" "}
306
                    <strong>
307
                      Marketing Sagemath Products and Services:
308
                    </strong>{" "}
309
                  </p>{" "}
310
                  <ul>
311
                    {" "}
312
                    <li>To tailor content; </li>{" "}
313
                    <li>
314
                      To notify you about offers, products, and services that
315
                      may be of interest to you;{" "}
316
                    </li>{" "}
317
                    <li>To provide Services to you; </li>{" "}
318
                    <li>
319
                      For other purposes disclosed at the time that Individuals
320
                      provide Personal Information;{" "}
321
                    </li>{" "}
322
                    <li>Otherwise with your consent. </li>{" "}
323
                  </ul>{" "}
324
                  <p>
325
                    {" "}
326
                    You may contact us at any time to opt out of the use of your
327
                    Personal Information for marketing purposes as set forth
328
                    below.{" "}
329
                  </p>{" "}
330
                  <ul>
331
                    {" "}
332
                    <li>
333
                      {" "}
334
                      <p>
335
                        {" "}
336
                        <strong>Research and Development.</strong> Sagemath may
337
                        use Personal Information to create non-identifiable
338
                        information that we may use alone or in the aggregate
339
                        with information obtained from other sources, in order
340
                        to help us to optimally deliver our existing products
341
                        and Services or develop new products and Services. We
342
                        may share anonymous Individual and aggregate data for
343
                        research and analysis purposes.{" "}
344
                      </p>{" "}
345
                    </li>{" "}
346
                    <li>
347
                      {" "}
348
                      <p>
349
                        {" "}
350
                        <strong>
351
                          Direct Mail, Email and Outbound Telemarketing.
352
                        </strong>{" "}
353
                        Individuals who provide us with Personal Information, or
354
                        whose Personal Information we obtain from Third Parties,
355
                        may receive periodic emails, newsletters, mailings, or
356
                        phone calls from us with information on Sagemath’s or
357
                        our business partners’ products and services or upcoming
358
                        special offers/events. We offer the option to decline
359
                        these communications at no cost to the Individual by
360
                        following the instructions set forth below.{" "}
361
                      </p>{" "}
362
                    </li>{" "}
363
                    <li>
364
                      {" "}
365
                      <p>
366
                        {" "}
367
                        <strong>
368
                          Anonymous and Aggregated Information Use.
369
                        </strong>{" "}
370
                        Sagemath may use Personal Information and other
371
                        information about you to create anonymized and
372
                        aggregated information, such as de-identified
373
                        demographic information, de-identified location
374
                        information, information about the computer or device
375
                        from which you access Sagemath’s Services, or other
376
                        analyses we create. Anonymized or aggregated information
377
                        is not Personal Information, and Sagemath may use such
378
                        information in a number of ways, including research,
379
                        internal analysis, analytics, and any other legally
380
                        permissible purposes. We may share this information
381
                        within Sagemath and with Third Parties for our or their
382
                        purposes in an anonymized or aggregated form that is
383
                        designed to prevent anyone from identifying you.{" "}
384
                      </p>{" "}
385
                    </li>{" "}
386
                    <li>
387
                      {" "}
388
                      <p>
389
                        {" "}
390
                        <strong>Sharing Content.</strong> Sagemath’s Services
391
                        may offer various tools and functionalities that allow
392
                        you to share content. For example, Sagemath allows you
393
                        to provide information about your colleagues, students,
394
                        or friends through our course management system and
395
                        referral services, such as inviting a collaborator to a
396
                        project. Our referral services may allow you to forward
397
                        or share certain content with others, such as emails
398
                        inviting them to use our Services. Email addresses that
399
                        you may provide in such situations will be used to send
400
                        the content or link you request, but will not be
401
                        collected or otherwise used by Sagemath or any other
402
                        Third Parties for any other purpose. The Services also
403
                        allow you to share your content with Third Parties such
404
                        as GitHub and NPM. Any Personal Information you choose
405
                        to share with these Third Parties is not covered by this
406
                        Privacy Policy. We encourage you to review the privacy
407
                        policy of these Third Parties before submitting your
408
                        Personal Information.{" "}
409
                      </p>{" "}
410
                    </li>{" "}
411
                    <li>
412
                      {" "}
413
                      <p>
414
                        {" "}
415
                        <strong>Other Uses.</strong> Sagemath may use Personal
416
                        Information to pursue our legitimate interests, such as
417
                        direct marketing, marketing research, network and
418
                        information security, and fraud prevention and any other
419
                        purpose disclosed to you at the time you provide
420
                        Personal Information or otherwise with your
421
                        consent.{" "}
422
                      </p>{" "}
423
                    </li>{" "}
424
                  </ul>{" "}
425
                </div>{" "}
426
                <div id="cookies-pixel-tagsweb-beacons-analytics-information-and-interest-based-advertising">
427
                  {" "}
428
                  <h2> 3.3 Cookies and Pixel Tags (Web Beacons) </h2>{" "}
429
                  <p>
430
                    {" "}
431
                    We, as well as Third-Parties that provide content,
432
                    advertising, or other functionality on the Services, may use
433
                    cookies, pixel tags, local storage, and other technologies (
434
                    <strong>“Technologies”</strong>) to automatically collect
435
                    information through the Services.{" "}
436
                  </p>{" "}
437
                  <ul>
438
                    {" "}
439
                    <li>
440
                      {" "}
441
                      <p>
442
                        {" "}
443
                        <strong>Cookies.</strong> Cookies are small text files
444
                        placed in visitors’ computer browsers to store their
445
                        preferences. We use the following required cookies to
446
                        make sure that the Services work properly.{" "}
447
                      </p>{" "}
448
                      <table
449
                        cellPadding="5px"
450
                        style={{ margin: "12px 0", border: "1px solid black" }}
451
                      >
452
                        <thead>
453
                          <tr>
454
                            <th align="left"> Cookies </th>
455
                            <th align="left"> Purpose </th>
456
                          </tr>
457
                        </thead>
458
                        <tbody>
459
                          <tr>
460
                            <td> remember_me </td>
461
                            <td>
462
                              {" "}
463
                              Persistent auth token to keep you signed in.{" "}
464
                            </td>
465
                          </tr>
466
                          <tr>
467
                            <td> account_id </td>
468
                            <td> Stores your account ID for the client UI. </td>
469
                          </tr>
470
                          <tr>
471
                            <td> cocalc_version </td>
472
                            <td>
473
                              {" "}
474
                              Client version for compatibility checks before
475
                              project access.{" "}
476
                            </td>
477
                          </tr>
478
                          <tr>
479
                            <td> connect.sid </td>
480
                            <td>
481
                              {" "}
482
                              Session cookie used for Passport/SSO login
483
                              flows.{" "}
484
                            </td>
485
                          </tr>
486
                          <tr>
487
                            <td> get_api_key </td>
488
                            <td>
489
                              {" "}
490
                              Temporary cookie used during SSO API key
491
                              requests.{" "}
492
                            </td>
493
                          </tr>
494
                          <tr>
495
                            <td> PWRESET </td>
496
                            <td> Short-lived password reset token. </td>
497
                          </tr>
498
                          <tr>
499
                            <td> SMCSERVERID3 </td>
500
                            <td>
501
                              {" "}
502
                              Load balancer stickiness cookie set by
503
                              HAProxy.{" "}
504
                            </td>
505
                          </tr>
506
                        </tbody>
507
                      </table>
508
                      Please note that we do our best to keep this table
509
                      updated, but the number and names of cookies may change
510
                      from time to time. You may not opt-out of the use of these
511
                      cookies since it would be impossible for us to provide the
512
                      service otherwise. We do NOT use cookies for marketing or
513
                      advertising purpuses.
514
                    </li>{" "}
515
                    <li>
516
                      {" "}
517
                      <p>
518
                        {" "}
519
                        <strong>Pixel Tags/Web Beacons.</strong> A pixel tag
520
                        (also known as a web beacon) is a piece of code embedded
521
                        on the Services that collects information about users’
522
                        engagement on that web page. We do not use pixel tags
523
                        directly, but some of our service providers, namely
524
                        Salesloft and ZenDesk, may use similar technology to let
525
                        us know that email messages have been opened, acted on,
526
                        or forwarded. You can consult their privacy policies and
527
                        other documents following the links on our Third Parties
528
                        page at{" "}
529
                        <A href="/policies/thirdparties">
530
                          https://cocalc.com/policies/thirdparties
531
                        </A>{" "}
532
                      </p>{" "}
533
                    </li>{" "}
534
                  </ul>{" "}
535
                </div>{" "}
536
                <div id="third-party-websites-social-media-platforms-and-software-development-kits">
537
                  {" "}
538
                  <h2>
539
                    3.4 Third-Party Websites, Social Media Platforms, and
540
                    Software Development Kits{" "}
541
                  </h2>{" "}
542
                  <p>
543
                    {" "}
544
                    The Services may contain links to other websites and other
545
                    websites may reference or link to our Services. These other
546
                    domains and websites are not controlled by us, and Sagemath
547
                    does not endorse or make any representations about
548
                    Third-Party websites or social media platforms. We encourage
549
                    our users to read the privacy policies of each and every
550
                    website and application with which they interact. We do not
551
                    endorse, screen or approve, and are not responsible for the
552
                    privacy practices or content of such other websites or
553
                    applications. Visiting these other websites or applications
554
                    is at your own risk.{" "}
555
                  </p>{" "}
556
                  <p>
557
                    {" "}
558
                    The Services may include publicly accessible forums, blogs,
559
                    and social media pages You should be aware that Personal
560
                    Information which you voluntarily include and transmit
561
                    online in a publicly accessible forum, blog, or social media
562
                    page may be viewed and used by others without any
563
                    restrictions. By using such services you assume the risk
564
                    that the Personal Information provided by you may be viewed
565
                    and used by third parties for any number of purposes.{" "}
566
                  </p>{" "}
567
                  <p>
568
                    {" "}
569
                    We use Third-Party software development kits (
570
                    <strong>“SDKs”</strong>), such as the Stripe, Inc. SDK, as
571
                    part of the functionality of our Services.{" "}
572
                  </p>{" "}
573
                </div>{" "}
574
                <div id="third-party-payment-processing">
575
                  {" "}
576
                  <h2>3.5 Third-Party Payment Processing </h2>{" "}
577
                  <p>
578
                    {" "}
579
                    When you make purchases through the Services, we process
580
                    your payments through our Payment Processor, Stripe. The
581
                    Payment Processor collects information from and about you
582
                    that is necessary to process your payment and to prevent
583
                    abuse. This may include your name, email address, billing
584
                    address, tax identifies, IP address, and account numbers. We
585
                    do not get access to your full account numbers. You can
586
                    consult Stripe's privacy policy and other documents
587
                    following the links on our Third Parties page at{" "}
588
                    <A href="/policies/thirdparties">
589
                      https://cocalc.com/policies/thirdparties
590
                    </A>{" "}
591
                  </p>{" "}
592
                </div>{" "}
593
              </div>{" "}
594
              <div id="human-resources-data">
595
                <h1>4 Human Resources Data</h1>
596
                <p>
597
                  Sagemath collects Personal Information from current,
598
                  prospective, and former Employees, their contact points in
599
                  case of a medical emergency, and beneficiaries under any
600
                  insurance policy (<strong>“Human Resources Data”</strong>).
601
                  The Human Resources Data we collect may include title, name,
602
                  address, phone number, email address, date of birth, passport
603
                  number, driver’s license number, Social Security number or
604
                  other government-issued identification number, financial
605
                  information related to credit checks, bank details for
606
                  payroll, information that may be recorded on a CV or
607
                  application form, language abilities, contact information of
608
                  third parties in case of an emergency and beneficiaries under
609
                  any insurance policy.{" "}
610
                </p>{" "}
611
                <p>
612
                  {" "}
613
                  We Process Human Resources Data for a variety of business
614
                  purposes including:{" "}
615
                </p>{" "}
616
                <ul>
617
                  {" "}
618
                  <li>
619
                    Workflow management, including assigning, managing and
620
                    administering projects;{" "}
621
                  </li>{" "}
622
                  <li>Human Resources administration and communication; </li>{" "}
623
                  <li>Payroll and the provision of benefits; </li>{" "}
624
                  <li>
625
                    Compensation, including bonuses and long-term incentive
626
                    administration, stock plan administration, compensation
627
                    analysis, including monitoring overtime and compliance with
628
                    labor laws, and company recognition programs;{" "}
629
                  </li>{" "}
630
                  <li>Job grading activities; </li>{" "}
631
                  <li>Performance and employee development management; </li>{" "}
632
                  <li>Organizational development and succession planning; </li>{" "}
633
                  <li>Benefits and personnel administration; </li>{" "}
634
                  <li>Absence management; </li>{" "}
635
                  <li>Helpdesk and IT support services; </li>{" "}
636
                  <li>Regulatory compliance; </li>{" "}
637
                  <li>
638
                    Internal and/or external or governmental compliance
639
                    investigations;{" "}
640
                  </li>{" "}
641
                  <li>Internal or external audits; </li>{" "}
642
                  <li>Litigation evaluation, prosecution, and defense; </li>{" "}
643
                  <li>Restructuring and relocation; </li>{" "}
644
                  <li>Emergency contacts and services; </li>{" "}
645
                  <li>Employee safety; </li>{" "}
646
                  <li>Compliance with statutory requirements; </li>{" "}
647
                  <li>
648
                    Processing of Employee expenses and travel charges; and{" "}
649
                  </li>{" "}
650
                  <li>Acquisitions, divestitures, and integrations. </li>{" "}
651
                </ul>{" "}
652
              </div>{" "}
653
              <div id="onward-transfersagemath-may-disclose-your-information">
654
                <h1>
655
                  <span>5</span> Onward Transfer — Sagemath May Disclose Your
656
                  Information{" "}
657
                </h1>{" "}
658
                <div id="information-we-share">
659
                  {" "}
660
                  <h2>
661
                    <span>5.1</span> Information We Share
662
                  </h2>
663
                  <p>
664
                    {" "}
665
                    We may share your information as described in this Privacy
666
                    Policy (e.g., with our Third-Party service providers; to
667
                    comply with legal obligations; to protect and defend our
668
                    rights and property) or with your permission.{" "}
669
                  </p>{" "}
670
                  <ul>
671
                    {" "}
672
                    <li>
673
                      {" "}
674
                      <p>
675
                        {" "}
676
                        <strong>
677
                          We Use Vendors and Service Providers.
678
                        </strong>{" "}
679
                        We may share any information we receive with vendors and
680
                        service providers. The types of service providers
681
                        (processors) to whom we entrust Personal Information
682
                        include service providers for: (i) provision of IT,
683
                        marketing, and related services; (ii) provision of
684
                        information and services you have requested; (iii)
685
                        payment processing; (iv) customer service activities;
686
                        and (v) in connection with the provision of the
687
                        Services.{" "}
688
                      </p>{" "}
689
                    </li>{" "}
690
                    <li>
691
                      {" "}
692
                      <p>
693
                        {" "}
694
                        <strong>Business Partners.</strong> Sagemath may share
695
                        your Personal Information with our business partners and
696
                        affiliates to provide you with a product or service that
697
                        you have requested. Sagemath may also provide Personal
698
                        Information to business partners with whom we may
699
                        jointly offer products or services, or whose products or
700
                        services we believe may be of interest to you. In such
701
                        cases, our business partner’s name will appear, along
702
                        with Sagemath. Sagemath requires our affiliates and
703
                        business partners to agree in writing to maintain the
704
                        confidentiality and security of Personal Information
705
                        they maintain on our behalf and not to use it for any
706
                        purpose other than the purpose for which Sagemath
707
                        provided them.{" "}
708
                      </p>{" "}
709
                    </li>{" "}
710
                    <li>
711
                      {" "}
712
                      <p>
713
                        {" "}
714
                        <strong>DPF.</strong> With respect to onward transfers
715
                        to Agents under DPF, DPF requires that Sagemath remain
716
                        liable should its Agents Process Personal Information in
717
                        a manner inconsistent with the DPF Principles.{" "}
718
                      </p>{" "}
719
                    </li>{" "}
720
                    <li>
721
                      {" "}
722
                      <p>
723
                        {" "}
724
                        <strong>Displaying to Other Users.</strong> The content
725
                        you post to the Services may be displayed on the
726
                        Services. Other users of the Services may be able to see
727
                        some information about you, such as your name. We are
728
                        not responsible for privacy practices of the other users
729
                        who will view and use the posted information.{" "}
730
                      </p>{" "}
731
                    </li>{" "}
732
                    <li>
733
                      {" "}
734
                      <p>
735
                        {" "}
736
                        <strong>
737
                          Disclosures to Protect Us or Others (e.g., as Required
738
                          by Law and Similar Disclosures).
739
                        </strong>{" "}
740
                        We may access, preserve, and disclose your Personal
741
                        Information, other account information, and content if
742
                        we believe doing so is required or appropriate to: (i)
743
                        comply with law enforcement or national security
744
                        requests and legal process, such as a court order or
745
                        subpoena; (ii) respond to your requests; (iii) protect
746
                        yours’, ours’ or others’ rights, property, or safety;
747
                        (iv) to enforce Sagemath policies or contracts; (v) to
748
                        collect amounts owed to Sagemath; (vi) when we believe
749
                        disclosure is necessary or appropriate to prevent
750
                        physical harm or financial loss or in connection with an
751
                        investigation or prosecution of suspected or actual
752
                        illegal activity; or (vii) if we, in good faith, believe
753
                        that disclosure is otherwise necessary or
754
                        advisable.{" "}
755
                      </p>{" "}
756
                    </li>{" "}
757
                    <li>
758
                      {" "}
759
                      <p>
760
                        {" "}
761
                        <strong>
762
                          Merger, Sale, or Other Asset Transfers.
763
                        </strong>{" "}
764
                        If we are involved in a merger, acquisition, financing
765
                        due diligence, reorganization, bankruptcy, receivership,
766
                        sale of company assets, or transition of service to
767
                        another provider, then your information may be sold or
768
                        transferred as part of such a transaction as permitted
769
                        by law and/or contract.{" "}
770
                      </p>{" "}
771
                    </li>{" "}
772
                  </ul>{" "}
773
                </div>{" "}
774
                <div id="international-data-transfers">
775
                  {" "}
776
                  <h2>
777
                    {" "}
778
                    <span>5.2</span> International Data Transfers{" "}
779
                  </h2>{" "}
780
                  <p>
781
                    {" "}
782
                    You agree that all information collected via or by Sagemath
783
                    may be transferred, processed, and stored in the United
784
                    States, in the cloud, on our servers, on the servers of our
785
                    affiliates, or the servers of our service providers, in
786
                    order to provide the Services.{" "}
787
                  </p>{" "}
788
                  <p>
789
                    If you use Services that require you to select a geographic
790
                    location explicitly, such as compute servers or cloud file
791
                    systems, your data will be sent to the chosen location.
792
                  </p>
793
                </div>{" "}
794
              </div>{" "}
795
              <div id="opt-out-right-to-object-to-processing">
796
                {" "}
797
                <h1>
798
                  {" "}
799
                  <span>6</span> Opt-Out (Right to Object to Processing){" "}
800
                </h1>{" "}
801
                <div id="general">
802
                  {" "}
803
                  <h2>
804
                    {" "}
805
                    <span>6.1</span> General{" "}
806
                  </h2>{" "}
807
                  <p>
808
                    {" "}
809
                    You have the right to object to and opt out of certain uses
810
                    of your Personal Information. Where you have consented to
811
                    Sagemath’s Processing of your Personal Information or
812
                    Sensitive Personal Information, you may withdraw that
813
                    consent at any time and opt out of further Processing by
814
                    contacting{" "}
815
                    <A href="mailto:[email protected]">[email protected]</A>
816
                    . Even if you opt out, we may still collect and use
817
                    non-Personal Information regarding your activities on our
818
                    Services and/or information from the advertisements on
819
                    Third-Party websites for non-interest based advertising
820
                    purposes, such as to determine the effectiveness of the
821
                    advertisements.{" "}
822
                  </p>{" "}
823
                </div>{" "}
824
                <div id="email-and-telephone-communications">
825
                  {" "}
826
                  <h2>
827
                    {" "}
828
                    <span>6.2</span> Email and Telephone Communications{" "}
829
                  </h2>{" "}
830
                  <p>
831
                    {" "}
832
                    If you receive an unwanted email from us, you can use the
833
                    unsubscribe link found at the bottom of the email to opt out
834
                    of receiving future emails. We will process your request
835
                    within a reasonable time after receipt. Note that you will
836
                    continue to receive transaction-related emails regarding
837
                    products or services you have requested. We may also send
838
                    you certain non-promotional communications regarding
839
                    Sagemath and our Services and you will not be able to opt
840
                    out of those communications (e.g., communications regarding
841
                    updates to our Terms or this Privacy Policy).{" "}
842
                  </p>{" "}
843
                  <p>
844
                    {" "}
845
                    We maintain telephone “do-not-call” and “do-not-mail” lists
846
                    as mandated by law. We process requests to be placed on
847
                    do-not-mail, do-not-phone and do-not-contact lists within 60
848
                    days after receipt, or such shorter time as may be required
849
                    by law.{" "}
850
                  </p>{" "}
851
                </div>{" "}
852
                <div id="mobile-devices">
853
                  {" "}
854
                  <h2>
855
                    {" "}
856
                    <span>6.3</span> Mobile devices{" "}
857
                  </h2>{" "}
858
                  <p>
859
                    {" "}
860
                    Sagemath may occasionally send you push notifications
861
                    through our mobile applications with notices that may be of
862
                    interest to you. You may at any time opt out from receiving
863
                    these types of communications by changing the settings on
864
                    your mobile device. Sagemath may also collect location-based
865
                    information if you use our mobile applications. You may opt
866
                    out of this collection by changing the settings on your
867
                    mobile device.{" "}
868
                  </p>{" "}
869
                </div>{" "}
870
                <div id="human-resources-data-1">
871
                  {" "}
872
                  <h2>
873
                    {" "}
874
                    <span>6.4</span> Human Resources Data{" "}
875
                  </h2>{" "}
876
                  <p>
877
                    {" "}
878
                    With regard to Personal Information that Sagemath receives
879
                    in connection with the employment relationship, Sagemath
880
                    will use such Personal Information only for
881
                    employment-related purposes as more fully described above.
882
                    If Sagemath intends to use this Personal Information for any
883
                    other purpose, Sagemath will contact the Individual and
884
                    proceed only after obtaining affirmative express consent
885
                    (opt in).{" "}
886
                  </p>{" "}
887
                </div>{" "}
888
                <div id="do-not-track">
889
                  {" "}
890
                  <h2>
891
                    {" "}
892
                    <span>6.5</span> “Do Not Track”{" "}
893
                  </h2>{" "}
894
                  <p>
895
                    {" "}
896
                    Do Not Track (<strong>“DNT”</strong>) is a privacy
897
                    preference that users can set in certain web browsers. DNT
898
                    is a way for users to inform websites and services that they
899
                    do not want certain information about their webpage visits
900
                    collected over time and across websites or online services.
901
                    Please note that we do not respond to or honor DNT signals
902
                    or similar mechanisms transmitted by web browsers.{" "}
903
                  </p>{" "}
904
                </div>{" "}
905
              </div>{" "}
906
              <div id="rights-of-access-rectification-erasure-and-restriction">
907
                {" "}
908
                <h1>
909
                  {" "}
910
                  <span>7</span> Rights of Access, Rectification, Erasure,
911
                  Restriction, and to Object{" "}
912
                </h1>{" "}
913
                <p>
914
                  {" "}
915
                  In accordance with applicable law, you may have the right to:
916
                  (i) request confirmation of whether we are processing your
917
                  personal information; (ii) obtain access to or a copy of your
918
                  personal information; (iii) receive an electronic copy of
919
                  personal information that you have provided to us, or ask us
920
                  to send that information to another company (the “right of
921
                  data portability”); (iv) restrict our uses of your personal
922
                  information; (v) seek correction of inaccurate, untrue or
923
                  incomplete personal information; (vi) request erasure of
924
                  personal information held about you by Sagemath, subject to
925
                  certain exceptions prescribed by law; (vii) object to
926
                  processing of your personal information. If you would like to
927
                  exercise any of these rights, please contact us as set forth
928
                  below.{" "}
929
                </p>{" "}
930
                <p>
931
                  {" "}
932
                  We will process such requests in accordance with applicable
933
                  laws and free of charge. However, if the request is excessive
934
                  or repetitive, Sagemath may charge a reasonable fee. To
935
                  protect your privacy, Sagemath will take steps to verify your
936
                  identity before fulfilling your request.{" "}
937
                </p>{" "}
938
              </div>{" "}
939
              <div id="data-retention">
940
                {" "}
941
                <h1>
942
                  {" "}
943
                  <span>8</span> Data Retention{" "}
944
                </h1>{" "}
945
                <p>
946
                  {" "}
947
                  Sagemath retains the Personal Information we receive as
948
                  described in this Privacy Policy for as long as you use our
949
                  Services or as necessary to fulfill the purpose(s) for which
950
                  it was collected, provide our Services, resolve disputes,
951
                  establish legal defenses, conduct audits, pursue legitimate
952
                  business purposes, enforce our agreements, and comply with
953
                  applicable laws.{" "}
954
                </p>{" "}
955
              </div>{" "}
956
              <div id="security-of-your-information">
957
                {" "}
958
                <h1>
959
                  {" "}
960
                  <span>9</span> Security of Your Information{" "}
961
                </h1>{" "}
962
                <p>
963
                  {" "}
964
                  We take steps to ensure that your information is treated
965
                  securely and in accordance with this Privacy Policy. We
966
                  encrypt data storage and backups, use firewalls and access
967
                  control. You can learn more details about measures taken and
968
                  third party audits and certifications on our Trust page at{" "}
969
                  <A href="/policies/trust">
970
                    https://cocalc.com/policies/trust
971
                  </A>{" "}
972
                  Unfortunately, the Internet cannot be guaranteed to be 100%
973
                  secure, and we cannot ensure or warrant the security of any
974
                  information you provide to us. To the fullest extent permitted
975
                  by applicable law, we do not accept liability for
976
                  unintentional disclosure.{" "}
977
                </p>{" "}
978
                <p>
979
                  {" "}
980
                  By using the Services or providing Personal Information to us,
981
                  you agree that we may communicate with you electronically
982
                  regarding security, privacy, and administrative issues
983
                  relating to your use of the Services. If we learn of a
984
                  personal data breach, in accordance with GDPR we will inform
985
                  the Supervisory Authority within 72 hours. If there is a high
986
                  risk to your security or if required by the Supervisory
987
                  Authority, we will notify you electronically by posting a
988
                  notice on the Services or sending an e-mail to you.
989
                </p>{" "}
990
              </div>{" "}
991
              <div id="childrens-privacy">
992
                {" "}
993
                <h1>
994
                  {" "}
995
                  <span>10</span> Children’s Privacy{" "}
996
                </h1>{" "}
997
                <p>
998
                  {" "}
999
                  The Services are not directed to children under 16 years of
1000
                  age, and Sagemath does not knowingly collect Personal
1001
                  Information from children under 16 years of age. If we learn
1002
                  that we have collected any Personal Information from children
1003
                  under 16 years old, we will promptly take steps to delete such
1004
                  information.{" "}
1005
                </p>{" "}
1006
              </div>{" "}
1007
              <div id="redresscompliance-and-accountability">
1008
                {" "}
1009
                <h1>
1010
                  {" "}
1011
                  <span>11</span> Redress/Compliance and Accountability{" "}
1012
                </h1>{" "}
1013
                <p>
1014
                  {" "}
1015
                  If you have any questions about our privacy practices or this
1016
                  Privacy Policy, please contact Sagemath by email at{" "}
1017
                  <A href="mailto:[email protected]">[email protected]</A>.
1018
                  We will address your concerns and attempt to resolve any
1019
                  privacy issues in a timely manner.{" "}
1020
                </p>{" "}
1021
                <p>
1022
                  {" "}
1023
                  If you are a EU resident, you may contact our Ireland
1024
                  Representative: Instant EU GDPR Representative Ltd, Adam
1025
                  Brogden,{" "}
1026
                  <a href="mailto:[email protected]">
1027
                    [email protected]
1028
                  </a>
1029
                  , Tel +353 15 549 700,{" "}
1030
                  <a href="https://sagemathinc.gdprlocal.com/eu">
1031
                    https://sagemathinc.gdprlocal.com/eu
1032
                  </a>
1033
                  , INSTANT EU GDPR REPRESENTATIVE LIMITED Office 2 12A Lower
1034
                  Main Street, Lucan Co. Dublin K78 X5P8 Ireland{" "}
1035
                </p>{" "}
1036
                <p>
1037
                  {" "}
1038
                  If you are a UK resident, you may contact our UK
1039
                  Representative: GDPRLocal Ltd, Adam Brogden,{" "}
1040
                  <a href="mailto:[email protected]">
1041
                    [email protected]
1042
                  </a>
1043
                  , Tel +441 772 217 800,{" "}
1044
                  <a href="https://sagemathinc.gdprlocal.com/uk">
1045
                    https://sagemathinc.gdprlocal.com/uk
1046
                  </a>
1047
                  , GDPRLocal Ltd. 1st Floor Front Suite 27-29 North Street,
1048
                  Brighton England BN1 1EB{" "}
1049
                </p>{" "}
1050
                <p>
1051
                  {" "}
1052
                  In compliance with the EU-U.S. DPF, the UK Extension to the
1053
                  EU-U.S. DPF, and the Swiss-U.S. DPF, Sagemath commits to
1054
                  resolve DPF Principles-related complaints about our collection
1055
                  and use of your personal information. EU, UK, and Swiss
1056
                  individuals with inquiries or complaints regarding our
1057
                  handling of personal data received in reliance on the EU-U.S.
1058
                  DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S.
1059
                  DPF should first contact Sagemath at the contact information
1060
                  provided above.{" "}
1061
                </p>{" "}
1062
                <p>
1063
                  {" "}
1064
                  In compliance with the EU-U.S. DPF, the UK Extension to the
1065
                  EU-U.S. DPF, and the Swiss-U.S. DPF, Sagemath commits to
1066
                  cooperate and comply respectively with the advice of the panel
1067
                  established by the EU data protection authorities (DPAs), the
1068
                  UK Information Commissioner’s Office (ICO) and the Gibraltar
1069
                  Regulatory Authority (GRA), and the Swiss Federal Data
1070
                  Protection and Information Commissioner (FDPIC) with regard to
1071
                  unresolved complaints concerning our handling of personal data
1072
                  received in reliance on the EU-U.S. DPF, the UK Extension to
1073
                  the EU-U.S. DPF, and the Swiss-U.S. DPF.{" "}
1074
                </p>{" "}
1075
                <p>
1076
                  {" "}
1077
                  Such independent dispute resolution mechanisms are available
1078
                  to citizens free of charge. If any request remains unresolved,
1079
                  you may contact the national data protection authority for
1080
                  your EU Member State.{" "}
1081
                </p>{" "}
1082
                <p>
1083
                  {" "}
1084
                  You may also have a right, under certain conditions, to invoke
1085
                  binding arbitration for complaints regarding DPF compliance
1086
                  not resolved by any of the other DPF mechanisms; for
1087
                  additional information, see{" "}
1088
                  <A href="https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2">
1089
                    www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2
1090
                  </A>
1091
                  . The Federal Trade Commission has jurisdiction over
1092
                  Sagemath’s compliance with the EU-U.S. DPF, the UK Extension
1093
                  to the EU-U.S. DPF, and the Swiss-U.S. DPF.{" "}
1094
                </p>{" "}
1095
              </div>{" "}
1096
              <div id="other-rights-and-important-information">
1097
                {" "}
1098
                <h1>
1099
                  {" "}
1100
                  <span>12</span> Other Rights and Important Information{" "}
1101
                </h1>{" "}
1102
                <div id="changes-to-our-privacy-policy-and-practices">
1103
                  {" "}
1104
                  <h2>
1105
                    {" "}
1106
                    <span>12.1</span> Changes To Our Privacy Policy and
1107
                    Practices{" "}
1108
                  </h2>{" "}
1109
                  <p>
1110
                    {" "}
1111
                    We may revise this Privacy Policy from time to time in our
1112
                    sole discretion. If there are any material changes to this
1113
                    Privacy Policy, we will notify you as required by applicable
1114
                    law. You understand and agree that you will be deemed to
1115
                    have accepted the updated Privacy Policy if you continue to
1116
                    use the Services after the new Privacy Policy takes
1117
                    effect.{" "}
1118
                  </p>{" "}
1119
                </div>{" "}
1120
                <div id="california-privacy-rights">
1121
                  {" "}
1122
                  <h2>
1123
                    {" "}
1124
                    <span>12.2</span> California Privacy Rights{" "}
1125
                  </h2>{" "}
1126
                  <p>
1127
                    {" "}
1128
                    California law permits users who are California residents to
1129
                    request and obtain from us once a year, free of charge, a
1130
                    list of the Third Parties to whom we have disclosed their
1131
                    Personal Information (if any) for their direct marketing
1132
                    purposes in the prior calendar year, as well as the type of
1133
                    Personal Information disclosed to those parties. Sagemath
1134
                    does not share Personal Information with Third Parties for
1135
                    their own marketing purposes.{" "}
1136
                  </p>{" "}
1137
                </div>{" "}
1138
                <div id="supervisory-authority">
1139
                  {" "}
1140
                  <h2>
1141
                    {" "}
1142
                    <span>12.3</span> Supervisory Authority{" "}
1143
                  </h2>{" "}
1144
                  <p>
1145
                    {" "}
1146
                    If you are located in the European Economic Area, you have
1147
                    the right to lodge a complaint with a supervisory authority
1148
                    if you believe our processing of your Personal Information
1149
                    violates applicable law.{" "}
1150
                  </p>{" "}
1151
                </div>{" "}
1152
                <div id="compliance">
1153
                  {" "}
1154
                  <h2>
1155
                    {" "}
1156
                    <span>12.4</span> Compliance{" "}
1157
                  </h2>{" "}
1158
                  <p>
1159
                    {" "}
1160
                    This Policy shall be implemented by Sagemath and all its
1161
                    operating divisions, subsidiaries and affiliates. Sagemath
1162
                    has put in place mechanisms to verify ongoing compliance
1163
                    with DPF Principles and this Policy. Any Employee that
1164
                    violates these privacy principles will be subject to
1165
                    disciplinary procedures.{" "}
1166
                  </p>{" "}
1167
                </div>{" "}
1168
              </div>{" "}
1169
              <div id="definitions">
1170
                {" "}
1171
                <h1>
1172
                  {" "}
1173
                  <span>13</span> Definitions{" "}
1174
                </h1>{" "}
1175
                <p>
1176
                  {" "}
1177
                  The following capitalized terms shall have the meanings herein
1178
                  as set forth below.{" "}
1179
                </p>{" "}
1180
                <ul>
1181
                  {" "}
1182
                  <li>
1183
                    {" "}
1184
                    <p>
1185
                      {" "}
1186
                      <strong>“Agent”</strong> means any Third Party that
1187
                      Processes Personal Information pursuant to the
1188
                      instructions of, and solely for, Sagemath or to which
1189
                      Sagemath discloses Personal Information for use on its
1190
                      behalf.{" "}
1191
                    </p>{" "}
1192
                  </li>{" "}
1193
                  <li>
1194
                    {" "}
1195
                    <p>
1196
                      {" "}
1197
                      <strong>“Employee”</strong> refers to any current,
1198
                      temporary, permanent, prospective or former employee,
1199
                      director, contractor, worker, or retiree of Sagemath or
1200
                      its subsidiaries worldwide.{" "}
1201
                    </p>{" "}
1202
                  </li>{" "}
1203
                  <li>
1204
                    {" "}
1205
                    <p>
1206
                      {" "}
1207
                      <strong>“Personal Information”</strong> is any information
1208
                      relating to an identified or identifiable natural person (
1209
                      <strong>“Individual”</strong>).{" "}
1210
                    </p>{" "}
1211
                  </li>{" "}
1212
                  <li>
1213
                    {" "}
1214
                    <p>
1215
                      {" "}
1216
                      <strong>“DPF Principles”</strong> means the seven (7)
1217
                      principles of the Data Privacy Framework: (1) notice, (2)
1218
                      choice, (3) accountability for onward transfer, (4)
1219
                      security, (5) data integrity and purpose limitation, (6)
1220
                      access, and (7) recourse, enforcement, and liability.
1221
                      Additionally, it includes the sixteen (16) supplemental
1222
                      principles described in the Data Privacy Framework: (1)
1223
                      sensitive data, (2) journalistic exceptions, (3) secondary
1224
                      liability, (4) performing due diligence and conducting
1225
                      audits, (5) the role of the data protection authorities,
1226
                      (6) self-certification, (7) verification, (8) access, (9)
1227
                      human resources data, (10) obligatory contracts for onward
1228
                      transfers, (11) dispute resolution and enforcement, (12)
1229
                      choice – timing of opt-out, (13) travel information, (14)
1230
                      pharmaceutical and medical products, (15) public record
1231
                      and publicly available information, and (16) access
1232
                      requests by public authorities.{" "}
1233
                    </p>{" "}
1234
                  </li>{" "}
1235
                  <li>
1236
                    {" "}
1237
                    <p>
1238
                      {" "}
1239
                      <strong>“Process”</strong> or{" "}
1240
                      <strong>“Processing”</strong> means any operation which is
1241
                      performed upon Personal Information, whether or not by
1242
                      automatic means, such as collection, recording,
1243
                      organization, structuring, storage, adaptation or
1244
                      alteration, retrieval, consultation, use, disclosure by
1245
                      transmission, dissemination or otherwise making available,
1246
                      alignment or combination, restriction, erasure, or
1247
                      destruction.{" "}
1248
                    </p>{" "}
1249
                  </li>{" "}
1250
                  <li>
1251
                    {" "}
1252
                    <p>
1253
                      {" "}
1254
                      <strong>“Sensitive Data”</strong> or{" "}
1255
                      <strong>“Sensitive Personal Information”</strong> is a
1256
                      subset of Personal Information which, due to its nature,
1257
                      has been classified by law or by policy as deserving
1258
                      additional privacy and security protections. Sensitive
1259
                      Personal Information includes Personal Information
1260
                      regarding EU residents that is classified as a{" "}
1261
                      <strong>“Special Category of Personal Data”</strong> under
1262
                      EU law, which consists of the following data elements: (1)
1263
                      race or ethnic origin; (2) political opinions; (3)
1264
                      religious or philosophical beliefs; (4) trade union
1265
                      membership; (5) genetic data; (6) biometric data where
1266
                      Processed to uniquely identify a person; (6) health
1267
                      information; (7) sexual orientation or information about
1268
                      the Individual’s sex life; or (8) information relating to
1269
                      the commission of a criminal offense.{" "}
1270
                    </p>{" "}
1271
                  </li>{" "}
1272
                  <li>
1273
                    {" "}
1274
                    <p>
1275
                      {" "}
1276
                      <strong>“Third Party”</strong> is any company, natural or
1277
                      legal person, public authority, agency, or body other than
1278
                      the Individual, Sagemath or Sagemath’s Agents.
1279
                    </p>
1280
                  </li>
1281
                </ul>
1282
              </div>
1283
              <div id="revision-history">
1284
                <h1>
1285
                  <span>14</span> Revision history
1286
                </h1>
1287
                {/* @ts-ignore */}
1288
                <table
1289
                  cellPadding="5px"
1290
                  style={{ margin: "auto", border: "1px solid black" }}
1291
                >
1292
                  <thead>
1293
                    <tr>
1294
                      <th align="left"> Title </th> <th> Effective Date </th>
1295
                    </tr>
1296
                  </thead>
1297
                  <tbody>
1298
                    <tr>
1299
                      <td> Sagemath Privacy Policy </td>
1300
                      <td> 2015-05-03 </td>
1301
                    </tr>
1302
                    <tr>
1303
                      <td> Updated Sagemath Privacy Policy </td>
1304
                      <td> 2018-10-05 </td>
1305
                    </tr>
1306
                    <tr>
1307
                      <td> Updated Sagemath Privacy Policy </td>
1308
                      <td> 2018-10-29 </td>
1309
                    </tr>
1310
                    <tr>
1311
                      <td>Update: Privacy Shield</td>
1312
                      <td> 2020-02-04 </td>
1313
                    </tr>
1314
                    <tr>
1315
                      <td>
1316
                        Update: temporarily remove mention of Privacy Shield
1317
                      </td>
1318
                      <td> 2020-02-06 </td>
1319
                    </tr>
1320
                    <tr>
1321
                      <td>Update: restore mention of Privacy Shield</td>
1322
                      <td> 2020-02-20 </td>
1323
                    </tr>
1324
                    <tr>
1325
                      <td>Update: revise JAMS link</td>
1326
                      <td> 2022-09-15 </td>
1327
                    </tr>
1328
                    <tr>
1329
                      <td>
1330
                        Update: Data Privacy Framework instead of Privacy Shield
1331
                      </td>
1332
                      <td> 2023-08-23 </td>
1333
                    </tr>
1334
                    <tr>
1335
                      <td>Update: clarify alignment with GDPR</td>
1336
                      <td> 2025-02-20 </td>
1337
                    </tr>
1338
                    <tr>
1339
                      <td>
1340
                        Update: HR data require explicit opt-in for any new use
1341
                      </td>
1342
                      <td> 2025-10-03 </td>
1343
                    </tr>
1344
                    <tr>
1345
                      <td>
1346
                        Update: add the list of used cookies and their purpose
1347
                      </td>
1348
                      <td> 2026-01-06 </td>
1349
                    </tr>
1350
                  </tbody>
1351
                </table>
1352
                <p>
1353
                  {" "}
1354
                  A revision control history for this web page can be found at
1355
                  <A href="https://github.com/sagemathinc/cocalc/commits/master/src/packages/next/pages/policies/privacy.tsx">
1356
                    {" "}
1357
                    github.com/sagemathinc/cocalc/commits/master/src/packages/next/pages/policies/privacy.tsx
1358
                  </A>
1359
                  .{" "}
1360
                </p>{" "}
1361
              </div>
1362
              <h1>Questions?</h1>
1363
              <p>
1364
                Please contact us at{" "}
1365
                <A href="mailto:[email protected]">[email protected]</A> if
1366
                you have any questions about our Privacy Policy.
1367
              </p>
1368
            </div>
1369
          </div>
1370
          <Footer />
1371
        </Layout.Content>{" "}
1372
      </Layout>
1373
    </Customize>
1374
  );
1375
}
1376

1377
export async function getServerSideProps(context) {
1378
  return await withCustomize({ context });
1379
}
1380

1381