Updated policy: Effective on October 31, 2014
This privacy statement describes how Smartsheet.com, Inc. (“Smartsheet”) collects and uses the personal information you provide on the domain umbrella of www.smartsheet.com, our mobile sites and mobile applications, and any other application or access point we make available to you (collectively, our “Web Properties”). It also describes the choices available to you regarding our use of your personal information and how you can access and update this information.
Smartsheet, Inc. has received TRUSTe's Privacy Seal signifying that this privacy statement and our practices have been reviewed for compliance with the TRUSTe program. The TRUSTe program does not cover information that may be collected through downloadable software. The TRUSTe program covers only information that is collected through this Web site, www.smartsheet.com and does not cover information that may be collected through our mobile applications or mobile sites.
If you have questions or concerns regarding this policy, please contact us here. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact TRUSTe here.
Collection and Use of Personal Information
Information We Collect Directly from You.
We collect certain personal information that you provide directly to us. For example, we collect the following personal information from you:
- Contact Information such as your name and email address.
- If you elect to purchase a paid subscription to any of the services we offer, we ask you to provide billing Information such as billing address, credit card number and phone number.
- When you create an account to use our services, you are asked to provide an email address and password as your login credentials. You also have the opportunity (but are not required) to provide your first and last name.
Information We Collect Automatically on Our Web Properties.
As is true of most websites, we automatically gather information about your computer such as your IP address, browser type, referring/exit pages, and operating system, as well as the other information listed in the “Cookies and Other Tracking Technologies” section below. We do link this collected data to other information we collect about you.
We use the information we collect from you to:
- Administer your account.
- Assess the needs of your business to determine suitable products and services
- Fulfill your order for our services.
- Link or combine with other information we receive from third parties to help understand your needs, provide you with better service and for marketing purposes.
- Monitor and analyze activity on our Web Properties.
- Provide, improve, maintain and operate our services.
- Send you administrative messages, invoices, order confirmations, security alerts, support messages, technical notices, and updates.
- Investigate and respond to illegal activities or fraudulent transactions and/or fraudulent usage of our Web Properties.
- Respond to customer service requests and provide support.
- Respond to your comments, concerns and questions.
- Send you requested information and for other purposes which we have notified you about.
We are based in the United States and the information we collect is governed by U.S. law. By accessing or using our services or Web Properties or otherwise providing information to us, you consent to the processing and transfer of information in and to the U.S.
We provide a work collaboration service from our Web Properties (the “Service”) that permits users to share information with each other by creating, uploading, and attaching information to shared "sheets" stored and accessed through our Web Properties. Our use and distribution of information that you submit or upload to these shared sheets, including any personal information you submit to sheets, is described in our User Agreement (or other subscription agreement you entered into with us, if any). This Policy does not apply to personal information that you uploaded to sheets.
Choice/Opt-Out for Communications from Us
Customers can opt out of being contacted by us by following the opt-out instructions located in the e-mails we may send you, by changing your privacy settings in the Service, or by contacting us at any time.
However, Smartsheet reserves the right to send its existing customers certain communications relating to the Service as part of our commercial relationship with you, such as service announcements and administrative messages, without offering the opportunity to opt out of receiving them. If you do not wish to receive them, you have the option to cancel your account by logging in to your Smartsheet account, accessing the Account Admin menu, and clicking the Cancel Account link.
We post customer testimonials on our website which may contain personally identifiable information such as the customer's name. We obtain the customer's consent prior to posting the testimonial to post their name along with their testimonial. If you want to remove your personal information that is being displayed on our website under public pages please send your request to firstname.lastname@example.org.
Except as provided for in our User Agreement (or other subscription agreement you entered into with us, if any) and this Policy, we do not disclose your personal information to third parties without your consent.
We do not sell any of your personal information to third parties or allow third parties to use it for their marketing purposes. Smartsheet uses third-party intermediaries to manage payment processing. These intermediaries are solely links in the distribution chain, and are not permitted to store, retain, or use the information provided except for purposes of payment processing.
We may share your information with third party vendors, consultants and other service providers who are working on our behalf and require access to your information to carry out that work, such as to process billing, provide customer support, etc. For example, we may use third party data centers to host our Web Properties or to store documents uploaded to our application. We obtain appropriate contractual and technical protections to limit these service providers’ use and disclosure of your personal information.
We release personal information if we believe we must do so to comply with the law, to enforce our User Agreement (or other subscription agreement you entered into with us, if any), or to protect the rights and safety of Smartsheet, our customers, and our individual users.
If Smartsheet is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via a prominent notice on our Web site of any change in ownership that affects your personal information, as well as any choices you may have regarding your personal information.
Cookies and Other Tracking Technologies
These technologies are used on our Web Properties for the purpose of analyzing trends, administration, tracking users’ navigation paths on our Web Properties and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these partners on an individual as well as aggregated basis. We do not tie the information gathered to our Customers’ or Users’ personally identifiable information.
Behavioral Targeting and Remarketing
Links to Other Websites
Our Web Properties include links to other websites whose privacy practices may differ from those of Smartsheet. If you submit personal information to any of those sites, your information is governed by their privacy statements. We encourage you to carefully read the privacy statement of any website you visit.
When we collect personal information directly from you, we follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. When you enter sensitive information (such as a credit card number) on our order forms, we encrypt the transmission of that information using secure socket layer technology (SSL/TLS). We make every reasonable effort to protect your personal information, but no company, including Smartsheet, can guarantee the absolute security of Internet communications. If you have any questions please refer to our Security Policy, or you can contact us at email@example.com.
Additional Policy Information
Our website offers publicly accessible blogs or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your personal information from our blog or community forum, contact us at firstname.lastname@example.org. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.
Single Sign-On (SSO)
You can log into our site using external single sign-on providers such as Google OpenID or SAML conformant identity providers. These services will authenticate your identity and may provide you the option to share certain personal information with us such as your name and email address to pre-populate our signup form.
Updates and Access to Personally Identifiable Information
If your personally identifiable information changes, or if you no longer desire our Service, you may correct, update, amend, delete/remove or deactivate it using the Account Administration settings, contacting an administrator of your organization’s Smartsheet Account or by emailing email@example.com or by contacting us by telephone or postal mail at the contact information listed below. We will respond to your request to access within 5 days.
We will retain your personal information that you provide to us for as long as needed to provide you services or as described in our User Agreement (or other subscription agreement you entered into with us, if any). We will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Smartsheet complies with the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries and Switzerland. Smartsheet has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. To learn more about the Safe Harbor program, and to view Smartsheet’s certification, please visit http://www.export.gov/safeharbor/
Notification of Privacy Statement Changes
We may update this privacy statement to reflect changes to our information practices. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on our Web Properties prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.
Questions regarding our Policy or the practices concerning our Web Properties should be directed here as a security question, or by regular mail addressed to Smartsheet.com, Inc., Attn: Privacy Administrator, 10500 NE 8th Street, Suite 2000, Bellevue WA 98004.