Snapshot 42249
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to content 1. Scope and roles This policy applies to information we handle through our website, applications, communications, and services. When a Sherpa customer installs our software on its website, we generally process visitor information on that customer's behalf. The customer controls how and why that information is collected and should explain its practices in its own privacy policy. If your question concerns information collected on one of our customers' websites, contact that customer first. We will assist our customer with verified requests as required by applicable law and our agreement with that customer. 2. Information we collect Information you provide Account and profile information, such as your name, email address, profile image, authentication method, and workspace membership. Customer content and configuration, including website domains, experiment and variant settings, analytics queries, integration settings, and information you choose to upload or submit through the service. Communications and lead information, such as your name, work email, website, support messages, demo requests, and audit submissions. Payment and transaction information. If we charge for services, our payment providers may process billing details on our behalf. We do not store full payment-card numbers. Information collected automatically Device and network information, including IP address, approximate location derived from IP, browser type, device type, operating system, and user agent. Usage information, such as pages and URLs visited, referrers, timestamps, clicks, scrolling, form and booking interactions, feature usage, errors, and experiment assignments. Session and replay information. Sherpa may record page structure and interactions to provide session replay and analytics. Our recorder is configured to mask values entered into input fields, but customers remain responsible for configuring their websites and use of Sherpa appropriately. Cookies and similar technologies, including authentication cookies and identifiers stored in local or session storage to maintain sessions, recognize browsers, measure activity, and assign experiments consistently. Information from other sources We may receive information from authentication providers, integrations you connect, service providers, business partners, and publicly available sources. Our website may use analytics and business-development services that help us understand visits and identify organizations that may be interested in Sherpa. 3. Google sign-in If you sign in with Google, we receive basic account information that Google makes available with your permission, such as your email address, name, profile image, and Google account identifier. We use this information to authenticate you, link sign-in methods, secure your account, and display your profile. Signing in does not give Sherpa access to your Gmail, Google Drive, calendar, or other Google content. Sherpa's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. 4. How we use information We use information to: Provide, operate, maintain, and secure Sherpa. Authenticate users, manage accounts, and provide customer support. Measure website and product activity, analyze funnels, provide session replay, and run and evaluate experiments. Personalize and improve our services and develop new features. Process demo requests, audits, transactions, and other requests. Send service messages and, where permitted, product or marketing communications. You may unsubscribe from marketing email at any time. Detect fraud, abuse, security incidents, and violations of our terms. Comply with law, enforce agreements, and protect rights, safety, and property. 5. How we disclose information We may disclose information: To service providers that support hosting, storage, authentication, communications, analytics, security, customer support, payments, and other business operations. To our customers when we process analytics and visitor information on their behalf. Through integrations that a customer or user chooses to connect. Those third parties process information under their own terms and privacy policies. For legal and safety reasons when we believe disclosure is necessary to comply with law, respond to lawful requests, protect people or property, or investigate abuse. In a corporate transaction involving a merger, financing, acquisition, reorganization, or sale of assets, subject to customary protections. With your direction or consent. We do not sell personal information for money. We may disclose identifiers and internet activity to analytics and business-development providers. Some privacy laws may define certain disclosures for targeted advertising or cross-context behavioral advertising as "selling" or "sharing." 6. Cookies and your choices You can control cookies through your browser and can clear local or session storage. Blocking these technologies may prevent authentication or other parts of Sherpa from working correctly. You can unsubscribe from marketing email using the link in the message or by contacting us. Depending on where you live, you may have the right to opt out of disclosures treated as a sale or sharing of personal information. To make that request, email us at [email protected]. 7. Data retention We retain information for as long as reasonably necessary to provide the services, fulfill the purposes described in this policy, comply with legal and contractual obligations, resolve disputes, and enforce agreements. Retention depends on the type of information, how it is used, customer instructions, and applicable law. Information may remain in backups for a limited period after deletion from active systems. 8. Security We use administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and notify us if you believe your account has been compromised. 9. International data transfers We and our service providers may process information in the United States and other countries whose privacy laws may differ from those where you live. Where required, we use appropriate safeguards for international transfers. 10. Your privacy rights Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; or appeal a decision about your request. You may also have the right to complain to a local data-protection authority. To exercise a right, email [email protected]. We may need to verify your identity and authority before completing a request. If Sherpa processes information for one of our customers, we may direct your request to that customer. 11. Children Sherpa is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us so we can take appropriate action. 12. Changes to this policy We may update this policy as our services or legal obligations change. We will post the updated version here and revise the effective date. If changes are material, we may provide additional notice as required by law. 13. Contact us Questions or requests about this policy can be sent to: Everest Labs, Inc. Email: [email protected]