Privacy Policy

Rapidoc maintains strong commitment to protecting user privacy through this Privacy Policy. This policy represents a fundamental aspect of our Service Agreement and covers information handling procedures executed by Rapidoc ("our organization," "we," "us") concerning application users ("end-users," "you") as specified in our Service Agreement.

This policy incorporates mandatory provisions regarding EU GDPR regulations and California CCPA legislation where they apply.

Terms using capital letters without definitions herein carry meanings from our Service Agreement.

Summary of Privacy Practices

Information Disclosure Requirements

End-users face no legal requirement to disclose Personal Data (specified below) to our organization. Nevertheless, certain application functionalities require collecting specified Personal Data as outlined herein. Refusing such information provision may restrict our ability to deliver complete services.

User Age Restrictions

Application services target end-users aged 16+ or meeting jurisdictional minimum age for Personal Data processing consent. Younger individuals cannot utilize services or disclose Personal Data to us.

Legal Privacy Protections

Relevant laws may provide rights enabling Personal Data examination, modification, erasure, or processing restriction. Reference "Legal Privacy Protections" below for comprehensive details.

Data Collection Procedures

Rapidoc gathers diverse information categories when end-users utilize, download, or engage with application software.

Personal Data Classification

"Personal Data" means information identifying individuals or reasonably usable for identification under applicable legal frameworks, encompassing digital identifiers like IP addresses, names, emails, etc.

Technical Data Classification

"Technical Data" encompasses aggregated, non-identifying information unable to trace back to individuals.

Data Combination Treatment

Combining Personal Data with Technical Data results in Personal Data classification for the combined information.

GDPR Processing Legal Foundation

Information collection types, processing approaches, and utilization purposes are detailed below. GDPR mandates establishing clear processing legal foundations:

• Legitimate Interest Basis: Certain Personal Data processing during application usage relies on legitimate business interests
• Contractual Basis: Contact information processing fulfills contractual responsibilities (contact details, etc.)
• Consent Basis: Specific Personal Data processing depends on end-user consent where required

GDPR designates us as Personal Data Controller for information described herein.

System and Device Information Collection

Application software interaction triggers collection of Internet Protocol addresses ("IP"), MAC addresses, plus device technical information transmission.

Collection encompasses device categories, operating systems, browser specifications, language configurations, access timing, geographic approximations, referral URLs directing to applications.

Standard IP anonymization procedures follow collection; however, until anonymization achieves full GDPR compliance with applicable legal standards, such information remains Personal Data. IP collection ensures essential application service delivery.

Information utilization supports application management and security. Furthermore, legitimate purposes include installation auditing/monitoring, security vulnerability and fraud identification, business activity management including partner opportunity evaluation.

Search Engine Integration Features

Application usage potentially modifies browser default search engine configurations. Resulting search information processing includes query terms, source URLs, query volumes, plus associated activity information.

Following service delivery and fraud prevention processing, we separate query terms from identifying elements; however, residual identifying characteristics maintain Personal Data status. Information enables application features including search-based personalized advertising. Processing relies on installation consent provision.

Communication Channel Information

Voluntary contact via available channels (email, etc.) requires contact information provision including names and email addresses. Information utilization and communication record maintenance supports inquiry responses, assistance provision, requested service execution. Communication histories support future requirements including claims processing, assistance activities, service enhancement.

California Privacy Act Requirements

Personal Information Category Collection and Sharing

CCPA excludes from Personal Information definition:

• Government record publicly available information
• De-identified or aggregated consumer information

CCPA compliance requires detailing collected Personal Information categories:

• Identifier Category: Legal names, aliases, postal addresses, unique personal identifiers, online identifiers, Internet Protocol addresses, email addresses, account names, Social Security numbers, driver's license numbers, passport numbers, similar identifiers → COLLECTED
• Customer Records Category (Cal. Civ. Code § 1798.80(e)): Names, signatures, Social Security numbers, physical characteristics, addresses, telephone numbers, passport numbers, driver's licenses, state identification, insurance policies, education, employment, employment history, bank accounts, credit cards, debit cards, financial information, medical information, health insurance information → NOT COLLECTED
• Protected Classifications Category: Age 40+, race, color, ancestry, national origin, citizenship, religion, creed, marital status, medical conditions, physical/mental disabilities, sex/gender/gender identity/gender expression/pregnancy/childbirth/related medical conditions, sexual orientation, veteran/military status, genetic information → NOT COLLECTED
• Commercial Information Category: Personal property records, purchased/obtained/considered products/services, purchasing/consuming histories/tendencies → NOT COLLECTED
• Biometric Information Category: Genetic/physiological/behavioral/biological characteristics, activity patterns for template extraction/identifier creation, fingerprints/faceprints/voiceprints/iris scans/retinal scans/keystroke patterns/gait patterns/physical patterns, sleep/health/exercise information → NOT COLLECTED
• Network Activity Category: Browsing histories, search histories, website/application/advertisement interaction information → COLLECTED
• Geolocation Category: Physical locations, movements → NOT COLLECTED
• Sensory Information Category: Audio/electronic/visual/thermal/olfactory/similar information → NOT COLLECTED
• Employment Information Category: Current/past employment histories, performance evaluations → NOT COLLECTED
• Education Records Category (FERPA): Student education records from educational institutions/authorized parties including grades/transcripts/class lists/schedules/student identification codes/financial information/disciplinary records → NOT COLLECTED
• Inference Category: Preference profiles, characteristics, psychological trends, predispositions, behaviors, attitudes, intelligence, abilities, aptitudes → NOT COLLECTED

Information Sharing Framework

End-user Personal Data selling, trading, or renting to external parties does not occur. Limited sharing happens for specific purposes:

• Regulatory Compliance: Personal Data disclosure for applicable law/regulation/internal policy compliance
• Legal Defense: Personal Data sharing for legal right establishment/protection, legal proceeding responses, safety assurance for ourselves/end-users/third parties including law enforcement cooperation, intellectual property protection
• Corporate Activities: Business sales/mergers/asset acquisitions involving relevant party data sharing; Privacy Policy rights/obligations transfer to affiliates/acquiring entities
• Service Provider Relations: Trusted partner/service provider Personal Data disclosure for service delivery necessities including personalized advertising
• Operational Support: Collected online identifier sharing supporting business operations, payment processing, fraud/security threat/technical issue detection for application software

Recent Business Sharing: Past 12 months included these Personal Information category shares for business purposes:

• Identifier Category
• Network Activity Category

Behavioral Advertising: Cross-contextual behavioral advertising data sharing occurs. End-users possess opt-out rights for Personal Information "sharing" for "cross-contextual behavioral advertising" (interest-based/targeted advertising). Exercise rights via Self-Regulatory Online Behavioral Advertising Programs: Digital Advertising Alliance (DAA): https://www.aboutads.info/choices and https://www.aboutads.info/appchoices, Network Advertising Initiative (NAI): https://www.networkadvertising.org/choices

Legal Privacy Protections

Privacy legislation varies jurisdictionally, providing different Personal Data rights including access, deletion, processing opt-out, others.

EEA and California residents receive GDPR and CCPA rights respectively:

• Information Transparency: Personal Data processing understanding ensuring fairness/transparency per this document
• Data Access: Processing confirmation requests and, under conditions, processed information copy acquisition
• Erasure Requests: Personal Data deletion requests under specific circumstances; note non-absolute rights - denial possible for legal compliance/claim defense necessity
• Processing Objections: Personal Data processing objections
• Processing Limitations: Personal Data processing restriction requests in certain situations
• Data Correction (EEA residents): Inaccurate/incomplete Personal Data correction/updating requests
• Data Transfer: Third-party Personal Data transfer requests when user-provided information is automatically processed based on consent/contracts
• Consent Revocation: Consent withdrawal for consent-based personal data processing; withdrawal via browser settings or Self-Regulatory Online Behavioral Advertising Programs: Digital Advertising Alliance (DAA): https://www.aboutads.info/choices and https://www.aboutads.info/appchoices, Network Advertising Initiative (NAI): https://www.networkadvertising.org/choices
• Anti-Discrimination (California residents): No discriminatory treatment for rights exercise under applicable laws; no goods/services denial, differential pricing, inferior service quality for legal rights assertion

. Rights exercise requires contacting us at: [email protected].

Information request/rights exercise fulfillment inability requires reason explanation and option notification including supervisory authority complaint filing (EEA residents). Reasonable identity verification may be required per applicable laws.

External Service Exclusions

This Privacy Policy excludes third-party services, providers, website content. External entity data protection policies may differ from ours without our control. We bear no responsibility for third-party privacy practices; strongly recommend reviewing external service privacy policies.

Minor Data Protection

Application software excludes minors, particularly under-16 individuals per legal definitions. We avoid knowingly collecting/seeking minor information. Discovering minor Personal Data processing triggers immediate system data removal.

Security Measures and Data Storage

Privacy remains paramount; Personal Data protection from unauthorized access/use/disclosure is ensured. Implemented physical/technical/administrative security measures comply with regulations and industry practices.

Personal Data server storage minimization measures are implemented. Data breaches potentially compromising Personal Data trigger reasonable end-user and authority notification efforts per legal requirements.

Data retention supports application delivery, business needs, legal obligation satisfaction including dispute resolution and contract enforcement per laws or until Personal Data deletion requests per previous statements.

International Data Processing

Personal Data processing/storage may occur in European Economic Area (EEA), United States, other international locations. Necessary Personal Data protection measures are implemented per applicable data protection laws.

Policy Modifications

This Privacy Policy undergoes periodic revision per applicable regulation requirements. We encourage periodic policy review for modification awareness. Latest updates appear in "Revision Date" sections above. Significant changes trigger notification efforts per legal requirements.

Contact Information

Privacy Policy questions/requests: [email protected]