37signals Privacy Policy

We collect the e-mail addresses of those who communicate with us via e-mail, aggregate information on what pages consumers access or visit, and information volunteered by the consumer (such as survey information and/or site registrations). The information we collect is used to improve the content of our Web pages and the quality of our service, and is not shared with or sold to other organizations for commercial purposes, except to provide products or services you've requested, when we have your permission, or under the following circumstances:

INFORMATION GATHERING AND USAGE

COOKIES

DATA STORAGE

37signals uses third party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run our services. Although 37signals owns the code, databases, and all rights to the 37signals applications, you retain all rights to your data.

DISCLOSURE

CHANGES

37signals may periodically update this policy. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your 37signals service primary account holder account or by placing a prominent notice on our site. You retain the right to access, amend, correct or delete your personal information where it is inaccurate at any time. To do so, please contact support@37signals.com.

US-EU SAFE HARBOR AND US-SWISS SAFE HARBOR

We self-certify compliance with http://www.export.gov/safeharbor/

37signals uses annual self-assessments to assure compliance within the US-EU and US-Swiss Safe Harbor Framework as set forth by the US Department of Commerce regarding the collection, use and retention or personal data from the European Union and Switzerland. 37signals has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. To learn more about the Safe Harbor program, and to view 37signals' certification, please visit http://www.export.gov/safeharbor/.

Our privacy policy above serves as our statement of adherence to the US-EU and US-Swiss Safe Harbor Principles. We encourage you to use the contact information below to inform us of any complaints or disputes you may have regarding the use of your personal information. We will thoroughly investigate the matter internally and make every effort to attempt to resolve the issue quickly. If your dispute cannot be resolved by us internally, we agree to dispute resolution with the Better Business Bureau as our third party resolution provider.

PRIVACY COMPLAINTS BY EUROPEAN UNION AND SWISS CITIZENS

In compliance with the US-EU and US-Swiss Safe Harbor Principles, 37signals commits to resolve complaints about your privacy and our collection or use of your personal information. European Union or Swiss citizens with inquiries or complaints regarding this privacy policy should first contact 37signals at support@37signals.com or by mail at 37signals, 30 North Racine Avenue #200, Chicago, IL 60607 USA.

37signals has further committed to refer unresolved privacy complaints under the US-EU and US-Swiss Safe Harbor Principles to an independent dispute resolution mechanism, the BBB EU SAFE HARBOR, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by 37signals, please visit the BBB EU SAFE HARBOR web site at www.bbb.org/us/safe-harbor-complaints for more information and to file a complaint.

QUESTIONS

Any questions about this Privacy Policy should be addressed to support@37signals.com or by mail at: 37signals, 30 North Racine Avenue #200, Chicago, IL 60607 USA