Data Privacy Framework Statement

Cobrowse.io LLC (“Cobrowse”, “we”, “our” or “us”) have self-certified to comply with the EU-US Data Privacy Framework (“EU-US DPF”), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (collectively “DPF Principles”) as set forth by the US Department of Commerce.

If there is any conflict between the terms in this Data Privacy Framework Statement and the DPF Principles, the DPF Principles shall govern. To learn more about the DPF Principles and to view MongoDB’s certification, please visit https://www.dataprivacyframework.gov/.

Scope.

Cobrowse provides co-browsing solutions and associated services to businesses all over the world, acting as a data processor on behalf of those businesses. Cobrowse’s certifications to the DPF Principles apply to the personal data that these businesses transfer to us from the European Economic Area (“EEA”), the UK, or Switzerland for the provision of our services, except where any of our agreements with those businesses stipulate a different transfer mechanism recognized by the relevant authority (e.g. standard contractual clauses). The personal data types that our customers put into our services is at their discretion and we only process it in accordance with customer instructions.

Third Party Subprocessors.

Cobrowse uses third party subprocessors to help us provide our services and those subprocessors may process personal data. Cobrowse remains responsible and liable under the DPF Principles for our third party subprocessors, unless Cobrowse proves that it is not responsible for the event giving rise to the damage.

Inquiries, Complaints and your Rights.

If you have any questions about this Data Privacy Framework Statement or wish to make a complaint relating to our obligations under the DPF Principles, we encourage you to contact us at privacy@cobrowse.io.

Cobrowse commits to refer unresolved complaints concerning our handling of personal data received in reliance on the DPF Principles to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

The Federal Trade Commission has jurisdiction over Cobrowse’s compliance with the DPF Principles. Individuals may have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms above. For more information, please see Annex I of the DPF Principles.

Subject to applicable law, you have the right to access or correct your personal data, or delete your data from our systems. You may also choose to limit our use and disclosure of your personal data. You may make such requests by contacting us at privacy@cobrowse.io.

Under certain circumstances, Cobrowse may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.