// Privacy Policy

Introduction

Affiro is a product of Sandgarden, Inc. (“Sandgarden,” “we,” “us”).

We understand that you are aware of and care about your own personal privacy interests, and we take that seriously. This Privacy Policy describes Sandgarden's policies and practices regarding its collection and use of your personal data through the Affiro website and service (affiro.com, CLI and browser extensions), and sets forth your privacy rights. We will update this Privacy Policy from time to time as we undertake new personal data practices or adopt new privacy policies.

Data Protection Officer

Sandgarden is headquartered in New York, NY, in the United States. Sandgarden has appointed an internal data protection officer for you to contact if you have any questions or concerns about Sandgarden's personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to Sandgarden's data protection officer:


Sebastian Mankowski

Sandgarden, Inc.

privacy@sandgarden.com

Information we collect


Category What it includes Why we need it
Contact and Account Email address, name on account creation To identify you alongside your documents, allow updating your previous documents
Document Content Google docs pages, manually submitted document content To verify the document contents matches your typing. This content is encrypted such that employees at Sandgarden cannot access it.
Device Information IP Address To affiliate unauthenticated requests with each other, prevent service degradation by hyperactive or malicious users

How we use it

Our information collection is the product; we associate users with documents and document signatures, and all information we gather serves to enable this association.

Sharing and subprocessors

The personal information Sandgarden collects is stored in databases and storage hosted by third parties located in the United States. We share personal information only with the service providers that help us deliver Affiro, who may use it only to provide their services to us:


Subprocessor Purpose
Amazon Web Services (AWS) Webserver and database hosting; US-based

Data storage and retention

Your personal data is stored by Sandgarden on its servers, and on the servers of the cloud-based services Sandgarden engages, located in the United States. We keep account information and documents associated with assignments until said documents are deleted or the account itself is. Documents created that are not accessed for a month are deleted automatically. We may keep limited records longer where needed to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements. All personal data that Sandgarden controls may be deleted upon verified request from data subjects or their authorized agents. For more information on where and how long your personal data is stored, and on your rights of erasure and portability, contact us at privacy@sandgarden.com.

Changes and contact

If we make material changes to this Privacy Policy, we will update the effective date above and, where appropriate, notify account holders by email or in the product.

If you have questions, concerns, complaints, or would like to exercise your rights, please contact us at:


Sandgarden

224 W 45th St Ste 500 #2248

New York, NY 10001

privacy@sandgarden.com