Privacy Policy

Powtoon Ltd. is a company incorporated and operating in the United Kingdom. We also have Powtoon affiliates in Israel and the United States. This privacy policy governs the collection and use of your personal information by the Powtoon Group.

If you have a question regarding our Privacy Policy, please contact us at privacy@powtoon.com or send a written letter to: Powtoon Ltd., 28 Church Road, Stanmore HA7 4XR, United Kingdom.

We collect different types of personal information, depending on the way you use our website:

1. You can access our website anonymously without logging in or purchasing a subscription, in which case we will not ask you to provide us with any personal information.
2. When you sign up for a free subscription and become a member of our website, we will ask you to provide us with certain personal information in order to create your account and enable you to use our website. This information will include, for example, your name, email address, job description, and the reason you chose to use our website.
3. When you decide to purchase a subscription, we will require your payment and billing details in order to process your purchase. This is in addition to the personal information we normally require as part of the sign-up process.

We also collect some inferred data which is generated when you log in to our website (either as a free or paid subscriber). This includes, for example, your IP address, the type of device you use to log in to our website, your browser type, and operating system.

If you subscribed to our services via a social media account (for example, through your Facebook account), we may also receive some personal information from the social media provider, depending on the terms and conditions you agreed to with the provider. Please refer to the specific provider's privacy policy in order to better understand what type of personal information the provider shares with us.

Special rules apply for student accounts. Please refer to details in the section "Privacy of Children" below.

We keep your personal information for as long as you continue to be a subscribed user on our website, and until you indicate that you no longer wish to continue to use our website.

The information we collect will only be used in the following ways:

1. To process transactions: The main reason we ask for the above-mentioned personal information is in order to process the transaction conducted with you; i.e. to provide you with the purchased product or the service that you requested from us.
2. To improve our website: We continuously strive to improve the Powtoon website features based on the information and feedback we receive from you, including relevant solution pages, showcase pages, etc.
3. To send you information and updates if, upon registration with us, you explicitly approved our sending periodic emails to the email address you provided us with. These emails will contain information and updates pertaining to your subscription, and related to the services we provide you with.

Even if you consented to receiving our periodic emails, you can at any time opt out of receiving these emails by either:

1. Clicking the “Unsubscribe and Manage your communication & personalization settings" link which appears at the bottom of every email to edit your settings.
2. In your account: access the Communication Settings Center and opt out of receiving any such periodic emails from us.

We also use the personal information you provide us with - when signing up and when using our website - for the purpose of personalization. We collect your personal information and analyze it in order to better understand your preferences and needs. For example: based on your job description, we can match use cases and tutorials relevant to your field, and also refrain from sending you materials we think will not interest you.

You do not have to agree to the use of your personal information for personalization and at any time you can opt out of such personalization via your account settings.

We implement a variety of security measures to maintain the safety of your personal information when you enter or submit any personal details to Powtoon.

Powtoon uses secure servers and all communication between your device and Powtoon's servers is encrypted using only methods labeled secure by industry experts. All information, including but not limited to credit card details and personal information, is transmitted using Transport Layer Security (TLS 1.2 and up) technology and stored encrypted in our secure Databases.

Payment information is transmitted directly from your web browser to the system of our PCI DSS compliant payment processing and subscription billing provider and is never stored on Powtoon's own IT systems.

Privileged Powtoon administration staff with access to your information are required by our information Security Policies and by contract to keep confidential all information on our systems. In the event of a security breach, we will take all reasonable action to minimize any harm and all in accordance with our data breach response plan.

Yes.
Cookies are small files that our website transfers to your computer, enabling Powtoon to recognize your browser and remember certain information about your browser and your login information (for example: what type of browser you used to log in to our website, the date and time you logged in to our website, your preferred browser language, etc.).

We also use cookies to help us remember and process the items in your shopping cart, save your preferences for future visits, and compile aggregated data about site traffic and site interactions, so that we can offer better website experiences and tools in the future.

We store such cookies for a period of 14 days, after which such cookies are deleted.

In addition, we contract third party service providers to assist us in gaining a better understanding of the way users visit and use our website. We do this through the use of such third party service providers' cookies, which are placed on your browser when you log in to our website. Such providers can then analyze the data included in such cookies to provide us with valuable insights, such as the average number of visitors to the website or the preferred browser language of most users.

Visit http://www.aboutcookies.org for a guide on how to control and delete cookies on a wide range of web browsers and operating systems.

We are assisted by trusted third parties to operate our website, to conduct our business, and to provide you with our services. Such third party providers include billing companies, website infrastructure management, and analytics service providers. As part of the provision of their services to us, we may transfer some of your personal information to them, inasmuch as such personal information is necessary for them to perform such service. For example: your credit card details will be analyzed through our billing software which is provided by a third party in order for us to provide you with an invoice when you make a purchase on our website.

These third party providers are located in:

1. The European Union;
2. Israel – which has been granted an adequacy decision by the European Commission, meaning that its data privacy legislation is considered to provide an equivalent level of protection to personal data as provided within the European Union and thus data transfers to Israel do not require an additional transfer mechanisms;
3. The United States – Data processing agreements are provided to sub-contractors in the US, which include the Standard Contractual Clauses formulated by the European commission to assure that adequate safeguards are implemented to secure any data transfer.

We also entered into contracts with such third party providers in order to ensure that the personal information we provide them regarding our users is kept confidential and secure.

In certain circumstances, we may also disclose your personal information to outside parties. This could happen if:

1. We believe that, under the specific circumstances, releasing such personal information will be appropriate in order to comply with any European Union or Member State law applicable to us;
2. We want to protect our legitimate interest and in order to do so we would need to disclose your personal information, and only after we made sure that we cannot protect our interest without disclosing your personal information;
3. We need to protect your or another individual’s vital interests.

Occasionally, and at our discretion, we may include or offer third party products or services on our website. These third party websites have separate and independent privacy policies and should be researched independently by anyone wishing to use their services. Although we are not responsible for the content and activities of such third party websites, we do seek to protect the integrity of our website, and would thus welcome your feedback regarding such websites if you have any concerns you wish to share with us.

Powtoon operates a rigorous information security management system and protects data according to industry best practices. We have implemented, and work to constantly improve, a wide array of processes, procedures, and technical controls such as encryption, firewalls, and segregation of networks. All this is done to maintain the confidentiality, integrity, and availability of all our users' data.

We are proud that Powtoon is a tool widely used in schools by children of all ages. As such, we are committed to safeguarding each child’s personal information, in compliance with but not limited to the following laws and regulations:

• The Children's Online Privacy Protection Act (COPPA)
• The Family Educational Rights and Privacy Act (FERPA)
• The New York State Education Law 2-d

To protect children's privacy, their accounts are labeled internally at Powtoon as student accounts and are subject to all the requirements of the above laws. Specifically, with regards to personal information, our approach is to not collect or store personal information belonging to children that created a student account.

Student accounts are created when children sign up for our service in one of the following ways:

• By using their clever.com account
• By accepting an invitation from a teacher to join a Powtoon classroom group
• By signing up on our dedicated student signup page
• By signing up on our dedicated education signup page and choosing the student option in the signup form
• By accessing Powtoon through their school's learning management system (for example: Canvas)

Student account data is used exclusively to deliver Powtoon's services. No commercial use of student data is made.

To student accounts with email addresses (Google G Suite for Education), Powtoon will send only transactional emails that provide notification for events such as the completion of a video rendering process.

All transactional notifications from Powtoon to student account holders without email addresses take the form of on-site notifications. Powtoon refrains from sending any marketing or other non-transactional email messages to student account holders.

Videos and presentations created by student account holders and which are published for viewing on the Powtoon platform, are published in private mode by default. These videos and presentations are not added to the Powtoon site map and not made available for indexing by search engines.

Many schools use Google G Suite for Education to issue "school use only" Google accounts to their students. These students may use their Google account to sign up for Powtoon on the education signup page. Powtoon will protect such accounts from disclosure and will use the email address associated with such accounts only for sending transactional email messages.

Data of children is, like all other data Powtoon controls, safeguarded according to industry standards and best practices. For more details, see Data Protection above. Furthermore, we make every reasonable effort to prevent data breaches and have a documented security incident management policy and procedure.

As we do not collect personal information from students, the risk of personal student information being extracted from our system is very low. If you want to be informed in the event of a data breach that affects student account data, you can register your institution to our breach notification list by emailing edu-privacy@powtoon.com with the subject line "registration to breach notification list". In this email, please include the name of your institution, your name and role, together with your contact information. In the unlikely event that such a breach will occur, we will inform all registered institutions within 72 hours of detecting the breach.

This privacy policy was last modified on October 12, 2020. If we update this privacy policy in a manner which changes how we collect or use your personal information, the types of personal information we collect or use, or the purposes for such collection or use of personal information, we will ask for your renewed consent. This will be conducted in two steps:

1. We will send a notification to the email address you provided us with upon registration. In this notification, the new proposed changes will be explained so that you may provide us with your consent;
2. Following the email notification, we will ask you to provide your consent to the new changes when you next log in to our website.

If you believe that your right to data protection and privacy has been infringed by us in any way, you may contact the relevant supervisory authority in your place of residence.

You may ask for a copy of your personal information held by us. If you wish to do so, please contact us at privacy@powtoon.com and we shall provide you with an electronic copy of your personal information as soon as practicable and after we are able to verify the validity of your request and your identity. We will not be able to provide you with such access if this would adversely affect the rights and freedoms of others, or where the collation and presentation of such data would involve disproportionate cost to Powtoon.

Should you require any additional copies, we may charge you a fee which shall not exceed the cost for generating copies.

Based on your request, we shall also provide you with the following information:

1. The types of personal data concerned;
2. The entities or individuals with whom we shared your personal information and whether they are located in countries outside of the European Union;
3. The duration of time we keep your personal information. If that is not possible, the criteria used to determine such a period.

If you decide that you no longer wish to be a member of our website and would like us to delete all of your personal information, please contact us at privacy@powtoon.com

We will not be able to delete your personal information if it is required:

1. For the fulfilment of any contractual obligations we may have to you;
2. For the exercise of the right to freedom of expression and information;
3. In order to comply with a legal obligation required from us by European Union law or the law of the Member State of the European Union in which we operate;
4. For reasons of public interest;
5. For the establishment, exercise or defense of a legal claim.

Please be advised that following such deletion we will not be able to provide you with our services, and should you wish to rejoin our website you will need to complete a new registration process.

At any time during your usage of our platform, you may review, amend, or update the information you provided us with by logging in to the platform and accessing your account and profile settings at https://www.powtoon.com/account/info/

You have the right to ask us to provide a copy of your personal information to another provider, in the event that you wish to move your account to them.

If you wish to have such a copy, please contact us at privacy@powtoon.com and we shall provide it to you in an electronic and machine readable form so that you may transmit such information to another entity.

If it is technically feasible and should you wish, we will transfer such information directly to such another entity at your request.

Please be advised that we will not be able to provide you with such a copy or transfer such information to such an entity if it would adversely affect the rights and freedoms of others.