VeryBusy, Inc., 400 South 4th Street, Ste 410, PMB 90563, Minneapolis, MN 55415, US (“Company,” “us,” “we,” or similar) offers the information and VeryBusy software application available via our website located at verybusy.io (the “Service”).

This Privacy Policy describes Our policies and procedures regarding the online and offline collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

By providing us with personal information or using our Service, you expressly consent to the information-handling practices described in this Privacy Policy. If you do not agree with this Policy, please do not use our Service or provide us with your information.

While we always aim to provide complete and transparent information about how we process your personal information, we reserve the right to amend or update this Privacy Policy from time to time or to create additional policies in order to accurately reflect changed circumstances or new legal requirements. As a result, it is important that you read this Privacy Policy closely so that you are fully aware of how and why we are using your personal information.

To assist us in ensuring that we can provide the most accurate information possible, we ask that you check this Privacy Policy for updates. We also ask that where we have an ongoing relationship with you and any of the data you have provided becomes no longer accurate that you keep us informed of this so we can amend our records accordingly.

VeryBusy handles two different kinds of personal information, and this Policy covers one of them.

Information we decide about (covered by this Policy). When you sign up for and use VeryBusy, we collect information about you and your account: your contact details, billing information, support conversations, and how you use the Service. We determine how this information is used, which makes us the controller of it. This Privacy Policy describes what we collect, why, and what rights you have.

Information our customers decide about (covered by our DPA). When a customer uploads projects and invites collaborators to a Workspace, the information in that Content belongs to the customer, not to us. This includes the names and email addresses of collaborators, the images and files uploaded, and the comments, revisions, and approvals recorded in the Workspace. We process that information only on the customer’s instructions, which makes us a processor of it. How we handle it is governed by our Data Processing Agreement, not by this Policy.

If you are a collaborator who received an invitation to a Workspace and have questions about how your information is being used, the customer who invited you is the right point of contact. We will direct requests we receive about Workspace Content to the relevant customer.

For the purposes of this Privacy Policy, “personal information” is any information that identifies, relates to, or can be used to contact a particular individual or household. The types of personal information we collect includes the following categories:

We collect this information when you access, use, or navigate our Service, fill in forms on our Service, request information via our Service, communicate with us (including by phone, email, chat, or otherwise), interact with any chatbot or similar features available in our Service, visit or engage with our social media pages, participate in surveys or sponsored activities, or otherwise provide us with personal information. We also use various technologies to monitor how users of our Service interact with our Service so that we may improve the Service and prevent fraud or other security risks.

Please note that we may aggregate or anonymize the foregoing types of data such that they are no longer capable of identifying you, in which case they are no longer considered “personal information.”

Device and usage information is collected automatically when using the Service.

Usage Data may include information such as Your Device’s Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

We use cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

We use both Session and Persistent Cookies for the purposes set out below:

Where required by law, We ask for Your consent before placing non-essential cookies, using a consent banner presented when You first visit Our website. You can change or withdraw Your choices at any time through the cookie settings link on Our website. For more information about the cookies we use and your choices regarding cookies, please visit our Cookie Policy.

Information from Social Media

If you interact with us on any social media platform: (i) depending on your social media privacy settings, the personal information that you submit on the social media platform may be read, collected, or used by us as described in this Policy, and (ii) where we respond to any interaction with you on social media, your account name/handle may be viewable by any and all members or users of our social media accounts. Social media platforms operate independently from us and we are not responsible for the personal information that you choose to submit or link on any social media platform. We encourage you to review the privacy policies and settings of any social media platform with which you interact to help you understand their privacy practices.

The Company may use your Personal Information for the following purposes:

We do not use Your personal information, Your Content, or data about how You use the Service to train, develop, or improve any artificial intelligence or machine learning model, whether our own or a third party’s. This commitment is set out in full in our End User License Agreement under “No AI Training.”

We may disclose Your personal information in the following situations:

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes such as to strengthen the security or to improve the functionality of Our Service, or where We are legally obligated to retain this data for longer time periods.

Canceling a subscription does not delete Your account or Your Content. Your account remains in place with limited access, and You may reactivate a subscription at any time to restore full access.

We delete Content and account data after six (6) months of account inactivity. Accounts with an active paid subscription are not considered inactive. You may export Your Content at any time, and You may request earlier deletion by contacting Us. We may retain certain records beyond this period where We are required to do so by law, for example billing and tax records, or where necessary to resolve disputes or enforce our agreements.

Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to and maintained on computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.

Where we process personal data on behalf of a customer rather than for our own purposes, international transfers are governed by our Data Processing Agreement, which incorporates the Standard Contractual Clauses and, for UK transfers, the UK International Data Transfer Addendum.

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred.

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Service Providers have access to Your Personal Data only to perform their tasks on Our behalf.

We use Your Personal Data to send You communications relating to the Service. These include:

You may opt out of promotional communications at any time by following the unsubscribe link or instructions provided in any such email We send, or by contacting Us. Please note that You cannot opt out of account and platform notifications while You maintain an account, as these are necessary to provide the Service.

We engage a small number of third-party service providers to help us operate and improve the Service. These include providers of cloud hosting and storage, image processing and delivery, email delivery, customer support and in-product messaging, product analytics, application monitoring, advertising, and payment processing.

Our current service providers and subprocessors, what each one does, and where each is located are listed at Subprocessors. We maintain that page as the single source of truth and update it whenever we add or replace a provider.

Before engaging a service provider that will process personal information on our behalf, we review its security and privacy practices and put a written agreement in place requiring appropriate data protection obligations. Service providers have access to personal information only to perform their tasks on our behalf.

Payments. We do not store or collect Your payment card details. That information is provided directly to our third-party payment processor, whose use of Your personal information is governed by their own privacy policy.

The Company uses remarketing services to advertise on third-party websites to You after You have visited our Service. We and Our third-party vendors use cookies and non-cookie technologies to help Us recognize Your Device and understand how You use our Service so that We can improve our Service to reflect Your interests and serve You advertisements that are likely to be of more interest to You.

These third-party vendors collect information about Your activity on Our Service to enable Us to:

Some of these third-party vendors may use non-cookie technologies that may not be impacted by browser settings that block cookies. Your browser may not permit You to block such technologies. You can use the following third-party tools to decline the collection and use of information for the purpose of serving You interest-based advertising:

We may disclose information, such as hashed email addresses (if available) or other online identifiers collected on Our Service, with these third-party vendors. This allows Our third-party vendors to recognize and deliver You ads across devices and browsers. To read more about the technologies used by these third-party vendors and their cross-device capabilities, please refer to the Privacy Policy of each vendor listed below.

The third-party vendors We use are:

The European Union’s General Data Protection Regulation and the United Kingdom’s version of the same (collectively, the “GDPR”) afford certain rights to individuals in the European Economic Area (“EEA”).

We will process different types of information under different lawful bases under the GDPR depending on the nature of the information and your relationship with us. The following table describes how we plan to use your personal information and our lawful basis for doing so. We may process your personal information on more than one basis depending on the specific purpose for which we have collected or are otherwise using your information.

Transfers from EEA, Switzerland, or UK. If we transfer personal information from the EEA, Switzerland, or UK to the United States or any other country, we will implement appropriate legal mechanisms to ensure an adequate level of personal data protection consistent with the GDPR’s requirements. For example, if the recipient country has not received an Adequacy Decision from the European Commission (such as the United States), we will rely on Standard Contractual Clauses (SCCs) that have been approved by the European Commission as the lawful mechanism for such transfers. Further, we will enter into appropriate data processing agreements with all non-EU (sub)processors that contain SCCs and define data protection standards to be employed by each (sub)processor.

If you are in the EEA, you have the following rights. Note, however, that not all rights apply in all circumstances.

You may exercise Your rights of access, rectification, erasure and objection by contacting Us. Please note that we may ask You to verify Your identity before responding to such requests. Where required by the GDPR, We will respond to Your request without undue delay and in any event within one (1) month of receipt. Where necessary, taking into account the complexity and number of requests, this period may be extended by a further two (2) months; if so, We will inform You of the extension and the reasons for the delay within one (1) month of receipt of Your request.

You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.

You can opt out of receiving ads that are personalized as served by our Service Providers by following our instructions presented on the Service:

The opt-out will place a cookie on Your computer that is unique to the browser You use to opt out. If you change browsers or delete the cookies saved by your browser, You will need to opt out again.

Your mobile device may give You the ability to opt out of the use of information about the apps You use in order to serve You ads that are targeted to Your interests:

You can also stop the collection of location information from Your mobile device by changing the preferences on Your mobile device.

Our Service does not respond to “Do Not Track” signals, and such signals will not impact the operation of the Service. This applies to browser-based Do Not Track requests generally, including as contemplated by the California Online Privacy Protection Act (CalOPPA). Some third-party websites do keep track of Your browsing activities; if You are visiting such websites, You can set Your preferences in Your web browser to inform those websites that You do not want to be tracked.

Under California Civil Code Section 1798 (California’s Shine the Light law), California residents with an established business relationship with us can request information once a year about sharing their Personal Data with third parties for the third parties’ direct marketing purposes. If you’d like to request more information under the California Shine the Light law, and if You are a California resident, You can contact Us using the contact information provided below.

California Business and Professions Code section 22581 allows California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. To request removal of such data, and if You are a California resident, You can contact Us using the contact information provided below and include the email address associated with Your account. Be aware that Your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Our Service is not directed at, and is not intended for use by, individuals under the age of 18. Accordingly, we do not knowingly collect personal information from anyone under age 18 through the Service. Should we discover that a user under age 18 has provided us with personal information, we will take steps to delete that information and, where applicable, terminate the associated account.

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

Where a change is material, We will let You know via email and/or a prominent notice on Our Service prior to the change becoming effective, and We will update the “Last updated” date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, You can contact us: