Effective date: 29 November 2020
At Birabo we're committed to your privacy. In this privacy section, we offer transparency on how and why we process your data, and give you the tools to control it.
Browse through the 'Data Policies' tab to get more information about your personal data and how it is used. If you have an account, make sure you're logged in first; this will allow you to perform many actions by yourself without needing to contact us.
General points:
Click on each section to get detailed information. All network communication between you and the website or other mobile apps is always protected by a secure connection (SSL).
Purpose of data processing: | To safely store and organize your workspace content, such as files, photos, notes and url's. In addition, IP and timestamp of workspace creation are stored in order to prevent abuse, investigate security incidents and comply with the law. |
Types of personal data processed: | IP address and timestamp at time when workspace was created. However, any content you may upload may contain personal data. We advise you to not upload any content that may contain personal data. |
Who is this data collected from: | Everyone who creates and uploads content on Birabo. |
How long will this data be kept: | For workspaces created without an account, a maximum of 7 days. For users with an account, workspaces and their content is kept for as long as you have your account. |
How to delete/modify this data: | Workspaces can be removed when you're logged in, by clicking the 'Settings' and clicking 'Remove Workspace' in the dialog. Workspace content, can be removed by hovering over the item and pressing the gear icon. Then in the item settings dialog, click 'Remove item'. If you create a workspace without an account, you can request removal using the Contact form, and mentioning the workspace url. |
What security measures are there to protect this personal data: | The credentials to access your workspace and content are only available to the data protection person. Amazon Web Services (AWS) and Backblaze in Amazon Web Services (AWS) have their own necessary security procedures in place to ensure safe storage and access. In addition, you can change the privacy settings of each workspace, making sure they are only accessible by you, even if you accidently share the workspace url with others. |
This data is transferred to these 3rd parties: | Workspace files are stored on Amazon Web Services (AWS) S3. The workspace (meta)data is stored in the database on our web-server (hosted by Vultr). |
Which of these 3rd parties are located outside the EU: |
|
Purpose of data processing: | To organize workspaces under your account. If you upload content into someone else's workspace, when logged in, they are able to filter it by user. |
Types of personal data processed: | Email, current IP address, account 'Display Name', timestamp of last login, timestamp of last request and data on how you organized workspaces in your account. |
Who is this data collected from: | Everyone that has signed up for an account on Birabo. |
How long will this data be kept: | For as long as you have your account and keep it active during a period of 2 years. If you haven’t used your account in more than 2 years, your account and all related data and workspaces will be removed automatically. |
How to delete/modify this data: | You first need to log in to your account. You can then visit your Account page and update your details. To remove your account and related data visit the Account page, and choose remove account. |
What security measures are there to protect this personal data: | The data is stored in the database on our web-server (hosted by Vultr). The server and database are only accessible with an encryption key that only our data protection person holds. |
This data is transferred to these 3rd parties: | This data is stored and collected on a server rented from Vultr USA |
Which of these 3rd parties are located outside the EU: |
|
Purpose of data processing: | To restore the latest copy of the 'User Account and Related Data' as well as 'Workspace content' for the purpose of disaster recovery or in case of a server malfunction. |
Types of personal data processed: | Same as for sections 'User Account and Related Data' and 'Workspace content': Email, current IP address, account name, timestamp of last login, timestamp of last request. |
Who is this data collected from: | Everyone that has signed up for an account on Birabo, or has created a Workspace without a user account. |
How long will this data be kept: | Backups that are more than 6 months old are automatically removed. |
How to delete/modify this data: | No changes are possible because of legal and disaster recovery requirements. However, in case of a (disaster) recovery from the backup, we have the necessary procedures in place to make sure that data from users that was removed or requested to be removed, is not restored from the backup. |
What security measures are there to protect this personal data: | Backups are always encrypted. First they are put on our web-server (hosted by Vultr), after which they are encrypted and backed-up with our storage provider Amazon Web Services (AWS). Only the data protection person has access to and can unencrypt these backups. |
This data is transferred to these 3rd parties: | Backups are transferred to Amazon Web Services (AWS) after being created on a server rented from Vultr USA. |
Which of these 3rd parties are located outside the EU: |
|
Purpose of data processing: | To inform you about account expiration, product updates and to send other account related e-mails. In addition, we send you a notification when someone adds content to one a workspace you are a member or admin of. |
Types of personal data processed: | E-mail. |
Who is this data collected from: | Everyone who signs up for an account on Birabo. |
How long will this data be kept: | For as long as you have your account and keep it active during a period of 2 years. If you haven’t used your account in more than 2 years, your account and all related mailings will be removed automatically. |
How to delete/modify this data: | You first need to log in to your account. You can then visit the your account Page and update your e-mail address. You cannot unsubscribe from account related e-mails like account expiration. To disable e-mail notifications when someone adds content to one of the workspaces you are member of, open the workspace settings and uncheck 'Send notification when someone adds content'. |
What security measures are there to protect this personal data: | This data is stored in the database on our web-server (hosted by Vultr). The server and database are only accessible with an encryption key, which is held by our data protection person. |
This data is transferred to these 3rd parties: | This data is stored and collected on a server rented from Vultr USA. E-mails are sent using a 3rd party e-mail sending provider, Amazon AWS USA |
Which of these 3rd parties are located outside the EU: |
|
Purpose of data processing: | To pay for a premium account—which gives you extra features like bigger file uploads, more members to add to a workspace, more storage size, etc. Used to record your payment receipts, and comply with local tax laws. |
Types of personal data processed: | Credit Card number (last 4 digits), expiration date, country paid from, payment amount and timestamp. |
Who is this data collected from: | Anyone upgrading to a premium Birabo account. |
How long will this data be kept: | 8 years. |
How to delete/modify this data: | Payment data cannot be removed, as it is needed to comply with tax laws. Payment history can be found under your Account once you're logged in. |
What security measures are there to protect this personal data: | Your full credit-card number is transmitted via Secure Socket Layer (SSL) technology directly to our Payment gateway provider Stripe, without touching our servers. Stripe has the necessary procedures in place to keep all of your payment information confidential. In case you have subscribed to the premium plan using an in-app-purchase from the iOS Birabo app, you data is secured by Apple's payment mechanisms, and your personal payment data does not touch our servers. |
This data is transferred to these 3rd parties: | Stripe USA. In the case of a tax audit on our business, we may have to provide payment details to the Dutch tax authorities. |
Which of these 3rd parties are located outside the EU: |
|
Purpose of data processing: | Troubleshooting in case of application errors, investigating security incidents and to comply with the law. |
Types of personal data processed: | IP address, timestamp of request, web page on Birabo accessed. |
Who is this data collected from: | Every visitor to the Birabo website or app. |
How long will this data be kept: | A maximum of 1 year. |
How to delete/modify this data: | No changes are possible because of legal and security requirements. |
What security measures are there to protect this personal data: | Website traffic logs are collected on our web-server (hosted by Vultr) and rolled-over daily, after which they are encrypted and backed-up with our storage provider Amazon Web Services (AWS). Only the data protection person has access to and can unencrypt these logs. |
This data is transferred to these 3rd parties: | Transferred to Amazon Web Services (AWS) and collected on a server rented from Vultr USA. |
Which of these 3rd parties are located outside the EU: |
|
Purpose of data processing: | To respond to your customer service requests and support needs. In addition we also need them to resolve DMCA/Removal requests. Birabo needs the data to prove compliance regarding requests to remove content from our service. |
Types of personal data processed: | In the case of customer support via the feedback form, your e-mail address and contact message. In the case of DMCA/removal requests, your e-mail, name, IP address, the contents of the request and timestamp of the request. |
Who is this data collected from: | Anyone who uses the feedback form for customer support, or for DMCA/content removal. |
How long will this data be kept: | For DMCA requests, 3 years, as we need them to prove compliance. All other support requests will be kept for 6 months. |
How to delete/modify this data: | This data will be automatically removed once the retention period expires, but cannot be removed before that for compliance reasons. |
What security measures are there to protect this personal data: | The data is stored in the database on our web-server (hosted by Vultr). The server and database are only accessible with an encryption key, which is held by our data protection person. |
This data is transferred to these 3rd parties: | This data is stored and collected on a server rented from Vultr USA |
Which of these 3rd parties are located outside the EU: |
|
Purpose of data processing: | To gather statistics on key-metrics regarding the Birabo website, such as bounce rates, amount of visitors, traffic sources, etc. |
Types of personal data processed: | Anonymized IP address. |
Who is this data collected from: | Everyone that visits the Birabo website. |
How long will this data be kept: | 14 months. |
How to delete/modify this data: | If you didn't accept session and analytics cookies, you are not tracked in any analytics. In case you did accept them, please send us a tracking removal request via the contact page, to remove yourself from the 3rd party web analytics tracking services. Please mention that you'd like to be removed from tracking, and we'll send you over the necessary instructions. |
What security measures are there to protect this personal data: | We have enabled anonymized IP address tracking, minimized data retention settings in Google Analytics and Stormly, disabled 'Remarketing' and 'Advertising Reporting Features' in Google Analytics, minimizing the amount of tracking data stored and processed. |
This data is transferred to these 3rd parties: | Google Analytics USA. Stormly EU |
Which of these 3rd parties are located outside the EU: | Google Analytics USA. GDPR compliance at https://privacy.google.com/businesses/compliance |
Purpose of data processing: | We use first-party session cookies to maintain your account session once you've logged in. We also use a cookie to store which workspaces you have created anonymously. Through this, you are still able to delete a workspace even if you're anonymous, by later signing up and bringing the anonymous workspace under your new account. Additionally, we use cookies to store your preferences in regard to if you have accepted or denied use of cookies and tracking. Our payment provider Stripe uses cookies so you don't have to re-enter your account e-mail when you make a payment. |
Types of personal data processed: | Cookie |
Who is this data collected from: | Anyone who visits the Birabo website |
How long will this data be kept: | Cookies have a default lifetime of 4 years. |
How to delete/modify this data: | To disable or remove cookies (for Birabo or other sites), please visit this link: https://cookies.insites.com/disable-cookies |
What security measures are there to protect this personal data: | All cookies from Birabo are encrypted. |
This data is transferred to these 3rd parties: | This data is processed on a server rented from Vultr USA |
Which of these 3rd parties are located outside the EU: |
|
In case you have more questions after going through our data policies, you can contact us here.
The company controlling data on Birabo is Yogile B.V. registered at Lutmastraat 1 3, 1072 JL Amsterdam, the Netherlands.
Workspaces created without an account are automatically removed after 7 days.
If you have an account, log in first to remove the data yourself. If not, you can use the contact form, and mention the account or workspace url you want to remove.
If you didn't accept session and analytics cookies, you are not tracked in any analytics. In case you did accept them, please send us a tracking removal request via the contact page, to remove yourself from the 3rd party web analytics tracking service Google Analytics (GA) and Stormly. Please mention that you'd like to be removed from tracking, and we'll send you over the necessary instructions.