Privacy Policy.

Cakewalk Technology GmbH (doing business as Cakewalk) ("Cakewalk," "we," "us," or "our") operates https://getcakewalk.io. This Privacy Policy describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website, or any website of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@getcakewalk.io.

1. What Information Do We Collect?

Personal information you disclose to us: We value your privacy and only collect personal information that you willingly provide to us. This includes information you provide when registering on our Services, expressing interest in obtaining information about us or our products and Services, participating in activities on the Services, or contacting us.

Personal Information Provided by You: The personal information we collect depends on your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we may collect includes:

• Names
• Phone numbers
• Email addresses
• Passwords
• Job function
• App usage data

Sensitive Information: Rest assured that we do not process sensitive information.

Information we collect from other sources: We may also get information about you from other sources. For example, we offer the option to register with us through a social login, such as your Google Workspace or Microsoft 365 account. If you choose this method of registration, we will collect information from that service (your username and basic profile information) via the authorization procedures for that service.

Furthermore, where you choose to integrate third-party applications with Cakewalk, we may process personal data received from these applications for the purpose of maintaining data synchronization between the connected systems. Such processing will only occur (i) within the scope explicitly defined during the integration setup process, (ii) based on your prior consent or other legal basis under applicable data protection laws, and (iii) in accordance with our data processing agreements with the respective third-party providers.

Information automatically collected

When you visit, use, or navigate our Services, certain information is automatically collected. This information does not reveal your specific identity, such as your name or contact information, but it includes device and usage details, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about your usage of our Services, and other technical information. We collect this information to ensure the security and functionality of our Services and for internal analytics and reporting purposes.

Similar to many other businesses, we also utilize cookies and similar technologies to collect information. For more details, please refer to 'Do we use Cookies and other tracking technologies?'.

The information we collect includes:

• Log and Usage Data: Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).
• Device Data: We gather device-related information, including details about your computer, phone, tablet, or other devices used to access our Services. Depending on the device, this data may encompass your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, internet service provider, mobile carrier, operating system, and system configuration.

2. How Do We Process Your Information?

We process your personal information for various purposes, depending on how you interact with our Services. These include:

• Facilitating account creation, authentication, and account management: We process your information to enable you to create and log in to your account, as well as to ensure the proper functioning of your account.
• Delivering and facilitating the provision of services: We process your information to deliver the requested services to you.
• Requesting feedback: When necessary, we may process your information to request feedback and communicate with you regarding your usage of our Services.
• Protecting the security of our Services: We process your information as part of our efforts to maintain the safety and security of our Services, which includes fraud monitoring and prevention measures.
• Identifying usage trends: We may process information about how you use our Services to gain insights into usage patterns and improve the quality of our Services.
• Preserving or protecting an individual's vital interests: When necessary, we may process your information to safeguard an individual's vital interests and prevent harm.

3. How Do We Handle Your Google Workspace Data?

Our Services offer you the ability to connect your Google Workspace account. Where you choose to do this, we will receive information about your Google Workspace account including what users are registered under your Google Workspace account and what third-party services they have accessed through their Google account.

We use these data to enable companies to run compliant access management processes. We store user data in compliance with governing data privacy regulations as summarized in this Privacy Policy.

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. What Legal Bases Do We Rely On to Process Your Information?

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the legal bases on which we rely to process your personal information. We rely on the following legal bases for processing your personal information:

• Consent: We may process your information if you have provided us with explicit consent to use your personal information for a specific purpose. You have the right to withdraw your consent at any time. To learn more about withdrawing your consent, please refer to our withdrawal of consent information.
• Performance of a Contract: We may process your personal information when it is necessary to fulfill our contractual obligations to you, including providing our Services or taking steps at your request before entering into a contract with you.
• Legitimate Interests: We may process your information when it is reasonably necessary to pursue our legitimate business interests, provided that such interests do not override your interests, fundamental rights, and freedoms. For example, we may process your personal information for purposes such as: (1) Analyzing how our Services are used in order to improve them and enhance user engagement and retention, (2) Diagnosing problems and preventing fraudulent activities, and (3) Understanding how our users utilize our products and services to enhance the user experience.
• Legal Obligations: We may process your information when it is necessary to comply with our legal obligations. This includes cooperating with law enforcement or regulatory agencies, exercising or defending our legal rights, or disclosing your information as evidence in legal proceedings in which we are involved.
• Protection of Vital Interests: We may process your information when it is necessary to protect your vital interests or the vital interests of a third party. This may occur in situations involving potential threats to the safety of any person.

5. When and With Whom Do We Share Your Personal Information?

We may disclose personal information to:

• A parent, subsidiary, or affiliate of our company
• Third-party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, analytics, error loggers, debt collectors, maintenance or problem-solving providers, marketing providers, professional advisors, and payment service providers
• Our employees, contractors, and/or related entities
• Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise, or defend our legal rights
• Credit reporting agencies, courts, tribunals, and regulatory authorities, in the event you fail to pay for goods or services we have provided to you
• Third parties, including agents or sub-contractors, who assist us in providing information, products, services, or direct marketing to you
• Third parties to collect and process data
• An entity that buys, or to which we transfer all or substantially all of our assets and business

We may only engage a third party service if it has imposed the necessary responsibilities and obligations on the sub-processor as required by article 28 GDPR.

6. Is Your Information Transferred Internationally?

Among other things, we use tools from companies based in the USA or other third countries outside the European Economic Area (EEA). If these tools are active, your personal data may be transferred to these third countries and processed there.

We will ensure that any transfer of personal information from countries in the EEA to countries outside the EEA will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or the use of binding corporate rules or other legally accepted means.

7. Do We Use Cookies and Other Tracking Technologies?

This website may use certain Cookies to enhance your browsing experience. Cakewalk has carefully selected these Cookies and implemented measures to protect and respect your privacy at all times. All Cookies used on this website comply with the current EU Cookie Law.

Before Cookies are placed on your computer, you will see a pop-up message seeking your consent. By providing consent, you allow Cakewalk to deliver an improved experience and service. However, you have the option to deny consent, although certain features of the website may not function fully or as intended.

This website may use the following types of Cookies:

• Necessary Cookies: Necessary Cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
• Preference Cookies: Preference Cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
• Statistic Cookies: Statistic Cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
• Marketing Cookies: Marketing Cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

You can enable or disable Cookies in your internet browser settings. Most internet browsers accept Cookies by default, but you can modify this setting. For detailed instructions, please consult the help menu of your internet browser.

Deleting Cookies is an option, but please note that it may result in the loss of information that enhances your access to the website, such as personalization settings.

We recommend keeping your internet browser up-to-date and seeking guidance from your browser's developer regarding privacy settings adjustments if you're uncertain.

For more comprehensive information about Cookies, including disabling them, please visit aboutcookies.org. This resource also provides instructions on how to delete cookies from your computer.

8. How Long Do We Keep Your Information?

We retain your personal information only for as long as it is necessary for the purposes outlined in this privacy policy. The duration of retention may vary depending on the specific use of your information. For instance, if you have provided personal information during the process of creating an account, we will retain this information for as long as your account is active on our system. Once your personal information is no longer required for this purpose, we will either delete it or anonymize it by removing any identifying details.

However, in certain cases, we may need to retain your personal information to comply with legal, accounting, or reporting obligations, or for archiving purposes in the public interest, scientific research, historical research, or statistical purposes. Rest assured that we will only retain your information for as long as necessary and in accordance with applicable laws and regulations.

9. How Do We Keep Your Information Safe?

We prioritize the implementation of appropriate and reasonable technical and organizational security measures to safeguard the personal information we process. While we make significant efforts to ensure the security of your information, it's important to note that no method of electronic transmission or storage is completely infallible. Therefore, we cannot guarantee that unauthorized third parties, including hackers or cybercriminals, will be unable to circumvent our security measures and gain access to, collect, steal, or modify your information.

Although we are committed to protecting your personal information to the best of our abilities, the transmission of personal information to and from our Services carries inherent risks. We encourage you to access our Services within a secure environment and remain vigilant regarding the security of your own devices and network connections. Rest assured that we continually review and enhance our security practices to minimize risks and protect your information to the fullest extent possible.

10. What Are Your Privacy Rights?

In certain regions, such as the EEA and UK, you have specific rights under applicable data protection laws. These rights may include:

• Right of Access and Rectification: You have the right to request access to and obtain a copy of your personal information held by us. You also have the right to request the correction or update of any inaccurate or incomplete information.
• Right to Erasure and Restriction: Subject to certain exceptions, you have the right to request the erasure of your personal information or the restriction of its processing. We will comply with such requests unless there are legal grounds for us to retain the information.
• Right to Data Portability: If applicable, you have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
• Right to Object: In certain circumstances, you have the right to object to the processing of your personal information. We will consider your objection and cease processing your information unless we have compelling legitimate grounds for the processing.

To exercise any of these rights, you can contact us using the details provided in the section 'How can you contact us about this policy?' below. We will review and respond to your request in accordance with applicable data protection laws.

If you believe that we are unlawfully processing your personal information, and you are located in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your respective data protection authority.

Withdrawing Consent: If we rely on your consent to process your personal information, you have the right to withdraw your consent at any time. You can do this by contacting us using the details provided in the section 'How can you contact us about this policy?' below or by updating your preferences. Please note that withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

Opting Out of Marketing Communications: You can unsubscribe from our marketing and promotional communications at any time. Simply click on the unsubscribe link provided in the emails we send or contact us using the details in the section 'How can you contact us about this policy?' below. Although you may opt out of marketing communications, we may still send you important service-related messages necessary for the administration and use of your account or for other non-marketing purposes.

Account Information: If you wish to review, modify, or terminate your account, please contact us using the provided contact information. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, or comply with applicable legal requirements.

Cookies and Similar Technologies: Most web browsers are set to accept cookies by default. However, you have the option to remove or reject cookies through your browser settings. Please note that this may impact certain features or services of our website. For more information, please refer to 'Do we use Cookies and other tracking technologies'.

11. Controls for Do Not Track Features

Some browsers have a "Do Not Track" feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not respond to browser "Do Not Track" signals because we don't track you individually.

We adhere to the standards outlined in this privacy policy, ensuring we collect and process personal information lawfully, fairly, transparently, and with legitimate, legal reasons for doing so.

12. Do California Residents Have Specific Privacy Rights?

Under California Civil Code Section 1798.83, which is commonly known as the "Shine The Light" law, California residents have the right to request and obtain, free of charge, information about the categories of personal information, if any, that we disclose to third parties for direct marketing purposes, as well as the names and addresses of all third parties with which we have shared personal information in the preceding calendar year. If you are a California resident and would like to make such a request, please contact us in writing using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with our Services, you have the right to request the removal of unwanted data that you have publicly posted on our Services. To request the removal of such data, please contact us using the provided contact information and include the email address associated with your account, along with a statement confirming your residency in California. While we will ensure that the data is not publicly displayed on our Services, please note that it may not be completely or comprehensively removed from all our systems, including backups and similar archives.

13. Do We Make Updates to This Policy?

We reserve the right to update this Privacy Policy periodically. The revised version will be identified by the revised "Revised" date and will become effective as soon as it is made accessible. In the event of significant changes to this privacy notice, we may notify you by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to regularly review this privacy notice to stay informed about how we are safeguarding your information.

14. How Can You Contact Us About This Policy?

If you have questions or comments about this policy, you may email us at privacy@getcakewalk.io or contact us by post at:

Cakewalk Technology GmbH
Hardenbergstrasse 32
Berlin, Berlin 10623
Germany

15. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please reach out to us at privacy@getcakewalk.io.