<p>Last Updated: October 28, 2019</p>
<p>Instructure, Inc.
(“Instructure,” “we,” “our,” or “us”) has prepared this Privacy Policy to describe our practices regarding the information collected from visitors to our websites, https://www.instructure.com, www.canvaslms.com, www.getbridge.com, and any other sites that link to this Privacy Policy (collectively, “Site”), or through other interactions with Instructure.
By submitting personal information through our Site, you expressly acknowledge that your personal information will be processed in the United States (U.S.) in accordance with this Privacy Policy. </p>
<p>To view the privacy policy for our products, please visit https://www.instructure.com/policies/privacy.</p>
<p>
<strong>DATA COLLECTION.</strong>
</p>
<p>
<strong>DATA YOU PROVIDE TO US</strong>.
We collect information from you, such as first and last name, gender, e-mail and mailing addresses, phone number, professional title, company name, educational institution or organization name, and password when you provide such information to our Site or to an Instructure employee, or otherwise provide this information to Instructure, such as via email.
When you participate in one of our surveys, we may collect additional profile information, such as information indicating your interest in specific Instructure services.
We collect information about you when you apply for positions within Instructure.
We also collect other types of personal data and demographic information that you provide to us voluntarily.
This includes information provided to Instructure employees in the course of routine interactions with them or provided in response to an email from Instructure.</p>
<p>
<strong>DATA COLLECTED VIA TECHNOLOGY</strong>.
To make our Site more useful to you, our servers (which may be hosted by a third party service provider) collect information from you, including browser type, operating system, Internet Protocol (IP) address, domain name, geographic location, and/or a date/time stamp for your visit.
We also use web beacons and cookies and navigational data like Uniform Resource Locators (URL) to gather information regarding the date and time of your visit and the solutions and information for which you searched and which you viewed.</p>
<p>
<strong>WEB BEACONS</strong> are digital images we use to log information on our Site and in our emails.
We use web beacons to manage cookies, count visits, and to learn what marketing works and what does not.
We also use web beacons to tell if you open or act on our emails.</p>
<p>
<strong>COOKIES</strong> are small pieces of information that a website sends to your computer’s hard drive while you are viewing a website.
We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Site.</p>
<p>Our Site uses the following types of cookies:</p>
<p>
<strong>STRICTLY NECESSARY COOKIES</strong>: These cookies are essential in order to enable you to move around the Site and use its features.
Without these cookies, services like enabling appropriate content based on your type of device cannot be provided.</p>
<p>
<strong>PERFORMANCE COOKIES</strong>: These cookies collect information about how visitors use the Site, so that we can analyze traffic and understand how our visitors use the Site.
We may use third party service providers for this purpose who may set their own cookies on the Site.
These cookies do not collect information that identify an individual visitor.
All information these cookies collect is aggregated and therefore anonymous.
It is only used to improve how the Site works.</p>
<p>
<strong>FUNCTIONALITY COOKIES</strong>: These cookies allow our Site to remember choices you make (such as your user name, or the region you are in) and provide enhanced, more personal features.
These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customize.
They may also be used to provide services you have asked for such as watching a video or commenting on a blog.
The information these cookies collect may be anonymized and they cannot track your browsing activity on other websites.</p>
<p>
<strong>SOCIAL MEDIA COOKIES</strong>: These cookies are used when you share information using a social media sharing button or “like” button on our Site or you link your account or engage with our content on or through a social media site such as Facebook, Twitter or Google+.
The social network will record that you have done this.
This information may be linked to targeting/advertising activities conducted by third parties on Instructure’s behalf.</p>
<p>
<strong>TARGETING AND ADVERTISING COOKIES</strong>: These cookies are used to deliver adverts more relevant to you and your interests.
They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaigns.
They are usually placed by advertising networks with our permission.
They remember that you have visited a website and this information is shared with other organizations such as advertisers.</p>
<p>If you don't want to receive cookies, you can alter your browser settings.
The procedure for doing so varies from one browser application to another.
If you wish to reject cookies from our Site, but wish to accept those from other sites, you may be able to choose the option in your browser settings to receive a notice before a cookie is stored on your device.
By disabling cookies, you may be prevented from accessing some features of our Site or certain content or functionality may not be available.</p>
<p>
<strong>ANALYTICS</strong>. We use analytics services to help analyze how users use the Site.
These services use cookies, scripts, and other technologies to collect and store information such as how users interact with our Site, how often users visit the Site, what pages they visit, and what other sites they used prior to coming to the Site.</p>
<p>We may also work with third parties that collect data about your use of the Site and other sites or apps over time for non-advertising purposes. .
Instructure uses Google Analytics and other third-party services to improve the performance of the Site and for analytics and marketing purposes. .
For more information about how Google Analytics collects and uses data when you use our Site, visit https://www.google.com/policies/privacy/partners/, and to opt out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout/.</p>
<p>
<strong>TESTIMONIALS</strong>.
We display personal testimonials of satisfied customers on our Site in addition to other endorsements.
With your consent we may post your testimonial along with your name.
If you wish to update or delete your testimonial, you can contact us at privacy@instructure.com.</p>
<p>
<strong>USE OF YOUR DATA.</strong>
</p>
<p>In general, personal data you submit to us is used either to respond to requests that you make, or to aid us in serving you better.
Instructure uses your personal data for any lawful purpose, including, but not limited to, the following purposes: to create and maintain your account.
to identify you as a user in our system.
to operate, maintain, and improve our Site and services.
to personalize and improve your experience.
to send you administrative e-mail.
to process applications.
to respond to your comments or inquiries.
to send you surveys, promotional communications about our products and services or the products and services of third parties (<strong>“PARTNERS”</strong>).
to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.
and to make telephone calls to you, from time to time, as a part of secondary fraud protection or to solicit your feedback with your permission.</p>
<p>We may partner with ad networks and other ad serving providers (<strong>“ADVERTISING PROVIDERS”</strong>) that serve ads on behalf of us and others on non-affiliated platforms.
Some of those ads may be personalized, meaning that they are intended to be relevant to you based on information Advertising Providers collect about your use of the Site and other sites over time, including information about relationships among different browsers and devices.
This type of advertising is known as interest-based advertising.</p>
<p>We do not use automatic decision-making or engage in profiling.</p>
<p>Where we intend to use or otherwise process your personal data for a purpose other than the purpose for which it was collected, we will provide you with information regarding the purpose for the processing, as well as other relevant information, prior to processing your personal data for the new purpose.</p>
<p>
<strong>DISCLOSURE OF YOUR DATA.</strong>
</p>
<p>We will share your personal data with third parties only in the ways that are described in this Privacy Policy or with your consent.</p>
<p>
<strong>AFFILIATES</strong>. Although we currently do not have a parent company, any subsidiaries, joint ventures, or other companies under a common control (collectively, “AFFILIATES”), we may in the future.
We may share some or all of your information with these Affiliates, in which case we will require our Affiliates to honor this Privacy Policy.</p>
<p>
<strong>THIRD PARTY SERVICE PROVIDERS</strong>. We may share your personal data with third party service providers.
For example, we may share data with service providers who host our websites or provide email services on our behalf.</p>
<p>
<strong>PARTNERS</strong>. We may also share your personal data with our Partners.
Our Partners may use your personal data for their own direct marketing purposes.</p>
<p>
<strong>OTHER DISCLOSURES</strong>. Instructure may disclose information about you if it believes such disclosure is necessary to (a) comply with laws or to respond to lawful requests and legal process.
or (b) protect or defend the rights, safety, or property of Instructure, users of the services, or any person including to enforce our agreements, policies, and terms of use or (c) in an emergency to protect the personal safety of any person.</p>
<p>We may also share information about you in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction or proceeding involving sale, transfer, divestiture or disclosure of all or a portion of our business or assets to another company.
In the event that information is shared in this manner, notice will be posted on our Site.</p>
<p>We may also share de-identified and/or aggregated data with others for their own uses.</p>
<p>
<strong>NOTICE TO EU AND EEA RESIDENTS.</strong>
</p>
<p>
<strong>LAWFUL BASIS FOR PROCESSING</strong>.
We may process your personal data to respond to your inquiries concerning our products and services.
Additionally, we process your personal data for direct marketing and communications purposes when these interests are not overridden by your data protection rights.
Where we process your personal data for this purpose, our legitimate interest is to carry out our activities in furtherance of the well-being of all our employees and members.</p>
<p>On certain occasions, we process your personal data when it is necessary for the performance of a contract to which you are a party, such as to provide services to you that you have requested.</p>
<p>On other occasions, we process your personal data where required by law.
We may also process your personal data if necessary to protect your interests or the interests of a third party.</p>
<p>If the processing of personal data is necessary and there is no statutory basis for such processing, we will ensure that your consent is obtained to process your personal data.
You have the right to withdraw your consent to processing of personal data at any time.
If you wish to exercise the right to withdraw consent, contact us via the “Contact” section below, or click the unsubscribe link in any email communications you receive from us.</p>
<p>
<strong>RIGHTS</strong>.
You have the right to request access to the personal data we hold about you.
You have the right to request that we rectify or erase your personal data.
You also have the right to request that we restrict or block the processing of your personal data.
Under certain circumstances, you have the right to receive personal data about you that we store and transmit to another without hindrance from us, including requesting that we provide your personal data directly to another, i.e., a right to data portability.
and where we previously obtained your consent, to withdraw consent to processing your personal data.</p>
<p>To exercise these rights, contact us or to exercise your right to be forgotten complete the form found at https://www.instructure.com/policies/privacy/right-to-be-forgotten.
See the “Contact Information” section below.
Please be aware that Instructure may be unable to afford these rights to you under certain circumstances, such as if we are legally prevented from doing so.
Additionally, you have the right to lodge a complaint against us.
To do so, contact the supervisory authority in your country of residence.</p>
<p>
<strong>RETENTION</strong>.
We will process and store your personal data only for the period necessary to achieve the purpose of the storage, or as permitted by law.
The criteria used to determine the period of storage of personal data is the respective statutory retention period or for certain marking data for our services or other products.
After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of a contract or the initiation of a contract.</p>
<p>
<strong>TRANSFERS OF PERSONAL DATA</strong>.
Please be aware that the personal data we collect may be transferred to and maintained on servers or databases located outside your state, province, country, or other jurisdiction, where the privacy laws may not be as protective as those in your location.
If you are located outside of the United States, please be advised that we process and store personal data in the United States.</p>
<p>
<strong>PRIVACY SHIELD</strong>.
Instructure complies with the EU-U.S.
Privacy Shield Framework and the Swiss-U.S.
Privacy Shield Framework as set forth by the U.S.
Department of Commerce regarding the collection, use, and retention of personal data transferred from the European Union (<strong>“EU”</strong>) and Switzerland to the United States (<strong>“U.S.”</strong>) respectively, as that term is defined in the Privacy Shield Framework.
Instructure has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.
Instructure is committed to subjecting all personal data received from the EU and Switzerland, in reliance on the Privacy Shield Framework, to the Framework’s applicable principles.
If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.
To learn more about the Privacy Shield Framework, visit the U.S.
Department of Commerce’s Privacy Shield List: https://www.privacyshield.gov/list.</p>
<p>Instructure’s Privacy Policy describes the types of personal data that Instructure collects, the types of third parties to which it discloses personal data, and the purposes for which it does so.
Instructure collects contact and demographic information to respond to requests or to personalize and deliver the services, including for marketing purposes.
Instructure transfers this information to third parties, including third parties acting as agents on its behalf.
Instructure is accountable for the processing of personal data it receives, under the Privacy Shield Framework, and subsequently transfers to a third party.
Instructure complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.</p>
<p>Residents of the EU and Switzerland have the right to access the personal data that Instructure maintains, and in some cases, may have the right to correct or amend information that is inaccurate or has been processed in violation of the Privacy Shield Principles, to the extent allowed by law.
To exercise this right, contact us at privacy@instructure.com.</p>
<p>With respect to personal data received or transferred pursuant to the Privacy Shield Framework, Instructure is subject to the regulatory enforcement powers of the U.S.
Federal Trade Commission.
In certain situations, Instructure may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.</p>
<p>Residents of the EU and Switzerland with inquiries or complaints regarding this Privacy Policy should first contact Instructure at:</p>
<p>privacy@instructure.com</p>
<p>6330 S 3000 E, STE 700<br>
Salt Lake City, UT 84121<br>
United States of America<br>
+1 (801) 869.5000</p>
<p>If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, you may also contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Under certain conditions, more fully described on the Privacy Shield website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.</p>
<p>
<strong>CALIFORNIA PRIVACY NOTICE</strong>
</p>
<p>California residents have certain rights under the California Consumer Privacy Act (“CCPA”) in relation to your personal information.
Please visit our California Privacy Notice for more information on how to exercise these rights.</p>
<p>
<strong>SOCIAL NETWORKING PLATFORMS.</strong>
</p>
<p>We may allow you to connect and share information with certain social networking platforms (<strong>“SOCIAL NETWORKING PLATFORMS”</strong>) (e.g., a Facebook application).
By choosing to use these Social Networking Platforms, you allow Instructure to share information with the Social Networking Platform.
For example, you might use an application to publish Instructure related notices on your Facebook wall.
If you do not want us to continue to provide your information to the Social Networking Platform, you may change your privacy settings in the Social Networking Platform.</p>
<p>You can also access certain features of our Site using Social Networking Platforms.
These services will authenticate your identity and provide you the option to share certain personal data with us such as your name, email address, and other personal data to pre-populate an application.</p>
<p>We do not control the privacy practices of the Social Networking Platforms and sign-in services you choose to use and this Privacy Policy does not cover their practices, you should visit the privacy policies of any Social Networking Platform or sign-in service you choose to use to understand their practices.</p>
<p>
<strong>YOUR CHOICES REGARDING YOUR PERSONAL DATA.</strong>
</p>
<p>
<strong>CHOICES</strong>. We offer you choices regarding the collection, use, and sharing of your personal data.
When you receive newsletters or promotional communications from us, you may “opt-out” by following the unsubscribe instructions provided in e-mails you receive from us or by contacting us directly at the contact information below.</p>
<p>Most web browsers are set to accept cookies by default.
If you prefer, you can typically remove and reject cookies from our Site with your browser settings.
If you remove or reject our cookies, it will affect how our Site and services work for you.</p>
<p>
<strong>CHANGES TO YOUR PERSONAL DATA.</strong>
</p>
<p>You may change some of your personal data in your account by editing your profile within the Service.
You may also request changes or deletions by e-mailing us at the e-mail address set forth below.
We will respond to your request, when permitted by law, within 30 days.
We may be unable to delete information that resides in our archives.</p>
<p>
<strong>SECURITY OF YOUR PERSONAL DATA.</strong>
</p>
<p>Instructure takes reasonable steps to help protect your personal data in an effort to prevent unauthorized access, use, or disclosure.
Despite these measures, you should know that Instructure cannot fully eliminate security risks associated with personal data.
No method of transmission over the Internet, or method of electronic storage, is 100% secure.
Therefore, we cannot guarantee its absolute security.
Any content you post while using the services is at your own risk.
If you have any questions about security on our Site, you can contact us at the contact information set forth below.</p>
<p>
<strong>CONTACT INFORMATION</strong>
</p>
<p>Instructure welcomes your comments or questions regarding this Privacy Policy.
Please e-mail us at privacy@instructure.com or contact us at the following address or phone number:</p>
<p>Instructure, Inc.<br>
6330 S 3000 E, STE 700<br>
Salt Lake City, UT 84121<br>
United States of America<br>
+1 (801) 869.5000</p>
<p>
<strong>CHANGES TO THIS PRIVACY POLICY.</strong>
</p>
<p>Instructure may change this Privacy Policy from time to time.
If we make any changes to this Policy, we will change the “Last Updated” date above.
If such changes are material, a notice of the changes will be posted along with the revised Privacy Policy.
We encourage you to visit this page from time to time for the latest on our privacy practices.</p>
<p>
<u>
<strong>Event Privacy Policy</strong>
</u>
</p>