Last updated: 25th September 2023
This Privacy Policy (“Policy”) applies to the use of the services & products offered by InstaVC Technologies Private Limited (“we,” “us,” or “our”) and InstaVC Technologies Private Limited, including, but not limited to, the use of our website, mobile application, and any related services & products including the entire application suite of our InstaVC product line or features (collectively, the “Services”), as well as other custom developed applications for our customers globally. This Policy is designed to inform you about our practices regarding the collection, use, and disclosure of information that you may provide to us through the Services.
By using our services, you consent to the terms of this Policy. This Privacy Statement also describes the personal data that we collect and/or process (which may include collecting, organizing, structuring, storing, using, or disclosing) to provide products and services offered directly by InstaVC including InstaVC ’s all other websites, its meetings, webinars, and messaging platform, related collaborative features, and InstaVC App Marketplace (“InstaVC products and services” or “products and services”).
Please read this Privacy Notice carefully. By visiting our website or using any of our services, you indicate your acceptance of our use of your personal data as set out in this Privacy Notice.
When you use our Services, we may collect information from you that includes, but is not limited to:
- What Personal Data Do We Receive?
- How Do We Use Personal Data?
- How Do We Share Personal Data?
- Who Can See, Share, and Process My Personal Data When I Join Meetings and Use Other InstaVC Products and Services?
- Privacy Rights and Choices
- How to Contact Us
- Retention
- European Data Protection Specific Information
- California Notice at Collection, California residents, please see our California Privacy Notice at Collection, and California & Other U.S. State Privacy Rights sections.
- California & Other U.S. State Privacy Rights
- Children Education Privacy Statement
- Changes to This Privacy Statement
What Personal Data Do We Receive?
Personal data is any information from or about an identified or identifiable person, including information that InstaVC can associate with an individual person. We may collect, or process on behalf of our customers, the following categories of personal data when you use or interact with InstaVC products and services:
Information You Provide
Personal information: We may collect your name, email address, phone number, and other information that you provide to us in order to use our Services or communicate with us.
Registration Information: Information provided when registering for a InstaVC meeting, webinar, InstaVC Room, or recording, which may include name and contact information, responses to registration questions, and other registration information requested by the host.
Account Information: Information associated with an account that licenses InstaVC products and services, which may include administrator name, contact information, account ID, billing and transaction information, and account plan information.
Contact Information: Contact information added by accounts and/or their users to create contact lists on InstaVC products and services, which may include contact information a user integrates from a third-party app, or provided by users to process referral invitations.
Profile and Participant Information: Information associated with the InstaVC profile of a user who uses InstaVC products and services under a licensed account or that is provided by an unlicensed participant joining a meeting, which may include name, display name, picture, email address, phone number, job information, stated locale, user ID, or other information provided by the user and/or their account owner.
Settings: Information associated with the preferences and settings on a InstaVC account or user profile, which may include audio and video settings, recording file location, screen sharing settings, and other settings and configuration information.
Limited Information from InstaVC Email and Calendar Services: “InstaVC Email” refers to InstaVC ’s native email service and emails sent from InstaVC ’s native email service. InstaVC Email is designed to be end-to-end encrypted by its service provider by default for emails sent and received directly between active InstaVC Email users. Support for end-to-end encryption requires InstaVC Email users to have added a device to their InstaVC Email account with the associated email address and to use a supported client. When an email is end-to-end encrypted, only the users, and, depending on their settings, account owners, or designated account administrators control the encryption key and therefore access to the email content, including body text, subject line, attachments and custom labels applied to messages by users in their inboxes. In all cases, InstaVC may have access to email metadata used for basic email delivery—specifically, email addresses in the form ID, and the number and size of attachments. From use of InstaVC ’s native calendar service, InstaVC receives information regarding meeting invitations, body text, sender and recipients, and other calendar information. receives information regarding meeting invitations, body text, sender and recipients, and other calendar information.
Communications with InstaVC : Information about your communications with InstaVC , including relating to support questions, your account, and other inquiries.
Information Collected Automatically
Device information: We may collect information about the device you use to access our Services, such as the operating system and browser type. Information about the computers, phones, and other devices used when interacting with InstaVC products and services, which may include information about the speakers, microphone, camera, OS version, hard disk ID, PC name, MAC address, IP address (which may be used to infer general location at a city or country level), device attributes (like operating system version and battery level), WiFi information, and other device information (like Bluetooth signals).
Usage information: We may collect information about how you use our Services, such as the features you access and the pages you visit.
Content and Context from Meetings, Webinars, Messaging, and Other Collaborative Features: Content generated in meetings, webinars, or messages that are hosted on InstaVC products and services, which may include audio, video, in-meeting messages, in-meeting and out-of-meeting whiteboards, chat messaging content, transcriptions, transcript edits and recommendations, written feedback, responses to polls and Q&A, and files, as well as related context, such as invitation details, meeting or chat name, or meeting agenda. Content may contain your voice and image, depending on the account owner’s settings, what you choose to share, your settings, and what you do on InstaVC products and services.
Usage Information Regarding Meetings, Webinars, Messaging, Collaborative Features and the Website: Information about how people and their devices interact with InstaVC products and services, such as: when participants join and leave a meeting; whether participants sent messages and who they message with; performance data; mouse movements, clicks, keystrokes or actions (such as mute/unmute or video on/off), edits to transcript text, where authorized by the account owner and other inputs that help InstaVC to understand feature usage, improve product design, and suggest features; which third-party apps are added to a meeting or other product or service and what information and actions the app is authorized to access and perform; use of third-party apps and the InstaVC App Marketplace; features used (such as screen sharing, emojis, or filters); and other usage information and metrics. This also includes information about when and how people visit and interact with InstaVC ’s websites, including what pages are accessed, interaction with website features, and whether or not the person signed up for a InstaVC product or service.
Information from other sources:
Content from Third-Party Integrations: Users can access email and calendars from third-party services through their InstaVC client, if they choose to integrate them. This information is not end-to-end encrypted by InstaVC , but InstaVC employees do not access this content, unless directed to, or required for legal, safety, or security reasons. If account owners and/or their users integrate their third-party emails with products and services offered or powered by InstaVC , such as business analytics tools like Zoho Sales IQ, InstaVC may collect or process email information, including email content, headers and metadata, from such third-party services in order to provide services requested by the account and to improve the product.
Information from Partners: InstaVC obtains information about account owners and their users from third-party companies, such as market data enrichment services, including information about an account owner’s company size or industry, contact information, or activity of certain enterprise domains. InstaVC may also obtain information from third-party advertising partners who deliver ads displayed on InstaVC products and services, such as whether you clicked on an ad they showed you.
In certain jurisdictions, some of the personal data InstaVC receives may be considered sensitive. Please see “California & Other Other U.S. State Privacy Rights” for more information.
How Do We Use Personal Information Data?
We use the information we collect from you for a variety of purposes, including:
Analytics: We use analytics tools to collect information about how our Services are used and to improve our Services.
InstaVC employees do not access meeting, webinar, messaging or email content (specifically, audio, video, files, in-meeting whiteboards, messaging or email contents), or any content generated or shared as part of other collaborative features (such as out-of-meeting whiteboards), unless authorized by an account owner, or as required for legal, safety, or security reasons, as discussed below, and where technically feasible. InstaVC uses personal data to conduct the following activities:
Provide InstaVC Products and Services: Providing and improving our Services: We use your information to provide and improve the Services, to respond to your inquiries, and to communicate with you about the Services.
To provide products and services to account owners, their users, and those they invite to join meetings and webinars hosted on their accounts, including to customize InstaVC products and services and recommendations for accounts or their users. InstaVC also uses personal data to determine what products and services may be available in your location, and uses personal data, including contact information, to route invitations, messages, or InstaVC Emails to recipients when users send or receive invitations, messages, or InstaVC Emails using InstaVC products and services. This may also include using personal data for customer support, which may include accessing audio, video, files, messages, and other content or context, at the direction of the account owner or their users. We also use personal data to manage our relationship and contracts with account owners and others, including billing, compliance with contractual obligations, facilitating payment to third-party developers in relation to purchases made through the InstaVC App Marketplace, and related administration.
Advanced Voice and Video Features: If available, and if you elect to use certain video features, such as filters, studio effects, avatars, and gestures, information about your movements or the positioning of your face or hands may be processed on your device to apply the selected features. Such data does not leave your device, is not retained, is not used to identify you, and is only used to generate the selected effects. If certain features are enabled, such as transcription generation for recordings, InstaVC may use technology that analyzes the meeting’s audio recording to distinguish one speaker from another in order to create an accurate transcript. The audio analysis is not retained after the transcript is generated.
Product Research and Development: To develop, test, and improve InstaVC products and services, including, for example, content-related features (such as background and other filters), and to troubleshoot products and services.
Marketing, Promotions, and Third-Party Advertising: We may use your information to send you marketing communications, such as newsletters or promotional offers. You can opt-out of receiving these communications at any time. To permit InstaVC and/or its third party marketing partners to market, advertise, and promote InstaVC products and services, including based on your product usage, information we receive from third-party partners, information you provide to process referral invitations, or if you visit our websites, information about how and when you visit, and your interactions with them. We may also use this information to provide advertisements to you relating to InstaVC products and services or to engage third party partners to analyze your interactions on our website or app or to deliver advertising to you. InstaVC does not use meeting, webinar, or messaging content (specifically, audio, video, files shared, in-meeting whiteboards, and messages), or any content generated or shared as part of other collaborative features (such as out-of-meeting whiteboards) for any marketing or promotions.
Authentication, Integrity, Security, and Safety: To authenticate accounts and activity, detect, investigate, and prevent malicious conduct, fraudulent activity or unsafe experiences, address security threats, protect public safety, and secure InstaVC products and services.
Communicate with You: We use personal data (including contact information) to communicate with you about InstaVC products and services, including product updates, your account, and changes to our policies and terms. We also use your information to respond to you when you contact us.
Legal Reasons: To comply with applicable law or respond to valid legal process, including from law enforcement or government agencies, to investigate or participate in civil discovery, litigation, or other adversarial legal proceedings, protect you, us, and others from fraudulent, malicious, deceptive, abusive, or unlawful activities, and to enforce or investigate potential violations of our Terms of Service or policies.
InstaVC uses advanced tools to automatically scan content such as virtual backgrounds, profile images, and files uploaded or exchanged through chat, for the purpose of detecting and preventing violations of our terms or policies and illegal or other harmful activity, and its employees may investigate such content where required for legal, safety, or security reasons.
How Do We Share Personal Data?
InstaVC provides personal data to third parties only with consent or in one of the following circumstances (subject to your prior consent where required under applicable law):
Resellers: If an account owner licensed or purchased InstaVC products and services from a third-party reseller of InstaVC products and services, the reseller may be able to access personal data and content for users, including meetings, webinars, and messages hosted by the account owner.
Vendors: InstaVC works with third-party service providers to provide, support, and improve InstaVC products and services and technical infrastructure, and for business services such as payment processing, including in relation to purchases made through the InstaVC App Marketplace. InstaVC may also work with third-party service providers to provide advertisements and business analytics regarding InstaVC products and services. These vendors can access personal data subject to contractual and technical requirements for protecting personal data and prohibiting them from using personal data for any purpose other than to provide services to InstaVC or as required by law. InstaVC may integrate third-party technology to provide advanced features, to process information on your device about face or hand dimensions and gestures to provide video effects. This information is processed on your device, and such information is neither received nor stored by either the third party, or InstaVC .
For Legal Reasons: InstaVC may share personal data as needed to: (1) comply with applicable law or respond to, investigate, or participate in valid legal process and proceedings, including from law enforcement or government agencies; (2) enforce or investigate potential violations of its Terms of Service or policies; (3) detect, prevent, or investigate potential fraud, abuse, or safety and security concerns, including threats to the public; (4) meet our corporate and social responsibility commitments; (5) protect our and our customers’ rights and property; and (6) resolve disputes and enforce agreements.
Marketing, Advertising, and Analytics Partners: InstaVC uses third-party marketing, advertising, and analytics providers: to provide statistics and analysis about how people are using InstaVC products and services, including our website; and to provide advertising and marketing for InstaVC products and services, including targeted advertising based on your use of our website. These third-party partners may receive information about your activities on InstaVC ’s website through third-party cookies placed on InstaVC ’s website. To opt out of our use of third-party cookies that share data with these partners, visit our cookie management tool, available in Cookies Settings.
Corporate Affiliates: InstaVC shares personal information with corporate affiliates, such as InstaVC Unified Communications Pvt ltd to provide integrated and consistent experiences across InstaVC products and services and to detect, investigate, and prevent fraud, abuse, and threats to public safety.
Change of Control: We may share personal data with actual or prospective acquirers, their representatives and other relevant participants in, or during negotiations of, any sale, merger, acquisition, restructuring, or change in control involving all or a portion of InstaVC ’s business or assets, including in connection with bankruptcy or similar proceedings.
Third-Party Developers: If you purchase a third-party app or integration from the InstaVC App Marketplace, InstaVC may share information about the purchase with the third-party developer, to provide the app or integration.
Who Can See, Share, and Process My Personal Data When I Join Meetings and Use Other InstaVC Products and Services?
When you send messages or join meetings and webinars on InstaVC , other people and organizations, including third parties outside the meeting, webinar, or message, may be able to see content and information that you share:
Account Owner: An account owner is the organization or individual that signs up for a InstaVC account. Typically, an account owner designates one or more people (called an “administrator”) to manage their account and can grant privileges to users on the account. Depending on their license with InstaVC , the account owner can authorize additional users on their account, and the account owner can create and/or access the profile information for all users on their account. The account owner and their users can invite others (including guests not on their account and unlicensed participants) to meetings or webinars hosted on their account.
InstaVC gives account owners controls and features that they can use to determine whether certain types of content, such as recordings or InstaVC Team Chat messages, can be created or sent, and what third-party apps can be used, for meetings and webinars hosted on their account. Depending on their settings, account owners and the users they designate can access personal data for participants who join meetings and webinars on their account or send messages to users on their account. Specifically, account owners may have access to:
Account Usage:
Product Usage: Information about how users and their devices interact with their account, which may include who sent messages to their users in chat, email addresses, IP addresses, device information, and other information about who joined meetings or webinars on their account, whether their users viewed or downloaded a recording, how long participants participated in their meetings, the time a message was sent, information about InstaVC Phone integrations, and other usage information and feedback metrics.
Participant List: Information about the participants in a InstaVC meeting, webinar, or chat, which may include name, display name, email address, phone number, and participant or user ID.
Registration Information: Information provided during registration for a webinar, meeting, InstaVC Room, or recording hosted by the account.
InstaVC Team Chat and Out-of-Meeting Collaborations: If enabled on their account, account owners and those they authorize can see information about who sent and received InstaVC Team Chat messages, including synced in-meeting messages (e.g., from a dedicated meeting group chat that is synced with InstaVC Team Chat), to users on their account, along with information about the message (for example, date and time, and number of members or participants). Depending on their settings, account owners also can see sender and receiver information, and other messaging data, along with the content of messages sent to and from users on their account (including from in-meeting chat where dedicated meeting group chats are enabled), unless the account owner has enabled Advanced Chat Encryption. Depending on their settings, account owners and those they authorize may also see the content shared through collaborative features, including whiteboards, files, and images shared in InstaVC Team Chat.
- In-Meeting/Webinar Messages: Depending on their settings, account owners can see sender and receiver information, along with the content of messages sent to and from users on their account, in the following circumstances:
- Messages sent to Everyone in a meeting that is recorded
- Messages sent to the meeting group chat in a meeting when a dedicated meeting group chat is enabled
- Messages sent to panelists in a webinar that is recorded
- Messages sent in dedicated meeting group chats in Team Chat
- Direct messages if the account owner has enabled archiving
- If a participant in a meeting is subject to archiving, their account owner will have access to messages sent to Everyone in the meeting, as well as direct messages sent to that participant. If a participant who is a member of a dedicated meeting group chat is subject to archiving, the member’s account owner will have access to the meeting group chat messages, as well as direct messages sent to that member. If a guest in a meeting with a dedicated meeting group chat is subject to archiving, the guest’s account owner will have access to messages sent to the meeting group chat, as well as direct messages sent to that guest.
- Recordings: Account owners can watch the content of recordings of meetings and webinars hosted on their account. They can also view, share, and enable advanced features for transcripts of meeting audio.
- Polling, Q&A, and Feedback: Account owners can see information about who provided responses to their polls, Q&A, or post meeting or webinar feedback requests, including name and contact information, together with the responses or feedback, unless responses are submitted anonymously.
- InstaVC Email and InstaVC Calendar Content: Depending on their settings, account owners, and designated account administrators, can access email and calendar content sent to and from users on their InstaVC Email or InstaVC Calendar accounts, even if those InstaVC Emails are encrypted.
Meeting Hosts, Participants, and Invitees: Meeting hosts, participants, and invitees may be able to see your email, display name, profile picture, and presence status, including in InstaVC meetings and in InstaVC ’s native calendar service. Meeting hosts, participants, and invitees can also see and (depending on the account owner’s settings) record, save, and share meeting content, audio transcripts, messages sent to Everyone, messages sent to meeting group chats (where enabled, and whether sent in Team Chat or in-meeting), or messages sent to them directly, and files, whiteboards or other information shared with them (including during a meeting, or through a dedicated meeting group chat). Meeting hosts may also share chat transcripts to InstaVC Team Chat, depending on their account owner’s settings. Meeting hosts may also be able to see responses to Q&A and polls generated during the meeting.
InstaVC Email, Calendar and InstaVC Team Chat Recipients: Recipients of InstaVC Emails and InstaVC Calendar invites can see, save, and share your email and calendar content with others, including by sharing emails to InstaVC Team Chat. If a recipient shares encrypted content with others, for example, by sharing an encrypted InstaVC Email to InstaVC Team Chat, or forwarding an encrypted InstaVC Email to a third-party recipient without a InstaVC Email account, the shared or forwarded content will not be end-to-end encrypted by InstaVC . Those with access to your device and login credentials may be able to see, save and share your email and calendar contents on that device. Recipients of InstaVC Team Chats can see your messages, reactions, emojis, and related content, including content from InstaVC Emails, InstaVC Calendar, and emails from third-party services integrated in the InstaVC client, that you or a third-party choose to share to InstaVC Team Chat, and in-meeting messages that participants send that are synced with InstaVC Team Chat through dedicated meeting group chats. Depending on the account owner’s settings, InstaVC Team Chat recipients may record, save, or share your messages.
Webinar Panelists and Attendees: Only panelists may be visible to attendees during a webinar, but attendees who agree to unmute can be heard by other attendees. If an attendee agrees to become a panelist during a webinar, they may be visible to other attendees, depending on settings. Panelists and attendees may be able to see the name of a participant who asks a question during a Q&A, along with their question, unless the participant submits the question anonymously.
Livestreams: Meeting and webinar hosts can choose to livestream to a third-party site or service, which means anyone with access to the livestream will be able to see the meeting or webinar.
Apps and Integrations:
Account owners can choose to add InstaVC -developed apps and third-party apps to their account and the InstaVC Products they use, including via use of the InstaVC App Marketplace, and they can also control whether their users can add and use specific InstaVC and third-party apps, including in meetings, webinars, and chats hosted on their account.
Account owners can also choose to integrate other content from third-party services– such as third-party email communications on their corporate account – to apps and services that they use.Further, account owners may choose to have InstaVC analyze the meeting’s audio recording to distinguish one speaker from another in order to create an accurate transcript. The audio analysis is not retained after the transcript is generated.
Depending on their settings, account owners’, users’ and guests’ personal data and content may be shared with apps and integrations approved by account owners, which may include all of the personal data categories listed above, such as account information, profile and contact information, registration information, participants list, settings, content, product usage, device information, or third-party emails that have been shared with the app.
Other participants in the meeting may be able to see the app that you are using in a meeting, if the app is receiving content (including audio and video) from the meeting.
Third-party developers may also integrate or embed InstaVC meetings into their website or app experiences or build versions of InstaVC that enable access to InstaVC Products from a third-party app.
Personal information shared by account owners and users with third-party apps and integrations is collected and processed in accordance with the app developers’ terms and privacy policies, not InstaVC ’s.
Privacy Rights And Choices
If you are in the European Economic Area (EEA), Switzerland, or the UK, or a resident of California or another U.S. state with an applicable privacy law, please refer to the respective dedicated sections below. Otherwise, at your request, and as required by applicable law, we will:
Inform you of what personal data we have about you that is under our control;
Amend or correct such personal data or any previous privacy preferences you selected, or direct you to applicable tools; and/or
Delete such personal data or direct you to applicable tools.
In order to exercise any of your rights as to personal data controlled by InstaVC , you can email us at privacy@instavc.com . Where legally permitted, we may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, or jeopardize the privacy of others. As an account owner or a user under a licensed account, you may also take steps to affect your personal data by visiting your account and modifying your personal data directly.
How To Contact Us
If you have any privacy-related questions or comments related to this Privacy Statement, please send an email to privacy@instavc.com
You can also contact us by writing to the following address:
InstaVC Technologies Pvt Ltd,
Q3, A3, 4th Floor, Cyber Towers, Hitech City, Madhapur, Hyderabad, Telangana – 500081
Retention
We retain personal data for as long as required to engage in the uses described in this Privacy Statement, unless a longer retention period is required by applicable law.
The criteria used to determine our retention periods include the following:
The length of time we have an ongoing relationship with you and provide InstaVC products and services to you (for example, for as long as you have an account with us or keep using our products);
Whether account owners modify or their users delete information through their accounts;
Whether we have a legal obligation to keep the data (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
Whether retention is advisable in light of our legal position (such as in regard to the enforcement of our agreements, the resolution of disputes, and applicable statutes of limitations, litigation, or regulatory investigation).
European Data Protection Specific Information
Data Subjects Rights
If you are in the EEA, Switzerland, or the UK, your rights in relation to your personal data processed by us as a controller specifically include:
Right of access and/or portability: You have the right to access any personal data that we hold about you and, in some circumstances, have that data provided to you so that you can provide or “port” that data to another provider;
Right of erasure: In certain circumstances, you have the right to the erasure of personal data that we hold about you (for example, if it is no longer necessary for the purposes for which it was originally collected);
Right to object to processing: In certain circumstances, you have the right to request that we stop processing your personal data and/or stop sending you marketing communications;
Right to rectification: You have the right to require us to correct any inaccurate or incomplete personal data;
Right to restrict processing: You have the right to request that we restrict processing of your personal data in certain circumstances (for example, where you believe that the personal data we hold about you is not accurate or lawfully held).
To exercise your rights, please email us at privacy@instavc.com . If you have any other questions about our use of your personal data, please send a request at the contact details specified in Contact Us section of this Privacy Statement. Please note that we may request you to provide us with additional information in order to confirm your identity and ensure that you are entitled to access the relevant personal data. You also have the right to lodge a complaint to a data protection authority. For more information, please contact your local data protection authority.
Legal Basis for Processing Personal Data
We only use your information in a lawful, transparent, and fair manner. Depending on the specific personal data concerned and the factual context, when InstaVC processes personal data as a controller for individuals in regions such as the EEA, Switzerland, and the UK, we rely on the following legal bases as applicable in your jurisdiction:
As necessary for our contract: When we enter into a contract directly with you, we process your personal data on the basis of our contract in order to prepare and enter into the contract, as well as to perform and manage our contract (i.e., providing InstaVC products and services, features and services to account owners, their users, and those they invite to join meetings and webinars hosted on their accounts, and manage our relationship and contract, including billing, compliance with contractual obligations, and related administration). If we do not process your personal data for these purposes, we may not be able to provide you with all products and services;
Consistent with specific revocable consents: We rely on your prior consent in order to utilize cookies to engage advertising and analytics partners to deliver tailored advertising and analysis of our website usage. You have the right to withdraw your consent at any time by visiting our cookie management tool, available Cookies Settings;
As necessary to comply with our legal obligations: We process your personal data to comply with the legal obligations to which we are subject for the purposes of compliance with EEA laws, regulations, codes of practice, guidelines, or rules applicable to us, and for responses to requests from, and other communications with, competent EEA public, governmental, judicial, or other regulatory authorities. This includes detecting, investigating, preventing, and stopping fraudulent, harmful, unauthorized, or illegal activity (“fraud and abuse detection”) and compliance with privacy laws;
To protect your vital interests or those of others : We process certain personal data in order to protect vital interests for the purpose of detecting and preventing illicit activities that impact vital interests and public safety, including child sexual abuse material; and
As necessary for our (or others’) legitimate interests, unless those interests are overridden by your interests or fundamental rights and freedoms, which require protection of personal data: We process your personal data based on such legitimate interests to (i) enter and perform the contract with the account owner and/or reseller providing you with the products and services (which includes billing, compliance with contractual obligations, and related administration and support); (ii) develop, test, and improve our products and services and troubleshoot products and services; (iii) ensure authentication, integrity, security, and safety of accounts, activity, and products and services, including detect and prevent malicious conduct and violations of our terms and policies, prevent or investigate bad or unsafe experiences, and address security threats; (iv) send marketing communications, advertising, and promotions related to the products and services; and (v) comply with non-EEA laws, regulations, codes of practice, guidelines, or rules applicable to us and respond to requests from, and other communications with, competent non-EEA public, governmental, judicial, or other regulatory authorities, as well as meet our corporate and social responsibility commitments, protect our rights and property and the ones of our customers, resolve disputes, and enforce agreements.
International Data Transfers
InstaVC operates globally, which means personal data may be transferred, stored (for example, in a data center), and processed outside of the country or region where it was initially collected where InstaVC or its service providers have customers or facilities – including in countries where meeting participants or account owners hosting meetings or webinars that you participate in or receiving messages that you send are based.
Therefore, by using InstaVC products and services or providing personal data for any of the purposes stated above, you acknowledge that your personal data may be transferred to or stored in the United States, India, as well as in any other countries outside of the EEA, Switzerland, and the UK. Such countries may have data protection rules that are different and less protective than those of your country.
We protect your personal data in accordance with this Privacy Statement wherever it is processed and take appropriate contractual or other steps to protect it under applicable laws. Where personal data of users in the EEA, Switzerland, or the UK is being transferred to a recipient located in a country outside the EEA, Switzerland, or the UK which has not been recognized as having an adequate level of data protection, we ensure that the transfer is governed by the European Commission’s standard contractual clauses. Please contact us if you would like further information in that respect.
ANNEXURE:
Jurisdiction-specific provision:
California Privacy Rights Act
This CPRA Privacy Policy describes InstaVC practices regarding the collection, use, and disclosure of the personal information of California residents, describes the rights of California residents under the California Consumer Privacy Act (“CPRA”), and explains how California residents may contact InstaVC to exercise those rights. This CPRA Privacy Policy only applies to the personal information of California residents.
CPRA Categories of Personal Data
| Categories of Personal Data | Personal Data Collected |
|---|---|
| Identifiers | Name, phone number, email address |
| IP address | N/A - We do not collect IP address |
| Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | N/A - We do not collect Biometric information |
| Financial Information | N/A - We do not collect |
| Commercial Information | N/A - We do not collect Biometric information |
| Protected Classification Characteristics under California or Federal Law | N/A - We do not collect information such as Gender, Age, national origin, marital status, etc. |
| Biometric Information | N/A - We do not collect Biometric information |
| Internet or Other Similar Network Activity | Log data, session information, Cookie ID |
| Geolocation Data | N/A - We do not collect Geolocation data |
| Sensory Data | N/A - We do not collect any Sensory data |
| Professional or Employment-Related Information | N/A - We do not collect |
| Inferences Drawn from Other Personal Information | Not collected |
| Non-Public Education Information (per the Family Educational Rights and Privacy Act) | N/A - We do not collect |
No Sale of Personal Data:
InstaVC has not sold Personal Data in the preceding twelve (12) months.
Right To Opt-Out Of The Sale Of Personal Data:
InstaVC does not sell your personal data.
If in case, InstaVC ever changes its policy and choose to sell Personal Data, you would have the right to opt-out of the sale of your Personal Data by clicking on the Do Not Sell or share My Personal Information
Sensitive data:
We do not generally seek to collect sensitive data through this site or otherwise. In the limited cases where we do seek to collect such data, we will do this in accordance with California Privacy Rights Act (“CPRA”) requirements. If in case, InstaVC ever chooses to use Sensitive Personal Data, you would have the right to limit the use of your sensitive personal Data by clicking on the Limit the Use of My Sensitive Personal Information.
The term “sensitive data” refers to the various categories of personal data identified by CPRA as requiring special treatment, including in some circumstances the need to obtain explicit consent from you. These categories include racial or ethnic origin, political opinions, religious, philosophical, or other similar beliefs, membership of a trade union, physical or mental health, biometric or genetic data, sexual life or orientation, or criminal convictions and offences (including information about suspected criminal activities).
Disclosures of Personal Data for a Business Purpose:
California Notice at Collection
Categories of Personal Information InstaVC Receives: InstaVC may collect, or process on behalf of our customers, the following categories of personal data, as described above, in the “What Personal Data do we receive?” section: identifiers (such as in Account Information, Profile and Participant Information, Contact Information, and Registration Information), financial account information (such as in Account Information); commercial information (such as in Account Information); internet or other electronic network activity information (such as Device Information, Usage Information Regarding Meetings, Webinars, Message, Collaborative Features, and the Website, and Limited Information from InstaVC Email and Calendar Services); audio, electronic, and visual information (such as in Content and Context from Meetings, Webinars, Messaging, and Other Collaborative Features) education information such as from university customers; inferences we derive from the preceding or other information we collect; and sensitive personal information (such as certain categories in Account Information, Content and Context from Meetings, Webinars, Messaging, and Other Collaborative Features.
Sources: We receive information from sources as described in the “What personal data do we receive” section, including: from you (including through your use of our products and services); from partners; from customers; and from publicly available sources. We collect education information from schools that use our services. Please see our “Children’s Education Privacy Statement” for more information.
InstaVC ’s business and commercial purposes for use: InstaVC uses personal data for the following business and commercial purposes: to provide InstaVC Products and Services; for Product Research and Development; for Marketing and Promotions (InstaVC does not use meeting, webinar, or messaging content, or any content generated or shared as part of other collaborative features for any marketing or promotions); Authentication, Integrity, Security, and Safety; to Communicate with You; and for Legal Reasons.
InstaVC may permit advertising and analytics services that are intended to deliver advertising to you and/or analyze your interactions, based on your interactions with our website or app, which may constitute a “sale” or “sharing” of data under California law. See “California & Other U.S. State Privacy Rights” for more information regarding your right to opt-out.
Retention: InstaVC retains personal data for as long as required to engage in the uses described in this Privacy Statement, unless a longer retention period is required by applicable law. Additional detail on retention criteria can be found under Retention, above.
Security: We take reasonable measures to protect the information that we collect from you. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
California & Other U.S. State Privacy Rights
Under some U.S. state laws, including the California Consumer Privacy Rights Act) (CCPA), (as amended by the California Privacy Rights Act) (CPRA), residents may have a right to:
Access the categories and specific pieces of personal data InstaVC has collected, the categories of sources from which the personal data is collected, the business purpose(s) for collecting the personal data, and the categories of third parties with whom InstaVC has shared personal data;
Delete personal data under certain circumstances – Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
Correct personal data under certain circumstances – You have a right to request for correction of Inaccurate personal information. We shall use commercially reasonable efforts to correct the inaccurate personal information as directed by the consumer.
Know What Personal Information is Sold or Shared and to Whom by InstaVC – You have a right to request us information about what personal information is sold or shared by us and with whom.
Limit Use and Disclosure of Sensitive Personal Information – You have a right to request us to limit Use and Disclosure of Sensitive Personal Information. Upon such request we shall prohibit, from using or disclosing the consumer’s sensitive personal information for any other purpose after its receipt of the consumer’s direction unless the consumer subsequently provides consent for the use or disclosure of the consumer’s sensitive personal information for additional purposes and
Opt out of the “sale” of personal data or “sharing” of personal data for targeted advertising purposes. We do not sell your personal data in the conventional sense. However, like many companies, we may use advertising and analytics services that are intended to analyze your interactions with our website or app, based on information obtained from cookies or other trackers, including for delivering advertising to you (such as interest-based, targeted, or cross-context behavioural advertising). You can get more information and opt out of the use of cookies and other trackers on our website and app by clicking the Do Not Sell My Personal Information link, also on our homepage, and setting your preferences. You will need to set your preferences from each device and each web browser from which you wish to opt out. This feature uses a cookie to remember your preference, so if you clear all cookies from your browser, you will need to re-select your preferred settings. California residents may also set the Global Privacy Control (GPC) to opt out of the “sale” or “sharing” of your personal information for each participating browser system that you use. InstaVC does not have actual knowledge that it “sells” or “shares” the personal information of consumers under 16 years of age.
No Retaliation Following Opt Out or Exercise of Other Rights – Non-Discrimination
InstaVC will not discriminate against you for exercising any of these rights, which is further in line with your rights under state law.
Sensitive Information. InstaVC receives information that may be considered sensitive under some state laws, such as certain Account Information (e.g., financial information, log-in information) , certain Content and Context from Meetings, Webinars, Messaging, and Other Collaborative Features and certain Limited Information from InstaVC Email and Calendar Services (e.g., messaging content in cases described herein) InstaVC processes sensitive personal information to provide InstaVC products and services, for product research and development, for authentication, integrity, security, and safety reasons, to communicate with you, for legal reasons, and with your consent. InstaVC does not use or disclose sensitive personal information (as defined under CCPA) for purposes of inferring characteristics about a consumer, or in any way that would require InstaVC to provide a right to limit under the CCPA. Under certain laws, residents may also be permitted to opt out of certain profiling relating to automated processing analyzing certain categories of an individual’s information that would produce a legal or similarly significant effect. InstaVC does not engage in this type of profiling of individuals.
To opt out of the use of cookies on our sites for interest-based advertising purposes, follow the instructions above.
Response Timing and Format
We will acknowledge receipt of your request within 10 business days, and provide a substantive response within 45 calendar days, or inform you of the reason and extension period (up to a total of 90 days) in writing.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
These rights are not absolute, are subject to exceptions and limitations, and may not be afforded to residents of all states. In certain cases, we may decline requests to exercise these rights where permitted by law. We will need to verify your identity to process your access, deletion, and correction requests and reserve the right to confirm your state residency. To verify your identity, we may require you to log into your existing InstaVC account (if applicable), give a declaration as to your identity under penalty of perjury, and/or provide additional information, such as providing at least two pieces of personal information relating to your account (which will be compared to information we have, such as profile information) or as we otherwise may already have in our possession, such as your email address and phone number. We will verify your consumer request by comparing the information you provide to information already in our possession, and take additional steps to minimize the risk of fraud. You may designate an authorized agent to submit your verified consumer request by providing written permission and verifying your identity, or through proof of power of attorney.
Appeal a denial of your request. Some states provide additional rights to their residents. If we decline to process your request, you may have the right to appeal our decision. You can do so by replying directly to our denial or emailing privacy@instavc.com
California’s Shine The Light Law
California Civil Code Section 1798.83, also known as “Shine The Light” law, permits California residents to annually request information regarding the disclosure of your Personal Information (if any) to third parties for the third parties’ direct marketing purposes in the preceding calendar year. We do not share Personal Information with third parties for the third parties’ direct marketing purposes.
Children’s Educational Privacy Statement
This Children’s Educational Privacy Statement (“Statement”) describes the personal data we collect, use or disclose from students under the age of 18 when they receive educational services from schools and other organizations who are using InstaVC Collaboration Inc.’s (“InstaVC”) meetings, webinars, or messaging platform (“InstaVC Products”) and/or InstaVC business application suite of apps, including “inClass” to provide educational services to children. This Statement supplements InstaVC’s Privacy Statement and applies only if the account settings selected by a school or organization confirm that it provides educational services to children under 18.
Children’s Educational Privacy Statement
This Children’s Educational Privacy Statement (“Statement”) describes the personal data we collect, use or disclose from students under the age of 18 when they receive educational services from schools and other organizations who are using InstaVC Collaboration Inc.’s (“InstaVC”) meetings, webinars, or messaging platform (“InstaVC Products”) and/or InstaVC business application suite of apps, including “inClass” to provide educational services to children. This Statement supplements InstaVC’s Privacy Statement and applies only if the account settings selected by a school or organization confirm that it provides educational services to children under 18.
What Personal Data Does InstaVC Collect From Students?
Personal data is any information from or about an identified or identifiable person, including information that InstaVC can associate with an individual person.
We may collect, or process on behalf of schools or other organizations providing educational services, the following categories of personal data when a student uses or interacts with InstaVC Products to receive educational services, such as when they join their classroom or meet with their teacher on InstaVC:
- Profile and Participant Information: Name, profile picture, contact information, and any other information a school or educational organization allows students to add to their profile or to add when registering for meetings, recordings or webinars hosted on the school or organization’s account.
- Contacts and Calendar Information: Contact lists the school or educational service adds or allows students to use on their account (such as names and email addresses for other students in the school), as well as calendar information added to the account (such as a class schedule or upcoming school events).
- Settings: Preferences and settings students set when using an educational account, such as microphone, audio and video settings, and screen sharing settings.
- Device Information: Information about the computers, phones, and other devices students use when joining meetings or webinars or sending messages using InstaVC Products, including device features (like microphone or camera versions and IDs), IP address (which may be used to infer general location at a city or country level) and WiFi information.
- Meeting, Webinar, and Messaging Content: If the school or educational organization chooses to record meetings or webinars to InstaVC Cloud, InstaVC will store these recordings on behalf of the school or organization. The recordings may contain a student’s voice and image, messages, Q&A, or other content (such as a presentation or whiteboard) shared by a student during a meeting or webinar. InstaVC employees do not access this content unless the school or educational service directs us to do so, or as required for legal, security, or safety reasons.
- Product Usage: Information about how students and their devices interact with InstaVC Products, such as when they join and leave a meeting, whether they send messages and with whom they message, mouse movements, clicks, keystrokes, or actions (such as mute/unmute or video on/off), and other inputs that help InstaVC understand feature usage, improve product design, and suggest features.
How Do We Use Student Personal Data?
InstaVC uses personal data collected from students to conduct the following activities:
- Provide Educational Products and Services: To provide products, features and services for schools and other organizations to use when providing educational services to children, including to customize the product and safety features and settings for a school environment. This may also include using personal data for customer support, which may include accessing audio, video, files, and messages, at the direction of the school or organization.
- Product Research and Development: To develop, test, and improve InstaVC Products that are used in educational settings.
- Authentication, Integrity, Security, and Safety: To authenticate accounts and activity, detect, investigate, and prevent malicious conduct or unsafe experiences, address security threats, protect school and public safety, and secure InstaVC Products.
- Legal Reasons: To comply with applicable law or respond to valid legal process, including from law enforcement or government agencies, to investigate or participate in civil discovery, litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our Terms of Service or policies.
- InstaVC may use advanced tools to automatically scan content such as virtual backgrounds, profile images, and files uploaded or exchanged through chat, for the purpose of detecting and preventing violations of our terms or policies and illegal or other harmful activity, and its employees may investigate such content where required for legal, safety, or security reasons.
How Do We Share Student Personal Data?
InstaVC does not disclose student’s data to third parties, except for:
service providers who help us provide InstaVC Products and technical infrastructure;
where required for legal, security, or safety reasons;
or to other InstaVC affiliates (such as InstaVC Unified Communications Pvt Ltd.) to enable additional products and features for use by schools and educational organizations.
What Student Information Do Schools See And Share On InstaVC Products?
Depending on their policies, settings and how they use InstaVC Products to provide educational services, the school or organization providing educational services may be able to see or to share the following personal data from students who join meetings or webinars on their account. The school or other organization’s use and disclosure of student information is subject to the school or educational organization’s policies, not InstaVC’s. InstaVC does not enable children to make personal information publicly available through the use of InstaVC Products.
- Student Usage and Content: Depending on their settings, the school or other organization providing educational services – and the people they designate — can access (i) information about how students and their devices interact with the school or educational organization’s account; (ii) information about the participants who joined classrooms or meetings on their account (including participant name, display name, email address and participant ID); (iii) the content of recordings hosted on their account, as well as a transcript of audio, if enabled; and (iv) information provided in response to polls, Q&A or other content shared during classrooms, webinars and meetings on their account.
- Teachers, Hosts and Participants: Teachers, hosts and other participants in a classroom or meeting may be able to see students’ email, display name, and profile picture, as well as content and information shared by students during a meeting and webinar. Depending on settings implemented by the school or educational organization, teachers, hosts and participants also may be able to record or save classroom or meeting content, audio transcripts, messages sent to Everyone or to them directly, and files, whiteboards, or other information shared during a classroom or educational meeting.
- Third-Party App: Schools or educational organizations may choose to install third-party apps to add features or educational services to their use of InstaVC Products, including apps that may receive access to personal information about students and other users on their account. InstaVC does not pre-install any apps on educational accounts, and apps will not be able to access personal information from students receiving educational services on InstaVC Products unless the school or educational organization chooses to approve a specific app. Personal information shared by schools and educational organizations with third-party apps is subject to the school or organization’s policies and the app developers’ terms and privacy policies, not InstaVC’s.
- In the United States, before choosing to install third party-apps that may be used by children under the age of 13, schools or educational organizations must obtain parent or guardian consent to the third-party app’s data practices. By installing any third-party app, these schools or other educational organizations agree to obtain such parent or guardian consent and must consent themselves to the disclosure of students’ personal information to the third-party app when installing the app.
How To Review And Delete Student Information
A school or other educational organization may review and delete a student’s information, if in compliance with any applicable law, from their administrator dashboard. If you are a parent or student, please contact your school or other educational organization to access any personal information, limit a student’s access to InstaVC Products features or services, or delete personal information or the student’s entire profile. A school or other educational organization may also take steps to prevent a student from receiving educational services through the use of InstaVC Products on its account in the future, such as by deleting the student’s profile from the school or other educational organization’s account and limiting the student’s access to use of InstaVC.
How To Contact Us
If you are a parent or guardian:
Contact your school administrator if you have questions regarding:
the school’s management of its InstaVC account
the school’s use of your child’s information
third-party apps approved by the school who may have access to your child’s information
exercising your privacy rights with regards to education records
Contact InstaVC using the below contact information if you have questions regarding:
this Statement, InstaVC’s use of student’s information
If you are an administrator for an organization providing educational services to students under 18 years of age, contact InstaVC about the information in this Statement using email privacy@instavc.com
How To Contact Us
If you have any privacy-related questions or comments related to this Privacy Statement, please send an email to privacy@instavc.com
You can also contact us by writing to the following address:
InstaVC Collaboration Inc
39355 California Street, Fremont, California 94538
Your Choices
You may have certain choices regarding your personal information, including:
- You can opt out of receiving marketing and promotional communications from us by following the instructions in the communication or sending an opt out request to privacy@instavc.com
- You can update or correct your personal information by sending us an email
- You can delete your account by contacting us at privacy@instavc.com
We take your privacy seriously and are committed to protecting it. By using our Services, you consent to our collection, use, and disclosure of your personal information and all the above terms as described in this Policy.
Changes To This Privacy Statement
We may update this Privacy Statement periodically to account for changes in our collection and/or processing of personal data, and will post the updated Privacy Statement on our website, with a “Last Updated” date at the top. If we make material changes to this Privacy Statement, we will notify you and provide you an opportunity to review before you choose to continue using our products and services.
