Privacy Policy

Who is Responsible for Your Information?

FormOptix, Inc. is the data controller responsible for processing your personal data. This privacy statement pertains to the processing of personal data by FormOptix as the data controller.

However, it’s important to note that this privacy statement does not apply to personal data that we process as a service provider or data processor on behalf of our enterprise customers. In such cases, our data processing activities are governed by a separate Data Protection Agreement. If you are an end-user of one of these organizations, such as an employee or student, we recommend referring to the privacy statement of that organization for information regarding the processing of your personal data and directing any privacy inquiries to that organization.

FormOptix’s Role in Processing Personal Data

In certain situations, FormOptix acts solely as a service provider on your behalf for the personal data that is collected and processed in connection with our Service. An example of this is the personal data added to a repository by contributors. In such cases, FormOptix’s processing of the data is solely for the purpose of providing, protecting, and improving the Service.

It’s important to note that when contributors request the removal of personal data, FormOptix generally requires notification and action from the repository owner, as per our Private Information Removal Policy. This ensures that the necessary steps are taken to address such requests in a responsible manner.

Information Collected by FormOptix

The personal data collected by FormOptix is determined by your interactions with us, the services you utilize, and the preferences you express. We gather information about you from multiple sources and through various methods when you engage with our Service. This includes data you provide directly, information gathered automatically, data from third-party sources, and information derived or generated from other data.

Information Provided Directly to FormOptix

At FormOptix, we collect personal data that you provide to us. This includes:

1. Registration Information: When creating an account, we collect details such as your name, contact information (username and email address), and credentials like your password.
2. Demographic Information: In certain cases, we may request additional demographic information such as age, gender, and related details.
3. Payment and Billing Information: If you engage in financial transactions or make purchases, we collect payment details such as credit card numbers, financial account information, and other relevant information.
4. Content and Files: Any code, text, photographs, documents, files, videos, or recordings that you upload to our Service are collected by us. Additionally, we retain communications sent to us via email or other means. For instance, you may choose to provide additional information for your Account profile, such as your full name, a profile picture (avatar) that may include a photograph, your biography, location, company, and a URL to a third-party website. Please note that your profile information may be visible to other users of our Service.
5. Feedback and Ratings: We collect any feedback or ratings you provide, including written communications and responses to surveys.

Rest assured that we handle this information in accordance with our privacy policies and take measures to protect your data.

Automatically Collected Information by FormOptix

When you interact with our Service, FormOptix automatically collects certain information. This includes:

1. Transaction Information, Subscription, and Licensing Data: If you have a paid Account, subscription, or engage in transactions (e.g., purchases or sales) through our Service, we collect specific details about these transactions. This may include your full name, address, region, state, country, zip code, as well as the date, time, and amount associated with the transaction.
2. Usage Information and Interactions: When you use our Service, we automatically gather information about your usage patterns and how your device interacts with our platform. This includes details such as the pages you visit, the referring site, your IP address, device information (such as device type, ID, operating system, and application version), session information, the date and time of each request, information related to your contributions to individual repositories, and telemetry data. Telemetry data refers to information about the performance of specific features or services you utilize within the Service. We may collect this information using cookies, which may employ a unique cookie ID. The collection of usage information and interaction data is dependent on your settings or preferences regarding our Service.

Please be assured that we handle this information in accordance with our privacy policies and take appropriate measures to ensure the security and protection of your data.

Information Generated by FormOptix

In addition to the data we collect, FormOptix may also generate new information by making inferences from the existing data we have collected. These inferences are derived through automated processes and help us understand your preferences and other relevant characteristics.

For instance, we may use your IP address to infer your general geographic location, such as the city, state, and country you may be accessing our Service from. These inferences allow us to provide a more personalized experience and improve our services based on the information we have gathered.

Rest assured that we handle this generated information with the same level of care and protection as the data you provide directly or that is automatically collected. We respect your privacy and strive to ensure that any inferences we make are done in a responsible and transparent manner.

Information Collected from Third Parties

In certain instances, FormOptix may collect personal data about you from third-party sources. Here are some examples:

Engagement with other companies: If you choose to interact with other companies related to FormOptix, such as signing up for training or receiving information about FormOptix from our vendors, partners, or affiliates, we may collect personal data from these third parties. It’s important to note that FormOptix does not purchase personal data from third-party data brokers.

Service Providers: We may receive information from processors or service providers who handle data on our behalf. For example, our payment processor collects payment and billing information in connection with our Service.

Content you post on our Service: Any information you store or contribute to a public repository, use in connection with a Community Feature, or make publicly available through our Service will be collected by FormOptix as outlined in this Privacy Statement. It’s essential to be aware that this information may be accessible to both the FormOptix user community and the general public. For more details on repositories and community features, refer to “About your profile.”

Co-branding/marketing partners: We may receive information from partners with whom we offer co-branded services or engage in joint marketing activities.

Publicly available sources: We might obtain information from publicly available sources, such as FormOptix repositories.

Please note that when you are asked to provide personal data, you have the option to decline. Additionally, you can utilize web browser or operating system controls to manage certain types of automatic data collection. However, if you choose not to provide or allow information that is necessary for specific services or features, those services or features may not be available or fully functional.

How FormOptix Uses Your Information

FormOptix utilizes your information to provide, manage, and enhance our Service. We may use your information for the following purposes:

1. Providing and improving our products and services: We use your information to deliver our products and services to you, troubleshoot any issues, and enhance the features on our Service.
2. Business operations: Your information is used for various business operations such as billing, accounting, improving internal processes, securing our systems, detecting fraudulent or illegal activities, and complying with legal obligations.
3. Product and service development: We may use your information to improve and develop new services or features, as well as to conduct research to enhance our offerings.
4. Personalization of the Service: Understanding your preferences helps us personalize your experience on our Service, making it more tailored and enjoyable for you.
5. Customer support: We use your information to provide customer support and address any inquiries or questions you may have.
6. Promotional communications: We may send you promotional communications about new services, features, offers, promotions, and other relevant information related to our Service.
7. Personalized advertising: Your information may be used to personalize and measure the effectiveness of enterprise business ads, including those you encounter outside of our Service. This includes promotional communications and marketing materials you receive in relation to our Enterprise Marketing Pages.
8. Information delivery: We use your information to send you important notifications, such as confirmations, invoices, technical notices, updates, security alerts, support messages, and administrative messages.

To provide you with a seamless and consistent experience, we combine data collected from different sources. This allows us to offer a more personalized and tailored experience for your benefit.

Information We Collect and Share

FormOptix shares personal data as outlined below, with your consent or as necessary to fulfill your transactions or provide requested services. Additionally, we may share each category of your personal data, described earlier, with the following types of third parties for the following business purposes:

1. Public information:
   • Certain options within our Service allow you to publicly display and share your name, username, and specific information such as your profile, demographic data, content and files, or geolocation data. You have control over your email address visibility by adjusting your settings.
   • When compiling FormOptix data, you must adhere to our Terms of Service regarding information usage and privacy. Any publicly available information you gather should be used only for authorized purposes, respecting user preferences and privacy.
2. Third-party applications:
   • We share your personal data with third-party applications based on your explicit request. For instance, if you purchase an application from our Marketplace, we share your username with the application developer to provide you with their services.
   • You have the ability to enable or add third-party applications (Developer Products) to your Account. While these are not necessary for using FormOptix, we will share your personal data with them upon your request. It is your responsibility to manage your use of third-party Developer Products and the personal data you choose to share with them.
3. Organizations you engage with:
   • If you collaborate or become a member of an Organization on FormOptix, the Account owners of that Organization may receive your personal data, granting them visibility into your activity within the Organization’s access log.
   • When accepting an invitation to an Organization, you will be informed about the types of information the owners may access. Please contact the Account owners for more details on how they process your personal data within the Organization and how you can manage your personal data stored in the Account.
4. Service providers:
   • We share your personal data with trusted service providers who process information on our behalf to provide and improve our Service. These providers may handle payment processing, customer support, network data transmission, web analytics, marketing operations, security, online advertising, and similar services.
   • Our service providers may process data in your region, the United States, or any other country where they operate facilities, always ensuring compliance with applicable laws.
5. Affiliates:
   • We grant access to personal data across our subsidiaries, affiliates, and related companies. This may occur when we share common data systems, when affiliates provide services on our behalf, or when access is necessary to operate and deliver the Service effectively.
6. For security purposes:
   • We may disclose personal data if we believe it is necessary to protect our customers and others, prevent spam or fraud, or safeguard against threats to life or serious injury.
   • Personal data may also be disclosed to maintain the security of our Service, including preventing or stopping attacks on our systems or networks.
   • Additionally, personal data may be disclosed to protect our rights, property, or the rights and property of others, such as enforcing our agreements, terms, and policies.
7. Legal disclosure:
   • FormOptix may disclose personal data or other collected information to law enforcement or governmental agencies in response to valid legal processes. For further information regarding our disclosure in response to legal requests, refer to our Guidelines for Legal Requests of User Data.
8. Change in control or sale:
   • If FormOptix is involved in a merger, sale, or acquisition of corporate entities or business units, your personal data may be shared as part of the described transaction.

Please note that certain features of our Service may include integrations, references, or links to services provided by third parties. The privacy practices of these third parties may differ

Your Choices Regarding Our Processing of Your Personal Data

We value your choices when it comes to the personal data we collect about you. Please note that the choices you make will not apply to any personal data associated with an Organization under your Account.

1. Access, Correction, and Deletion:
   • As a FormOptix user, you have the ability to access, update, alter, or delete your basic user profile information by editing your user profile or reaching out to FormOptix Support or FormOptix Premium Support.
   • You can control the information we collect about you by managing the content of your profile, ensuring your information is up to date, adjusting your cookie preferences, or contacting FormOptix Support or FormOptix Premium Support.
   • We retain and use your information as described in this Privacy Statement. However, unless legally required, we will delete your complete profile within 90 days of your request. Certain data, such as contributions to other users’ repositories and comments on issues, may remain even after your account deletion.
   • We will delete or de-identify your personal data, including your username and email address, from the author field of issues, pull requests, and comments by associating them with a ghost user. However, your email address provided through your Git commit settings will always be associated with your commits in the Git system. If you wish to make your email address private, please update your Git commit settings.
   • We are unable to change or delete data in the Git commit history, as the Git software is designed to maintain a record. However, you have control over the information you include in that record.
2. Personal Data Processing by FormOptix:
   • If FormOptix processes personal data other than your profile information, which includes information obtained from third parties, you may, in accordance with applicable law, access, update, alter, delete, object to, or restrict the processing of your personal data by contacting FormOptix Support or FormOptix Premium Support.
   • You can adjust your Account settings to control the display of your personal data in private or public repositories or personal data processed in connection with Community Features (such as FormOptix Feed, FormOptix Sponsors, and FormOptix Explore) through your profile settings.
   • If you are unable to access specific personal data through the means mentioned above, you can request access by contacting us as described at the bottom of this privacy statement.
3. Data Portability:
   • As a FormOptix user, you have the freedom to take your data with you. You can clone your repositories to your desktop or utilize our Data Portability tools to download the information we have about you.
4. Communication Preferences:
   • We use your email address to communicate with you based on your preferences. For example, if you contact our Support team, we will respond to you via email. You have control over the use and sharing of your email address with other users on our Service. You can manage your communication preferences in the email settings of your profile.
   • The Git version control system associates various actions with a user’s email address, such as commit messages. More details about setting your commit email address can be found in our documentation.
   • Depending on your email settings, FormOptix may occasionally send notification emails, such as updates on repositories you follow, new features, feedback requests, important policy changes, or customer support messages. We may also send marketing emails based on your choices and in compliance with applicable laws and regulations. An “unsubscribe” link is included at the bottom of each marketing email we send.
   • Please note that you cannot opt out of receiving important communications from us, such as emails from our Support team or

Cookies and Tracking Technologies

At FormOptix, we utilize cookies to provide, secure, and enhance our Service. Cookies help us improve the user experience, develop new features, and maintain the integrity of our platform. Here’s how we use cookies and tracking technologies:

1. Functionality and Security:
   • Cookies are used to keep you logged in and remember your preferences.
   • They help identify your device for security and fraud prevention purposes, ensuring the integrity of our Service.
   • We may compile statistical reports and gather insights for future development by utilizing cookies.
2. Enterprise Marketing Pages:
   • On Enterprise Marketing Pages, we may use non-essential cookies to personalize the user experience based on interests and online activities.
   • These cookies enable us to provide more relevant ads, content, recommendations, and marketing.
   • Disabling non-essential cookies may result in less relevant content and marketing.
3. Pixel Tags in Emails:
   • Our emails may contain pixel tags, which are small, transparent images.
   • Pixel tags help us determine if you have opened an email and provide us with your IP address.
   • We use this information to improve the effectiveness of our email communications and ensure we send relevant content.
4. Cookie Duration:
   • Cookies can be either “persistent” or “session” cookies.
   • Session cookies remain on your device until you finish browsing, while persistent cookies stay until they expire or are deleted.
   • The expiration time or retention period of persistent cookies depends on their purpose and the tools used.
   • You may have the option to delete cookie data. Please refer to the “FormOptix Privacy Statement” for more information.

What are Cookies and Similar Technologies?

We employ various technologies, such as cookies, web beacons, local storage, and mobile analytics, to deliver and operate our Services. These technologies assist us in providing a seamless user experience. Here’s a breakdown:

1. Cookies:
   • Cookies are small text files stored by your browser on your device.
   • They contain a string of numbers and letters that may uniquely identify your device and hold additional information.
   • When your browser connects to a web server in the same domain, the server can read the cookie and recognize your browser over time.
2. Web Beacons:
   • Web beacons are electronic images embedded within websites or emails.
   • When your browser opens a webpage or email containing a web beacon, it connects to the hosting web server.
   • This allows the server to log information about your device, set its own cookies, and gather relevant data.
3. Mobile Identifiers for Analytics:
   • Mobile identifiers for analytics work similarly to cookies but are specific to mobile devices.
   • These identifiers are accessed and used by mobile apps, enabling data collection for analytics and marketing purposes.
4. Flash Cookies:
   • Flash cookies, also known as Local Shared Objects (LSOs), store information about your use of our Services.
   • They are commonly used for advertisements and videos.

How We Use Cookies and Similar Technologies

We utilize cookies and similar technologies across our Services for various purposes, including:

1. Preferences and Settings:
   • Cookies help store your preferences and settings, enabling personalized experiences.
   • They allow you to sign in and provide a seamless user experience.
2. Performance Analysis:
   • We analyze how our Services perform and track your interactions using cookies.
   • This data helps us improve the platform and develop valuable insights.
3. Fraud Prevention and Legitimate Purposes:
   • Cookies assist in combating fraud and fulfilling other legitimate purposes related to our Service.
   • Some cookies and technologies may be provided by third parties, including service providers and advertising partners.
4. Sharing of Information:
   • We may share the information collected or inferred from cookies and similar

Types of Cookies:

1. Required Cookies: FormOptix utilizes necessary cookies to enable essential website functions and provide our services. These cookies are crucial for activities such as logging you in, saving language preferences, facilitating a seamless shopping cart experience, enhancing performance, routing web traffic, detecting screen size, measuring page load times, and improving overall user experience. These cookies are essential for the proper functioning of our websites.
2. Analytics: We allow third parties to employ analytics cookies to gain insights into how you utilize our websites, helping us enhance their performance and usability. These cookies collect information about the pages you visit and the number of clicks required to complete tasks. Some analytics cookies are also used to deliver personalized advertising.
3. Social Media: FormOptix and third parties employ social media cookies to present you with targeted ads and content based on your social media profiles and interactions on FormOptix websites. This ensures that the ads and content you encounter on our platforms and social media align with your interests. Additionally, these cookies enable third parties to develop and enhance their own products, which may be utilized on websites not owned or operated by FormOptix.
4. Advertising: Furthermore, FormOptix and third parties utilize advertising cookies to display new ads to you based on ads you have previously viewed. These cookies also track the ads you click on and any subsequent purchases, serving both payment purposes and personalized ad delivery. For instance, these cookies detect when you interact with an ad and subsequently present you with ads tailored to your social media interests and browsing history on websites.

Retention of Personal Data

We retain personal data for the duration required to provide the requested services, complete transactions, adhere to legal obligations, settle disputes, enforce agreements, and fulfill other legitimate and lawful business purposes. The specific retention periods can vary depending on factors such as user expectations or consent, data sensitivity, the presence of automated controls for data deletion, and our legal or contractual obligations. In certain cases, we may retain your personal data for extended periods, if necessary and permitted by applicable law, to ensure security measures are upheld.

Securing Your Information

FormOptix implements reasonable measures to safeguard your personal data against unauthorized access, alteration, or destruction. We strive to maintain data accuracy and ensure appropriate use of your personal data. To enhance security, we encourage you to create a strong password, refrain from sharing it with others, and avoid using the same password across multiple sites or accounts.

Regarding private repositories, access to the content is controlled by you. FormOptix personnel only access private repository content under specific circumstances, such as for security purposes, automated scanning for vulnerabilities or prohibited content, assisting with support matters, maintaining service integrity, complying with legal obligations related to potential law violations, or with your consent. We will provide notice of private repository access, unless prohibited by law or if there is a security threat or risk.

Cross-Border Data Transfers: FormOptix may store and process your personal data in various regions, including the United States and other countries where FormOptix or its affiliates, subsidiaries, or service providers operate facilities.

If we transfer personal data from the European Union, the United Kingdom, or Switzerland to countries that haven’t been deemed to provide an adequate level of data protection by the European Commission, we utilize legal mechanisms, such as contractual agreements like the standard contractual clauses published by the European Commission (Commission Implementing Decision 2021/914). These measures are in place to protect your rights and ensure the appropriate safeguards accompany your data. You can request a copy of the Standard Contractual Clauses using the contact details provided in the “Contacting FormOptix” section below.

How to Contact Us: If you have any privacy inquiries or concerns about how FormOptix handles your personal data, please notify us immediately. We are here to assist you. You can reach us by filling out the Privacy contact form, and we will promptly respond to your inquiry.

Dispute Resolution Process: In the unlikely event of a dispute between you and FormOptix concerning the handling of your personal data, please email us directly at privacy@FormOptix.com with the subject line “Privacy Concerns”. We will promptly address your concerns and work towards a resolution. Additionally, you have the right to file a complaint with your local data protection or privacy agency or supervisory authority.

Changes to Our Privacy Statement

FormOptix reserves the right to modify this Privacy Statement periodically for various reasons, including compliance with new laws and regulations, coverage of new features and functionalities, and enhanced transparency. We will notify you of any significant changes to this Privacy Statement at least 30 days before the changes take effect. This notice will be provided through our website by posting a notice on our homepage or sending an email to the primary email address associated with your FormOptix account. Additionally, we will update our Site Policy repository, which records all changes to this policy. For other modifications to this Privacy Statement, we encourage users to regularly check our Site Policy repository.

European Data Protection Rights Notice

If you are in the European Economic Area, we process your personal data in accordance with applicable laws, and the processing of personal data about you is subject to European Union data protection law, you have certain rights with respect to that data:

You can request access to, and rectification or erasure of, personal data; If any automated processing of personal data is based on your consent or a contract with you, you have a right to transfer or receive a copy of the personal data in a usable and portable format; If the processing of personal data is based on your consent, you can withdraw consent at any time for future processing; You can to object to, or obtain a restriction of, the processing of personal data under certain circumstances; and for residents of France, you can send us specific instructions regarding the use of your data after your death.

To make such requests, please use the contact information at the bottom of this statement. When we are processing data on behalf of another party (i.e., where FormOptix is acting as a data processor) you should direct your request to that party. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.

We rely on different lawful bases for collecting and processing personal data about you, for example, with your consent and/or as necessary to provide the services you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.

U.S. State Data Privacy

For U.S. residents, FormOptix processes your personal data in compliance with applicable U.S. state data privacy laws, including the California Consumer Privacy Act (CCPA). This section of our Privacy Statement provides the necessary information required by the CCPA and other U.S. state data privacy laws, which complements our Privacy Statement.

Sale: We do not sell your personal data, and therefore, there is no opt-out option for the sale of personal data.

Sharing: We may “share” your personal data for targeted advertising purposes. However, you have the choice to opt out of sharing data for cross-contextual advertising purposes and manage additional privacy preferences on FormOptix’s Enterprise Marketing pages by selecting “Managing Your Cookie Preferences.” Below are the categories of personal data shared in the past 12 months, along with additional details:

Categories of Personal Data Shared:

• Usage information and Interactions

Categories of Recipients:

• Advertisers

Business or Commercial Purpose for Sharing:

• To support FormOptix’s enterprise marketing efforts

Rights: You have several rights concerning your personal data. You have the right to:

• Request disclosure of the personal data we collect, use, disclose, share, and sell
• Request deletion of your personal data
• Correct your personal data
• Restrict the use and disclosure of your sensitive data
• Opt out of future “sharing” of personal data for targeted advertising purposes

You can make these requests yourself or through an authorized agent. If you choose to use an authorized agent, we provide detailed guidance on how to exercise your privacy rights.

For detailed information on how to exercise these rights, please refer to the “Your choices regarding our processing of your personal data” section in the FormOptix Privacy Statement. You can also use FormOptix’s User Migration API to access and download your data. For more information, please review the “Requesting an archive of your personal account’s data” section.

If you have a FormOptix account, you must utilize the provided tools to exercise your rights, which requires logging in to your FormOptix account. If you have additional requests or questions after logging in, you may contact FormOptix using the address provided in the “How to contact us” section, including through our web form.

If you do not have an account, you can exercise your rights by contacting us as described above. We may request additional information to validate your request before proceeding. You can also submit a request based on these rights via our contact form.

You have the option to opt out of “sharing” information for cross-contextual behavioral advertising purposes and make additional privacy choices related to FormOptix’s Enterprise Marketing pages by selecting “Managing Your Cookie Preferences.” Furthermore, exercising your privacy rights ensures you will not receive discriminatory treatment. We do not discriminate against you if you choose to exercise your privacy rights.

Additionally, under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal information to a business with which they have established a business relationship for personal, family, or household purposes (“California Customers”) have the right to request information regarding the disclosure of personal information to third parties for direct marketing purposes. We want to clarify that we do not disclose personal information to third parties for their direct marketing purposes as defined by this law. If you are a California Customer, you may request further information about our compliance with this law by emailing us at (privacy [at] FormOptix [dot] com). Please note that businesses are obligated to respond to one request per California Customer per year and may not be required to respond to requests made through means other than the designated email address.

California residents under the age of 18 who are registered users of online sites, services, or applications have the right under California Business and Professions Code Section 22581 to remove or request the removal of content or information they have publicly posted. To remove such content or information you have publicly posted, please submit a Private Information Removal request. Alternatively, you can send a detailed description of the specific content or information you wish to have removed to FormOptix support. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online, and certain circumstances may prevent or not require removal according to the law. If you have any questions about our privacy practices concerning California residents, please contact us via our contact form.

Personal Information

Please refer to the table below for details regarding the categories of personal information we collect, the purposes for processing, and the categories of third-party recipients with whom we share this information. For a comprehensive description of the data included in each category, please consult the GitHub Privacy Statement.

Category of Personal Data Purposes of Processing Categories of Third-Party Recipients

Category of Personal Data	Sources of Personal Data	Purposes of Processing	Recipients
Registration information	Users and customers who use create an account	Provide and personalize our Services; authenticate and provide account access; respond to user and customer questions; help, secure, and troubleshoot; honor users rights; and marketing	Service providers and user-directed entities
Demographic information	Users and customers, third-party data brokers	Provide and personalize our Services; product improvement and development; help, secure, and troubleshoot; and marketing	Service providers and user-directed entities
Payment and billing information	Users and customers, financial institutions	Transact commerce; provide our Services; process transactions; fulfill orders; help, secure, and troubleshoot; and detect and prevent fraud	Service providers and user-directed entities
Content and files	Users and customers	Provide our Services; safety; compliance; and help, secure, and troubleshoot; honor user rights	Service providers and user-directed entities
Feedback and ratings	Users and customers	Provide our Services; product improvement; product improvement and development; marketing; customer support; and help, secure, and troubleshoot	Service providers and user-directed entities
Transaction information, subscription and licensing data	Users and customers	Provide, personalize, and activate our Services; customer support; help, secure, and troubleshoot; and marketing	Service providers and user-directed entities
Usage information and Interactions	Users, customers, website visitors	Provide and personalize our Services; product improvement and development; marketing; and help, secure and troubleshoot	Service providers and user-directed entities
Geolocation information	Users, customers, website visitors	Provide and personalize our Services; product improvement and development; marketing; and help, secure and troubleshoot	Service providers and user-directed entities

Sensitive Data Categories

Under applicable U.S. state data privacy laws, we may collect, process, or disclose certain personal data that is considered “sensitive data.” This type of data may be obtained when you participate in surveys, include it in your account profile, or engage in specific community-oriented repositories. It’s important to note that sensitive data is a subset of personal data. In the list below, we provide an overview of the sensitive data categories we collect, the sources from which we obtain this data, the purposes for processing it, and the categories of third-party recipients with whom we may share it.

Sensitive Data Type	Purposes of Processing	Recipients
Account log-in, financial account, debit or credit card number, and the means to access the account (security or access code, password, credentials, etc.)	Transact commerce; process transactions; fulfill orders; provide our Services; help, secure, and troubleshoot; and detect and prevent fraud	Service providers and user-directed entities
Racial or ethnic origin, religious or philosophical beliefs, or union membership	Provide and personalize our products; product development; help, secure, and troubleshoot; and marketing	Service providers and user-directed entities
Medical or mental health, sex life, or sexual orientation	Provide and personalize our products; product development; help, secure, and troubleshoot; and marketing	Service providers and user-directed entities
Contents of your mail, email, or text messages	Provide our products; safety; compliance; and help, secure, and troubleshoot	Service providers and user-directed entities

FormOptix’s Consent for Sensitive Data Collection and Processing

FormOptix seeks your consent to collect and process sensitive data or does so at your explicit direction. We handle your sensitive data responsibly and only utilize or disclose it for the following purposes:

1. Service Provision: We use sensitive data to perform the services, fulfill transactions, or provide goods that you reasonably expect from us.
2. Security and Integrity: We employ sensitive data to ensure the security and integrity of our services, combat malicious activities, fraud, or illegal acts, and protect individuals’ physical safety. We process sensitive data to the extent necessary and proportionate for these purposes.
3. Transient Use: Sensitive data may be used temporarily (including non-personalized advertising) as long as it is not used for profiling or altering an individual’s experience outside the current interaction with FormOptix.
4. Business Operations: Sensitive data is processed to operate our business effectively. This includes maintaining accounts, providing customer service, processing orders/transactions, verifying customer information, processing payments, offering financing, providing analytics, storage, and similar services.
5. Quality and Safety: We may utilize sensitive data to verify or enhance the quality, safety, or functionality of FormOptix’s services or devices.
6. Compliance with Applicable Law: Sensitive data may be processed for activities required by law or any other lawful purposes.

The charts provided above outline the primary sources, purposes of processing, and recipients for each category of personal data. The personal information categories mentioned above are used for the purposes described in the “FormOptix Privacy Statement” section of our Privacy Statement, which includes meeting legal obligations, improving internal operations, and conducting research. We may also disclose these personal information categories for business or compliance purposes. For further information, please refer to the “FormOptix Privacy Statement” section of our Privacy Statement.

Not in a Position to Identify Data (NPI)

In certain situations, FormOptix processes data in a state called “Not in a Position to Identify Data” (NPI) or de-identified data. NPI data is processed in a way that prevents the identification of individuals without additional steps. We maintain NPI data in its de-identified state unless permitted by applicable law, and we do not attempt to re-identify individuals associated with NPI data.

Disclosures of Personal Data for Business or Commercial Purposes

As described in the “How We Share the Information We Collect” section, we share personal data with third parties for various business and commercial purposes. The primary purposes for which we share personal data align with the processing purposes listed in the table above. We also disclose the personal information categories mentioned above for business purposes. For more details, please refer to the “FormOptix Privacy Statement” section of our Privacy Statement.

FormOptix’s Subprocessors

At FormOptix, we prioritize maintaining your trust and safeguarding your information when sharing it with third-party subprocessors, including vendors and service providers. We assume full responsibility for the protection of your data in these collaborations. When onboarding new vendors, we take great care to ensure their compliance with data protection standards. We require all vendors to enter into data protection agreements with us, which restrict their processing of Users’ Personal Information as defined in our Privacy Statement.

To maintain transparency and keep you informed, we regularly update our list of subprocessors. This includes adding new subprocessors who handle Users’ Personal Information, removing subprocessors, or making changes to how we utilize a subprocessor.

If you have any questions or concerns regarding a new subprocessor, we are here to assist you. Please reach out to us through the Privacy contact form, and we will be happy to address your inquiries.

Cookie Usage at FormOptix

At FormOptix, we utilize cookies to enhance the functionality and security of our websites. Cookies also allow us to analyze website usage patterns, enabling us to provide you with an exceptional user experience. If you would like more detailed information about cookies and how and why we use them, we encourage you to review our Privacy Statement.

Data Collection by Conductor

Conductor gathers various types of data to support its service, including file content, repository connections, and additional relevant information. This data is collected to deliver the intended service and may be stored for further analysis and enhancements to the product.

Data Usage and Sharing in Conductor

User Engagement Data collected in Conductor is utilized by FormOptix, Microsoft, GitHub, Amazon or OpenAI to facilitate the provision of the service and to drive improvements.

The utilization of this data may involve:

1. Evaluating the effectiveness of FormOptix Conductor, such as assessing its positive impact on users.
2. Refining ranking and sorting algorithms and optimizing prompt creation.
3. Detecting any potential misuse or violations of the Acceptable Use Policies associated with GitHub Copilot.
4. Conducting experiments and research pertaining to developers and their usage of developer tools and services.

Data Control for Conductor Users

The use of FormOptix Conductor requires the collection, processing, and sharing of user engagement data, which includes pseudonymous identifiers and general usage data. This data will be collected, processed, and may be shared with Microsoft, Google, and OpenAI when utilizing FormOptix Conductor.

To gain detailed insights into how FormOptix handles and utilizes personal data, please refer to the FormOptix Privacy Statement.

For controlling the use of your data in Conductor, it is important to review and adhere to the data management policies and practices outlined in the FormOptix Privacy Statement.

Contact

If you have any questions or concerns about our privacy policy or our use of your personal information, please contact us at privacy@FormOptix.com.

By using our SaaS platform, you consent to the terms of this privacy policy and our collection, use, and disclosure of personal information as described herein.