Privacy Policies

Effective Date: February 28, 2020

This Privacy Policy applies to the website, https://gigantum.com and all subdomains. This Privacy Policy describes in detail who is responsible for the personal information that we collect about you, how we will use such personal information, who we may disclose it to and your rights and choices in relation to your personal information. In this Privacy Policy where we use the words personal information, we use these words to describe information that is about you and which identifies you. The "What Information Do We Collect?" section below sets out the personal information we collect in more detail.

One of Gigantum’s main goals is the broad dissemination of knowledge, code and data. Gigantum bundles data, code and environment into an integrated repository that we call a "Project.” A Project can be publicly or privately posted. Publicly posted Projects can be seen, downloaded, and used by people all over the world. Content creators should have no expectation of privacy for the information in public Projects. Outside of what is necessary to maintain and improve the services, we do not intentionally collect information from private Projects.

Data Controller: Reference to “Gigantum” in this Privacy Policy means Gigantum, Inc.. We are the data controller for the purpose of data protection law, in respect of your personal information collected and used through your use of the website and the Service. This is because we dictate the purpose for which your personal information is used and how we use your personal information. We will fairly process your information under the relevant law. If you have questions about how your data is kept or if you wish to exercise one or more of your rights in regard to the data we keep on you, contact us by email at support@gigantum.com (with the subject line “Privacy Concerns”), or regular mail at Gigantum, 1140 3rd ST NE, 2nd Floor, Washington, DC 20002. If you are a user located in the European Union or the European Economic Area, please see our Special Provisions below.

What Personal Information Do We Collect?

We collect certain information to provide, improve and protect the Services, and we strive to collect the minimum amount of information necessary to fulfill these purposes. The types of information we collect include account and communications information (see “Account, Contact and Communications Information” section below), usage information (see “Tracking and Cookies” section below), and content information (see “Public Content” section below). We also outline the information we may collect from you in the table below.

The primary way we receive information is when you interact with our Services, even if you have not created an account. For example, when you visit our website or sign into and use our Services then we may receive information about you called usage information or “log data.” Such log data may include your IP address, browser type, operating system, the referring web page, pages visited, location, and device information.

Gigantum does not intentionally collect sensitive personal information, and any incidental posting or storing of such information by you is not our responsibility to correct or protect. Sensitive personal information includes social security numbers, private health data, or private financial data.

Furthermore, the personal information we collect for the maintenance of your account and the Services is protected and not rented or sold to third parties.

We may collect and share certain aggregated and de-identified data with third parties about how our users interact with the Services and respond to our various offerings. This type of aggregation includes statistics on resource consumption, Project content, collaboration, user preferences, and user interaction data like visits and logins.

Below is a table of the different types of data, including personal information, that we may collect or inspect, our purposes for doing so, and the limitations of what we will do with it. Certain categories of data have further explanation in the sections below the table.

Type of DataPurpose for CollectionUseLimitations on Use
Name and email addressNeeded for creation of account, login, and communicationsProviding the Services.Not shared with any 3rd party, except for the purposes of authentication.
Site visits, usage of the ServicesNeeded for monitoring, maintenance, and improvement of the Services, as well as conformance to the Terms of ServiceDe-identified and aggregated data may be used for legitimate business purposes.De-identified and aggregated data may be used for legitimate business purposes.
Tracking and cookiesNeeded for monitoring, maintenance, and providing and improvement of the ServicesLocal browser storage in the browser is used for session purposes, as well as login. Cookies are used by the JupyterLab application for session purposes. RStudio may use cookies for session purposes.Not used for business purposes outside of maintaining and providing the Services, and is not shared with any 3rd party except when compelled by legal authorities.
IP addressNeeded for monitoring, maintenance, and improvement of the Services, as well as conformance to the Terms of ServiceProviding the services.Not shared with any 3rd party, except for the purposes of authentication or when compelled by legal authorities.
Public ContentNeeded for monitoring, maintenance, and improvement of the Services, as well as conformance to the Terms of ServiceMay be used for legitimate business purposes.Limited by the Terms of Service
Private ContentNeeded for monitoring, maintenance, and improvement of the Services, as well as conformance to the Terms of ServiceDe-identified and aggregated data may be used for legitimate business purposes, and individuals’ data may be used for developing personalized recommender systems with the option by a user to opt out and not have their data used this way.Individuals’ data will be treated as confidential and will not be shared with any 3rd party, except when compelled by legal authorities.

Information Sharing and Disclosure

As required by law, we may access, preserve, and disclose your information, if we believe doing so is required or appropriate to: comply with law enforcement requests and legal process, such as a court order or subpoena; enforce the Terms of Service; respond to your requests; or protect your, our or others’ rights, property, or safety.

We may share your personal information with third-party vendors who process it on our behalf to provide or improve our Service, for example vendors perform services such as user authentication, logging, and network data transmission. When we use third-party vendors, we may provide limited access to your information so that such vendor can perform the tasks on our behalf. We use vendors who have agreed to privacy restrictions similar to our own Privacy Policy, however your use of our Services subjects you to their terms. If you would like a list of these vendors, please email support@gigantum.com with subject heading “List of 3rd party vendors”.

We reserve the right to transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganization.

Account, Contact, and Communication Information

When you create a Gigantum account you must provide personal information, such as your valid email address, desired username, and password. Providing your first and last name is optional and is displayed in connection to your username for the purposes of username based search in the application and improved communication. Your username will be available in whatever Projects or Datasets you post publicly and may appear in search results. Furthermore, when you log into your account with a device, we may associate that device with your account for purposes such as authentication.

We may use your contact information, such as your email address to communicate with you and send you information about your account and our Services, to help others find your account, and to help prevent spam, fraud, or abuse. If you email us, then we may keep your message, email address, and contact information to respond to your request.

Public Information

Much of the Gigantum Services are public-facing, and if your content is public-facing then third parties may access and use it in compliance with our Terms of Service. Additionally, limited personal information, such as your first and last name as you enter them, username and email, is associated with your public content and may be gathered by third parties using our Services. Similarly, other public content on Gigantum Cloud may include your username, collected as part of the collaborative process.

Tracking and Cookies

Technologies we use on the website and/or the Service to collect log data, directly or through our vendors, may include cookies (data files placed on the device used to access the website and/or Service), local browser storage, and analytics software (e.g., Google Analytics).

We use Google Analytics as a third party tracking service to collect information about how our website (gigantum.com) performs and how our users, in general, navigate through and use Gigantum. This helps us evaluate our users’ use of the Services; compile statistical reports on activity; and improve our content and website performance. Google Analytics gathers certain information over time, such as your IP address, browser type, internet service provider, referring and exit pages, timestamp, and similar data about your use of the Services. Google provides further information about its own privacy practices and offers a browser add-on to opt out of Google Analytics tracking.

We use Hubspot for tracking website activity (gigantum.com) to improve our Services and support lead generation and communication with users.

“Do Not Track” is a privacy preference you can set in your browser if you do not want online services to collect and share certain kinds of information about your online activity from third party tracking services. We do not track your online browsing activity on other online services over time and we do not permit third-party services to track your activity on our website beyond our Google Analytics tracking, which you may opt out of. Please note, however, that we cannot control third-party tracking and there may be some third-party tracking that occurs without our consent or knowledge. Unless your browser or device settings are configured to make your website and/or Service activities and publicly available information about your activities (such as log data) invisible to usage analytics tools, we do not presently have the capability to omit you from usage analytics to the extent your browser only sends a “do not track” message and does not otherwise screen you from tracking without any action on our part.

To learn more about browser tracking signals and “Do Not Track”, please visit http://allaboutdnt.org.

How We Secure Your Information

We take measures reasonably necessary to protect personal information from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure its appropriate use. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission, or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

Retention of Information

We keep your personal information for as long as necessary for the purposes for which it was collected, including to provide you with Service and to conduct our legitimate business interests, or where otherwise required by law.

Third-Party Links

The website may contain links to third-party websites that are not controlled by us. These links are made available to you as a convenience, and you agree to use these links at your own risk. Please be aware that we are not responsible for the privacy policies and practices or content of such third-party sites. This Privacy Policy only applies to information we collect from you while you are using the website or our Service. If you navigate to a third-party website from the Website and/or Service, we encourage you to review and become familiar with such third-party website’s privacy policy and statements.

Your California Privacy Rights

Pursuant to Section 1798.83 of the California Civil Code, California residents have the right to request from a business with whom the California resident has an established business relationship: (1) What types of personal information, if any, of the California resident the business shares with third parties for direct marketing purposes of those third parties; and (2) the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year.

We do not currently share any personal information with third parties for their direct marketing purposes. If you have any questions, comments or requests related to this section of the Privacy Policy, please contact us by email at support@gigantum.com. A number of states are currently considering enacting laws similar to the California law mentioned above. If you are a resident of a state that enacts such a law, please use the contact information above to contact us with any questions, comments or requests.

Notice to Residents of Countries Outside the United States.

We are headquartered in the United States. Personal information may be accessed or used by us or transferred to us in the United States or to our affiliates, business partners, or vendors elsewhere in the world. If you are located outside the United States, be advised that any information you provide to us will be transferred to and stored in the United States and that, by submitting information to us, you explicitly authorize its transfer and storage within the United States. We will treat the personal information subject to this Privacy Policy according to this Privacy Policy regardless of where it is processed or stored. If you are in the European Union or the European Economic Area, please review the Special Provisions below.

Complaints

If you have concerns about the way Gigantum is handling your personal information, please let us know immediately by emailing us directly atsupport@gigantum.com with the subject line “Privacy Concerns.”

Changes to this Privacy Statement

We reserve the right to change our Privacy Policy from time to time in our sole discretion. We will provide notification of material changes to this Privacy Policy through the website by posting a notice on our home page or sending email to the email address specified in your account. The updated Privacy Policy will take effect upon its posting unless otherwise communicated to you. We encourage you to review this Privacy Policy periodically.

By continuing to use the website following any such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Privacy Policy, in whole or in part, you can choose to discontinue use of the website and/or Service.

This Privacy Policy was last updated on February 28, 2020.

Special Provisions for Users in the European Union/European Economic Area

If you are a website user or user of our Service that is located in the European Union (the “EU”) or the European Economic Area (the “EEA”), the following additional terms of this Privacy Policy apply to you.

On What Legal Bases Do We Process Personal Information?
PurposeLegal Basis
To provide the website to you.This is in our legitimate interest (i.e., the provision of the website to you).
To provide you with the Service we offer (including any promotions).This is in our legitimate interest (i.e., the provision of the Service to you), and depending on the circumstances, to perform a contract between you and Gigantum.
To communicate with you and other individuals and to carry out your requests and respond to your communications.This is in our legitimate interest (i.e., the provision and support of the website and Service)
To carry out our obligations arising from any contracts entered into between you and Gigantum.This is to perform a contract between you and Gigantum.
To notify you about changes to the website.

This is in our legitimate interest (i.e., the provision and support of the website and Services, improvement and development of our business operations as well as to improve and ensure the security of the website and those Service).

We may request your consent in circumstances where a legal justification over and above legitimate interests is required by applicable law (e.g., in relation to our use of certain cookies).

To manage complaints, feedback and questions.This is in our legitimate interests (i.e., the provision and support of the website and Service and improvements and development of our business operations).
To provide you with information about the Service we offer in accordance with your preferences as indicated, including any marketing consent preferences.We can do this based on your consent.
To comply with any legal or regulatory obligations (including in connection with a court order and establishing, exercising or defending legal claims).This is in our legitimate interests (i.e., protection of our business, employees and customers) and for compliance with legal obligations to which we are subject.
To enforce or apply the agreements concerning you (including agreements between you and Gigantum).This is in our legitimate interest (i.e., protection of our business, employees and customers).
Transfers Outside of the European Union/European Economic Area

Due to the global nature of our business, and in order to provide our Service, we may need to transfer your personal information to locations outside the jurisdiction in which you provide it or where you are viewing this website for the purposes set out in this Privacy Policy. This may include a transfer of your information from a location within the European Economic Area (the “EEA”), which includes the member states of the European Union (the “EU”) to outside the EEA, or from outside the EEA to a location within the EEA. Please review “Information Sharing and Disclosure” section above for more detail on how the information may be shared with our third party vendors.

The level of information protection in countries outside the EEA may be less than that offered within the EEA. Where this is the case, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws. Where our third party vendors process personal data outside the EEA in the course of providing services to us, our written agreement with them will include appropriate measures, usually standard contractual clauses. For more information about the measures in place, please contact us (see “Complaints” section).

Your Rights
Summary of your rights
Right of access to your personal informationYou have the right to receive a copy of your personal information that we hold about you, subject to certain exemptions.
Right to rectify your personal informationYou have the right to ask us to correct your personal information that we hold where it is incorrect or incomplete.
Right to erasure of your personal information:You have the right to ask that your personal information be deleted in certain circumstances. For example (i) where your personal information is no longer necessary in relation to the purposes for which they were collected or otherwise used; (ii) if you withdraw your consent and there is no other legal ground for which we rely on for the continued use of your personal information; (iii) if you object to the use of your personal information (as set out below); (iv) if we have used your personal information unlawfully; or (v) if your personal information needs to be erased to comply with a legal obligation
Right to restrict the use of your personal informationYou have the right to suspend our use of your personal information in certain circumstances. For example (i) where you think your personal information is inaccurate and only for such period to enable us to verify the accuracy of your personal information; (ii) the use of your personal information is unlawful and you oppose the erasure of your personal information and request that it is suspended instead; (iii) we no longer need your personal information, but your personal information is required by you for the establishment, exercise or defence of legal claims; or (iv) you have objected to the use of your personal information and we are verifying whether our grounds for the use of your personal information override your objection.
Right to object to the use of your personal informationYou have the right to object to the use of your personal information in certain circumstances. For example (i) where you have grounds relating to your particular situation and we use your personal information for our legitimate interests (or those of a third party); and (ii) if you object to the use of your personal information for direct marketing purposes.
Right to data portabilityYou have the right to obtain your personal information in a structured, commonly used and machine-readable format and for it to be transferred to another organisation, where it is technically feasible. The right only applies where the use of your personal information is based on your consent or for the performance of a contract, and when the use of your personal information is carried out by automated (i.e. electronic) means.
Right to withdraw consentYou have the right to withdraw your consent at any time where we rely on consent to use your personal information.
Right to complain to the relevant data protection authorityYou have the right to complain to the relevant data protection authority where you think we have not used your personal information in accordance with data protection law. You may lodge a complaint with the authority in the member state of your habitual residence or of an alleged infringement of data protection law.

You can exercise these rights by visiting https://gdpr.gigantum.com.