Last Updated August 26, 2024
Privacy policy
Malbec Solutions, Inc. (“Malbek”, “us”, “we”, or “our”) operates the https://malbek.io website and the Malbek Klix, Malbek Lifecycle AI, Malbek Konnect, and Malbek ContraxTM (“Contrax”) solutions which are software as a service offerings for licensed business users to manage their entire contracting lifecycle end-to-end from initial request to execution and post-execution (the “Service”).
This page informs you of our policies for the collection, use and disclosure of Personal Information when you use our Service. Malbek may be a data processor of your personal data.
We will not use or share your information with anyone except as described in this Privacy Policy. We may use certain Personal Information for providing and improving the Service.
By using the Service, you agree to the collection and use of certain information in accordance with this policy and our DPA and by our sub-processors. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions and as defined within any applicable software license master services agreement that we may have with you.
Information Collection and Use
Data We Collect on Behalf of Customers
When Customers use our solution and or certain functionality like Lifecycle AI, we will receive certain information from such customers. This information may include email addresses, usernames, first and last names, company information, and contract data. What specific information requested is at the discretion of the customer and not determined or controlled by us. Any such data is processed strictly and only in accordance with our customer’s instructions and their usage of solution functionality. In such instances, the customer is the “data controller” (for purposes of GDPR) or the “business” (for purposes of the CCPA) and is responsible for most aspects of the processing of any information we receive in accordance with this section.
Additionally, and where applicable, we anonymize personal information before using any such information in conjunction with a third-party AI tool. We also do not use user data to train an AI models we use. We also have a do not train provision in our agreements with our 3rd party AI tool providers. Any data submitted or used with a third-party AI provider is not used to further train the AI Solution. If you have any questions or concerns about how your personal information is processed in these cases, including how to exercise your rights as a data subject, please contact your business. If we receive any rights requests concerning instances where we act as data processor, we will process your request accordingly.
Data Collected When Using an Approved Integration
While using our Service, including its approved integrations with 3rd party software such as Salesforce.com, Microsoft Word, etc., we will ask for your specific and explicit consent to share with us a limited amount of information solely for the purpose of providing you with access to the specific service you request. This information will be determined by your company, but may include your first and last name, your username, and/or your email address. No human will ever read or see your data unless we need to investigate a technical issue or suspect abuse of the service or functionality you are accessing. In addition, any such data reviewed by a human will be aggregated and only used for internal business purposes in strict accordance with all applicable privacy laws including those in the US and in the EU. Any data shared with us for purposes of accessing a service such as an integrated service, will never be transferred, sold, or used with any credit worthiness platform, advertising platforms, data brokers, or information resellers at any time.
Specific to your use of Contrax, any contract records stored in the Contrax solution (comprising both documents and data together or separately) can be secured and restricted from use and/or viewing post-signature. This is controlled by the customer administrator. Any changes to a Contrax instance’s security including, but not limited to editing and permission settings are captured by Contrax’s audit function. Audit records cannot be edited or modified in any way whatsoever.
Information Collected Automatically
Traffic Data. Malbek or its third-party service providers may collect a variety of visitor data such as IP addresses, browser settings, internet service provider (ISP) information, referring/exit pages, operating systems, date/time stamps, and clickstream data (collectively “Visitor Data”).
Malbek may use compile traffic data about the types of visitors who visit the Malbek website at specific intervals (collectively “Traffic Data”). Malbek may also use Traffic Data to analyze website traffic Site or to display content according to your preferences.
In addition, we may use third-party services such as Google Analytics that collect, monitor, and analyze this type of information to increase our Service’s functionality. These third-party service providers have their own privacy policies addressing how they use such information.
Cookies. Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and transferred to your device. We use cookies to collect information to improve our services for you. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help feature on most browsers provide information on how to accept cookies, disable cookies or to notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.
Surveys, Sweepstakes, and Contests. We may provide you the opportunity to participate in surveys on our site, to measure customer satisfaction. If you participate, we may request certain personally identifiable information from you. Participation in these surveys, sweepstakes, or contests is completely voluntary and you therefore have a choice whether to disclose this information. The requested information typically includes name, email address, and mailing address.
Do Not Track Disclosure. We support Do Not Track (“DNT”). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
Google API Disclosure. Malbek’s use and transfer of information received from Google APIs to any other app will always adhere to Google API Services User Data Policy, including, but not limited to its Limited Use requirements.
Service Providers. We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services and/or to assist us in analyzing how our Service is used. These third parties have access to your Personal Information only to perform specific tasks on our behalf and are obligated not to disclose or use your information for any other purpose.
Communications. We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by contacting us at info@malbek.io.
Compliance With Laws. We will disclose your Personal Information where required to do so by law or subpoena or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Service.
Business Transactions. If Malbec Solutions, Inc. is involved in a merger, acquisition or asset sale, your Personal Information may be transferred as a business asset. In such cases, we will provide notice before your Personal Information is transferred and/or becomes subject to a different Privacy Policy.
Security. The security of your Personal Information is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store, to protect it from unauthorized access, destruction, use, modification, or disclosure. However, please be aware that no method of transmission over the internet, or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the Personal Information we have collected from you.
International Transfers. Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside United States and choose to provide information to us, please note that we transfer the information, including Personal Information, to United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
Links To Other Sites. Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.
Children’s Privacy. Only persons aged 18 or older have permission to access our Service. Our Service does not address anyone under the age of 13 (“Children”).
We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you learn that your Children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child under age 13 without verification of parental consent, we take steps to remove that information from our servers.
Information for Users Outside of the U.S.
If your data is in the European Economic Area (“EEA”), you have the right to access, rectify, or erase any personal data we have collected about you through Malbek. If your business is in a European Union country, your company is subject to the requirements of the General Data Protection Regulation (GDPR). GDPR only applies if the consumers are in the EU when the data is collected. You also have the right to data portability and the right to restrict or object to our processing of personal data we have collected about you through Malbek. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us.
To exercise any of these rights, contact us as set forth in the section entitled “Contact Us” below and specify which right you intend to exercise. We will respond to your request as soon as possible. Malbek may require additional information from you to allow us to confirm your identity. Please note that we store information as necessary to fulfill the purposes of our customers and only use the data for which it was collected and may continue to retain and use the information even after a data subject request for purposes of our legitimate interests, including to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.
Information for California Users
Malbek complies with all applicable CCPA regulations. We do not share personal information with third parties for their any marketing purposes. For more information on how to exercise your rights, please contact us using the information in the “Contact Us” link below.
Your Rights
You have various other rights under applicable data protection laws including the right to:
– Access your personal data
– Correct any incomplete or inaccurate data about you
– Request to erase the personal data about you
– Request to restrict our handling of your personal data
– Withdraw your consent to us handling your personal data
Changes To This Privacy Policy
This Privacy Policy is effective as of the date at the top of this page and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.
We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.
Contact Us
If you have any questions about this Privacy Policy or if you have any issues with our compliance, please contact us immediately at info@malbek.io.