Company

Cybersecurity

Our terms of use, privacy commitments, and security practices.

Terms & Conditions

All materials on this Web Site ("Site"), and the Site itself, are protected by copyrights, trademarks and/or other intellectual property rights. These materials are owned by or for benefit of SlideSource or its affiliates, or used with permission of its owners. Such materials include, but are not limited to, the photographs, images, illustrations, text, video clips, audio clips, designs, logos, trademarks, trade dress and other materials contained in this Site, as well as the software and source code used in the design and development of this Site. All rights are reserved.

The materials contained in this Site are displayed for information and promotional purposes only. Users do not obtain any right, title or interest in any material or software as a result of any such downloading or copying. Users may not reproduce, publish, transmit, distribute, display, remove, delete, add to, otherwise modify, create derivative works from, sell or participate in any sale of, this Site, any of the materials in this Site, or any related software. Any other use of materials on this Site, including reproduction for purposes other than personal use, modification, distribution or republication, without the prior express written permission of SlideSource is strictly prohibited.

Term

Subject to termination as provided elsewhere in this Agreement, User's access to make Submissions to the Site ("Subscription") shall be on a monthly basis, beginning the first day of each month, terminating on the last day of each month. Thereafter the Subscription will automatically renew unless terminated as outlined herein.

Submissions/Services

User acknowledges that its use of this Site is at User's risk, and shall be governed by this User Agreement which may be amended from time to time. User agrees that any and all comments, messages, postings, data, suggestions, creative ideas, images, designs, concepts, product and service suggestions relating to the SlideSource Site Operations, products and services provided to User and other Customers by SlideSource and other items or critical feedback provided by User to SlideSource ("Feedback") shall be and become the property of SlideSource. Notwithstanding the foregoing, any and all User content, User materials disclosed, uploaded, submitted or offered to SlideSource through or in connection with User's use of this Site and its products and services ("Submissions"), shall be owned by User or licensed for use by User. Such Submission or offer of any Submission shall constitute an assignment to SlideSource of all rights, title and interests in all copyrights and other rights in the Submissions for reproduction by SlideSource solely for Customer's use only. SlideSource is and shall be, under no obligation to pay to anyone any compensation for or in connection with the use of any Submissions or Feedback. By making any Submission through, in connection with, or related to this Site, User agrees that SlideSource has the right (but not the obligation) to copy, publish, distribute or use such Submissions, or any part or parts thereof, in connection with the Services to be provided Customer only, without compensation to User or to any other person. User agrees not to upload, post, distribute or otherwise publish on this Site any material that is libelous, defamatory, obscene, abusive, pornographic, threatening, or an invasion of privacy and is and shall remain solely responsible for the content of any Submission made by User. SlideSource has no obligation to provide ongoing software maintenance and support, and User accepts the Site and software for its use "as is." Should User terminate the Agreement, User shall be responsible for removing User content prior to loss of access to the Site. SlideSource will not actively remove User content, but cannot guarantee content availability beyond 90 days following termination of the Agreement.

Service Availability

User acknowledges and agrees that the services provided under the Subscription or at the Site may not be available at all times. SlideSource will use commercially reasonable efforts to make the Site and Subscription available for access and use, as contemplated under this Agreement, an average of at least ninety-nine percent (99%) of the time during each month during the Term (the "Availability Requirement"), excluding any period of Permitted Unavailability. "Permitted Unavailability" includes "Planned Outages (as defined below) and any unavailability due to causes beyond SlideSource's reasonable control, including, without limitation: any software, hardware, or telecommunication failures; interruption or failure of telecommunication or digital transmission links; internet slow-downs or failures; failures or default of third-party software, vendors or products; and unavailability resulting from User's actions or omissions or a failure of User's communications link or systems. "Planned Outages" means the period of time during which SlideSource conducts standard systems maintenance and any instances requiring emergency maintenance. SlideSource will use reasonable efforts to scheduled Planned Outages during non-peak hours. In the event SlideSource fails to achieve the Availability Requirement, it will use commercially reasonable efforts to correct the interruption as promptly as practicable. In the event SlideSource fails to achieve the Availability Requirement in two consecutive months during the Term of this Agreement, User may terminate the Agreement upon delivery of written notice to SlideSource without further obligation and received a prorated refund of any pre-paid, unused Subscription Fees. The refund is the User's sole and exclusive remedy and SlideSource's sole and exclusive liability for failure to achieve the Availability Requirement.

Subscription Fee

User shall pay to SlideSource a Subscription Fee monthly as reflected on the current Pricing Schedule which is available for review HERE and which shall be the consideration due SlideSource. If and as the Subscription is renewed by User, the then applicable Subscription Fee shall be due for each purchased and/or renewed Subscription. SlideSource, in its discretion, may from time to time change the Pricing Schedule prior to renewal or subsequent purchase. Except as expressly provided elsewhere in this Agreement all Subscription Fees shall be non-refundable.

Beta Services

SlideSource may designate certain trial services to be made available in connection with the Subscription as "Beta Services." The Beta Services will not be ready for use in a production environment. Because they will be at an early stage of development, operation and use of the Beta Services may be unpredictable and lead to erroneous results. User acknowledges and agrees that: (i) the Beta Services will be experimental and will not have been fully tested; (ii) the Beta Services may not meet all User requirements; (iii) the use or operation of the Beta Services may not be uninterrupted or error free; and (iv) use of the Beta Services will be for purposes of evaluating and testing the new functionality and services and providing feedback to SlideSource. Use of the Beta Services will be subject to all of the terms and conditions of this Agreement relating to the Services. User agrees to promptly report any errors, defects, or other deficiencies in the Beta Services to SlideSource. NOTWITHSTANDING ANY OTHER PROVISION OF THIS AGREEMENT, ALL BETA SERVICES ARE PROVIDED "AS-IS" AND "AS-AVAILABLE," WITHOUT WARRANTIES OF ANY KIND AND USER AGREES TO USE THE BETA SERVICES AT USER'S SOLE RISK. User waives any and all claims, now known or later discovered, that it may have against SlideSource, its suppliers and licensors arising out of the Beta Services.

Links

This Site may contain links to other sites. SlideSource is not responsible for the availability of, or any content or material contained in, or obtained through any such sites. Any link to another site, and reference to third-party information, products or services linked to this Site, is not, and should not be construed as, an express or implied endorsement by SlideSource. Any questions or comments relating to such other sites should be addressed to the operator or operators of those sites.

Disclaimer

Periodically material in this Site may contain inaccuracies or typographical errors. SlideSource shall not be liable or responsible for any loss or damage caused by or arising from User's reliance on information obtained from or through this Site. User shall be responsible for evaluating the information and other content available throughout this Site. This Site and the information and materials contained in this Site are subject to change at any time, and from time to time, without prior or subsequent notice.

No Warranties

THIS SITE AND THE CONTENTS OF THIS SITE ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS. SLIDESOURCE MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, WARRANTIES OF TITLE OR FREEDOM FROM MALICIOUS PROGRAMS OR IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE WITH RESPECT TO THIS SITE OR ITS CONTENTS AND EXPRESSLY DISCLAIMS ANY REPRESENTATION AND WARRANTIES. SLIDESOURCE DOES NOT REPRESENT OR WARRANT THAT THE INFORMATION CONTAINED IN THIS SITE IS ACCURATE, COMPLETE OR UP TO DATE, THAT THIS SITE IS FREE OF DEFECTS OR THAT ANY DEFECTS WILL BE REMEDIED. USER AGREES BY USING THIS SITE THAT USE OF THIS SITE IS AT USER'S SOLE RISK, THAT USER ASSUMES FULL RESPONSIBILITY FOR ALL LOSS OF USE, LOSS OF DATA AND COSTS ASSOCIATED WITH ALL NECESSARY SERVICE OR REPAIRS OF ANY EQUIPMENT AND/OR SOFTWARE THAT IS USED IN CONNECTION WITH THIS SITE, AND THAT SLIDESOURCE SHALL NOT BE RESPONSIBLE OR LIABLE FOR ANY DAMAGES OF ANY KIND WHATSOEVER ARISING OUT OF, CAUSED BY OR RELATED TO YOUR USE OF THIS SITE. WHERE APPLICABLE LAW DOES NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SOME OR ALL OF THE FOREGOING DISCLAIMERS OF WARRANTY MAY NOT APPLY TO YOU.

Limitation of Liability

IN NO EVENT SHALL SLIDESOURCE BE LIABLE FOR ANY ACTUAL, DIRECT, INDIRECT, SPECIAL, PUNITIVE, INCIDENTAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES, OR ANY OTHER DAMAGES WHATSOEVER, EVEN IF SLIDESOURCE HAS BEEN PREVIOUSLY ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, WHETHER IN AN ACTION UNDER CONTRACT, TORT OR ANY OTHER THEORY, ARISING OUT OF OR IN CONNECTION WITH THE USE, INABILITY TO USE, OR PERFORMANCE OF THE INFORMATION, PRODUCTS, SERVICES, AND MATERIALS ON THIS SITE. BECAUSE SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, SOME OR ALL OF THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, IN NO EVENT SHALL THE TOTAL AGGREGATE LIABILITY OF SLIDESOURCE TO USER ARISING FROM OR RELATING TO THIS AGREEMENT OR ANY RELATED MATTER EVER EXCEED THE TOTAL AMOUNT OF SUBSCRIPTION FEES PAID BY USER.

Intellectual Property Rights

User acknowledges that the Site and its products and services are the exclusive property of SlideSource and/or one or more of its third party providers, free and clear of any claims by User, other than this as permitted by this User Agreement. Nothing in this Agreement shall be construed to transfer to User any rights, title, and/or interest in and to the Site, its products and services, including, without limitation, the Intellectual Property Rights.

Termination of Use

SlideSource reserves the right to immediately terminate User's Subscription to, use of, or access to, the Site at any time if SlideSource, in its sole discretion determines that User has breached this agreement, or any relevant law, rule or regulation or that User has engaged in conduct or behavior that SlideSource considers to be unacceptable or inappropriate. In all other instances of termination of the Agreement by SlideSource it shall provide ten (10) days' notice of the termination to User. User may terminate the Agreement on ten (10) days' notice to SlideSource, and upon payment of the current month's Subscription Fee in full.

Miscellaneous

User acknowledges that if any provision of this Agreement is unlawful, void or unenforceable, that provision is deemed severable from this Agreement and does not affect the validity and enforceability of any remaining provisions. These Terms of use of this Site shall be governed under the laws of the State of North Carolina, without regard to its conflict of law principles. Any dispute arising under these Terms or out of the use of this Site shall be resolved exclusively by the state and federal courts of the State of North Carolina, in Wake County, North Carolina. By using this Site, User hereby agrees to the personal jurisdiction of, and venue in, such courts. Any person or entity entering into this Agreement represents that he/she is duly authorized to do so and if an entity, is a person authorized to bind that entity, and warrants that User has all requisite capacity and authority to enter into and perform fully its obligations under the Agreement. User acknowledges having read these terms and conditions of use and agrees to be bound by them, and that he/she is over the age of eighteen years of age. All notices delivered under the Agreement shall be in writing and deemed given upon receipt when delivered personally or upon confirmation of receipt following delivery of (i) a nationally recognized overnight courier service (deemed received the next business day) or (ii) registered or certified United States mail, return receipt requested, postage prepaid, (deemed received three (3) business days after posting), in each case addressed to the respective parties.

Privacy Policy

This Privacy Policy explains our data practices regarding Personal Data (as defined below) and other information that we collect in connection with SlideSource.com.

By using SlideSource.com, you consent to policies and practices described in this Privacy Policy. If you do not agree with the data practices described in this Privacy Policy, you should not use SlideSource.com.

EU Data Subjects

Scope. This section applies if you are an individual located in the European Union ("EU") ("EU Data Subject"). For these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway and, where applicable, Switzerland.

Data Controller. SlideSource is the data controller for the processing of your Personal Data.

Your Rights. Subject to applicable law, you have the following rights in relation to your Personal Data:

  • Right of access: If you ask us, we will confirm whether we are processing your Personal Data and, if so, provide you with a copy of that Personal Data (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.
  • Right to rectification: If your Personal Data is inaccurate or incomplete, you are entitled to have it rectified or completed. If we have shared your Personal Data with others, we will tell them about the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so that you can contact them directly.
  • Right to erasure: You may ask us to delete or remove your Personal Data and we will do so in some circumstances, such as where we no longer need it (we may not delete your data when other interests outweigh your right to deletion). If we have shared your data with others, we will tell them about the erasure where possible. If you ask us, where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so that you can contact them directly.
  • Right to restrict processing: You may ask us to restrict or 'block' the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of that Personal Data or object to us processing it. We will tell you before we lift any restriction on processing. If we have shared your Personal Data with others, we will tell them about the restriction where possible. If you ask us, where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so that you can contact them directly.
  • Right to data portability: You have the right to obtain your Personal Data from us that you consented to give us or that is necessary to perform a contract with you. We will give you your Personal Data in a structured, commonly used and machine- readable format. You may reuse it elsewhere.
  • Right to object: You may ask us at any time to stop processing your Personal Data, and we will do so: If we are relying on a legitimate interest to process your Personal Data - unless we demonstrate compelling legitimate grounds for the processing; or If we are processing your Personal Data for direct marketing.
  • If we are relying on a legitimate interest to process your Personal Data - unless we demonstrate compelling legitimate grounds for the processing; or
  • If we are processing your Personal Data for direct marketing.
  • Rights in relation to automated decision-making and profiling: You have the right to be free from decisions based solely on automated processing of your Personal Data, including profiling, that affect you, unless such processing is necessary for entering into, or the performance of, a contract between you and us or you provide your explicit consent to such processing.
  • Right to withdraw consent: If we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on your prior consent.
  • Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we have handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns.

You may exercise your rights by contacting us as indicated under "Contact Us" section below.

Legitimate Interest. "Legitimate interests" means the interests of SLIDESOURCE in conducting and managing our organization. For example, we have a legitimate interest in processing your Personal Data to analyze how the Portal, and our products and services are being used by you, and to ensure network and information security, as described in this Privacy Policy.

When we process your Personal Data for our legitimate interests, we make sure to consider and balance any potential impact on you, and your rights under data protection laws. Our legitimate interests do not automatically override your interests. We will not use your Personal Data for activities where our interests are overridden by the impact on you, unless we have your consent by utilizing the Portal or those activities are otherwise required or permitted to by law. You have the right to object to processing that is based on our legitimate interests. For more information on your rights, please see "Your Rights" section above.

Data Transfers. We have entered into Data Processing Agreements for the international transfer of Personal Data collected in the European Economic Area and Switzerland with certain service providers, customers and other parties, or we rely on vendors who have self-certified to the EU-U.S. or Swiss-U.S. Privacy Shield to transfer Personal Data to the United States.

Our Collection of Your Personal Data

SLIDESOURCE collects and uses information that, alone or in combination with other information, could be used to identify you ("Personal Data") in order to deliver our products and services, inform you of various opportunities, and provide support, as described below (please also see the "How We Use Information" section below).

Personal Data That You Voluntarily Provide To Us. SLIDESOURCE primarily collects Personal Data provided to us by individuals when they interact with our Portal.

The types of Personal Data that we collect vary based on the services offered on the Portal, but generally include your name, address, telephone number, company name, job title, email address, and other information that you voluntarily submit to us.

At all times, you should carefully consider whether you wish to submit Personal Data and you should tailor any content you submit appropriately. You should also review any additional terms and conditions that may govern your use of our services on the Portal.

Users may contact SLIDESOURCE at any time at the contact information below to modify their preferences.

Information Received from Other Sources. We may receive information about you from publicly available and third-party databases, services, or events that provide information to SLIDESOURCE, or from third parties from whom we have purchased information. This may include an individual's name, email, job title, contact information. This helps us to update, expand and analyze our records, identify new customers, and provide products and services that may be of interest to you.

Automatically Collected Data. As you interact on our Portal, we may collect information about your computer or device and visits to the Portal ("Automatically Collected Data") through cookies, web beacons and other technologies, Internet Protocol (IP) address tracking/URL tracking, and other tools (collectively, "Tracking Technologies"). The types of Automatically Collected Data collected on our Portals through the use of these and other tools that we may add from time to time may include: the search terms you used, new or returning user information, browser information, computer or device type, operating system, internet service provider, website usage, referring/exit pages, platform type, date/time stamp, number of clicks, and ads viewed. Please see the "Tracking Technologies" section below to learn more about how we use Tracking Technologies.

How We Use Information

Provide our products and services and respond to requests. We use the Personal Data we collect from you (unless otherwise restricted by law) to:

  • Provide you with services. For EU Data Subjects, such use is necessary for the performance of the contract between you and us.
  • Provide you support or other services you have purchased from us. For EU Data Subjects, such use is necessary for the performance of the contract between you and us.
  • Respond directly to your information requests or other inquiries. For EU Data Subjects, such use is necessary to respond to or implement your request prior to entering into a contract with us.
  • Provide access to systems, products, or services that you have requested or have purchased from us. For EU Data Subjects, such use is necessary for the performance of the contract between you and us.

Marketing. We also use your contact information to contact you by email, mail or by phone regarding information that we think may be of interest to you. If you do not wish to receive marketing materials, brochures, or emails from SLIDESOURCE, you may inform us of your preference by changing your preferences online, or by faxing a letter, email or calling SLIDESOURCE at the contact information below. You may also email us directly and unsubscribe from our marketing communications by clicking on the "unsubscribe" link located on the bottom of our emails.

SLIDESOURCE may send you push notifications from time-to-time in order to update you about any events or information. If you no longer wish to receive these types of communications, you may turn them off at the device level. To ensure you receive proper notifications, we will need to collect certain information about your device such as operating system and user identification information.

Where required by the applicable law (for example, if you are an EU Data Subject), we will send you marketing information or notifications only with your consent, which was given at the time you provided us with the Personal Data. For EU Data Subjects, please refer to the "EU Data Subjects" section below for information on your rights. For California residents, please consult the "Your Privacy Rights" section below for additional considerations.

With your permission, we may also use information you provide to us as a testimonial posted on the Portal.

Automated Decision-Making and ProfilingAutomated individual decision-making (making a decision solely by automated means without any human involvement); and profiling (automated processing of personal data to evaluate certain things about an individual) may be utilized to provide information of related services of interests to SLIDESOURCE users when explicit consent or contractual agreement is provided.

Correspondence. If you correspond with SLIDESOURCE via email, phone, fax, mail, our web forms, or other form of communication, we may retain the correspondence and the information it contains. We may use the information for business purposes, including responding to your inquiry, notifying you of SLIDESOURCE-related opportunities, and other marketing purposes (please read the Marketing section above for more information on our marketing practices and how to opt out or unsubscribe). We may also use this data to analyze response times, questions or issues, in order to determine customer needs to improve practices and create solutions.

URL and IP Address. SLIDESOURCE collects information about users' IP addresses, including users' utilization of our Portal, to help us design our Portal to better suit our users' needs. We may use information about your IP address to help diagnose problems with our server, administer our Portal, analyze trends, track visitor movements, and gather information that assists us in identifying visitor preferences. We also may use your IP address to enhance our security and investigate an actual or potential security incident. For EU Data Subjects, this use of your information is necessary for our legitimate interests in understanding how the Portal and our Services are being used by you, to improve your experience on it and ensuring network and information security. For more information about what we mean by legitimate interests, and when we may process Personal Data for our legitimate interests, please see the "EU Data Subjects" section below.

Aggregated Data. We may also compile, anonymize and/or aggregate Personal Data and other information collected about Portal visitors, as described in this Privacy Policy, and use such anonymized and/or aggregated data for our business purposes, including disclosing such data to our partners, service providers, advertisers and/or other third parties for marketing or promotional purposes. This aggregate information does not identify you. For EU Data Subjects, this use of your Personal Data is necessary for our legitimate interests in understanding how the Portals and our products and services are being used by you and to improve your experience on it. For more information about what we mean by legitimate interests, and when we may process Personal Data for our legitimate interests, please see the "EU Data Subjects" section below.

Disclosure of Information

SLIDESOURCE discloses Personal Data in accordance with the terms set forth in this section.

We share your Personal Data with third parties who provide certain services to us to assist us in meeting business operation needs. These parties are authorized to process your Personal Data, on our behalf and pursuant to our instructions, only as necessary to provide these services to us. We share your Personal Data with the following service providers:

  • Content Management Systems (CMS) as necessary to serve website content
  • Email and Marketing Automation provider as necessary for sending emails to our users
  • Providers of payment processing and accounting, as necessary to process payment from our users
  • Customer Relationship Management (CRM) platform as necessary for sales lead tracking
  • Sales and marketing providers as necessary for marketing efforts
  • Providers of research and analytics services, including Google Analytics
  • Providers of cloud computing infrastructure services

We may also disclose Personal Data to third parties in the following circumstances: (1) if you request or authorize (when required by the law, we will inform you in advance of the third parties to which we may provide your data and the purpose for doing so, and we will obtain your prior consent for such use); (2) the information is provided (a) to comply with the law (for example, to comply with a search warrant, subpoena or other legal process), (b) to enforce an agreement we have with you, (c) to protect our rights, property or safety, or the rights, property or safety of our employees or others, (d) to investigate fraud, or (e) to respond to a government request or to lawful requests by public authorities, including to meet national security or law enforcement requirements; (3) to address emergencies or acts of God; (4) to address disputes, claims, or to persons holding a legal or beneficial interest; (5) if we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, in which case your Personal Data and other information may be transferred to a successor or affiliate as part of that transaction along with other assets.

We collect, store and process the information from our Portal which can vary in location depending on the service. If you are outside the U.S., then your Personal Data and other information may be transferred to the U.S. portal to provide a service. The data privacy and data protection laws outside your country may offer less protection than the laws in your country. In some cases, we have entered into Model Contractual Clauses for the international transfer of Personal Data collected in the European Economic Area and Switzerland with certain service providers, customers, and other parties, or we rely on vendors who have self-certified under the EU-U.S. or Swiss-U.S. Privacy Shield Frameworks.

The Portal uses interfaces and links with social media websites or platforms that are owned

and/or controlled by third parties, such as Boxwood, Facebook, LinkedIn, Twitter and others ("Provider Sites"). If you choose to "like" or share information from a Website through any Provider Sites, or if you are a member of a Provider Site that interfaces with or links from our Portals, the information that you share with the Provider Sites will be governed by the specific privacy policies and terms of service of the Provider Sites and not by this Privacy Policy. You should review the privacy policy of that Provider Site before choosing to access and use any Provider Site, including interacting with our pages on those sites.

How You Can Access and Change Information

SLIDESOURCE acknowledges that you have the right to access your Personal Data. Our Portal allows you to access, correct, amend, or delete inaccurate data. In case you request us to remove data, we will respond within 30 days.

Upon request, SLIDESOURCE will provide you with information about whether we hold any of your Personal Data. You can update or correct your Personal Data or remove it from our system by making a request to us at the contact information provided below. Requests typically receive a response within thirty (30) days. If access cannot be provided within that time frame, we will provide the requesting party with an estimated date by which the information will be provided. If for some reason access is denied, we will provide an explanation of why access has been denied.

If you are an EU Data Subject, please see the "EU Data Subject" section below for information on your rights in relation to the Personal Data we hold about you.

Our Security Measures to Protect Your Personal Data

We are committed to taking reasonable efforts to secure the information that you choose to provide us, and we use a variety of security technologies and procedures to help protect against unauthorized access to or alteration, disclosure, or destruction of Personal Data.

We retain your Personal Data for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements. We retain Personal Data collected through the Platforms we process on behalf of our Clients for as long as needed to provide services to our Client and pursuant to our contract with that Client. Contractual and financial information is retained for seven years, contractual SLIDESOURCE governance information is retained permanently, and marketing leads are retained for 3 years.

Tracking Technologies

SLIDESOURCE and its partners use cookies and other technologies to analyze trends, administer the Portal, track users' movements around the Portal, to gather demographic information about our user base as a whole and to collect information about your browsing habits in order to make advertising relevant to you and your interests, as described below.

When you first visit the Portal, you will be asked to consent to the use of cookies and similar technologies on the Portal in accordance with this Policy, and if you accept we will store cookies and similar technologies on your computer.

I. What Are CookiesCookies are pieces of data sent to your browser when you visit a website and stored on your computer's hard drive. Cookies may store user preferences and other information. For example, cookies can store your session information for easy log-in to a website or platform, or your language or user interface customization preferences or may allow websites to record your browsing activities (for example, number of page views, number of visitors, and time spent on each page).

We use both session ID cookies and persistent cookies. A session ID cookie expires when you close your browser. A persistent cookie remains on your hard drive for a set period of time or until you delete it.

II. How We Use CookiesWe classify cookies in the following categories:

These cookies link the actions of a user during a browser session in order to allow navigation around web pages, access to secure areas of the Portals or Platforms and help make the services available through our Portals and Platforms work. Without these cookies, basic functions of the Portals and Platforms would not work.

On the Platforms, we use session cookies for authentication and authorization purposes and to track a visitor's identity during a particular session.

Because these cookies are strictly necessary to deliver our services, users cannot refuse them.

You can block or delete these cookies by changing the browser settings as explained below.

These cookies are used to store choices you make and your preferences regarding our services (such as your user name, language or the region you are in, enable user interface customization). These cookies allow us to provide enhanced, more personalized features (such as enabling customer support for users via live support chat). These cookies are not essential for using our services. However, without these cookies, certain functionality may become unavailable or may not function properly.

On the Platforms, we use user interface customization cookies to store Clients' preferences such as grid preferences (columns, sort order, etc.) or to enable certain functions, such as to prepopulate the input of the RSS feed dialog.

These cookies allow us to recognize and count the number of visitors and to see how visitors move around the Portals and Platforms when they are using it. This helps us to improve the way our Portals and Platforms work, for example by making sure visitors are finding what they need easily. The information collected through these cookies include anonymous traffic statistics, like number of page views, number of visitors, and time spent on each page.

In particular, we use cookies from Google Analytics, a web analytics service provided by Google Inc. ("Google"). The information collected by Google (including your internet protocol (IP) address) will be transmitted to and stored by Google on servers in the United States. Google will use this information on our behalf for the purpose of evaluating your use of the Portals, compiling reports on the Portals activity and providing further services to us relating to the Portals usage. Learn more about Google Analytics' privacy practices, and see a copy of Google's privacy policy, at the following link: https://support.google.com/analytics/answer/6004245?hl=en&ref_topic=2919631.

You can also prevent your data from being collected by Google Analytics on the Portals by downloading and installing the Google Analytics Opt-out Browser Add-on for your current web browser at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

III. Other Technologies

SLIDESOURCE may use a tracking technique that employs embedded URLs to allow use of the Portal without cookies. Embedded URLs allow limited information to follow you as you navigate the Portal but are not associated with Personal Data and are not used beyond the session.

We may use widgets, which are interactive mini-programs that run on our site to provide specific services from another company (e.g., links to bookmarked sites), along with buttons or other tools that link to other companies' services (e.g., a "Like" button or third-party map). The widget, button or tool may collect and automatically send Personal Data, such as your email address, or other Information (such as your browser information, or IP address), to a third party. Cookies may also be set or used by the widgets, buttons or tools to enable them to function properly or for other purposes, which may include advertising.

Information collected or used by a widget, button or tool, including cookie settings and preferences, is governed by the privacy policy of the company that created it.

We use mobile analytics software to allow us to better understand the functionality of our mobile software on your phone. This software may record information such as how often you use the App, the events that occur within the App, aggregated usage, performance data, and where the App was downloaded from. We do not link the information we store within the analytics software to any Personal Data you submit within the App.

IV. Your Choices

On most web browsers, you will find a "help" section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please see the links below for guidance on how to modify your web browser's settings on the most popular browsers:

  • Internet Explorer
  • Mozilla Firefox
  • Google Chrome
  • Apple Safari

Please note that if you reject cookies or disable cookies, your use of certain features or functions on our Website or Platforms or service may be limited.

To find out more about cookies and similar technologies, including how to see what cookies and similar technologies have been set and how to manage and delete them, visit www.allaboutcookies.organd/or or the Network Advertising Initiative's online resources, at http://www.networkadvertising.org, and follow the opt-out instructions there. If you access the Portal on your mobile device, you may not be able to control tracking technologies through the settings. If you wish to not have your information used for the purpose of serving you targeted ads, you may opt-out by visiting the Network Advertising Initiative's online resources available here and following the opt-out instructions there, or if located in the European Union, visit the European Interactive Digital Advertising Alliance's Your Online Choices opt-out tool here. By opting out of targeted advertisements you will no longer see advertisements on our Portals from third-party partners that participate in the Digital Advertising Alliance; however, you may still continue to see other non-targeted advertisements on our Portals.

Inapplicability of Privacy Policies of Any Linked Portals or Other Third Parties

This Privacy Policy only addresses SLIDESOURCE's use and disclosure of your Personal Data. The Portal may contain links to other websites, so please be aware that we are not responsible for the privacy practices of other websites. We encourage you to be aware that when you go to another online resource you should carefully read their privacy policy.

California Privacy Rights

In addition to the information provided in this Privacy Policy, under California's "Shine the Light" law, California residents who provide "personal information" (as defined in the statute) in obtaining products or services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the personal information we shared, if any, with other businesses for marketing uses. If applicable, this information would include the categories of personal information and the names and addresses of those businesses with which we shared such personal information for the immediately prior calendar year. To obtain this information, please contact us at the contact information below. You may also submit a contact form electronically through the Portals.

Changes to the Privacy Policy

As SLIDESOURCE, its products, and its services change from time to time, we may update this Privacy Policy to reflect changes to our information practices. We reserve the right to amend the Privacy Policy at any time, for any reason, and may do so by posting a new version online. Your continued use of the Portal, and/or continued provision of Personal Data to us will be subject to the terms of the then-current Privacy Policy. If we make any material changes or if otherwise required by the applicable law, we will notify you by email (sent to the email address specified in your account) or by means of a notice on this website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Third Party Processors

Our carefully selected partners and service providers may process personal information about you on our behalf as described below:

We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include:

(i)Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.

Contacting us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at:

SlideSource

www.SlideSource.comPO Box 110581Research Triangle Park, NC 27709Tel: (800) 948-9222Email:info@slidesource.com

Security, Processes, Reliability & Continuity

All of us here at SlideSource appreciate the trust that you, our clients, are placing in the SlideSource platform. You're trusting us with some of your most important business information, and you're trusting us to be there for you as you're running your business, available, and working as hard and long as you do.

In light of this, we wanted to share some details about how we approach critical issues such as operations and security. While we can't be as forthcoming as we'd like to be (since disclosing too much information gives people who don't have our, or your, best interests at heart an advantage), the information below should help give you a sense of how we work here at SlideSource.

Data & Security

Encryption in Transit

Every connection between you, our users, and SlideSource is encrypted using Transport Layer Security (TLS - the successor to Secure Sockets Layer, or SSL). We use the TLS 1.2 protocol, 256-bit RSA key exchange, and a 128 bit AES encryption cipher. This also includes all traffic between our smartphone apps and SlideSource servers and all of our APIs.

If you or your colleagues accidentally enter a URL without encryption, we automatically switch it over to SSL by force using a redirect before responding.

The effect of this is it makes it very difficult for someone sitting in the network to inspect your data - if you were to be sitting in a coffee shop on an open/unsecure WiFi network, your traffic to SlideSource would be just a scrambled mess to someone "eavesdropping".

Additionally, all of the points at which SlideSource synchronizes with other services - including Google Apps, Office365, Xero, Zapier, and others - are encrypted using TLS. The only channel that SlideSource allows unencrypted traffic to connect to us is SMTP (email) - this is for historical, legacy, and compatibility reasons.

Encryption at Rest

In addition to encrypting the data between you and SlideSource in transit, we also encrypt all of your data at rest. This Encryption at Rest uses the industry-standard AES-256 encryption algorithm to encrypt data on the server that hosts your data.

This ensures that the content on our servers is only accessible in our controlled systems environment, and should someone get their hands on a hard drive or other data source they wouldn't be able to unlock it without the key.

The security and quality control embedded into Key Management Service (KMS) we use have been validated and certified by the following compliance schemes:

  • AWS Service Organization Controls (SOC 1, SOC 2, and SOC 3) Reports. You can request a copy of these reports from AWS Compliance.
  • PCI DSS Level 1. For more details on PCI DSS-compliant services in AWS, you can read the PCI DSS FAQs.
  • ISO 27017. For more details on ISO 27017 compliant services in AWS, you can read the ISO-27017 FAQs.
  • ISO 27018. For more details on ISO 27018 compliant services in AWS, you can read the ISO-27018 FAQs.
  • ISO 9001. For more details on ISO 9001 compliant services in AWS, you can read the ISO-9001 FAQs.
  • In the evaluation for FIPS 140-2. For more details, you can view the FIPS 140-2 Implementation Under Test List.

Google API Services

SlideSource's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Backups

Our systems work with two forms of backup - hot failover of real-time systems (so, if a primary should fail, the secondary is ready to go instantly) and backups of data (so that mistakes like deleting critical data can be "undone"). Backup snapshots are taken daily, and a weekly backup of data which we keep for a much longer period.

Access Controls

In addition to the security precautions we take, we also make it easy for you to enforce good security practices on how you and your colleagues access your data in SlideSource.

With support for Two Factor Authentication, Strong Password Policies, Delegated Access to Google, and Automated Account Lockout, you're able to control how you and your team access your data and the SlideSource system.

  • Two Factor Authentication: this involves the combination of something you know (your password) and something you have (usually your smartphone) to make it a lot harder for someone to get into your account even if they have/guess your password. For more information about setting it up with your SlideSource account, check out our Two-Factor Authentication help guide.
  • Strong Password Policies: SlideSource also makes it easy for administrators to set strong password policies. These include enforcing minimum password lengths, character combinations, ensuring they don't use usernames/emails or a part thereof, that they aren't the same as recently used passwords, can't be changed too frequently or too infrequently.
  • Delegated Access Control to Google Apps: For accounts linked to Google Apps (now known as G-Suite) via SlideSource's marketplace app, administrators can require that users have to use Google's sign-in/authentication infrastructure. This ensures that there's a single authentication pathway and allows you to "shelter" behind the protection of the security team securing the world's largest online account manager.
  • Automated Account Lockout: All SlideSource accounts are protected by automated account lockout - if a user's account has the incorrect password entered more than 5 times in 30 minutes, their account remains locked for 30 minutes and can only be unlocked in the interim by an administrator (or via password reset email). This is designed to thwart dictionary attacks - where a bot tries to guess a user's password.

People & Processes

Like your business, our business depends on the integrity and capabilities of our people, operating with the support and coordination of our processes.

Personnel

When it comes to your business data stored in our cloud infrastructure, access is tightly controlled. Only a very small subset of SlideSource's engineers have access to production systems at the engineering level, and access is controlled by SSH keys that are centrally managed by an orchestration infrastructure (we use Puppet).

When our developers from time to time require access to debug something specific, they request an encrypted export of a subset of data, which is then transferred via an encrypted channel (SSH 2.0 protocol using SHA-256 keys) and worked on in development environments that are also encrypted at rest.

Operationally, the development environments are completely separated from the production systems, ensuring tight control on access to your data and ensuring work by developers can't touch or interact with your production data. The development environments are still actively managed by our DevOps team, ensuring consistency and control over even development environments is tightly managed too.

Policies

The only access to a client's account for our support staff to use is via the SlideSource application itself, and all accesses are logged, showing the user and the timestamp of their login/use. We have strong policies that this is only undertaken to replicate or confirm a specific bug/issue when alerted by a client, and all of our team members must sign stringent confidentiality agreements before starting with the company. Any abuse of this monitored/logged access is grounds for instant termination.

Vigilance

Servers, websites, and applications are created by people, and from time to time bugs and vulnerabilities are discovered in the underlying software platforms that power SlideSource. We rely solely on Open Source software (including OpenSSH, Apache, MySQL, Mongo, ElasticSearch, Kibana, Puppet, Postfix, and others) and we ensure we use widely adopted, supported, and maintained versions of these products.

On the occasion that a vulnerability is found in one of these platforms (eg, Heartbleed) our operations team move fast (in the case of Heartbleed, we had patched all systems within 90 minutes). With a team watching these things around the clock, a mixture of expertise, vigilance, and doing things right ensures your data is protected and secure, much more so than it would be sitting on a server in the corner of your office.

Reliability & Continuity

Of course, secure systems managed by professional, vigilant people aren't much use if they aren't resilient or the company providing the service isn't on a sound financial footing. The good news is that SlideSource's setup, choice of vendors, and own operating position are strong, ensuring resilience and continuity into the future.

Reliability

SlideSource uses Amazon Web Services (AWS) to provide all of our infrastructure needs, the world's largest cloud provider with more than twice the market share of the next three largest Infrastructure as a Service (IaaS) providers combined. We currently utilize the AWS cloud in North America (Oregon availability zone), Europe (Ireland availability zone), and Asia-Pacific (Sydney availability zone).

Within each zone we use multiple independent systems to provide load balancing (Enterprise Load Balancers, or ELB service), compute power (Elastic Compute Cloud, or EC2 service), scalable and redundant databases (Relational Database Service, or RDS), and storage (S3, EFS, and Glacier). We also make use of Amazon's distributed DNS service (Route53), system monitoring services (Cloudwatch), and security/key stores (KMS).

Our compute architecture uses Auto-Scaling Groups (ASGs) to ensure that as the load increases our systems automatically scale up to meet the demand. When it comes to redundancy, key services like our databases are always running in a redundant configuration, ensuring that if one service drops its twin/redundant service is already running and ready to take over automatically.

Continuity

In addition to our use of the world's largest cloud company to provide confidence and continuity for our clients, SlideSource itself is on a strong financial footing. While we don't disclose revenues, SlideSource is growing very strongly and the increasing revenues from our thousands of paying users to ensure we're quite capable of not only maintaining services but also investing in continuous improvement across the product.

In addition to our continuity, we also make it possible for all of our clients to export all of their own data in its native SQL format for their own use and retention. We believe very strongly at SlideSource that your data is absolutely your data, and we make sure you're able to take it out of the platform for your own peace of mind or curiosity any time you wish.

Audits

SlideSource is audited at least once a year by an external security audit firm. The specifics of this engagement are commercially confidential, but as one of only three companies trusted to perform audits by the world's largest tech companies, we are confident in the competence and thoroughness of this annual audit cycle (which takes many months).

Our external auditors assess our security by looking at the following key areas:

  • External Network Penetration Testing
  • Application Penetration Testing
  • Cloud Security Review
  • Policy and Procedure Review

Subject to signing a non-disclosure agreement (NDA) to protect the security and confidentiality of the work and methods of our auditors, we can share details from our most recent audit in the form of our Remediation Report and Security Outcomes. Please contact your Account Manager to find out more.

Vulnerability Disclosure

Reporting a Vulnerability

To report a vulnerability, send an email to security@accelo.com

Does SlideSource have a Bug Bounty Program?

No.

Do you support responsible disclosure?

We absolutely do. If you see something that you think represents a security vulnerability or issue, please email security@accelo.com. We appreciate insights and suggestions, but do not provide financial compensation.

Does this mean you don't engage external security services and advice?

Absolutely not. Rather than support ad hoc bug reports via a bounty program, we work with a range of external vendors - choosing who to engage with, the financial rewards of engagement and ensuring that the work of these specialists doesn't disrupt our paying clients.