Last updated: 05/2/2018
1) What does Sprout Social do?
Sprout Social is a US headquartered provider of software for social media-related management, social advocacy, social analytics, and social listening. For more information about Sprout Social, please see the “About Us” section of our Site at https://sproutsocial.com/about. Simply Measured, Inc. is a subsidiary of Sprout Social, Inc.
2) Information Collected
We collect information about visitors to our Sites, employees of our customers and users of our customer’s social media pages / properties.
Such information is collected about you, including personal information, from the following sources:
3) Information Collected Automatically
When you visit our Site or use our Service, we may collect certain information automatically from your device. In some countries, including countries in the European Economic Area, this information may be considered personal information under applicable data protection laws.
Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location), third party webpages accessed via the Service and other technical information. We may also collect information about how your device has interacted with our Site, including the pages accessed and links clicked, or Service, including content accessed.
Collecting this information enables us to better understand the visitors who come to our Site or use our Service, where they come from, and what content and functionality is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Site and/or Service to our visitors and users.
Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “Cookies and similar tracking technology” below and in our Cookie Notice.
5) Use of Personal Information
Sprout Social processes your personal information for the following purposes:
6) To Whom We May Disclose Your Information
We may disclose your information, including personal information, to the following categories of recipients:
We do not share personal information with third parties for their own marketing purposes.
In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Sprout Social is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Sprout Social complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.
7) Legal basis for processing personal information (EEA visitors / users only)
If you are a visitor or user from the European Economic Area, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you.
If we ask you to provide personal information to comply with a legal requirement or to perform a contact with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
Similarly, if we collect and use your personal information in reliance of our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to Contact Us” heading below.
8) Cookies and similar tracking technology
9) Your Data Protection Rights
You have the following data protection rights:
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. Where we process your personal information solely on behalf of a customer, we may be legally required to forward your request directly to our customer and social media business partners for their review / handling.
10) Security & User ID/Password
Our Site and/or Service utilizes various appropriate technical and organizational security measures, which include, but are not limited to, network and host security controls (e.g., firewalls, intrusion detection systems, etc.), data encryption (both at rest and during transmission), and operating procedures that are designed to protect your personal information. You should protect your user ID and password and NOT share it with anyone. Additionally, enabling two-step verification, where available, is also recommended. If you believe your user ID and password have been compromised or you have trouble changing your user ID/password on the Site or Service, please contact our technical support department (firstname.lastname@example.org).
11) Data retention
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, in the limited circumstances where this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
12) CAN-SPAM Compliance Notice (U.S. and Canadian users only)
We may send periodic promotional or informational emails to you. You may opt-out of such communications by following the unsubscribe or opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving emails about recommendations or other information we think may interest you, we may still send you emails about your account or any Service you have requested or received from us.
13) California Privacy Rights
Pursuant to Section 1798.83 of the California Civil Code, residents of California can obtain certain information about the types of Personally Identifiable Information that companies with whom they have an established business relationship have shared with third parties for direct marketing purposes during the preceding calendar year. In particular, the law provides that companies must inform consumers about the categories of Personally Identifiable Information that have been shared with third parties, the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. To request a copy of the information disclosure provided by Sprout Social pursuant to Section 1798.83 of the California Civil Code, please contact us via email at email@example.com.
14) International Transfers
Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.
Specifically, our servers are located in the United States, and our group companies and third party service providers and partners operate around the world. This means that when we collect your personal information we may process it in any of these countries.
15) EU – US Privacy Shield Framework and Swiss—US Privacy Shield Framework
With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, Sprout Social is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission.
16) Contacting Us, Complaints and Dispute Resolution
In compliance with the Privacy Shield Principles, Sprout Social, Inc. commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. European Union and Swiss individuals with Privacy Shield inquiries or complaints should first contact us by email at firstname.lastname@example.org. We will work to resolve your issue and will respond within 45 days of receipt.
Sprout Social has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
17) Privacy Complaints in Brazil
In circumstances in which Brazil law is controlling, we commit to resolve complaints about your privacy and our collection or use of your personal information. We have further committed to refer unresolved privacy complaints to an independent dispute resolution mechanism.
Consistent with the federal Children’s Online Privacy Protection Act of 1998 (COPPA), we will never knowingly request personally identifiable information from anyone under the age of 13 without requiring parental consent. Any person who provides their personal information to us through our Site or Service represents that they are older than 12 years of age.
20) How to Contact Us
If you have any questions or concerns about our use of your personal information, please contact us using the following details: email@example.com.