We process the personal information we obtain on our servers in the United States of America and in other countries. In some cases, we process personal information on a server outside your own country. Laws regarding processing personal information may be less stringent than the laws in your country.
What information do we collect from users and how is it used?
The following describes the types of personal and other information we may collect about you, and how we use and maintain that information:
Information collected online can generally be categorized as either non-personal information or personally identifiable information. Non-personal information is information that cannot by itself be traced back to a specific individual. For example, we know how many calls or queries we receive each day but we do not know the names and email addresses of the persons submitting the queries. Personally identifiable information is information you provide to us that is uniquely associated with you, such as your name or email address.
We do not associate any non-personal information we collect from you, including your search queries and IP address, with the personally identifiable information that you may submit to us. For this reason, we do not consider your IP address to be personally identifiable information.
Before you can utilize certain Services that we offer on the Site or otherwise, we may ask that you register with Embedly and provide us with your email address, a password, your first and last name and other contact information and personal details. We request this information for identification purposes, to communicate with you regarding your account, and to facilitate the functioning of certain Services. We may keep this information indefinitely, unless you request for account deletion.
If you correspond with us via email, we may gather in a file specific to you the information that you submit. We may keep this information indefinitely unless you request for account deletion.
URL and IP address
Like many other services, Medium collects information about users’ utilization and navigation of our Site and use of Services. This information helps us to design our Site and Services to better suit our users’ needs. For example, our Site or Services will track the URL that you visited before you came to our Site or used our Services, the URL to which you next go, your Internet Protocol (IP) address and any URLs to which you link using the Services. We use your IP address to help diagnose problems with our server and to administer our Site or Services. Your IP address also is used to help identify you and to gather broad demographic information.
Information Collected With Cookies
To whom does Medium disclose information about you that we collect?
Medium will not share, rent, sell or otherwise disclose any of the personally identifiable information that we collect about you, except when we have your permission or in any of the following situations:
We may disclose information that we collect about you to our third-party contractors who perform services for us in order to provide certain services or to complete or confirm a transaction that you conduct with us.
We may be legally obligated to preserve or disclose information about you to the government or to third parties under certain circumstances, such as in connection with illegal activity on our Site or Services or to respond to a subpoena, court order or other legal process. Medium reserves the right to preserve or disclose information that we collect to law enforcement or other government officials, as we, in our sole and absolute discretion, deem necessary or appropriate.
If you use our Site or Services outside of the United States, information that we collect about you will be transferred to servers inside the United States and maintained indefinitely (unless you have requested for account deletion), which may involve the transfer of information out of countries located in the European Economic Area. By allowing Medium to collect information about you, you consent to such transfer and processing of your data.
What security measures does the Site employ?
To help protect the privacy of data you transmit through this Site or Service, where personally identifiable information is requested, Medium uses technology designed to encrypt the information that you input before it is sent to us. In addition, Medium takes steps to protect the user data we collect against unauthorized access. However, you should keep in mind that this Site and our Services are run on software, hardware and networks, any component of which may, from time to time, require maintenance or experience problems or breaches of security beyond our control.
Medium takes commercially reasonable security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of information that you share and that we store.
We restrict access to personal information only to Medium employees, contractors and agents who need to know that information in order to operate, develop or improve our Services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations. However, no security system can be fully secured; accordingly, Medium cannot guarantee the security of any information you provide to us in connection with the delivery of our Services.
How can you correct or update information that we collect about you?
You may correct or update information collected about you by managing your account profile or by contacting us at the email or mailing address noted below. We will use reasonable efforts to update our records. For our records, we may retain original and updated information for reasons such as technical constraints, dispute resolution, troubleshooting and agreement enforcement.
What are the policies of linked sites and other third parties?
What is our policy on children users of our Site?
We do not knowingly collect or maintain personally identifiable information from persons under 13 years old, and no part of our Site is directed to persons under 13. IF YOU ARE UNDER 13 YEARS OF AGE, PLEASE DO NOT USE OR ACCESS OUR SITE AT ANY TIME OR IN ANY MANNER. If Medium learns that personally identifiable information of persons less than 13 years old has been collected without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under the age of 13 has obtained an Embedly account, then you may alert us at the address below and request that we delete that child’s personal information from our systems.
Will my employer have access to information that we collect about you?
If you access our Site or Services as a representative of a third party, such as your employer, that party may review and modify your personal information, ask us to delete your personal information, or request that we cease collecting your personal information. If such a third party asks us to delete your personal information or cease collecting your personal information, we may terminate your right to access our Site or Services.
How to contact us?
Description of Processing Activity
Embedly collects and stores minimal non-identifying statistical usage data where essential to provide third-party embedded content as a service.
Embedly collects personal or business data related to billing information from its customers.
Purposes of Processing
Embedly also pursues its legitimate interests by collecting minimal non-identifying statistical usage data to provide the services.
Categories of Personal Data Collected
People who interact with a third-party embed on a client site:
Categories of Recipients
Medium shares minimal personal data with third-party processors in order to provide the Services. These processors offer at least the same level of data protection as that set out in this statement. This includes the following categories of recipients:
Third-party embedded content
Embedly facilitates embedding third-party content into customers’ websites. Third-party embeds may in some cases collect personal data and cause it to be stored. The use of personal data by embedded content providers is not covered by this statement, but by the privacy policies of those third-party services.
Potential consequences of processing
Embedly collects and stores minimal non-identifying statistical usage data. Individual persons cannot be identified from this data.
Embedly is hosted in the United States. By using Embedly services, you authorize us to transfer, store, and use your information in the United States and any other country where we operate. Where data is disclosed to our processors, it is subject by contract to at least the same level of data protection as that set out in this statement.
Embedly and certain of its processors retain browser information (user agent) and IP addresses for two weeks after time of interaction with a particular embed.
Embedly retains client data for the lifetime of your account. If you would like to delete your client information, you may delete your account.
Rights of data subjects
As Embedly does not collect or store personal data other than that related to client accounts, the above are not applicable for people who interact with a third-party embed on a client site.
If you are a California resident, the processing of certain personal data about you may be subject to the California Consumer Privacy Act (“CCPA”) and other applicable California state privacy laws. Beginning January 1, 2020, the CCPA gives you certain rights with respect to the processing of your personal data (known as “personal information,” as described in the CCPA).
This section provides additional privacy disclosures and informs you of key additional rights as a California resident:
Right to Know Request - Under the CCPA, you have a right to request information about our collection, use, and disclosure of your personal information over the prior 12 months, and ask that we provide you with the following information:
To make a verifiable request for information about the personal information we have collected about you, please contact our support team
Right to Delete Request - Under the CCPA, you also have a right to request that we delete personal information, subject to certain exceptions. You may exercise your right to delete if you have a Embedly account by contacting our support team
Household Requests - We do not knowingly collect household data. If all the members of a household makes a Right to Know or Right to Delete request, we will respond as if the requests are individual requests.
General Requests under CCPA - if you do not have a Embedly account, we will not have enough information about you to verify your Right to Know and Right to Delete requests since we do not keep sufficient information to reidentify and link you to a prior visit to Medium. You may make a verifiable consumer request related to your personal information twice per 12-month period. We will not discriminate against you for exercising any of your rights under the CCPA.
Requests made through Agents - You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.
Disclosures of Personal Information for a Business Purpose
In the last 12 months, Embedly has disclosed certain data from the following categories of personal information to the categories of recipients listed above in the 'Categories of Recipients' for one or more business purposes:
Logged in customers:
No Sale of Personal Information - Under the CCPA, a “sale” means providing to a third party personal information for valuable consideration. Since Medium doesn’t make money from ads, we don’t collect data to facilitate nor enable third parties to advertise to you. At this time and pending final regulations and guidance interpreting the CCPA, we don't believe any of our data practices constitute a "sale" under the CCPA.