Privacy Policy

Last updated: May 16, 2023‍‍

‍(“Typeset”, “we”, “us” or “our”) values and respects your privacy. This privacy policy applies to all websites, including, but not limited to, www.Typeset.com (the “Site”), mobile applications and other services operated or furnished by Typeset linking to or posting this privacy policy (collectively, our “Services”).

Please read this privacy policy to understand how we process personal information about you, including when you visit or use our Services, attend a Typeset event, or otherwise interact with us. This privacy policy also describes your choices regarding the use, access, and correction of your personal information.

By using our Services, you acknowledge and agree to the processing of your personal information as set out in this privacy policy.

Contacting us

For the purposes of the General Data Protection Regulation (GDPR) and other applicable laws globally, Typeset. is the entity responsible for your personal information (the data controller).If there are any questions regarding this privacy policy, you may contact us by emailing privacy@typeset.com.

What information do we collect?

When you use or access our Services or otherwise interact with us, we may collect a variety of personal information about you and others, as described below.  “Personal information” is any information that enables us to identify you, either directly or indirectly in conjunction with any other information we hold, by reference to an identifier such as name, address, date of birth or government identification number.

Personal information you provide to us

We collect personal information when you visit our Site, register to receive our Services, place an order, request a demo, subscribe to our newsletter, respond to a survey, fill out a form, attend an event, apply for a job, or otherwise interact with us.

• Personal details, such as information that identifies you or your personal characteristics, including your name, user ID, e-mail address, mailing address, phone, or your date of birth.
• Marketing data, such as your preferences in receiving marketing from us, or information about your use of our Services.
• Payment information that you provide when you purchase our Services, such as your payment card or other payment details. We use Payment Card Industry compliant third-party payment services and we do not store your credit card information.
• Credentials, such as passwords, password hints or similar security information used for authentication and account access.
• Event data, such as your contact data and a record of your participation in our events as an attendee or presenter.
• Credentials, such as passwords, password hints or similar security information used for authentication and account access.
• Candidate data, such as employment history, qualifications, academic qualifications and education records, and any other information that you provide to us when applying for a job with us, for example in your curriculum vitae, a covering letter, on an application form or during an interview, or that we have received from a recruitment agency or background check provider.

Information you provide to our customers

Typeset provides solutions used by our customers to create digital assets. If you visit one of our customer’s Typeset-powered digital assets, you may provide information about yourself such as name, billing address, shipping address, email address, phone number, or payment information. We process such information as a data processor on behalf of our customer and only in line with their instructions —they ultimately choose how and why to use your personal information. If you have questions about how a specific customer or website uses your personal information, please visit their privacy policy.

‍Information we collect automatically

‍When you use the Services, we use persistent and session cookies (for information on cookies, please see below) and other tracking technologies such as log files, clear GIFs, and Flash technologies to: (a) store your username and password; (b) analyze the usage of the Services; (c) customize the Services to your preferences; and (d) control the advertising displayed by the Services. We also may include clear GIFs in HTML-based emails sent to our users to determine whether the message has been opened. As we adopt additional technology, we may also gather additional information through other methods. We use these automated technologies to collect and analyze certain types of information, including: (a) information related to the devices or browsers you use to access or interact with the Services, such as: IP addresses, geolocation information, unique device identifiers and other information about your mobile phone or other mobile device(s), browser types, browser language, and unique numbers or codes in cookies; and (b) information related to the ways in which you interact with the Service, such as: referring and exit pages and URLs, platform type, the number of clicks, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the date and time you used the Service, and other similar information. We may also capture other data, such as search criteria and results.

We may collect different types of information about your location, including general information (e.g., IP address, zip code) and more specific information (e.g., GPS-based functionality on mobile devices used to access the Service), and may use that information to customize the Services with location-based information and features. If you access the Services through a mobile device and you do not want your device to provide us with location-tracking information, you can disable the GPS or other location-tracking functions on your device, provided your device allows you to do this.

‍Use of Google Services

Typeset uses Google’s reCAPTCHA to provide you with an experience on our website that is as secure and protected as possible.

reCAPTCHA collects personal user data to determine whether the actions on our website are made by people. Thus, IP addresses and other data Google needs for its reCAPTCHA service, may be sent to Google.

Your Google information is used by our system developers to provide or improve user-facing features that are prominent to your user experience.

The following list of collected browser and user data is not exhaustive. Rather, it provides examples of data, which to our knowledge, is processed by Google.

• Referrer URL (the address of the page the visitor has come from)
• Information on the operating system (the software that enables the operation of your computers. Popular operating systems are Windows, Mac OS X or Linux)
• Mouse and keyboard behavior (every action you take with your mouse or keyboard is stored)
• All Javascript objects (JavaScript is a programming language that allows websites to adapt to the user. JavaScript objects can collect all kinds of data under one name)
• IP-address (z.B. 256.123.123.1)
• Cookies (small text files that save data in your browser)
• Date and language settings (the language and date you have set on your PC is saved)
• Screen resolution (shows how many pixels the image display consists of)

Typeset team members are never allowed to use or transfer restricted scope data to serve users advertisements. This includes personalized, re-targeted and interest-based advertising.

Third-party providers

We also obtain personal information from other sources. We protect this information according to the practices described in this privacy policy and any additional restrictions imposed by the source of the data. These sources may include:Information we collect automatically

• Security service providers who provide us with information to secure our systems, prevent fraud and help us protect the security of our Services;
• Online and offline data providers, from which we obtain aggregated demographic, interest based and online advertising related data; and
• Payment service providers who provide us with payment or balance information, or updates to that information, based on their relationship with you;
• Publicly available sources such as publicly available databases and social media platforms.‍

‍Cookies

‍A cookie is a small text file stored by a website in a user’s web browser (e.g. Internet Explorer, Safari, Firefox or Chrome) that helps us in many ways to make your visit to our Site more enjoyable and meaningful to you. Among other things, cookies avoid you having to log in every time you come back to our Site. They also allow us to tailor our Site or advertisement to better match your interests and preferences. For more information about our practices in this area, and for a list of the cookies we use, please see our Cookie Notice.

Typeset itself does not respond to “do not track” signals (“DNT”), and we do not control whether third parties do. If you turn on the DNT setting on your browser, our Services are not currently capable of following whatever DNT preferences you set.  For more information about DNT, visit www.donottrack.us.

How do we use information we collect?

‍We process your personal information for the purposes set out in this privacy policy only where we have a valid legal ground for doing so under applicable data protection law. The legal ground will depend on the purpose for which we process your personal information and the data protection law that applies with respect to our activities in your jurisdiction.

We will use your personal information for the following purposes as is necessary for the performance of our obligations under our customer terms, or to answer questions or take steps at your request prior to entering those term:

• To create and maintain your account
• To process transactions
• To assist with the resolution of technical support issues or other issues relating to our Services
• To provide personal information to third parties as set out in this privacy policy
• To enable your use of our Services
• To send technical alerts, updates, security notifications, and administrative communications
• To verify your identity, investigate and prevent fraudulent activities, unauthorized access to our Services, and other illegal activities

We use your personal information for the following purposes as is necessary for certain legitimate interests, or where you have given your consent to such processing to the extent required by applicable law (such consent can be withdrawn at any time):

• For internal administrative and technical operations to keep our Services, network and information systems updated, patched and secure
• To improve our Services (we continually strive to improve our Service offerings based on the information and feedback we receive from you)
• To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs)
• To send periodic emails
• To (i) comply with legal obligations, (ii) respond to requests from competent authorities; (iii) protect our interests; (iv) protect our rights, safety or property, and/or that of our partners, you or others; and (v) enforce or defend our legal rights.
• To personalize your experience (your information helps us to better respond to your individual needs)
• To confirm, update and improve our records, and to analyze and develop our relationship with you
• To administer a contest, promotion, survey or other site feature
• To promote our business and send you marketing communications relating to our Services or carefully selected third parties which we think may be of interest to you

If you apply to work for Typeset, we will use your personal information in the following ways as necessary in our legitimate interests, or where you have given your consent to such processing to the extent required by applicable law (such consent can be withdrawn at any time, subject to restrictions permitted by such law) and to decide whether to enter into a contract with you:

• To assess your skills, qualifications, and suitability for the role you have applied for
• To communicate with you about the recruitment process
• To comply with legal or regulatory requirements
• To carry out background and reference checks, where applicable
• To keep records related to our hiring processes
  

When Typeset is acting as a data processor, we will process your personal information in compliance with the instructions of our customers, who ultimately choose how and why to use your personal information.

How do we use your email address?

‍When you submit your email address on the Site, we will send you marketing communications relating to our Services, provided you have consented to receiving such communications to the extent required by applicable law. If you no longer wish to receive such marketing communications from us, you can cancel your participation at any time by clicking on the opt-out link or other unsubscribe option that is included in the respective email.

We will send you occasional emails about how to use Typeset, new products, and important updates to keep you in the loop.

We will use your email address for customer audience targeting on sites like Facebook, where we display custom advertising to specific categories of people.

Email addresses submitted only through the order processing page will be used for the sole purpose of sending you information and updates pertaining to your order.  If, however, you have provided the same email to us through another method, we may use it for any of the purposes stated in this Policy.

Note: If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.

How do we share your information?

There are circumstances where we wish to share or are compelled to disclose your personal information to third parties. This will only take place in accordance with the applicable law and for the purposes listed in this Policy.

Typeset may share your information with third party service providers for the purpose of providing the Services to you, such as payment processors, email service providers, and providers of technical infrastructure (such as servers or databases co-located with hosting providers), engineering, or other support.

As we develop our business, we may buy or sell assets or business offerings. Customer, email, and visitor information are generally among the transferred business assets in these types of transactions. We may also transfer or assign such information in the course of corporate divestitures, mergers, or dissolution.

We may share or disclose your information with your consent, such as if you choose to sign on to the Services through a third-party service. We cannot control third parties’ use of your information.

We may disclose your information if we are required to do so by law, or if we believe in good faith that it is reasonably necessary to (i) respond to claims asserted against us or to comply with legal process (for example, subpoenas or warrants), (ii) enforce or administer our agreements with users, such as the Terms of Service; (iii) for fraud prevention, risk assessment, investigation, customer support, product development and debugging purposes, or (iv) protect the rights, property or safety of Typeset, its users, or members of the public.

We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.

We may aggregate and/or anonymize information collected through the Services so that the information does not identify you. We may use aggregated, anonymized, and other de-identified information for any purpose, including for research and marketing purposes, and our use and disclosure of such information is not subject to any restrictions under this privacy policy.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt in data and consent; this information will not be shared with any third parties.

International transfers

‍Our Services are hosted and operated in the United States by Typeset and its service providers. By using our Services, you acknowledge that your personal information may be accessed by us or transferred to us in those jurisdictions and to our affiliates, partners, and service providers who are located in the US and around the world.

Where required by applicable laws, we will take appropriate measures to ensure adequate protection of your personal information when transferred internationally and, if necessary, seek your prior consent.  Such measures may include use of data transfer agreements or official transfer mechanisms such as data authority approved contractual clauses. For instance, if you are located in the European Economic Area (“EEA”), we may store your personal information as described in this policy outside the EEA.  Where we transfer EEA personal information to a third party located in a country not recognised by the European Commission, or another relevant body, as ensuring an adequate level of protection, we will take appropriate steps, such as implementing Standard Contractual Clauses recognised by the European Commission, to safeguard such personal information.

‍How long do we store your information?

We will store your personal information, in a form which permits us to identify you, for no longer than is necessary for the purpose for which the personal information is processed.  We use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and rights, or if it is not technically and reasonably feasible to remove it. Otherwise, we will seek to delete your personal information within a reasonable timeframe upon request.

‍How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information.

We offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential.

After a transaction, your private information (credit cards, social security numbers, financials, etc.) will not be kept on file for more than 60 days.

We cannot, however, ensure or warrant the absolute security of any information you transmit to Typeset or guarantee that your information on the Services may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or managerial safeguards.

‍Choices you can make about your information

You may choose not to share information through the Service, in which case Typeset may not be able to provide services to you.

You may opt out of email communications.

To opt-out, all you need to do is click the “Unsubscribe” link at the bottom of any email you receive from us. You can also contact by emailing privacy@typeset.com and requesting to be removed from our mailing list.

‍Children’s Privacy

Protecting the privacy of young children is especially important. Typeset does not knowingly collect or solicit personal information from anyone under the age of 13 or knowingly allow such persons to register with the Service. If we become aware that we have collected personal information from a child under the relevant age without parental consent, we take steps to remove that information.  Our Site, products and services are all directed to people who are at least 13 years old or older.

‍Third party links

Occasionally, at our discretion, we may include or offer third party products or services on our Site. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

‍Terms and Conditions

Please also visit our Terms and Conditions section establishing the use, disclaimers, and limitations of liability governing the use of our Site.

Your California Privacy Rights

California residents with an established business relationship with us are permitted by California law once a year to request information about the manner in which we shared certain categories of information with others for their marketing purposes during the prior calendar year.

We do not share your personal information with third parties for their direct marketing use unless we have your permission.  To withdraw permission previously granted please email us at privacy@typeset.com.  Once we receive your instruction, we will cease sharing your information, but this will not affect previously shared information.

The California Consumer Privacy Act of 2018 (“CCPA”) provides California residents with specific rights regarding their personal information.

This section describes your CCPA rights and explains how to exercise those rights. Verified California residents have the right to:

• request and receive disclosure of our information collection practices during the prior 12 months, including the categories of personal information we collect, the categories of sources of such information, our business purpose for collecting or sharing such information, and the categories of third parties with whom we share such information;
• request and receive a copy of the specific personal information we have collected about them during the prior 12 months;
• request that we delete (and direct our service providers to delete) their personal information subject to certain exceptions.
• request and receive disclosure of our information sharing practices during the prior 12 months, including a list of the categories of personal information sold with the category of third-party recipients and a list of the categories of personal information that we disclosed for a business purpose;
• request that we not sell personal information about them; and
  

For purposes of the CCPA personal information means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.

The CCPA rights described above do not apply to information collected in the employment context about our current, former or prospective employees or contractors (who receive separate disclosures under the CCPA) or to information collected about California business contacts (employees, owners, directors, officers, or contractors of companies, sole proprietorships, and other entities collected in the context of conducting due diligence regarding, or providing or receiving a product or service to or from, such companies, sole proprietorships, or entities).  California business contacts have the right to tell us not to sell their information; please see below for how to exercise this right.

‍Information collected, sources, and business purpose for collecting information.

‍During the past 12 months we may have collected the following categories of personal information.  This includes information that individuals provide to us directly, information we collect from automatically through the website, information that we collect when individuals interact with us such as through online postings, and information that we may collect from third parties such as service providers, affiliated companies, marketing, staffing, or data partners, or other third parties. It also includes information that we collect about employees and business partners and vendors from those individuals directly or from references, referrals or consumer reporting agencies.  Not all information is collected from everyone who interacts with us. Information we collect is used for the business purposes described above in “How do we use information”.

• Identifiers such as contact information (name, address, phone number, email or postal address), unique personal identifiers (that may include but are not limited to a legal name or preferred alias and online identifiers like user account names), and an encrypted version of your password. We may collect additional information from suppliers, vendors, or employees including business contact information, phone number, email and postal addresses and titles.
• Commercial information such as transaction histories, billing and shipping information, and product preferences.
• Inferences we make about individuals or their interests based on analysis of other information we have collected.
• Audio or video information such as call center recordings or monitoring records from our customer support centers and security video recordings at our facilities
• Other types of personal information that we may disclose to you prior to the point of first collection.
• Sensitive information such as financial and payment information like credit or debit card information, or PayPal account email address.
• Electronic network activity information such as the internet protocol (IP) address collected from users’ computers and mobile devices, and information about online activity, including your interactions with our website, through the use of cookies and similar technologies, system logs, and analytics monitoring.
• Geolocation information.
• Employment, education and professional related information, protected classification information, biometrics (collected from current and prospective employees, contractors, service providers, vendors and suppliers).
  

Exercising your CCPA rights.

To make a request for disclosure California residents may contact us by emailing us at privacy@typeset.com.  We will ask you for information that allows us to reasonably verify your identity (that you are the person about whom we collected personal information) and will use that information only for that purpose. We may request that you submit a signed statement under penalty of perjury that you are the individual you claim to be.  We will acknowledge receipt of your request within 10 days and will endeavor to respond within forty-five days of receipt of your request, but if we require more time (up to an additional forty-five days) we will notify you of our need for additional time. For requests that we not sell your information we will comply with your request within 15 business days. We cannot respond to your request or provide you with personal information if we cannot verify your identity and confirm that the personal information relates to you.

You may make a request for disclosure of our information collection practices, the specific information we collected about you, or our information sharing practices up to twice within a 12-month period.  You may make a request that we not sell information or for deletion of your information at any time.

For requests for a copy of the personal information we have collected during the 12 months prior to your request we will endeavor to provide the information in a format that is readily usable, including by mailing you a paper copy or providing an electronic copy to your registered account, if you have registered an account with us.

For requests for deletion of your information please understand that California law permits us to retain certain information and not to delete it under certain circumstances.  By way of example, we are not required to comply with a request to delete information if the information is necessary for us to complete a transaction for you or otherwise perform a contract; to detect, protect against, or prosecute security incidents, fraud or illegal activity; to use the information only internally in ways reasonably aligned with your expectations as our customer (such as maintaining sales records), and to comply with legal obligations. If we receive such a request from you, we will notify any service providers we have engaged to delete your information as well.

We will not discriminate against you as a result of your exercise of any of these rights.

‍Using an Authorized Agent.

You may submit a request through someone holding a formal Power of Attorney.  Otherwise, you may submit a request using an authorized agent only if (1) the person is registered with the Secretary of State to do business in California, (2) you provide the authorized agent with signed written permission to make a request, (3) you verify directly with us that you have authorize the person to make the request on your behalf, (4) you verify your own identity directly with us and (5) your agent provides us with proof that they are so authorized.  We will require the agent to submit proof to us that they have been authorized to make requests on your behalf.

‍Personal information sales opt-out and opt-in rights.

We do not sell your information for monetary consideration but we may transfer your information to a third party that provides us with services such as helping us with advertising, data analysis and security, which may fall under the definition of “other valuable consideration” which may be considered a ‘sale’ under the CCPA. During the past 12 months, we disclosed identifiers, electronic network activity, commercial information, geolocation, biometrics, education or professional information, audio or video information, and inferences from collected information, with third parties such as advertising and analytics providers and those third parties described in the section of this privacy policy entitled “How do we share your information?” above, for a business purpose which falls within the definition of a ‘sale’.  If you are 16 years of age or older, you have the right to direct us to not sell your personal information at any time (the “right to opt-out”).  We do not sell the personal information of individuals we know are less than 16 years of age.  To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by email to privacy@typeset.com.  Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorise personal information sales.

‍Nevada Residents

‍We may transfer personal information for monetary consideration.  If you would like to tell us not to sell your information in the future please email us at privacy@typeset.com with your name, postal address, telephone number and email address with “Nevada do not sell” in the subject line.

‍Your European Privacy Rights For European residents only.

In certain circumstances, you have rights under the GDPR in relation to your personal information that we hold about you – specifically:

• Request access to your personal information. You may have the right to request information regarding our processing of your personal information and access to the personal information which we hold about you.
• Request correction of your personal information. You may have the right to request that we correct your personal information if it is inaccurate or incomplete.
• Request restriction of processing your personal information. You may have the right to prevent or restrict processing of your personal information.
• Request erasure of your personal information. You may have the right to request that personal information held about you is deleted in certain circumstances.
• Request transfer of your personal information. You may have the right to request transfer of personal information directly to a third party where this is technically feasible.
  

If you visit or make a purchase from one of our customer’s Typeset-powered webpages, that customer legally controls your personal information. As a result, Typeset doesn’t, for example, decide how long your information is retained because that decision is made by our customer. This means Typeset can’t help you access, correct, erase, or port your information without being directed to by our customer. To make a request about your personal information, contact the specific customer directly. If you make a request to us, we will forward your request to the relevant customer and help them fulfill your request.

Where you believe that we have not complied with our obligation under this privacy policy or applicable data protection law, you have the right to make a complaint to a supervisory authority, such as the UK Information Commissioner’s Office.

‍Changes to our Privacy Policy

‍If we decide to change our privacy policy, we will post those changes on this page, and update the privacy policy modification date above. In some cases, we may provide you with additional notice (such as adding a notice to our Services prior to the change becoming effective, or by sending you an email notification). We encourage you to periodically review our privacy policy for the latest information on our privacy practices and the ways you can help protect your privacy.