Privacy Policy

We value your privacy and want to be accountable and fair to you as well as transparent with you with regard to our processing of your personal data.

General Information

Degoo Backup AB, company reg. no. 556886-0729, (“we”, “us”, or “our”), owns and operates the https://instabridge.com website and the Instabridge mobile application (the “Service” or “Instabridge”). We are the data controller of the personal data that we collect from you when using the Service (as defined in our Terms of Service: https://instabridge.com/terms-of-service/)

This privacy policy (“Privacy Policy”) contains a policy statement regarding our collection, use and processing of personal data, with whom we may share your personal data and your rights in relation to your personal data. This Privacy Policy tells you what to expect when we collect and use personal data about you that you share with us when using our Service.

Processed Data

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

If you decide to create a user account on Instabridge, we will request certain information from you, which may include your username, password, email address, and profile picture. In the event that you choose to log in using your credentials from a third-party app (such as Facebook or Google), you give us permission to obtain your authentication information, such as your username, email address, and encrypted access credentials. Additionally, we may gather other information that is accessible through your third-party app account, such as your profile picture, country and hometown, date of birth, gender, and networks. It’s important to note that the app is uploading users’ primary account information to https://api.instabridge.com.

When you use the Service we may ask you for certain information including but not limited to information about your use of the Service, your IP address, device ID, time, BSSID and SSID (Wi-Fi network name), SIM card identifiers (IMEI), MAC address of access point, signal level, captive portal login steps and other technology on the devices you use to access the Service. We also collect additional points that are interesting in order to measure and analyze network and internet performance. We also collect information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

If you have connected your user account with us to a third party application, we may receive similar information related to your interactions with the Service from such channels.

We collect, store and use your personal information including your username and email address and information about how you use and access the Service because it is necessary in order to provide the Service requested by you pursuant to the contract made between you and us. If you do not provide us with this information we will not be able to provide you with the Service.

We do not knowingly collect or store personally identifiable information from anyone under the age of 13 unless or except as permitted by law. BY INSTALLING OR USING OUR APP, YOU REPRESENT AND WARRANT TO US THAT YOU ARE 13 YEARS OF AGE OR OLDER. If we are made aware that we have received personally identifiable information from someone under 13, we will use reasonable efforts to remove that information from our records.

Tracking & Cookies Data

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. In this policy, we use the term “cookies” for cookies and all such similar technologies.

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use and their purposes:

• Functional cookies: We use functional cookies to operate certain functions of the Website in accordance with your choices, meaning that when you continue to use or come back to the Website, the site will be provided as you have previously requested, e.g. remembering your username and customization of the Website.
• Analytics cookies: We use analytics cookies to analyze how the Website is accessed, used or is performing. We use the information to maintain, operate and improve the Website.
• Third party cookies: We may allow our partners to use cookies on the Website for the same purposes identified above. We may also use service providers acting on our behalf to use cookies for the purposes identified above.
• Security Cookies: We use Security Cookies for security purposes.
• Advertising Cookies: Advertising Cookies are used to serve you with advertisements that may be relevant to you and your interests.

If you have any questions or comments about our use of cookies, please contact support@degoo.com.

Purposes of Processing and Legal Basis

We will process the information set out above for the following purposes and based on the following legal basis:

Disclosure of Personal Data

We may share and disclose your personal data to the following parties under the following circumstances:

Third party applications

If you connect your Instabridge account to a third party application or use a third party application to login to Instabridge, we may automatically share your activity and activity, your events (including generic application events (such as application installation and application launch) and other standard logging for product metrics), your user ID and activity-related stories with that service. You understand and agree that that such information may be attributed to your account on the third party application.

You understand and agree that a third party application’s use of information collected from you is governed by the third party application’s privacy policies and your settings on the relevant service, and Instabridge’s use of such information is governed by this Privacy Policy and your Instabridge account settings.

Third party service providers

We will share information with third party service providers to facilitate our provision of the Service or in order for such third party service provider to provide certain services on our behalf. This will include:

• IT infrastructure companies that facilitate our provision of the Services to you; and
• other third party service providers, such as hosting providers or other IT service providers for the purpose of providing the Service or tracking your use of the Service and advertising and survey service providers to help us in our communication with you and to better understand your use of the Service.

These companies are authorised to use your personal data only as necessary to provide these services to us.

Interest-based advertising

We and our third-party partners also collect information about Users and their mobile devices and networks, including for purposes such as interest-based advertising. When you install our App, and as you use our App, upon your explicit consent, we collect certain personal information in hashed or obfuscated form such as (a) your email address, (b) your Google, Facebook, or other social networking profile, to the extent available, (c) your age range, (d) your country and language, (e) device-based advertising identifiers, and (f) information about your mobile device such as type of device, operating system version and type, device settings, time zone, carrier and IP address, if applicable, MAC address of your mobile device, and (g) the name of your mobile carrier and speed test information about the performance of your mobile network.

We may use third-party advertising companies to serve ads when you visit the App. These companies may use information about your visits to the App and other websites that are contained in web cookies in order to provide advertisements about goods and services of interest to you. One of those partners is AppVestor, who respects the users fundamental legal rights to data protection and privacy. Click on the following link to access AppVestor’s Privacy Policy

Appvestor Privacy Policy Link: https://legal.appvestor.com/privacy-policy/

While our App is installed on your mobile device, whether or not you are using our App, we regularly track your precise geographical location. As you use our App, we collect your search queries, including cities and venues that you search for.

All User payments for the pay version of our App are handled through the portal established by the publisher of the operating system for the User’s mobile device (iOS App Store, Google Play, etc.).

Most mobile platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without your consent, and have various permission systems for obtaining your consent. The iOS platform will alert you the first time our App wants permission to access certain types of data and will let you consent (or not consent) to that request. Android devices will notify you of the permissions that our App seeks before you first use the App, and by using the App you consent to those permissions.

We and our third-party partners may use the information we collect to:

• provide, maintain and improve our services, develop new features and send product updates and administrative messages;
• perform internal operations, including troubleshooting, data analysis, testing and research;
• send you, or recommend, advertisements and other communications we think will be of interest to you and otherwise personalize our services, also known as interest-based advertising.

To opt out of interest-based advertising, please see the following instructions on using your device settings to opt out:

iOS/Apple: https://support.apple.com/en-us/HT202074
Android/Google: https://support.google.com/ads/answer/2662922?hl=en

Please note that if you opt out of Interest-Based Advertising, you may continue to receive contextual ads based on other non-personal information, such as ads related to the content of the Product you are using.

VPN Data Collection

When You Use Our VPN Service

We only keep the following data associated with your account:

• Total amount of bytes transferred in a 30 day period.
• Timestamp of your last activity on our VPN network.

This data is used to enforce free tier limitations, prevent abuse and weed out inactive accounts.

The following data is NOT stored:

• Source IP
• Sites you visited
• Historical record of VPN sessions

When You Are Actively Connected to a Server
For the duration of your connection the following is stored in server’s memory.

This data is immediately discarded when you disconnect:

• OpenVPN/IKEv2 username
• Time of connection
• Amount of data transferred

The following data is stored in a central location:

• Number of parallel connections at any given time to prevent rampant abuse and account sharing.
  A counter is incremented that stores the total number of bytes downloaded/uploaded in a 30 day period.
• Anything that is not mentioned above is not stored.

Our bespoke system eliminates the need to store data entirely. This data resides only in server’s memory while you’re connected, and is immediately discarded by the VPN server when you disconnect. Since it doesn’t get logged into a permanent database, there is nothing to delete.

To opt out of our use of the personal information that we collect about you for advertising purposes, please contact us at support@degoo.com with a request that we not use your personal information for advertising purposes, and we will honor that request.

Compliance with laws and legal proceedings

When we respond to court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. When we believe in our sole discretion it is necessary to share information in order to investigate, prevent or take actions against illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law.

Merger or acquisition

When we need to transfer information about you if we are acquired by or merged with another company. If we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified afterwards via e-mail and/or a prominent notice on our Service of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data.

Other users

Your user name and picture may be disclosed to other users of the Service.

We may use your personal information without your knowledge or consent where we are permitted or required by applicable law or regulatory requirements to do so.

International Transfers of Your Personal Data

If you are located in the European Union (“EU”) then we may transfer personal data that we collect from you to third party suppliers and trusted partners located in countries that are outside of the EU and the European Economic Area (“EEA”) (including to the USA) or to our partners/related third parties in connection with the above purposes. The same rule applies for users outside the EU, that is your data may be transferred outside of the country from which it was originally collected. Please be aware that countries which are outside the EU/EEA may not offer the same level of data protection as the EU/EEA, although our collection, storage and use of your personal information will continue to be governed by this privacy policy.

When transferring personal data outside the EU/EEA, we will ensure that the country in which your personal data will be handled has been deemed “adequate” by the EU Commission under Article 45 of the General Data Protection Regulation (“GDPR”) or if your personal data will be transferred to a country which the EU Commission does not consider to have an adequate level of protection for personal data, we will take all necessary steps required under applicable law in order for such transfer of information across borders to be compliant with applicable law. We will only transfer your personal data to a country outside the EU/EEA where; (i) the transfer is being safeguarded by the use of EU model clauses (under Article 46.2 in the GDPR) or (ii) where the recipient is certified under the US-EU Privacy Shield Framework (under Article 45 in the GDPR).

By installing or using the App, you consent to those transfers of information to other countries and to service providers.

You can find further information about the rules on data transfers outside the EU/EEA, including the mechanisms that we rely upon, on the European Commission website (https://ec.europa.eu/info/law/law-topic/data-protection_en).

Data Retention

We will keep your data for as long as you have an account in the Service or for as long as we need to keep any personal data to comply with our legal obligations, resolve disputes, or enforce our agreements. After this your personal data will be deleted.

Links to Other Webpages

Please note that the Service and our Website contain links and pages to other websites operated by third parties. Please note that this Privacy Policy applies only to the personal data that we collect through the Service and our Website and we cannot be responsible for personal data that third parties may collect, store and use through their website when you are directed to such other websites. The privacy policy of each such third party website will govern the information collected from you on that third party website; therefore, you should always read the privacy policy of each such website you visit carefully.

Security

We take all reasonable technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing.

Whilst we take appropriate technical and organisational measures to safeguard the personal data that you provide to us, no transmission over the Internet can ever be guaranteed secure. Consequently, please note that we cannot guarantee the security of any personal information that you transfer over the Internet to us.

Notice of Changes

If we make changes to this Privacy Policy we will notify you by publication on our webpage. If the changes are material, we will provide you additional, prominent notice as appropriate under the circumstances and, where required under applicable law, ask for your consent.

Your Rights

You have the right to, at any time, receive a copy of the personal data that we hold about you and information about the processing.

You have the right to, without undue delay, have incorrect or irrelevant personal data about you corrected and taking into account the purposes of the processing, you have the right to have incomplete personal data about you completed.

You have the right to have your personal data deleted without undue delay and we are obliged to delete your personal data without undue delay if, for example one of the following grounds applies: the personal data are no longer necessary in relation to the purpose for which they were collected or otherwise processed, or if you withdraw consent on which the processing is based and where there is no other legal ground for the processing. Please note that we are not obliged to delete the personal data if we can show that the processing is necessary, for example, for compliance with a legal obligation to which Instabridge is subject, such as book-keeping rules or the establishment, exercise or defence of a legal claim, or when there are other legitimate grounds to keep the data.

Furthermore, you have the right to request that Instabridge restricts the processing of your personal data under certain conditions, for example if you contest the accuracy of the personal data, the processing may be restricted for a period enabling Instabridge to verify the accuracy of the personal data or if Instabridge no longer needs the personal data for the purposes of the processing but you require the personal data for the establishment, exercise or defence of legal claims.

You have the right to object, on grounds relating to your particular situation, at any time to Instabridge’s processing of your personal data if the processing is based on, for example, legitimate interests, including marketing and/or profiling based on a legitimate interest. If you object to such processing, Instabridge will no longer be entitled to process your personal data based on such legal basis, unless Instabridge can demonstrate compelling legitimate grounds for the processing which overrides your interests, rights and freedom or if it is conducted for the establishment, exercise or defense of a legal claim.

You have, under certain conditions, the right to receive the personal data concerning you and which you have provided to Instabridge, in a structured, commonly used and machine-readable format and have the right to transmit such personal data to another data controller without Instabridge trying to prevent this, where Instabridge’s processing of your personal data is based on your consent or on a contract and the processing is carried out by automated means. You have in such case the right to request that the personal data from Instabridge shall be transmitted directly to another data controller, where technically feasible.

You also have the right to, at any time, withdraw your consent given to Instabridge for the processing of your personal data e.g. for marketing purposes. If you withdraw your consent, please note that this does not affect the lawfulness of the processing based on your consent before its withdrawal and that Instabridge may, under certain circumstances, have another legal ground for the processing and therefore may be entitled to continue the processing.

If you are unhappy with our processing of your personal data and/or consider it to be in contrary to applicable legislation you may lodge a complaint with a competent supervisory data protection authority (“DPA”) (such as with the DPA in your country of residence, the DPA in the country of your place of work or the DPA in the country where the alleged infringement has occurred).

To exercise the aforementioned rights please contact us at the following address: support@degoo.com or Degoo Backup AB, Vasagatan 16, 111 20 Stockholm. In order to ensure that you receive a swift response, please state in your letter your full name and, if applicable, your address, user name and the email address used for registration. We may request you provide us with information necessary to confirm your identity before responding to any request you make.

Language

This Privacy Policy was written in English. If you are reading a translation and it conflics with the English version of this Privacy Policy, the English version shall take precedence as the authoritative and correct version.