Rules and Protections for Your Personal and Dedoose Data
SocioCultural Research Consultants (“SCRC”) respects the intellectual property of others, and SCRC requires its users to do the same. SCRC may, in its sole and absolute discretion, disable and/or terminate the accounts of users who may be infringing the intellectual property rights of others.
If you believe that your work has been copied in a way that constitutes copyright infringement, or your intellectual property rights have been otherwise violated, please provide the SCRC Copyright Agent identified below with the following information:
an electronic or physical signature of the person authorized to act on behalf of the owner of the copyright or other intellectual property interest;
a description of the copyrighted work or other intellectual property that you claim has been infringed;
a description of where the material that you claim is infringing is located on the site;
your address, telephone number, and email address;
a statement by you that you have a good faith belief that the disputed use is not authorized by the copyright or intellectual property owner, its agent, or the law; and
a statement by you that the above information in your Notice is accurate and, under penalty of perjury, that you are the copyright or intellectual property owner or authorized to act on the copyright or intellectual property owner's behalf.
If you are seeking permission to use SCRC trademarks, logos, service marks, trade dress, slogans, screenshots, copyrighted designs, or other brand features, please contact SCRC at specified below.
The SCRC Copyright Agent, to whom notice of claims of copyright or other intellectual property infringement can be directed, may be reached as follows:
By Mail: Eli Lieber c/o SocioCultural Research Consultants, LLC 644 36th Street Manhattan Beach, CA 90266 By Phone: (866) 680-2928 By Fax: (866) 580-3837 By Email: firstname.lastname@example.org
to access and use the products and services you or your company have ordered for your use from SCRC;
to maintain accounting and billing contact information and other financial records;
to customize the advertising and content available on our website;
to contact you regarding our services.
When you register with SCRC, we ask for your name, e-mail address, physical address, telephone numbers and, in some cases, credit card information when you order services online. Some of our customers use SCRC to include teams of researchers, colleagues, or others to use SCRC services. Some of our customers include other institutions, businesses, or organizations as collaborators. Our customers will sometimes list business offices, individuals in those offices, or others involved in payment or business transactions on behalf of the customer. SCRC may store this information on behalf of our customers as necessary to fulfill our obligations to our customers. SCRC requires that all such customers use, hold and process such PII in accordance with applicable privacy laws.
SCRC also automatically receives and records information regarding your IP address, cookie information, and the page(s) you requested.
SCRC routinely collects information that cannot be identified to a particular individual such as time-stamps and logs events (like features used, number of participants, etc.) This data is used for accounting/billing purposes as well as for performance and optimization of the SCRC services.
Some of our customers will store information on their Dedoose database that may identify the names, addresses, telephone numbers, or other identifying information linked to individuals, groups, or organizations that they have included in their information database. SCRC tries to ensure that such records are viewed only by the customer and others authorized by the customer to access such records. However, SCRC is not responsible for any unauthorized access which may result from actions beyond the sole and exclusive control of SCRC. Each SCRC customer represents that he, she, or it, has the full authority to transmit to SCRC all of the information actually transmitted.
Retention and Relevance
SCRC may use and retain your PII when you use this website or other SCRC applications, or services. SCRC may also receive PII from its business partners
SCRC retains the PII that it collects only for the period of time such information is required to achieve the purposes set forth above. Generally, the retention period, will not be greater than two years after you cease to be an active customer depending on the purpose and any regulatory or audit requirements (e.g., financial records may be retained for a longer period to satisfy audit requirements)
SCRC uses and retains only your PII which is directly relevant to the purpose for which it is collected. This information is retained as you provide it, but will be updated when you notify us of changes in order to maintain its accuracy
SCRC assumes no independent responsibility to verify the accuracy or currency of any PII
SCRC assumes no independent responsibility to verify the accuracy or currency of any PII.
Information Sharing and Disclosure
SCRC will not sell or rent your PII except as authorized under this policy.
SCRC will send PII about you to other companies or people only when:
SCRC has your consent to share the information
SCRC needs to share your information to provide the application or service you have requested
SCRC needs to send the information to companies who work on behalf of SCRC in order to provide an SCRC application or service or to otherwise assist SCRC with its business activities
SCRC determines, in its sole and absolute discretion, that it is necessary to transmit your PII to respond to subpoenas, court orders or engage in the legal process; or
SCRC determines that your actions on our websites violate the SCRC End User License Agreement or Terms of Service
Corrections or Modifications to PII
You can direct SCRC to edit, correct, or erase your PII, at any time, except as otherwise provided for in this policy. To request such account maintenance, send your e-mail request to email@example.com. You may also indicate that you do not wish to receive messages from SCRC regarding our services or update your information relating to such messages at firstname.lastname@example.org. Following your request for either type of data editing, your information will be changed within a reasonable amount of time in SCRC’s databases after we receive the information necessary to process your request.
SCRC strongly recommends that you carefully guard any passwords issued by SCRC for use of the websites or applications. It is the policy of SCRC to require that each customer identify one, and only one, individual to whom an administrative password will be issued (the “Account Administrator”). The Account Administrator is solely and exclusively responsible for guarding their password. Any additional passwords authorized for multiple users of Dedoose will be issued to the Account Administrator, who will have sole and exclusive responsibility to provide any additional passwords to other authorized users. SCRC is not responsible for any unauthorized acquisition and use of passwords or unauthorized access to Dedoose resulting from such acquisition and use after the Account Administrator is provided the administrative password issued by SCRC.
The Account Administrator may choose to relinquish a password at any time. However, such relinquishment will only be effective if done so according to SCRC’s policies and procedures. Within thirty (30) days of service termination, SCRC will terminate all passwords issued to the Customer.
SocioCultural Research Consultants, LLC End User License Agreement
Please Read This Document Carefully
By using this website and application, you agree to these terms and conditions. If you do not agree, you should not use this application or any services contained on, in, or downloaded from this website or The App. These terms and conditions may be changed or updated from time to time.
This Terms o f Use, End User License Agreement, Disclaimer, and Release of Liability (“the Agreement”) is a legal agreement between you and Dedoose for use of this website or The App and any applications or programs contained on, in, or downloaded from this website or The App. Such applications include, but are not limited to Dedoose, applications, services, solutions, compilations, reports, summaries, other documents, computer software, and associated media and printed materials generated from use of this website or The App (hereinafter collectively referred to as “the App”).
The Software is designed exclusively for customers of Dedoose who have properly subscribed to this service and been specifically authorized in writing by Dedoose to access and use the website and the App. THE MATERIALS, INFORMATION, AND DOCUMENTS CONTAINED IN THE SOFTWARE ARE SOLELY APPLICABLE TO THE AUTHORIZED USERS HOLDING AN APPROVED PASSWORD.
The Software is protected by copyright laws, as well as other intellectual property laws. The Software is licensed, not sold. You may view and use the Software on the terms and conditions specified herein. You may not store, copy, replicate, or otherwise save any portion of the Software. You may not reverse engineer, decompile, disassemble, modify, translate, make any attempt to discover the source code of the Software, or create derivative works from the Software. The Software is licensed as a single product. Its component parts may not be separated for use on more than one computer. You may not rent, sub-license, or lease the Software. You may not transfer the Software or any rights you may have as a user under this Agreement to another person or entity.
The following provisions shall apply with respect to copyrightable works, proprietary, development, technical, assessment methodologies, artwork, presentation materials, manuals, computer programming techniques and all record bearing media containing or disclosing such information and techniques, ideas, discoveries, inventions, applications for patents, and patents (collectively, “Intellectual Property”).
Dedoose personally holds an interest in and solely owns the Intellectual Property that is described herein. Intellectual Property will include but not be limited to those products and services, including but not limited to the Software developed by Dedoose and/or its affiliates before, during and after services provided and described in this Agreement. Any improvements to Intellectual Property items listed herein, further inventions or improvements, and any new items of Intellectual Property discovered or developed by Dedoose (or its employees or agents,) during the term of this Agreement shall be the sole and exclusive property of Dedoose. You will not acquire any rights or interest in any way in such Intellectual Property by virtue of the development, experimentation, modification, or adaptation of any portion of the Software. Dedoose grants you a non-exclusive, written license to use Dedoose’s intellectual property embodied in the Software needed to exploit the rights granted under this Agreement. Nothing in this Agreement shall constitute a waiver of any patents, trademarks, service marks, ownership interests, or copyrights that Dedoose has in the Software.
You agree that you will not distribute the Intellectual Property or software of Dedoose contained in the Software to any person or entity other than as contemplated in this Agreement. You agree to undertake your best efforts to prevent transmission of usernames or passwords provided by Dedoose to any person or entity except as provided in this Agreement.
All rights, title, and interest in and to the Software are and shall remain at all times the property of Dedoose and/or Dedoose’s suppliers. You agree to take all reasonable steps to protect the Intellectual Property rights of Dedoose, including, but not limited to distributing unauthorized passwords, storing any portion of the Software, streaming content or media, or otherwise taking any actions to dilute the Intellectual Property rights of Dedoose.
All titles and copyrights in and to the Software, the accompanying printed materials, and any copies of the Software, are owned by SCRC or its suppliers. The Software is protected by U.S. and international copyright laws. Therefore, you must treat the Software like any other copyrighted material.
You understand and agree that the software and website are provided “AS IS” and Dedoose, its affiliates, suppliers and resellers expressly disclaim all warranties of any kind, express or implied, including without limitation any warranty of merchantability, fitness for a particular purpose or non-infringement. Dedoose, its affiliates, suppliers and resellers make no warranty or representation regarding the results that may be obtained from the use of the software, regarding the accuracy or reliability of any information obtained through the software, regarding any goods or services purchased or obtained through your use of The App or the website, regarding any transactions entered into through the software or that the software will meet any user's requirements, or be uninterrupted, timely, secure or error free. use of the software is at your sole risk. any material and/or data downloaded or otherwise obtained through the use of The App or website is at your own discretion and risk. you will be solely responsible for any damage to you resulting from the use of the software. the entire risk arising out of use or performance of the software remains with you.
You agree to indemnify, defend and hold harmless Dedoose, its affiliates, officers, directors, employees, members, and managers (collectively, ‘Indemnified Parties’) from any and all third party claims, liability, damages and/or costs (including, but not limited to, attorney’s fees) (collectively, ‘Claims’) arising from your use of the Software, your violation of this Agreement, your violation of laws or regulations, or your infringement of any intellectual property or other right of any person or entity, but excluding Claims to the extent they arise from any negligence, breach of this Agreement, infringement of any intellectual property or other right of any person or entity, or other wrongful conduct of any Indemnified Parties.
Technical or other support services, whether arising in tort (including negligence) contract or any other legal theory, even if Dedoose, its affiliates, suppliers or resellers have been advised of the possibility of such damages. in any case, Dedoose, its affiliates’, and suppliers’ maximum cumulative liability and your exclusive remedy for any claims arising out of or related to this agreement will be limited to the amount actually paid by you for the software (if any) in the previous 12 months. because some states and jurisdictions do not allow the exclusion or limitation of liability, the above limitation may not apply to you.
Data Retention and Sharing:
Dedoose strongly believes your data is your data. Dedoose promises not to share your data with any 3rd parties, and allows you to export all of your data at any time. Our system naturally deletes all project data after 2 years of no active subscription associated with the project. If for any reason you would like all your project data and/or your user and account data deleted. Please send an authorized request to email@example.com and we will happily oblige.
Dedoose provides industry standard protection for personally identifying information. Dedoose would only disclose personally identifiable information about users or information about your project to third parties in limited circumstances: (1) with your consent; or (2) when we have a good faith belief it is required by law, such as pursuant to a subpoena or other governmental, judicial, or administrative order.
If Dedoose is required by law to disclose personally identifying or project data, Dedoose will attempt to provide you with notice (unless we are prohibited from doing so) that a request for your information has been made in order to give you an opportunity to object to the disclosure. We will attempt to provide this notice by email, if you have given us an email address, and/or by postal mail if you have provided a postal address. Even if you challenge the disclosure request, we may still be legally required to turn over the personally identifying information and/or project data.
Data Breach Notification and Incident Response Plan:
Dedoose hosts all data within the continental U.S. unless agreed upon and determined as needed on a project-by-project basis. Dedoose has a systematic plan for response and notification of any breach in data security. Upon the detection of any breach in data security, Dedoose technical staff, lead by the Dedoose Chief Technical Officer, will immediately assess the size, scope, and severity of the breach. Following this assessment, Dedoose will notify all project administrators of projects that may have been involved and communicate the response plan. Depending on the nature and cause of the breach, Dedoose will take appropriate action to prevent any future breach and then, to the extent reasonably practicable, restore the integrity of all Dedoose project data that had been affected. Further details about this notification and response plan will be provided upon request.
Dedoose cannot and does not guarantee complete data security and integrity for project-related data. However, the tools described above are designed to provide industry-standard security and Dedoose recommends that users strictly adhere to the security protocols described in this document and are diligent in their protection of the data for which they are responsible.
GDPR: Dedoose fully complies with the EU General Data Protection Regulations known as GDPR. Dedoose also fully complies with the Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States.
Dedoose 644 36th Street Manhattan Beach, California 90266
Dedoose has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved GDPR or Privacy Shield complaints concerning data transferred from the EU and Switzerland.
1. We are committed to safeguarding the privacy of our website and The App visitors and service users.
This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.
We are committed to safeguarding the privacy of our website and The App visitors and service users.
This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.
Our website and The App incorporates privacy controls which affect how we will process your personal data. By using the privacy controls, you can specify whether you would like to receive direct marketing communications and limit the publication of your information.
In this policy, "we", "us" and "our" refer to Dedoose. For more information about us, see Section 13.
Dedoose is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
There exists the possibility, under certain conditions, for the individual to invoke binding arbitration when other dispute resolution procedures have been exhausted.
Dedoose is required to disclose personal information in response to lawful requests by public authorities, including those necessary to meet national security or law enforcement requirements.
Dedoose acknowledges the potential liability in cases of onward transfers to third parties of personal data of EU individuals received pursuant to Privacy Shield.
How we use your personal data
In this Section 3 we have set out:
the general categories of personal data that we may process;
in the case of personal data that we did not obtain directly from you, the source and specific categories of that data;
the purposes for which we may process personal data; and
the legal bases of the processing.
We may process data about your use of our website, The App and services ("usage data"). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics and Stackify. This usage data may be processed [for the purposes of analyzing the use of the website, The App and services, or for troubleshooting issues found while utilizing The App. The legal basis for this processing is consent OR our legitimate interests, namely monitoring and improving our website and services (The App), OR as deemed legally necessary by law.
We may process your account data. The account data may include your name and/or account names and/or supplied email address, provided by you, your account manager and/or your employer. The account data may be processed for the purposes of operating our website or The App, providing our services, ensuring the security of our website and services (The App), maintaining back-ups of our databases and communicating with you. The legal basis for this processing is with specific consent (either verbal or written) OR other legitimate interests, namely when seeking support/troubleshooting OR performance of a contract between you and Dedoose and/or taking steps, at your request, to enter into such a contract, OR on an as-needed legal basis.
We may process your information ("profile data"). The profile data may include your name, address, telephone number, email address, date of birth, and employment details. The profile data may be processed for the purposes of enabling and monitoring your use of our website/or services (The App). The legal basis for this processing is with specific consent (either verbal or written) OR other legitimate interests, namely when seeking support/troubleshooting OR performance of a contract between you and Dedoose and/or taking steps, at your request, to enter into such a contract, OR on an as-needed legal basis.
We may process your personal data that are provided in the course of the use of our services ("service data"). The service data may include your name, address, telephone number, email address, date of birth, and employment details. The profile data may be processed for the purposes of enabling and monitoring your use of our website/or services (The App). The legal basis for this processing is with specific consent (either verbal or written) OR other legitimate interests, namely when seeking support/troubleshooting OR performance of a contract between you and Dedoose and/or taking steps, at your request, to enter into such a contract, OR on an as-needed legal basis.
We may process information that you post for publication on our website, The App or through our services or support staff ("publication data"). The publication data may be processed for the purposes of enabling such publication and administering our website, The App and services. The legal basis for this processing is with specific consent (either verbal or written) OR other legitimate interests, namely when seeking support/troubleshooting OR performance of a contract between you and Dedoose and/or taking steps, at your request, to enter into such a contract, OR on an as-needed legal basis.
We may process information contained in any enquiry you submit to us regarding services and/or support inquiries ("enquiry data"). The enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you. The legal basis for this processing is specific verbal or written consent.
We may process information relating to our customer relationships, including customer contact information ("customer relationship data"). The customer relationship data may include your name, your employer, your contact details, and information contained in communications between us and you or your employer. The source of the customer relationship data you or your employer. The customer relationship data may be processed for the purposes of managing our relationships with customers, communicating with customers, keeping records of those communications and promoting our products and services to customers. The legal basis for this processing is specific written/oral consent OR our legitimate interests, namely the proper management of our customer relationships OR for managing/providing specific support-related inquiries.
We may process information relating to transactions, including purchases of goods and services, that you enter into with us and/or through our website and/or The App ("transaction data"). The transaction data may include your contact details, your card details and the transaction details. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely the proper administration of our website, The App and business OR managing/providing specific support-related inquiries.
We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters ("notification data"). The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is your consent OR the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
We may process information contained in or relating to any communication that you send to us ("correspondence data"). The correspondence data may include the communication content and metadata associated with the communication. Our website and The App will generate the metadata associated with communications made using the website contact forms or through The App. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website, business and The App, and communications with users.
We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business and customers against risks.
In addition to the specific purposes for which we may process your personal data set out in this Section 3, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Please do not supply any other person's personal data to us, unless we prompt you to do so.
Providing your personal data to others
We may disclose your personal data to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy.
We may disclose your personal data to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
Financial transactions relating to our website and services (The App) are OR may be handled by our payment services providers, [authorize]. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers' privacy policies and practices at: https://www.authorize.net
In addition to the specific disclosures of personal data set out in this Section 4, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
Dedoose acknowledges the potential liability in cases of onward transfers to third parties of personal data of EU individuals received pursuant to Privacy Shield.
International transfers of your personal data
In this Section 5, we provide information about the circumstances in which your personal data may be transferred to countries outside the European Economic Area (EEA).
You acknowledge that personal data that you submit for publication through our website or The App or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
Retaining and deleting personal data
This Section 6 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
We will retain your personal data as follows:
Personal Data will be retained for a minimum period of 6 months following the
users termination of services, and for a maximum period of 24 months following the
users termination of services.
Project-Related Data will be retained for a minimum period of 6 months following the users termination of services, and for a maximum period of 24 months following the users termination of services.
In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the following criteria:
the period of retention of Personal Data will be determined based on
the same 6 month principle described in 6.C.
Notwithstanding the other provisions of this Section 6, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
We may update this policy from time to time by publishing a new version on our website and/or The App.
You should check this page occasionally to ensure you are happy with any changes to this policy.
We will notify you of significant changes to this policy by email.
In this Section 8, we have summarized the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
Your principal rights under data protection law are:
the right to access;
the right to rectification;
the right to erasure;
the right to restrict processing;
the right to object to processing;
the right to data portability;
the right to complain to a supervisory authority; and
the right to withdraw consent.
You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee. You can access your personal data by visiting your Account Workspace when logged into The App.
You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defense of legal claims.
In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defense of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defense of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.
You have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
To the extent that the legal basis for our processing of your personal data is:
that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract,
and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
You may exercise any of your rights in relation to your personal data by written notice to us OR via phone.
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
Cookies that we use
Cookies used by our service providers
Cookies are managed via your internet browser controls. Please review the user manual for your browser for the most up to date information on managing your browser’s cookies.
Blocking all cookies will have a negative impact upon the usability of many websites as well as The App.
If you block cookies, you will not be able to use all the features on our website or The App.
This website and services (The App) is owned and operated by Dedoose.
Our principal place of business is at: 644 36th Street, Manhattan Beach, CA, 90266, United States.
You can contact us:
by post, to the postal address given above;
using our website contact form;
by telephone, on the contact number published on our website and/or The App from time to time; or
by email, using the email address published on our website and/or The App from time to time.
Data protection officer
Our data protection officer contact details are: Jason Taylor (firstname.lastname@example.org), 644 36th Street, Manhattan Beach, CA, 90266, United States.
All data communication through Dedoose occurs through a 2-lock system. First, Dedoose sets up an AES (Advanced Encryption Standard)-256 CBC (Cipher Block Chaining) Encrypted SSL (Secure Sockets Layer) tunnel using a premium SSL-EV certificate. All communication following this channel is encrypted. The user is not prompted for login information until this communication channel is established. In order to prevent transfer of login details, Dedoose employs a one-way, non-reversible encryption algorithm known as SHA-2 (Secure Hash Algorithm)—designed by the United States National Security Agency. Dedoose does not store user passwords. Rather, the system stores the known result of this algorithm against the username and password and then compares that result to the result the Dedoose client sends to the server for authentication.
Dedoose is hosted on commercial servers with all project data backed-up in-full on a nightly basis, encrypted using AES-256 processes, and transferred automatically to three Geo-redundant storage volumes. One of these volumes is on-site, while the other 2 are off-site and replicated across geographic regions. All project file data are encrypted and stored in a Microsoft Azure Geo-redundant fault tolerant storage volume, and for added safety, this storage volume is encrypted and mirrored in real-time to a Amazon S3 storage volume in the same geographic region. Both Microsoft's Azure Cloud Platform and Amazon's S3 Storage platform are fully SAS 70 Type II / SSAE 16 SOC and HIPAA compliant. To ensure these processes are working as designed, an automated program runs daily which includes: a) downloading the most recent backup files from each storage volume, b) verification the backup file is the correct version, c) a full test restoration of the database to assure data integrity, and c) email reporting of all backup and restoration process results to key members of the Dedoose Admin team.
Following the expiration of all Dedoose user licenses with authorized administrative access to a project's data on a particular client account, users can regain access to the project after re-activating their subscription for as long as SCRC continues to archive the project data. The following details SCRC’s data retention policy for Dedoose:
SCRC will retain data for two years after the expiration of all user logins
Authorized users can regain access to project data during this two-year period by providing a specific written request to SCRC. Such request should be sent to:
Upon specific written request from the project administrator, SCRC will permanently delete all project data BEFORE the two-year period
Within six months of either: a) the end of the two-year retention period, or b) after receiving the express written request from the project administrator, SCRC will delete all data from backup tapes
SCRC may, in its sole and absolute discretion, retain project data longer than two-years upon written request from a project administrator.
SCRC provides industry standard protection for personally identifying information. SCRC would only disclose personally identifiable information about users or information about your project to third parties in limited circumstances: (1) with your consent; or (2) when we have a good faith belief it is required by law, such as pursuant to a subpoena or other governmental, judicial, or administrative order.
If SCRC is required by law to disclose personally identifying or project data, SCRC will attempt to provide you with notice (unless we are prohibited from doing so) that a request for your information has been made in order to give you an opportunity to object to the disclosure. We will attempt to provide this notice by email, if you have given us an email address, and/or by postal mail if you have provided a postal address. Even if you challenge the disclosure request, we may still be legally required to turn over the personally identifying information and/or project data.
Encrypted SSL tunnel is established for communication between Dedoose client and server (SSL TLS 1.3)
Login username/password is then encrypted in a one-way Hash (SHA-256 + per user unique salt) and transmitted across the SSL tunnel
Security and access privileges are set by each Dedoose account owner/project administrator on a per-project basis, via the Security Center. The Security Center allows project administrators to control exactly which information a user is allowed to view, create, edit, or delete
The Dedoose Data Center follows SAS 70 Type II, ISO27001, NIST800-53, HIPAA, PCI-DSS compliancy.
Daily backups are encrypted with SSL AES-256 and transferred to the Amazon S3 Storage system and the Microsoft Azure blob storage for redundancy
Server login is accessible only by a private VPN connection with its own SSL tunnel and separate authentication
Server login is protected by windows secure login authentication which uses an AES encryption algorithm.
You agree that Dedoose may charge to your credit card or other payment mechanism selected by you and approved by Dedoose for all amounts due and owed, including service fees, set up fees, subscription fees, overage fees, consulting fees or any other fee or charge associated with your use of the Software or other Dedoose services. Dedoose may change prices at any time without prior notice. You agree that in the event Dedoose is unable to collect the fees owed to Dedoose , Dedoose may take any other steps it deems necessary to collect such fees and that you will be responsible for all costs and expenses incurred by Dedoose in connection with such collection activity, including collection fees, court costs and attorneys’ fees. You further agree that Dedoose may collect interest at the lesser of 1.5% per month or the highest amount permitted by law on any amounts not paid when due.
You may terminate this Agreement by providing written notice to Dedoose via email to email@example.com Such termination will be effective on the last day of the billing cycle, subject to (30) days prior written notice.
You acknowledge that the Software, or portion thereof may be subject to the export control laws of the United States. You will not export, re-export, divert, transfer or disclose any portion of the Software or any related technical information or materials, directly or indirectly, in violation of any applicable export law or regulation.
You acknowledge that any use of the Software contrary to this Agreement, or any transfer, sublicensing, copying or disclosure of technical information or materials related to the Software, may cause irreparable injury to Dedoose , its affiliates, suppliers and any other party authorized by Dedoose to resell, distribute, or promote the Software, and under such circumstances Dedoose will be entitled to equitable relief, without posting bond or other security, including, but not limited to, preliminary and permanent injunctive relief.
This Agreement shall be governed by and construed under the laws of the State of California, U.S.A., as to the exclusive jurisdiction and venue of the courts located in and serving Los Angeles, California.
Failure by either party to exercise any of its rights under, or to enforce any provision of, this Agreement will not be deemed a waiver or forfeiture of such rights or ability to enforce such provision. If any provision of this Agreement is held by a court of competent jurisdiction to be illegal, invalid or unenforceable, that provision will be amended to achieve as nearly as possible the same economic effect of the original provision and the remainder of this Agreement will remain in full force and effect.
This Agreement embodies the entire understanding and agreement between the parties respecting the subject matter of this Agreement and supersedes any and all prior understandings and agreements between the parties respecting such subject matter. Dedoose may change the terms of this Agreement at any time by posting modified terms on its website and The App. This Agreement has been prepared in the English Language and such version shall be controlling in all respects and any non-English version of this Agreement is solely for accommodation purposes. All notices or other correspondence to Dedoose under this Agreement must be sent to the address provided here firstname.lastname@example.org above, or other address as provided by Dedoose for such purpose. Any and all rights and remedies of Dedoose upon your breach or other default under this Agreement will be deemed cumulative and not exclusive of any other right or remedy conferred by this Agreement or by law or equity on Dedoose , and the exercise of any one remedy will not preclude the exercise of any other. The captions and headings appearing in this Agreement are for reference only and will not be considered in construing this Agreement.
You agree that you are solely responsible for the content of all visual, written or audible communications sent by you and you will not use this website or The App to send unsolicited commercial email outside your company or organization in violation of applicable law. You further agree not to use this website or The App to communicate any message or material that is harassing, libelous, threatening, obscene, indecent, or would violate the intellectual property rights of any party or is otherwise unlawful, that would give rise to civil liability, or that constitutes or encourages conduct that could constitute a criminal offense, under any applicable law or regulation or that violates your agreed upon responsibilities to other entities including Institutional Review Boards or HIPAA. You also agree that Dedoose may delete any such communications in its sole and absolute discretion without notice.
Without prejudice to any other rights, Dedoose may terminate this Agreement if you fail to comply with any of the terms or conditions of this Agreement. You have been, or will be, provided with a username and password. You are not allowed, under any circumstances to share your username and password with any other person or entity. Doing so terminates any rights you have under this Agreement. It is the policy of Dedoose to require that each customer identify one, and only one, individual to whom an administrative password will be issued ("the Account Administrator"). The Account Administrator is solely and exclusively responsible for guarding their password. Any additional passwords authorized for multiple users of Dedoose will be issued to the Account Administrator, who will have sole and exclusive responsibility to provide any additional passwords to other authorized users. Dedoose is not responsible for any unauthorized acquisition and use of passwords or unauthorized access to Dedoose resulting from such acquisition and use after the Account Administrator is provided the administrative password by Dedoose.
Dedoose shall have the right to assign this Agreement in its entirety and the right to change or reassign various duties regarding the operation and performance of any duties imposed by this Agreement.
Inability or delay in providing access to the Software resulting from cause beyond the control of Dedoose , including but not limited to interruption of communication lines, labor disputes, acts of terrorism, government action or order, laws, or natural disaster, or war shall not constitute a breach of contract and the parties hereto agree to resolve any resulting issues by mutual agreement, including, without limitation an extension of service, additional service or credit on a pro rata basis.
Each of the parties to this Agreement shall exert every reasonable effort in the performance of their respective obligations hereunder to comply with all applicable municipal, county, state and federal laws, ordinances and regulations.
Copyright © 2018 Dedoose, LLC. All rights reserved. No part of the material protected by this copyright may be reproduced or utilized in any form or by any means, electric or mechanical, including photocopying, recording, and broadcasting, or by any information storage and retrieval system, without permission in writing from Dedoose. Dedoose, www.Dedoose.com, Dedoose logos, Dedoose Logos, Dedoose Seal(s), are registered trademarks of Dedoose, registered in the State of California, Federal registry and/or other jurisdictions. All other trademarks referenced are the trademark, service mark, or registered trademark of the respective holders. The software and technology used to implement the Software contain trade secrets that Dedoose considers to be confidential and proprietary information, and your right to use this material is subject to the restrictions in this Agreement under which you obtained it. Companies, names, products and data used in the examples illustrating Dedoose products and Dedoose, and in the training materials and demonstrations of Dedoose are fictitious. Any resemblance to existing companies, persons, or products is coincidental and unintentional.