Data retention policy
The length of time for which we retain personal information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws. Where there are technical limitations that prevent deletion or anonymization, we safeguard personal information and limit active use of it.
Promotional/Marketing Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional/marketing materials to you, as well as targeted offers from third parties. You can stop receiving promotional/marketing emails by following the unsubscribe instructions in e-mails that you receive and also adjust your email preferences and communication preferences.
Communication Preferences. If you decline to receive promotional and/or marketing emails, we may still send you transactional and service-related messages.
Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include “Do Not Track” instructions.
Device and Usage Information. If you do not want us to see your device location, you can turn off location sharing on your device, change your device privacy settings, or decline to share location on your browser.
Closing Your Account. If you wish to close your account, please log in to your account and edit your plan.
Deletion of Your Personal Information. Typically, we retain your personal information for the period necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. Where certain grounds apply, the law authorizes you to make a request that your personal information be deleted and triggers our corresponding obligation to comply, unless exceptions apply.
Data archiving and removal policy
We comply as required/authorized by applicable data protection law. For example, under GDPR, this would mean complying with the controller’s instructions as mandated by Art 28.
To assert your right to know, to access, or to delete your Personal Information, please contact us as set forth below.
We will respond to requests within forty-five (45) days after our receipt of such verifiable request (or within such other time as required by applicable law). If we need additional time, we will notify you in writing prior to the expiration of the forty-five (45) day period and inform you of the reason for an additional forty-five (45) day extension of time. For the avoidance of doubt, any such requests for Personal Information will cover the twelve (12) month period immediately preceding the date of such verifiable request. A disclosure of Personal Information in response to such a request will be provided in a commonly used format. For more information about requests, please see the “Your rights and controlling your personal information” section of the Privacy Notice. Send us an email at privacyteam@pandadoc.com or you can also send a request in writing to PandaDoc, Inc., Attention: Privacy Department, 3739 Balboa St. #1083, San Francisco, CA 94121 to exercise any of the foregoing.
Data storage policy
All data in each location is encrypted at rest with AES-256 and sophisticated encryption keys management.
App/service has sub-processors
yes
Guidelines for sub-processors