Account Data: Information pertaining to the owner of the Account, including name, email, address, billing information.Information pertaining to the owner of the Account, including name, email, address, billing information.
Business Data: Information generated either by the Account Owner (and its Authorized Users) or Scratchpad, where such Business Data does not include any personal Customer Data.
Customer Data: Information relating to the identity and identification of a client or customer of the Account Owner, including name, address, etc. that is used for client relationship management purposes.
1. Scratchpad software and services
Scratchpad provides a user interface experience for use in connection with a Salesforce account. The software is accessed through the browser as a web application or chrome extension. Scratchpad products are self-service; Authorized Users determine and are solely responsible for what and how Customer Data is collected. Scratchpad acts as a conduit through which Business and Customer Data flows into the Salesforce platform from you as the data collector. We do not store any data for longer than necessary to provide the Services.
Scratchpad acts as a data processor with respect to Business Data and Customer Data and processes this data as instructed by Authorized Users, who are the data controllers.
2. Data collected during normal business transactions (unrelated to the software)
In the normal course of business, Scratchpad collects Account Data such as contact information (e.g. name, address, phone number, e-mail address, and employer) and payment details for Account Owners. We may also collect browsing data from individuals who visit the Scratchpad Site or use the Scratchpad Services. In these circumstances, Scratchpad acts as a data controller. Scratchpad also acts as a data controller with respect to our own internal client relationship management data. This is data that Scratchpad needs in order to provide services to our Customers, including performing contractual obligations, engaging in marketing activities, and providing support services (e.g. processing and responding to Customer inquiries and requests). The Account Owner owns and retains all rights to the Account Data, including the right to request deletion of the Account Data in accordance with this policy.
We process Business and Customer Data on behalf of the Account Owner by facilitating its transmission and providing additional analytical tools at the Account Owner’s request. This processing is only done in order to fulfil contractual obligations, based on the individual’s consent, or in accordance with our legitimate business interests in improving our services, software and website experiences for users. Where processing is based on consent, an individual may withdraw consent at any time by contacting us. Instructions for contacting us are provided below in Sections 4 and 5. We retain Customer and Business Data only for as long as necessary to fulfil the purposes of its collection and processing, including for the purposes of satisfying any legal, accounting, or reporting requirements, or for the length of time requested by the Account Owner, whichever is longer.
For the www.scratchpad.com site, Scratchpad may collect and analyze aggregate visitor information, including the domain name, visited surveys, referring URLs, and other publicly available information. We use this information to improve our website and services and to customize the content of our pages for each website visitor.
We use the following cookies:
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
Scratchpad does not sell personal information of any type, including Account Data, Business Data, and Customer Data.
3. Data collected by our users
Account Owners own, and are data controllers of, Business and Customer Data. Depending on how the Account Owner and their Authorized Users choose to use the software, Customer Data may include certain personal information relating to the customers and clients of the Account Owner. Account Owners manage all Customer Data, as well as the users who create, manage, distribute, or report any Business Data generated by the Services. To the extent that Scratchpad processes or creates Business Data, Scratchpad does so as a data processor on behalf of Customers.
Scratchpad processes Customer and Business Data on behalf of Customers in a manner consistent with this Privacy Statement. This may include performing certain analytical functions as part of the Services. Scratchpad only provides such services at the request of the Account Owner, and does not process Customer or Business Data except as explicitly directed by the Account Owner.
Scratchpad treats all Customer and Business Data as confidential. All Customer and Business Data is safeguarded using industry-standard security practices to prevent unlawful disclosure. Scratchpad does not sell or make available Customer or Business Data except as requested by a valid court order, search warrant, subpoena, or otherwise as agreed by the parties or required by law.
Authorized Users of Organizational Accounts may generate information that is not subsequently linked to Salesforce or their organization. Until such information is linked to Salesforce or their organization, such information belongs to the Authorized User. If the Authorized User links an Object (as the term is defined in the Terms of Service), they acknowledge that they no longer have any rights of privacy or ownership over that information, and Scratchpad is under no obligation to ensure that private information belonging to Authorized User is not transferred to an Organizational Account’s control. Please carefully review your Objects, including “Notes,” to ensure that any information you link to Salesforce is information you are willing to share with your employer and/or complies with your employment agreement between you and the organization.
If you wish to exercise rights in relation to Account Data for which Scratchpad acts as a data controller, you should contact email@example.com. If you are located in the State of California, you may also call toll-free at (844) 987-2535. Please note, however, that Scratchpad can or will delete your Account or Business Data only if there is no statutory obligation or prevailing right of Scratchpad to retain it. Note further that if you request that Scratchpad deletes your Account Data, you will not be able to continue to use any Scratchpad service that requires Scratchpad’s use of your Account Data.
4. Data subject rights
In certain circumstances, individuals may have the following rights under data protection law in relation to their personal information:
Scratchpad will take steps to ensure that it verifies your identity to a reasonable degree of certainty before it will process the data protection rights you want to exercise. When feasible, Scratchpad will match Customer or Account Data provided by you in submitting a request to exercise your rights with information already maintained by Scratchpad. This could include matching two or more data points you provide when you submit your request with two or more data points that are already maintained by us.
In accordance with the verification process set forth in the California Consumer Privacy Act (“CCPA”), Scratchpad will require a more stringent verification process for deletion requests, or for Account Data that is considered sensitive or valuable, to minimize the harm that might be posed to you by unauthorized access or deletion of your Account Data. If Scratchpad must request additional information from you outside of information that is already maintained by Scratchpad, Scratchpad will only use it for the purposes of verifying your identity so you can exercise your data protection rights, or for security and fraud-prevention purposes.
Scratchpad will decline to process requests that are manifestly unfounded, excessive, fraudulent, or are not otherwise required by local law.