Privacy Policy

Last updated: November 05, 2024

This Privacy Policy explains the personal data we process, how we process that data, and why we process that data. Personal data is information that identifies or that is capable of identifying a natural person. Processing is any operation that may be performed on personal data and includes collecting, storing, using, sharing, and erasing personal data.

Digimarc is made up of the following legal entities: Digimarc Corporation, Digimarc GmbH, EVRYTHNG Limited, and EVRYTHNG Sárl (collectively, the “Digimarc Group”). This Privacy Policy is issued on behalf of the Digimarc Group. When we mention “Digimarc”, “we”, “us” or “our” in this Privacy Policy, we are referring to the relevant company in the Digimarc Group responsible for processing your data.

References to Digimarc products in this Privacy Policy include Digimarc’s products, services, platform, website, mobile apps, and other software.

For residents of California, please click here to review our CCPA Statement for more about our use of your “personal information” as defined in the California Consumer Privacy Act of 2018 (the “CCPA”) and your rights under the CCPA.

Personal Data We Collect

We collect personal data from you through your registration for and interaction with our products for the purposes described below. These purposes include providing our products, analyzing your use of our products, improving our products, and developing new products.

We also may obtain personal data about you from third parties. We process this data in accordance with this Privacy Policy and any additional restrictions placed on the processing of that data by the third-party providers.

The personal data we collect from you depends on which of our products you use and the other interactions you have with us. This data may include:

Name and contact information. Personal data you provide us when registering for our products, including first and last name, email address, postal address, phone number, and similar information.
Credentials. Usernames, passwords, and other credentials you create to access and use our products.
Demographic data. Your country of residence and other general demographic information.
Device and usage data. Personal data about your use of our products, including the activities you perform on your account, the Digimarc webpages you visit, and the devices from which you access our products, including IP address and device identifier. This data may also be obtained from your use of our software as integrated in third party products and interactions with third-party platforms integrated into our products.
Content. Content you provide us through your use of our products. For example, images and audio content you upload to the Digimarc Illuminate Platform, email communications, and feedback.
Location data. Personal data about your device’s location, based on GPS or determined from your device’s IP address.
Other data you provide. Other personal data you provide us through use of our products, including messages, survey responses, and other feedback.

We may also collect personal data about you from third-party sources, such as marketing data providers and analytics platforms, to enhance your experience with our products. This may include demographic data, interest data, and behavioral data gathered from your interactions across different websites.

Personal Data Use

We use your personal data to provide products, operate our business, comply with our legal and contractual obligations, protect our systems and customers, and to fulfill our other legitimate interests.

Provide our products. We use your personal data to operate our products and services.
Improve our products and develop new products. We use your personal data to monitor and improve the performance of our products and to develop new products. This may include our use of analytics, tracking, and performance data to better understand user interactions and optimize our services.
Provide customer support. We use your personal data to diagnose and correct problems with our products, including by responding to support requests and providing other support services.
Provide promotional communications. We use your personal data to provide promotional communications. You can unsubscribe from these communications at any time by clicking the “unsubscribe” link in the footer of those communications.
Negotiate and perform contracts. We use your personal data to negotiate contracts with you and to perform contracts we have entered with you.
Transact commerce. We use your personal data to process commercial transactions you request to undertake with us.
Analyze business operations. We use personal data to analyze business operations and to engage in other business intelligence activities. This may include using automated decision-making and profiling tools to predict customer behaviors, tailor content, and improve engagement based on your past interactions and data obtained from third-party sources.
Comply with the law. We use your personal data to comply with our legal obligations.

Legal Bases for Personal Data Processing

Depending on your location, certain laws may require us to disclose our legal bases for processing your personal data. Where applicable, the legal bases for our processing of your personal data are:

With your consent. We process your personal data when you have provided us your consent to do so, consistent with the scope of that consent. Where you have provided us consent to process your personal data, you may withdraw that consent at any time.
To fulfill a legitimate interest. We process your personal data to fulfill our legitimate interests, including optimizing product performance, personalizing communications, and predicting customer behavior using analytics and predictive modeling tools.
To enter or perform a contract. We process your personal data as necessary to enter into and to perform contracts we have entered into with you.
To comply with legal requirements. We process personal data as required by law.

Personal Data Sharing

We may share your personal data among the Digimarc Group and with our third-party service providers. We may also share your personal data with third parties to exercise our legal rights and perform our legal obligations, and in other circumstances where you have granted us permission to share your personal data.

Affiliates. We may share your personal data among the Digimarc Group for the purposes stated in this Privacy Policy.
Third party service providers. We may share your personal data with third party services providers who process data on our behalf in ways that are consistent with this Privacy Policy. These providers help us with services such as cloud hosting, customer relationship management, customer support, email marketing, predictive analytics, automated communications, and payment processing.
Third parties for legal purposes. We may share your personal data as required by law or as necessary to exercise our legal rights. For example, we may share your personal data as required by law enforcement or in connection with legal proceedings, and transfer your data in connection with a sale, merger, transfer, or reorganization of our business or business assets.
Permission. We may share your personal data in other circumstances where you have given us permission to do so.

Where We Process Personal Data

We may process your personal data in the United States and in any other country where we or our service providers maintain facilities. We choose data processing locations to optimize delivery of our products, to create redundancies to protect data, and to continue to provide our products in the event of an outage. Our service providers maintain facilities throughout the world.

We transfer personal data from the European Economic Area, United Kingdom, and Switzerland to other countries, some of which have been determined by the European Commission not to have an adequate level of data protection. When we do so, we use the Standard Contractual Clauses or other approved mechanisms to ensure your rights and protections travel with your data. To learn more about the European Commission’s decisions on the adequacy of the protection of personal data in non-European Union countries, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en.

Our Retention of Personal Data

We retain your personal data as long as necessary to provide the products you have requested and to perform the contracts you have entered with us, to fulfill our legitimate interests, including to exercise our legal rights and to perform our legal obligations. Our need to retain personal data varies based on the type of data and the reasons we collected it, so our retention periods vary as well.

We use the following criteria to determine how long to retain personal data:

Customer expectations. We retain personal data consistent your expectations concerning the performance of the products we provide you.
Legitimate interests. We retain personal data to fulfill our legitimate interests.
Legal obligations. We retain personal data as required by data retention laws, to comply with government orders, and as necessary to meet preservation requirements in litigation. We also remove personal data if required to do so by law.

Data Security

We use data security technology and reasonable data security procedures to help protect your personal data from unauthorized access, use, disclosure, and alteration or destruction. These measures include storing your personal data on access-controlled computer systems and in secure storage facilities. We comply with applicable data protection laws, including applicable security breach notification laws.

We use cookies and similar technologies to store your settings, to enable you to sign in to use our products, to analyze how our products perform, and to fulfill our other legitimate interests. More details are available in our Cookie Policy. You can manage your cookie settings for our website . You may also control the data collected by cookies using controls in your Internet browser to limit how the websites you visit are able to use cookies and to clear or block cookies.

Children’s Privacy

Our products are intended to be used by adults. We do not intentionally or knowingly collect personal data from children under 16, and we ask that children not provide personal data to us or otherwise use our products.

Personal Data Rights

Depending on your location, certain laws may provide you one or more of the following additional rights with respect to your personal data:

Right of access. You have the right to request information about and access to your personal data that we are processing.
Right of rectification. You have the right to request that we correct your personal data that we are processing if you believe that data is not up to date or is not accurate.
Right to withdraw consent. You have the right to withdraw your consent to our future processing of your personal data where our processing is based on your consent.
Right to object. You have the right to object to our processing of your personal data.
Right of erasure. You have the right to request that your personal data be deleted.
Right to restrict. You have the right to request that we restrict our processing of your personal data.
Right to data portability. You have the right to obtain a copy of your personal data in a structured and commonly used, machine-readable format where our automated processing of your personal data is based on your consent or based on a contract entered between us.

To exercise these rights, please contact us at privacy [at] digimarc [dot] com. We will respond to your request within the period required by applicable law. We may require that you verify your identity if you request to exercise these rights.

You may have the right to lodge a complaint concerning our processing of your personal data with a supervisory authority. We encourage you to contact us before lodging a complaint so that we can address any concerns you may have directly with you.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time, including as necessary to comply with legal requirements and to describe changes to our data processing policies. When we post changes to this Privacy Policy, we will revise the “last updated” legend at the top of the Privacy Policy to indicate that changes have been made. We encourage you to review this Privacy Policy periodically.

If you have any questions or concerns about this Privacy Policy or our processing of your personal data, please contact us at privacy [at] digimarc [dot] com.

If you have any questions or concerns about our Privacy Policy or our processing of your personal data, please contact us by email at privacy [at] digimarc [dot] com or by mail at: Digimarc Corporation, 8500 SW Creekside Place, Beaverton, Oregon 97008, USA.