Privacy Policy

Effective: February 22, 2017

You can see the past version of our Privacy Policy in our Policy Archive.

Introduction

Our privacy policy will help you understand what information we collect at MURAL, how MURAL uses it, and what choices you have.

When we talk about “MURAL,” “we,” “our,” or “us” in this policy, we are referring to Tactivos, Inc., the company which provides the Services. This Privacy Policy relates to the information collection and use practices of MURAL in connection with our online services ("Services"), which are made available to you through our website located at mural.co (the "Site").

When we talk about the “Services” in this policy, we are referring to our online workplace collaboration tools and platform. Our Services are currently available for use via a web browser or applications specific to your desktop or mobile device, as further described in our Help Center.

This Privacy Policy applies to visitors to the Site, who view only publicly- available content (the “Visitors”) and subscribers who have signed up to access and use our Services (“Subscribers”).

By visiting our Site, Visitors are agreeing to the terms of this Privacy Policy and the accompanying Terms of Service. By signing up, accessing and/or using our Services, each Subscriber is agreeing to the terms of this Privacy Policy and the accompanying Terms of Service.

Capitalized terms not defined in this Privacy Policy shall have the meaning set forth in our Terms of Service

Information we collect

When you sign up to use the Services, either as an individual or on behalf of a company, you may be asked to provide us with the following information: your first name, last name, email address, and company name (if applicable).

You may choose to sign-in using your Google, or your company identity provider account (“Third Party IdP”). By signing-in using your Third Party IdP, you are authorizing MURAL to collect, store, and use, in accordance with this Privacy Policy, any and all information that you have authorized the Third Party IdP to provide to us. Such information may include your first and last name, unique identifier, e-mail address and picture.

We will collect billing and payment information which may include your credit card number, billing address, and other payment related information (“Billing Information”). Billing Information is collected and processed by our third-party payment processor operating as our agent (See, Onward Transfers to Third Parties). MURAL does not directly obtain or process any Billing Information.

Our Cookie policy

MURAL uses cookies and similar technologies like single-pixel gifs and web beacons, to record log data. We use both session-based and persistent cookies.

Cookies are small text files sent by us to your computer and from your computer or mobile device to us each time you visit our website or use our desktop application. They are unique to your account or your browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.

Some cookies are associated with your account and personal information in order to remember that you are logged in and which workspaces you are logged into. Other cookies are not tied to your account but are unique and allow us to carry out site analytics and customization, among other similar things. If you access the Services through your browser, you can manage your cookie settings there but if you disable some or all cookies you may not be able to use the Services.

MURAL sets and accesses our own cookies on the domains operated by MURAL and its corporate affiliates. In addition, we use third party tools for website analytics. We do not currently recognize or respond to browser-initiated Do Not Track signals as there is no consistent industry standard for compliance.

Information collected through the Site that IS NOT covered by this Privacy Policy

Registered Users may voluntarily post information using blogs and other similar features available through the Site. NONE of the information you provide using these features is protected by this Privacy Policy. THIS PRIVACY POLICY DOES NOT APPLY TO ANY INFORMATION (INCLUDING PERSONAL INFORMATION) THAT YOU PROVIDE USING BLOGS, OR OTHER SIMILAR FEATURES AVAILABLE THROUGH THE SITE. ALL SUCH INFORMATION IS PUBLIC INFORMATION AND MAY BE SEEN, COLLECTED OR USED BY ANY USER OF THE SITE. Also all the material you choose to reveal in "Murals", On-line Forums, Blogs, Message Boards, Chat Rooms or Similar Locations. You may post information, including Personally-Identifying Information, Information may be posted on murals by pinning or uploading content or by entering text. Information posted on murals that grant access to anonymous users may be viewed by anyone, including someone not on this Site. Information posted on murals may only be seen by your workspace users on this Service; provided that, if one of your workspace members on this Site pins content of any anonymously accessible murals, that content will become public. We urge you to use good judgment and not post Personally-Identifying Information that you do not want other users to know. YOU ASSUME ALL RESPONSIBILITY FOR ANY LOSS OF PRIVACY OR OTHER HARM RESULTING FROM YOUR VOLUNTARY DISCLOSURE OF PERSONALLY-IDENTIFYING INFORMATION. By posting such information, you consent to the transfer of such information (including any personal information) from your country of origin to the US, and you acknowledge that the EU-US Privacy Shield Framework does not apply to such information (including any personal information).

Information collected through the Site that IS NOT covered by this Privacy Policy

As part of the Services, MURAL collects data from your end users as per your instructions, and may also receive end user data from you. End user data may, as determined solely by MURAL customers, include personal information regarding your end users. MURAL processes and stores end user data for purposes of providing the Services. MURAL does not have any relationship, contractual or otherwise, with your end users. You, as the customer (and specifically not MURAL) are solely responsible for providing notice to, and obtaining all consents and other assurances required under applicable law from, your end users regarding the collection, transfer, processing and storage of end user data by MURAL including, for any end users that are residents of the European Economic Area.

If you are an end user who would like to correct or delete your end user data, please contact the customer, your application, API or service provider or contact us directly as set forth in the Section titled “Access to Personal Information” below.

How we use your information

We will use your Personal Data and Usage Information (together, “Information”) for the following purposes:

  • To respond to your requests and to provide you with the Services;
  • To respond to your inquiries and contact you about changes to the Site, and/or the Services;
  • To send you notices (for example, in the form of e-mails, mailings, and the like) regarding products or services you are receiving, and for billing and collection purposes;
  • To improve the Site and/or the Services;
  • For any other purposes disclosed at the time the information is collected or to which you consent.

We may also use your information to improve our Site, and/or the Services, and may use cookies and other information to enable us to customize your user experience.

We may analyze your Personal Data in aggregate form which does not identify you personally. We may share this aggregate data with our parent, affiliates, agents, advertisers, manufacturers and business partners.

Onward transfer to Third Parties

Like many businesses, we hire other companies to perform certain business-related services. We may disclose personal information to certain types of third party companies but only to the extent needed to enable them to provide such services. The types of companies that may receive personal information and their functions are: mail services (hardcopy and email); hosting services; database management/backup services; monitoring services; customer support and customer relationship management services; accounting services; and payment processors. All such third parties function as our agents, performing services at our instruction and on our behalf pursuant to contracts which require they provide at least the same level of privacy protection as is required by this Privacy Policy and implemented by MURAL. You may opt-out of having your personal information transferred to any or all of our categories of agents by contacting us at support@mural.co. Please allow us a reasonable time to process your request.

Opt-In to certain onward transfers

We will not transfer your personal information to a third party controller without first providing you with information regarding the identity of such controller or the nature of such controller’s business, and obtaining your opt-in consent.

We will not disclose your sensitive personal information to any third party without first obtaining your opt-in consent. You may grant such consent by contacting us at support@mural.co. In each instance, please allow us a reasonable time to process your response.

Business Transfers

In the event of a merger, dissolution or similar corporate event, or the sale of all or substantially all of our assets, we expect that the information that we have collected, including personal information, would be transferred to the surviving entity in a merger or the acquiring entity. All such transfers shall be subject to our commitments with respect to the privacy and confidentiality of such personal information as set forth in this Privacy Policy.

Disclosures to Public Authorities, Other Third Parties

We may be required to disclose personal information in response to lawful requests by public authorities, including for the purpose of meeting national security or law enforcement requirements. We may also disclose personal information to other third parties when compelled to do so by government authorities or required by law or regulation including, but not limited to, in response to court orders and subpoenas.

Opt-Out for Direct Marketing

You may opt out at any time from the use of your personal information for direct marketing purposes by contacting us at support@mural.co. Please allow us a reasonable time to process your request.

Security

MURAL implements reasonable and appropriate security measures to protect your personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in processing and the nature of such data, and comply with applicable laws and regulations. MURAL is SOC-2 compliant and will continue to be SOC 2 compliant. MURAL conducts penetration tests and audits of its servers and networks every quarter.

Please understand, however, that no security system is impenetrable. We cannot guarantee the security of our databases, nor can we guarantee that the information you supply will not be intercepted while being transmitted to and from us over the Internet. In particular, e-mail sent to or from the Service may not be secure, and you should therefore take special care in deciding what information you send to us via e-mail. Any unauthorized access to or use of this Service or information collected and maintained by this Service should be immediately brought to our attention by sending us an email at support@mural.co.

To learn more about current practices and policies regarding security and confidentiality of Customer Data and other information, please see our Security Page; we keep that document updated as these practices evolve over time.

Access to Personal Information

Upon request to support@mural.co, we will provide you with confirmation as to whether we are processing your personal information, and have the data communicated to you within a reasonable time. You have the right to access, correct, amend or delete your personal information where it is inaccurate or has been processed in violation of this Privacy Policy. We may require payment of a non-excessive fee to defray our expenses in this regard. Please allow us a reasonable time to respond to your inquiries and requests.

Retention of Personal Information

We will retain your personal information in a form that identifies you only for as long as it serves the purpose(s) for which it was initially collected as stated in this Privacy Policy, or subsequently authorized. We may continue processing your personal information for longer periods, but only for the time and to the extent such processing reasonably serves the purposes of archiving in the public interest, journalism, literature and art, scientific or historical research and statistical analysis, and subject to the protection of this Privacy Policy. After such time periods have expired, we may either delete your personal information or retain it in a form such that it does not identify you personally.

Your Choices

If you wish to stop receiving emails from us, please send us a message via support@mural.co. You may also choose to unsubscribe from our emails by following the instructions in the bottom of the email.

Links

The Site and the Services may contain content, services, advertising and other materials that link to External Sites. MURAL does not endorse and is not responsible for the content of any such External Sites. Please refer to the terms of use and privacy policies of the External Sites for more information.

California Residents

Under California Civil Code Section 1798.83, California residents who have an established business relationship with MURAL may choose to opt out of our sharing your personal information with third parties for direct marketing purposes. If you are a California resident and (1) you wish to opt out; or (2) you wish to request certain information regarding our disclosure of your Personal Information to third parties for the direct marketing purposes, please send an email to support@mural.co with “Privacy Policy” in the subject line.

In addition, MURAL does not monitor, recognize, or honor any opt-out or do not track mechanisms, including general web browser “Do Not Track” settings and/or signals.

Important Notice to All Non-US Residents

Our servers are located in the US. If you are located outside of the US, please be aware that any information provided to us, including personal information, will be transferred from your country of origin to the US. Except in the case of data transfers under the EU-US Privacy Shield and the U.S.-Swiss Safe Harbor Framework, your decision to provide such data to us, or allow us to collect such data it through our Site or the Services, constitutes your consent to this data transfer.

Important Notice for Residents of the European Economic Area

MURAL complies with the EU-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from the EU. MURAL has certified that it adheres to the Privacy Shield principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, Recourse, Enforcement and Liability, and the Supplemental Principles (the “Privacy Shield Principles”). If there is a conflict between this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. We are committed to applying the Privacy Shield Principles to all personal information received from the EU, Iceland, Liechtenstein and Norway (referred to herein as the “EU”) in reliance upon the Privacy Shield. With regard to the Principle of Accountability for Onward Transfer, for example, we remain liable if our agent processes such personal information in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the damage. To learn more about the Privacy Shield program, and to view our certification page, please visit: https://www.privacyshield.gov/

MURAL is subject to the investigatory and enforcement powers of the Federal Trade Commission. We are committed to resolving complaints from EU data subjects pursuant to the Recourse, Enforcement and Liability Principle.

In compliance with the EU-US Privacy Shield Principles, MURAL commits to resolve complaints about your privacy and our collection or use of your personal information. EU individuals with inquiries or complaints regarding this Privacy Policy should first contact MURAL at support@mural.co.

MURAL has further committed to refer unresolved privacy complaints under the EU-US Privacy Shield Principles to BBB PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by MURAL, please visit http://www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint. If these processes do not result in a resolution, you may also contact your local data protection authority, the US Department of Commerce, and/or the Federal Trade Commission for assistance. If your complaint still remains unresolved, then you have the right to invoke binding arbitration by the Privacy Shield Panel upon written notice to MURAL at support@mural.co.

US-Swiss Safe Harbor Framework

MURAL complies with the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from Switzerland. MURAL has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access and enforcement. If there is any conflict between the policies in this Privacy Policy and the Safe Harbor Privacy Principles, the Safe Harbor Privacy Principles shall govern. To learn more about the US-Swiss Safe Harbor and to view our certification page, please visit: www.export.gov/safeharbor.

MURAL has further committed to refer unresolved privacy complaints under the US-Swiss Safe Harbor to an independent dispute resolution mechanism operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/us/safe-harbor-complaints for more information and to file a complaint.

DMCA Policy

We take the intellectual property rights of others seriously and require that our Customers and their Authorized Users do the same. The Digital Millennium Copyright Act established a process for addressing claims of copyright infringement that we have implemented for MURAL services. If you own a copyright or have authority to act on behalf of a copyright owner and want to report a claim that a third party is infringing that material on or through a MURAL service, please send a notice to our copyright agent that includes all of the items below and we will expeditiously take appropriate action:

  1. A description of the copyrighted work that you claim is being infringed;
  2. A description of the material you claim is infringing and that you want removed or access to which you want disabled and the URL or other location of that material;
  3. Your address, telephone number, and email address;
  4. The following statement: “I have a good faith belief that the use of the copyrighted material I am complaining of is not authorized by the copyright owner, its agent, or the law (e.g., as a fair use)”;
  5. The following statement: “The information in this notice is accurate and, under penalty of perjury, I am the owner, or authorized to act on behalf of the owner, of the copyright or of an exclusive right that is allegedly infringed”; and
  6. An electronic or physical signature of the owner of the copyright or a person authorized to act on the owner's behalf.

For this type of claims please contact us as set forth in the "Contacting us" section below.

We may, in appropriate circumstances, disable or terminate the accounts of users who may be repeat infringers.

This process does not limit our ability to pursue any other remedies we may have to address suspected infringement.

By submitting a Digital Millennium Copyright Act ("DMCA") Infringement Notification or other communication (including communications about content stored on or transmitted through this Service), you consent to have this communication forwarded to the person or entity who stored or transmitted the content addressed by your communications in order to facilitate a prompt resolution. For notices other than DMCA Infringement Notifications, upon request, we will edit out your name and contact information. However, DMCA Infringement Notifications (including any Personally-Identifiable Information set forth in the notifications) will be forwarded as submitted to us without any deletions.

Questions

If you have any questions regarding this Privacy Policy, please contact us as set forth in the "Contacting us" section below. We will investigate your question, respond to your inquiry, and attempt to resolve any concerns regarding your privacy question.

Children

Our Services are not directed to children under 13 years of age. If you learn that a child under 13 has provided us with personal information without consent, please contact us.

Privacy Policy Changes

Because of changes in technology and the growth and development of our business, or for other business reasons, we may change this policy from time to time, and if we do we will post any changes on this page. You should regularly review this Site to ensure that you are informed of any changes and if you are also a registered user, be sure that the email address on record is current. If you are a registered user, we will also email you to the email address then on record a link to a copy of the modified Privacy Policy. If any modification is unacceptable to you, you shall cease using this Site. If you continue to use the Services after those changes are in effect, you agree to the revised policy.

Contacting us

Please also feel free to contact us if you have any questions about MURAL’s Privacy Policy or practices. You may contact us at support@mural.co or at our mailing address below:

Tactivos, Inc. DBA MURAL
2000 Broadway St, Suite #1108
San Francisco, CA
94115.

Please include your name, address and email address in your correspondence to us.