ShadowStorage does not and will not share, sell or rent personally identifiable information to anyone. Period.

This privacy policy pertains to all web properties owned and maintained by ShadowStorage, Inc. including but not limited to www.shadowstorage.com and www.shadowstorage.net.

ShadowStorage, Inc. (“ShadowStorage”) is committed to establishing and maintaining trusting relationships with its customers and users, always respecting and protecting their personal identity and information, while implementing fair information management practices. We are dedicated to providing our customers with best-in-class technologies and service. ShadowStorage also shares the same dedication to protecting the privacy of its customers and users. ShadowStorage demonstrates this commitment to our users’ privacy with this policy, covering the following items:

• What personally identifiable information is collected by ShadowStorage

• How ShadowStorage uses the information

• With whom ShadowStorage may share information

• What choices are available to users regarding collection, use and distribution of the information

• The kind of security practices used to protect against loss, alteration, and misuse of information under ShadowStorage control

• How you can correct any inaccuracies in the information

If you have any questions or concerns regarding this statement, contact ShadowStorage at privacy@shadowstorage.com

Information Collection and Use

Information collection

No information that can uniquely identify an individual is gathered when they simply visit our site www.shadowstorage.com. Personally identifiable information is only collected when a user chooses to request a no obligation free trial or requests to purchase the ShadowStorage Online Document Service. For free trial requests, users fill out forms that collect name, email address, phone number, address and company information. We use this information to contact users during their free trial to provide customer service and technical support. When a user purchases ShadowStorage services, credit card and billing address information are collected. Credit card information collected online is protected by the most secure online encryption technology available, secure socket layer (SSL) 128-bit encryption.

Information use

Personal information gathered when a user chooses to request a free trial or purchases the Service, is used by ShadowStorage to fulfill your requests, provide effective customer service and technical support, for billing purposes, and to optionally advise prospective and current customers about our products and services.

ShadowStorage will not share, sell or rent personally identifiable information to anyone.

Within your own secure account, the account administrator has access to all documents and personally identifiable information (e.g. names, email address, company information). However, other internal users (e.g. employees and colleagues) who have access to the account can only manage documents for which they have been granted some level of permission. External users (e.g. non-employees, contractors, etc) who have been granted some level of access to your account can only manage documents for which they have been granted some level of permission. More importantly unique methods integrated in the Service, prevent unrelated external users from knowing that other external user(s) exists within the context of a particular ShadowStorage account. For example, if you were sharing a request for proposal (RFP) online, you may not want the bidding parties to know who else is bidding on the proposal. Therefore, external users from Company X cannot tell that you are also sharing information with Company Y.

Cookies

ShadowStorage reserves the right to use cookies and may require that a user’s browser accept cookies. However, ShadowStorage does not store any personally identifiable or sensitive information in client-side cookies. A cookie is simply a small text file stored on a user’s computer that enables a web server to send information to a user’s browser. Currently, our use of cookies is limited to better understanding which online ads refer users to our site.

Choice/Opt-out

ShadowStorage does not collect any personally identifiable information, unless a prospective customer requests a free trial or purchases our Service. Therefore, there are no procedures or mechanisms that collect personally identifiable information which users need to opt-out. We do offer our users the option to opt-out of certain communications that ShadowStorage may initiate. See the Customer Communications section of this policy for more information.

Sharing

General

ShadowStorage does not sell or rent personally identifiable information with any party. ShadowStorage only shares a customer’s user name and email address with a strategic partner to fulfill and provision a customer’s request for the integration of web-based faxing with their ShadowStorage account.

Legal disclaimer

While ShadowStorage takes every step to protect the privacy of our customers and users, the only situation in which we will release personal information is when required to comply with any law, court order or subpoena for such information. For example, ShadowStorage would disclose information if a government or law enforcement agency required such by law in either criminal or civil situations.

Third parties

ShadowStorage uses the leading merchant account and credit card payment gateway solutions to securely accept payments for its subscription services. This third-party, on ShadowStorage's behalf, interfaces with credit card and banking institutions to securely and safely authorize and process transactions enabling our customers to purchase goods and services. These companies do not retain, share, store, or use personal information for any secondary purposes.

Differentiating ShadowStorage Website and Web Software Service

The website www.shadowstorage.com provides information about the ShadowStorage Web Software Service, showcasing the solutions, features and benefits of the Service. It also provides sample screen captures, demos, literature, etc. The site also enables customers and prospective customer to request free trials or purchase the Service. Users in free trials or paying subscribers access their secure account (the Web Software Service) via a unique https:// link which is sent to them after they have registered. All personally identifiable information is securely stored within your account and can be changed by logging into your account and clicking on the My Account tab.

Customer Communications

Customer service

ShadowStorage sends each new user a brief welcome letter via email with information about, and instructions for accessing, their account.

We regularly communicate with users to provide requested services, including technical support, customer service, billing issues, responding to suggestions or feedback, or to discuss issues related to their account. We contact users via phone or email, depending on the wishes of the customer.

How you can control communications received from us

We occasionally send customers and users--as well as referrals--information via email about software updates, new features and services, software and service usage tips, and special offers. ShadowStorage customers and users can opt-out of email communications (e.g. newsletters, usage tips, promotional offerings, etc.) by clicking on the opt-out link embedded in the email. Infrequently, ShadowStorage may be required to contact its customers via email regarding scheduled maintenance or upgrades to the service. As these notifications are not promotional in nature, an opt-out link is not provided in these messages.

Correcting, Updating Personal Information; Account Deactivation

If a user’s personal information associated with their account is incorrect or changes, the user can update the information online within their secure account using the My Account tab. In the event a customer wants to discontinue service for whatever reason, they must contact ShadowStorage by phone or email at support@shadowstorage.com. All personally identifiable information associated with a deactivated account is permanently erased. Prior to account deactivation, the account administrator can oversee the secure transfer of files to another storage medium.

Security

Your documents are yours

While you lease our software and service that enables you to securely store, manage, access, control and share digital documents, the documents which are stored within your account are solely yours. Your documents are treated as private and confidential. As such, the documents are securely stored such that only account administrators and the users with access to your account have access to them.

General practices

ShadowStorage takes every precaution, and employs strict security measures, to protect and secure its users’ personally identifiable and business information, both online and offline. The data and your documents are stored on servers hosted in secure data centers with a myriad of technologies and processes in place to mitigate data loss, alteration or misuse. Physical security at the data center—formerly a bank—includes biometric scanning devices, microchip badge access, camera surveillance monitored by security personnel plus motion and infrared sensing detection.

Sensitive financial information (e.g. a credit card number) is collected in forms on the www.shadowstorage.com site with best-in-class secure-socket layer (SSL) encryption technology that protects your data while it is being transmitted to our servers.

All data (e.g. documents) transmissions—to and from your ShadowStorage account—are also secured with 128-bit SSL encryption technology, the same level of security utilized by the most trusted financial institutions. The encryption process prepares data to be securely transferred over a network, such as the Internet, in a manner that it is unintelligible to all but the intended recipient.

Beyond private and secure data transmissions, the ShadowStorage software and service employs and provides a permissions-based environment that establishes a relationship between the content stored on the account and the other users which have been granted access to the account. Account administrator(s)—and in some cases, limited users selected by the administrator(s)—have complete control over the permissions-based environment, the individual user permissions and access rights to content stored on the account.

Miscellaneous

Links to Other Sites

ShadowStorage web sites contain links to other sites. For example, as a convenience to our users we provide links to other sites where they can download software such as the latest web browsers or data file viewers (e.g. programs that allow view-only modes of files created in particular applications which our user’s may not own). This privacy statement only applies to the policies and procedures—related to how personal information is collected, used and secured—that are implemented on ShadowStorage web sites. Please be aware when you leave ShadowStorage sites that you read the privacy policy of each site such that you understand how other sites collect and use personally identifiable information, as their procedures to protect your personal information may differ from ours.

Notification of Changes

If ShadowStorage alters its privacy policy, the changes will be made available in this privacy statement and in other necessary locations or mediums to best communicate the modifications of the policy to all users. Our intent is that all of customers know how we collect information, how it is used, whom we share it with and how we keep it private and secure.

Contact

If you have any questions or concerns regarding this statement, contact ShadowStorage at privacy@shadowstorage.com

Rev: 11/04