The Full Story on FullStory
The FullStory Services utilize a powerful script that creates a new level of ease for website owners to understand the usability of their websites. Website owners who use FullStory Services can watch a DVR-like video playback of user sessions on their website, enabling meaningful insight into their users' experience, as an effective way to identify usability problems and other areas for improvement. FullStory exists to make the web better for end-users, and it is only available to websites that share that goal.
Getting a few definitions out of the way should help you better understand this policy.
When we say we, us, our or FullStory, we're referring to FullStory, Inc., a Delaware corporation.
FullStory Customer refers to any customer that has entered into an agreement with FullStory to use the FullStory Services on its Site.
Personal Information refers to any information which may identify an individual personally, such as first and last name, home address, billing address, or other physical address, email address, telephone number, etc.
User refers to a visitor to a website that uses the FullStory Services or a client of a FullStory Customer.
Visitor refers to anyone accessing the FullStory Site.
Information Collected from FullStory Visitors
As a Visitor, FullStory collects potentially personally identifying information like Internet Protocol (or “IP”) addresses (“Potential PII”). Also, you may choose to interact with the Site that results in your providing Personal Information to FullStory, such as giving us your name, email address, user name and password when signing up for a free trial of the Services or creating an account to post comments to the FullStory blog or social media sites, etc. You should be aware that any information you provide in the FullStory blog or social media areas may be read, collected, and used by others who access them.
Information Collected from FullStory Customers
FullStory may use your information and data as agreed to in the Agreement and to:
Process transactions between you and FullStory.
Send e-mails about our Site or respond to inquiries.
Send e-mails and updates about the FullStory Services, including newsletters.
Provide support for the FullStory Services
Enhance or improve user experience, our Site, or FullStory Services.
Monitor data to ensure that it complies with your contractual obligations to us.
Perform any other function that we believe in good faith is necessary to protect the security or proper functioning of our Site or the FullStory Services.
With your prior consent, we may post your personal testimonials along with those of other satisfied customers on our Site in addition to other endorsements.
Information Collected from Visits to Websites that use FullStory Services
Use of Your Personal Information
We will never sell your data to third parties. However, in the course of business, we may hire third party individuals and organizations to help us make the FullStory Services better. These third parties include our web host provider, other SaaS providers, such as an email hosting service, payment processors or outside contractors we hire to perform maintenance or assist us in securing our website. We may also hire third parties to operate, maintain, repair, or otherwise improve or preserve our website or its underlying files or systems.
FullStory will may disclose Personal Information and Potential PII only to those of its employees and third party organizations that (1) need to know such information in order to process it on FullStory’s behalf or to provide services as described above and (2) have agreed not to disclose it to any other parties without FullStory’s consent. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using the Site and/or the Service, you consent to the transfer of information to such individuals and organizations in order to accomplish these purposes.
Before using or sharing your information with non-agent third parties in ways not discussed here or previously authorized by you, we will provide you Notice and an opportunity to control the further use or disclosure of your personal information.
FullStory has potential liability in cases of onward transfer to third parties of data of EU and Swiss individuals received pursuant to the Privacy Shield Principles. (See below).
If you are a registered user of the Service and have supplied your email address, FullStory may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with FullStory and our products. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. FullStory takes all measures reasonably necessary to protect against the unauthorized access, use, alteration, or destruction of Personal Information and Potential PII.
In some cases, we may choose to buy or sell assets. In these types of transactions, user information is typically one of the transferred business assets. If we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information and Potential PII as set forth in this policy. You will be notified via email and/or a prominent notice on our Site of any change in ownership or uses of your Personal Information and Potential IP, as well as any choices you may have regarding your Personal Information and Potential IP.
Release of Your Information for Legal Purposes
We may access or release Personal Information about you when required to do so in order to comply with any applicable, laws, regulations, subpoena or enforceable governmental or public authority request, including, to meet national security or law enforcement requirements. We may also access or release Personal Information when we have a good faith believe that such access or release is reasonably necessary to (i) enforce applicable terms of service, including investigation of potential violations, (ii) detect, prevent, or otherwise address fraud, security or technical issues, (iii) respond to user support requests, or (iv) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.
Right to Access, Edit, and Remove Your Information
You have a right to access personal information we hold about you. Whenever you use our Site or FullStory Services, we strive to make sure that the Personal Information is correct. If that information is wrong, we give you ways to update it quickly or to delete it – unless we have to keep that information for legitimate business or legal purposes. When updating your Personal Information, we may ask you to verify your identity before making any changes. We may reject requests that are unreasonably repetitive, require disproportionate technical effort (for example, developing a new system or fundamentally changing an existing practice), risk the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup systems). Where we can provide information access and correction, we will do so for free, except where it would require a disproportionate effort. Because we protect information from accidental or malicious destruction, even after information is deleted from the FullStory Services, it may not be immediately deleted from FullStory’s servers.
To request removal of your Personal Information from our Site, Services, blog or social media, contact us at email@example.com. In some cases, we may not be able to remove your Personal Information, in which case we will let you know if we are unable to do so and why.
If a User interacts with one of our Customers and the User seeks to access, or correct, amend, or delete inaccurate data or no longer wants to be contacted by one of our Customers, the User should direct its inquiry to the Customer because the Customer is the data controller. If the Customer requests FullStory to remove the Personal Information, we will respond to their request within 30 days.
We take measures to enhance the security of our Site and the FullStory Service. These measures include using SSL Certificates and two-factor authentication. It is important for you to protect against unauthorized access to your password and to your computer. No security measures are perfect and we cannot promise that the information about you will remain secure in all circumstances.
We store and process information about you on computers in the United States. Privacy laws local to our servers and computers will apply to information we store about you.
Do Not Track Signal
Our site is intended for a general audience and we do not knowingly collect personal information from anyone under the age of 13.
How FullStory Collects Information
Local Storage is a standard facility provided by HTML5-compliant browsers used to retain data on your computer across visits to the same website. We use local storage as a temporary holding area for user events that were observed locally but, due to the timing of a page unload, were unable to be transmitted as part of the user session. Return visits to the same website read and transmit events previously stored in local storage to complete previously recorded sessions.
This information may in the aggregate identify a User, however we will not identify a User as they browse the web if the User turns off cookies, as explained below.
FullStory does not and will not ever attempt to identify the same person across disparate, unrelated domains. It is a violation of our Acceptable Use Policy for our customers to attempt to build multi-site user profiles for the intent of selling or exchanging lists of users or demographic information.
If you wish to prevent all websites using the FullStory Services to be able to record an its activity, you can opt-out of the FullStory Services. Opting out will create a cookie that tells FullStory to turn off recording on any site which uses the FullStory Services. The presence of this cookie is required to continue opting out, so if you clear your browser cookies, you will have to opt-out again. (We regret that there isn't a better way to make your opt-out more permanent, but due to technical reasons, this really is the best we can do at present.)
One more thing.
If you are considering opting-out, it's probably a good time to make sure you really understand that the purpose of the FullStory Services is to help well-intentioned companies make their website better for you. It is emphatically not one of those we-track-you-around-the-web kind of deals. We think that's creepy, too.
Most people who make websites are just like you: nice people who want to do a good job and make something awesome. And you wouldn't believe how much time and energy product teams spend trying to make their websites great for you. Without the FullStory Services, though, they simply do not have enough information to understand when they get it wrong. If they can see how you actually experience their website, like an ongoing usability study, they'll actually know what to improve! They don't need to record anything sensitive in order to do that, and we have a strict Acceptable Use Policy where you can see for yourself the high standards we expect of FullStory customers with respect to your privacy.
If you choose, you can set your browser to reject cookies or you can manually delete individual or all of the cookies on your computer by following your browser’s help file directions. Note that turning off cookies may also disable functions of many websites you visit. If your browser is set to reject cookies or you manually delete cookies, FullStory will not be able to coalesce your anonymous user identity automatically into sessions across pages on the same website.
EU-US Privacy Shield Framework.
FullStory has further committed to refer unresolved privacy complaints under the Privacy Shield Principles, to the BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.bbb.org/EU-privacy-shield/file-a-complaint for more information and to file a complaint.
Under certain limited conditions, if your complaint is not resolved through these channels, it may be possible for individuals to invoke binding arbitration before the Privacy Shield Panel to be created by the U.S. Department of Commerce and the European Commission.
FullStory is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
What If I Have Questions or Concerns?
If you have any questions or concerns regarding privacy when using FullStory, please send us a detailed message to firstname.lastname@example.org or via postal mail at:
120 Ottley Drive NE
Atlanta, GA 30324
We will make every effort to address your concerns.