Overview: Sandstorm Oasis

Sandstorm is a platform for server-oriented and web-based applications. Sandstorm the platform is open source; anyone can run Sandstorm on their own personal server hardware. When you run Sandstorm on your own hardware, you can do anything you want with it: Sandstorm the platform is licensed under the Apache 2.0 open source license which places no restrictions on usage.

Sandstorm the company (Sandstorm Development Group, Inc.) also offers a managed hosting service called Sandstorm Oasis, which allows you to run Sandstorm (the platform) on our physical servers instead of your own. When you sign up for the service, you pay Sandstorm (the company) a monthly fee for access to a private server running a variant of Sandstorm (the platform). On this server you may install and run any application software (apps) you want, subject to a monthly resource allowance defined by your chosen subscription plan.

When you install an app on Sandstorm, you may use it to create multiple instances of the app, known as “grains”. The meaning of a “grain” depends on the app. For instance, if you use a document editor app to create several documents, each document may be a separate grain. Grains are isolated from each other and inaccessible to other users unless and until you specify otherwise through the Sandstorm user interface. For example, you can “share” a document grain to other users in order to collaborate on the document, or you can make it public for the whole world to read, but until you do one of these things, the document is accessible only to you.

Terms of Service

The following terms apply to your use of the Sandstorm Oasis hosting service (“the service”), as offered by Sandstorm Development Group, Inc. (“we”/“us”).

These terms do NOT apply to users running the Sandstorm open source software on their own servers; see the Sandstorm license. These terms also do NOT apply to any other services run by us.

What you may do with the services

As long as you keep your documents private, you can do anything you want with them (within the bounds of applicable law). Employees of Sandstorm will not look at your private data unless required by law (and we will push back against unreasonable law enforcement requests as we deem appropriate).

What you may not do with the services

Who may use the services

Privacy of grain data

Sandstorm employees will not view the contents of your grains, nor use that content for any purpose other than delivering the services, except under the following circumstances:

Except in one of the above circumstances, Sandstorm employees will not view your data even if we suspect it may violate our terms.

Interacting with other users and services

If you choose to share a grain with other users (whether specific people, or publicly / to everyone), or otherwise communicate with other users or services through a grain, then you are implicitly giving those people permission to “reshare” their interaction with your grain to us. For example:

Such complaints can be made by emailing support@sandstorm.io.

If in our judgment the complaint is valid and you have violated these terms, we may respond in the following ways:

Technical Attacks

You may not engage in technical attacks (often – but incorrectly – called “hacking”) on the service itself or on other users' grains. A technical attack is any action which uses technical means to harm the service, its users, or third parties in a way that was not intended (in our opinion) to be authorized. This includes (but is not limited to) unauthorized changes to others' data, breaches of confidentiality, denial of service, phishing, resource exhaustion, and anything else that the computer security community generally classifies as an attack. This also includes attacks carried out against third-party services facilitated by grains running on our service, even if our service and users are not harmed.

If you carry out a harmful attack, you immediately forfeit all rights to privacy and other protections laid out in these terms. We will take any action we deem necessary to prevent harmful consequences to the service or other users, including investigating the contents of your grains, sharing what we find with the security community, and possibly deleting your data and/or closing your account.

You may, however, privately test for the existence of security bugs as long as any users whose grains or data are affected consent to the test, no harm is done (in our judgment) to the service or any other user, and the bug is immediately responsibly disclosed to the maintainers of the software in which it appears. For bugs in any software maintained by Sandstorm (the company), email security@sandstorm.io. We believe in celebrating “white hat” security research: If you responsibly disclose to us an important security bug in our software, we will fix the bug within 90 days if possible (usually, much faster), and then we will publicly credit you on our blog.

Law Enforcement Actions

We will only reveal your data to law enforcement when we believe we are legally required to do so, such as by a court order. If this occurs, we will notify you, unless we are legally prohibited from doing so.

Content Ownership

We claim no intellectual property rights over the material you provide to the service. Your profile and grain contents remain yours. However, when you share your grains through the sharing UI or other mechanisms, you agree to allow others to access your grains accordingly.

Subscription and Fees

When you sign up for the service, you will be asked to enter into an agreement with us that outlines your obligations and ours. That agreement will guide our relationship and will address the fees assessed for the services you choose to use.

We use Stripe for all payments using or engaging the service. None of your payment information will be held or stored by Sandstorm. Stripe holds all payment credentials (e.g. credit card numbers, name, and billing address) and this information is handled in accordance with Stripe’s privacy policy and terms of service.

Subscription fees may be increased subject to 30 days notice from us, sent to the email address on file with your account. Subscription fees may be reduced with no notice.

As of August, 2015, the service is in beta testing. During the beta testing period, all subscription fees will be waived. However, we may declare at any time that the beta has ended and will then begin charging fees, with no 30-day notice.

Free Plan

We offer a subscription plan which has no monthly fee. This plan is intended to allow users to try out the service before paying for it. Some features of the service are limited or unavailable when using the free plan.

You are allowed to create only one free account. If you create multiple free accounts, we may delete any or all of your data in those accounts.

If we observe that your free account is inactive, we may wish to delete it. We will give 30 days notice by email before deleting any free account for inactivity. To prevent your account from being deleted, you must log in at least once within those 30 days.

We may discontinue the free plan at any time. If we do, existing free accounts will be given 30 days' notice to upgrade to a paid account. If you do not upgrade, your data will be deleted.

Cancellation

You may cancel your service at any time, but cancellation will not take effect until the current pay period completes. Cancel your service via the user interface or by emailing support@sandstorm.io. Once you cancel your services, the following will apply:

Data deletion

We optimize our systems to prevent unintentional data loss. As a result, data which is intentionally deleted will remain present in our backup systems for up to 60 days.

Problems and Contact

All problems should be reported by emailing support@sandstorm.io, except for security problems, which should be reported to security@sandstorm.io.

You also may contact us by snail mail at:

Sandstorm Development Group, Inc.
475 Fernando Ave
Palo Alto, CA 94306

Copyright and Trademark Issues

To notify Sandstorm that there has been a copyright or trademark violation, please follow the specific instructions in (A) for filing a trademark claim, or (B) filing a copyright complaint, below.

If you are responding to a complaint of infringement, you will need to follow our Counter Notification policy in (C), below.

A. Trademark Claims

If you (the “Complaining Party”) would like to submit a trademark claim for violation of a mark on which you hold a valid, registered trademark or service mark (registered with the United States Patent and Trademark Office on the Principal Register or, for foreign marks, registered with the appropriate intellectual property organization of your country; state registrations and registrations on the Supplemental Register are not considered valid for these purposes), Sandstorm requests that the Complaining Party substantiate such claim by providing the following information via email to trademark@sandstorm.io. The words “Trademark Claim” should appear in the subject line.

To be considered effective, a notification of a claimed trademark violation must include the following information:

Upon receipt of the appropriate information identified above, for trademark claims, Sandstorm will initiate an investigation and forward the Complaining Party’s written notification to the alleged infringer. While Sandstorm is investigating the claim, Sandstorm, at its sole discretion and without any legal obligation to do so, may temporarily remove the allegedly infringing material from its site or temporarily remove or deny access to the allegedly infringing material.

If Sandstorm concludes that the Complaining Party has raised a legitimate trademark claim, it may, at its sole discretion and without any legal obligation to do so, permanently remove the challenged material from the site, continue to suspend the alleged infringer’s Sandstorm account and/or if it is solely stored on a Sandstorm server, deny access to the allegedly infringing material. If Sandstorm concludes that the Complaining Party has not raised a legitimate claim, Sandstorm will restore access to the allegedly infringing material (or not take any action at all, as the case may be).

B. Copyright Claims

If the Complaining Party would like to submit a copyright claim for material on which you hold a bona fide copyright, Sandstorm requests that the Complaining Party substantiate such claim by providing Sandstorm with the following information via email to copyright@sandstorm.io. The words “Copyright Claim” should appear in the subject line. A copyright claim can also be submitted by mail to:

Copyright Agent
Sandstorm Development Group, Inc.
475 Fernando Ave
Palo Alto, CA 94306

To be considered effective, a notification of a claimed copyright infringement must be provided to Sandstorm and must include the following information:

For Copyright Claims, upon receipt of appropriate and complete notification from the Complaining Party, Sandstorm will forward the Complaining Party’s written notification to the alleged infringer and, if it is solely stored on a Sandstorm server, temporarily remove or deny access to the allegedly infringing material.

C. Counter Notification Policy

Counter Notification. If you have received a notice of copyright or trademark infringement that you wish to challenge based on a good faith belief that the material was removed or disabled as a result of mistake or misidentification of the material to be removed or disabled, you may provide Counter Notification by emailing or mailing us using the address from which you received notification of the takedown, and including the following:

Upon receipt of a Counter Notification as described in Section 1 above, Sandstorm will promptly provide the Complaining Party with a copy of the Counter Notification, and inform such Party that it will replace the removed material or cease disabling access to it in ten (10) business days. Sandstorm will replace the removed material and cease disabling access to it in not less than ten (10), nor more than fourteen (14), business days following receipt of the Counter Notification, unless Sandstorm first receives notice from the Complaining Party that such Complaining Party has filed an action seeking a court order to restrain the alleged infringer from engaging in infringing activity relating to the material on Sandstorm’s system or network.

D. Repeat Infringers

It is Sandstorm’s policy to provide for the termination, in appropriate circumstances, of Sandstorm customers and account holders who repeatedly violate this policy or are repeat infringers of copyrighted works, trademarks or any other intellectual property.

Miscellaneous

As with any agreement, our lawyers said there are additional provisions necessary to explain our relationship. Read these carefully.

Disclaimer of Warranties. THE SANDSTORM SERVICES, INCLUDING WITHOUT LIMITATION ANY PRODUCTS OR SERVICES OBTAINED OR AVAILABLE THROUGH THE SANDSTORM PLATFORM OR ANY THIRD PARTY PLATFORM, ARE PROVIDED “AS IS” AND WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMISSIBLE PURSUANT TO APPLICABLE LAW, SANDSTORM AND ITS AFFILIATES, LICENSORS, SUPPLIERS, ADVERTISERS, SPONSORS AND AGENTS, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, IMPLIED WARRANTIES OF TITLE, NON-INFRINGEMENT, ACCURACY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, AND ANY WARRANTIES THAT MAY ARISE FROM COURSE OF DEALING, COURSE OF PERFORMANCE OR USAGE OF TRADE. SANDSTORM AND ITS AFFILIATES, LICENSORS, SUPPLIERS, ADVERTISERS, SPONSORS AND AGENTS DO NOT WARRANT THAT YOUR USE OF THE SERVICES, INCLUDING WITHOUT LIMITATION ANY PRODUCTS OR SERVICES AVAILABLE THROUGH THE SANDSTORM PLATFORM OR ANY THIRD PARTY PLATFORM, WILL BE UNINTERRUPTED, ERROR-FREE OR SECURE, THAT DEFECTS WILL BE CORRECTED, OR THAT THE WEBSITES OR THE MATERIALS (OR ANY PART THEREOF INCLUDING THE SERVICES), THE SUBMISSIONS, THE SERVER(S) ON WHICH THE PLATFORM OR SERVICES ARE HOSTED, OR ANY PRODUCTS OR SERVICES AVAILABLE ON THE WEBSITES OR ON ANY THIRD PARTY PLATFORM ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. NO OPINION, ADVICE OR STATEMENT OF SANDSTORM OR ITS AFFILIATES, LICENSORS, SUPPLIERS, ADVERTISERS, SPONSORS, AGENTS, MEMBERS OR VISITORS, WHETHER MADE ON THE WEBSITES, IN THE MATERIALS, ON THIRD PARTY PLATFORMS OR OTHERWISE, SHALL CREATE ANY WARRANTY. YOUR USE OF THE SERVICES AND MATERIALS, INCLUDING WITHOUT LIMITATION ANY PRODUCTS AND SERVICES PROVIDED THROUGH THE PLATFORM OR ON ANY THIRD PARTY PLATFORM, ARE ENTIRELY AT YOUR OWN RISK.

Limitation of Liability. NEITHER SANDSTORM NOR ANY OF OUR SUBSIDIARIES, AFFILIATES, LICENSORS, SUPPLIERS, ADVERTISERS OR SPONSORS, NOR OUR OR THEIR DIRECTORS, OFFICERS, EMPLOYEES, CONSULTANTS, AGENTS OR OTHER REPRESENTATIVES, ARE RESPONSIBLE OR LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, PUNITIVE OR OTHER DAMAGES (INCLUDING WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS, LOSS OF DATA OR LOST PROFITS), UNDER ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER THEORY ARISING OUT OF OR RELATING IN ANY WAY TO THE SERVICES AND/OR MATERIALS, INCLUDING ANY MATERIALS AVAILABLE THROUGH THE SANDSTORM PLATFORM OR ANY THIRD PARTY PLATFORM, SUBMISSIONS, ANY LINKED WEBSITES OR ANY CODE, PRODUCT OR SERVICE PURCHASED, ACCESSIBLE OR USABLE THROUGH THE SANDSTORM PLATFORM OR ANY THIRD PARTY PLATFORM. YOUR SOLE REMEDY FOR DISSATISFACTION WITH THE SERVICES, INCLUDING ANY PRODUCTS OR SERVICES AVAILABLE ON THE SANDSTORM PLATFORM OR THROUGH ANY THIRD PARTY PLATFORM, SUBMISSIONS OR ANY LINKED WEBSITES IS TO STOP USING THE SERVICES, THE SANDSTORM PLATFORM OR THIR PARTY PLATFORM, OR LINKED WEBSITES, AS APPLICABLE. THE SOLE AND EXCLUSIVE MAXIMUM LIABILITY TO SANDSTORM FOR ALL DAMAGES, LOSSES AND CAUSES OF ACTION, WHETHER IN CONTRACT, TORT (INCLUDING WITHOUT LIMITATION, NEGLIGENCE) OR OTHERWISE, SHALL BE THE TOTAL AMOUNT PAID BY YOU TO SANDSTORM IN THE PRECEDING TWELVE (12) MONTHS, IF ANY, TO ACCESS OR USE THE SERVICES. BECAUSE SOME STATES OR JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU. NO COMMUNICATION OF ANY KIND BETWEEN YOU AND SANDSTORM OR A REPRESENTATIVE OF SANDSTORM CONSTITUTES A WAIVER OF ANY LIMITATIONS OF LIABILITY HEREUNDER OR CREATE ANY ADDITIONAL WARRANTY NOT EXPRESSLY STATED IN THE TERMS. MULTIPLE CLAIMS WILL NOT INCREASE THE MONETARY DAMAGES LIMIT STATED HEREIN. YOU AGREE THAT THE DAMAGE EXCLUSIONS IN THESE TERMS OF SERVICE SHALL APPLY EVEN IF ANY REMEDY FAILS OF ITS ESSENTIAL PURPOSE.

Inaccuracies. A possibility exists that the services provided on the Sandstorm platform or any third party platform could include inaccuracies or errors. Additionally, a possibility exists that unauthorized alterations could be made by third parties to the API, including in connection with any services available on any third party platform. Although Sandstorm attempts to ensure the integrity of the Sandstorm platform, we make no guarantees as to the completeness or correctness of the Sandstorm platform. In the event that a situation arises in which the services or Sandstorm platform completeness or correctness is in question, please contact us with, if possible, a description of the material to be checked and the location (URL) where such material can be found on the Sandstorm platform, as well as information sufficient to enable us to contact you. We will try to address your concerns as soon as reasonably practicable. For copyright infringement claims, see the section on “Copyright Claims” above.

System Outages. Sandstorm periodically schedules system downtime for the Sandstorm Platform and services for maintenance and other purposes. Additionally, unplanned system outages may occur. You agree that Sandstorm has no responsibility and is not liable for: (a) the unavailability of the Sandstorm platform or services including those available on third party platforms; (b) any loss of materials, data, transactions or any other information or materials caused by such system outages; (c) the resultant delay, misdelivery, or non-delivery of data, transactions or any other information or materials caused by such system outages; or (d) any outages caused by any third parties, including without limitation, any companies or servers hosting any of the services, any Internet service providers, any third party platforms, or any Internet facilities and networks.

Indemnification. You agree to indemnify, defend, and hold harmless Sandstorm, its officers, directors, partners, employees, consultants, and agents, from and against any third party claims, liabilities, damages, losses, costs, expenses, fees (including reasonable attorneys' fees and court costs) that such parties may incur as a result of or arising from (a) any allegation that any information and/or materials you post, submit to us or transmit to the Platform or through a Third Party Platform infringes or otherwise violates the copyright, trademark, trade secret or other intellectual property or other right of any third party; (b) your breach or violation (including through use of your username or account, whether or not by you) of these Terms of Service, or any applicable laws or regulations; (c) your access to and use of the services, including services available on the Sandstorm platform and/or any third party platforms; (d) any viruses, trojan horses, worms, time bombs, cancelbots, spyware, or other similar harmful programming routines posted, submitted or transmitted by you to the Sandstorm platform or any third party platform; and/or (e) any claim that anything you submitted to Sandstorm caused damage to a third party, including without limitation, libel, defamation, loss of or harm to reputation or any other damage whatsoever.

Notice for California Users. Under California Civil Code Section 1789.3, California Websites users are entitled to the following specific consumer rights notice: The Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 400 R Street, Suite 1080, Sacramento, California, 95814, or by telephone at (916) 445-1254 or (800) 952-5210.

Statute of Limitations. Any claim or cause of action arising out of or related to use of the services or information available through the Sandstorm platform and/or any third party platforms, or these Terms of Service must be filed within 1 year after such claim or cause or action arose regardless of any statutes or law to the contrary. In the event any such claim or cause of action is not filed within such 1-year period, such claim or cause of action shall be forever barred.

Modifications to these Terms of Service. Sandstorm has included the effective date of these Terms of Service on the last page of this document. Sandstorm reserves the right to make changes to any of the Terms of Service at any time, however, Sandstorm shall provide notification to you in advance of any changes becoming effective, such as by posting a notification on the Sandstorm Websites or via e-mail. If you continue to access and/or use the services available through the Sandstorm platform and/or any third party platform after the effective date of such changes, then such access and/or use will be deemed an acceptance of and an agreement to follow and be bound by the Terms of Service as changed. The revised Terms of Service supersede all previous notices or statements regarding the services. For this reason, we encourage you to review these Terms of Service any time you access or use the Sandstorm Websites or platform, or any third party platform through which the services are offered, and recommend that you print out a copy for your records. Upon our request, you agree to accept or sign a non-electronic version of these Terms of Service and any other policies or agreements set forth or available on or through the Sandstorm Websites, Sandstorm platform, or any third party platform.

Notice. Except as explicitly stated otherwise, legal notices will be served on Sandstorm’s national registered agent or to the e-mail address you provide to Sandstorm during the registration process. Notice will be deemed given twenty-four hours after e-mail is sent, unless the sending party is notified that the e-mail address is invalid. Alternatively, we may give you legal notice by mail to a postal address, if provided by you through your registration for any of the services. In such case, notice will be deemed given three days after the date of mailing.

Waiver. The failure of Sandstorm to exercise or enforce any right or provision of the Terms will not constitute a waiver of such right or provision. Any waiver of any provision of the Terms will be effective only if in writing and signed by Sandstorm.

Governing Law. The Terms are governed by and construed in accordance with the laws of the State of California, United States of America, without regards to its principles of conflicts of law that would require the application of the laws of another jurisdiction, and shall be considered to have been made and accepted in the State of California.

Jurisdiction for Legal Disputes. Legal disputes shall be subject to the exclusive jurisdiction of the Federal and State courts located in San Francisco, California. You hereby consent and submit to the personal and exclusive jurisdiction of such courts for the purposes of litigating any such action.

Severability. If any provision of the Terms of Service is found to be unlawful, void or for any reason unenforceable, then that provision shall be deemed severable from the Terms of Service and shall not affect the validity and enforceability of any remaining provisions.

Assignment. The Terms and any related rights and licenses granted hereunder, may not be transferred or assigned by you without Sandstorm’s prior written consent, but may be assigned by Sandstorm freely without restriction.

Entire Agreement. This is the entire agreement between you and Sandstorm relating to the subject matter herein and supersedes any and all prior or contemporaneous written or oral agreements between us with respect to such subject matter.

Miscellaneous. No agency, partnership, joint venture, employee-employer or franchiser-franchisee relationship is intended or created by the Terms of Service. Any heading, caption or section title contained herein is inserted only as a matter of convenience and in no way defines or explains any section or provision hereof. Sandstorm’s performance of the Terms of Service is subject to existing laws and legal process, and nothing contained in the Terms of Service is in derogation of Sandstorm’s right to comply with governmental, court, and law enforcement requests or requirements relating to your use of the services, including without limitation those available through third party platforms, and any information provided to or gathered by Sandstorm with respect to such use(s). A printed version of the Terms of Service and of any notices given in electronic form shall be admissible in judicial or administrative proceedings based upon or relating to the Terms of Service to the same extent and subject to the same conditions as other business documents and records originally generated and maintained in printed form. The parties agree that all correspondence relating to the Terms of Service must be written in the English language. Should you have any questions or concerns regarding these Terms of Service, please contact us as provided in these Terms of Service.

Effective Date

This policy is effective as of August 31, 2015.

Privacy Policy

This privacy policy describes in detail how the Sandstorm Oasis hosting service (“the service”), as run by Sandstorm Development Group, Inc. (“we”/“us”), protects your privacy.

This policy does NOT apply to users running the Sandstorm open source software on their own servers; see the Sandstorm license. This policy also does NOT apply to any other services run by us.

Introduction

Sandstorm (the company, the service, and the platform) does not employ any automated “data-mining” algorithms that look at the content of your grains. We do not serve advertising and do not build an advertising profile about you. We do not sell or give away any personal data to any third party.

In general, you have a high degree of control over how your data is shared via the sharing UI. You, as a user, decide with whom your data and personal details are shared through the Sandstorm interface.

If you do not wish to have Sandstorm collect, maintain, and use data provided by or about you as described in this Privacy Policy, you have the option instead to run the Sandstorm open-source software on your own servers.

Data gathered in the aggregate

The service gathers aggregated data counts, such as “the number of people who logged in yesterday” or “the number of documents created using Etherpad”. These counts aggregate data from many users and are not personally identifiable. We try not to gather statistics that may be personally identifiable; for example, if an application is installed by only one user, we will not gather statistics about it.

Data gathered from you

The service intends only to gather your personal data in ways that are clear and obvious from the user interface. If you believe that your personal data is being used in a way that you did not expect or authorize, email privacy@sandstorm.io to report the problem.

The service gathers email addresses from all users. You are required to provide a valid email address, as this is the primary mechanism by which we will notify you of issues regarding your account.

The service also gathers a few pieces of personal “profile information” for the purpose of identifying you to other people on the service. These include:

All profile information is voluntary; you can edit (or remove) the information through your account settings.

When you use the service to share data with other people, or when you access data shared with you by other users of the service, your profile information may be revealed to the other users with whom you are connecting, so that they can identify you.

Data gathered through applications

Individual Sandstorm apps may gather arbitrary personal data about you. Sandstorm does not control the behavior of these apps. To understand how the application uses your data, please consult the app’s own documentation, privacy policy, and terms of use.

Sandstorm allows you to control how an app is shared with other users. It is our intent that an application cannot communicate with any other party unless you explicitly permit it to do so via the Sandstorm user interface, and the Sandstorm platform is designed to enforce this at a technical level. However, it is possible that a defect in the software will allow an application to bypass this policy. Any such defects should be immediately reported to security@sandstorm.io.

If you permit it, a Sandstorm app may connect to third parties and transmit arbitrary data to and from that third party. Once you have given an app permission to talk to a third party, Sandstorm cannot make any guarantees about what data it sends to or receives from that party. You must consult the privacy policy and terms of use of that app to find out how it functions, what data it takes, and what it does with that data. Sandstorm does not control any of these functions. If you have a complaint about the handling of your data by an app, that complaint must be taken to the app provider, not Sandstorm. Sandstorm is not responsible for the conduct of the apps.

If you connect to a grain owned by another user (for example, a document shared with you), any information you communicate to that grain becomes controlled by the user who owns the grain. Sandstorm cannot control what that user does with the data and is not responsible for what the user does with that data, even where you believe such use violates Sandstorm’s policies. The user may offer their own privacy policy governing the data, but Sandstorm’s privacy policy does not apply.

Data gathered through third parties

Payment provider: Sandstorm collects payments through Stripe. Your payment information, such as your credit card number and billing address, is stored only by Stripe, not by Sandstorm. Please see Stripe’s privacy policy and terms of service.

Third-party log in: If you sign in through a third-party login service like Google or Github, we collect information from it in order to populate your profile information, as described above. This information may be edited or removed through your account settings.

Data gathered automatically

Logs: The service collects logs for the purpose of system health monitoring, debugging, and security. Logs may record events like “User ‘kenton’ logged in from IP address 192.168.1.10,” “App Etherpad version 1.5.6 was successfully installed,” or “Error: Database claims Etherpad is installed but I can’t find the files on disk!” These logs are only examined in the event that they are needed to resolve a problem (a software bug, a service outage, or a security breach), and can only be accessed by Sandstorm employees or internal fully-automated systems tasked with detecting and resolving these problems. Content of a grain (i.e. most of your data) is never intentionally stored to these logs. These logs are stored on Sandstorm’s servers. These logs are deleted after 30 days.

IP Address: We may store your IP address as part of our logs. We may share your IP address to facilitate connections between yourself and other users, such as setting up a real-time video conference. We do not otherwise share your IP address with third parties.

Cookies and local storage: We use cookies and browser local storage for authentication and security purposes.

We also use cookies to gather aggregate anonymous analytics about how users use our web site at sandstorm.io, such as to answer questions like “How many of our visitors have visited before?” or “Are users who read about our security model more likely to sign up?” However, this data is never tied to actual identites or user accounts, nor otherwise used to build per-user profiles. Moreover, we do not track users on any third-party site.

Data Storage Location

All data we collect is stored in the United States on servers at our infrastructure service provider, Google Cloud Services, which stores this data encrypted at rest. Google Cloud Services' Terms of Service, section 5, states that Google will use data stored through the service only to deliver the service; data will not be used in conjunction with Google’s other products, including advertising products.

What we do with the information we gather

We use any information we gather to improve the services we offer.

We acknowledge that individuals have the right to access the personal information/data that we maintain about them. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data, should direct his or her query to privacy@sandstorm.io. If requested to remove data, we will respond within a reasonable timeframe.

We do not sell any personal data to any third party. We do not share personal data with any third party, except as necessary to implement the service. For instance, if you choose to log in through Github, then we share data with Github, but only as necessary to implement login. If you do not wish for data to be shared with a third party (other than our infrastructure provider), you may opt-out by refraining from using features that integrate with that third party – such features are clearly marked in the Sandstorm user interface. If you believe we are sharing more data than necessary, please email privacy@sandstorm.io to report the problem so we may fix it.

We also may share your data with law enforcement or other third parties to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law (including without limitation in response to service of process). Any such action will be consistent with the policies and guidelines included in our Terms of Service. We may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

Note, however, that we expressly disclaim all liability arising out of third-party disclosures made pursuant to the preceding three paragraphs, which disclaimer you accept by your usage of the service.

If we merge with another company or are acquired by another company, we will share all of the data we have gathered with that company. In this event, Sandstorm will notify you before information about you is transferred and becomes subject to a different privacy policy.

How We Respond to Do Not Track Signals

The W3C “Do Not Track” standard defines “tracking” as follows:

Tracking is the collection of data regarding a particular user’s activity across multiple distinct contexts and the retention, use, or sharing of data derived from that activity outside the context in which it occurred. A context is a set of resources that are controlled by the same party or jointly controlled by a set of parties.

Sandstorm, as a company, does not engage in “tracking”, in that we do not track users across multiple unrelated contexts or web sites without the user’s explicit consent. This applies regardless of the presence of “Do Not Track” signals.

Correcting and deleting your data

Most things can be edited through the Sandstorm interface, but if not, email support@sandstorm.io.

Please note that even after we have changed or deleted your data from our systems, backup copies of your data may continue to exist on systems maintained by our infrastructure vendors (e.g., Google Cloud), over which we may not have control.

Sandstorm will not edit content owned by other users (which is most of the content on the platform).

Cancellation

If you cancel your service, all of your data (including grains) will be deleted (subject to “data deletion” in the Terms of Service and backups maintained by our infrastructure vendors as discussed above). However, if you merely stop paying for your service without requesting cancellation, then Sandstorm may, as a courtesy, continue to store your data so that you may access it again once you resume payments. Either you or Sandstorm may choose to end this courtesy storage at any time. You may cancel your service through the user interface or you can contact us at support@sandstorm.io.

Effective Date

This policy is effective as of September 9, 2016.