Privacy Policy

Effective: September 25, 2024

INTRODUCTION

Sumo Tumo’s mission is to create an environment where people quickly and easily share their competencies online. To accomplish this goal, it’s essential that Sumo Tumo is a safe place for our users to capture their competencies, and that they have complete control over how that information is shared.

Protecting your privacy is fundamental to our mission and business. The following summarizes our promises to you:

  1. We never sell user or school data.
  2. We do not have paid third-party advertising in individual Sumo Tumo accounts.
  3. We don’t own the content you add to Sumo Tumo.
  4. Your data is private to your account by default.
  5. We use the latest security industry best practices to protect you.
  6. We are transparent about our practices and will notify you if things change.
  7. We are compliant with GDPR.

SCOPE OF THIS POLICY

This Privacy Policy governs the use of data collected by our websites at sumotumo.com and the Sumo Tumo Application (collectively “the Sumo Tumo Service”, “the Service” or “Sumo Tumo”). This includes personally identifiable information that we collect when you create an account (“Account Information”), content added to your account (“Account Content”), Class Directories created by school networks, and Messages sent via Sumo Tumo. Any data collected by Sumo Tumo that can be linked back to an individual student is considered “User Data”.

By using Sumo Tumo, you agree to this Privacy Policy. If you don’t agree, please don’t use Sumo Tumo. You can contact us anytime with questions about this policy at [email protected].

SUMO TUMO AND GDPR

Sumo Tumo complies with the European Union General Data Protection Regulation (the “GDPR”) and makes it easy for EU individuals to exercise their rights described in that regulation. The purposes for which Sumo Tumo collects your information, the categories and specific types of information, and our practices and policies regarding the processing of your information are described in this Privacy Policy.

WHO DOES SUMO TUMO COLLECT INFORMATION FROM?

  • Users (students, alumni, faculty), employers, and schools may create accounts on Sumo Tumo.
  • We also collect limited log-data from all visitors to our marketing website.

WHAT INFORMATION DOES SUMO TUMO COLLECT?

  1. Account Information:

    • When Users create an account on Sumo Tumo, we collect your name, email address, and password.
    • We may also collect your phone number if you enter it in your Account Settings.

  2. Account Content:

    • Content added to a user’s account may include photos, journals, drawings, files, notes, hyperlinks, and other documentation of competencies.
    • We also collect comments left on Stack Digital Portfolios.

  3. Messages:

    • Sumo Tumo collects messages sent and received by users.

  4. Class Directories:

    • Teachers may create Class Directories to organize user Stack Digital Portfolios.
    • These may include text about the Directory and links to Digital Portfolios.

  5. Communications:

    • Information you send to us directly, such as email communications.

  6. Event Registration Information:

    • When Users register for an event on Sumo Tumo, we may collect additional information. In some cases, event organizers may require extra permissions around data usage.

  7. Log Data:

    • When you use Sumo Tumo, we receive log data such as your IP address, browser type, operating system, device information, and mobile carrier.
    • Additional information like referring web page and search terms may also be collected.

HOW DOES SUMO TUMO USE THIS INFORMATION?

We only use this information to provide our services to you. For example, we use this information to:

  • Verify your identity and facilitate access and usage of our service.
  • Provide customer support to users and faculty.
  • Notify you about activity and updates to your account.
  • Research and analyze user trends to improve and develop new features.
  • Promote relevant enhancements to users, faculty, employers, and educators.
  • Investigate, prevent, and detect potentially unlawful activities.

You can withdraw consent for the collection of your personal information at any time and opt-out of marketing communications from us.

ADVERTISING AND DATA SHARING

Sumo Tumo does not deploy third-party advertising within user accounts or on Stacks. We do not share or sell user information with third-party advertisers unless explicit permission is provided.

Schools or Clients using Sumo Tumo may have advertisers or sponsors in their events. These schools or clients may share data from their events with third parties according to their privacy policies. However, Sumo Tumo or the school will not share user Identifiable Data without explicit user permission.

LIMITED CIRCUMSTANCES FOR DATA SHARING

We do not sell or share your data except in the following situations:

  • Third-party services to operate and improve Sumo Tumo, such as data center operators or notification services.
  • Legal compliance or fulfilling valid legal requests, including national security or law enforcement requirements.
  • Faculty may optionally share Class Directories, and users can withdraw from these groups anytime.
  • Business transactions such as mergers, sales, or reorganizations.

THIRD-PARTY ANALYTICS SERVICES

For optimum privacy, we use a self-hosted analytics software instead of third-party services. This software collects anonymized user data to help us improve our product. Institutions running academic events may add their own third-party analytics services to their event pages.

COOKIE USAGE

Cookies are small text files stored in your web browser. We use cookies to:

  • Keep you logged in to Sumo Tumo.
  • Customize your Sumo Tumo experience.
  • Understand your usage of Sumo Tumo.
  • Promote Sumo Tumo to relevant teachers and schools.

You can disable cookies via your browser settings, but this may affect the functionality of Sumo Tumo.

USER INFORMATION SHARING

Users can share their Stacks via private links. Faculty can also share Stack Groups within their school or with third parties. Users can delete their Stack and remove access at any time.

HANDLING ABANDONED ACCOUNTS

Sumo Tumo will delete accounts that have not been accessed for over 7 years, after notifying the user by email with an opportunity to download archived content.

USER RIGHTS TO PERSONAL INFORMATION

Users have the right to access, correct, download, or delete their personal information. To delete your Sumo Tumo account or any content, email [email protected].

SECURITY MEASURES

Sumo Tumo protects your data with access-controlled data centers, routine third-party security audits, restricted employee access, encryption in transit, and encryption of Account Content at rest. In case of a security breach, we will notify affected users as required by law.

INTERNATIONAL VISITORS

Sumo Tumo operates out of Canada. Personal information provided to Sumo Tumo will be hosted on servers in the United States and Canada.

CHANGES TO THIS POLICY

Sumo Tumo may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you by email of material changes and post a notice on our service. By continuing to use our service, you accept these changes.

CONTACT INFORMATION

If you have any questions about this Privacy Policy, please contact [email protected].