- About this Statement
- What information does Stoneware collect and how is the information used?
- Does Stoneware share personal information with third parties?
- Does Stoneware sell personal information?
- Do Stoneware transfer personal information internationally?
- How long will Stoneware retain personal information?
- How does Stoneware protect information?
- What are my data protection rights?
- How may I contact Stoneware?
About this Statement
This statement was last updated on July 2, 2020.
What this statement applies to:
Your privacy is important to Lenovo. This privacy statement applies to data collected through Airstack products and services licensed by Stoneware, Inc. (a Lenovo company) (“Stoneware” or “we”). Airstack is a software as a service (SaaS) management service. It is intended to allow companies and teams to create groupings of all the apps they use to share with their team members, add resources to add context to the apps, and monitor the usage of each app to identify gaps and overlaps and improve spending. The Airstack service consists of a Workspace, where apps are used by individuals; a Service Center, where apps are organized and managed; Admin Settings, for management and IT functions; a Browser Extension, to allow for secure sign-in to apps with a Password Vault; and Airstack Meetings, a conferencing and video recording tool to assist in adding resources to the apps (collectively “Airstack”). This privacy statement describes the information practices for Airstack products, including what types of information are collected, how Stoneware and Lenovo uses information and for what purposes; with whom information is shared; and how Stoneware and Lenovo protect information. It also describes your choices regarding use, access, correction and deletion of your personal information, among other topics.
For further information, please review the Airstack Terms of Service here.
What this statement does not apply to:
Lenovo and Stoneware also collect personal information via Lenovo’s websites and other products and services. To learn more about our website privacy practices, please visit the Lenovo and Stoneware website privacy statement here. In addition, this statement does not apply to any other products or services provided by Stoneware or; or to any third party software and other services you install on or access through Airstack. Furthermore, this statement does not apply to certain products licensed by Lenovo to other companies.
Changes to this statement:
If we make a change to this statement, we will make previous versions available so that you can see when changes occurred and what they are. If we make any material changes to this statement, we will notify you by means of a notice on the lenovosoftware.com website; in an applicable Airstack service experience; or by an email (sent to the email address specified in your account) prior to the change becoming effective. Where applicable data protection laws require us, we will also seek your consent to any material changes that affect how we use or transfer your personal information. We encourage you to review this page periodically for the latest information on our privacy practices.
What information does Stoneware collect and how is the information used?
Stoneware collects information about you and your Airstack products and uses this information to keep Airstack working its best and help you make the most of it. Please note that, in certain circumstances, if you do not provide us with personal information where needed, we may not be able to provide you with the Airstack service, experience or functionality that you have requested. The following describes how we collect, use and share information, including personal information, in certain Airstack contexts.
Product Registration and Account Creation:
When a customer registers its Airstack product or service with Stoneware and creates an account with us, we will collect information, including personal information such as the customer contact’s name, address, email address, language, region/country, product type/model, product serial number, date of product registration, activation data about your operating system, username and hashed password. We will use this information in order to administer your account or profile; authenticate you when you login to Airstack; provide services that you have requested; and to provide you with communications, including marketing, that you choose to receive from Stoneware.
Airstack allows users to securely sign in to their SaaS applications from Airstack through an optional feature called Password Vault, which utilizes a browser extension that the user must download. The user then enters username and password credentials for each SaaS application once, and Airstack will remember those credentials each time the user navigates to that SaaS application. For application subscriptions, Airstack can also collect information like the cost of the subscription and the payment method for that subscription, specifically the name of the payment card used. This data can then help users to understand how much they spend on their application subscriptions.
Airstack Meetings is an optional conferencing and video recording tool that allows users to create a short training video that provides context for an SaaS application. Certain users may also be able to record and replay a live meeting via this tool. These recordings are stored on Airstack servers and systems.
Keeping Your Products and Services Up to Date:
We automatically collect and use certain limited non-personally identifiable information about your Airstack product to identify whether the software you are using is the most up to date version. We use this information to provide you with software updates (including security updates), to develop new products and software features, and to fix bugs so that your products run smoother and more efficiently.
Helping to Improve Our Products and Services:
We may collect device identifiers and related information, such as device id, serial number, IMEI, MAC address, IP address and domain names. We use this information to measure use and to improve the content of our sites, products and services. Aggregated information in this case is not used in such a form that would enable direct connection of any personal information to our visitors or users.
We may also collect certain data on our visitors and users’ demographics, interests, and behavior based on the information provided to us when using Airstack, during a promotion, from surveys and from our server log files. This information is collected to better understand and serve our users and customers, as well as to determine how we can improve our products and services. This research is compiled and analyzed on an aggregated basis to prevent identification of personal information relating to any one individual.
Customer Service & Quality Monitoring:
Certain Stoneware product and service support activities may also involve you contacting Stoneware or Stoneware contacting you, including by phone, email or chat. Please note that, in these cases, we may record calls for staff training and quality assurance purposes. To provide you with the service or support that you have requested, such as requesting technical support or repair under a warranty for your Stoneware product, Stoneware customer service personnel may also collect and access personal information about you, such as your user profile, account information, contact information, Stoneware product and service identifiers, and information about how you use your Stoneware product and service.
Some Stoneware and Lenovo customer service personnel work for service providers that supply such services to Stoneware and Lenovo and its customers and may have access to information about you in this context. Stoneware and Lenovo use third party data hosting, processing and communications resources (such as online chat tools) to support these activities.
In addition, authorized Stoneware distributors, resellers or repair providers for Stoneware products may also have access to certain customer service, quality assurance and product information described herein to support your product or to provide a service that you have requested, such as repair services under a warranty for your Stoneware product.
Sales, Marketing, Promotions, Surveys & Events:
If you choose to receive marketing, advertising or promotional communications from Stoneware, Lenovo and/or its partners – such as via e-mail or in-product push notifications – or if you choose to participate in an event, contest or survey, we will collect personal and non-personal information about you to help us manage these campaigns and communications, or to facilitate your participation. In particular, we may collect your name, address, email address, phone number, age/date of birth, Stoneware product information and additional personal information you choose to provide. We may also use this information to send to you product support notices; announcements; newsletters; and, when allowed by applicable laws, invitations to complete customer satisfaction surveys.
Stoneware, Lenovo and selected service providers or partners – including marketing, advertising, surveys and events companies – may also use the information you provide to conduct promotional, customer satisfaction or product support activities on Stoneware’s behalf or as part of a joint event or promotion between Stoneware and that company. Stoneware and Lenovo may also use data hosting and processing service providers to support these activities, as well as external tools to help us learn more about customer trends, marketing email open/click rates, and so forth. In addition, we may acquire data from third party sources, such as consumer research firms, in order to supplement the information that we collect from you.
You will receive transactional communications from Stoneware such as order confirmations. You are not required to subscribe to receive Lenovo marketing communications to purchase a product from Stoneware. You may choose to unsubscribe by following the instructions included in those communications; by changing your preferences in your account settings; or you can contact us at firstname.lastname@example.org.
Cookies & Tracking Tools:
In order to provide an effective, efficient, and customized experience, Airstack and Stoneware websites may use Internet cookies, tags, web beacons, analytics and related website solutions and techniques. These solutions are usually supplied to Stoneware by third parties. Most browsers are initially set up to accept cookies. However, if you prefer not to store cookies, you can choose to:
- not use our sites/services
- set your browser to notify you when you receive a cookie
- set your browser to refuse to accept cookies
- utilize the cookie consent and control options offered by a Stoneware or Lenovo website or product experience (if available and as required by applicable law)
- delete our cookies after visiting our site/service
- use your browser’s anonymous usage setting (called “Incognito” in Chrome, InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari etc.)
Where required by applicable law, Stoneware will acquire consent from you prior to using certain cookies during your Stoneware website experience and/or will offer you the opportunity to choose which types of cookies to enable or disable. You should understand that some features of Airstack might not function properly if you do not accept cookies. Also, please note that certain Stoneware websites, applications, and services may not respond to Do-Not-Track signals sent by certain browsers.
If you do not know how to control or delete cookies, or would like to opt-out of receiving certain targeted ads based on your browsing history, we recommend that you visit http://www.networkadvertising.org/choices/, http://www.aboutads.info/, or www.youronlinechoices.eu for detailed guidance, including opt-out instructions.
If you would like to opt-out of Google Analytics for Display Advertisers and/or opt out of the customized Google Display Network, you may do so by visiting Google’s Ads Preferences Manager. You may also wish to utilize the Google Analytics Opt-out Browser Add-on to opt-out of Google Analytics. For information on how to do this on the browser of your product or mobile device you will need to refer to your browser’s or mobile device’s help menu or product manual.
Collection of Personal Information from Minors:
Airstack is intended for adults only. Stoneware does not seek to collect personal information about minors under the age of 16. Users under the age of 16 should provide no personal information to Stoneware or Lenovo via Airstack.
If Stoneware learns a minor under the age of 16, or equivalent minimum age in the relevant jurisdiction, has submitted personal information to Stoneware, we will take appropriate steps to delete the personal information as soon as possible and not use it for any purpose
Mergers & Acquisitions:
Circumstances may arise when Lenovo or Stoneware decide to sell, buy, merge, or otherwise reorganize businesses in some countries. You will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information. Such a transaction may involve the disclosure of personal information to prospective or actual purchasers, or receiving it from sellers.
Legal Requirements and to Enforce Stoneware’s Rights:
It is possible that personal information will be subject to judicial or other government subpoenas, warrants, orders, or criminal and anti-fraud investigations. Therefore, when we believe in good faith that the law requires it, we may disclose personal or other information to regulatory or government bodies, courts of law, tribunals, and law enforcement agencies. We may also need to disclose personal or other information to protect our rights, protect your safety or the safety of others, or to investigate theft or fraud. In addition to the above, there may be circumstances that require us to disclose your personal information to other parties, including, but not limited to, legal advisers or debt collection agencies.
Does Stoneware share personal information with third parties?
Yes. Stoneware contracts with other companies, who act as our suppliers to perform services for Stoneware, such as data hosting, processing, marketing, promotions, event sponsorship, product development and analytics. Such services may require Stoneware to share your information with our service providers. In such cases, we take steps to ensure that these suppliers to Stoneware are adhering to Stoneware’s standards for robust privacy and strong security. Stoneware also relies on other Lenovo businesses and operations globally to provide services to support Stoneware’s products and services, including for those services listed immediately above.
Does Stoneware sell personal information?
No. Stoneware does not sell personal information. As described in the sections above, Stoneware may share personal information with third party service providers and partners so that they may support Stoneware products, or to provide additional services to Stoneware and its customers and product users. In doing so, Stoneware takes appropriate steps to ensure that these service providers and partners are meeting Stoneware’s standards of robust privacy and strong security. However, Stoneware does not sell personal information; and we have not sold any personal information during the 12 months prior to July 1, 2020. If Stoneware decides to sell personal information at any point, we would provide appropriate prior notice and consent opportunities as required by applicable law.
Does Stoneware transfer personal information internationally?
Lenovo (of which Stoneware is a part) is a global organization, with legal entities, business processes, management structures, and technical systems that cross borders. Therefore, where permitted by law, we may share your personal information within Lenovo (including to subsidiaries, affiliates and parent companies) or our service providers and business partners and may transfer it to countries in the world where we do business (including, but not limited to, the United States of America and China). Regardless of where your information is transferred to and resides, our privacy and security practices are designed to provide protection for your personal information globally.
Some countries have privacy laws that are not equivalent to privacy laws in your own country and that your data could be requested by law enforcement agencies in those jurisdictions. In such countries, Lenovo will still handle information in the manner we describe here and will take such measures as are necessary to comply with applicable data protection laws when transferring and processing your information. Where required, Lenovo will also maintain agreements between Lenovo group companies or with Lenovo partners or service providers to govern the transferring, processing and protection of personal information. For this purpose, Lenovo uses Standard Contractual Clauses as one means to help effectuate transfers of personal information from and within the European Union and the European Economic Area.
How long will Stoneware retain personal information?
Stoneware intends to retain information, including personal information, only as long as necessary for business or other compelling purposes; and to securely delete personal information when those purposes of use have been satisfied. We will retain your information, including personal information, for as long as any of the following circumstances apply:
- your account or subscription is active
- to provide you with services or support that you may request
- to ensure required functionality and performance of Stoneware products and websites, including responsibilities under our product warranties
- to comply with applicable laws, including for tax and audit purposes
- to enforce Stoneware’s and Lenovo’s rights, including litigation and debt collection
How does Stoneware protect information?
We use standard technical and organizational measures when we transmit information from our products to our servers, when we store data, and when we share it with third parties. For example, we use encryption when necessary while transmitting sensitive information to keep your information secure. When sharing your information with third parties, we will take reasonable and appropriate steps to contractually require that such parties will protect and use your information responsibly.
Stoneware Products and services may also include security features designed to help you protect the information you store on your product(s). These may include solutions like encryption, passwords, PIN and remote control over your product(s).
However, please remember that no product, software, or data transmission can be guaranteed to be 100% secure. As a result, while we have taken appropriate steps to protect your product(s) and your information, Stoneware cannot ensure or otherwise warrant the security of your product(s) or any information you provide to us. By using Stoneware Products, including Airstack, you do so at your own risk.
What are my data protection rights?
Applicable data protection laws may give you the right to control our use and processing of your personal information. These may include the right (i) to request access to and a copy of your personal information, (ii) to request rectification or erasure of your personal information; (iii) to object to processing of your personal information; (iv) to restrict processing or to opt-out of any sale of your personal information; and (v) to data portability. Where we are using your personal information with your consent, you also have the right to withdraw your consent at any time, though this will not affect our uses of your personal information prior to the withdrawal of your consent.
In addition, you may have the ability to review, correct or delete certain personal information of yours via a Stoneware account if you have one. You may also be able to restrict collection or processing of certain information of yours via device or application settings on your Product.
To further exercise your rights as described above, please contact us at email@example.com. We will review, respond to and act upon any such requests in accordance with applicable data protection laws.
Please note that we will take steps in accordance with applicable law and our privacy and security standards to verify your identity before granting you access to your personal information or by otherwise complying with your request. If you have a Lenovo account, we may verify your identity by requiring you to sign in to your account. If you do not have a Lenovo account or an email address on file with us, then we may request additional limited information from you in order to verify your identity. Please note that if you do not have an account with Lenovo, or an email address on file, or we are unable to verify your identity in our records, we may deny your request.
You may also use an authorized agent to submit a request under this section on your behalf. If you choose to have an authorized agent submit such a request on your behalf, Lenovo will require: (i) You to provide the authorized agent written permission to do so; and (ii) your agent to verify their identity directly with Lenovo. Lenovo may deny a request from an agent that does not meet these requirements.
In addition, you have the right to raise questions or complaints with your applicable national data protection authority at any time.
How may I contact Stoneware?
If you have any questions about this privacy statement, or to exercise your data protection rights as described above, you can contact us at firstname.lastname@example.org, or via U.S. postal mail or other means at the following:
Attn: Privacy Department
11555 N Meridian St
Carmel, IN 46032 USA
For additional Airstack support resources and contact points, please visit https://airstack.com/support/.