update privacy policy with clarifications

Signed-off-by: Jos Poortvliet <jospoortvliet@gmail.com>

1 files changed, 13 insertions, 10 deletions

diff --git a/page-privacy.php b/page-privacy.php
index fff4cc66..9f78aebf 100644
--- a/page-privacy.php
+++ b/page-privacy.php
@@ -18,12 +18,15 @@
         <div class="col-md-8 col-md-offset-2">
             <h2>Introduction and summary</h2>
             <p>We recognize that privacy is extremely important to all visitors to our website. We do not share any individual information with anybody without your permission.</p>
-            <p>We use the open source <a href="http://matomo.org/">Matomo (the former Piwik)</a> tool to get information on how our website is used and use <a href="https://www.phplist.com/">phplist</a> to handle our newsletters. We use the open source marketing automation tool <a href="https://mautic.com">Mautic</a> to track business users that did download resources like white papers or participate in webinars. From neither will we hand over individual data to anybody else and any privacy breaches we will disclose as soon as possible. Our <a href="https://scan.nextcloud.com">security scanner</a> is strictly based on publicly available information, that is the list of known vulnerabilities relevant for ownCloud/Nextcloud releases as well as any applied hardenings/settings we can scan without having access to the server. Last but not least, on <a href="https://scan.nextcloud.com">help.nextcloud.com</a> we run the open source <a href="https://discourse.org">discourse</a> software. This platform is meant for home users and home user questions! As enterprise visitor, please use <a href="https://portal.nextcloud.com">our support portal</a>. If you still use the forums, expect that we reach out to you at some point.</p>
-            <p>Our website ocasionally embeds content, like YouTube videos (behind a click-through wall) and others. We don't share any of your data with the parties behind them, however, they can gather some information when you watch a video or click the captcha.</p>
-            <p>Please note that <a href="<?php echo home_url('news') ?>">nextcloud.com/news</a> aggregates community blogs and we can not be held responsible for their opinions or content.</p>
-            <p>Our software, be it the Nextcloud server or the Android or iOS apps, do not sent any user data to us. The optional Usage Survey app can sent usage statistics like installed apps to us to help us improve our service. You can review and approve the data before it is sent. We store the data aggregated and not per user, so a theft of our data can not be used to get any information about any specific installation. The Updater app, if enabled, sends Nextcloud version, PHP version, install time and the channel it wants to the Nextcloud updater server to receive update information. We store the install time to track statistics, all other data is discarded right away.</p>
-            <p>We can not take any responsibility for third-party apps and the data they store or sent about users. We do have a policy in our app store against abusing private data and any app that is found to be in violation is removed and its author banned. However, we do not have the ability to check all code of all third party applications and thus we recommend you are careful when installing third party apps.</p>
-            <p>If you see any problems, please report it to <a href="mailto:abuse@nextcloud.com">abuse@nextcloud.com</a>.</p>
+            <p><strong>To download a whitepaper</strong>, you have to enter your email address. Unless you <strong>opt in</strong> for more information, we <em>immediately delete your mail address</em> from our database after sending the whitepaper.</p>
+            <p><strong>Our website</strong> ocasionally embeds content, like YouTube videos (behind a click-through wall) and others. We don't share any of your data with the parties behind them, however, they can gather some information when you watch a video or click the captcha. We are always looking for ways to decrease data sharing here and input is welcome.</p>
+            <p><strong>For traking and marketing automation</strong> we use the open source <a class="hyperlink" href="http://matomo.org/">Matomo (the former Piwik)</a> tool to get information on how our website is used and use <a class="hyperlink" href="https://www.phplist.com/">phplist</a> to handle our newsletters. We use the open source marketing automation tool <a class="hyperlink" href="https://mautic.com">Mautic</a> to track business users that did download resources like white papers or participate in webinars <em>and who did opt-in explicitly</em>. From neither will we hand over individual data to anybody else and any privacy breaches we will disclose as soon as possible. We also delete, anonymize and remove data regularly.</p>
+            <p><strong>Our <a class="hyperlink" href="https://scan.nextcloud.com">security scanner</a></strong> is strictly based on publicly available information, that is the list of known vulnerabilities relevant for ownCloud/Nextcloud releases as well as any applied hardenings/settings we can scan without having access to the server. We only scan on-demand and store the results for a limited time.</p>
+            <p><strong>Our forums</strong> on <a class="hyperlink" href="https://scan.nextcloud.com">help.nextcloud.com</a> runs the open source <a class="hyperlink" href="https://discourse.org">discourse</a> software. This is self-hosted and we do not share, disclose or otherwise distribute any data from it. You can disable your own account there if you need to. Note that this platform is meant for home users and home user questions! As enterprise visitor, please use <a class="hyperlink" href="https://portal.nextcloud.com">our support portal</a>. If you still use the forums, expect that we reach out to you at some point.</p>
+<!--             <p>Please note that <a class="hyperlink" href="<?php echo home_url('news') ?>">nextcloud.com/news</a> aggregates community blogs and we can not be held responsible for their opinions or content.</p> -->
+            <p><strong>Our software</strong>, be it the Nextcloud server or the Android or iOS apps, are designed to not sent any user data to us. The optional Usage Survey app can sent usage statistics like installed apps to us to help us improve our service. You can review and approve the data before it is sent. We store the data aggregated and not per user, so a theft of our data can not be used to get any information about any specific installation. The Updater app, if enabled, sends Nextcloud version, PHP version, install time and the channel it wants to the Nextcloud updater server to receive update information. We store the install time and version on the instance to track statistics, all other data is discarded right away.</p>
+            <p><strong>With regards to third party apps:</strong> we can not take any responsibility for third-party apps and the data they store or sent about users. We do have a policy in our app store against abusing private data and any app that is found to be in violation is removed and its author banned. However, we do not have the ability to check all code of all third party applications and thus we recommend you are careful when installing third party apps.</p>
+            <p>If you see any problems, please report it to <a class="hyperlink" href="mailto:abuse@nextcloud.com">abuse@nextcloud.com</a>.</p>
             <p>You can find details in our full privacy policy below.</p>
         </div>
     </div>
@@ -53,7 +56,7 @@
                 <li>To follow up with them after correspondence (live chat, email or phone inquiries)</li>
             </ul>
             <h3>Mautic</h3>
-            <p>We use the open source <a href="https://mautic.org">Mautic marketing automation tool.</a> This is used for actions like emailing a whitepaper to people who entered their email address to receive it. If you enter an email address on our site, you agree with that (otherwise we can't sent you that white paper either). We might sent follow-up emails (like a reminder if you didn't download the white paper, or a notification of a new white paper), from which you can opt-out on the bottom of the emails.</p>
+            <p>We use the open source <a class="hyperlink" href="https://mautic.org">Mautic marketing automation tool.</a> This is used for actions like emailing a whitepaper to people who entered their email address to receive it. If you enter an email address on our site, you agree with that (otherwise we can't sent you that white paper either). We might sent follow-up emails (like a reminder if you didn't download the white paper, or a notification of a new white paper), from which you can opt-out on the bottom of the emails.</p>
             <p>In line with our business strategy of not monetizing home and small business users but aim for large enterprises, our goal is to ONLY track employees of companies using their work email. We try to drop all home/private users from the database as soon as we find out they are private users, of course after we have sent them the white paper they asked for. For example, we remove contacts with an @gmail or @icloud address and keep obviously business related addresses (@acme @example-ltd @placeholder-corp.com). For those we then might follow up on a End-to-end Encryption white paper download a week later with an offer to download our Server-side Encryption white paper; or sent a follow-up email suggesting to read a new blog about encryption we wrote. Our goal is to keep potential customers informed and help them in their journey to become a Nextcloud user and customer, without bothering others. </p>
             <p>Of course, you can opt-out of any emails using the unsubscribe link on the bottom of these emails. Note that you then don't get any emails from Mautic anymore: also not if you enter your mail again to get a white paper!</p>
             <h3>How do we protect visitor information?</h3>
@@ -112,7 +115,7 @@
             <p>If at any time you would like to unsubscribe from receiving future emails follow the instructions at the bottom of each email and we will promptly remove you from correspondence by that tool. Note that you have to unsubscribe separately from our newsletter and our marketing automation tool.</p>
 
             <h3>Website source</h3>
-            <p>The source code of the website can be found in <a href="https://github.com/nextcloud/nextcloud.com">our GitHub repo</a>. It is licensed under the <a href="https://en.wikipedia.org/wiki/GNU_Affero_General_Public_License">AGPLv3 license</a>.</p>
+            <p>The source code of the website can be found in <a class="hyperlink" href="https://github.com/nextcloud/nextcloud.com">our GitHub repo</a>. It is licensed under the <a class="hyperlink" href="https://en.wikipedia.org/wiki/GNU_Affero_General_Public_License">AGPLv3 license</a>.</p>
 
             <h2>Contact</h2>
             <p>If there are any questions regarding this privacy policy you may contact us using the information below.</p>
@@ -126,7 +129,7 @@
             70173 Stuttgart Germany<br/></address>
             HRB 227086 (AG München)<br/>
             T +49 711 25 24 28 90<br/>
-            <a href="<?php echo home_url('contact') ?>">contact form</a><br/>
+            <a class="hyperlink" href="<?php echo home_url('contact') ?>">contact form</a><br/>
             </p>
             <p>
             Managing Director:<br/>
@@ -134,7 +137,7 @@
             </p>
             <p><small>All product names and trademarks are the property of their respective owners, which might in no way be associated or affiliated with Nextcloud.</small></p>
 
-            <p>Last Edited on 2018-05-29</p>
+            <p>Last Edited on 2019-05-15</p>
         </div>
     </div>
 </div>