Privacy policy

Templafy Affiliates

We may share personal data within the Templafy group for the purposes described in this Privacy Policy, including to provide, administer, secure, support, analyze, and improve the Templafy Solutions; manage customer, account, billing, marketing, and business relationships; comply with legal obligations; and support internal business operations.

Service Providers

We may share personal data with service providers that process personal data on our behalf or otherwise provide services to us, including providers of hosting and infrastructure, payment processing, customer relationship management, product operations, AI functionality, analytics, support, communications and email delivery, security and fraud prevention, website management, cookie and consent management, and professional services. These service providers are authorized to process personal data only as necessary to provide services to us, in accordance with our instructions or applicable contractual restrictions, and subject to appropriate confidentiality, security, and data protection obligations.

Independent or Joint Controllers 

In certain cases, we may share personal data with third parties that process the data as independent controllers or joint controllers rather than as our service providers. This may include, where applicable, advertising partners, analytics providers, social media platforms, event partners, payment providers, or other third parties that determine their own purposes and means of processing. Where these parties use cookies or similar technologies to collect data about your interaction with our websites, more information about the relevant technologies and your choices is provided in our Cookie Policy or cookie settings. 

Legal Authorities

We may disclose personal data where we reasonably believe disclosure is required by applicable law, regulation, legal process, or government request, or where disclosure is necessary to protect the security or integrity of our services, protect our rights, or protect our customers or users. Unless prohibited by law or where notice would create a security, legal, or operational risk, we will notify you of such disclosure where required. 

Business Transaction Cases

If Templafy is involved in a merger, acquisition, financing, restructuring, sale of assets, change of control, or similar transaction, personal data may be disclosed to advisers, prospective purchasers, investors, or other relevant parties under appropriate confidentiality obligations. Where required by law, we will provide notice of material changes affecting the use of personal data. 

Others

We may also disclose personal data to other third parties with your prior consent, at your direction, or after the data has been anonymized or aggregated so that it can no longer reasonably identify you.

Templafy does not sell personal information for monetary consideration. Certain cookies, pixels, tags, SDKs, or similar technologies may involve disclosures of personal information to third parties for analytics, attribution, advertising, or similar purposes. Where such disclosures constitute a “sale,” “sharing,” targeted advertising, or similar activity under applicable U.S. state privacy laws, we provide applicable opt-out rights as described in this Privacy Policy and our Cookie Policy.

Templafy may use artificial intelligence (AI) and machine learning technologies in the Templafy Solutions and in our internal operations, including to provide, secure, support, analyze, and improve our services. AI functionality is subject to Templafy’s privacy, security, vendor review, and risk assessment processes, including review of applicable data protection requirements, contractual commitments, and risks to individuals.

Where AI-enabled document generation applies, Templafy may process prompts, instructions, uploaded or selected source materials, document content, generated outputs, feedback, usage information, and related technical metadata. This processing is performed to generate and deliver the requested outputs, operate and secure Templafy Solutions, troubleshoot errors, prevent misuse, provide support, and improve the Templafy Solutions as described in the applicable terms and privacy documentation. Users must not submit personal data, confidential information, special category data, or third-party, client, employer, or organizational data unless they are authorized to do so and such use is permitted under the applicable terms. Templafy does not use customer content submitted to AI-enabled functionality to train or fine-tune general AI models unless expressly stated in the applicable Solution-specific terms or otherwise agreed.  

Where applicable, customers, workspace administrators, or account owners may control whether certain AI functionality is made available to users, and users may choose whether to interact with AI functionality. General information about AI functionality in the Templafy Platform is available on our AI documentation webpage, while solution-specific details may be provided in the applicable agreement, data processing agreement, product documentation, service-specific terms, or in-product notices. 

Where AI functionality generates or modifies text, files, images, or other content, the output may contain inaccuracies, omissions, or unintended content. Users are responsible for reviewing outputs before using, sharing, publishing, or relying on them, including to ensure that the output is accurate, appropriate, lawful, and does not include personal data, confidential information, third-party rights, or sensitive information in breach of applicable terms. Where required by applicable law, including the EU AI Act, Templafy may provide notices, labels, metadata, watermarks, provenance information, or other measures to indicate that content has been generated or modified by AI. 

Templafy does not use personal data to make solely automated decisions that produce legal or similarly significant effects for individuals within the meaning of Article 22 GDPR.

Individuals whose personal data is transferred under the Data Privacy Framework also have the right to choose (opt-out) whether their personal data is:

• disclosed to a third party (other than our agents acting on our behalf), or
• used for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized.

U.S. State Privacy Rights  

Depending on your state of residence and subject to applicable legal limitations, you may have the right to request access to, deletion of, correction of, or portability of your personal information; to opt out of the sale of personal information, sharing of personal information for cross-context behavioral advertising, targeted advertising, and certain profiling; to limit the use and disclosure of sensitive personal information where applicable; and to appeal a decision we make about your request. 

Templafy does not sell personal information for monetary consideration. Certain cookies, pixels, tags, SDKs, or similar technologies may involve disclosures of personal information to third parties for analytics, attribution, advertising, or similar purposes. Where such disclosures constitute a “sale,” “sharing,” targeted advertising, or similar activity under applicable U.S. state privacy laws, we provide applicable opt-out rights as described in this Privacy Policy and our Cookie Policy. 

You may manage applicable cookie and tracking preferences through our cookie settings. 

Where required by applicable U.S. state privacy laws, you may appeal our decision regarding your privacy request by replying to our response or contacting us at privacy@templafy.com with “Privacy Appeal” in the subject line. 

Templafy Enterprise Solutions and Workspaces 

We may process your personal data on behalf of a customer, workspace owner, account owner, or other organization to operate the Templafy Solutions made available to you, including enterprise solutions, self-serve solutions, and Teams workspaces. Where Templafy acts as a processor or sub-processor, you should contact the relevant customer, organization administrator, workspace administrator, or account owner to exercise your privacy rights. Where Templafy acts as an independent controller, including for the purposes described in Section 2 of this Privacy Policy, you can exercise your rights directly with Templafy. 

Exercise Your Rights 

To opt out of marketing communications, you can follow the guide at the bottom of the email from us. If this option is not available, you can write to us at privacy@templafy.com. If you wish to exercise any other privacy right, are unsure which privacy rights apply to you, or have any other question about this Privacy Policy, please write to privacy@templafy.com or at the postal address set out in Section 1 (The Data Controller). 

Under CCPA, California residents may also authorize an agent to submit a request on their behalf, and we may request information needed to verify your identity and the agent’s authority before responding. 

Cookie Preferences

Templafy uses cookies and similar technologies on our websites and, where applicable, within the Templafy Solutions. These may include cookies, pixels, tags, SDKs, local storage, and similar technologies used to provide the service, remember preferences, secure accounts, analyze usage, measure campaigns, and improve our websites and solutions. Non-essential cookies and similar technologies are used only where permitted by applicable law and, where required, based on your consent. 

Individuals may choose to accept or decline non-essential cookies. You can adjust your cookie preferences at any time using the cookie banner and “Cookie settings” link available at the bottom of our websites.

Please visit our cookie policy for more information. For your first visit to templafy.com or support.templafy.com, you are asked about your cookie preferences. After this, you may change the cookie settings at the bottom of these websites. It is also possible to block all cookies in your browser settings, but please note that this may affect site functionality.

Request Handling

Templafy has implemented measures to promptly handle your privacy requests. To help protect your privacy and security, we might take reasonable steps to verify your identity before granting you access to your personal data. We will make reasonable attempts to promptly investigate, comply with, or otherwise respond to your requests as may be required by applicable law.

Depending upon the circumstances and the request, we may not be permitted to provide access to personal data or otherwise fully comply with your request; for example, where producing your information may reveal the identity of someone else. We may refuse or limit requests where permitted by applicable law, for example where a request is manifestly unfounded, excessive, or would adversely affect the rights and freedoms of others.

Data Privacy Framework (Applicable to the European Economic Area, Switzerland, and the UK)

Templafy complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Templafy Inc. (our parent company) has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Templafy has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about DPF program, and to view our certification, please visit the official website of the DPF program.

Templafy is responsible for the processing of personal data it receives under EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, and subsequent transfers to a third-party acting as an agent on its behalf. With respect to personal data received or transferred pursuant to the EU-U.S. DPF and the Swiss-U.S. DPF, Templafy is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Templafy may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Templafy commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF (and the Swiss-U.S. DPF) should first contact Templafy, using the contact information at the top of this Privacy Policy. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Templafy commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), the Gibraltar Regulatory Authority (GRA), the Swiss Federal Data Protection, and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. An individual has the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. Please see Annex I for additional information.

Where personal data is transferred to third countries not covered by the Data Privacy Framework, Templafy ensures appropriate safeguards, such as the use of Standard Contractual Clauses or European Commission Decision on the adequate protection of personal data under Article 45(1) of the GDPR.

Children and special categories of personal data

Templafy services are not intended for children and may only be used by individuals who are at least 18 years old. We do not knowingly collect personal data from children. If we learn that a person under 18 has created an account or used any Templafy service, we may close the account and delete the associated personal data, subject to any legal, security, fraud-prevention, or compliance retention requirements. 

Templafy services are not designed for the processing of special categories of personal data or other sensitive information. You must not submit information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used to uniquely identify a person, health information, information about sex life or sexual orientation, children’s data, payment card details outside the authorized payment flow, government identifiers, passwords, or other highly sensitive information in prompts, uploaded files, generated outputs, support tickets, or free-text fields. 

Where such information is submitted contrary to our instructions, we will not use it to infer sensitive characteristics, target users, train AI models, or make decisions about individuals. We may process it only to operate, secure, troubleshoot, enforce, comply with law, or delete/restrict the relevant information.

Linked Websites

At our discretion, we may include hyperlinks on our websites that link to third-party websites. These websites have separate and independent privacy policies. Our Privacy Policy does not cover any linked sites, and we are not responsible for the privacy practices of these sites or any companies we do not own or control. Templafy does not endorse any products, services or other content described or offered on any linked sites. We encourage you to seek out the privacy policies applicable to those sites to understand how your personal data is used and protected outside of Templafy.

Changes

Templafy reserves the right to modify this Privacy Policy from time to time. We will publish any changes to our Privacy Policy on this page with an “Effective Date” at the top. Please check this page regularly to stay informed of the most recent changes. Any changes in the Privacy Policy that materially affect the processing of personal data or the rights or freedoms of individuals whose data we process will be communicated directly to the affected individuals using the contact information we have.