Living Spec Privacy Policy

Living Spec Inc. (“Living Spec,” “we,” “us,” or “our”) has prepared this Privacy Policy to explain what Personal Data (defined below) we collect, how we use and share that data, and your choices concerning our data practices. Through our web application at livingspec.com or spec.new (the “Site”) , mobile application or other software applications (the “App”).

The Service is designed to help you and your team collaborate on the details of product creation and definition from early concept to production and beyond. The Service also gathers and aggregates data from other services to provide you with an efficient source of truth. Data provided is also aggregated to provide useful metrics to you and your team. All offerings from Living Spec including the Site, the App, and any related services, sales, marketing, or events are referred to collectively in this Privacy Policy as the “Service” or “Services”).

We recognize and respect the importance of keeping your personal information secure. Moreover, we believe it is important for our customers to know and understand how we keep your personal information secure. This Privacy Policy explains what Personal Data (defined below) we collect, how we use and share that data, and your choices concerning our data practices. This Privacy Policy is incorporated into and forms part of our Terms of Service.

This Privacy Policy describes how we collect, use, and share your personal information when you use our Services. Please read this Policy carefully. This Policy applies to all information collected through our website, app, and any related services, sales, marketing, or events (collectively, the Services”). By using, accessing, or licensing our Services, you agree to be bound by our Privacy Policy and our Terms of Use (hyperlink this). If you do not agree with our Privacy Policy or our Terms of Use, you must immediately stop using our Services.

Before using the Service or submitting any Personal Data to Living Spec, please review this Privacy Policy carefully and contact us if you have any questions. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access the Site or otherwise use the Service.

We collect information that alone or in combination with other information in our possession could be used to identify you (“Personal Data”) as follows:

Personal Data You Provide: We collect Personal Data when you connect to the Service as well as when you sign up for the Service via the livingspec.com website. The Personal Data collected during these interactions may vary based on what you choose to share with us, but it will generally include name, email, location, IP address, as well as data from your product requirements and specifications including titles and descriptions, images, and emails of people you invite to the Service.

Personal Data We Collect Through Our Social Media Pages: We have pages on social media sites like Instagram, Facebook, Medium, Twitter, and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect Personal Data that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

Google Authentication Integration: In order to provide the Service, you may choose to register via an email address or via Google. When authenticating via Google we will collect your Google Mail address and name, and other metadata from this authentication. Notwithstanding anything else in this Privacy Policy, we (1) only use the Google Data to provide the Services; (2) do not transfer Google Data to third parties except as necessary to provide or improve the Services, as required by law, or in connection with a merger, acquisition, or sale of assets where we provide notice to users; you (3) do not use the Google Data for serving advertisements; and (4) do not permit humans to read Google Data, except (a) if we obtain your affirmative consent, (b) as necessary for security purposes or to comply with applicable law or (c) our use is limited to internal operations, such as resolving support issues or analyzing data to improve the Service.

Linear Integration: If you choose to enable the Integration with Linear, linear.app , we may gather information within Linear or share information with Linear in the form of user data, task data, product data, project data, and other metadata. Notwithstanding anything else in this Privacy Policy, we (1) only use the Linear Data to provide the Services; (2) do not transfer Linear Data to third parties except as necessary to provide or improve the Services, as required by law, or in connection with a merger, acquisition, or sale of assets where we provide notice to users; you (3) do not use the Linear Data for serving advertisements; and (4) do not permit humans to read Linear Data, except (a) if we obtain your affirmative consent, (b) as necessary for security purposes or to comply with applicable law or (c) our use is limited to internal operations, such as resolving support issues or analyzing data to improve the Service. Data within Linear is also covered by the Linear Privacy Policy, linear.app/privacy

Slack Integration: If you choose to enable the Integration with Slack, Slack , we may gather information within Slack or share information with Slack in the form of user data, task data, product data, project data, and other metadata. Notwithstanding anything else in this Privacy Policy, we (1) only use the Slack Data to provide the Services; (2) do not transfer Slack Data to third parties except as necessary to provide or improve the Services, as required by law, or in connection with a merger, acquisition, or sale of assets where we provide notice to users; you (3) do not use the Slack Data for serving advertisements; and (4) do not permit humans to read Slack Data, except (a) if we obtain your affirmative consent, (b) as necessary for security purposes or to comply with applicable law or (c) our use is limited to internal operations, such as resolving support issues or analyzing data to improve the Service. Data within Slack is also covered by the Slack Privacy Policy, slack.com/trust/privacy/privacy-policy

Jira Integration: If you choose to enable the Integration with Atlassian Jira, Atlassian , we may gather information within Atlassian products or share information with Atlassian in the form of user data, task data, product data, project data, and other metadata. Notwithstanding anything else in this Privacy Policy, we (1) only use the Atlassian Data to provide the Services; (2) do not transfer Atlassian Data to third parties except as necessary to provide or improve the Services, as required by law, or in connection with a merger, acquisition, or sale of assets where we provide notice to users; you (3) do not use the Atlassian Data for serving advertisements; and (4) do not permit humans to read Atlassian Data, except (a) if we obtain your affirmative consent, (b) as necessary for security purposes or to comply with applicable law or (c) our use is limited to internal operations, such as resolving support issues or analyzing data to improve the Service. Data within Atlassian is also covered by the Atlassian Privacy Policy, atlassian.com/legal/privacy-policy

Other Integrations: If you choose to enable any other Living Spec integrations with any other third-party software, we may gather information within the third-party product or share information with the third-party in the form of user data, task data, product data, project data, and other metadata. Notwithstanding anything else in this Privacy Policy, we (1) only use the third-party Data to provide the Services; (2) do not transfer third-party Data to third parties except as necessary to provide or improve the Services, as required by law, or in connection with a merger, acquisition, or sale of assets where we provide notice to users; you (3) do not use the third-party Data for serving advertisements; and (4) do not permit humans to read third-party Data, except (a) if we obtain your affirmative consent, (b) as necessary for security purposes or to comply with applicable law or (c) our use is limited to internal operations, such as resolving support issues or analyzing data to improve the Service. Data within third-party software is likely also covered by a third-party privacy policy.

Personal Data We Receive Automatically From Your Use of the Service: When you visit, use and interact with the Service, we may receive certain information about your visit, use or interactions. For example, we may monitor the number of people that visit the Service, peak hours of visits, which page(s) are visited, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access the Service (e.g., Chrome, Firefox, Edge, Safari, etc.), broad geographical information, and navigation pattern. In particular, the following information is created and automatically logged in our systems:

Log data: Information that your browser automatically sends whenever you visit the Site (“log data”). Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interacted with the Site.

Cookies and Local Storage: Please see the “Cookies and Local Storage” section below to learn more about how we use cookies and local storage settings.

Device information: Includes name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings.

Usage Information: We collect information about how you use our Service, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency and duration of your activities.

Cookies and Local Storage settings: We use cookies and Local Storage settings to operate and administer our Site, gather usage data on our Site and improve your experience on it. A “cookie” or value stored in Local Storage is a piece of information sent to your browser by a website you visit. Cookies and Local Storage settings can be stored on your computer for different periods of time. Some cookies or Local Storage settings expire after a certain amount of time, or upon logging out (session cookies or Local Storage authentication tokens), others survive after your browser is closed until a defined expiration date set in the cookie or Local Storage setting (as determined by the third party placing it), and help recognize your computer when you open your browser and browse the Internet again (persistent cookies). For more details on cookies please visit All About Cookies and Local Storage.

Email Pixels: We use pixels in our email campaigns that allow us to collect your email and IP address as well as the date and time you open an email or click on any links in the email.

Analytics: We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyze how users use the Site and enhance your experience when you use the Site. For more information on how Google uses this data, go to www.google.com/policies/privacy/partners/.

Online Tracking and Do Not Track Signals: We and our third party service providers, like Heap Analytics and Google Analytics, may use cookies, pixels or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site. Our Site currently does not respond to “Do Not Track” (“DNT”) signals and operates as described in this Privacy Policy whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will update this Privacy Policy to describe how we do so.

Your Choices: On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please note that if you limit the ability of websites to set cookies and Local Storage settings, you may be unable to access certain parts of the Site and you may not be able to benefit from the full functionality of the Site. Advertising networks may use cookies to collect Personal Data. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit the Network Advertising Initiative’s online resources at http://www.networkadvertising.org and follow the opt-out instructions there. If you access the Site on your mobile device, you may not be able to control tracking technologies through the settings.

We may use Personal Data for the following purposes: To provide the Service, we gather personal information from you, including your email and name, your personally-stated priorities, as well as your product data including plans, tasks, requirements, and metadata; We leverage this data to help optimize the productivity and collaboration need of your team; To respond to your inquiries, comments, feedback or questions; To send administrative information to you, for example, information regarding the Service, and changes to our terms, conditions, and policies; To analyze how you interact with our Service; To maintain and improve the content and functionality of the Service; To develop new products and services; To prevent fraud, criminal activity, or misuses of our Service, and to ensure the security of our IT systems, architecture and networks; and To comply with legal obligations and legal process and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or other third parties.

Aggregated Information: We may aggregate Personal Data and use the aggregated information to analyze the effectiveness of our Service, to improve and add features to our Service, and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with prospective business partners. We may collect aggregated information through the Service, through cookies, and through other means described in this Privacy Policy.

Marketing: We may use your Personal Data to contact you to tell you about products or services we believe may be of interest to you. For instance, if you elect to provide your email or telephone number, we may use that information to send you special offers. You may opt out of receiving emails by following the instructions contained in each promotional email we send you. You can also control the marketing emails you receive by updating your settings through your account or by emailing us at [email protected] In addition, if at any time you do not wish to receive future marketing communications, you may contact us If you unsubscribe from our marketing lists, you will no longer receive marketing communications but we will continue to contact you regarding management of your account, other administrative matters, and to respond to your requests.

In certain circumstances we may share your Personal Data with third parties without further notice to you, unless required by the law, as set forth below: Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Data with vendors and service providers, including providers of hosting services, cloud services and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, payment processors, customer relationship management and customer support services, and web analytics services. Pursuant to our instructions, these parties will access, process or store Personal Data in the course of performing their duties to us. We take commercially reasonable steps to ensure our service providers adhere to the security standards we apply to your Personal Data. Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider, your Personal Data and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.

Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability.

Affiliates: We may share Personal Data with our affiliates, meaning an entity that controls, is controlled by, or is under common control with Living Spec. Our affiliates may use the Personal Data we share in a manner consistent with this Privacy Policy.

Other Users: Certain actions you take may be visible to other users of the Service. For example, when you create priorities, we may expose those to others within your organization. We will take reasonable precautions to ensure that data is shared appropriately.

We keep Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer.

Please log in to your account or contact us if you need to change or correct your Personal Data.

California Third Party Marketing: If you are a California resident and wish to opt out of sharing your Personal Data with third parties for their direct marketing purposes, please email Living Spec at [email protected] and clearly state your request, including your name, mailing address, email address and phone number. Please see the “Your Choices” section of this Privacy Policy for additional information.

EU General Data Protection Regulation (GDPR) Notice Under the GDPR, we are a Data Controller of your personal information. If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the information we collect and the specific context in which we collect it. To learn how and why we collect your information read the Information We Collect and the How We Use The Information We Collect sections of this Privacy Policy. We do not sell, rent, or trade your data. When we process your order, we may send your data to, and also use the resulting information from, credit card processing agencies in order to process your purchase. How do we store your data? We securely store your data at our data center in Germany. We will keep your data for up to 90 days after you request we delete it. Once this time period has expired, we will delete your data by removing all access to the data. Marketing We would like to send you information about products and services of ours that we think you might like, as well as those of our partner companies. If you have agreed to receive marketing, you may always opt-out at a later date. You have the right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please click here (insert hyperlink). What are your data protection rights under GDPR? We want you to be fully aware of all of your data protection rights under the GDPR. Every user located in a country which has adopted the GDPR is entitled to the following: The right to access – You have the right to request copies of your data. We may charge you a small fee for this service. The right to rectification – You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request we complete the information you believe is incomplete. The right to erasure – You have the right to request that we erase your data, under certain conditions. The right to restrict processing – You have the right to request that we restrict the processing of your data, under certain conditions. The right to object to processing – You have the right to object to our processing of your data, under certain conditions. The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions. If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at the address or e-mail identified in the Contact Us section at the end of this document. We may ask you to verify your identity before responding to such requests. You have the right to complain to a Data Protection Authority about our collection and use of your personal information. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Our Service is not directed to children who are under the age of 13. Living Spec does not knowingly collect Personal Data from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Data to Living Spec through the Service please contact us and we will endeavor to delete that information from our databases.

The Service may contain links to other websites or services not operated or controlled by Living Spec, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

You use the Service at your own risk. We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Data both online and offline from loss, misuse, and unauthorized access, disclosure, alteration or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or e-mail. Please keep this in mind when disclosing any Personal Data to Living Spec via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third party websites.

By using our Service, you understand and acknowledge that your Personal Data will be transferred from your location to our facilities and servers in the United States and Europe.

In certain circumstances providing Personal Data is optional. However, if you choose not to provide Personal Data that is needed to use some features of our Service, you may be unable to use those features. You can also contact us to ask us to update or correct your Personal Data. You may also delete your account. Please note that we will need to verify that you have the authority to delete the account, and certain activity generated prior to deletion may remain stored by us and may be shared with third parties as detailed in this Privacy Policy.

The Service, and our business may change from time to time. As a result we may change this Privacy Policy at any time. When we do we will post an updated version on this page, unless another type of notice is required by the applicable law. By continuing to use our Service or providing us with Personal Data after we have posted an updated Privacy Policy, or notified you by other means if applicable, you consent to the revised Privacy Policy and practices described in it.

If you have any questions about our Privacy Policy or information practices, please feel free to contact us at our designated request address: [email protected].