Legal documents and your data
Using Sekee means agreeing to a small set of documents. This page lists them, explains who agrees to what, and describes the record Sekee keeps of each agreement.
:::note Recently changed Agreeing to the documents is new. Signing up and accepting an invitation used to ask for no agreement, and nothing was recorded. Accounts created before the change are asked to accept once, on their next visit. :::
The documents
Each document has its own page in the app. The page shows its version and its effective date. The footer of the Sekee website links to all of them.
| Document | Where |
|---|---|
| Terms of Service | app.sekee.io/terms |
| Privacy Policy | app.sekee.io/privacy |
| Data Processing Agreement (DPA) | app.sekee.io/dpa |
| Acceptable Use Policy | app.sekee.io/acceptable-use |
| Subprocessors | app.sekee.io/subprocessors |
| Security Measures | app.sekee.io/security |
You don't need to accept the last two. They describe who processes data for us and how we protect it.
Who agrees to what
| Terms of Service | Acceptable Use Policy | Privacy Policy | DPA | |
|---|---|---|---|---|
| Owner, at signup | Agrees | Agrees | Has read | Agrees, for the organization |
| Invited people, when they join | Agrees | Agrees | Has read |
The DPA is a contract between Sekee and your organization, so only the owner signs it. The owner agrees on their own behalf and for the organization they are creating. See Create an organization for the exact wording.
The Privacy Policy is recorded as read, not agreed to. It tells you how we handle your data. It is not something you consent to.
What not to put in Sekee
Signing up and the updated-terms dialog both repeat this:
Don't store sensitive personal data, confidential business information such as trade secrets or unreleased financials, passwords, API keys, or production customer data in Sekee.
Test cases, steps, screenshots and attachments are the usual places this slips in. Use made-up test data instead.
The record we keep
Each time you accept, Sekee stores one record per document with:
- the document and its version,
- a fingerprint of the exact text you were shown,
- the time,
- your IP address and browser (user agent),
- the sentence next to the checkbox,
- your email address and organization name.
This record is how we can prove the agreement later. The Privacy Policy describes it, and it is kept for as long as your account exists and for up to six years after. Deleting your organization does not delete these records.
Your own acceptances are included in your personal export.
When a document is updated
When a new version of a document you agreed to comes out, the next time you open Sekee you see a Please review our updated terms dialog. It lists each changed document with its version and a link to read it. To continue, tick the checkbox and choose Accept and continue. The only other option is Sign out, and the dialog can't be dismissed.
What the dialog asks for depends on your role:
- Owners accept the updated Terms of Service, Data Processing Agreement and Acceptable Use Policy, for themselves and for the organization, and confirm they have read the Privacy Policy.
- Everyone else accepts the updated Terms of Service and Acceptable Use Policy and confirms they have read the Privacy Policy.
You only see documents that changed since you last accepted. If you accepted nothing before, for example because your account is older than this feature, you see the dialog once for all of them.
Taking your data with you
You can download your data at any time. Owners and admins can download the whole organization. See Exporting your data.