Jotform Privacy Policy changes — 20221206_rev01

103

By using our services or visiting our websites, you consent to the above-described disclosures.

104

105

In some cases, the applications or user interfaces you encounter while on our sites are managed by third parties, who may require that you provide your personal information. We are not responsible for the privacy practices of these third party services or applications. We recommend carefully reviewing the user terms and privacy statement of each third party service, website, and/or application prior to use.

106

107

## HOW LONG WE RETAIN YOUR INFORMATION

108

109

We generally retain your information for as long as you have an account with us, or as long as necessary to otherwise to provide services to you, to comply with our legal obligations, resolve disputes, or comply with and enforce our agreements. Data that is deleted from our servers may remain as residual copies on offsite backup media for up to approximately one month afterward.

109

We generally retain your information for as long as you have an account with us, as necessary to otherwise to provide services to you, to comply with our legal obligations, to enforce our agreements and terms of use, and for as long as one or more of your forms remain publicly accessible on our website. If you close your account and make your forms publicly unavailable through your account dashboard, your personal info will be deleted after one month. If your account has not been closed but is inactive for one year, we will hold your personal data in encrypted form for one additional year, at which time we will delete it. We will delete personal info in response to valid data subject requests made under applicable privacy law such as under the GDPR. This paragraph constitutes our data retention policy as to your personal information.

110

111

## REQUESTS TO DELETE, AMEND OR WITHDRAW CONSENT - NON-EEA, UK OR AUSTRALIAN RESIDENTS

112

113

You may be entitled to request that we delete or amend your personal information. You may also be entitled to withdraw your consent, when consent is the basis for processing your personal information. We apply the same procedures, limitations and exceptions established for European Economic Area (EEA), UK and Australian residents in this privacy policy to all who make such requests to delete or amend personal information, or withdraw consent for processing personal information, regardless of geographic location. Please read the "Your Rights" paragraph under the "ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA, UK AND AUSTRALIA RESIDENTS" below for details. If you are a resident of the EEA, UK or Australia, see below for more specific details on how that applies to you.

114

115

## ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA, UK AND AUSTRALIA RESIDENTS

Privacy Policy

Full text changes — 20220905_rev01 to 20221206_rev01