Spatial is hosted on AWS Region 1 US (Virginia)
(Sub-) Processor full name |
(Sub-) Processor Country |
Processing activity |
Types of personal data processed by the (Sub-) Processor |
Personal Data processed |
Encryption |
Deletion |
Auth0 |
Data processed and stored in US |
Authentication provider |
User ID, Email, Password (hashed), OAuth tokens, Name, Auth provider profile (i.e. name/email/picture from Google. Depends on provider), Phone Number |
All users |
|
In Transit and At Rest |
MongoDB Atlas (Hosted in AWS) |
Data processed and stored in US |
Main database |
User ID, Email, Name, File metadata, Org Name, Room ID, Room name, Room description, Device IDs (i.e ID/name from HoloLens device), Auth provider profile, Geolocation |
All users |
|
In Transit and At Rest Data stored until deleted
|
Mixpanel |
Data processed and stored in US |
Usage analytics |
User ID, Email, Name, IP Address, Org Name, Usage Stats, Geolocation |
All users |
|
In Transit and At Rest User data is retained indefinitely. Customers are given the ability to delete profiles using the Engage API.
|
Loggly |
Data processed and stored in US |
App log parsing and searching |
User ID, Email, Name, IP Address, Room ID, Room Name, Room description, Device IDs, Usage Stats, Geolocation |
All users |
|
In Transit and At Rest |
File Storage |
Data processed and stored in US |
file storage |
User ID, Email, Uploaded files (3d models, ppt, docs, videos, etc.), Room contents (notes, searches, webpages, etc. created in meeting) |
All users |
|
In Transit and At Rest |
AvatarSDK |
Data processed and stored in US |
API for creating avatars |
User ID, Email, Picture, |
All users |
|
In Transit and At Rest
Adheres to Privacy Shield compliance |
Cesium |
Data processed and stored in US |
File processor |
User ID, Email, Uploaded Files, |
All users Always |
|
In Transit and At Rest |
Microsoft Azure Spatial Anchors |
Data processed and stored in US |
World Anchor Storage |
User ID, Email, World Anchor, |
All users |
|
In Transit and At Rest 1. **Daily retention policy**: Backups taken daily are stored for seven days. 2. **Weekly retention policy**: Backups taken at midnight and 6 PM Saturday are preserved for four weeks. 3. **Monthly retention policy**: Backups taken at midnight and 6 PM on the last Saturday of each month are preserved for 12 months. 4. **Yearly retention policy**: Backups taken at midnight on the last Saturday of every March are preserved for 10 years. |
Liveswitch |
Data processed and stored in US |
webrtc server (store aggregated statistical and analytical big data but it is anonymous and used to run reports to track issues and usage) |
User ID, Email, |
All users |
|
In Transit and At Rest Data stored until delete requested |
Retool |
Data processed and stored in US |
Admin UI Tool |
User ID, Email, Name, IP Address, Room ID, Room Name, Room description, Device IDs, Usage Stats, Geolocation |
All users |
|
In Transit and At Rest Not stored |
Photon |
Data processed and stored in US |
Game server |
No PII |
All users |
|
In Transit and At Rest Data not stored at rest |
FullStory |
Data processed and stored in US |
Usage analytics |
No PII |
All users |
|
In Transit and At Rest After an account has been in a cancelled state for 180 days, data is automatically deleted. For active accounts, session data is saved based on the data retention specified in the current subscription. Sessions are deleted on a rolling basis as they age out of the retention window. |
Microsoft Azure Speech Services |
Data processed and stored in US |
Speech to text |
User audio (when using speech to text features) |
All users |
|
In Transit and At Rest Raw data points (that is, items that you can query in Analytics and inspect in Search) are kept for up to 730 days. 1. **Daily retention policy**: Backups taken daily are stored for seven days. 2. **Weekly retention policy**: Backups taken at midnight and 6 PM Saturday are preserved for four weeks. 3. **Monthly retention policy**: Backups taken at midnight and 6 PM on the last Saturday of each month are preserved for 12 months. 4. **Yearly retention policy**: Backups taken at midnight on the last Saturday of every March are preserved for 10 years. https://docs.microsoft.com/en-us/azure/azure-monitor/app/data-retention-privacy |
Google Analytics |
Data processed and stored in US |
Usage Analytics |
No PII |
All users |
|
In Transit and At Rest Data is deleted after 6 months of inactivity for a given user. For Google Analytics 4 properties, retention of user-level data, including conversions, is fixed at up to 14 months. For all other event data, you may choose the length of retention 2 or 14 months. When data reaches the end of the retention period, it is deleted automatically on a monthly basis. |
IPapi |
Data processed and stored in US |
Location service |
Location |
All users |
|
In Transit and At Rest 5.2. Deletion: Data will be deleted if you (a) revoke your consent to the storage (b) Data is not needed to fulfill the user contract concerning the Product anymore, or (c) the storage is or becomes legally impermissible. A deletion request does not affect Data, if the storage is legally necessary, for example for accounting purposes. |
URL2Ping |
Data processed and stored in US |
image processor |
No PII |
All users |
|
In Transit and At Rest Assets (and related job data) are kept in various layers/caches of our api system for up to 30 days. Traffic logs through the CDN/edge systems are kept up to 12 months in queryable system and in s3 storage (mostly because if ingestion into the queryable system fails fora long period of time, we can back import). We frequently drop queryable data down to 6 months, as it is rarely relevant beyond that point.. Billing records, and utilization metadata are kept longer (presently indefinitely). Payment data/history is kept directly within our processors/sub-processors systems (ie. stripe for any customer since 2017). |
Backtrace.io |
Data processed and stored in US |
Native crash reports |
No PII |
All users |
|
In Transit and At Rest Compress all objects after 1 month, delete all physical object data after 3 months. Delete all object data after 1 year. https://help.backtrace.io/en/articles/3983675-retention-policies |
Unity Cloud Diagnostics |
Data processed and stored in US |
Crashes and exceptions |
No PII |
All users |
|
In Transit and At Rest Retention is 7 days for personal license tier and 90 days for pro and plus license tier: https://unity3d.com/unity/features/cloud-diagnostics https://docs.unity3d.com/Manual/UnityAnalyticsDataPrivacy.html |
Oculus Analytics |
Data processed and stored in US |
Telemetry (Average FPS, battery burn, memory usage, # of install failures) |
No PII |
All users |
|
In Transit and At Rest 90 days for all data to be fully deleted. |
MailChimp |
Data processed and stored in US |
Email campaign service |
|
All users |
|
In Transit and At Rest When you permanently close your account, we remove all data associated with your audiences, campaign archives, and reports. |
ConvertAPI |
Data processed and stored in US |
File processor for Microsoft docs |
No PII |
All users |
|
In Transit and At Rest Does not store data on our servers. When storefile=true parameter is used, the file is stored for max. 3h. https://help.convertapi.com/en/article/how-long-are-my-files-stored-a5ihko/ |