Other Covered Entities



  • Information and Communications Technology
  • Information Services


EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 2/16/2017
Next Certification Due Date: 2/25/2020
Data Collected: NON-HR

Purpose of Data Collection

? We collect the actual contents of the files uploaded to your ExaVault account ("Customer Data"). ? Additionally, we collect "metadata" about your Customer Data that is distinct from the actual content itself ("Customer Metadata"). Customer Metadata includes file and folder names, creation and modification dates, permissions, and size information. ? We also collect metadata about your account overall, not tied to any specific file (?Account Metadata?). Account Metadata includes general account settings, users and their associated data (passwords, access restrictions, etc.), group settings and customer brand data (name, logo, etc.) ? We also collect usage information customarily logged by web and FTP server software, including the date and time of your visit, the originating IP address, the pages and images requested, and other similar types of information. We also get usage data from third parties such as Google Analytics, who may place tracking pixels our site. Collectively, we call this "Usage Data". ? We collect information from those who communicate with us via e-mail or our website, and information volunteered by consumers, such as the information you provide during account registration and signup ("Registration and Billing Data"), and contact form submissions and E-Mails ("Correspondence Data"). ? "Registration and Billing Data" is used for billing purposes and to notify you about important service-related issues. ExaVault uses a third-party payment processor and Registration and Billing Data will be sent on to such payment processor. ? E-Mail addresses collected as part of Registration and Billing Data will be used to communicate with you regarding the Service. We communicate such things as announcements of new features, changes to Terms of Use/Privacy Policy, information about pricing changes or systems outages, and other Service-related announcements. We may use a third-party service for purposes of sending these communications, and so your name and email address may be transferred to such third-party service.

Privacy Policy

Non-HR Data


ExaVault, Inc. public privacy policy including provisions for EU-US Data Privacy Shield

Effective Date: 2/12/2019

Verification Method


Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact ExaVault, Inc. at:

Elizabeth Langill
Client Services Manager
ExaVault, Inc.
344 Thomas L Berkley Way
Oakland, California 94612
Fax: 5102807355

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from ExaVault, Inc. to your question or complaint, please contact the independent recourse mechanism listed below


Appropriate statutory body with jurisdiction to investigate any claims against ExaVault, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission