Stewardship of your data is critical to us and a responsibility that we embrace. We believe that our users' data should receive the same legal protections regardless of whether it's stored on our services or on their home computer's hard drive. We'll abide by the following Government Request Principles when receiving, scrutinizing and responding to government requests for our users' data: ● Be transparent, ● Fight blanket requests, ● Protect all users, and ● Provide trusted services. 3. Data Security RELAYTO shall comply with security technical and organizational measures as identified in annex II to the Standard Contractual Clauses. 4. Third-Party Embeds Some of the content that you see displayed on RELAYTO is not hosted by RELAYTO. These “embeds” are hosted by a third-party and embedded in RELAYTO. For example: YouTube or Vimeo videos, Imgur or Giphy gifs, SoundCloud audio files, Twitter tweets, GitHub code, or Scribd documents that appear within RELAYTO document experiences. These files send data to the hosted site just as if you were visiting that site directly (for example, when you load a RELAYTO document experience with a YouTube video embedded in it, YouTube receives data about your activity). RELAYTO does not control what data third parties collect in cases like this, or what they will do with it. So, third-party embeds on RELAYTO are not covered by this privacy policy. They are covered by the privacy policy of the third-party service. Some embeds may ask you for personal information, such as your email address, through a form. We do our best to keep bad actors off of RELAYTO. However, if you choose to submit your information to a third party this way, we don’t know what they may do with it. As explained above, their actions are not covered by this Privacy Policy. So, please be careful when you see embedded forms on RELAYTO asking for your email address or any other personal information. Make sure you understand who you are submitting your information to and what they say they plan to do with it. We suggest that you do not submit personal information to any third-party through an embedded form. If you embed a form that allows submission of personal information by users, you must provide near the embedded form a prominent link to an applicable Privacy Policy that clearly states how you intend to use any information collected. Failure to do so may lead RELAYTO to disable the document experiences or take other action to limit or disable your account. 12 of 52