At Fusebill, we take personal data information obligations very seriously.
Together with our Privacy Policy, this document will help you better understand the personal information we collect, why we collect it, how we use personal data and how we protect it. In full compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) which came into effect on May 25, 2018, it also explains the various rights of the data subject, including the right of access and the right to erasure (aka “the right to be forgotten”).
The GDPR distinguishes between a Data Controller (the legal entity that determines the purpose for which, and the manner in which, any personal data is collected) and a Data Processor (the legal entity responsible for the handling of personal data on behalf of the Data Controller). Fusebill is a Data Processor. In most cases, Fusebill merchants are Data Controllers and as such, are responsible for a variety of data protection policies and practices related to notice, collection, retention, access and erasure (aka the “right to be forgotten”). Fusebill processes personal data as necessary for the purposes of the legitimate interests pursued by Fusebill and the Data Controllers.
In keeping with our obligations as a Data Processor, Fusebill promises to:
To satisfy the GDPR, each Data Controller must receive “sufficient guarantees” from its Data Processors that they can implement measures (technical and organizational) to meet the requirements of the GDPR. Since there are currently no codes of conduct or certifications upon which Data Controllers can rely, standard contractual clauses and data processing agreements are quickly becoming the norm.
Fusebill’s Data Processing Addendum is available here: Download. If you are an existing Fusebill customer or partner, our Data Processing Addendum amends your Services Agreement or Reseller Agreement, as applicable and governs the processing of any personal data which is provided or made available to us.
We use the following third party data processors when providing our Fusebill Service and Website:
Sub-Processor | Service | Purpose of Processing | Jurisdiction |
Logshero LTD |
Logz.io |
Third Party logging for application logs |
Israel |
Twilio Inc. |
SendGrid |
Sending emails from Fusebill |
USA |
Twilio Inc. |
Twilio (if enabled for sending emails inside of Fusebill) |
Sending SMS from Fusebill |
USA |
Solarwinds | AppOptics | Application performance monitoring | USA |
Appcues Inc. |
Product tutorials and walk throughs within the Fusebill application |
USA |
|
Microsoft Corporation |
Azure |
Image storage for invoices and hosted pages |
Canada |
Hubspot Inc. |
Hubspot |
Content management system for fusebill.com and Marketing platform |
USA |
Quora Inc |
Quora |
Advertising cookies |
USA |
Alphabet Inc. |
Google Analytics |
Website metrics for marketing site and application usage |
USA |
Microsoft Corporation |
Bing |
Advertising cookies |
USA |
Twitter Inc. |
|
Advertising cookies |
USA |
Facebook Inc. |
|
Advertising cookies |
USA |
Zendesk Inc. |
Zendesk |
Customer support management and Knowledgebase hosting for support.fusebill.com |
USA |
You also have the option to enable additional Fusebill integrations (either built-in or through our APIs or webhooks). We do NOT directly evaluate or attest to the GDPR qualifications of our integration partners. Each merchant is responsible for evaluating any third-party before creating or enabling an integration. These include, but are not limited to:
The DPO is Tj Carlson, VP of Revenue at Fusebill Inc. You can contact him at privacy@fusebill.com.
We recommend you first contact the Data Controller (i.e. the merchant organization to whom Fusebill is providing the Fusebill Service).
You may request a full report on the personal information we hold for you by sending an e-mail to privacy@fusebill.com. However, we may be required under our contractual and legal obligations to the Data Controller to forward your request to the Data Controller.
In the subject line, please indicate “Request for Personal Information”. In your email, please specify:
We will endeavor to fulfill all access requests within 30 days of our receipt.
We recommend you first contact the Data Controller (i.e. the merchant organization to whom Fusebill is providing the Fusebill Service).
You may request deletion of personal information by sending an e-mail to privacy@fusebill.com. However, we may be required under our contractual and legal obligations to the Data Controller to forward your request to the Data Controller.
In the subject line, please indicate “Request for Deletion”. In your email, please specify:
We will endeavor to fulfill all access requests within 30 days of our receipt.
If you have any questions about this document or our Privacy Policy, please contact us directly at privacy@fusebill.com.
Last Updated: March 1, 2021