DoiT International, including its subsidiaries and affiliates (“DoiT”, “Company”, “we”, “us”, or “our”), is committed to protecting the privacy of individuals who access, use, or register for our Services (as defined below).
This Privacy Policy (“Policy”) explains how we collect, use, disclose, and otherwise process Personal Data when you interact with our Services, and how you can exercise your rights under applicable privacy and data protection laws.
Please read this Policy carefully to understand how we handle your Personal Data.
Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing any information.
1. Our Services
DoiT provides a range of products and services to companies, businesses, and other organizations (“Customers”). These include “as -a-service” offerings and consulting services related to building and operating large-scale distributed systems, developing machine learning models, and implementing data solutions on platforms such as Google Cloud, AWS, and Microsoft Azure (collectively, the “Platform Services”). In addition, DoiT operates the website https://www.doit.com/ ("Website") and the DoiT Cloud Intelligence™ mobile application ("Mobile App"). For the purposes of this Policy, the Platform Services, the Website, the Mobile App, webinars, chatbots and other such services are collectively referred to as the “Services.”
This Policy applies to personal information relating to an identified or identifiable individual (“Personal Data”) that we collect from you when you access or interact with our Services where DoiT acts as a data controller with respect to Personal Data. DoiT enters into agreements with its Customers governing the provision of the Platform Services.
This policy does not apply to (i) the data that our Customers and their authorized users upload, submit or otherwise make available to the Platform Services and other data that we process on their behalf, as defined in our agreement with the Customer; (ii) any products, services, websites, or content that are offered by third parties or that have their own privacy notice; or (iii) Personal Data of DoiT employees, whose information is governed by a separate Employee Privacy Policy.
2. Personal Data We Collect About You
When you interact with our Services such as request support, fill out a form on our Website, interact with a chatbot agent, or use the “Contact Us” page, we collect certain information about you including the following categories.
| Source | Description |
|---|---|
| Information you provide directly | Personal Data you provide when you purchase Platform Services, request support, create an account, or complete a form on our Website or contact us via our "Contact Us" page. |
| Information from third parties | Personal Data provided by our partners, publicly available sources, and other trusted third-party sources, such as advertising partners. |
| Information collected through the Mobile App | As further described in Section 9, when you use the Mobile App we collect your email address and console user ID, device identifiers used for push notifications, product interaction and performance data, crash data, and your app preferences. |
| Tracking Information | As further described in Section 8, we use cookies and other tracking technologies to automatically collect certain information such your IP address, website engagement, browser type, and preferences to improve our Services and tailor content to you. |
3. How We Use Your Personal Data
We use your Personal Data for the following purposes:
- Providing, maintaining and improving our Services and offerings
- Responding to requests for support
- Order processing, billing, and payment transactions
- Account management
- Sending marketing communications
- Advertising & personalization
- Legal compliance
- Fraud prevention & security
- Other legitimate business purposes permitted by applicable laws
4. Recipients of Personal Data
We may share Personal Data with:
| Recipient Type | Purpose |
|---|---|
| Cloud providers (e.g., Google Cloud, AWS, Azure) | Service delivery |
| Service providers (analytics, support, infrastructure) | Operations and improvement |
| Advertising partners | Marketing and analytics |
| Payment processors | Payment handling |
| Authorities and regulators | Legal compliance |
DoiT recognizes the importance of protecting Personal Data when it is transferred to third parties and we ensure appropriate contractual safeguards with all processors.
In addition, we may share your Personal Data if we enter into a business transaction such as a merger, acquisition, reorganization, bankruptcy, or sale of some or all of our assets. Any party that acquires our assets as part of such a transaction may continue to use your data in accordance with the terms of this Policy.
5. International Data Transfers
To facilitate our global operations, Personal Data that we collect may be stored, processed, or transferred outside your jurisdiction, including to the United States.
We rely on appropriate safeguards including, as applicable:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- UK International Data Transfer Addendum
- EU-U.S., UK-U.S., and Swiss-U.S. Data Privacy Frameworks
To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
6. Data Retention
We retain Personal Data only as long as necessary for the legitimate business purposes for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, and enforce agreements. In determining retention periods, we will consider the type of information that is collected and the purpose for which it is collected, the risk of unauthorized disclosure, and requirements under applicable law.
7. Data Security
We implement physical, technical and administrative measures designed to protect your information from unauthorized disclosure, access, or use and we require suppliers to contractually commit to maintaining equivalent protections.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our Services.
Types of Cookies
| Type | Purpose |
|---|---|
| Strictly Necessary | These are automatically placed on your computer or device when you access our Services or take certain actions on our app or website. These Tracking Technologies are required to enable you to navigate around and use the features of our Services. |
| Functional | These enable enhanced functionality and personalization like remembering choices you make (such as your language) the next time you use the Services. |
| Analytics | These collect information about your online activity (for example the duration of your visit on our Services), including behavioral data and content engagement metrics. The data collected from these tracking technologies is used on an aggregated basis for analytics and research so we can improve the performance of our Services. |
| Advertising | These collect information about your browsing habits in order to make advertising more relevant to you and may be set by our advertising partners. These remember the websites you visit and share the information with other parties such as advertisers and/or publishers who may also utilize cookies or similar technologies to deliver ads and monitor the performance of such ads. The collection of information by such third parties will be governed by their own privacy policies/cookies policies and principles. |
You can manage preferences using our cookie settings tool and/or opt-in when a pop-up is shown (however, please note that these tools may differ according to the jurisdictions). Other methods of managing your Tracking Technology preferences includes: changing your browser settings to send a “Do-Not-Track” signal. In such a case, your browser will send us a special signal to stop tracking your activity; you may also install a browser extension, such as Disconnect or Ghostery, to block third party tracking cookies on our website. However, please note that certain features of the website may not work properly or effectively if you delete or disable cookies.
To learn more about how you can manage your cookies, below is a list of useful links that can provide you with more information on how to manage your cookies. However, please remember that by deleting or blocking cookies, some of the features of our Services may not work properly or effectively.
You can learn more and turn off certain third party targeting and advertising cookies by visiting the following third party webpages:
- The Interactive Advertising Bureau (US)
- The Interactive Advertising Bureau (EU)
- European Interactive Digital Advertising Alliance (EU)
Additionally, you may manage your communication preferences here.
9. Cloud Intelligence™ Mobile App
This section describes how we collect and use Personal Data when you use the Mobile App. The Mobile App is part of our Services, and the rest of this Policy, including the sections on Data Retention, Data Security, and your rights, applies to it.
Account and sign-in. The Mobile App does not create accounts. You sign in through the DoiT Console’s own sign-in page using your existing DoiT Console account. We use your email address and console user ID to sign you in and to show you the data you are entitled to see in the DoiT Console.
Push notifications. If you allow notifications, the Mobile App registers a device token issued by the Apple Push Notification service and an app installation ID with our notification provider, Courier, so that we can send you cost anomaly notifications. You can turn notifications off at any time in the Mobile App or in your device’s iOS Settings. We remove your device token when you sign out of the Mobile App.
Usage analytics. The Mobile App sends product interaction events and app performance timings through Segment to the analytics tools we use to understand and improve our Services. These events do not contain cost values or your organization’s business data. We do not use them for advertising or to track you across apps or websites owned by other companies.
Crash and diagnostic data. If the Mobile App crashes or encounters an error, it sends a crash report to our error-monitoring provider, Sentry. Crash reports do not include your user ID or email address and are not linked to your identity, and we remove response bodies from them before they are sent.
App preferences and actions. Your Mobile App preferences and actions, such as your home role, your “since last visit” baseline, and insights you mark as done, are saved to your DoiT Console account.
Data stored on your device. The Mobile App caches cost and usage data that you are already entitled to see in the DoiT Console. This cache is encrypted on your device, holds data for up to 10 recently opened customers for up to 30 days, and is deleted when you sign out or when your access is revoked.
Face ID and Touch ID. Unlocking the Mobile App with Face ID or Touch ID is optional. If you turn it on, the check is performed entirely by iOS on your device. We never receive your biometric data; the Mobile App only learns whether the check succeeded.
Data we do not collect. The Mobile App does not collect your location, contacts, photos, health data, browsing history, or payment information. The Mobile App does not track you across apps or websites owned by other companies, so it does not ask for tracking permission under Apple’s App Tracking Transparency framework, and we do not share Mobile App data with data brokers.
Recipients of Mobile App data. In addition to the recipients described in Section 4, we use the following service providers to operate the Mobile App:
| Recipient | Purpose |
|---|---|
| Google Cloud and Firebase | Authentication and hosting |
| Segment | Usage analytics |
| Sentry | Crash and diagnostic reporting |
| Courier | Delivering push notifications |
| Apple Push Notification service | Delivering push notifications to your device |
As described in Sections 4 and 7, we require these service providers to contractually commit to protecting your Personal Data in a manner consistent with this Policy.
Retention and deletion. We retain Personal Data collected through the Mobile App in accordance with Section 6. Data cached on your device is deleted as described above. To request access to, or deletion of, Personal Data collected through the Mobile App, contact us at [email protected].
10. EU, UK, and Swiss Residents
This section addresses the specific rights applying to residents of the EU, UK, Switzerland, or residents in other jurisdictions that afford the below rights.
You have the right to:
- Access your Personal Data
- Rectification of inaccurate data
- Erasure (“right to be forgotten”)
- Restriction of processing
- Data portability
- Objection to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
Please note that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements. Users outside the EU are welcome to contact us for any questions or requests. To exercise your rights, contact: [email protected].
11. California Residents
This part of the Policy addresses the specific disclosure requirements under the California Consumer Privacy Act of 2018 (Cal. Civ. §§ 1798.100–1798.199) and the California Consumer Privacy Act Regulations by the Attorney General (collectively: "CCPA").
11.1. Rights under CCPA
- Right to know: you may request that we disclose to you the categories and specific pieces of Personal Data that we have collected about you, the categories of sources from which your Personal Data is collected, the business or commercial purpose for collecting your Personal Data, the categories of Personal Data that we disclosed for a business purpose, any categories of Personal Data about you that we sold, the categories of third-parties with whom we have shared your Personal Data, and the business or commercial purpose for selling your Personal Data, if applicable.
- Right to request deletion: you have the right the request deletion of any Personal Data we have collected, subject to certain exemptions.
- Right to correct: you may request that we correct inaccurate information.
- Right to Opt Out of sharing: You may opt out of sharing of your Personal Data for behavioral advertising purposes.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
11.2. Collection of Personal Data
In the preceding twelve (12) months, we have collected the following categories of Personal Data:
| Category | Personal Data collected | Sources | Purpose for collection |
|---|---|---|---|
| Identifiers | Full name, nationality, email address, IP address, social network account, console user ID, and device identifiers (such as push notification tokens and app installation IDs). | Information you provided with us; Information collected from third parties. | Providing our Services (for example, facilitating your registration); Consumer services (for example, answering your inquiries); Maintaining compliance with applicable laws. |
| Customer records | Financial information, name, telephone number. | Information you provided with us; Information collected from third parties. | Providing our Services (for example, facilitating your registration); Facilitating payments. |
| Commercial information | Records of products and services you purchased. | Information you provided with us; Information we collected automatically from you; Information collected from third parties. | Providing, improving, and tailoring our Services; Marketing and advertising. |
| Geolocation data. | IP address and device location data. | Information you provided with us; Information we automatically collect from you. | Providing and improving the Services. |
| Electronic network activity. | Users' interaction with the Services, including Mobile App interaction, performance, and crash data. | Information we automatically collect from you. | Marketing and advertisement; Tailoring and improving our Services. |
11.3. Sharing Personal Data
We disclose your Personal Data to third parties for business purposes. When we disclose Personal Data for a business purpose, we enter into a contract that describes the purpose and requires both parties to keep that Personal Data confidential and not use it for any purpose except in the performance of the contract.
11.4. Selling Personal Data
We do not "sell" Personal Data. We only share Personal Data as described in this Policy.
11.5. Exercising Your Rights
You can exercise your rights by submitting a verifiable consumer request to our email address: [email protected]. Only you or a person authorized to act on your behalf may make a consumer request related to your Personal Data. If you use an authorized agent to submit a request to exercise your right to know or your right to request deletion, please mail a certified copy of your written declaration authorizing the authorized agent to act on your behalf using the contact information below. If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4000 to 4465, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the CCPA.
The request must:
- Provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Data or an authorized representative.
- Describe your request with sufficient details to allow us to properly understand, evaluate, and respond to it.
- We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you. We will only use Personal Data provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
12. Canada Residents
12.1. The right to access
As a Canadian resident, pursuant to Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"), you have the right to formally request access or corrections to your Personal Data.
You can exercise your rights under PIPEDA by submitting a consumer request to our email address: [email protected]. The request needs to (i) provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Data; and (ii) describe your request with sufficient details to allow us to properly understand, evaluate, and respond to it.
Our goal is to respond to your requests within 30 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing within the first 30 days period. We will deliver our written response, by mail or electronically, at your option.
Please note that you have the right to complain to the Office of the Privacy Commissioner of Canada should you be unsatisfied with the result of your request.
12.2. The right to withdraw consent
Please note that you can withdraw your consent to our use of your Personal Data at any time. If you do so, we may not be able to provide you with all of our Services. Specifically, if you withdraw your consent to the use, collection or sharing of your Personal Data for the purposes set out in this Policy, you may not have access to the Services. In certain cases, we may continue to use your Personal Data after you have withdrawn consent, if we have a legal basis to do so, or if your withdrawal of consent was limited to certain processing activities. You can withdraw your consent by submitting a request to our email address: [email protected].
12.3. The right to challenge our compliance with PIPEDA
Please note that you may contact us with any questions, complaints or suggestions with respect to our compliance with PIPEDA. You can submit such inquiries or complaints to the following email address: [email protected]. We will investigate all the complaints concerning our compliance with PIPEDA. If a complaint is found to be justified, we will take appropriate measures to resolve the complaint, including by amending our policies and practices, if necessary. The respondent will be informed of the outcome of the investigation regarding the complaint.
12.4. Transfer of data
We may transfer your Personal Data to third parties, as set out in this policy. Such third parties may reside outside of Canada, and in such circumstances we have put in place contractual measures to ensure that the recipients of your Personal Data provide appropriate safeguards for your Personal Data and are only using it for the purposes of performing their services, or otherwise for those purposes for which we have disclosed your Personal Data to them.
13. Israel Residents
13.1. Collection of Personal Data
Please note that you are under no legal obligation to provide us with Personal Data, and you are doing so with your own will and consent.
13.2. Transfer of data outside of Israel
We may transfer your Personal Data to third parties that may reside outside the State of Israel, where the level of protection of personal data is different. In such circumstances, we have put in place contractual measures to ensure that the recipients of your Personal Data provide appropriate safeguards for your data, in accordance with applicable laws.
13.3. Data subjects' rights
You may request:
- Access to and review of Personal Data concerning you that is in our control.
- Rectification or deletion of your Personal Data that is in our control, where the data is out of date, incorrect, unclear or incomplete.
- Erasure of your Personal Data used for Direct Marketing, as defined under local privacy legislation.
Please note that these rights are not absolute and may be subject to regulatory requirements.
14. Minors
We do not knowingly collect or solicit Personal Data from anyone under the age of majority (as determined under the applicable laws where the individual resides; “Minor”). By accessing, using or interacting with our Services, you certify to us that you are not under Minor. In the event that we learn that we have collected Personal Data from a Minor without verification of parental consent, we will delete that information upon discovery. If you believe that we might have any information from or about a Minor, then please contact us through the contact details available below.
15. Updates to this Policy
We reserve the right to change this Policy at any time. The most current version will always be posted on our Services (as reflected in the “Last Updated” heading). You are advised to check for updates regularly. By continuing to access or use our Services after any revisions become effective, you agree to be bound by the updated Policy.
16. Further Information
If you have any questions regarding the Personal Data we collect, or how we use it, please contact us by email at: [email protected].