Open Box Technologies (SesameVault) Privacy Policy

Open Box Technologies, Inc. (“OBT”) recognizes that its customers, visitors, users, and others (collectively or individually “Customers”) who use SesameVault.com (the “Service”) or other web sites owned or operated by OBT (the “OBT Sites”) value their privacy. This Privacy Policy details important information regarding the use and disclosure of Customer information collected on the OBT Sites.

This Privacy Policy is incorporated into and is subject to the OBT Terms of Service. A Customer’s use of the OBT Sites and any personal information that a Customer provides or transfers to the OBT Sites remains subject to the terms of this Privacy Policy and OBT’s Terms of Service.

The information OBT collects is used to improve the content of OBT’s Web pages and the quality of OBT’s Service, and is not shared with or sold to other organizations for commercial purposes, except to provide products or services that a Customer has requested, when OBT has a Customer’s permission, or under the limited circumstances specifically provided for in this Privacy Policy.

OBT uses third party vendors to provide the necessary hardware, software, networking, storage, and related technology required to run SesameVault and the OBT Sites. Although OBT owns the code, databases, and all rights to SesameVault and the SesameVault application, a Customer retains all rights to such Customer’s data.

Customers should note that any video, image, or other content made accessible to the wider Internet in an unprotected manner becomes published content and is not considered personally identifiable information subject to this Privacy Policy.

The Information OBT Collects

Customer Provided Information: When you register for SesameVault OBT asks for information such as a Customer’s name, company name, email address, billing address, and/or credit card information. Customers who sign up for a free account are not required to enter a credit card.

OBT uses collected information for the following general purposes: products and services provision, billing, identification and authentication, services improvement, contact, and research.

Cookies Information: When a Customer visits the OBT Sites, OBT may send one or more cookies - a small text file containing a string of alphanumeric characters - to the Customer’s computer that uniquely identifies the Customer’s browser. Cookies are required to use the SesameVault Service. OBT uses both session cookies and persistent cookies. A persistent cookie remains after a Customer closes the Customer’s browser. Persistent cookies may be used by a Customer’s browser on subsequent visits to the site. Persistent cookies can be removed by a Customer through such Customer’s web browser help file directions. A session cookie is temporary and disappears after a Customer closes their browser. A Customer can reset the Customer’s web browser to refuse all cookies or to indicate when a cookie is being sent. However, some features and functions of the OBT Sites, and specifically the SesameVault Service, may not function properly if the ability to accept cookies is disabled.

Log File Information: When a Customer uses the OBT Sites, OBT’s servers automatically record certain information that a Customer’s web browser sends whenever the Customer visits any website. These server logs may include information such as a Customer’s web request, Internet Protocol (“IP”) address, browser type, browser language, referring / exit pages and URLs, platform type, number of clicks, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the date and time of your request, and one or more cookies that may uniquely identify a Customer’s browser.

Clear GIFs Information: When you use the OBT Sites, OBT may employ “clear GIFs” (a.k.a. Web Beacons) which are used to track the online usage patterns of OBT’s Customers anonymously (i.e., in a non-personally- identifiable manner). In addition, OBT may also use clear GIFs in HTML-based emails sent to OBT’s Customers to track which emails are opened by recipients.

The Way OBT Uses Information

If a Customer submits personally identifiable information to OBT through the OBT Sites, then OBT uses the Customer’s personal information to operate, maintain, and provide to the Customer the features and functionality of the OBT Sites.

OBT does not use a Customer’s email address or other personally identifiable information to send commercial or marketing messages without the Customer’s consent or except as part of a specific program or feature for which the Customer will have the ability to opt-in or opt-out. OBT may, however, use a Customer’s email address without further consent for non-marketing or administrative purposes (such as notifying Customers of major OBT Site changes or for Customer service purposes).

OBT uses both a Customer’s personally identifiable information and certain non- personally-identifiable information (such as anonymous Customer usage data, cookies, IP addresses, browser type, clickstream data, etc.) to improve the quality and design of the SesameVault Service and OBT Sites and to create new features, promotions, functionality, and services by storing, tracking, and analyzing Customer preferences and trends.

OBT uses cookies, clear gifs, and log file information to: (a) remember information so that a Customer will not have to re-enter it during the Customer’s visit or the next time the Customer visits the OBT Sites; (b) provide custom, personalized content and information; (c) monitor the effectiveness of OBT’s marketing campaigns; (d) monitor aggregate metrics such as total number of visitors, pages viewed, etc.; and (e) track a Customer’s entries, submissions, and status in promotions, sweepstakes, and contests.

When OBT Discloses Information

OBT provides personally identifiable information and non-personally- identifiable information to OBT’s subsidiaries, affiliated companies, or other businesses or persons for the purpose of processing such information on behalf of OBT. OBT requires that these parties agree to process such information in substantial compliance with the provisions of OBT’s privacy policy.

OBT does not share a Customer’s personally identifiable information (such as name or email address) with other, third-party companies for their commercial or marketing use without the Customer’s consent or except as part of a specific program or feature with respect to which the Customer will have the ability to opt-in or opt-out.

OBT does share non-personally-identifiable information (such as anonymous Customer usage data, referring / exit pages and URLs, platform types, number of clicks, etc.) with interested third-parties to assist them in understanding the usage patterns for certain content, services, advertisements, promotions, and/or functionality on the OBT Sites.

OBT may release personally identifiable information and/or non- personally-identifiable information if required to do so by law, or in the good-faith belief that such action is necessary to comply with state and federal laws (such as U.S. Copyright Law), respond to a court order, subpoena, or search warrant, or to investigate, prevent or take action regarding actual or potential illegal activities, suspected fraud or potential threats to the personal safety of any person.

OBT also reserves the right to disclose personally identifiable information and/or non-personally-identifiable information that OBT believes, in good faith, is appropriate or necessary to enforce OBT’s Terms of Service, take precautions against liability, to investigate and defend itself against any third-party claims or allegations, to assist government enforcement agencies, to protect the security or integrity of the OBT Sites, and to protect the rights, property, or personal safety of OBT, OBT’s Customers or others.

Customer Choices

A Customer may, of course, decline to submit personally identifiable information through the OBT Sites, in which case OBT may not be able to provide certain services to such Customer. A Customer may update or correct the Customer’s personal profile information and email preferences at any time by visiting the My Info page from within the Customer’s account. Please note that media files uploaded by Customers to the OBT Sites remain subject to our Terms of Service.

To protect a Customer’s privacy and security, OBT takes reasonable steps (such as requesting a unique password) to verify a Customer’s identity before granting profile access or making corrections. A Customer is responsible for maintaining the secrecy of the Customer’s unique password and account information at all times.

Please contact OBT with any questions or comments about this Privacy Policy, Customer personal information, Customer consent, or Customer opt-in or opt-out choices by e-mailing OBT via the SesameVault contact form found at http://sesamevault.com/contact.

OBT’s Commitment To Data Security

OBT uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of a Customer’s personal information. OBT cannot, however, ensure or warrant the security of any information that a Customer transmits to OBT, which transmission is at the Customer’s own risk. Once OBT receives a Customer’s transmission of information, OBT makes commercially reasonable efforts to ensure the security of our systems. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.

If OBT learns of a security systems breach, then OBT may attempt to notify the Customer electronically so that the Customer can take appropriate protective steps. OBT may post a notice on the OBT Sites if a security breach occurs. Depending on where a Customer is located, a Customer may have a legal right to receive a Notice of a security breach in writing. To receive a free written notice of a security breach (or to withdraw a Customer’s consent from receiving electronic Policy) a Customer should notify OBT e-mailing OBT via the SesameVault contact form found at http://sesamevault.com/contact.

Special Note to International Customers

The OBT Sites are hosted in the United States and are primarily intended for and directed to Customers in the United States. If a Customer is accessing the OBT Sites from the European Union, Asia, or any country outside of the United States with laws or regulations governing personal data collection, use, and disclosure, that differ from United States laws, Customers are advised that through the Customer’s continued use of the OBT Sites, the Customer is transferring personal information to the United States, and agrees that this Privacy Policy, OBT’s Terms of Service, use of the OBT Sites and transfer of personal information related to such use is governed by the laws of the United States.

In the Event of Merger or Sale

In the event that OBT is acquired by or merged with a third party entity, OBT reserves the right, in any of these circumstances, to transfer or assign the Customer information OBT has collected from OBT’s Customers to such third party entity as part of such merger, acquisition, sale, or other change of ownership or control.

Changes and updates to this Privacy Policy

This Privacy Policy may be revised periodically and this will be reflected by the date last revised below. Please revisit this page from time to time to stay aware of any changes. In general, OBT only uses a Customer’s personal information in the manner described in the Privacy Policy in effect when OBT received the personal information provided by the Customer. However, a Customer’s continued use of the SesameVault Service and OBT Sites constitutes the Customer’s agreement to this Privacy Policy and any future revisions.

Date Last Revised: This Privacy Policy was last revised on March 31, 2009.

Questions or Comments: Any questions about this Privacy Policy should be submitted e-mailing OBT via the SesameVault contact form found at http://sesamevault.com/contact.