This Privacy Statement (this “Privacy Statement”) explains how information about, and/or that directly identifies, you or makes you identifiable (“personal information”) is collected, used and disclosed by Coda Project, Inc. (“Coda,” “we” or “us”) in connection with our website at
(the “Site”), our mobile or tablet-based applications (“Apps”), and productivity application services offered in connection with the Site (collectively, with the Site and the Apps, the “Services”) and how you can exercise your privacy rights.
We recommend that you read this Privacy Statement in full to ensure you are fully informed. However, if you only want to access a particular section of this Privacy Statement, then you can click on the relevant link on the sidebar to jump to that section.
What does Coda do?
Coda is the all-in-one interactive documents platform that brings words, data, and teams together. We are headquartered in the United States and our website is located at
or other services agreement to use the Services, we act as a processor of the personal information that is provided to Coda via use of the Services, and we contractually commit ourselves to process such information on behalf and under the instruction of the applicable user, who is the data controller. This Privacy Statement does not apply to such processing and we recommend you read the Privacy Statement of the applicable user, if their processing concerns your personal information.
In all other cases, we are the controller of your personal information, including information we process in connection with your use of the Services. This Privacy Statement describes how we process your personal information in such cases.
Information We Collect, and How We Collect It
Information That You Voluntarily Provide
We collect personal information from you. The categories of information we collect can include:
Registration information. We collect personal and/or business information that you provide when you register for an account to use the Services. We may also collect such information when you register for certain events, such as webinars, video and other informational sessions, talks, etc. This information may include your name, email address, and password. In some circumstances, such as where you are an employee of a customer, we may also collect business related information about you, such as your job title, company name and business contact details.
Information collected through the Use of the Services. After registration, you may create, upload or transmit files, documents, data or information as part of your use of the Services (collectively, “User Content”). User Content and any information contained in the User Content, including personal information you may have included, is stored and collected as part of the Services. You have full control of the information included in the User Content.
Payment information. If you make a purchase or payment on the Site, such as for a subscription, we collect information provided in connection with your purchase or payment, such as your credit card and payment-related information, including your billing address.
Troubleshooting and support. If you contact us for support, we will collect the information you provide us and other details that help us provide support, such as contact or authentication information, data about the state or condition of your device(s), or the content of your chats and other communications with Coda.
Inquiries and feedback. If you contact us, we will collect the information that you provide us, such as your contact information and the contents of your communication with us.
We use this information to operate, maintain, improve and provide to you the features and functionality of the Services, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you. Please see the section "How We Use Information" for more detailed information about the purposes for which we process your information.
You are free to choose which personal information you want to provide to us or whether you want to provide us with personal information at all. However, some information, such as your name, address, payment information and information on your requested Services may be necessary for the performance of our contractual obligations.
Information from Third-Party Sources
We also collect and receive information about you from third-party sources. This typically includes the following third parties:
Third-party sites: When you interact with the Services through third party sites and services, such as when you login using an account or credentials from a third party service, share or export User Content from the Services with third party services, or integrate the Services with third party services, we may receive information from those websites and services. For example, when you login using an account or credentials from a third party service such as Google, we may receive information such as your name, email address, access tokens, and other information related to your account with the third party service. When you create, share or export User Content from the Services vice with third party services, we may receive information such as user names, IP addresses, device identifiers, profile information, contacts, or e-mail addresses. When you integrate the Services with third party services, we may receive information such as user names, IP addresses, device identifiers, profile information, contacts, or e-mail addresses. We also may receive any other information that a third party site or service shares with us (or that you choose to allow it to share with us). The data we receive may depend upon your privacy settings with the site or service, though we do not control those settings or promise they will be effective. You should always review and customize your privacy settings with sites and services before using them in connection with the Services.
Third-party information providers: We may obtain information from other sources, such as third-party information providers, or publicly available sources, and combine this with information previously collected. This helps us update, expand, and analyze our records, identify new customers and opportunities, and create more tailored advertising to promote services that may be of interest to you. For example, we collect personal information (such as your contact details, job title, company, interests social media profiles from joint marketing partners, public databases, data providers, and social media platforms. In these cases, our Privacy Statement governs the handling of the personal information we obtain and combine with the information we hold about you.
Information That Is Automatically Collected
We, and our third party partners, also automatically collect information about you and any computer or device you use to access the Services, read our emails, or otherwise engage with us. We collect this information through tracking technologies, such as cookies, web beacons, and clear gifs. Please see the section below headed "Cookies and Similar Technologies" for more information about cookies and similar tracking technologies that we use and the choices available to you.
Some of the information we collect, and the ways we collect it, include information about your computers, devices, applications and networks, including your Internet Protocol (IP) address (or the proxy server you use to access the internet), unique device identifiers; your browser settings and specification; and information about how you use the Services (e.g., the pages you view, the links you click, number of clicks, features and functionalities you utilize, how frequently you access the Services, the site from which you came and the site to which you are going when you leave our Services, whether you open emails or click the links contained in emails, whether you access the Services from multiple devices, and other actions you take on the Services. We may collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Service and to understand more about the demographics of our users. We may also work with third party partners to employ technologies, including the application of statistical modeling tools, which attempt to recognize you across multiple devices.
We may also record log file information each time you access the Services. This information may include information such as: your requests or actions; IP address; browser type; unique device identifiers; information about your computer or device; number of clicks; how you interact with links, features, or functionalities on the Services; and other such information.
The information we collect automatically is used to:
provide, improve, or enhance the Services;
diagnose or fix technology problems;
analyze overall trends to help us improve performance of the Services, including to assess and improve user experience of the Services and identify future opportunities for development of the Services,
review compliance with applicable usage terms to assess capacity requirements, to identify user opportunities
maintain the security of the Services; and
provide custom, personalized content and information, including targeted content and advertising to promote Coda and the Services.
Cookies and similar tracking technologies
As explained above, Coda and its third-party partners use tracking technologies such as cookies, web beacons and third-party analytics tools to automatically collect information that may contain personal information from your computer or mobile device as you navigate the Services or interact with emails we have sent as further described above. This includes:
Clear GIFs. We may employ clear GIFs (also known as web beacons or pixel tags) alone or in conjunction with cookies. Clear gifs are clear electronic images that can recognize certain types of information on your computer, such as cookies, when you viewed a particular website or service tied to the clear GIF, and a description of a website or service tied to the clear GIF. This allows us to understand how you interact with links, features, or functionalities of the Services; and with the emails Coda sends you.
Third Party Data Collection and Online Advertising. We may share, or we may permit third-party online advertising networks, social media companies and other third-party services, to collect information about you, your computer or device when you visit or use the Services, open emails and otherwise interact with us. These third-party online advertising networks, social media companies, and other third-party services collect information about your use of our Site over time so that they may play or display ads, on other devices you may use, and on other websites, apps, or services. Typically, though not always, the information we share is provided through cookies, social media plug-ins or similar online data collection technologies, which recognize the device you are using and collect information, including click stream information, browser type, time and date you visited the site, and other information. We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research.
Google Advertising. We utilize certain forms of display advertising and other advanced features through Google Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Site. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences.
How We Use Information
We collect, use, process, combine, retain, and store personal information and information that we collect or receive for a variety of purposes, in each case, as may be described in this Privacy Statement, when we collect your information, or as otherwise disclosed to you as part of our Services, including the following:
For our business activities, including to provide and operate the Services and to tailor certain features and functionality of the Services to your needs and preferences. For example, we may process your contact details to allow you to register an account with us.
To process your payment when you subscribe to the Services or otherwise may payment to Coda;
To communicate with you and respond to your requests, such as to respond to your inquiries, requests or other questions, contact you about changes to the Services, and communicate about account related matters such as confirmations, invoices, expiration and renewal notices, and technical notices;
To improve our Services. We may review and use certain information, including, for example, the manner and methods through which you use or interact with the Services, for our analytics and research purposes, and to improve our Services or to develop new features products, services, or other offerings. We may also use User Content for analytics and research purposes, including, for example, to understand how you use the Coda Service, and to improve the Coda Service and provide you with a customized experience.
For marketing purposes, including, for example, to send you marketing newsletters or emails, telemarketing calls, SMS or push notifications, information and updates on our products or services we think that you may be interested in, in accordance with your marketing preferences. Please see the "Your Privacy Rights" section, below, to learn how you can control the processing of your personal information by Coda for marketing purposes.
To display personalized advertisements and content. We may process your personal information to conduct marketing research, advertise to you, provide personalized information about us on and off the Services, and to provide other personalized content or experience based on your activities and interests to the extent that you have provided your prior consent where we are legally required to obtain such consent. For these purposes, we may link or combine information about you with other personal information we get from third parties, to help understand your needs and provide you with better and more personalized service or content. Please note that we do not use User Content to serve you ads, and we do not share User Content with any third parties for marketing or advertising purposes, unless you have explicitly submitted it to us for that purpose.
To manage event registrations, seminars, panels, discussions and other event attendance. We may process your personal information to plan and host events or webinars for which you have registered, inquired about, or that you attend, including sending related communications to you.
To enforce this Privacy Statement, deter against fraudulent, unauthorized, or illegal activity, to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
To comply with contractual and legal obligations and requirements;
To fulfill any other purpose for which we inform you when you provide your personal information; and
For any other lawful purpose, or other purpose that you consent to.
Sharing of Information
We also share, transmit, disclose, grant access to, make available, and provide personal information with and to third parties, including to:
Service providers, subcontractors, partners, vendors, consultants, and other third parties that help us provide, operate, improve and secure the Services or that otherwise assist us with any of the purposes noted in this Privacy Statement, including by performing services on our behalf such as, enriching our marketing and sales database, sending marketing communications about our Services, processing payments, sending postal mail, providing back-office services (e.g., IT services), or measuring site traffic. These entities are bound by contractual obligations to keep personal information confidential and can use it only for the purposes for which we disclose the information to them.
Our affiliates, parent companies, subsidiaries, and other related companies, all for the purposes noted in this Privacy Statement, including to fulfil requests you have made via our Services or for user support, marketing, technical operations, and account management purposes;
Our marketing and advertising partners in accordance with your marketing choices and preferences. We may also partner with third party advertising networks, exchanges and social media platforms to display advertising on the Services and third party websites and we may share personal information with them for this purpose. To turn off certain tracking technologies, click
Third parties to respond or comply with, in our sole discretion, a court order, subpoena, law enforcement or other government request (with or without notice to you, in our discretion) under applicable law;
Buyers, successors, or others in connection with a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by us may be among the assets transferred;
Other third parties with your consent; and
Third parties, in our discretion, to: (i) satisfy any applicable law or regulation, (ii) enforce this Privacy Statement, including the investigation of potential violations thereof, (iii) investigate and defend ourselves against any third party claims or allegations, or (iv) protect against harm to the rights, property or safety of us, the Service, other Service users, or third parties (including financial loss, or in connection with preventing fraud or illegal activity, and/or to enforce our Terms of Service).
Additional Limits on Use of Your Google Information
Our Service uses certain Google services, such as the Google Gmail API. You can connect your Gmail account using OAuth authentication, a secure mechanism to give Coda access to your Google account data without letting it know your password. Notwithstanding anything else in this Privacy Statement to the contrary, if you provide Coda access to your Google Gmail data, Coda’s use of that Google Gmail data will be subject to the following additional restrictions:
The Services will only use access to read, write, modify, or control email messages, metadata, headers, and settings to provide a web email client that allows users to compose, send, read, and process emails.
The Services will not transfer this Gmail data to others unless doing so is necessary (i) to provide and improve the features of the Services we provide to you, (ii) to comply with applicable law, or (iii) as part of a merger, acquisition, or sale of assets.
We will not use or share this Gmail data for serving advertising, including retargeting, personalized, or interest-based advertising.
We will not allow humans to read this data unless:
we have your affirmative agreement for specific messages,
doing so is necessary for security purposes (such as investigating a bug or abuse)
It is necessary to comply with applicable law,
The data has been aggregated and anonymized and is used only for our own internal operations purposes.
Our Service's use of information received, and the Service's transfer of information to any other app, from Google APIs will adhere to
Legal Basis for Processing your Personal information (for European Residents Only)
If you are located in the European Economic Area or in the United Kingdom, note that we will only process your personal information if we have a legal basis to do so. The legal basis on which we rely depend on the personal data concerned and the specific context in which we collect it. Generally, we rely on the following legal bases:
Contractual necessity. We process your personal information as a matter of “contractual necessity”, meaning that we need to process the data to perform a contract with you, such as to provide you with the Services. When we process data due to contractual necessity, failure to provide such personal data will result in your inability to use some or all portions of the Services that require such data.
Legal Obligation, vital or public interest. From time to time we may also need to process personal information to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.
Legitimate interest. We may also process your personal informationin our legitimate interests (provided these are not overridden by your interests and fundamental rights and freedoms - this includes our own legitimate interests and those of other entities and branches in our group of companies) such as:
to contact you and respond to your requests and inquiries;
for business administration, including statistical analysis;
to maintain, customize and improve the Services;
to promote Coda and the Services;
to protect Coda's interests and rights; and
for fraud prevention and detection and to secure our Services.
Consent. We may also process your personal data on the basis of your freely given, specific, informed and unambiguous consent. When we process personal information based on your consent, it will be expressly indicated to you at the point and time of collection.
For information about choices that you may have about the information collection and use described in this Section, see the “Your Privacy Rights” Section below.
Your Privacy Rights
We strive to allow you to exercise your privacy rights and to give you choices about how your personal information is used. These choices include the following:
Marketing E-Mails. As explained above, we may send you marketing communications from time to time, in accordance with your marketing preferences. If you do no longer wish to receive them, you can opt-out at any time by following the unsubscribe instructions in the e-mail or the communication, as applicable, or by contacting us at
or using the contact information provided under the section headed "Contacting Us" below. We will honor your request within 10 business days. If you opt-out, we will still send you communications for service or transactional purposes, such as for communications about your account or subscription, performance, maintenance windows, downtime, and/or responses to your inquiries or requests.
Information Access, Correction andDeletion. If you have registered for an account with the Services, you can change registration information using your Google profile settings. If there is personal information in User Content, you can use the features and functionality of the Services to edit or delete the personal information or User Content. Please note that not all personal information is maintained in a format that you can access or change. If you would like to request access to, or correction or deletion of personal information, you may send your request by emailing
or by using the contact details provided under the section headed "Contacting Us" below. We will review your request and we may require you to provide additional information to identify yourself.
If you are a Nevada resident, you may ask Coda to add you to our opt-out list for possible future sales of certain information we have collected or will collect about you. To submit such a request, please contact our designated request email address:
If you are a California resident, please review the section titled “For Residents of California” below. California residents may be able to exercise additional rights granted by California law in relation to the Personal Information that we have collected (subject to certain limitations) as described in our California Notice.
If you are a resident in the European Economic Area or United Kingdom, you have the following additional rights in respect to your personal information that we hold:
Right to object. You have a right to object to the processing of your personal information based on our legitimate interests where there are grounds relating to your particular situation. You can object to the processing of your personal information for direct marketing activities for any reason whatsoever.
Right of access. The right to obtain access to your personal information. If you have registered for an account with the Services, you can also access your information contained in your account by signing in to your account and editing your information as desired.
Right to rectification. The right to obtain rectification of your personal information without undue delay where that personal information is inaccurate or incomplete. If you have registered for an account with the Services, you can also access and correct your information contained in your account by signing in to your account and editing your information as desired.
Right to erasure. The right to obtain the erasure of your personal information without undue delay in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed. If you have registered for an account with the Services, you can also delete the information contained in your account by signing in to your account and requesting deletion of your account. More information on account deletion is available here: (https://help.coda.io/en/articles/1948613-how-can-i-delete-my-account)
Right to restriction. The right to obtain restriction of the processing undertaken by us on your personal information in certain circumstances, such as, where the accuracy of the personal information is contested by you, for a period of time enabling us to verify the accuracy of that personal information.
Right to portability. The right to portability, where applicable, allows you to move, copy or transfer personal information easily from one organization to another.
In addition to the above listed rights, as a European resident, you also have the right to lodge a complaint with your local data protection authority. Further information about how to contact your local data protection authority is available
. Please note that we will respond to your request in accordance with applicable European privacy laws.
We maintain appropriate technical and organizational security measures to help protect personal information that we collect, but we do not guarantee that personal information will be completely protected. For example, the transmission of information via the Internet is not completely secure. Any transmission of personal information by you is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services, including the illegal acts of third parties (such as criminal hacking).
The safety and security of your information also depends on you. For example, it is important to keep your password for your account for the Service confidential. We also recommend that you log out of the Services when you are done using it. If you believe that any account credentials for the Service have been compromised, please contact us immediately at
. You can find more detailed information about Security at Coda at (https://coda.io/trust/security).
Data Storage and International Transfer
Your information may be transferred, stored and processed in the United States or any other country in which Coda or its subsidiaries, affiliates or service providers maintain facilities which may not offer the same level of protection of personal information as your country of residence. However, we have taken appropriate safeguards to ensure that your personal information will remain protected in accordance with this Privacy Statement.
If you are located in the European Economic Area, Switzerland or United Kingdom, please note that these safeguards include implementing the European Commission's Standard Contractual Clauses with our group companies and applicable partners, or vendors and users.
We tend to keep personal information for as long as we have an ongoing legitimate business need to do so (for example, to operate the Services, for the security of the Services, to comply with your requests, or comply with applicable law) and for a period consistent with the purposes for which we have collected the information. When we have no ongoing legitimate business need to process your personal information, we may either delete or anonymize your personal information. If it is not possible to delete or anonymize your information (for example, because your personal information has been stored in backup archives), then we will securely store your personal information until we can safely delete or anonymize such information., or as otherwise required to operate the Service, comply with your requests, or comply with applicable law.
Information from Children
The Services are not directed to children, and we do not knowingly collect personal information from children. If you are a parent or guardian of a child, and believe that your child may have provided us with personal information, please contact us at
and we will use commercially reasonable efforts to delete that information.
Third Party Websites
The Services may provide links to third party websites and online services. This Privacy Statement does not describe the privacy practices of those websites or services. Please review the privacy policies or privacy statements of those websites or services before providing personal information to them.
Updates to This Privacy Statement
We may amend this Privacy Statement from time to time. When we do so, we will update the “Last Revision Date” at the end of this Privacy Statement and take appropriate measures to alert you consistent with the significance of the changes we make. We will obtain your consent to any material changes if and where this is required by applicable data protection laws.
If have questions about this Privacy Statement or our privacy practices, please contact us at
or 444 Castro St, Suite 1200, Mountain View, CA 94041. If you are located in the European Economic Area or in the United Kingdom, the data controller of your personal information is Coda Project, Inc.
Last Revision Date
This Privacy Statement was last revised on January 31, 2022.
For Residents of California
Scope of Disclosures
This additional California Notice (this “CA Notice”) supplements the information contained in our Privacy Statement above and applies solely to individual residents of the State of California (“consumers” or “you”).
This CA Notice provides additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”).
Unless otherwise expressly stated, all terms in this CA Notice have the same meaning as defined in our Privacy Statement or as otherwise defined in the CCPA.
Collection and Use of Personal Information
When we use the term “personal information ” in this CA Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you or your household. This term does not include aggregated or deidentified information that is maintained in a form not reasonably capable of being associated or linked to you.
Categories of Personal Information collected by Coda
In the last 12 months, we have collected the following categories of personal information:
Identifiers, including name, email address, home address, etc.
Commercial Information, including name, credit or debit card information, address, telephone number, etc.
Internet/Network Information, including your IP address, interaction with our website, page loads, clicks, etc.
Geolocation Data, including your IP Address, city, state, country, etc.
Profession/Employment Information, including job title and current employer.
Inferences, such as behavior, responses to surveys, product usage, etc.
For more detailed information about the Personal Information we collect, please see the "Information We Collect" Section of our Privacy Statement.
Purposes for which Coda uses your Personal Information
In the last 12 months, we have used Personal Information for the purposes described in the "How We Use Information" section of our Privacy Statement.
Disclosure of Personal Information
In the last 12 months, we have disclosed Personal Information with third parties for our business purposes as described under the Sharing of Information section of this Privacy Statement.
*Note about “Sales” of information: We utilize third-party providers to engage in online analytics and targeted advertising involving the collection of personal information, including Identifiers, Internet/Network Information, and Geolocation Data, directly from your browser or device through cookies or related technologies when you visit or interact with our online services or otherwise engage with us online. We use these third-party providers to analyze and optimize our online services, provide more relevant content and ads to users of our online services and other third parties, and perform other services related to analytics or advertising consistent with this CA Notice and our Privacy Statement. These third-party businesses may use the information they collect directly from you for their own purposes in accordance with their own privacy notices, which may include using this information for services provided to other third parties, including other parties operating in advertising networks.
To the extent that these practices qualify as “sales” under the CCPA, you have the right to opt out of such "sales" as described below.
Your California Privacy Rights
Consumers who are California residents (and not representatives of businesses, whether those businesses are our customers or others) have the right to know certain information about our data practices in the preceding 12 months. In particular, they have the right to request the following from us:
The categories of personal information we have collected about them;
The categories of sources from which the personal information was collected;
The categories of personal information about them that we disclosed for a business purpose or sold;
The categories of third parties to whom the personal information was disclosed for a business purpose or sold; and
The business or commercial purpose for collecting or selling the personal information.
In addition, in certain circumstances California consumers have the right to ask us to delete the personal information we have collected from them.
How To Exercise Your Right to Know or Right to Deletion
To exercise your right to know and right to deletion, please submit a request by:
We will need to verify your identity before processing your request. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to exercise the right to know and the right to deletion, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline a request to exercise the right to know and right to deletion, particularly where we are unable to verify your identity.
In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf where (i) you provide sufficient evidence to show that the requestor is an authorized agent with written permission to act on your behalf and (ii) you successfully verify your own identity with us.
How To Exercise Your Right to Opt Out
To the extent our third-party providers’ collection of information from visitors of our website constitutes a “sale” under the CCPA, you can access additional information about the choices and opt-out options you have in relation to those practices
We do not sell the personal information of consumers we know to be less than 16 years of age.
Updates to This CA Notice
We will update this CA Notice from time to time. When we make changes to this CA Notice, we will change the "Last Revision Date" date set forth above. If we make material changes to this CA Notice, we will notify you by email to your registered email address, by prominent posting on our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.
If have questions about this CA Notice or our privacy practices, please contact us at