Checkbox.com

Privacy Policy

last updated October 2, 2014

Overview and Contact Info

This policy demonstrates our firm commitment to online privacy. Information obtained from visitors and customers will only be used for internal purposes. At no time will we sell, rent, or otherwise distribute your personal information or survey data to a third party.

When you register with us, we require that you provide correct contact information, which may include your name, email address, phone number, and other types of information. The information you provide allows us to send you periodic reminders about your account status and contact you regarding technical issues. If you register with Checkbox in error, please contact us and we will delete your record from our database.

You may contact Checkbox concerning this privacy policy and our privacy practices at the following: 

Mailing Address:

Checkbox Survey, Inc.
44 Pleasant St., Ste. 110
Watertown, MA 02472 USA 

Phone Number: 1-617-231-8890
Email Address: info@checkbox.com

Use of Our Website

Newsletters and Marketing Emails

When you register with us and provide us your email address, we may periodically send marketing notices and/or newsletters to that email address. You may opt-out of receiving these emails at any time by following the Unsubscribe link located in the footer of these emails or  by contacting us via email at sales@checkbox.com We will process your request as soon as possible.

Order Forms

When you purchase our products or services online, we collect your contact and payment information (like name, postal address, email address, and credit card number). We use this information to create/update your account, verify your identity, authorize payments, and to send you a confirmation of your payment. We will share your credit card information via a secure Internet connection with our order processing center for the sole purpose of processing your order or refund.

Requesting/Updating Your Information

We do not sell, share, or distribute any information that we collect from you on the trial registration or any other contact form. If you have questions or concerns about this registration process, please contact us. Registered users may request a copy of their information on file with Checkbox by contacting the company via phone at 1-617-231-8890.

Log Files

As is true of most Web sites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp and clickstream data.

We use this information, which does not identify individual users, to analyze trends, to administer the site, to track users’ movements around the site and to gather demographic information about our user base as a whole.

We do not link this automatically-collected data to personally identifiable information.

Cookies

A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. We use cookies on this site. We do not link the information we store in cookies to any personally identifiable information you submit while on our site.

We use persistent cookies. A persistent cookie remains on your hard drive for an extended period of time. You can remove persistent cookies by following directions provided in your Internet browser’s “help” file. More information about cookie technology can be found on the Microsoft® website at: http://www.microsoft.com/info/cookies.mspx.

We set cookies when you visit the Checkbox web site, use our Checkbox Online application, and take a Checkbox Online survey. Cookies are used to:

  •     Identify whether a user is logged in, for security purposes, and to allow the use of software features
  •     Allow us to see how visitors use our site (these may be third party cookies like Google Analytics)
  •     Identify a unique survey response when you are a respondent taking a survey

If you reject cookies, you may still use our site, but your ability to use some areas of our site, such as online surveys, will be limited.

Security Measures

We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

If you have questions about security on our Web site, you can send us an email at info@checkbox.com.

Checkbox Online Survey & Data Security

Survey Security Overview

At no time will we sell, rent, or otherwise distribute your personal information or survey data to a third party.

When you publish your survey on our Checkbox Online servers, we will provide you with a unique URL to display your survey. We will not provide this URL to any other person or entity, but we will provide your survey to any web browser requesting your unique URL. We may review your survey contents for violations of our Use Policy. If we determine your survey is in violation of our Use Policy, we will attempt to contact you and reserve the right to delete your survey and results from our systems.

We reserve the right to disclose your personally identifiable information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on our Web site.

If we decide to change our privacy policy, we will post those changes to this privacy statement and other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here or by means of a notice.

If you have any questions about this privacy statement, the practices of this site, or your dealings with this Website, please feel free to contact us through the contact information listed at the top of this page.

Tracking Technology

Cookies: A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. Like most other websites, we use cookies to collect data about visitors. We do not link the information we store in cookies to any personally identifiable information you submit while on our site.We use persistent cookies. A persistent cookie remains on your hard drive for an extended period of time. You can remove persistent cookies by following directions provided in your Internet browser’s “help” file. More information about cookie technology can be found on the Microsoft® website at: http://www.microsoft.com/info/cookies.mspx.We set cookies when you visit the Checkbox web site, use our Checkbox Online application, and take a Checkbox Online survey. Cookies are used to:

  •     Identify whether a user is logged in, for security purposes, and to allow the use of software features
  •     Allow us to see how visitors use our site (these may be third party cookies like Google Analytics)
  • Identify a unique survey response when you are a respondent taking a survey

If you reject cookies, you may still use our site, but your ability to use some areas of our site, such as online surveys, will be limited.

Application Security

  • Development Testing:  Prior to each upgrade or update release of the Checkbox Survey application, all inputs within the administrative interface and within surveys are checked for vulnerabilities to JavaScript and SQL injection attacks. Encryption algorithms are consistently examined for possible security vulnerabilities and are updated as needed to remain in line with current technologies and current known security concerns.In the event of a customer detecting and reporting a security hole or issue, Checkbox will use industry-acceptable and reasonable methods to reproduce and identify said issue. Once identified, Checkbox will use commercially available and reasonable methods to develop and test a fix for the issue, and will release the fix with the next subsequent upgrade or update release. If Checkbox deems the issue to be a critical security vulnerability, a security “hotfix” may be released to resolve the issue in advance of the next full software release.
  • Hosting Infrastructure: Checkbox utilizes Amazon Web Services cloud based virtual web servers in the United States, Ireland, and Singapore to host its Checkbox Online application.The Amazon hosting infrastructure is scaled in quantity based on anticipated demand using a series of load balancers and Amazon’s Auto Scaling feature.Hosting infrastructure and hosted customer data is protected by a firewall, which limits public access to these instances to only the ports needed to use the service (80/443).Our Amazon customer support includes a monitoring system that detects the presence of a compromised hosting instance. Checkbox support is notified of issues in real time. Amazon’s elastic cloud computing allows Checkbox support to move customer databases to separate cloud computing instances within minutes in the event of a compromised instance or other issue that threatens customer data.Data is backed up on a daily basis, with backups stored on redundant Amazon S3 storage.Amazon AWS’s security policies can be found here: http://aws.amazon.com/security/
  • Customer Responsibilities for Application Security:  Customers of Checkbox, including any users granted access to Checkbox by and on behalf of Customer, are expected to maintain the security of their accounts and account data. This includes, but is not limited to, using sound and reasonable judgment when choosing and storing Checkbox passwords. Checkbox offers password encryption and password lockout features, but it is the responsibility of the Customer to enable and properly configure these features.Customers are also expected to maintain sufficient security and protection of their own servers and systems, and to protect sensitive and confidential survey and user data in their possession. Checkbox offers SSL support to secure the transmission of survey responses, but it is the responsibility of Customers to ensure that surveys are configured to use that feature where appropriate, and that SSL has been configured properly in Checkbox.
  • Notification of Application Security Issues:  Despite best efforts, no software is bug-free and no method of transmission over the Internet or method of electronic storage is perfectly secure. Should Checkbox learn of a security issue within the application, Checkbox will immediately notify all customers potentially affected by the issue.  Customers will be notified individually by email and/or messages will be posted in the customer announcement section of the Checkbox customer support site and in the news section of the Checkbox website, as deemed appropriate.

Information Security

  • Employee Confidentiality:  All employees are required to sign a proprietary and confidential information agreement upon hiring. This agreement is in full force during and following the employee’s term of employment. Terminated employees are given a copy of the signed agreement upon termination.Protection of company and customer information is also covered in the Checkbox Employee Handbook, which all employees are required to review and sign upon hiring.Current security policies are reviewed upon hiring and regularly thereafter at company-wide meetings.
  • System-Level Password Security:  All system-level passwords or passwords that are used to gain access to servers and systems containing sensitive internal and customer data are changed upon termination of any employee that had access to the password(s). We use industry-accepted standards for password generation. In addition, access to servers and systems containing sensitive internal and customer data are restricted to the IP addresses of those employees needing access for support and maintenance purposes.

  • Customer Data: All employees are bound by the terms of their confidentiality agreement to protect the integrity of customer data at all times. There is a zero tolerance policy for negligence or misconduct with regard to customer data. Such negligence or misconduct is grounds for immediate termination.Any modifications to or testing of Checkbox customer databases are done on an in-house server and never on any employee’s personal computer.Customer databases used for testing purposes are immediately deleted from Checkbox servers once testing is complete and data is no longer needed.Non-disclosure agreements required by customers prior to release of customer data to Checkbox are reviewed by the Chief Operating Officer and the employee who will be accessing the data, and are signed by the Chief Operating Officer. NDA’s are filed with customer records.
  • Customer Notification: In the event of an unexpected software outage, hardware, software, or infrastructure failure that leads to service downtime or data loss, or a security breach that compromises customer data, Checkbox will immediately notify all customers potentially affected by the failure.  Customers will be notified individually by email and messages will also be posted in the customer announcement section of the Checkbox customer support site and in the news section of the Checkbox website.

HIPAA Compliance

We strive to maintain data security and confidentiality policies in compliance with HIPAA regulations for all of our Checkbox Online customers. However, certain HIPAA-required security measures are only available with our dedicated Enterprise plan. If you are transmitting or storing personal health information (PHI), you must notify us and follow certain HIPAA compliance procedures, including signing a business associate agreement (BAA) with us and ensuring that certain features such as password lockout restrictions and SSL are available on your account and enabled.

For more information on HIPAA compliance, please contact our sales team at sales@checkbox.com.

Contact Information

Contact Checkbox Survey Solutions at Checkbox Survey, Inc., 44 Pleasant St., Ste. 110, Watertown, MA 02472 USA with questions or problems with this service.