This Privacy Policy explains how MergeCom collects, uses, discloses, and protects personal information when you visit our website, use our applications and Office add-ins, participate in a workspace, or contact us.
1. Information we collect
We collect account and contact information, organization and workspace details, billing information, support and sales communications, and technical information about how devices and browsers interact with the services. Workspace activity may include version, review, approval, access, and administrative events needed to operate and secure the service.
2. Customer content
Files, comments, and other content placed in a workspace remain customer content. MergeCom processes customer content only to provide, operate, secure, and support the services as directed by the customer. We do not sell customer data, use private customer documents for advertising, or use customer files to train shared AI models.
3. How we use information
We use information to provide accounts and workspaces; process requested document operations; maintain version and review history; authenticate users and enforce permissions; respond to support, sales, security, and legal requests; process payments; monitor reliability and security; improve the services; and meet legal obligations.
4. How we disclose information
We may disclose information to service providers that process it under contract on our behalf, to workspace administrators and authorized collaborators, when a customer directs us to do so, in connection with a corporate transaction, or when required to comply with law and protect rights, safety, and security. We do not sell personal information.
5. Subprocessors and international transfers
MergeCom may use subprocessors to deliver infrastructure, communications, payment, support, and other service functions. Where information is transferred across borders, MergeCom uses appropriate contractual and legal safeguards. See our Subprocessors page or request our DPA for more information.
6. Security
MergeCom uses administrative, technical, and organizational safeguards designed to protect personal information and customer content. No system is completely secure, so customers should also protect credentials and configure workspace access appropriately. More information is available on our Security & Trust page.
7. Retention and deletion
We retain information for as long as needed to provide the services, maintain legitimate business records, resolve disputes, enforce agreements, and comply with law. Customer content is deleted according to documented retention and deletion procedures after an account or agreement ends, subject to limited legal, security, and backup retention requirements.
8. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information. You may also withdraw consent where processing relies on consent. Workspace users should first direct requests about customer-controlled information to their organization. We may verify a request before responding.
9. Cookies and similar technologies
MergeCom may use cookies and similar technologies that are necessary for authentication, security, preferences, and service operation. Where optional analytics are used, available browser or consent controls may be used to manage them.
10. Children
The services are intended for organizations and are not directed to children. We do not knowingly collect personal information from children in violation of applicable law.
11. Changes to this policy
We may update this policy as our services and legal obligations change. We will post the revised policy and update the date above, and will provide additional notice when required by law.
12. Contact us
To ask a privacy question or exercise a privacy right, use the MergeCom support page. Enterprise customers may also use the contact process in their agreement.