Sproutvideo is currently GDPR and CCPA-compliant.
Data Subject and Consumer Rights
Under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), individuals have certain rights with regard to their personal data. These rights may vary depending on the regulation.
For GDPR, these rights include the right to access their personal data and obtain a copy of it, the right to correct any inaccurate data, and the right to have their data erased in certain circumstances. Individuals also have the right to limit the processing of their data, receive it in a portable format, and object to its processing under certain conditions. Additionally, individuals have the right not to be subject to decisions based solely on automated processing that significantly affect them.
For CCPA, these rights include the right to know what personal data is being collected about them, the right to request the deletion of their personal data, and the right to opt out of the sale of their personal data. Individuals also have the right to access their personal data, request that it be corrected, and receive it in a portable format.
In the case of SproutVideo, when a viewer has given their email address to you through our lead capture feature, we can identify which of your videos they’ve watched, what parts they watched, and when they watched them. All of this data is available for export either through our API or our data export tools. In the future, we will be adding tools to facilitate the deletion of user data both through our API and from within your account.
Data Processing Addendum
SproutVideo provides a Data Processing Addendum (DPA) for customers processing personal data in compliance with GDPR and CCPA. You can sign and download a copy of our DPA here.
Video as Personal Data and Personal Information
The General Data Protection Regulation (GDPR) defines personal data as any information that pertains to an identified or identifiable individual, while the California Consumer Privacy Act (CCPA) characterizes personal information as data that identifies, relates to, describes, can be associated with, or can be linked with a specific consumer or household. This means video that features people or their personal information falls under the categories of personal data and personal information. In the event that you receive a request to delete an individual or their information from such video, you can choose to either delete the entire video or remove the individual from the footage through editing.
Our Replace Video feature makes it easy to replace that video permanently and immediately where it’s displayed.
If you delete a video from your SproutVideo account, it will be permanently removed from all of our systems immediately.
Privacy Mode for our Video Player
We’ve introduced a special setting for our video player that solely captures fully anonymized viewing data. This is achieved by disabling session tracking, disabling identity cookies, and anonymizing the IP addresses of your viewers. By default, you can enable Privacy Mode for all your media, and we offer a way to programmatically turn off Privacy Mode when a visitor has given their explicit consent to being tracked. For example, if you have a cookie consent banner on your website, clicking the opt-in button would prompt our player to enable session tracking.
For more information, you can refer to the documentation on Player Privacy Mode. Please note that Privacy Mode isn’t mandatory for GDPR compliance, but it’s a valuable tool for limiting the data you collect about individual visitors and users.
Consent for Lead Capture
Under the GDPR, when consent is required, it must be requested in an intelligible and easily accessible form, using clear and plain language. With this in mind, it’s important that if you’re using our lead capture feature to collect personal data about your viewers that you include a privacy policy URL in your “Viewer Privacy Options” settings. Your privacy policy must include details about how the PII you are collecting will be used. SproutVideo will display a link to your privacy policy in the player and/or on the page whenever you enable options to collect PII from your viewers.
For more information on consent under GDPR, refer to:
- Overview of consent under GDPR
- GDPR Article 7 - Conditions for consent
- GDPR Recital 32 - Conditions for consent
Breach Notification
In the event of a data breach involving personal data or personal information, we will contact you by email. We will also post any incidents to https://status.sproutvideo.com, where you can subscribe for updates.
List of Data Sub-processors
Current as of: Oct 5, 2023
| Entity Name | Entity Type | Entity Location |
|---|---|---|
| Amazon Web Services, Inc. | Cloud Services Provider | USA |
| Authorize.net | Payment Processor | USA |
| Elasticsearch B.V. | Search Provider | The Netherlands |
| FullStory, Inc. | Web Analytics Services | USA |
| Google, Inc. | Web Analytics Services | USA |
| Help Scout PBC | Customer Support Platform | USA |
| Hubspot, Inc. | Marketing Automation Services | USA |
| MailChimp | Marketing Automation Services | USA |
| Mixpanel, Inc. | Web Analytics Services | USA |
| MogoDB, Inc. | Cloud Database Provider | USA |
| Mux, Inc. | Live Video Streaming Provider | USA |
| Twilio, Inc. | Customer Communications Provider | USA |
| TYPEFORM S.L | Customer Feedback Platform | Spain |
Questions
For questions or inquiries related to data privacy, CCPA, and GDPR, please contact us at support@sproutvideo.com.
Other articles in the Account Related Questions section:
