Font Portal and Desktop Applications Privacy Policy:
Last updated: May 23, 2024
This Font Portal and Desktop Applications Privacy Policy applies to the use of the Monotype Fonts Subscription and Monotype Library Subscription for Teams Portals, the Monotype Desktop Application and the SkyFonts™ Desktop Application, each provided by Monotype Imaging Holdings Inc., a Delaware corporation with its principal offices at 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA, and our subsidiaries and affiliates worldwide (collectively, the “Services”). By using the Services, you agree that we may collect, process, parse, store, retain and use your information, including your personal information, in accordance with this Privacy Policy, as revised from time to time. The Privacy Policy is incorporated by reference into our Terms of Use.
What’s Contained in this Privacy Policy?
The following subjects are discussed in this Privacy Policy:
- What information do we collect from you?
- How do we use the information we collect from you?
- How and with whom do we share and disclose information we collect from you?
- What other technologies do we use?
- How can you access and update your personal information?
- Can you ask us to delete your personal data?
- How can you opt-out?
- What rights do you have if you are a California consumer?
- How do we keep your information secure?
- What Services are not covered by this Privacy Policy?
- Do we collect information from children under the age of 13?
- Do we transfer data and do we transfer data across-borders?
- Do we use cookies?
- Do we have a Data Protection Officer?
- How can you contact us?
- Do we make changes to this Privacy Policy and/or our privacy practices?
What information do we collect from you?
When you register for an account on one of our Services (as a customer, an invited user or as an account administrator), update your account information, interact with our salespeople, use or interact with one of our desktop applications, and/or contact our customer service departments we will collect the following information:
- Your full name, username, Services password, e-mail address, telephone number, physical or billing mail addresses, IP address, and if you have contacted us or accessed one of our Services on behalf of a business or other entity, your professional contact information and any relevant details about your business or entity as it relates to you;
We may link information you’ve provided us with other information about you, such as linking your name with your IP address, and we also may link personal information with information we receive about you from third parties. If we link your personal information with any other information collected or received from you or third parties, we will treat that linked information as personal information.
How do we use the information we collect from you?
We may use the information we collect about you for a variety of purposes, such as to:
- ensure compliance with the terms of any agreement you have entered into with us for the Services or a desktop application;
- prevent fraud as it relates to your use of our Services or desktop applications;
- conduct research and analysis related to our business or Services;
- improve our Services and tailor them to your usage or preferences;
- allow you to install and Monotype to de-install fonts from your workstation or other device;
- communicate with you about your account or your use of our Services, including the delivery of customer service;
- enforce our rights or otherwise manage our business;
- send you promotional messages in e-mail or text form that we think will be of interest to you and/or to invite you to events, both in instances where you have opted-in or not opted-out of receiving such messages; and/or
- to send you important messages about your use of our Services or desktop applications.
How and with whom do we share and disclose information we collect from you?
We do not sell or rent your personal information to third parties. We share your personal information with our subsidiaries and affiliates. Also, we deliver certain content for our Services through and/or using third party applications, our or third party programming interfaces, extensions that are hosted on our Services or through other third party websites and/or messaging platforms. When you use our Services, you are authorizing those third parties to receive your information and additionally to potentially share any or all of your information with us, based on your privacy or other settings on that particular third party’s network or platform. The purposes of such information exchange are:
- to conduct research and/or analysis regarding our Services, market trends, our products and other topics; and/or
- to allow service providers to provide their services in connection with some of our Services.
We rely on third party service providers to perform a variety of services on our behalf, and we may disclose your personal information to such service providers, for example business intelligence providers, customer service providers, and research and analytics providers. We do not authorize these third parties’ to use your personal information for purposes other than for which it has been provided, and we do not authorize these third parties to disclose such information to unauthorized parties.
If we share your personal information with any third party, we will require such third party to maintain the confidentiality of your personal information, comply with applicable laws related to the sharing of personal information and we will not authorize those third parties to use personal information that we provide for their direct marketing purposes unless we have explicitly given you the option to opt-in or opt-out of that disclosure. If you are a resident of the State of California, you may ask us at any time to refrain from sharing your personal information with third parties for their marketing purposes.
Please tell us your preference by contacting us at [email protected] or by writing to us at:
Monotype Imaging Holdings Inc.
Attn: Legal Department – Privacy
600 Unicorn Park Drive
Woburn, MA 01801 USA
We use and disclose personal information we believe to be necessary or proper: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal or regulatory processes; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our Terms of Use or Terms and Conditions of Business; (e) to protect our and our subsidiaries and affiliates businesses; (f) to protect our rights, privacy, safety or property, and/or that of our subsidiaries and affiliates, you or other third parties; and (g) to allow us to pursue remedies that may be available to us or to limit damages. In addition, we may transfer personal information and other information to a third party in the event of any financing due diligence, bankruptcy, reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business or assets, or those of our subsidiaries and affiliates.
Sometimes we partner with other companies to run promotions, joint promotions or offer separate third party promotions. When you provide information for these promotions, you may be providing your information or personal information directly to that third party to use for their own marketing purposes. In those instances, their use of your information including all personal identifiable information will be governed by that third party’s privacy policy, and not this Privacy Policy.
Below you will find a list of the third parties that we work with in delivering the Services, what personal data we send to each partner, and the purpose of such transfer:
Analytics Partners | Personally Identifiable Information Transferred | Purpose of Transfer |
Adobe-CJA (Customer Journey Analytics) | Encrypted OAuthID, IP address | Internal Analytics |
Bizible | Name, E-Mail-address, geo-location, IP address, browsing activity, device information | Internal Analytics |
Google Analytics | See description in privacy policy entitled “What other technologies do you use?” | Internal Analytics |
Heap Analytics | See description in privacy policy entitled “What other technologies do you use?” | Internal Analytics |
Payment Gateway and Processing Partners | ||
Stripe | Name, E-mail address, billing address, credit card number, credit card code, credit card expiration, IP address | Customer Payment Processing |
Marketing Partners | ||
Appcues | Name, E-mail address, foundry name, foundry user ID, IP address | Customer Relationship Maintenance, Marketing |
Beamer | Name, E-mail address, foundry name, foundry user ID , IP address, MTF-user ID | Customer Relationship Maintenance, Marketing |
Marketo | Name, address, E-mail address, telephone number | Marketing Automation |
Metadata | Name, E-Mail-address, geo-location, IP address, browsing activity | Customer Relationship Maintenance |
Zoom Webinar | Name, address, E-mail address, telephone number, device information | Customer Relationship Maintenance |
Support | ||
Salesforce Service Cloud | Name, E-mail address, address, telephone number | Provision of Customer Service |
Internal Technology Partners | ||
Algolia | IP address, device and browser information | User Preference Tracking, Analytics |
Amazon Web Services, Inc. | Address, E-mail address, IP address, location, name, telephone number, timestamp | External data storage on Amazon Web Servers |
Auth0 | E-Mail address, SSO information | External SSO service provider |
Cloudflare, Inc. | Address, E-mail address, IP address, location, name, telephone number, timestamp | Web Application Firewall |
Datadog | IP address, geo-location, browser information, device information | Observability/Logging/Monitoring (Web & Desktop App) |
Intercom | First name, last name, E-mail address, IP address | Customer relationship maintenance (customer database), marketing of Monotype products |
Pantheon | IP address, browser information | Monitoring, Analytics |
Planhat | Name, user ID, IP address | Customer Success Platform |
Sentry | Browser information, IP address | Observability/Logging/Monitoring (Web & Desktop App) |
CRM Systems | ||
Salesforce | Name, address, E-mail address, telephone number | Customer relationship maintenance (customer database) |
SAP | Name, address, E-mail address, telephone number, payment information | Customer relationship maintenance (customer database for billing) |
Third parties that process your personal are contractually bound by Data Processing Agreements which ensure that these parties adhere to the standards that we describe in this Privacy Policy.
What other technologies do we use?
Clear gifs
Some or our Services employ a software technology called clear gifs (a.k.a. Web Beacons/Web Bugs), that help us better manage our content and newsletters by informing us what content is effective. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on a user’s computer hard drive, clear gifs are embedded invisibly on web pages and in E-mails and are about the size of the period at the end of this sentence. We do not tie the information gathered by clear gifs to our customers’ personally identifiable information. We use clear gifs in our HTML-based E-mails to let us know which E-mails have been opened by recipients. This allows us to gauge the effectiveness of certain communications and the effectiveness of our marketing campaigns.
Google360 (Google Analytics)
Some of our Services use “Google Analytics” to collect information about use of such Service. Google Analytics collects information such as how often users visit this site, what pages they visit when they do so, and what other sites they used prior to coming to this site. We use the information we get from Google Analytics only to improve the Services. Google Analytics collects only the IP address assigned to you on the date you visit this site, rather than your name or other identifying information. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Although Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you visit the Service, the cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use (as amended for government websites) and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to a Service by disabling the cookie or installing a browser-add-on to deactivate Google Analytics.
Heap Analytics
Some of our Services use Heap Analytics, a web analysis service provided by Heap Inc., 460 Bryant St., Suite 300, San Francisco, CA 94107, USA (‘Heap’). Heap uses cookies, to help the website analyze how users use the website. The information generated by the cookie about your use of the website is transmitted to and stored by Heap on servers in the United States. In the event IP anonymization is activated on such website, your IP address will be shortened beforehand by Heap within member states of the European Union or in other signatory states of the Treaty on the European Economic Area (‘EEA’). A full IP address will be transmitted to a Heap Server in the USA and shortened there only on an exceptional basis. Heap uses this information for the purpose of evaluating your use of a website, compiling reports on website activity for website operators, and providing other services to website operators relating to website activity and Internet usage. You may prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we must advise you that in this case, you might not be able to use all functions a Service to the full extent. You may prevent Heap from recording the data generated by the cookie and pertaining to your use of our Services (including your IP address), or processing these data by disabling cookies in your browser.
How can you access and update your personal information?
We will retain personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or allowed by law. If you have created an online account on one of our Services and would like to update the personal information you have provided to us, you can access your account on the Service to view and make changes or corrections to your personal information. You may also contact us using the methods described in the “How can you contact us?” section of this Privacy Policy to request access or updates to your information. We will try to comply with your request as soon as reasonably practicable.
Can you ask us to delete your personal data?
Yes, you can by sending us an e-mail or mail to the contact provided in the section “How can I contact you?” of this Privacy Policy. However, we may be unable to delete some personal data because we are required to keep it for security reasons, in order to remain in compliance with the laws of certain jurisdictions, and/or to allow us to further identify you as a customer, font designer or foundry, or to provide maintenance to services that we provided through our Services. We will inform you if your data was deleted or if it cannot be deleted.
How do you opt-out?
If you no longer want to receive communications from us, you may opt-out of receiving our communications by clicking the “unsubscribe” link at the bottom of any electronic communication you receive from us, or, if you created an online account when you registered to receive our marketing-related communications, you may log-in to your account on the applicable Service and make changes to your communication preferences. If you are having difficulty unsubscribing from our electronic marketing-related communications using the above methods, please contact us directly using the methods listed in the “How can you contact us?” section of this Privacy Policy.
If you no longer want to receive printed communications from us, please contact us directly using the methods listed in the “How can you contact us?” section of this Privacy Policy. In your correspondence, please indicate the nature and types of the communications you no longer wish to receive. Please allow ample time for us to process your request. However, please note that even if you opt-out from receiving certain communications, we may still need to send you communications about your orders, customer service inquiries, promotions participation and other matters. We also may keep information we have collected about you for our records, our research and other purposes.
Also, please note that if you participated in a promotion that involved a third party, and, as part of that promotion, you agreed to receive future marketing communications directly from that party, you will need to contact that party to opt-out of those communications. This process may be outlined in that third party’s privacy policy.
What rights do I have if I am a California consumer?
In addition to the rights set out in this Privacy Policy, California law, including the California Consumer Privacy Act of 2018 (the “CCPA”), provides for additional rights to California consumers. Your rights as a California consumer are summarized below.
You have the right to request additional information about your personal information, including the categories and specific pieces of personal information we have collected about you, the source of such personal information, the purpose for such collection, and information about how your personal information is shared with third parties.
We will not discriminate against you in the event that you exercise any of your rights as a consumer under the CCPA. If you wish to submit a request under the CCPA, please refer to the ‘How can you contact us?’ section of this Privacy Policy.
How do we keep your information secure?
We and certain third parties we employ to collect or store your information use commercially reasonable organizational, technical and administrative means intended to protect collected, provided, stored and/or transmitted information, including your personal information from loss, misuse and unauthorized access or disclosure. However, no method of Internet or electronic transmission or electronic storage is 100% secure or error-free, so we cannot guarantee absolute security.
By using the Services or providing your personal information to us, you agree that we may communicate with you electronically regarding security, privacy and administrative issues relating to your use of the Services. If we learn of a security system breach, we may attempt to notify you electronically by posting a notice on the Services or sending an E-mail to you. You may have a legal right to receive this notice in writing. To receive free written notice of a security breach involving your personal information (or to withdraw your consent from receiving electronic notice), please contact us using the methods listed in the “How can you contact us?” section of this Privacy Policy.
What Services are not covered by this Privacy Policy?
This Privacy Policy governs only information that we collect through our Services stated at the top of this Privacy Policy. No other Service or product offered by Monotype Imaging Inc. or website owned or operated by Monotype Imaging Inc. is covered by this Privacy Policy.
Do we collect information from children under the age of 13?
We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no part of the Services is directed to children under the age of 13. Children under 13 should not use our Services and should not provide their personal information to us. If you learn that your child or a child for which you are responsible have provided us with their personal information without your consent, you may alert us at [email protected]. If we learn that we have collected any personal information from any child under 13, we will promptly take steps to delete such information and terminate that child’s account.
Do we transfer data and do we transfer data across borders?
Because we operate worldwide, your personal information may be stored and/or processed in any country where we have a facility or in which we engage service providers, including in the United States of America or other jurisdictions. By using our Services, you consent to the transfer of information to countries outside your country of residence, including the United States of America or other jurisdictions which may have different data protection rules than in your country.
Third parties we engage with that process your personal data outside of the EEA are contractually bound to adhere to standards that ensure a data protection standard equivalent to that of the European Union. The third parties are bound by Data Processing Agreements (if an adequacy decision or Data Privacy Framework is available) or Data Processing Agreements which include the EU Standard Contractual Clauses in all other cases. Monotype complies with the Principles for all onward transfers of personal data from the EU, UK and Switzerland, including the onward transfer liability provisions.
By choosing to use the Services or otherwise provide information to us and unless you are a consumer situated in the European Union, you agree that any dispute over privacy or the terms contained in this Privacy Policy will be governed by the laws of the Commonwealth of Massachusetts and the adjudication of any disputes arising in connection with the Services will be in accordance with our Terms of Use.
Do we use cookies?
Cookies are a small text files that are stored in your web browser that allows our Services or a third party to recognize you. Cookies can be used to collect, store and share bits of information about your activities across websites, including on certain of our Services. Cookies are used by us to enable certain functions and to store your preferences (such as language or currency preferences) and analyze the user behavior in order to improve the user experience on our Service.
Our Services uses both session cookies and persistent cookies. A session cookie is used to identify a particular visit to our Services. These cookies expire after a short time, or when you close your web browser after using our Services. We use these cookies to identify you during a single browsing session, such as when you log into our Services. A persistent cookie will remain on your devices for a set period of time specified in the cookie. We use these cookies where we need to identify you over a longer period of time.
We cannot offer our Services without storing cookies at this time. Therefore, if you continue using our Services you will agree to us storing a cookie. However, if you don’t like the idea of cookies or certain types of cookies, you can change your browser’s settings to delete cookies that have already been set and to not accept new cookies. To learn more about how to do this, visit the help pages of your browser.
Please note, however, that if you delete cookies or do not accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our Services may not perform properly.
Do we have a Data Protection Officer?
We do not have a Data Protection Officer, however, we have appointed an in-house data protection representative. Depending on which entity operates the Service, a local representative (internal or external) may be responsible, but you can always contact our data protection representative who will direct you to the respective local representative:
Monotype Imaging Holdings Inc.
Attn. Data Protection Representative
600 Unicorn Park Drive
Woburn, MA 01801 USA
How can you contact us?
Please direct any inquiries related to this Privacy Policy, the security of your personal information or other information we have collected about you to our data protection representative by emailing us at [email protected], or by sending mail to:
Monotype Imaging Holdings Inc.
Attn. Data Protection Representative
600 Unicorn Park Drive
Woburn, MA 01801 USA
If you have any questions or comments about our company, our Services or have other customer service needs, please contact your local Monotype office. You can click here for a list of contact information for our domestic and international offices.
Do we make changes to this Privacy Policy and/or to our privacy practices?
Yes. We will update this Privacy Policy from time to time to reflect changes to our practices, the technologies we use that related to your privacy, legal or other regulatory requirements as well as for other reasons. Please check the “LAST UPDATED” notation at the top of this page to see when this Privacy Policy was last revised. When changes are made to this Privacy Policy they will become immediately effective when published in a revised Privacy Policy posted on this page unless otherwise noted. Your use of any of our Services following these changes indicates your consent to the practices described in the revised Privacy Policy.
Also from time to time, we may desire to use your personal information for uses not previously disclosed in this Privacy Policy. If our practices change regarding your previously collected personal information in a way that would be materially less restrictive than stated in the version of this Privacy Policy in effect at the time we collected the information, we will make commercially reasonable efforts to provide notice and obtain your consent for any such uses as may be required by law.