Privacy Statement

Last Updated: 09-August-2011

DepoXchange provides managed file sharing, payment and transmission services which enable users to access, store, send, receive, and accept payment for, User Files (defined below) via DepoXchange's proprietary platform (any and all of the foregoing, the "Services"). The Services include our website www.DepoXchange.com and its sub domains (collectively the "Site"), our tools and applications (including any updates, new versions or new releases thereof) including, but not limited to, our DepoXchange App (each a "DepoXchange Application"). We provide this Privacy Policy to inform you of our policies and procedures regarding the collection, use and disclosure of the personal information we receive from users of the Services. If you have questions or concerns regarding this Privacy Policy, you should first contact DepoXchange at legal@depoxchange.com.

We may update this Privacy Policy from time to time and will handle your information in accordance with the version that was in place when you submitted it. We will notify you of any changes by posting the new Privacy Policy on the Site. We reserve the right to modify this Privacy Policy at any time, so please review it frequently. If we make material changes to this Privacy Policy, we will notify you here, by email, or by means of a notice on the home page of the Site prior to the changes taking effect. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our� DepoXchange Terms of Service. As used in this policy, the terms "using" and "processing" information include using cookies on a computer, subjecting the information to statistical or other analysis and using or handling information in any way, including without limitation collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring information within our organization or among our affiliates within the United States or internationally.

Information Collection and Use

Our primary goals in collecting information are to provide and improve the Services and the related features and content, to administer your subscription and to enable users to enjoy and easily navigate the Site. Below are the types and categories of information that we collect. As used herein "User Files" means the files and folders (including any information or data therein) users may store, send, receive, or manage:

• When you register with us through the Services or order certain services from us we will ask you for personally identifiable information. This refers to information about you that can be used to contact or identify you ("Personal Information"). Personal Information includes, but is not limited to, your name, phone number, credit card or other billing information, email address and home and business postal addresses. We use your Personal Information mainly to provide the Services and administer your inquiries. We also collect certain other information that you provide as part of registration and the administration and personalization of your profile web page (e.g., without limitation, your zip code and the state in which you live) ("Non-Identifying Information").
• We use your Personal Information (in some cases, in conjunction with your Non-Identifying Information) mainly to provide the Services, complete your transactions, and respond to inquiries.
• We may combine your Personal Information with Non-Identifying Information and aggregate it with information collected from other DepoXchange users (e.g., registered users and non-registered users) to attempt to provide you with a better experience, to improve the quality and value of the Services and to analyze and understand how our Services are used. Subject to the section below titled "Information Sharing and Disclosure," we may also use the combined information without aggregating it to serve you specifically, for instance to deliver a product to you according to your preferences or restrictions.
• We also use your Personal Information to contact you with DepoXchange newsletters, marketing or promotional materials and other information that may be of interest to you. If you decide at any time that you no longer wish to receive such communications from us, please follow the unsubscribe instructions provided in any of the communications or email us at support@DepoXchange.com with an explicit request to have your information removed from our mailing list. We will comply with your request as soon as reasonably practicable. We will send you strictly service-related announcements on rare occasions when it is necessary to do so. For instance, if a part of our Services is temporarily suspended for maintenance, we might send you an email. Generally, you may not opt-out of these communications, which are not promotional in nature. If you do not wish to receive them, you have the option to disable your account.

Log Data

When you visit the Site or use the Services, whether as a registered user or a non-registered user just browsing, our servers automatically record information about your use of the Services and your visit to the Site ("Log Data"). This Log Data includes the size and name of all User Files that you make available via the Services. The Log Data may also include information such as your computer's Internet Protocol ("IP") address, your browser type, what DepoXchange Application you were using, the web page you were visiting immediately prior to visiting our Site, pages of our Site that you visited, the time spent on those pages, information you searched for on our Site, access times and dates, and other statistics. We use this information to monitor and analyze use of the Services and for the Site's technical administration, to improve our Services' functionality and user-friendliness, and to better tailor them to our users needs. We also use this information to verify that users of the Services meet the criteria required to process their requests. Because the names of the User Files you submit are not treated as Personal Information, we recommend that you do not include any personally identifiable information in the User Files that you make available via the Services.

Cookies & Other Technologies

Like many web sites, we use "cookies" to collect information. A cookie is a small data file that we transfer to your computer's hard disk for record-keeping purposes. We use cookies for two purposes. First, we utilize persistent cookies to save your registration ID and login password for future logins to the Site. Second, we utilize session cookies to enable certain features of the Site, to better understand how you interact with the Site and to monitor aggregate usage by DepoXchange users and general web traffic on the Site. We link the information we store in cookies to the Personal Information you submit to us while you are on the Site. Unlike persistent cookies, session cookies are deleted from your computer when you close your browser. We may also use "pixel tags," "web beacons," "clear GIFs" or similar means (individually or collectively "Pixel Tags") in connection with our Site to collect usage and geographical location data. A Pixel Tag is an electronic image, often a single pixel that is ordinarily not visible to users and may be associated with cookies on a user's hard drive. Pixel Tags help us to determine the effectiveness of promotional or advertising campaigns and allow us to deliver targeted advertising to you regarding our Services when you visit the websites of our advertising partners. Third party advertisers on the Site may also place or read cookies on your browser. DepoXchange does not have access to or control of any cookies that its advertisers may store in your browser and this Privacy Policy does not apply to the use of cookies by advertisers.

You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the web sites you visit. If you do not accept cookies, however, you may not be able to use all portions of the Site or all the functionality of the Services.

We partner with third party ad networks to manage our advertising on other web sites. Our ad network partners use cookies and Pixel Tags to collect non-personally identifiable information about your activities on this Site and other web sites to provide you targeted advertising on the other web sites you visit based upon your interests.

Emailing Via a DepoXchange Account

As part of the Services, DepoXchange's registered users may send a User File, or a notice of a shared User File, to one or more recipients identified by a valid email address. The message created by the DepoXchange registered user will be sent from DepoXchange on the DepoXchange registered user's behalf to the email addresses the DepoXchange registered user enters into the online form. These email addresses will be stored in the address book the DepoXchange registered user creates and will be used only for the purpose of sending the email communication to the addressee.

Phishing

Identity theft and the practice currently known as "phishing" are of great concern to DepoXchange. Safeguarding information to help protect you from identity theft is a top priority. We do not and will not, at any time, request your credit card information, your account ID, login password, or national identification numbers in a non-secure or unsolicited e-mail or telephone communication. For more information about phishing, visit the� Federal Trade Commission's web site.

Information Sharing and Disclosure

Other than as described in this section, DepoXchange does not rent or share information about you with third parties. Aggregate Information and Non-Identifying Information. We may share aggregated information that does not include Personal Information and we may otherwise disclose Non-Identifying Information and Log Data with third parties for industry analysis, demographic profiling and other purposes. Any aggregated information shared in these contexts will not contain your Personal Information. Service Providers. We may employ third party companies and individuals to facilitate our Services, to provide the Services on our behalf and to perform Site-related services ("Service Providers"). The types of Services Providers we use include, without limitation, service providers that provide the following types of services: credit card transactions, accounting, customer relationship management, webcasting, web site maintenance, database management, web analytics and web and live chat hosting. Our Service Providers have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Compliance with Laws and Law Enforcement. DepoXchange cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you and your User Files to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including without limitation subpoenas), to protect the property and rights of DepoXchange or a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical. DepoXchange employees or representatives may access, but not view the contents of, your User Files when acting on behalf of DepoXchange to comply with a legal obligation, such as responding to a search warrant.

Business Transfers

DepoXchange may sell, transfer or otherwise share some or all of its assets, including your Personal Information, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy. If DepoXchange is involved in such a transaction, you will be notified via email and/or a prominent notice on our Site of any choices you may have regarding your Personal Information. Corporate Accounts. If you are an individual DepoXchange registered user, and the domain of the primary email address associated with your DepoXchange account is a domain owned by your employer and that email address was assigned to you as an employee of that organization, and that organization establishes a corporate account with DepoXchange and adds you to that account, then certain information concerning past use of your individual account may become accessible to the administrator of that corporate account, such as the text and subject of messages you have sent, the name and content of the User Files you have sent, the date and time messages were sent, and the email addresses of the recipients; provided, however, that such information with respect to User Files that have expired or that have been deleted by you will no longer be accessible to you or to such administrator.

Changing or Deleting Your Information & Data Retention

General. As used herein "Standard Service" means our Services except for those provided in connection with the DepoXchange App. All DepoXchange registered users of our Standard Service may review, update or correct the Personal Information in their registration profile ("Account Information") by logging into their account and changing the "user preferences" associated with their account. Users of the DepoXchange App are able to reset their passwords by initiating a password reset within the application. Retention and Deletion. DepoXchange may retain your Account Information indefinitely as required by law or for legitimate business purposes, regardless of whether you have disabled your account as stated above. DepoXchange will retain Log Data consistent with applicable legal requirements. Generally, at a minimum, DepoXchange will retain the Log Data collected from you in its active, internal company databases for up to six months, at which point it will migrate such Log Data to its offline archival systems, where DepoXchange will retain the Log Data for a period of three years (together, the "Retention Period"). After the Retention Period, DepoXchange will purge the Log Data from its systems. In the event of an investigation by law enforcement or a response to claims or legal process, we may retain the Log Data until such investigation or process is completed, which may be longer than the Retention Period.

If as a DepoXchange registered user you wish to disable your account or request that we no longer use your information or provide you services contact us at support@depoxchange.com.

Security

DepoXchange takes safeguarding your information very seriously. We employ generally-accepted, industry-standard administrative, physical and electronic measures designed to protect the Personal Information submitted to us from unauthorized access, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic data storage is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored "personal data" (as defined in applicable laws related to security breach notification) to you via email or conspicuous posting on this Site in the most expedient time possible and without unreasonable delay, insofar as consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.

Links to Other Sites

Our Services contain links to other web sites. If you choose to visit an advertiser by clicking on a banner ad or other type of advertisement, or click on another third party link, you will be directed to that third party's web site. The fact that we link to a web site or present a banner ad or other type of advertisement is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party web sites. These other web sites may place their own cookies or other files on your computer, collect data or solicit personal information from you. Other sites follow different rules regarding the use or disclosure of the personal information you submit to them. We encourage you to read the privacy policies or statements of the other web sites you visit.

Our Policy Toward Children

The Services are not directed to children under 18. We do not knowingly collect personally identifiable information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at support@depoxchange.com. If we become aware that a child under 13 has provided us with Personal Information, we will delete such information from our files.

Testimonials

We post DepoXchange user testimonials on our Site which may contain Personal Information such as the DepoXchange user's name. We do obtain the DepoXchange user's consent to the posting of his or her name along with the testimonial prior to posting the testimonial.

Contacting Us

If you have any questions about this Privacy Policy, please contact us at legal@depoxchange.com.