1.0 About the California Privacy Notice

This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements Scribd’s Privacy Policy and applies solely to visitors, users, and others who are California residents (“consumers” or “you” or “data subjects”) when you visit the Scribd website or subscribe to receive Scribd products and services (the “Services”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”), as amended as the California Privacy Rights Act of 2020 (“CPRA”). Any terms defined in the CPRA have the same meaning when used in this Notice. This notice and policy does not reflect our collection, use, or disclosure of California residents’ personal information, or data subject rights, where an exception under the CPRA applies.

1.1 About Service Providers

Service providers are businesses that provide essential services to Scribd. Our service providers are contractually obligated to protect your personal information. If you suspect that any of our service providers have compromised the personal information that you have provided through Scribd, please notify us immediately at privacy@scribd.com.

1.2 About Third Parties

Third Parties refer to businesses with whom Scribd has joined with to provide voluntary, value-added services to subscribers, including “Scribd Perks.” Websites maintained by Third Parties may utilize additional services unknown to Scribd. Scribd Perks require co-registration and you may be required to accept additional terms and conditions in order to access services from Third Parties. 

2.0 The Information that Scribd Collects

We collect the following categories of personal information as indicated below. The survey responses may be utilized to determine the effectiveness of the Sites and the Apps, Scribd’s communications, advertising campaigns and/or promotional activities. If an Individual participates in a survey, the information given will be used along with that of other study participants.

3.0 The Information that Scribd Discloses

This table contains an overview of the categories of personal information that we disclose to third parties for our operational business purposes, where required by law, or to protect our rights; including Third Parties; and the administrators authorized by your employer (if you access our services through a subscription administered by your employer). 

3.1 Scribd may use and disclose this personal information to:

• as described to you when collecting your personal information; 
• as necessary to or appropriate to protect the rights, property, or safety of Scribd, our employees, our clients, or others; 
• as otherwise described in the Scribd Privacy Policy
• carry out audits and maintain records;
• comply with laws, legal processes, regulations, and internal policies;
• conduct research and analysis;
• detect security incidents;
• develop and improve the Services;
• exercise and defend legal claims;
• identify and repair errors; 
• operate, manage, and maintain our business;
• protect against malicious, deceptive, fraudulent or illegal activity;
• provide account holders and subscribers with requested Services;
• provide you with notifications, alerts, and other communications concerning our Services; and
• undertake quality assurance testing.

4.0 Your Consumer Rights

The CPRA provides California residents with specific rights regarding personal information. Scribd, in its sole discretion, may choose to voluntarily extend those rights to individuals across the United States. California residents have the right not to receive discriminatory treatment by Scribd for the exercise of the rights conferred by the CPRA. Scribd does not offer financial incentives or price or service differences to consumers in exchange for the retention or sale of your personal information.

5.0 Access Your Personal Information

Data Subjects in the State of California have the right to request that we disclose to you the most recent 12 months of data related to:

• the categories of personal information we collect about you;
• the categories of sources from which the personal information is collected;
• the specific pieces of personal information we collect;
• our business or commercial purpose for collecting information about you;
• the categories of personal information about you that we shared or disclosed and the categories of third parties with whom we shared or to whom we disclosed such information in the preceding 12 months.

6.0 Delete Your Personal Information

Data Subjects in the State of California have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. 

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the  deletion of personal information may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

7.0 Right to Opt Out of the Selling or Sharing Of Personal Information

Under the CPRA, “selling” and “sharing” is broadly defined to mean the sharing of personal information, either with or without financial compensation, with third parties who are not acting as our service providers or who are otherwise not restricted from using data only on our behalf or pursuant to an applicable CPRA exception.

In some circumstances, we may share certain of your information with third parties to provide you with promotions and opportunities that may be of interest to you, which may be considered a “sale” under the CPRA. Under the CPRA, “sale” may also include allowing third parties to “collect” certain information, such as IP address, and/or browsing behavior, through cookies and similar technologies, to deliver targeted advertising. 

If you would like to opt-out of our use of your information for such purposes that are considered a “sale” under the CPRA, you may do so as outlined at this link. Please note that we do not knowingly sell the personal information of minors under 18 years of age without legally-required affirmative authorization. Scibd does not have actual knowledge that it sells the personal information of minors under 18 years of age.

8.0 California “Shine the Light” Disclosure

If a company shares “personal information” (as defined in California’s “Shine the Light” law, Civil Code § 1798.83) with third parties for their direct marketing purposes (e.g., to send offers and information that may be of interest to you), California law requires either providing a mechanism by which consumers can obtain more information about such sharing over the prior calendar year, or providing a mechanism by which consumers can opt-out of such sharing. As noted in the section above, we provide an opt-out for this sharing. If you are a California resident and would like to opt-out of sharing pursuant to this law, please use the “Do Not Sell My Personal Information” link above.

9.0 Exercising Your California Rights

California consumers can exercise certain rights through our Privacy Rights Request form. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. If the form is insufficient to satisfy your request, please email us at privacy@scribd.com.

10.0 Changes to This Notice

We may update this and other notices from time to time. If we make material changes, we will notify you as required by applicable laws. 

11.0 Contact Information

Please direct any questions or comments related to this notice and Scribd’s Privacy Policy to privacy@scribd.com, or by postal mail to:

Scribd, Inc.
460 Bryant Street, #100
San Francisco, CA
94107-2594
USA

This policy is effective 29 September 2022.