feat(product): add SUMO Scheduler (#201)

* add sumo-scheduler

* update sumo-scheduler on Code Review comments

* update sumo-scheduler on Code Review comments #2

* update sumo-scheduler on Code Review comments by Nov 25

* fix(product): changes to SUMO Scheduler

- Add citation and update score for rubric.security
- Remove missing citation, add note, update score for rubric.third-party-collection
- Add real citation for rubric.data-deletion
- Move link for rubric.data-breaches
- Update score for and cite rubric.third-party-access
- Add real citation for rubric.data-collection-reasoning
- Remove superfluous note for rubric.noncritical-purposes
- Update score for rubric.law-enforcement
- Add real citation for rubric.list-collected
- Add real citation for rubric.revision-notify

---------

Co-authored-by: Matthew RONCHETTO <[email protected]>

CONTRIBUTORS.toml

@@ -217,5 +217,9 @@ github = "smspool"
 name = "Ollie Pile"
 github = "opile8"
 
+[maximbelyakov]
+name = "Maxim Belyakov"
+github = "maximbelyakov"
+
 [Anon-sec]
-github = "Anon-sec"
+github = "Anon-sec"

products/sumo-scheduler.toml

@@ -0,0 +1,88 @@
+name = "SUMO Scheduler"
+description = "SUMO Scheduler provides online appointment, event, and course scheduling applications."
+slug = "sumo-scheduler"
+hostnames = [ "sumoscheduler.com" ]
+sources = [ "https://www.sumoscheduler.com/privacy-policy" ]
+contributors = [ "maximbelyakov" ]
+
+[rubric.behavioral-marketing]
+value = "yes"
+citations = [
+  "If you no longer wish to receive any marketing-related emails from us, you may opt-out via the unsubscribe link included in such emails."
+]
+notes = [
+  "The policy mentions opting out of marketing emails, but doesn't specifically address behavioral marketing or targeted advertising opt-out options beyond email communications."
+]
+
+[rubric.security]
+value = "somewhat"
+citations = [
+  "We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal data."
+]
+notes = [
+  "For more detailed information, refer to the Security Policy: https://sumoscheduler.com/security-policy/"
+]
+
+[rubric.third-party-collection]
+value = "no"
+citations = []
+notes = [ "There is no mention of third-party data collection in the policy." ]
+
+[rubric.history]
+value = "last-modified"
+citations = [
+  "These updates will take effect on May 25, 2018."
+]
+
+[rubric.data-deletion]
+value = "yes-contact"
+citations = [
+  "If you would like to correct, update, amend, or remove personal data that you have provided to us, you may do so in your account settings or by directing your query to your System Administrator. You may also contact us at [email protected] to request the complete deletion of your personal data. We will respond to your request within 30 days."
+]
+
+[rubric.data-breaches]
+value = "eventually"
+citations = [
+  "Should a security incident occur, we will notify affected users of the nature and extent of the breach, and take steps to minimize any damage. There have been no security incidents to date."
+]
+notes = [ "Citation is from the Security Policy." ]
+
+[rubric.third-party-access]
+value = "yes-unspecified"
+citations = [
+  "We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses."
+]
+
+[rubric.data-collection-reasoning]
+value = "mostly"
+citations = [
+  "Any of the information we collect from you may be used in one of the following ways: To provide, operate, maintain, improve, and promote our services; To personalize your experience, including by providing content, features, or advertisements that match your interests and preferences; To send messages, including responding to your questions, comments, and requests; providing customer service and support; and sending you technical notices, updates, security alerts, and support and administrative messages To process and complete transactions – your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested; To send promotional communications, such as providing you with information about services, features, surveys, newsletters, offers, promotions, contests, and events; and providing other news or information about us and our select partners. If any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email; To improve our website (we continually strive to improve our website offerings based on the information and feedback we receive from you); and For other purposes about which we obtain your consent."
+]
+
+[rubric.noncritical-purposes]
+value = "opt-out-some"
+citations = [
+  "If you no longer wish to receive any marketing-related emails from us, you may opt-out via the unsubscribe link included in such emails."
+]
+
+[rubric.law-enforcement]
+value = "reasonable"
+citations = [
+  "We may disclose your information, including your personal data, to a third party if (a) we believe that disclosure is reasonably necessary to comply with any applicable laws and regulation or governmental request by court order or subpoena."
+]
+
+[rubric.list-collected]
+value = "generally"
+citations = [
+  "We collect information from you when you register on our site, place an order, subscribe to our newsletter, respond to a survey, fill out a form or visit us at an event.",
+  "When ordering or registering on our site, as appropriate, you may be asked to enter your: name, e-mail address, mailing address, phone number or credit card information. You may, however, visit our site anonymously.",
+  "A system admin or another user may create an account on your behalf and may provide your information, including personal Information. We collect information under the direction of our customers and often have no direct relationship with the individuals whose personal information we process. If you are an employee of one of our customers and would no longer like us to process your information, please contact your employer. If you are providing information, including personal information about someone else, you must have the authority to act for them and to consent to the collection and use of their personal information.",
+  "We collect and store content that you create, submit, post, upload, transmit, store or display in the process of using SUMO or our websites. Such content may include any personal information or other sensitive information that you choose to include.",
+  "As you navigate our sites, we may also collect standard information from your Web browser through the use of commonly-used information-gathering tools. This information may include browser type and browser language preferences, your Internet Protocol (“IP”) address, the actions you take on our sites (such as the web pages viewed and the links clicked), and other content you send via the chat feature."
+]
+
+[rubric.revision-notify]
+value = "yes"
+citations = [
+  " If we decide to change our privacy policy, We will provide notice of any changes to the Privacy Policy by posting the revised policy on this page and, if appropriate, by sending an email notification to all users."
+]