Yammer Privacy Statement

Last Updated: February 28, 2013

Yammer Privacy Statement

Microsoft and the Yammer team are committed to protecting your privacy. This privacy statement applies to the data collected by Microsoft through use of Yammer services (the “Service” or “Services”); it does not apply to other online or offline Microsoft sites, products, or services.

Yammer Networks

A “Yammer Network” is the network for using the Services defined by your organization’s email domain.  For example, all users who sign up with a “contoso.com” email address would be part of the Contoso Yammer Network. In addition, a company may invite users with different email domain names to their Yammer Network as “guest users” or as participants in external networks associated with that Yammer Network.

A “Yammer Basic Network” is a Yammer Network that includes only users of the free Yammer Basic services.

A “Yammer Enterprise Network” is a Yammer Network that has been upgraded from a Yammer Basic Network by the organization whose email domain defines that network.  An organization may upgrade its Yammer Basic Network to a Yammer Enterprise Network at any time.

Companies who upgrade to a Yammer Enterprise Network may take administrative control of that network and see the data and activities of the users on that network (including data and activity which was posted prior to the upgrade of the network to a Yammer Enterprise Network), and may choose to implement security or privacy policies in addition to those described in this privacy statement.  With respect to a Yammer Basic Network, references to “you” or “your” in this privacy statement refer to the individual users of the Services.  With respect to Yammer Enterprise Networks, references to “you” or “your” in this privacy statement refer to the organization that is our customer.  Individual users of Yammer Enterprise Networks should direct privacy related inquiries to the organization that provides them access to the Services.

Customer Data

Customer Data is all the data, including all text, sound, software or image files that you provide, or are provided on your behalf, to us through your use of the Services.

We make no claim of ownership in your Customer Data.  Except as provided in this privacy statement or described in your agreements, we only use Customer Data to provide and enhance the Services. We don’t share your Customer Data with advertisers, or with anybody else except in the very limited circumstances described in the Sharing Your Information section below.

Contact Data

Contact Data includes name, address, phone number, profile information, email address, title, time zone and other contact information that we may collect through your administration of the Services and use of the Services by you and others.  Contact Data you provide as part of your Yammer profile is available to other users of your Yammer Network(s).

Yammer works better when more people take part in communicating and sharing on a Yammer Network. For this reason, the Service encourages people to send invitations to others who are not yet on Yammer.  If you choose to provide us with email addresses or other Contact Data of people inside or outside your organization, we will use that information to enable you and other users to invite those people to join the appropriate Yammer Network.

We may also suggest contacts that you may want to add to your Yammer Network. If you choose to add them to your Yammer Network, we will send them an invitation to join your Yammer Network by sending an email on your behalf which may include your name, picture and other profile information.

In addition, Microsoft uses Contact Data to complete the transactions you request, administer your account, improve the Services and detect and prevent fraud.

We may also use Contact Data to contact you to provide information about new subscriptions, billing and important updates about the Services, including information about security or other technical issues.  We may also contact you regarding third-party inquiries as described in this privacy statement or your agreement(s).  If you are a verified administrator for the Service, you may not be able to unsubscribe from some of these communications.

Subject to your contact preferences, we may also use Contact Data to contact you regarding information and offers about the Service, other products and services or to request your feedback.  If you do not wish to receive these communications, please see https://yammer.com/about/emails-we-send for information on how to stop them and configure other notification preferences.

Usage Data 

We may use statistical data, analytics, trends and usage information derived from your use of the Services (“usage data”).  Usage data includes, for example, aggregated quantitative information about active users, activity, topics, and groups.  Some ways we use the usage data include operating, improving and personalizing the Services and our offerings, as well as other Microsoft products and services.   Except to provide reports to you or others in your organization, we do not disclose usage data in a way which is identifiable to your organization or users in your Yammer Network.

Support Data

Support Data is the information we collect when you submit a support request or run an automated troubleshooter, including information about hardware, software, and other details related to the support incident, such as: contact or authentication information, chat session personalization, information about the condition of the computer and the application when the fault occurred and during diagnostics, system and registry data about software installations and hardware configurations, and error-tracking files.

Support may be provided through phone, e-mail, or online chat. We may use Remote Access (RA), with your permission, to temporarily navigate your desktop. Phone conversations, online chat sessions, or RA sessions with support professionals may be recorded and/or monitored. For RA, you may also access the recording after your session.  For Online Chat or RA, you may end a session at any time of your choosing. We use Support Data in the same way as we use your information, as described in this privacy statement. Additionally, we use it to resolve your support incident and for training purposes.

Following a support incident, we may send you a survey about your experience and offerings. You must opt-out of support surveys separately from other communications provided by Microsoft, by contacting Support or through the e-mail footer.

To review and edit your personal information collected through our support services, and for any other inquiries regarding our support services, please contact us by using our Web form.

Some business customers may purchase enhanced support offerings (e.g. Enterprise Plus etc.). These offerings are covered by their own contract terms and notices.

Cookies & Other Information

The Service uses “cookies,” which are small text files placed on a device’s hard disk by a web server.  We may use cookies and similar technologies for storing users’ preferences and settings, to authenticate users, to collect usage data and operate the Service.

Some of the cookies we commonly use are listed in the following chart. This list is not exhaustive, but it is intended to illustrate some of the reasons we set cookies. When a user visits the Service it may set some or all of the following cookies:

Cookie name  Description 
browser_token	Identifies unique browsers to the Service. It is used for site analytics and other operational purposes.
auth_token, auth_token_sso	Store information about authentication preferences
_workfeed_session	Sets a unique ID identifying the user session. It is used for site analytics and other operational purposes.
yamtrak_id	A cookie used for generating analytical information
unverified_email	Stores the login of an authenticated user
To learn more about how Microsoft uses cookies and other technologies generally and to learn more about controlling cookies, please see http://www.microsoft.com/privacystatement/.

Sharing Your Information 
We will not disclose Customer Data or Contact Data (“your information”) outside of Microsoft or its controlled subsidiaries and affiliates except as you direct, or as described in your agreement(s) or this privacy statement.

We don’t share any of your information with advertisers.
We occasionally contract with other companies to provide services (such as customer support, data management, and technical infrastructure services) on our behalf.  We may provide these companies with access to your information where necessary for their engagement. These companies are required to maintain the confidentiality of your information and are prohibited from using it for any purpose other than that for which they are engaged by Microsoft
We will not disclose your information to a third party (including law enforcement, other government entity, or civil litigant; excluding our subcontractors) except as you direct or unless required by law.  Should a third party contact Microsoft with a request for your information, we will attempt to redirect the third party to request the data directly from you.  As part of that process, we may provide your basic contact information to the third party.  If legally compelled to disclose your information to a third party, we will use commercially reasonable efforts to notify you in advance of a disclosure unless legally prohibited.
Microsoft may share Contact Data with third parties for purposes of fraud prevention or to process payment transactions, as further described in this statement.
The Services may enable you to purchase, subscribe to, or use services, software, and content from companies other than Microsoft (“Third Party Offerings”). If you choose to purchase, subscribe to, or use a Third Party Offering, we may provide the third party with your Contact Data to enable the third party to provide its offering to you (and with your consent, send you promotional communications). That data and your use of a Third Party Offering will be governed by the applicable third party privacy statement(s) and policies.
We will not substantively respond to data protection and privacy requests from your users without your prior written consent, unless required by applicable law.
Please note that the Services may include links to or allow you to install third-party or other Microsoft products and services whose privacy practices may differ from the Services.  Your use of such products or services, and any information you provide to a third party, is governed by their privacy statements. We encourage you to review these other privacy statements.

Accessing, Correcting and Deleting Your Information 

You may access, correct or delete Customer Data or Contact Data you have provided to us by using the tools within the Services (for example, editing your profile information on the Service) or by contacting  support at http://support.microsoft.com/contactus/.  Changes you make to your information on the Service take immediate effect on your Yammer Network, but data will be retained in secure storage for a limited period afterward as part of our standard data backup process.

Security 

We have implemented and will maintain appropriate technical and organizational measures, internal controls, and information security routines intended to protect your information against accidental loss, destruction, or alteration; unauthorized disclosure or access; or unlawful destruction.   For more information about the security measures we take, please see https://www.yammer.com/it/security/.

Data Location 

Your Services’ data may be transferred to, stored and processed in the United States or any other country where Microsoft or its affiliates, subsidiaries or service providers maintain facilities. Microsoft abides by the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Economic Area, and Switzerland. To learn more about the Safe Harbor program, and to view our certification, please visit http://www.export.gov/safeharbor/.

Changes to this Privacy Statement

We will occasionally update this privacy statement to reflect customer feedback, changes in our Services, and updates to applicable data privacy laws and regulations. When we post changes to this statement, we will revise the “last updated” date at the top of the statement. If there are material changes to this statement or in how Microsoft will use your information, we will notify you by either posting a notice of such changes before they take effect or by direct notification. We encourage you to periodically review this privacy statement to learn how Microsoft is protecting your information.

How to Contact Us

Microsoft welcomes your comments.  If you have questions about Microsoft’s privacy and security commitments, or if you have other technical or other customer support questions, please contact us at http://support.microsoft.com/contactus/.

Yammer, attention: Privacy Policy
Microsoft Corporation
Microsoft Way
Redmond, Washington, 98052-6399 USA