LogMeIn – Cubby

0

LogMeIn provides many services, but this disclosure focuses on Cubby—an online syncing, sharing, and cloud storage service. LogMeIn is based in Woburn, Massachusetts USA and has been providing Cubby since 2012. With Cubby, live support staff are available via online support portal, email, or phone. Cubby encrypts all data in transit between your computer and their servers, but may not encrypt your data while it is on their servers. Cubby is hosted on LogMeIn’s own secure, state-of-the-art data centre in the USA. Data can easily be uploaded to/downloaded from Cubby through their website or their desktop/mobile applications. Cubby recognizes you as the owner of all data uploaded to your account and makes no claims to it. Once your Cubby account is terminated, though, all of your data stored by Cubby may be deleted.

This disclosure was provided and researched by Arrowrock. Sources are cited where possible.

Please report any inaccuracies in this report by leaving a reply below or sending us a private message. Thank you!

Company Identity

Trading Name LogMeIn
Company Website https://secure.logmein.com/
Company Phone Number 1-781-638-9050
Company Email Address Press@LogMeIn.com
Physical Address 500 Unicorn Park Drive
Woburn, MA 01801
USA

What services does this disclosure apply to?
Cubby
https://www.cubby.com/

What country holds legal jurisdiction over the service(s)?
USA
(in accordance with the laws of the Commonwealth of Massachusetts)
https://www.cubby.com/legal

How long has your company been operating?
Since 2003.

How long has your company been providing the service(s) covered in this disclosure?
Cubby – Since November 2012.

Is your company currently profitable?
Yes.

return to the top

Customer Support and Service Level Agreement

What are your standard customer support hours?
Not available

What channels are available for communication with clients?
Online Support Portal
http://help.cubby.com/

Email

Phone
https://secure.logmein.com/contactus/

Which is your preferred channel for client communications?
Not available

Do you collect any information from client communications?
Yes.
This information is used for internal/external marketing purposes, to analyze trends and to improve the site. This site may also collect anonymous information from your computer through cookies and internet tags or web beacons. You may set your browser to notify you when a cookie is sent or to refuse cookies altogether, but certain features of this site might not work without cookies. LogMeIn collects personal information when you elect to use our software on a free trial basis or purchase a license or an upgrade. LogMeIn only uses such information if it has been collected in accordance with acceptable privacy practices consistent with this Policy and applicable laws.

You can always ask to review any personal information that we have collected from you, have us update, correct or delete this information and/or instruct us not to use this information in the future. If you wish to exercise this right, simply contact us.

https://www.cubby.com/privacy

What is your standard response time for customer support inquires?
Not available

Do you proactively communicate information about future planned outages and maintenance to clients?
Not available

Do you proactively communicate information about current unscheduled outages and incidents to clients?
Not available

Do you make incident reports available to clients after major incidents?
Not available

What is the expected uptime of the service?
Not available

Has the service experienced any outages in the last 12 months?
Not available

Does the SLA guarantee service uptime?
Not available

return to the top

Security

Are logs kept of client logins and locations?
Not available

Does your service support password/account recovery?
Yes.
Clients can reset their passwords via: https://accounts.logme.in/forgotpassword.aspx . This sends en email with a password reset link to the associated email account.

Does the service monitor for any suspicious account activity?
Not available

Does your service offer two-step or multi-factor authentication?
No.

Does your service offer login via other services?
Not available

Does your service secure all client data in transit?
Yes.
All client data in transit is encrypted with AES 256-bit encryption.
https://www.cubby.com/security/

Connections to the Cubby.com website are secured with TLS 128-bit encryption.

Does your service secure client data at rest?
Not available

Does your service allow clients to collaborate with 3rd parties?
Not available

Does your primary system reside in a data center with a security certification?
Not available

Does your backup/disaster recovery system reside in a data center with a security certification?
Not available

return to the top

Data Ownership

Do you claim ownership of any client data or information uploaded to your service?
No.
You shall retain full ownership of the files that you store in your Cubby. These terms do not grant LogMeIn any title, ownership or intellectual property rights to your files, except for the limited rights that are required to provide the service to you.

https://www.cubby.com/legal

Does the client retain full ownership of any data of information transmitted or stored via upstream providers?
There are no upstream providers.

All data synced to the cloud is stored in LogMeIn’s own secure, state-of-the-art data center in the United States of America. We do not use any third-party storage services. All data is on our own servers.

http://help.cubby.com/knowledgebase/articles/143870-where-is-my-data-kept-in-the-cloud-

Does client use of your service generate any metadata or other statistical information?
Not available

return to the top

Data Location

Where are the primary systems that host client data located?
Not available

Where are the backup/disaster recovery systems that host client data located?
Not available

Are there any other systems that host client data on behalf of your service?
No.

All data synced to the cloud is stored in LogMeIn’s own secure, state-of-the-art data center in the United States of America. We do not use any third-party storage services. All data is on our own servers.

http://help.cubby.com/knowledgebase/articles/143870-where-is-my-data-kept-in-the-cloud-

return to the top

Data Access and Use

Does the client have full access to their data during the service contract period?
Yes.
Clients have full access to their data via desktop sync, mobile apps, and the cubby.com website.

Can the client freely download their data from the service during the contract period?
Yes, all data a client stores in Cubby can be easily downloaded via the Cubby website, desktop program, and mobile apps. The files will be in the same format as they were added by the client.

Can the client easily import/upload their data from a competing service provider into your service?
Yes, any files/formats can be uploaded to Cubby. All formats are supported.

Does your services include an API to access client data?
Yes, WebDAV.
http://help.cubby.com/knowledgebase/articles/143915-is-there-a-cubby-api-

Following termination of the service, will the client be able to access their data?
No.

Upon expiration or termination for any reason, you shall no longer be authorized to use the service. When these terms are terminated and/or the subscription is canceled, you will no longer have access to data and other material that you may have stored in connection.

https://www.cubby.com/legal

Following termination of the service, is all client data deleted?
Upon expiration or termination for any reason, you shall no longer be authorized to use the service. When these Terms are terminated and/or the subscription is canceled, you will no longer have access to data and other material that You may have stored in connection with any service and that material may be deleted by LogMeIn.

https://www.cubby.com/legal

Does anyone in your organization (including contractors and upstream providers) have the ability to directly access client data?
Not available

Does your company use client data or information for any business function (other than the provision of the service)?
LogMeIn may send your personal information to other companies or people under any of the following circumstances: when we have your consent to share the information; we need to share your information to provide the product or service you have requested; we need to send the information to companies who work on behalf of LogMeIn to provide a product or service to you (we will only provide those companies the information they need to deliver the service, and they are prohibited from using that information for any other purpose); or we want to keep you up to date on the latest product announcements, software updates, special offers or other information we think you’d like to hear about either from us or from our business partners (unless you have opted out of these types of communications). In addition, we may share non-identifiable aggregate information about our users (for example, the proportion of male and female users) with advertisers, business partners, and other third parties in an effort to customize or enhance the content and advertising on our website for our users.

https://www.cubby.com/privacy

Does your company use client data or information to generate revenue (other than the provision of the service)?
Not available

Do you access client data in any additional circumstance not yet specified in this disclosure?
Not available

return to the top

Data Breach Notification

Do you have a policy in place for dealing with data loss or breach?
Not available

Do you notify clients if their data has been lost or compromised?
Not available

return to the top

Backup and Maintenance

Does your service support data versioning?
Yes.

For cubbies that sync with cubby.com, we retain deleted files and previous versions of stuff you overwrite. This is automatic and doesn’t count against your quota; it simply uses whatever free space you have with us on cubby.com. If you start to run out of unused space, the oldest versions of your files are eventually thrown away, but you can easily check how your storage is used and how much space you have for storing old files.

http://blog.cubby.com/2012/04/23/introducing-cubby/

How often are service/client data backups performed?
Not available

What method is used to perform service/client data backups?
Not available

How long is backup data retained for?
Not available

return to the top

Disclaimer

The information in this report is provided “AS IS” without warranty of any kind, express or implied. Please use good judgement and verify the information you consider important before basing any decisions on it.