Privacy Policy For Appello

This Privacy Policy is entered into by and between Appello Inc, an Ontario corporation having its registered office address at 643 Railroad Street, Mount Brydges, ON, N0L1W0, and the party that electronically accepts or otherwise agrees or opts-in to this PP, for instance by signing a SaaS Subscription Order Form and/or a SaaS License, Support, and Services Agreement (SLSA), it being specified within those documents that the acceptance constitutes acceptance of the Privacy Policy.

It is expressly understood that the Privacy Policy forms an integral part of the overall subscription agreement applying to the Parties regarding the provision of the Appello software platform under the terms of the SLSA.

Overview

We at Appello are committed to protecting your privacy. This Privacy Policy applies to the personal information and data collected by Appello when you interact with our websites, product and services. This includes when you interact with us on our website and use our products and services (including the Appello software platform).

This Privacy Policy describes how we collect, receive, use, store, share, transfer, and process your Personal Data. This Privacy Policy also describes your choices and rights with respect to your Personal Data, including your rights of access and correction of your Personal Data. For the purposes of this Privacy Policy "Personal Data" means any information relating to an identified or identifiable individual. If you do not agree with this Privacy Policy, you should not use our website, products or services.

When you use the Appello software platform, Appello processes Personal Data as a processor under the direction of our clients and according to the terms set out in our Data Processing Agreement. Our clients, as data controllers, are responsible for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent prior to collecting their customers' Personal Data using the Appello software platform. Please see Section 1.b "Information We Process on Behalf of our Customers When They Use the Appello software platform" and Section 1.c "Information We Collect and Process When You Use the Appello software platform" as well as our Data Processing Agreement for more information.

We update this Privacy Policy from time to time and we encourage you to review this Privacy Policy periodically. We will post any Privacy Policy changes on this page and, if the changes are material, we will provide a more prominent notice by sending you an email notification.

If you have any questions about this Privacy Policy or to exercise the privacy rights and choices we offer please contact us at: info@useappello.com

1. What Information We Collect and Process

a. Information you provide to Appello

When you interact with us via our website or use the Appello software platform, we may collect Personal Data and other information from you, as further described below.

When You Visit Our Website

We collect Personal Data from you when you submit web forms or interact with our websites, for example by watching a training video, joining our mailing list, or looking through the list of available products and services. We may ask for your email address, first and last name, job title, and other similar business information. You are free to explore some of our website without providing any Personal Data about yourself.

Subscription Account and User Information

We collect Personal Data when you (or your employer) signs up for an Appello account, creates or modifies user information, sets preferences, or provides any other related information to access or utilize our Appello software platform. More details regarding this are provided in the Appello Data Processing Agreement, found on our website at www.useappello.com.

Assessment and Lead Generation Data

When you complete our assessment form, request a demo, or interact with our lead generation tools, we collect:

• Contact information (name, email, company name, phone number)
• Business information (trade, company size, role, job title)
• Current software usage and business pain points
• Evaluation timeline and preferences
• Technical information (IP address, browser type, device information, referrer URL)

We use this information to provide personalized product recommendations, generate AI-powered analysis and scoring, contact you about our services, and improve our products and services. This data is processed based on your consent and our legitimate interest in providing relevant information about our services.

Customer Testimonials

We post customer testimonials and comments on our website, which may contain Personal Data. We obtain each customer's consent via email or through other agreements between customers and Appello prior to posting the customer's name and testimonial.

Public Directory Data

We maintain a public directory of contractors, union halls, and trade associations. This directory includes publicly available business information such as company names, addresses, contact information, and business classifications. If you claim a profile in our directory, we may collect additional information to verify your identity and association with the business entity. Directory data is publicly accessible, while account and user-specific data remains private.

b. Information we process on behalf of clients when they use the Appello software platform

Our product, the Appello software platform, allows our customers to create and enter various information about themselves and their workplace. When clients use our product, they may collect Personal Data such as first and last name, email address, physical address, phone number, or other information about you. We call the information that our clients submit or collect via the product 'Personal Data' under our Data Processing Agreement.

We do not control the content of our clients' webpages or the types of Personal Data that our clients may choose to collect or manage using the Appello software platform. We store our clients' information on our service providers' servers but process it as a processor under our customers' instructions and in accordance with our Data Processing Agreement and User Terms of Service. These agreements prohibit us from using the information except as necessary to provide and improve the Appello software platform and as required by law.

Our clients control and are responsible for correcting, deleting or updating the information they process using the Appello software platform and for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent prior to transferring the Personal Data to Appello for processing purposes.

c. Information we collect and process when you use the Appello software platform

Usage Data

We collect usage data when you or your users in your Appello account interact with the Appello software platform or website. Usage data includes metrics and information regarding your use and interaction with the Appello software platform such as what product features you use the most, when an object (like a ticket) is opened and closed, and how often certain features are triggered in your account.

Mobile Application

When you access or use the Appello software platform via our mobile application, we automatically collect information such as your device model and version, operating system, or device identifiers.

Location Data

Mobile Application: When you use our mobile application, we may collect location data (latitude and longitude coordinates) from your device in the following circumstances:

• When you provide signatures on forms
• When you clock in (if your company uses the clock-in/clock-out feature)
• When you interact with the application (creating notes, submitting timesheets, filling out forms)

Location Data Collection and Storage:

• Location data (latitude and longitude) is captured for every interaction with the app, but we only store location data on form signatures
• If your company uses the clock-in/clock-out feature: Location tracking begins when a worker clocks in and continues until they clock out. We do not track workers when they are not clocked in
• If your company does not use the clock-in/clock-out feature: We do not have the ability to track worker location. Location data may only be collected when workers interact with the app (such as signing forms or creating notes)
• If a worker is not clocked in but signs a form, we may collect location data on that form signature or interaction with the app
• Location data is accessed by the app but is not disclosed publicly. It is only accessible to authorized users within your organization

Purpose of Location Data Collection: We collect location data to:

• Provide confirmation of worker location for health and safety purposes
• Ensure accuracy of timesheets
• Support health and safety compliance by knowing where workers are located in case of incidents or accidents
• Support billing purposes where location verification is required

You can control location data collection through your device settings. Location data is only collected when you actively use features that require it. We do not continuously track your location in the background when you are not clocked in (if using clock-in functionality) or when you are not interacting with the app.

Note: Our location data collection practices may change in the future to provide higher fidelity geolocation for companies that are not using the clock-in/clock-out feature. Any material changes to our location data collection practices will be reflected in updates to this Privacy Policy.

Website and Web Application: When you use our website or web application, we may collect:

• IP address-based geolocation (city, state, country, timezone)
• Address information that you provide, which we convert to coordinates using Google Maps Geocoding API
• Location data associated with companies, job sites, or other business entities you manage

We use this location data to display maps and location-based features, provide location-based search and filtering, geocode addresses for mapping and navigation, and improve our services.

Location Data Storage and Retention: Location data is stored securely and retained only as long as necessary to provide our services. GPS coordinates collected via mobile app are associated with your account and job-related activities. Address geocoding results are cached for performance but can be refreshed upon request. You can request deletion of location data by contacting us at info@useappello.com.

Authentication Data

When you create an account, we collect authentication information including email address and password (which is securely hashed). If you choose to use Google OAuth for authentication, we may collect and store Google account information and OAuth tokens necessary for authentication. We use this information solely for account authentication and security purposes.

Third Party Integrations

If the Appello platform offers integration to any third party, this party may ask for certain permissions to access data or send information to your Appello account. As a client, it is your responsibility to review any third-party integrations you authorize. We may collect information about what types of integrations you use in your Appello account.

Log Files

Like most websites and technology services delivered over the Internet, we automatically collect and store information about your computer hardware and software when you visit our websites, use our product and services, or visit other sites or services that link to this Privacy Policy. This information can include your IP address, browser type, domain names, internet service provider (ISP), and the files viewed on our websites (e.g., HTML pages, graphics, etc.), the files viewed on our, or our customer's websites (if those websites are hosted on Appello e.g. HTML pages or, graphics etc), your operating system, access times and referring website addresses.

When you use the Appello software platform, we collect and store the categories of information listed above, subject to the customer's implementation settings.

2. How We Use Personal Data

a. To communicate with you about the product and services

We use the account information you provide to Appello when signing up for the Appello software platform to send you transactional emails, in-app notifications, account management, and other administrative matters. We may also send you updates regarding our User Terms of Service or other legal agreements and may also communicate with you about security incidents via email or in-app notification.

We use your information to provide client support, such as resolving technical issues and analyzing product outages or bugs.

If you use the Appello mobile application, we may send you push notifications from time to time regarding updates to the platform, or to update you on new features or services. If you no longer wish to receive such communications, you may turn them off at the device level.

b. To provide the Appello software platform

We use your account information and Personal Data to provide the product and services to you. For example, we use the email address you provide when signing up for the product to create your user account. We also use this information to authenticate you when you log in and to provide customer support.

c. To improve and develop our product and services

We collect usage data about how you or your users interact with our product and services. We use this data to develop and improve our products and services. For example, we use usage data to assess trends and usage across the product to help us determine what new features or integrations our users may be interested in.

We may use Personal Data for machine learning and artificial intelligence that supports certain products and development of features and functionality with the Appello software platform and similar products and services. This includes automated analysis of assessment submissions, lead scoring, and product recommendations. We do not currently use AI or machine learning to directly detect fraud and security threats, though we may indirectly use authentication tools that employ such technologies.

We may publish data about how our product and services are being used across our customer base. When we share statistical information externally in this way, the data will be aggregated and we will not identify individual users or customers. For example, we may publish blog posts on trends or insights into how users are interacting with our product.

e. Automated Processing and Artificial Intelligence

We use automated processing and artificial intelligence (AI) to analyze assessment submissions, generate lead scores, provide product recommendations, and improve our services through machine learning. We do not currently use AI or machine learning to directly detect fraud and security threats, though we may indirectly use authentication tools that employ such technologies.

Automated Decision Making: We may use automated processing to score and prioritize leads based on assessment responses and recommend products or features based on your usage. You have the right to request human review of automated decisions, object to automated processing, and opt-out of automated decision-making where applicable. To exercise these rights, contact us at info@useappello.com.

d. To secure and protect our product and Appello users

We use your account information to investigate and help prevent security incidents. We may also use this information to meet legal requirements. We use your information to verify user accounts, and to help optimize the system to best serve our client needs.

3. How We Share Personal Data

a. Service Providers

We may share Personal Data with our third-party service providers to support our websites, products, and services. For example, we use service providers for data hosting, and to store and backup the Appello software platform. We may need to share your information with service providers to provide information about products or services to you.

Accounting Integrations

If you use our QuickBooks Online integration, we sync financial data (bills, invoices, payments), job costing information, and customer and vendor information. This data is processed according to your instructions and our Data Processing Agreement. QuickBooks' use of your information is governed by Intuit's Privacy Policy: https://www.intuit.com/privacy/statement/.

Mapping and Geocoding Services

We use Google Maps API and Google Geocoding API to convert addresses to geographic coordinates, display maps and location-based features, provide navigation and directions, and geocode business addresses for our directory. When you provide address information, we may share it with Google Maps API to obtain coordinates and location data. Google's use of this data is governed by Google's Privacy Policy: https://policies.google.com/privacy. We do not share your personal location data (GPS coordinates from mobile devices) with Google Maps API - only address information you provide for geocoding purposes.

Analytics and Performance Monitoring

We use Vercel Analytics and Vercel Speed Insights to monitor website performance, analyze usage patterns, and improve our services. These services collect anonymized usage data and performance metrics. Vercel's use of your information is governed by Vercel's Privacy Policy: https://vercel.com/legal/privacy-policy.

b. Partners

We may share data with trusted Appello partners to contact you based on your request to receive such communications, help us perform statistical analysis or to provide training and support. Partners are prohibited from using your Personal Data except for these purposes, and they are required to maintain the confidentiality of your data.

c. Compelled Disclosure

We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process. If you use the Appello software platform, Personal Data is considered Confidential Information and you should review the Confidentiality terms in the User Terms of Service for more information. We will notify you of any legally required disclosure unless prohibited by law.

4. How We Store and Secure Personal Data

a. Data Storage and Security

We use a variety of security technologies and procedures to help protect your Personal Data from unauthorized access, use or disclosure. We secure the Personal Data you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. All Personal Data is protected using appropriate physical, technical and organizational measures. For more on data security at Appello, please see our Data Processing Agreement.

b. Retention of Personal Data

How long we keep information we collect about you depends on the type of information and how we collect and store it. After a reasonable period of time, we will either delete or anonymize your information or, if this is not possible, then we will securely store your information and isolate it from any further use until deletion is possible. Further information on retention of Personal Data appears in our Data Processing Agreement.

We retain Personal Data that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements). When we have no ongoing legitimate business need to process your Personal Data, we securely delete the information or anonymize it or, if this is not possible, securely store your Personal Data and isolate it from any further processing until deletion is possible. We will delete this information at an earlier date if you so request, as described in the section "Privacy Rights and Choices" below.

The data our clients process in connection with the Appello software platform is retained according to the Appello Data Processing Agreement.

5. Cookies and Similar Technologies

When you visit our website or sign up for an Appello account, we collect information automatically using tracking technologies, like cookies and tracking pixels. For more information, and to learn how to opt out, please refer to our Cookie Policy.

Appello and our partners use cookies or similar technologies (such as web beacons and JavaScript) to analyze trends, administer the website, monitor how visitors navigate around the websites, and to gather demographic information about our user base. To find out more about how we use cookies on our websites and how to manage your cookie preferences please see the Appello Cookie Policy.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

Note: If you have enabled International Company-Level Identification on your account, you also have the option to opt out of the collection of your personal data in compliance with GDPR. To exercise this option, please visit https://www.rb2b.com/rb2b-gdpr-opt-out.

6. Your Privacy Rights and Choices

a. Personal Data Requests

You have the following data protection rights:

• Access, Correction or Deletion. You can request access, correction, updates or deletion of your Personal Data.
• Objection. You can object to our processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data.
• Withdraw Consent. If we have collected and processed your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent.
• Complaint. You have the right to complain to a data protection authority about our collection and use of your Personal Data.

We do not sell personal information.

To exercise any of these rights write to us by mail at:

Please note that to protect personal information, we may verify your identity by a method appropriate to the type of request you are making. Depending on where you reside, you may be entitled to empower an "authorized agent" to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination.

We will respond to your request to change, correct, or delete your data within 30 days (or as required by applicable law, such as within 72 hours for certain GDPR requests) and notify you of the action we have taken. In some instances, your rights may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights.

If you are a client, prospect, or otherwise interact with an Appello client that uses our Appello software platform and would like to access, correct, amend or delete your data controlled by the client, please contact the relevant client directly. Appello acts as a processor for our customers and will work with our customers to fulfill these requests when applicable.

b. Anti-Spam Policy

Our Anti-Spam Policy applies to us and to our clients and, among other things, prohibits use of the Appello software platform to send unsolicited commercial email in violation of applicable laws, and requires the inclusion in every automated email sent using the Appello software platform of an "opt-out" mechanism and other required information. We require all of our client to agree to adhere to the Anti-Spam Policy at all times, and any violations by a client can result in immediate suspension or termination of the Appello software platform.

7. Other Important Privacy Information

a. We Never Sell Personal Data.

We will never sell your Personal Data to any third party.

b. Information About Children

The websites, product and services are not intended for or targeted at children under 16, and we do not knowingly or intentionally collect Personal Data about children under 16. If you believe that we have collected Personal Data about a child under 16, please contact us here, so that we may delete the information.

c. International Data Transfers

Personal Data may be transferred to and processed in countries outside of your country of residence. We ensure that such transfers comply with applicable Data Protection Laws, including by implementing appropriate safeguards such as standard contractual clauses approved by relevant data protection authorities or other mechanisms recognized under applicable Data Protection Laws. For more information about international data transfers, please see our Data Processing Agreement.

d. Third Party Dispute Resolution

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact Appello at info@useappello.com. You also have the right to file a complaint with your local data protection authority.