EFFECTIVE DATE: December 30, 2022
This page contains additional information relevant to specific state laws and regulations regarding data privacy, including rights that may be available to residents of such states. The information below applies if you are a resident of the specific state. This is an addendum to the content provided in and forms a part of AppFolio’s Privacy Notice.
1.1 Categories of Personal Information Disclosed to Third Parties. We disclose the categories of personal information described in our Privacy Notice under the section titled “Information We Collect” to third parties for the following business and commercial purposes:
Providing our Services, including maintaining and servicing your account
Safeguarding your information
Securing and monitoring our Websites and Services
Marketing our Services, including to provide targeted and cross-contextual behavioral advertising personalized to you
Processing transactions and payments
Putting on events and webinars
Undertaking research and development to improve our Services, including gathering analytics for our Websites and Services
Performing administrative functions, including business and financial recordkeeping
Sales and customer onboarding
Providing customer support
Processing employment applications
The chart below specifies (a) the categories of personal information that may have been disclosed to a third party for a business purpose and (b) the categories of third parties to whom that personal information may be disclosed. More information regarding what personal information we collect and the sources of the information can be found in our Privacy Notice under the section titled “Information We Collect”. The business and commercial purposes for which we collect your personal information can be found in our Privacy Notice under the section titled “How We Use Your Information".
| Categories of personal information disclosed to third parties | Categories of third parties to whom personal information is disclosed |
|---|---|
| Personal Identifiers | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Financial Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Customer Records | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Internet or Electronic Network Information | Service providers; Business Customers; corporate affiliates; integration partners; business transferees; legal and safety related third parties; and other third parties with your consent or at your direction |
| Geolocation Data | Service providers; Business Customers; corporate affiliates; integration partners; business transferees; legal and safety related third parties; and other third parties with your consent or at your direction |
| Sensitive Personal Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Commercial Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Professional or Employment Related Information | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Education Information | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Characteristics of Protected Classes | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
1.2 Sharing Personal Information for Cross-Context Behavioral Advertising.
We may share certain personal information with third parties for cross-context behavioral advertising purposes. The chart below specifies (a) the categories of personal information that may be shared with a third party for cross-context behavioral advertising and (b) the categories of third parties to whom that personal information may be shared for the purpose of cross-context behavioral advertising.
| Categories of personal information which are shared for cross-context behavioral advertising | Categories of third parties to whom personal information is shared for cross-context behavioral advertising |
|---|---|
| Personal Identifiers | Advertising and marketing service providers; social media sites |
| Internet or Electronic Network Information | Advertising and marketing service providers; social media sites |
| Geolocation Data | Advertising and marketing service providers; social media sites |
You have the right to opt out of the sharing of your personal information to a third party for cross-context behavioral advertising and may exercise your right to opt out of this “sharing” of personal information for cross-context behavioral advertising purpose by completing the form here.
1.3 Sensitive Personal Information. Certain categories of personal information we collect and use to provide the Services may be deemed "sensitive personal information" under California law (such as: social security number, driver’s license, financial account or card numbers, precise geolocation, racial and ethnic characteristics, and content of mail, email, and text messages sent through our systems). We do not use or disclose sensitive personal information other than to provide our Services and as permitted by California law. We do not sell or share sensitive personal information for the purpose of cross-context behavioral advertising.
1.4 Your California Rights Regarding Your Personal Information. California law provides California residents with the rights listed below. To exercise these rights, please see the “Exercising Your California Privacy Rights” section below.
Right to Know/Access. You have the right to know and see what personal information we have collected and disclosed about you in the last 12 months, including:
The categories of personal information we have collected about you;
The categories of sources of the personal information;
The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
The categories of personal information we have sold or shared and the categories of third parties to whom the information was sold or shared; and
The business or commercial purposes for collecting, selling, or sharing the personal information; and
The specific pieces of personal information we have collected about you.
Right to Delete. You have the right to request that we delete the personal information we have collected from you (subject to certain statutory exemptions).
Right to Correct. You have the right to request that we correct inaccurate personal information.
Right to Opt Out of Sharing. You have the right to opt out of the sharing of your personal information to a third party for cross-context behavioral advertising (as defined under California law).
You also have the right not to be discriminated against for exercising any of the rights listed above.
1.5 Exercising Your California Privacy Rights. To exercise your rights to know, access, correct, or delete, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "California Rights Request"
To opt out of the sharing of personal information for cross-context behavioral advertising, you may visit here.
To respond to certain requests made under this Section 1.5, you will need to (a) provide us with certain pieces of your personal information (which we will match against what we have in our records) and (b) complete our identity verification process. Authorized agents can make a request on your behalf if you provide us with a valid legal power of attorney and a form of government issued identification for both the requester and authorized agent. In certain circumstances, we may decline a request to exercise the right to know, access, correct, or delete, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
2.1 Your Virginia Rights Regarding Your Personal Data. Virginia law provides some Virginia residents with the rights listed below. To exercise these rights, please see the “Exercising Your Virginia Privacy Rights” section below.
Right to Know/Access. You have the right to know and see what personal information we have collected about you.
Right to Correct. You have the right to request that we correct inaccurate personal information.
Right to Delete. You have the right to request that we delete the personal information we have collected about you.
Right to Opt Out. You have the right to opt out of targeted advertising (as defined under Virginia law).
2.2 Exercising Your Virginia Privacy Rights. To exercise your rights to know, access, correct, or delete, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Virginia Rights Request"
To opt out of targeted advertising, you may visit here.
To respond to certain requests made under this Section 2.2, you will need to (a) provide us with certain pieces of your personal information (which we will match against what we have in our records) and (b) complete our identity verification process. Authorized agents can make a request on your behalf if you provide us with a valid legal power of attorney and a form of government issued identification for both the requester and authorized agent. In certain circumstances, we may decline a request to exercise the right to know, access, correct, or delete, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
Information on how you may appeal our refusal to take action on a Data Subject Request will be made available in our response to your original request.