LAST UPDATED: June 29, 2023
This page contains additional information relevant to specific state laws and regulations regarding data privacy, including rights that may be available to residents of such states. The information below applies if you are a resident of that applicable state. This Privacy Notice - State Information and Rights is an addendum to the content provided in and forms a part of AppFolio’s Privacy Notice.
1. Additional Disclosures
1.1. Categories of Personal Information Collected. The categories of personal information that we collect are described in our Privacy Notice under the section titled "Information We Collect." The business and commercial purposes for which we collect your personal information can be found in our Privacy Notice under the section titled "How We Use Your Information."
1.2. Categories of Personal Information Disclosed to Third Parties. We disclose the categories of personal information described in our Privacy Notice under the section titled "Information We Collect" to third parties for the following business and commercial purposes:
Providing our Services, including maintaining and servicing your account
Safeguarding your information
Securing and monitoring our Websites and Services
Marketing our Services, including to provide targeted and cross-context behavioral advertising personalized to you
Processing transactions and payments
Putting on events and webinars
Undertaking research and development to improve our Services, including gathering analytics for our Websites and Services
Performing administrative functions, including business and financial recordkeeping
Sales and customer onboarding
Providing customer support
Processing employment applications
The chart below specifies (a) the categories of personal information that may have been disclosed to a third party for a business purpose and (b) the categories of third parties to whom that personal information may be disclosed. More information regarding what personal information we collect and the sources of the information can be found in our Privacy Notice under the section titled “Information We Collect."
| Categories of personal information disclosed to third parties | Categories of third parties to whom personal information is disclosed |
|---|---|
| Personal Identifiers | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Financial Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Customer Records | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Internet or Electronic Network Information | Service providers; Business Customers; corporate affiliates; integration partners; business transferees; legal and safety related third parties; and other third parties with your consent or at your direction |
| Geolocation Data | Service providers; Business Customers; corporate affiliates; integration partners; business transferees; legal and safety related third parties; and other third parties with your consent or at your direction |
| Sensitive Personal Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Commercial Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Professional or Employment Related Information | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Education Information | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Characteristics of Protected Classes | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
1.3. Sharing Personal Information for Cross-Context Behavioral Advertising and Targeted Advertising.
We may share certain personal information with third parties for cross-context behavioral advertising or targeted advertising purposes. The chart below specifies (a) the categories of personal information that may be shared with a third party for cross-context behavioral advertising or targeted advertising and (b) the categories of third parties to whom that personal information may be shared for the purpose of cross-context behavioral advertising or targeted advertising.
| Categories of personal information which are shared for cross-context behavioral advertising | Categories of third parties to whom personal information is shared for cross-context behavioral advertising |
|---|---|
| Personal Identifiers | Advertising and marketing service providers; social media sites |
| Internet or Electronic Network Information | Advertising and marketing service providers; social media sites |
| Geolocation Data | Advertising and marketing service providers; social media sites |
2. California Rights
2.1. Your California Rights Regarding Your Personal Information. California law provides California residents with the rights listed below. To exercise these rights, please see the “Exercising Your California Privacy Rights” section below.
Right to Know. You have the right to know what personal information we have collected and disclosed about you in the last 12 months, including:
The categories of personal information we have collected about you;
The categories of sources of the personal information;
The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
The categories of personal information we have sold or shared and the categories of third parties to whom the information was sold or shared; and
The business or commercial purposes for collecting, selling, or sharing the personal information; and
The specific pieces of personal information we have collected about you.
Right to Correct. You have the right to request that we correct inaccurate personal information.
Right to Delete. You have the right to request that we delete the personal information we have collected from you (subject to certain statutory exemptions).
Right to Access/Portability. You have the right to request a copy of the personal information we have collected about you.
Right to Opt Out. You have the right to opt out of the sharing of your personal information to a third party for cross-context behavioral advertising (as defined under California law).
You also have the right not to be discriminated against for exercising any of the rights listed above.
2.2. Sensitive Personal Information. Certain categories of personal information we collect and use to provide the Services may be deemed "sensitive personal information" under California law (such as: social security number, driver’s license, financial account or card numbers, precise geolocation, racial and ethnic characteristics, and content of mail, email, and text messages sent through our systems). We do not use or disclose sensitive personal information other than to provide our Services and as otherwise permitted by California law.
2.3. Exercising Your California Privacy Rights.
To exercise your rights to know, correct, delete, or access/portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "California Rights Request"
To opt out of the sharing of personal information for cross-context behavioral advertising, you may visit here.
To respond to certain requests made under this Section 2.3, you will need to (a) provide us with certain pieces of your personal information (which we will match against what we have in our records) and (b) complete our identity verification process. Authorized agents can make a request on your behalf if you provide us with a valid legal power of attorney and a form of government issued identification for both the requester and authorized agent. In certain circumstances, we may decline a request to exercise the right to know, correct, delete, or access/portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
Colorado and Connecticut Effective Date: July 1, 2023
3.1 Your Rights Regarding Your Personal Information. Colorado, Connecticut, and Virginia law provides some Virginia residents with the rights listed below. To exercise these rights, please see the “Exercising Your Privacy Rights” section below.
Right to Access. You have the right to know and see what personal information we have collected about you.
Right to Correct. You have the right to request that we correct inaccurate personal information.
Right to Delete. You have the right to request that we delete the personal information we have collected about you.
Right to Data Portability. You have the right to request a copy of the personal information we have collected about you.
Right to Opt Out. You have the right to opt out of targeted advertising (as defined under Colorado, Connecticut, and Virginia law, respectively).
3.2 Exercising Your Privacy Rights.
Colorado: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Colorado Rights Request"
Connecticut: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Connecticut Rights Request"
Virginia: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Virginia Rights Request"
To opt out of the sharing of personal information for targeted advertising in each of the states above, you may visit here.
To respond to some rights, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or providing us a form of government issued identification. Authorized agents can make a request on your behalf if you provide us a valid legal power of attorney and a form of government issued identification for both the requester and authorized agent. In certain circumstances, we may decline a request to exercise the right to access, correct, delete, or data portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
Information on how you may appeal our refusal to take action on a Data Subject Request will be made available in our response to your original request.