LAST UPDATED: December 27, 2024
This page contains additional information relevant to specific state laws and regulations regarding data privacy, including rights that may be available to residents of such states. The information below applies if you are a resident of that applicable state. This Privacy Notice - State Information and Rights is an addendum to the content provided in and forms a part of AppFolio’s Privacy Notice.
1. Additional Disclosures
1.1. Categories of Personal Information Collected. The categories of personal information that we collect are described in our Privacy Notice under the section titled "Information We Collect." The business and commercial purposes for which we collect your personal information can be found in our Privacy Notice under the section titled "How We Use Your Information."
1.2. Categories of Personal Information Disclosed to Third Parties. We disclose the categories of personal information described in our Privacy Notice under the section titled "Information We Collect" to third parties for the following business and commercial purposes:
Providing our Services, including maintaining and servicing your account
Safeguarding your information
Securing and monitoring our Websites and Services
Marketing our Services, including to provide targeted and cross-context behavioral advertising personalized to you
Processing transactions and payments
Putting on events and webinars
Undertaking research and development to improve our Services, including gathering analytics for our Websites and Services
Performing administrative functions, including business and financial recordkeeping
Sales and customer onboarding
Providing customer support
Processing employment applications
The chart below specifies (a) the categories of personal information that may have been disclosed to a third party for a business purpose and (b) the categories of third parties to whom that personal information may be disclosed. More information regarding what personal information we collect and the sources of the information can be found in our Privacy Notice under the section titled “Information We Collect."
| Categories of personal information disclosed to third parties | Categories of third parties to whom personal information is disclosed |
|---|---|
| Personal Identifiers | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Financial Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Customer Records | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Internet or Electronic Network Information | Service providers; Business Customers; corporate affiliates; integration partners; business transferees; legal and safety related third parties; and other third parties with your consent or at your direction |
| Geolocation Data | Service providers; Business Customers; corporate affiliates; integration partners; business transferees; legal and safety related third parties; and other third parties with your consent or at your direction |
| Sensitive Personal Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Commercial Information | Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction |
| Professional or Employment Related Information | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Education Information | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
| Characteristics of Protected Classes | Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction |
1.3. Sharing Personal Information for Cross-Context Behavioral Advertising and Targeted Advertising.
We may share certain personal information with third parties for cross-context behavioral advertising or targeted advertising purposes. The chart below specifies (a) the categories of personal information that may be shared with a third party for cross-context behavioral advertising or targeted advertising and (b) the categories of third parties to whom that personal information may be shared for the purpose of cross-context behavioral advertising or targeted advertising.
| Categories of personal information which are shared for cross-context behavioral advertising | Categories of third parties to whom personal information is shared for cross-context behavioral advertising |
|---|---|
| Personal Identifiers | Advertising and marketing service providers; social media sites |
| Internet or Electronic Network Information | Advertising and marketing service providers; social media sites |
| Geolocation Data | Advertising and marketing service providers; social media sites |
1.4. Opt-Out Preference Signals.
Residents of California, Colorado, Connecticut, Delaware, Nebraska, New Hampshire, and Texas have the option to opt out of cross-context behavioral and targeted advertising by enabling the Global Privacy Control (GPC) signal in supported browsers or browser extensions. For more information about GPC and how to use it, visit globalprivacycontrol.org.
Please note that if you choose to use the GPC Signal, you will need to enable it individually for each supported browser or extension you use. Alternatively, you can submit a separate opt-out request using the link provided here.
2. California Rights
2.1. Your California Rights Regarding Your Personal Information. California law provides California residents with the rights listed below. To exercise these rights, please see the “Exercising Your California Privacy Rights” section below.
Right to Know. You have the right to know what personal information we have collected and disclosed about you in the last 12 months, including:
The categories of personal information we have collected about you;
The categories of sources of the personal information;
The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
The categories of personal information we have sold or shared and the categories of third parties to whom the information was sold or shared; and
The business or commercial purposes for collecting, selling, or sharing the personal information; and
The specific pieces of personal information we have collected about you.
Right to Correct. You have the right to request that we correct inaccurate personal information.
Right to Delete. You have the right to request that we delete the personal information we have collected from you (subject to certain statutory exemptions).
Right to Access/Portability. You have the right to request a copy of the personal information we have collected about you.
Right to Opt Out. You have the right to opt out of the sharing of your personal information to a third party for cross-context behavioral advertising (as defined under California law).
You also have the right not to be discriminated against for exercising any of the rights listed above.
2.2. Sensitive Personal Information. Certain categories of personal information we collect and use to provide the Services may be deemed "sensitive personal information" under California law (such as: social security number, driver’s license, financial account or card numbers, precise geolocation, racial and ethnic characteristics, and content of mail, email, and text messages sent through our systems). We do not use or disclose sensitive personal information other than to provide our Services and as otherwise permitted by California law.
2.3. Exercising Your California Privacy Rights.
To exercise your rights to know, correct, delete, or access/portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "California Rights Request"
To opt out of the sharing of personal information for cross-context behavioral advertising, you may visit here.
In order for us to response to certain requests made under this Section 2.3, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or a form of government issued identification. Authorized agents can make a request on your behalf if you provide us with a valid legal power of attorney and a form of government issued identification for both the requester and authorized agent. In certain circumstances, we may decline a request to exercise the right to know, correct, delete, or access/portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
3.1 Your Rights Regarding Your Personal Information. Colorado, Connecticut, Montana, Nebraska, New Hampshire, New Jersey, Texas, Utah, and Virginia law provides their residents with certain rights, as listed below. To exercise these rights, please see the “Exercising Your Privacy Rights” section below.
Right to Access. You have the right to confirm whether we are processing your personal information and access what personal information we have collected about you.
Right to Correct. You have the right to request that we correct inaccurate personal information (Colorado, Connecticut, Montana, Nebraska, New Hampshire, New Jersey, Texas, and Virginia only).
Right to Delete. You have the right to request that we delete the personal information we have collected about you (subject to certain statutory exemptions).
Right to Data Portability. You have the right to request a copy of the personal information we have collected about you.
Right to Opt Out. You have the right to opt out of targeted advertising (as defined by each states' respective law).
3.2 Exercising Your Privacy Rights.
Colorado: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Colorado Rights Request"
Connecticut: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Connecticut Rights Request"
Iowa: To exercise your rights to access, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Iowa Rights Request"
Montana: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Montana Rights Request"
Nebraska: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Nebraska Rights Request"
New Hampshire: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "New Hampshire Rights Request"
New Jersey: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "New Jersey Rights Request"
Texas: To exercise your rights to access, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Texas Rights Request"
Utah: To exercise your rights to access, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Utah Rights Request"
Virginia: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Virginia Rights Request"
To opt out of the sharing of personal information for targeted advertising in each of the states above, you may visit here.
In order for us to respond to certain requests, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or a form of government issued identification. Authorized agents, legal guardians, or conservators may make a request on your behalf by providing (1) a valid legal power of attorney or protective order and (2) a form of government issued identification for both the requester and authorized agent via the forms linked above. In certain circumstances, we may decline a request to exercise the right to access, correct, delete, or data portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
4. Delaware and Oregon Rights
4.1. Your Rights Regarding Your Personal Information. Delaware and Oregon law provides their residents with certain rights, as listed below. To exercise these rights, please see the “Exercising Your Privacy Rights” section below.
Right to Access. You have the right to confirm whether we are processing your personal information and access what personal information we have collected and disclosed about you, including:
The categories of personal information we have collected about you; and
A list of third parties to whom we disclosed your personal information for a business purpose.
Right to Correct. You have the right to request that we correct inaccurate personal information.
Right to Delete. You have the right to request that we delete the personal information we have collected from you (subject to certain statutory exemptions).
Right to Data Portability. You have the right to request a copy of the personal information we have collected about you.
Right to Opt Out. You have the right to opt out of targeted advertising (as defined by each states’ respective law).
4.2. Exercising Your Privacy Rights.
Delaware:To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Delaware Rights Request"
Oregon:To exercise your rights to access, correct, delete, or data portability, please submit a request by:
Filling out this form to submit a Data Subject Request; or
Emailing privacy@appfolio.com with the subject line "Oregon Rights Request"
To opt out of the sharing of personal information for targeted advertising, you may visit here.
In order for us to respond to certain requests, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or a form of government issued identification. Authorized agents, legal guardians, or conservators may make a request on your behalf by providing a valid legal power of attorney or other protective arrangement and a form of government issued identification for both the requester and authorized agent via the forms linked above. In certain circumstances, we may decline a request to exercise the right to access, correct, delete, or data portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
In the event you disagree with the outcome of a request, you may initiate an appeal via the appeals link provided in the email response to your request or via this link. Please note that an appeal should only be submitted after you have received a response to your original request.