Privacy Notice – State Information and Rights

LAST UPDATED: June 30, 2025


This page contains additional information relevant to specific state laws and regulations regarding data privacy, including rights that may be available to residents of such states. The information below applies if you are a resident of that applicable state. This Privacy Notice - State Information and Rights is an addendum to the content provided in and forms a part of AppFolio’s Privacy Notice.

1\.1. Categories of Personal Information Collected. The categories of personal information that we collect are described in our Privacy Notice under the section titled "Information We Collect." The business and commercial purposes for which we collect your personal information can be found in our Privacy Notice under the section titled "How We Use Your Information."
1\.2. Categories of Personal Information Disclosed to Third Parties. We disclose the categories of personal information described in our Privacy Notice under the section titled "Information We Collect" to third parties for the following business and commercial purposes:

• Providing our Services, including maintaining and servicing your account
• Safeguarding your information
• Securing and monitoring our Websites and Services
• Marketing our Services, including to provide targeted and cross-context behavioral advertising personalized to you
• Processing transactions and payments
• Putting on events and webinars
• Undertaking research and development to improve our Services, including gathering analytics for our Websites and Services
• Performing administrative functions, including business and financial recordkeeping
• Sales and customer onboarding
• Providing customer support
• Processing employment applications

The chart below specifies (a) the categories of personal information that may have been disclosed to a third party for a business purpose and (b) the categories of third parties to whom that personal information may be disclosed. More information regarding what personal information we collect and the sources of the information can be found in our Privacy Notice under the section titled “Information We Collect."

Categories of personal information disclosed to third parties	Categories of third parties to whom personal information is disclosed
Personal Identifiers	Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction
Financial Information	Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction
Customer Records	Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction
Internet or Electronic Network Information	Service providers; Business Customers; corporate affiliates; integration partners; business transferees; legal and safety related third parties; and other third parties with your consent or at your direction
Geolocation Data	Service providers; Business Customers; corporate affiliates; integration partners; business transferees; legal and safety related third parties; and other third parties with your consent or at your direction
Sensitive Personal Information	Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction
Commercial Information	Service providers; Business Customers; corporate affiliates; integration partners; credit bureaus; business transferees; professional advisors; legal and safety related third parties; and other third parties with your consent or at your direction
Professional or Employment Related Information	Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction
Education Information	Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction
Characteristics of Protected Classes	Service providers; corporate affiliates; business transferees; employment related third parties; legal and safety related third parties; and other third parties with your consent or at your direction

1\.3. Sharing Personal Information for Cross-Context Behavioral Advertising and Targeted Advertising.
We may share certain personal information with third parties for cross-context behavioral advertising or targeted advertising purposes. The chart below specifies (a) the categories of personal information that may be shared with a third party for cross-context behavioral advertising or targeted advertising and (b) the categories of third parties to whom that personal information may be shared for the purpose of cross-context behavioral advertising or targeted advertising.

Categories of personal information which are shared for cross-context behavioral advertising	Categories of third parties to whom personal information is shared for cross-context behavioral advertising
Personal Identifiers	Advertising and marketing service providers; social media sites
Internet or Electronic Network Information	Advertising and marketing service providers; social media sites
Geolocation Data	Advertising and marketing service providers; social media sites

We may also use cookies and similar tracking technologies that enable certain advertising networks, social media companies, analytics services, and other third-party businesses to collect and disclose your personal information directly from your browser or device when you visit or interact with our Websites or Services or otherwise engage with us online for cross-context behavioral advertising purposes. Please refer to our Cookie Policy for more information. You may manage your cookie preferences and opt out of certain cookies on our Websites by visiting here.

Residents of California, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia have the right to opt out of the use of their personal information for targeted advertising, also referred to as cross-context behavioral advertising. To exercise this right directly, please visit here.
Authorized agents may initiate the opt out process by emailing us at privacy@appfolio.com with the subject line “Authorized Agent Opt-Out Request.” The email must include written permission, signed by the individual to whom the request relates, authorizing the agent to act on their behalf. Please note that we do not require identity verification to process opt out requests.

Residents of California, Colorado, Connecticut, Delaware, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, and Texas have the option to opt out of cross-context behavioral or targeted advertising by enabling the Global Privacy Control (GPC) signal in supported browsers or browser extensions. For more information about GPC and how to use it, visit globalprivacycontrol.org.
Please note that if you choose to use the GPC Signal, you will need to enable it individually for each supported browser or extension you use. Alternatively, you can submit a separate request to opt out of cross-context behavioral or targeted advertising using the link provided here.

4\.1. Your California Rights Regarding Your Personal Information. California law provides California residents with the rights listed below. To exercise these rights, please see the “Exercising Your California Privacy Rights” section below.

• Right to Know. You have the right to know what personal information we have collected and disclosed about you in the last 12 months, including:
  
  
  
  • The categories of personal information we have collected about you;
  
  
  • The categories of sources of the personal information;
  
  
  • The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
  
  
  • The categories of personal information we have sold or shared and the categories of third parties to whom the information was sold or shared; and
  
  
  • The business or commercial purposes for collecting, selling, or sharing the personal information; and
  
  
  • The specific pieces of personal information we have collected about you.
  
  
  
  


• Right to Correct. You have the right to request that we correct inaccurate personal information.


• Right to Delete. You have the right to request that we delete the personal information we have collected from you (subject to certain statutory exemptions).


• Right to Access/Portability. You have the right to request a copy of the personal information we have collected about you.


• Right to Opt Out.You have the right to opt out of the sharing of your personal information to a third party for cross-context behavioral advertising (as defined under California law).


You also have the right not to be discriminated against for exercising any of the rights listed above.
4\.2. Sensitive Personal Information. Certain categories of personal information we collect and use to provide the Services may be deemed "sensitive personal information" under California law (such as: social security number, driver’s license, financial account or card numbers, precise geolocation, racial and ethnic characteristics, and content of mail, email, and text messages sent through our systems). We do not use or disclose sensitive personal information other than to provide our Services and as otherwise permitted by California law.
4\.3. Exercising Your California Privacy Rights.

• To exercise your rights to know, correct, delete, or access/portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "California Rights Request"
• To opt out of the sharing of personal information for cross-context behavioral advertising, see Section 2.

In order for us to respond to certain requests made under this Section 4.3, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or a form of government issued identification. Authorized agents can make a request on your behalf if you provide us with a valid legal power of attorney and a form of government issued identification for both the requester and authorized agent. In certain circumstances, we may decline a request to exercise the right to know, correct, delete, or access/portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.

5\.1. Your Rights Regarding Your Personal Information. Colorado, Connecticut, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Tennessee, Texas, Utah, and Virginia law provides their residents with certain rights, as listed below. To exercise these rights, please see the “Exercising Your Privacy Rights” section below.

• Right to Access. You have the right to confirm whether we are processing your personal information and access what personal information we have collected about you.
• Right to Correct. You have the right to request that we correct inaccurate personal information (Colorado, Connecticut, Montana, Nebraska, New Hampshire, New Jersey, Tennessee, Texas, and Virginia only).
• Right to Delete. You have the right to request that we delete the personal information we have collected about you (subject to certain statutory exemptions).
• Right to Data Portability. You have the right to request a copy of the personal information we have collected about you.
• Right to Opt Out. You have the right to opt out of targeted advertising (as defined by each states' respective law).

5\.2. Exercising Your Privacy Rights.

• Colorado: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Colorado Rights Request"

• Connecticut: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Connecticut Rights Request"

• Iowa: To exercise your rights to access, delete, or data portability, please submit a request by:
  
  Filling out this form to submit a Data Subject Request; or


• Emailing privacy@appfolio.com with the subject line "Iowa Rights Request"

• Montana: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Montana Rights Request"

• Nebraska: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Nebraska Rights Request"

• New Hampshire: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "New Hampshire Rights Request"

• New Jersey: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "New Jersey Rights Request"

• Tennessee: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Tennessee Rights Request"

• Texas: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  
  Filling out this form to submit a Data Subject Request; or


• Emailing privacy@appfolio.com with the subject line "Texas Rights Request"

• Utah: To exercise your rights to access, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  • Emailing privacy@appfolio.com with the subject line "Utah Rights Request"
• Virginia: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Virginia Rights Request"

• To opt out of the sharing of personal information for targeted advertising in each of the states above, see Section 2.

In order for us to respond to certain requests, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or a form of government issued identification. Authorized agents, legal guardians, or conservators may make a request on your behalf by providing (1) a valid legal power of attorney or protective order and (2) a form of government issued identification for both the requester and authorized agent via the forms linked above. In certain circumstances, we may decline a request to exercise the right to access, correct, delete, or data portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.

6\.1. Your Rights Regarding Your Personal Information. Delaware, Minnesota, and Oregon law provides their residents with certain rights, as listed below. To exercise these rights, please see the “Exercising Your Privacy Rights” section below.

• Right to Access. You have the right to confirm whether we are processing your personal information and access what personal information we have collected and disclosed about you, including:
  
  
• The categories of personal information we have collected about you; and


• A list of third parties to whom we disclosed your personal information for a business purpose.

• Right to Correct. You have the right to request that we correct inaccurate personal information.
• Right to Delete. You have the right to request that we delete the personal information we have collected from you (subject to certain statutory exemptions).
• Right to Data Portability. You have the right to request a copy of the personal information we have collected about you.
• Right to Opt Out. You have the right to opt out of targeted advertising (as defined by each states’ respective law).

6\.2. Exercising Your Privacy Rights.

• Delaware: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Delaware Rights Request".

• Minnesota: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Minnesota Rights Request"

• Oregon: To exercise your rights to access, correct, delete, or data portability, please submit a request by:
  • Filling out this form to submit a Data Subject Request; or
  
  
• Emailing privacy@appfolio.com with the subject line "Oregon Rights Request"

• To opt out of the sharing of personal information for targeted advertising, see Section 2.

In order for us to respond to certain requests, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or a form of government issued identification. Authorized agents, legal guardians, or conservators may make a request on your behalf by providing a valid legal power of attorney or other protective arrangement and a form of government issued identification for both the requester and authorized agent via the forms linked above. In certain circumstances, we may decline a request to exercise the right to access, correct, delete, or data portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.

In the event you disagree with the outcome of a request, you may initiate an appeal via the appeals link provided in the email response to your request or via this link. Please note that an appeal should only be submitted after you have received a response to your original request.