Privacy Policy

Effective Date: January 2025

1. Introduction

This Privacy Policy ("Policy") is addressed to individuals with whom we interact in the course of our business, including customers, visitors to our Website, other users, etc. ("you"). This policy governs your use of our Services as defined in section 2. Please note that not all provisions of this policy will apply to you, as this will depend on your specific relationship with us. This policy outlines how we collect, use, and disclose your personal data in conjunction with your use of our Services, as well as your privacy rights and legal protection.

By using our Services, you affirm that you have read, understood, and agreed to this policy, and confirm you are at least 18 years of age (or the minimum legal age in your country of residence). If you do not agree or are unable to provide this affirmation, please refrain from using our Services and contact us at support@appvolve.co.

2. Definitions

For the purposes of this Policy:

  • 'You' means the individual accessing or using the Services, or the company, or other legal entity on behalf of which such individual is accessing or using the Services, as applicable.
  • 'Reseller' means the reseller of software and digital products.
  • 'Privacy laws' herein shall encompass, but not be limited to, the General Data Protection Regulation (GDPR) and any other applicable laws or regulations pertaining to the protection and processing of personal data.
  • 'Process', in respect of personal data, includes collecting, storing, using, restricting, erasing, destroying, and disclosing to others.
  • 'Controller' means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.
  • 'Processor' means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
  • 'Website' is our Website, accessible at appvolve.co.
  • 'Services' refers to the Website and its offerings in the course of business as a Reseller and through which you can buy, get, license, rent, or subscribe to the Product, including the Website and Checkout.
  • 'Service Provider' means any natural or legal person who processes the data on our behalf.
  • 'Personal Data' is any information that relates to an identified or identifiable individual, such as a name, email, a telephone number, IP address, etc.
  • 'Usage Data' refers to data collected automatically, like page visit duration.
  • 'Product' means the Supplier's software product(s) and/or any other digital content and any subsequent updates and upgrades thereto agreed to be resold or distributed by us.
  • 'Supplier' means a party that has appointed us to be the Reseller of its Products; the licensor of the Product, owner, or vendor of the Product.

3. What data do we collect

3.1. We do not intentionally collect or process sensitive personal data as part of our regular business operations as a Reseller.

3.2. Data Controller and Data Processor Roles

  • Data Controller: Generally, the Supplier is the Data Controller for personal data you provide. They are responsible for processing your personal data, complying with applicable data protection laws, and addressing your data rights.
  • Data Processor: As a Reseller, we act as a Data Processor for the Supplier. We handle personal data according to our cooperation with the Supplier and their lawful instructions.
  • Additional Data Controller: We may also act as the Data Controller for personal data processed through our Website. In this role, we determine the purposes and methods of processing when you contact us directly via email or other means.

3.3. Types of Data We Collect

We may collect the following categories of personal data in the course of offering, selling, supporting, or facilitating access to those applications:

  • Identification Information – such as your full name, email address, phone number, etc.
  • Contact Details – including billing address or other correspondence information.
  • Transactional Data – such as purchase history, order details, license keys, and payment-related information (excluding full payment card numbers, which are processed securely by third-party payment providers).
  • Account or Access Credentials – where necessary for provisioning access to licensed applications (e.g., username, user ID).
  • Support and Communication Records – including any inquiries, complaints, or feedback related to the applications or associated services.
  • Usage Data – where applicable, limited usage metrics necessary for license compliance, support, or application provisioning, depending on the product and provider.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Policy.

4. Purposes of Processing and Legal Bases for Processing

Purposes

We process your personal data in compliance with applicable data protection laws to provide, operate, and enhance our Services, as well as to satisfy our legal and regulatory obligations. Your information may be disclosed to trusted third-party service providers solely for these purposes and is stored securely for no longer than necessary.

Our processing activities include, but are not limited to:

  • Account management and authentication
  • Delivery of Services and Customer Support
  • Communication of administrative notices and important updates
  • Processing transactions, orders, and payments
  • Gathering user feedback and analytics for service improvement
  • Sending marketing communications in accordance with your preferences
  • Ensuring the security and integrity of our Services, including fraud detection and prevention

Legal Bases

We handle your personal information only when necessary and in accordance with applicable laws. Our legal grounds for processing your data include your consent, fulfilling contractual obligations, legal requirements, protecting your rights, and our legitimate business interests.

We process your Personal Data based on the following lawful bases:

  1. Performance of Contract: For processing necessary to negotiate, conclude, and fulfill a contract with you, including adherence to our Terms and Conditions.
  2. Legitimate Interest: For processing necessary to develop and improve our Services, while considering your interests, rights, and expectations.
  3. Consent: For any additional specific purposes where we have obtained your explicit consent.

5. With whom we may share Your Personal Data

a. Suppliers: We may transmit your personal data to the relevant Supplier to fulfill product and service orders on your behalf or to you directly. This includes sharing information to register your purchase for warranty, technical support, or after-sales services.

b. Service Providers: We may share your Personal Data with Service Providers for purposes such as service analysis, storage, advertising, support, and communication. We ensure these providers protect your data through agreements.

c. Business Transfers: In the event of a merger, acquisition, or similar transaction, your Personal Data may be transferred to third parties. We will notify you before any such transfer and update our Privacy Policy accordingly.

d. Business Partners: We may share your data with business partners to offer products, services, or promotions.

e. Law Enforcement: We may disclose your Personal Data if required by law or in response to valid requests from authorities.

f. Legal Requirements: We may also disclose your data to comply with legal obligations, protect our rights, investigate wrongdoing, or ensure safety.

6. How long do we keep Your Personal Data

We retain the personal data of resellers only for as long as necessary to fulfill the purposes for which it was collected, including managing the business relationship, compliance with legal obligations, resolving disputes, and enforcing our agreements. After these purposes have been fulfilled, we will securely delete or anonymize the personal data, unless a longer retention period is required or permitted by applicable law.

7. Transfer of Personal Data

Your Personal Data may be transferred to and processed in countries outside your own, including jurisdictions that may not have the same level of data protection as your country. We ensure that such transfers are conducted in accordance with applicable data protection laws and are protected by appropriate safeguards.

When we transfer your data internationally, we use various legal mechanisms to ensure your data remains protected, such as:

  1. Standard Contractual Clauses: We may use standardized agreements approved by relevant data protection authorities to ensure your data is safeguarded.
  2. Privacy Shield Frameworks: In some cases, we may rely on frameworks such as the EU-U.S. Privacy Shield (or its successor) for data transfers.
  3. Other Safeguards: We may implement additional measures to ensure that your data is protected in line with legal requirements.

By using our Services, you consent to the transfer and processing of your Personal Data in different jurisdictions as described in this Privacy Policy.

8. Security of Your Personal Data

We employ a range of appropriate technical and organizational safeguards to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These safeguards include secure servers, encryption technologies, access restrictions, and internal data protection protocols designed to maintain the confidentiality and integrity of your information.

While we make every effort to implement commercially reasonable security measures, no method of transmission over the Internet or method of electronic storage is entirely secure. As such, we cannot guarantee absolute security. You are also responsible for keeping your account credentials confidential and for all activities conducted under your account.

9. Children's Privacy

We do not knowingly collect or solicit personal information from children under the age of 13 in the United States (or the applicable minimum age in a given state), or under the age of 16 in the European Union. If we become aware that we have inadvertently collected personal data from a child below the relevant age threshold, we will take prompt steps to delete such information.

If you are a parent or legal guardian and believe that your child's personal information has been provided to us in violation of applicable data protection laws, please contact us to request its deletion.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data. These rights may include:

  • The right to access the personal data we hold about you.
  • The right to correct or update inaccurate or incomplete information.
  • The right to request the deletion or erasure of your personal data, subject to certain legal exceptions.
  • The right to restrict or object to the processing of your data in specific circumstances.
  • The right to data portability, allowing you to obtain and reuse your personal data for your own purposes across different services.
  • The right to withdraw consent at any time where processing is based on your consent (excluding services-related messages).

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request in accordance with applicable data protection laws.

11. Privacy Rights for U.S. Residents

If you reside in the United States, you may have certain rights under applicable state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) and the Virginia Consumer Data Protection Act (VCDPA). These rights can include:

  • Access: The right to request details about the personal information we collect, use, and share.
  • Deletion: The right to ask us to delete your personal information, subject to legal and operational exceptions.
  • Opt-Out: The right to opt out of the sale or sharing of your personal information for targeted advertising or marketing purposes.
  • Non-Discrimination: The right to receive equal service and pricing even if you exercise your privacy rights.
  • Data Portability: The right to obtain a copy of your personal data in a portable format.

Do Not Sell My Personal Information

We do not sell your personal information. If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to opt out of the sale of your personal information. Since we do not sell personal information, this right does not currently apply.

Do-Not-Track (DNT) Requests

Some web browsers include a DNT feature that signals to websites that a user does not want their online activities tracked. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to or honor browser-initiated DNT signals.

12. Links to third-party websites

Our Website and Services may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make changes, we will revise the "Last Updated" date at the top of the policy and, where appropriate, notify you by email or through a notice on our Website.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data. Your continued use of our services after any updates constitutes your acceptance of the revised policy.

14. Contact Us

If you have any comments or questions about this policy or our data protection practices, you can contact us by email: support@appvolve.co.