Workato policy evolution

“(iv) Account Holder may decide (in its sole discretion) to share the private Platform Assets with other Users by marking them “public”. Such Platform Assets will become part of the Community Platform Assets, and Account Holder grants Workato an irrevocable, perpetual, transferable, royalty-free, sublicensable, and worldwide license to view, use, perform, copy, modify, and distribute those Platform Assets and use the Marks associated with those Platform Assets by Account Holder solely for the purpose of distributing those Platform Assets in the Workato Platform.”

“(iv) Account Holder may decide (in its sole discretion) to share the private Platform Assets with other Users by marking them “public”. Such Platform Assets will become part of the Community Platform Assets, and Account Holder grants Workato an irrevocable, perpetual, transferable, royalty-free, sublicensable, and worldwide license to view, use, perform, copy, modify, and distribute those Platform Assets and use the Marks associated with those Platform Assets by Account Holder solely for the purpose of distributing those Platform Assets in the Workato Platform.”

“Workato will retain your personal information for a period of time consistent with the original purpose of collection (see the “Use of Personal Information” section above) or as long as necessary to comply with our legal obligations, maintain accurate accounting, financial and other operational records, resolve disputes, and enforce our Agreements. We determine the appropriate retention period for personal information on the basis of the amount, nature, and sensitivity of the personal information being processed, the potential risk of harm from unauthorized use or disclosure of the personal information, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation). After expiry of the applicable retention periods, your personal information will be deleted. Specific information about retention periods for components of a Workato Account can be found in the relevant section of our online documentation. Please also contact us if you have any questions.”

“(iii) Workato will delete the Accounts (together with all associated Account Assets, Transaction Data, and Account Holder Data) left in Workato’s system within ninety (90) days after termination or expiration of this Agreement, or within thirty (30) days after Account Holder’s written request, unless otherwise legally prohibited.”

“For all paying Users, we maintain a record of Service subscriptions, invoices, billing and payment information. For Users who pay by credit card, our third-party payment sub-processor as listed on our subprocessor page will process your credit card information. We will collect and associate the payment information with a Subscription ID but we do not store any payment card information ourselves. If you have questions about how our processor or subprocessor protects the data it receives from Users, please refer to its websites as listed in https://www.workato.com/legal/sub-processors .”

“We may share your personal information by disclosing it to a third party for a business purpose as stated below. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Workato has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below in subsection 5.C (“Categories of Third-Party Recipients of Personal Information”). We do not sell personal information. In the preceding twelve (12) months, we have not sold personal information.”

“We may share your personal information by disclosing it to a third party for a business purpose as stated below. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Workato has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below in subsection 5.C (“Categories of Third-Party Recipients of Personal Information”). We do not sell personal information. In the preceding twelve (12) months, we have not sold personal information.”

“We may share your personal information by disclosing it to a third party for a business purpose as stated below. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Workato has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below in subsection 5.C (“Categories of Third-Party Recipients of Personal Information”). We do not sell personal information. In the preceding twelve (12) months, we have not sold personal information.”

“If you access our Site or Service through a third-party service (for example, logging into the Site using Google or Salesforce credentials), or connect an application to Workato, that third party you connected with may pass certain information about your use of its service to Workato. This information could include but is not limited to the User ID associated with your account; an access token necessary to access that service; any information that you have permitted the third party to share with us; and any information you have made public in connection with that third-party service, such as a user profile. The information we receive will depend on the policies and your account settings with the third-party service. We do not use such information to develop, improve or train generalized AI and/or machine learning models without your prior written consent.”

“Workato will compile statistical and technical data and information related to or generated through the performance, operation and use of the Workato Platform and related features and functionality (together, “ Usage Data ”). For purposes of clarity, Usage Data includes information provided by the Users in connection with the creation or administration of their Account, including names, usernames and email addresses associated with the account, but excludes all data processed in the Services. Workato will not publicly disclose Usage Data unless it is aggregated and anonymized. Workato may use Usage Data during and after the term for the purposes of implementing, operating, maintaining, auditing compliance, and improving (including training and machine learning of) the Services and fulfilling its obligations hereunder. Workato also maintains system log files which may include internet protocol addresses, browser, internet service provider, pages visited within Workato’s Sites, referring/exit pages, search terms, operating system, date/time stamp, and clickstream data.”

“We may share your personal information by disclosing it to a third party for a business purpose as stated below. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Workato has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below in subsection 5.C (“Categories of Third-Party Recipients of Personal Information”). We do not sell personal information. In the preceding twelve (12) months, we have not sold personal information.”

“We may share your personal information by disclosing it to a third party for a business purpose as stated below. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Workato has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below in subsection 5.C (“Categories of Third-Party Recipients of Personal Information”). We do not sell personal information. In the preceding twelve (12) months, we have not sold personal information.”

“Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of personal information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to: support@workato.com or Workato Inc., 1530 Page Mill Road, Suite 100, Palo Alto, California 94304, United States, Attn: Legal. Moreover, we are required by the California Consumer Privacy Act of 2018 (“CCPA”) to provide this CCPA Notice to California residents to explain how we collect, use and share their personal information, and the rights and choices we offer California residents regarding our handling of their personal information, which the CCPA currently defines as “information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” This CCPA Notice does not apply to individuals with whom Workato engages in the individuals’ capacity as representatives of businesses that may provide services to Workato, or to which Workato may provide its Services.”

“d) Right to opt-out of the sale of personal information. Please note that we do not sell personal information we collect from you, in accordance with the definition of sell in the CCPA and its supplemental regulations.”

“To exercise any of these rights please send an email to support@workato.com or call +1-844-469-6752. To appeal a decision regarding a consumer rights request please email privacy@workato.com . Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request by phone by calling: +1-844-469-6752. However, please know we do not currently sell data triggering that statute's opt-out requirements.”

“Workato offers its Services to customers in various geographic regions, including the United States, the EEA and the UK. However, as described in Sections 3 (Sources of Collection) and 10 (International Transfers), some personal data may nonetheless be collected, transferred to and stored by us in the United States and by our service providers that are based in the United States as necessary for the purpose of providing the Services and for the business purposes described in this Services Privacy Policy. Laws in the U.S. may be less stringent or otherwise different from the laws where you reside. Where applicable or required by law, we will ensure that the recipient of your personal data offers an adequate level of protection and security, for instance by entering into appropriate standard contractual clauses or an alternative mechanism for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other applicable regulators. Moreover, we transfer some of your personal data as a matter of “contractual necessity” (for further information on the type of personal data concerned, please read Section 15.A “Legal Bases For Processing” above).”