Workato policy evolution

“We may share your personal information by disclosing it to a third party for a business purpose as stated below. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Workato has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below in subsection 5.C (“Categories of Third-Party Recipients of Personal Information”). We do not sell personal information. In the preceding twelve (12) months, we have not sold personal information.”

“We may share your personal information by disclosing it to a third party for a business purpose as stated below. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Workato has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below in subsection 5.C (“Categories of Third-Party Recipients of Personal Information”). We do not sell personal information. In the preceding twelve (12) months, we have not sold personal information.”

“Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of personal information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to: support@workato.com or Workato Inc., 1530 Page Mill Road, Suite 100, Palo Alto, California 94304, United States, Attn: Legal. Moreover, we are required by the California Consumer Privacy Act of 2018 (“CCPA”) to provide this CCPA Notice to California residents to explain how we collect, use and share their personal information, and the rights and choices we offer California residents regarding our handling of their personal information, which the CCPA currently defines as “information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” This CCPA Notice does not apply to individuals with whom Workato engages in the individuals’ capacity as representatives of businesses that may provide services to Workato, or to which Workato may provide its Services.”

“d) Right to opt-out of the sale of personal information. Please note that we do not sell personal information we collect from you, in accordance with the definition of sell in the CCPA and its supplemental regulations.”

“To exercise any of these rights please send an email to support@workato.com or call +1-844-469-6752. To appeal a decision regarding a consumer rights request please email privacy@workato.com . Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request by phone by calling: +1-844-469-6752. However, please know we do not currently sell data triggering that statute's opt-out requirements.”

“Workato offers its Services to customers in various geographic regions, including the United States, the EEA and the UK. However, as described in Sections 3 (Sources of Collection) and 10 (International Transfers), some personal data may nonetheless be collected, transferred to and stored by us in the United States and by our service providers that are based in the United States as necessary for the purpose of providing the Services and for the business purposes described in this Services Privacy Policy. Laws in the U.S. may be less stringent or otherwise different from the laws where you reside. Where applicable or required by law, we will ensure that the recipient of your personal data offers an adequate level of protection and security, for instance by entering into appropriate standard contractual clauses or an alternative mechanism for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other applicable regulators. Moreover, we transfer some of your personal data as a matter of “contractual necessity” (for further information on the type of personal data concerned, please read Section 15.A “Legal Bases For Processing” above).”