Last updated November 15th, 2023.
This privacy policy for AppNFlat (“we,” “us,” “our”) describes how and why we might transfer, collect, store, use, and / or share (“process”) your information when you use any of our website, mobile applications, and / or cloud services (“Services”), as well as any other way you may engage with us.
“AppNFlat” refers to 15186170 Canada Inc.
We process personal information that you voluntarily provide to us whenever you interact with our Services or contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
We may also collect data necessary to process your payments if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument.
We automatically process data from the device you use to access our website, for analytics, security, and troubleshooting. This includes, but is not limited to:
We process your personal information for a variety of reasons:
We never sell your data. We may share your data with our providers, as described in the following section, for the purposes described in the previous section. We may also share parts of your data with other users of our Services to enable your use of our services and their use of our services. For example, we may share the messages you post with other users to enable other users to see and answer to them.
We may use third-party processors or providers for any data processing described in this Privacy Policy. These third-party processors include:
We will refer to these third-party processors as “Providers” in the rest of this Privacy Policy.
This list may evolve depending on the Services. In addition, this list includes any of the Providers’ subprocessors. If you wish an up-to-date list of those subprocessors, you can contact us (see the section Contacting Us).
We use cookies to allow you to stay logged in for long periods of time.
We do our best to use servers located in Canada to deliver our Services. However, many of our Providers do not have their servers in Canada. This means that by accessing our Services, you agree to Us and our Providers processing your data in Canada, the United States, and any other country where we or our Providers have servers.
If you use Stripe to pay us, Stripe may transfer your data internationally. Please refer to Stripe’s Privacy Policy and Terms Of Services for more information.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
We use industry standards to protect your data. This includes using encryption in transit for all data you provide us and encryption at rest for all data that we store, apart from data stored by Twilio Inc. We also use organizational security measures to protect any of your data. However, there remains an inherent risk to transmitting data across the Internet. By using our Services, you do so at your own risk. You should ensure you only access our Services in a secure environment.
For certain kinds of sensitive data, namely bank accounts details, we add an additional layer of encryption on top of the other methods described above. The keys used to encrypt this data are regularly rotated.
We do not knowingly collect data from children under 18 years of age. In order to use the Services, you must be 18 years of age or more. If we become aware that we have collected any such data, we will take reasonable measures to delete that data from our servers.
You have a right to request a copy, request rectification, and request deletion of your personal information. You may have other rights, depending on applicable laws. You can make requests concerning those rights by contacting us (see Section Contacting Us). When we receive such a request, we will make all reasonable efforts to comply with it. We may keep some information to prevent fraud, troubleshoot problems, and comply with legal requirements.
We may update this Privacy Policy. If we do so, we will indicate this by updating the “Last updated” date of this Policy and may notify you. The updated version will be effective as soon as it is published.
If you have questions or requests related to this Privacy Policy, you may contact our Data Controller, Data Protection Officer or Chief Privacy Officer at [email protected].