Privacy Statement

We may collect, use, share, and process your Personal Data when you engage with our websites, services, communications, offices, or events as detailed in our full Privacy Statement. This Privacy Statement Highlights provides a summary of our Personal Data processing practices and your rights.

Privacy Statement Overview

Important Information
‍The complete Privacy Statement from ReTax360 LLC includes additional details regarding their privacy practices.
‍
Responsible ReTax360 LLC Entity
‍Your Personal Data is controlled and processed by ReTax360 LLC and its affiliated entities, except where explicitly stated otherwise in our full Privacy Statement. Our Privacy Statement does not apply to instances where we handle Personal Data as a processor on behalf of our customers. ReTax360 LLC and its relevant affiliates are referred to as "ReTax360 LLC," "we," "us," or the "Company." For a list of ReTax360 LLC’s affiliates, please refer to the List of Subsidiaries section of ReTax360 LLC’s.

Purposes for which we process Personal Data
‍Personal Data is collected and processed by us for a variety of purposes, including:
1. to provide our websites and social media branded pages;
2. to display personalized advertisements and content;
3. to manage event registrations and attendance (including ensuring the health and safety of our visitors and employees);
4. to send communications;
5. to handle contact and user support requests;
6. to provide and optimize the performance of our services;
7. to bill for our services and manage our accounts (including usage and licensing compliance);
8. to administer surveys and conduct research; and
9. to comply with our legal obligations.

For the list of purposes for which we Process your Personal Data, please see the full Privacy Statement.

We only collect and process your Personal Data to the extent it is necessary for fulfilling these purposes and where we can rely on a legal basis for such processing as set out in our full Privacy Statement. Where required, we will ask you for your prior consent to processing.

Please review the "What Personal Data do we collect?" and "Purposes for which we process Personal Data and the legal bases on which we rely" sections in our full Privacy Statement for further details. Also, please review the "How long do we keep your Personal Data?" section to learn how long we store your Personal Data.

‍Who do we share Personal Data with
‍
‍We may share Personal Data with various parties, including:

Our contracted service providers that process Personal Data on our behalf for IT and system administration, credit card processing, research and analytics, marketing, customer support and data enrichment;

Affiliates within our current or future corporate group that process Personal Data for customer support, marketing, event management, technical operations and account management;

If you are using our services as an authorized user, with the ReTax360 LLC customer responsible for your access to the services for verifying your account, and reviewing compliance with our usage terms and policies;

Sponsors of events, webinar or contests for which you register;

Third-party networks and websites so that we can advertise on their platforms;

Specifically in relation to our AppExchange website, with our third-party partners who may contact you regarding their products or services; and

Professional advisers who provide consultancy, banking, legal, insurance and accounting services.

Please review the "Who do we share Personal Data with" section in our full Privacy Statement for the full list and more detailed information.

‍International transfer of Personal Data
‍
‍Your Personal Data may be collected, transferred to and stored by us in the United States and by our affiliates and third parties (as disclosed in the full Privacy Statement) in other countries. Therefore, your Personal Data may be processed outside your country or jurisdiction, including in places that may not provide the same level of protection. As described in the "International transfer of Personal Data" section of our full Privacy Statement, we have implemented safeguards to ensure an adequate level of protection where your Personal Data is transferred.

‍Data Transfer Mechanisms FAQ

‍Your rights relating to Personal Data
‍
‍You have certain rights relating to your Personal Data, subject to local data protection laws. Depending on the applicable laws, these rights may include the right to:

Access your Personal Data held by us;

Know more about how we process your Personal Data;

Rectify inaccurate Personal Data and, taking into account the purpose of processing the Personal Data, ensure it is complete;

Erase or delete your Personal Data;Restrict our processing of your Personal Data;

Transfer your Personal Data to another controller, to the extent possible;

Object to any processing of your Personal Data;

Opt out of certain disclosures of your Personal Data to third parties;

Know what categories of Personal Data are shared for delivering advertisements on non ReTax360 LLC websites, applications, and services and the categories of recipients of such Personal Data;

Opt out of the sharing of your Personal Data for delivering advertisements on non-ReTax360 LLC websites, applications, and services;

If you’re under the age of 16, or such other applicable age of consent for privacy purposes in relevant individual jurisdictions, opt in to certain disclosures of your Personal Data to third parties;

Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects;

Withdraw your consent at any time (to the extent we base processing on consent); and

Not be discriminated against for exercising your rights as described above.

For more details on your rights and choices and how to exercise them, please review the "Your rights relating to your Personal Data" section in our full Privacy Statement.

‍Contacting us
‍
‍To exercise your rights relating to your Personal Data, or if you have questions regarding our privacy practices, please fill out this form, email us at info@ReTax360.com or info@ReTax360.com, call us at tel:312-561-2395 or write to us at:

ReTax360 LLC Data Protection Officer (ReTax360 LLC Privacy Team)

20 North Clark St., Suite 3300
Chicago, IL 60602, USA

When you contact us, please indicate in which country and/or state you reside.

If you believe that we have not been able to assist with your complaint or concern, and you are located in the EEA or the UK, you have the right to lodge a complaint with the competent supervisory authority. If you work or reside in a country that is a member of the European Union or that is in the EEA, you may find the contact details for your appropriate data protection authority on the following website.

Full ReTax360 LLC Privacy Statement

Effective as of April 24, 2025.At ReTax360 LLC, trust is our #1 value. This Privacy Statement describes how ReTax360 LLC collects, uses, shares or otherwise processes information relating to individuals (“Personal Data”) and the rights associated with that processing.

1. Responsible ReTax360 LLC entity

Unless stated otherwise, ReTax360 LLC and/or its affiliated entities, acting as the controller, are responsible for processing your Personal Data as outlined in this Privacy Statement.
‍
A list of ReTax360 LLC’s affiliates can be found in the List of Subsidiaries section of ReTax360 LLC’s most recent Form 10-K, available under the SEC Filings tab by selecting the “Annual Filings” filter on the page located here.
‍
This Privacy Statement does not apply when we process Personal Data as a processor or service provider on behalf of our customers, including when we offer products and services through which our customers (or their affiliates):
(i) create their own websites and applications running on our platforms;
(ii) sell or offer their own products and services;
(iii) send electronic communications to others; or
(iv) otherwise collect, use, share or process Personal Data via our products and services.
‍
For detailed privacy information related to a ReTax360 LLC customer or a customer affiliate who uses ReTax360 LLC products and services as the controller, please contact our customer directly. We are not responsible for the privacy or data security practices of our customers, which may differ from those explained in this Privacy Statement. For more information, please also see Section 10.3 below.

2. Processing activities covered

This Privacy Statement outlines our practices for collecting and managing your Personal Data in the following scenarios:

• Visit our websites that display or link to this Privacy Statement;
• Visit our branded social media pages;
• Visit our offices;
Communicate with us through various channels, including email, phone, text, and fax.
• Use our products and services where we act as a controller of your Personal Data;
• Register for, attend or take part in our events, webinars, programs, trainings, certifications or contests;
• ReTax360 LLC may engage service providers or suppliers that will process your Personal Data. In this case, ReTax360 LLC will remain responsible for ensuring the protection of your Personal Data.;
• Are employed by one of our customers, who have shared your information with us during the contracting process (or similar), where we act as a controller of your data.
• Become involved in a ReTax360 LLC group, such as one that concentrates on open-source development.
• Participate in surveys, research or other similar data collection facilitated by us.

We also host online marketplaces, including AppExchange, an online marketplace for on-demand web applications that run on the ReTax360 LLC platform. These applications may be provided by us or third parties. Additionally, we host Tableau's Extension Gallery, which offers connectors and solutions that provide additional functionality for Tableau, and the Slack App Directory, which offers numerous applications that integrate with Slack.

This Privacy Statement applies to applications, connectors, extensions, or other solutions provided by us that link to this Privacy Statement. For offerings provided by third parties, the third party's privacy statement applies, and this Privacy Statement does not.

Our websites and services may contain links to other websites, applications, platforms and services maintained by third parties. The information practices of these third parties, including the social media platforms that host our branded social media pages, are governed by their privacy statements, which you should review to better understand their privacy practices.

In some circumstances, we also collect, or our partners provide us with, publicly available information which may contain Personal Data that you have published or that has been made available online. The way in which our partners collect this is detailed in their own privacy policies, available on their websites.

3. What Personal data do we collect?

3.1 Personal Data we collect directly from you

The Personal Data that we collect directly from you may include, but is not limited to, identifiers, professional or employment-related information, financial account information, commercial information, visual information, and internet activity information.

Personal Data Collection Scenarios

Situations

Categories of Personal Data

If you:
- Express interest in our services or request customer support, including by using the Help & Training Portal or "Contact Us" feature;
- Register to use our websites, receive communications, or sign up for an event, webinar, or contest;
- Participate in a program, training, certification, survey, or use our products and services;
- Download certain content; or
- Are employed by a customer of our products and services, and your information has been shared with us,We may use your information.

Information that you have willingly shared with us, including your name, job title, company name, address, phone number, email address, username, password, and other relevant contact details.

When you register for an event or webinar, or make purchases through our websites

Billing and financial information (such as billing name and address, credit card number, or bank account information), and contact information

If you attend an event

Biographical information, including but not limited to:
- Username
- Photo
- Video
- Occupation
- Location
- Social media profiles or usernames
- Company name
- Areas of expertise
- Interests

When interacting with our emails or using our websites

Personal Data, such as Internet Protocol (IP) addresses or other identifiers, related to your device and your usage of our websites or emails may be collected using cookies, web beacons, and similar technologies. Please refer to Section 4 for further information.

Interacting with or using our products and services

Details about your device and how you use our services are collected through log files and other technologies. Some of this information, including usage data, may be considered personal data (see Section 4).

When you call us

Any Personal Data, such as your name or voice, that you voluntarily share.

If you visit our offices

Visitor Check-In Information:
- Name
- Email Address
- Phone Number
- Company Name
- Time and Date of Arrival
- Image or Video

COVID-19 Visitor Requirements:
- Body Temperature
- COVID-19 Symptoms
- Exposure to COVID-19 Positive Individuals
- Vaccination Status
- COVID-19 Test Results
- Recent Travel History

When you voluntarily provide specific information to us, like completing a survey, answering a questionnaire, or taking part in other research

The information that you have voluntarily provided as part of the request may include Personal Data and special categories of Personal Data.

Individuals or companies that provide goods or services to ReTax360 LLC

Billing and Payment Details

If you provide us, our service providers or our affiliates with any Personal Data relating to other individuals, you represent that you have the authority to do so, and where required, have obtained the necessary consent, and acknowledge that it may be used in accordance with this Privacy Statement. If you believe If your Personal Data was provided to us incorrectly, or you would like to exercise your rights regarding your Personal Data, please reach out to us using the contact information listed in Section 13 below.

3.2 Personal Data we collect from other sourcesWe also collect Personal Data about you from other sources, such as partners who collect, purchase, or provide us with publicly available information that may contain Personal Data. We may combine this information with the Personal Data that you provide.Provision of the services:The Personal Data we collect to provide our products and services may include your location information from third parties, which helps us offer features like identity management and multi-factor authentication. Additionally, we may collect information you have made publicly available online (such as when using social media sites) or that is published by third parties and contains information about you (such as news articles). For a select number of services, we collect this Personal Data from partners who may receive this data when you visit or use their services or through the third parties they work with.
‍
Advertising
‍To provide you with tailored advertising and relevant services, we collect Personal Data from other sources and combine it with the information we have. This includes identifiers, professional or employment-related information, education information, commercial information, visual information, internet activity information, and inferences about preferences and behaviors.
‍
We collect this information from third party providers of business contact information, including mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), IP addresses, social media profiles, LinkedIn URLs and custom profiles.
‍
This data helps us to:
- Target our advertising more effectively
- Deliver relevant email content
- Promote events
- Create customer profiles
- Determine eligibility for our services
- Verify contact information
- Update, expand, and analyze our records
- Identify new customers
‍
Personal Data is also collected from the following sources:
- Another individual at your organization who may provide us with your personal information, which may include Personal Data and special categories of Personal Data, to the extent you consent to providing it and sharing it, for the purposes of obtaining services and assessing our goals related to encouraging diversity within our vendors; and
- Platforms such as GitHub to manage code check-ins and pull requests. If you participate in an open-source or community development project, we may associate your code repository username with your community account so we can inform you of program changes that are important to your participation or relate to additional security requirements.
- Only where necessary for security purposes, we may collect information that is publicly available online (such as accessible through search engines or public social media sites), as well as images, physical descriptions and other pertinent information necessary to address a credible security threat to our employees, events or premises.

4. Data Usage and Device Information Collected

We utilize various tools, including data collection tools, cookies, web beacons, pixels, and similar technologies to gather information that may include Personal Data. This information is collected as you navigate our websites and services, or interact with our emails.

4.1 Device and Usage Data
The majority of websites collect some data from your device, and our websites are no exception. The data we collect may include your IP address (or proxy server information), device and application details, identification numbers and features, location, browser type, plug-ins, integrations, Internet service provider and mobile carrier, pages and files viewed, searches, referring website, app or ad, operating system, system configuration, advertising and language preferences, date and time stamps, and frequency of visits. This information is used for the purposes explained in section 5 of this Privacy Statement.

We also collect certain information as part of your use of our products and services (“Usage Data”). This information may include identifiers (such as user ID, organization ID, username, email address and user type); commercial information; and internet activity information such as IP address (or proxy server), mobile device number, device and application identification numbers, location, language, browser type, Internet service provider or mobile carrier, user interactions such as the pages and files viewed, website and webpage interactions including searches and other actions you take, operating system type and version, system configuration information, date and time stamps associated with your usage and details of which of our products and product versions you are using. This information is used for the purposes set out in detail in section 5 of this Privacy Statement below.

In addition, we may use aggregated Usage Data for other internal business purposes, such as to identify additional customer opportunities and to ensure that we are meeting the demands of our customers and their users. Please note that this Usage Data is primarily used to identify the uniqueness of each user logging on (as opposed to specific individuals), apart from where it is strictly required to identify an individual for security purposes or as required as part of our provision of the services to our customers. For more information regarding Tableau specifically, please see here and here. When data is used for controller purposes, Slack may refer to the aforementioned categories of personal data as Other Information within Slack’s websites.

4.2 Tracking technologies, including cookies and web beacons, are used on our website and in email communications.
We utilize technologies like web beacons, pixels, tags, and JavaScript, either independently or in combination with cookies, to collect data regarding website usage and email interaction.
‍
Upon visiting our websites, we, or an authorized third party, may place a cookie on your device. This cookie gathers information, including Personal Data, about your online activities across different sites and over time. Cookies enable us to track website use, infer browsing preferences, and enhance and personalize your browsing experience.
‍
Our websites use both session-based and persistent cookies. Session-based cookies are temporary and are deleted when you close your browser or turn off your device. Persistent cookies remain on your device even after you close your browser or turn off your device.
‍
You can adjust your cookie settings and preferences for a specific website by clicking the Cookie Preferences link in the page footer. You can also manage cookies through your device settings, but disabling cookies may limit your ability to use some website features and services.
‍
We also utilize web beacons and pixels on our websites and in email communications. For instance, we may incorporate a pixel within a marketing email to track when a recipient clicks on a link contained in the email. These technologies are employed to operate and enhance our websites and marketing emails. For further information, please refer to the "Advertising Cookies" row in the table below. For instructions on how to unsubscribe from our marketing emails, please see Section 10.4 below.

How to Manage Data Collection Configuration

Type of Cookies

Description

Managing Settings

Required cookies

Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.

If you have chosen to identify yourself to us, we may place on your browser a cookie that allows us to uniquely identify you when you are logged into the websites and to process your online transactions and requests.

Because required cookies are essential to operate the websites, there is no option to opt out of these cookies.

Functional cookies

Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.

Functional cookies may also be used to improve how our websites function and to help us provide you with more relevant communications, including marketing communications.

These cookies collect information about how our websites are used, including which pages are viewed most often.

We may use our own technology or third-party technology to track and analyze usage information to provide enhanced interactions and more relevant communications, and to track the performance of our advertisements.ReTax360 LLC may also use HTML5 local storage or Flash cookies for the above-mentioned purposes. These technologies differ from browser cookies in the amount and type of data they store, and how they store it.

We need your prior consent to use functional cookies. To change your cookie settings and preferences, including those for functional cookies, click the Cookie Preferences link in the footer of the page.

To learn how to control functional cookies via your individual browser settings, click here.

To learn how to manage privacy and storage settings for Flash cookies, click here.

Advertising cookies

Advertising cookies track activity across websites in order to understand a viewer’s interests and to direct marketing to them.

We sometimes use cookies delivered by us or by third parties to show you ads for our products that we think may interest you on devices you use and to track the performance of our advertisements. For example, these cookies collect information such as which browser you used when visiting our websites.

ReTax360 LLC also contracts with third-party advertising networks that collect IP addresses and other information from web beacons on our websites, from emails and on third-party websites. Advertising networks follow your online activities over time and across different websites or other online services by collecting certain data through automated means, including through the use of cookies. These technologies may recognize you across the different devices you use. When we work with third party advertising networks, we require them to restrict their data processing to only what is necessary to provide us with the advertising services we request.

Interacting with or using our products and services

For further information regarding the use of cookies by Tableau and Slack, please refer to the Tableau Cookie Policy and the Slack Cookie Policy.
‍
Website visitors shall be provided with notices on behavioral advertising and the option to opt-out.When you visit our websites, we or one of our authorized partners may place or read cookies on your device. We do this to provide you with targeted advertising (also known as “online behavioral advertising” or “interest-based advertising”).
‍
To learn more about targeted advertising and advertising networks, visit the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page. To opt-out of targeted advertising provided by ReTax360 LLC Audience Studio to us and third parties, click here.
‍
How to Manage Cookies:
‍Targeting and Advertising Cookies:
- Adjust via the "Cookie Preferences" link in the page footer or your browser's cookie settings.
- Flash Cookies: Manage privacy and storage settings by clicking here.
- HTML5 Local Storage: Consult your browser's management tools for removal options.

4.4 How to Opt-Out of Cookie Settings in Your BrowserYou can manage your cookies at the browser or device level to opt-out from the collection of non-essential device data on your web browser in many cases (see Section 4.1 above) in addition to using the user preference center. Furthermore, click here (or, if located in the European Union or United Kingdom, click here) if you wish to opt-out of interest-based advertising. Click here to opt-out of targeted advertising that is provided to us and to third parties by ReTax360 LLC Audience Studio. Please note, however, that you may not be able to take full advantage of the websites by blocking or deleting cookies and similar technologies used on our websites.
‍
ReTax360 LLC understands the importance of privacy and choice. We are committed to monitoring developments around DNT browser technology and the implementation of a standard. Currently, there is no common standard for "do not track" (DNT) requests adopted by industry groups, technology companies, or regulators. While some internet browsers offer a DNT option to inform websites that users do not want their online activities tracked, these features are not uniform. As a result, we do not currently commit to responding to DNT signals with respect to our websites.
‍
Capabilities for Social Media
Our websites may include Social Media Features, such as the “Tweet” button or other sharing widgets. These features may allow you to post information about your activity on our site to external platforms and social networks, or like or highlight content that we have posted on our website or branded social media pages. Social Media Features may be hosted either by the respective platform or directly on our website. If you click on a Social Media Feature hosted by a platform while logged in to your social media account on that platform, the platform may receive information indicating that you have visited our websites, and may be able to link your visit to your social media profile.
‍
ReTax360 LLC offers sign-in services that allow you to log in to some of our websites. These services will verify your identity and give you the choice to share some of your personal data, such as your name and email address. This information can be used to pre-populate our sign-up form.
‍
The privacy policies of the companies that provide them govern your interactions with Social Media Features.Information on telephone logsWhen you use certain features of our services on your mobile device, we may collect information about your device, including:Telephony log information (such as phone numbers, time and date of calls, duration of calls, SMS routing information and types of calls)Device event information (such as crashes, system activity, hardware settings, and browser language)Location information (through IP address, GPS, and other sensors that may, for example, provide us with information on nearby devices, Wi-Fi access points and cell towers)

5. Legal Bases and Purposes for Processing Personal Data

Your Personal Data, including special categories where permitted by law, is collected and processed by us for the purposes and legal bases outlined below:

Purposes for Processing Personal Data

Purpose

Description

Legal basis

Providing our websites (including our social media pages)

We process your Personal Data to operate and administer our websites and to provide you with the content you access and request

Our legitimate interest in providing online content to our customers and prospective customers regarding our service offering and related information

Improving our websites

We process your Personal Data to analyze overall trends and help us improve the user experience on our websites

Our legitimate interest in providing a relevant and well-functioning website for the benefit of our website visitors

Promoting the security of our websites

We process your Personal Data by tracking use of our websites and verifying and investigating activity

Our legitimate interest in promoting the safety and security of our websites and in protecting our rights and the rights of others

Displaying personalized advertisements and content

We process your Personal Data to conduct market research, advertise to you, provide personalized information about us on and off our websites and to provide other personalized content based upon your activities and interests

Our legitimate interest in advertising our products and services or, where necessary, to the extent you have provided your prior consent

Please see Section 10 below, to learn how you can control the processing of your Personal Data by ReTax360 LLC for personalized advertising purposes

Registering visitors

We process your Personal Data, including registration information and associated non-disclosure information, for security reasons

Our legitimate interest in protecting our offices, staff, visitors and our confidential information against unauthorized access

Managing event registrations and attendance

Managing event registrations and attendanceWe process your Personal Data to plan and host events or webinars for which you have registered or that you attend, including sending related communications to you

Where you explicitly consent, we also may process your biometric Personal Data to facilitate event registration and for security reasons

Performance of a contract or where we receive your explicit consent

Ensuring the health of our visitors and employees

We process your Personal Data (which may include special categories of Personal Data) (where legally permitted) during office visits and at events during the COVID-19 pandemic to ensure the health and safety of our visitors and employees

Consent and explicit consent or in our legitimate interest to ensure the health of our employees and visitors where necessary for reasons of public interest in the area of public health

Ensuring the safety and security of our employees, events and premises

We process your Personal Data where necessary based on a credible threat to our employees, events or premises

Our legitimate interest in protecting our employees, events and premises

Sending communications

We process your Personal Data to send you marketing information, product recommendations and other non-transactional communications (e.g., marketing newsletters, telemarketing calls, SMS or push notifications, information about our products, news or events) about us, our affiliates and partners

Our legitimate interest in conducting direct marketing or where you have provided your prior consent (please see Section 10 below to learn how you can control the processing of your Personal Data by ReTax360 LLC for marketing purposes)

Recording phone calls

We process your Personal Data, including recording phone calls (in accordance with applicable laws) for training, quality assurance, and administration purposes
‍
If required under applicable law, we will give you the option to object to a call being recorded

Consent or our legitimate interest in maintaining the high quality of our phone calls with users

Handling contact and user support requests

We process your Personal Data, if you fill out a “Contact Me” web form or request user support, or if you contact us by other means including but not limited to via phone

Necessary for the performance of a contract or our legitimate interest in fulfilling your requests and communicating with you

Providing our services

We process your Personal Data to perform our contract with you for the provision of our services and to satisfy our obligations under the applicable terms of use

Necessary for the performance of a contract or our legitimate interest to provide and administer our services

Developing and optimizing the performance of the services

We process your Personal Data to develop, optimize, and improve the performance of the services

Legitimate interest to develop services and ensure that the services are performing in line with customer expectations; if special categories of Personal Data are processed, where the Personal Data is manifestly made public by the data subject

Providing personalized interactions

We process your Personal Data to customize our interactions with you

Legitimate interest to offer the best-in class services to our customers

Managing our customer and user accounts

We process your Personal Data (including Usage Data) to manage customer and user accounts generally, such as billing, customer correspondence and customer relationship management

Necessary for the performance of a contract or our legitimate interest in the management of customer and user accounts

Managing usage and licensing compliance

We process your Personal Data (including Usage Data) to assess and manage usage and licensing compliance with the applicable terms of use of our services

Necessary for the performance of a contract or our legitimate interest in managing the provision of our services to customers

Preparing internal reports and business modeling

We process your Personal Data (including Usage Data) for internal reporting and business modeling purposes (e.g., forecasting, revenue, capacity planning, product strategy)

Our legitimate interest in the management of our business operations

Maintaining our security

We process your Personal Data (including your Usage Data) for the purposes of maintaining ReTax360 LLC’s own security, including investigating, detecting and preventing suspicious activity, fraud and cybercrime that may affect ReTax360 LLC or its services

Our legitimate interest in promoting the safety and security of ReTax360 LLC generally and to protect our rights and the rights of others

Managing compensation for employees

We process your Personal Data (including your Usage Data) for the purposes of determining compensation for ReTax360 LLC employees, such as commission

Necessary for the performance of a contract with an employee or our legitimate interest in fairly compensating our employees

Undertaking financial reporting

We process your Personal Data (including your Usage Data) for the purposes of financial reporting

Our legitimate interest in meeting our obligations associated with the reporting of our finances

Aggregating data

We process your Personal Data (including your Usage Data) for the purposes of aggregating this information to ensure that it is no longer identifying

Our legitimate interest in minimizing the amount of Personal Data processed as part of the noted processing activity

Managing, and participating in, webinars, contests, programs, training, certifications or promotions

We process your Personal Data if you register for a webinar, contest, promotion, training, certification or a program.

In some cases where the training or certification is through your employer, we will share your we will share your Personal Data with your employer

Some webinars, contests, programs, trainings, certifications and promotions have additional rules containing information about how we will process your Personal Data

Consent, necessary for the performance of a contract or our legitimate interest in providing the webinar, contest, promotion, training, certification or promotion

Managing payments

If you have provided financial information to us, we process your Personal Data to verify that information and to collect payments to the extent that doing so is necessary to complete a transaction and perform our contract with you

Necessary for the performance of a contract

Administering surveys and conducting research

We process your Personal Data (including, where legally permitted, special categories of Personal Data) in order to meet the goals set out in surveys or research as well as to analyze our compliance with internal policies

Consent or explicit consent (if required under applicable law) or our legitimate interest in conducting the survey or research based on its stated goals (where no special categories of Personal Data are in scope)

Participating in a ReTax360 LLC community, such as that focused on open-source development

We process your Personal Data, such as your username associated with your community account, in order to host and maintain the community for the benefit of its members

Our legitimate interest in hosting and maintaining such a community for the benefits of its members, as well as in order to inform you of program changes that are important to your participation or relate to additional security measures

Collecting diversity information

We process your Personal Data (including special categories of Personal Data) to the extent you voluntarily consent to provide it to meet our broader community goals related to diversity and equality of opportunity

Consent or explicit consent (if required under applicable law)

Complying with legal obligations

We process your Personal Data (including Usage Data) when cooperating with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws to the extent this requires the processing or disclosure of Personal Data to protect our rights

Legal obligation or our legitimate interest in protecting against misuse or abuse of our websites or services, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, responding to lawful requests, or for auditing purposes

Failure to provide Personal Data that is required by law or contract may result in our inability to fulfill our contractual obligations to you.

6. With whom is Personal Data shared?

Your Personal Data may be shared by us as follows:
‍
Contracted Service Providers
‍Our contracted service providers deliver a range of services, including IT, system administration, hosting, credit card processing, research, analytics, marketing, event planning, customer support, and data enrichment. These providers may also use artificial intelligence and generative artificial intelligence capabilities to analyze data, identify trends, make predictions, and generate AI content. All services are provided for the purposes and legal bases outlined in Section 5.

ReTax360 LLC Affiliates:
Data sharing with affiliates within the ReTax360 LLC corporate group, including future acquisitions incorporated into the group, is limited to fulfilling user requests submitted through our websites, customer support, marketing, technical operations, event registration, and account management. For a list of ReTax360 LLC affiliates, refer to the "List of Subsidiaries" section in our most recent Form 10-K, accessible under the SEC Filings tab (filter by "Annual Filings") on our website.
If you attend our events or webinars, or download or access assets on our website, we may share your Personal Data with event sponsors. Depending on applicable law, you may consent to such sharing via the registration form, by allowing your attendee badge to be scanned at a sponsor booth, or by opting in through other means. In these circumstances, your information will be subject to the sponsors’ privacy statements. You may choose not to opt-in via event/webinar registration or elect not to have your badge scanned if you do not wish for your information to be shared. You can also opt-out in accordance with Section 10 below.
‍
... partners that provide additional services that complement those offered by ReTax360 LLC, such as sustainability resources or partners that resell ReTax360 LLC services, if you agree to share your information with them (where required by applicable law).
If you are an authorized user of our services, we may share your Personal Data with your affiliated customer and/or the partner responsible for your access to our services. This may be done to verify accounts and activity, investigate suspicious activity, or enforce our terms and policies.
Sponsors of contests and promotions that you enter.
To enable ReTax360 LLC to market and advertise on third-party platforms and websites, including social media networks and advertising networks.
‍
If you choose to engage with or utilize third-party tools on the AppExchange website, we may share your Personal Data with our ReTax360 LLC-affiliated App Exchange partners. These third-party partners may then contact you concerning their products or services, in compliance with legal and contractual obligations.
‍
Your Personal Data may be shared with professional advisors, such as lawyers, bankers, auditors, and insurers, who provide consultancy, banking, legal, insurance, and accounting services. This will only occur on an individual basis, and to the extent that we are legally obliged to share or have a legitimate interest in sharing your Personal Data. These professional advisors act as service providers, processors, or joint controllers.In the event that we undergo a merger, reorganization, dissolution, or other fundamental corporate change, or sell a website or business unit, or if all or a portion of our business, assets, or stock are acquired by a third party, your Personal Data may be transferred. We will make reasonable efforts to notify you of any transfer of Personal Data to an unaffiliated third party, in accordance with applicable laws.
‍
If you connect your third-party accounts to our products, such as through Tableau, we will use the information from those accounts to: authenticate you; identify the data sources that you can access; download any data that you request; and download, refresh, or save authentication information, such as user names and passwords, as needed to maintain the connection to your third-party accounts.
‍
We may disclose Personal Data to public and government authorities to the extent that we are required to do so by law.We may also share aggregated Usage Data with ReTax360 LLC’s service providers to assist ReTax360 LLC in such analysis and improvements. Additionally, ReTax360 LLC may share aggregate Usage Data during normal business operations; for example, we may share information publicly to show trends about the general use of our services.
‍
Any personal data or other information that you submit and post to our communities, forums, blogs, or chat rooms on our websites can be read by others.
‍
To learn more about who receives your Personal Data, please contact us using the contact information provided in Section 13 below.

7. Personal Data Transfer Across Borders

We and our affiliates, as well as third parties based in other countries that are disclosed in Section 6 above, may collect your Personal Data, and transfer and store it in the United States and other countries. Your Personal Data may be transferred and processed outside of your country or jurisdiction, including in locations that may not be subject to an adequacy decision by the European Commission, your local legislature, or regulator, and may not provide the same level of data protection.

We ensure that the recipient of your Personal Data offers an adequate level of protection and security through mechanisms such as back-to-back agreements and, where required, standard contractual clauses or an alternative mechanism for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other applicable regulators or legislators. We will only share, transfer, or store your Personal Data outside of your jurisdiction with your prior consent when required by applicable law.

9. Retention Period of Your Personal Data

We will keep your Personal Data for as long as it is needed for the original purpose it was collected (see Section 5) or to meet our legal obligations. To determine how long to keep the data, we consider the amount, nature, and sensitivity of the Personal Data, the risk of harm from unauthorized use or disclosure, if we can achieve the processing purposes through other means, and what the law requires (like statutes of limitations).

Your Personal Data will be deleted after the applicable retention periods expire. Any data that cannot be entirely deleted from our systems, for technical reasons, will be subject to appropriate measures to prevent further use.

To learn more about how long we keep your data, please contact us using the contact information provided in Section 13.

10. Your Personal Data Rights

10.1 Your rightsYour Personal Data may be subject to certain rights, depending on local data protection laws. These rights may include the right to:
‍
You have the right to:
- Access, rectify, and erase your personal data that we hold.
- Restrict how we process your data.
- Transfer your data to another controller, where possible.
- Object to the processing of your data.
- Opt out of certain disclosures of your data to third parties.
- Be informed about how we process your personal data, including what categories are shared and for what purpose.

Complete any incomplete personal data while considering the purpose of processing. Also, take into account advertisements on non-ReTax360 LLC websites, applications, and services, as well as the categories of recipients of such Personal Data.
‍
Choose not to share your Personal Data to show ads on websites, applications, and services that are not owned by ReTax360 LLC.
If you are under the age of 16, or the applicable age of consent for privacy in your jurisdiction, you may choose to allow us to share your Personal Data with third parties.
‍
Not be subject to a decision which has legal effects and is based solely on automated processing, including profiling.
You have the right to withdraw your consent at any time. This withdrawal will not affect the lawfulness of any processing that occurred before you withdrew your consent.You have the right to be free from discrimination in the exercise of the rights described above.You have the right to object to the processing of your personal data for direct marketing purposes, or to the sharing of it with third parties for their own direct marketing purposes, at any time. You do not have to provide a specific reason for your objection.
‍
Our websites and services currently do not use Automated Decision-Making.
‍
Exercising Your Rights
To exercise your rights, please contact us using the information provided in Section 13. We will process your Personal Data to respond to these requests and aim to address all legitimate requests within one month, unless otherwise required by law. If we need additional information to fulfill your request or verify your identity, we will contact you.

Occasionally, due to the complexity and number of requests, it may take longer than a month. If you are an employee of a ReTax360 LLC customer, please contact your employer’s system administrator for assistance with correcting or updating your information.

By logging into their accounts and editing their settings or profiles, some registered users may be able to update their user settings, profiles, organization settings, and event registrations.To update your billing information, close your account, or ask that we return or delete your Personal Data and other information associated with your account, please reach out to us using the contact details provided in Section 13 below.

10.3 Your rights relating to customer data
We may also process Personal Data that a customer submits to our products and services. Unless otherwise stated in this Privacy Statement or a separate disclosure, we process such Personal Data as a processor on behalf of our customer (and its affiliates), who is the controller of the Personal Data (see Section 1 above). We are not responsible for and have no control over the privacy and data security practices of our customers, which may differ from those explained in this Privacy Statement. If your data has been submitted to us by or on behalf of a ReTax360 LLC customer and you wish to exercise any rights you may have under applicable data protection laws, please inquire directly with the ReTax360 LLC customer. Because we may only access a customer’s data upon instruction, if you wish to make your request directly to us, please provide us the name of the ReTax360 LLC customer who submitted your data. We will refer your request to that customer and will support them as needed in responding to your request within a reasonable timeframe.
‍
Your email and SMS marketing communication preferences
‍
To stop receiving marketing and non-transactional communications from ReTax360 LLC, click the "unsubscribe" link at the bottom of our marketing emails, reply or text 'STOP' to our SMS communications, or unsubscribe here. Note that you will still receive marketing and non-transactional communications from CMO Club, unless you unsubscribe using the link at the bottom of their marketing emails.
‍
To stop receiving push notifications from ReTax360 LLC, you can change your device's settings or contact us using the information below.
‍
Please note that opting out of marketing communications does not opt you out of receiving important business communications related to your current relationship with us, such as communications about your subscriptions or event registrations, service announcements or security information.10.5 Your preferences for telemarketing communicationsTo add your phone number to our internal Do-Not-Call list, please contact us using the information in Section 13 below. Make sure to include your full name, company name, and the phone number you want added.
‍
If you'd prefer, you can inform us that you do not wish to receive further telemarketing calls during any of our telemarketing calls.

‍Securing Your Personal Data
We take organizational, technical, and physical measures to protect Personal Data we process or use from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. We adhere to widely accepted security measures to safeguard your Personal Data; however, no method of data storage or transmission can guarantee absolute security. It is your responsibility to protect your password, restrict access to your devices, and ensure that you log out of websites after each session. If you have any questions or concerns regarding the security practices on our websites, please reach out to us using the contact information detailed in Section 13 below.

12. Updates to this Privacy Policy

This Privacy Statement may be updated to reflect changes in our practices, technologies, legal requirements, and other factors. The "effective date" at the top will be updated when changes are made. Notice may be provided before a material update takes effect, such as by posting a notice on our website or by contacting you directly. Where required by applicable law and feasible, your consent to these changes will be sought.
‍
To stay informed on how we collect, process, and share your Personal Data, please review this Privacy Statement from time to time.

13. Contacting us

ReTax360 LLC has designated a Data Protection Officer and a Grievance Officer in India. If you have any inquiries about this Privacy Statement, our privacy practices or to exercise your rights concerning your Personal Data, please complete this form, email us at info@ReTax360.com or contactus@ReTax360.com, call us at 312-561-2395, or write to us at our office.

ReTax360 Data Protection Officer (ReTax360 LLC Privacy Team)
20 North Clark St, suite 3300
Chicago, IL 60602, USA

Please tell us your country and/or state of residence when you contact us.
‍
We are dedicated to collaborating with you to find a fair resolution for any privacy complaint or concern. However, if you are located in the European Economic Area or the United Kingdom and believe we have not adequately addressed your complaint or concern, you have the right to lodge a complaint with the appropriate supervisory authority. If you work or reside in a European Union member state or in the EEA, you can find the contact details for your relevant data protection authority on the following website.

14. Adherence to APEC Cross Border Privacy Rules (CBPR) and APEC Privacy Recognition for Processors (PRP) System

Our company is a participant in both the APEC CBPR and APEC PRP systems. For any unresolved privacy or data usage concerns that we have not been able to resolve to your satisfaction, please reach out to our third-party dispute resolution provider at no cost to you. https://trustarc.com/dispute-resolution/

15. Additional Disclosures for California Residents

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, mandates that businesses disclose whether they sell or share Personal Data. ReTax360 LLC, as a CCPA-covered business, does not sell Personal Data. However, we may share Personal Data (specifically identifiers and internet activity information) with third-party advertisers to enable targeted advertising on non-ReTax360 LLC platforms. Additionally, we may permit third-party collection of Personal Data from our sites or services, provided they are authorized service providers who have agreed to our contractual limitations on data retention, use, and disclosure. We may also allow such collection if you use ReTax360 LLC sites or services to interact with third parties or instruct us to disclose your Personal Data to them.Under California law, we must specify the types of Personal Data we share for "business purposes," such as with service providers who help us maintain security or market our products, and with other entities outlined in Sections 5 and 6 of this Privacy Statement. The categories of Personal Data we disclose for business purposes include:
‍
Categories of Personal Information:
- IdentifiersCommercial Information
- Internet Activity
- Financial Information
- Professional and Employment Information
- Educational Information
- Geolocation Data
- Audio and Visual Data
‍
Information that may be classified as protected characteristics under California or United States law, in limited circumstances where permitted by law.Conclusions derived from the aforementioned data.

California residents have the right to know, access, and request deletion or correction of their Personal Data under state law. Additionally, residents can learn how their Personal Data is processed, opt-out of third-party advertising sharing, and not be denied goods or services for exercising these rights.
‍
California residents under the age of 18 who have registered an account with us can request that we remove content or information they have posted on our website(s). However, we cannot guarantee complete removal of the content or information, as some of it may have been reposted by another user.

To learn more about exercising your rights, please review Section 10.2 of this Privacy Statement. Authorized agents representing California residents can contact us using the information provided in the "Contacting Us" section. Please include a copy of the resident's written authorization designating you as their agent.To opt out of sharing using cookie identifiers, enable a Global Privacy Control in your web browser or browser extension. For further information on valid Global Privacy Controls, please visit the California Privacy Protection Agency's website. To opt out of sharing using other identifiers, such as your email address, please refer to Section 10.2 of this Privacy Statement.

We may need to verify your identity and place of residence before completing your rights request.

California Privacy Rights Reporting

Personal Data Requests

Requests Submitted

Requests Fulfilled in Whole Or In Part*

Average Days to Respond

Average Days to Complete a Request**