We respect your privacy and want you to understand how it collects, uses, and shares data about you. This Privacy Policy covers our data collection practices and describes your rights to access, correct, or restrict our use of your data. Unless linked to a different policy or otherwise, this Privacy Policy applies when you visit or use the IAPPA platform including the platform, APIs or related services (the “Services”).

By using the Services, you agree to the terms of this Privacy Policy. You may opt out of sthe Services if you don’t agree with this Privacy Policy or any other agreement that governs your use of the Services.

1. What Data is Collected

We collect certain data from you directly, like the information you enter personally, and data from third-party platforms. Some data is automatically collected when you log into our services, e.g. information about your device and what parts of our Services you interact with or spend time using.

1.1 Data You Provide to Us

Our systems collect various data types about you including company information. Below are some examples to help you better understand the data we collect.

When you create an account and use the Services, including through a third-party platform, we collect any data you provide directly, including

1. Account Data: To use certain features, you are to register through the membership Portal, we collect and store the data you provide, like your TIN, email address, password, and date of registration etc.
2. Family Data: Information relating to your marital status, spouse and dependents including your mother’s maiden name is obtained from you when you use our service.
3. Unique Identifiable Data: You will need to provide personally identifiable data such as Tax Identification Number or proprietary global unique identifiers.
4. Employment Data: You may need to provide information on your employment status, employer details, business contact information, business registration details, and proof of business activities.
5. Legal Data: You may need to provide your legal history including criminal history (if any) and the court awards acquitting you of any outstanding charges.
6. Profile Data: You may also need to provide profile information like a photo, social media profiles, or other data. Your Profile Data will be publicly viewable by others.
7. Data About Your Accounts on Other Services: We may obtain certain information through your social media or other online accounts if they are connected to your account. If you log in to your account via another third-party platform or service, we ask for your permission to access certain information about that other account. For example, depending on the platform or service we may collect your name, profile picture, account ID number, login email address, location, physical location of your access devices, gender and birthday. Other platforms and services make information available to us through their APIs. The information we receive depends on what information you (via your privacy settings) or the platform or service are configured to give to us.
   If you access or use our Services through a third-party platform or service, or click on any third-party links, the collection, use, and sharing of your data will also be subject to the privacy policies and other agreements of that third party.
8. Communications and Support: If you contact our platform for support or to report a problem or concern (regardless of whether you have created an account), We will collect and store your contact information, messages, and other data about you like your name, email address, location, operating system, IP address, and any other data you provide or that we collect through automated means ( highlighted below). We use this data to respond to you and research your question or concern, following this Privacy Policy.

When you access the Services we collect certain data by automated means, including

1. System Data: Technical data about your computer or device, like your IP address, device type, operating system type and version, unique device identifiers, browser, browser language, domain and other systems data, and platform types (“System Data”).
2. Usage Data: Usage statistics about your interactions with the Services, including features accessed, time spent on pages or the Service, pages visited, features used, your search queries, click data, date and time, and other data regarding your use of the Services (“Usage Data”).
3. Approximate Geographic Data: An approximate geographic location, including information like country, city, and geographic coordinates, is calculated based on your IP address.

2. How We Collect Data About You

We use tools like cookies, beacons, analytics services, and advertising providers to gather the data listed above. Some of these tools offer you the ability to opt out of data collection

2.1 Cookies and Data Collection Tools

We use server log files and automated data collection tools like cookies, tags, scripts, customised links, device or browser fingerprints, and beacons (together, “Data Collection Tools”) when you access and use the Services. These data Collection tools automatically track and collect certain System Data and Usage Data (as detailed in Section 1) when you use the Services. In some cases, we tie data gathered through those Data Collection Tools to other data that we collect as described in this Privacy Policy.

We use cookies (small files that we send to your device to uniquely identify your browser or device or to store data in your browser) for things like analysing your use of the Services, personalising your experience, making it easier to log into the Services, and recognizing you when you return. We use beacons (small objects that allow us to measure the actions of visitors and users using the Services) for things like identifying whether a page was visited, identifying whether an email was opened, and advertising more efficiently by excluding current users from certain promotional messages.

We use the following types of cookies:

• Preferences: cookies that remember data about your browser and preferred settings that affect the appearance and behaviour of the Services (like your preferred language).
• Security: cookies are used to enable you to log in and access the Services; protect against fraudulent logins; and help detect and prevent abuse or unauthorised use of your account.
• Functional: cookies that store functional settings
• Session State: cookies that track your interactions with the Services to help us improve the Services and your browsing experience, remember your login details, and enable processing of your purchases. These are strictly necessary for the Services to work properly, so if you disable them then certain functionalities will break or be unavailable.

We can alert you about attempts to place cookies on your computer, limit the types of cookies you allow, or refuse cookies altogether. If you do, you may not be able to use some or all features of the Services, and your experience may be different or less functional.

2.3 Online Advertising

We use third-party advertising services like Google’s ad services, and other ad networks and ad servers to deliver advertising about our Services. The ads may be based on things we know about you, like your Usage Data and System Data (as detailed in Section 1), and things that these ad service providers know about you based on their tracking data. The ads can be based on your recent activity or activity over time and across other sites and services and may be tailored to your interests.

Depending on the types of advertising services we use, they may place cookies or other tracking technologies on your computer, phone, or other device to collect data about your use of our Services, and may access those tracking technologies to serve these tailored advertisements to you. To help deliver tailored advertising, we may provide these service providers with a hashed, anonymized version of your email address (in a non-human- readable form) and content that you share publicly on the Services.

When using mobile applications you may also receive tailored in-app advertisements. Apple iOS, Android OS, and Microsoft Windows each provide instructions on how to control in-app tailored advertising. For other devices and operating systems, you should review your privacy settings or contact your platform operator.

3. What We Use Your Data For

We use your data to do things like provide our Services, communicate with you, troubleshoot issues, secure against fraud and abuse, improve and update our Services, analyse how people use our Services, serve personalised advertising, and as required by law or necessary for safety and integrity.

We use the data we collect through your use of the Services to:

1. Provide and administer the Services, including displaying customised content and facilitating communication with other users;
2. Process your requests and orders for products, specific services, information, or features;
3. Communicate with you about your account by:
   1. Responding to your questions and concerns;
   2. Sending you administrative messages and information, including notifications about changes to our Service, and updates to our agreements;
   3. Sending you information and in-app messages about discounts, new services, new features, promotions, newsletters, and other available courses (which you can opt out of at any time);
   4. Sending push notifications to your wireless device to provide updates and other relevant messages (which you can manage from the “options” or “settings” page of the mobile app);
4. Manage your account preferences;
5. Facilitate the Services’ technical functioning, including troubleshooting and resolving issues, securing the Services, and preventing fraud and abuse;
6. Solicit feedback from users;
7. Learn more about you by linking your data with additional data through third-party data providers or analysing the data with the help of analytics service providers;
8. Identify unique users across devices;
9. Tailor advertisements across devices;
10. Improve our Services and develop new products, services, and features;
11. Analyse trends and traffic, track purchases, and track usage data;
12. Advertise the Services on third-party sites and applications;
13. As required or permitted by law; or
14. We, in our sole discretion, otherwise determined to be necessary to ensure the safety or integrity of our users, employees, third parties, the public, or our Services.

4. Who We Share Your Data With

We share certain data about you with other users, companies performing services for us, our business partners, analytics and data enrichment providers, your social media providers, companies helping us run promotions, and advertising companies who help us promote our Services. We may also share your data as needed for security, legal compliance, or as part of a corporate restructuring. Lastly, we can share data in other ways if it is aggregated or de-identified or if we get your consent.

We may share your data with third parties under the following circumstances or as otherwise described in this Privacy Policy:

1. With Other Users: Depending on your settings, your shared content and profile data may be publicly viewable, including to other users.
2. With Service Providers, Contractors, and Agents: we share your data with third- party companies who perform services on our behalf, like payment processing, data analysis, marketing and advertising services (including retargeted advertising), email and hosting services, customer services and support. These service providers may access your data and are required to use it solely as directed to provide our requested service.
3. With Business Partners: We have agreements with other sites and platforms to distribute our Services and drive traffic to our site.
4. With Analytics and Data Enrichment Services: As part of our use of third-party analytics tools like Google Analytics and data enrichment services we share certain contact information, Account Data, System Data, Usage Data (as detailed in Section 1), or de-identified data as needed. De-identified data means data where we have removed things like your name and email address and replaced them with a token ID. This allows these providers to provide analytics services or match your data with publicly available database information (including contact and social information from other sources). We do this to communicate with you in a more effective and customised manner.
5. Social Media Features: The social media features in the Services may allow the third-party social media provider to collect things like your IP address and which page of the Services you’re visiting, and to set a cookie to enable the feature. Your interactions with these features are governed by the third-party company’s privacy policy.
6. For Advertising: If we decide to offer advertising in the future, we may use and share certain System Data and Usage Data with third-party advertisers and networks to show general demographic and preference information among our users. We may also allow advertisers to collect System Data through Data Collection Tools (as detailed in Section 2.1), and to use this data to offer you targeted ad delivery to personalise your user experience (through behavioural advertising) and undertake analytics. Advertisers may also share with us the data they collect about you. To learn more or opt out of participating in ad networks’ behavioural advertising, see Section 6.1 (Your Choices About the Use of Your Data) below. Note that if you opt- out, you’ll continue to be served generic ads.
7. For Security and Legal Compliance: We may disclose your data to third parties if we (in our sole discretion) have a good faith belief that the disclosure is:
   1. Permitted or required by law;
   2. Requested as part of a judicial, governmental, or legal inquiry, order, or proceeding;
   3. Reasonably necessary as part of a valid subpoena, warrant, or other legally valid request;
   4. Reasonably necessary to enforce our Terms of Use, Privacy Policy, and other legal agreements;
   5. Required to detect, prevent, or address fraud, abuse, misuse, potential violations of law (or rule or regulation), or security or technical issues; or
   6. Reasonably necessary in our discretion to protect against imminent harm to the rights, property, or safety of our users, employees, members of the public, or our Services.
   7. We may also disclose data about you to our auditors and legal advisors to assess our disclosure obligations and rights under this Privacy Policy.
8. After Aggregation/De-identification: We can disclose or use aggregate or de- identified data for any purpose.
9. With Your Permission: with your consent, we may share data with third parties outside the scope of this Privacy Policy.

5. Security

We use appropriate security based on the type and sensitivity of data being stored. As with any internet-enabled system, there is always a risk of unauthorised access, so it’s important to protect your password and to contact us if you suspect any unauthorised access to your account.

We take appropriate security measures to protect against unauthorised access, alteration, disclosure, or destruction of the personal data that is collected and stored. These measures vary based on the type and sensitivity of the data. Unfortunately, no system can be 100% secured, so we cannot guarantee that communications, the Services, or any information provided to us in connection with the data we collect through the Services will be free from unauthorised access by third parties. Your password is an important part of our security system, and it is your responsibility to protect it. You should not share your password with any third party, and if you believe your password or account has been compromised, you should change it immediately and contact secretariat@invoiceappa.org with any concerns.

7. Updates & Contact Info

When we make a material change to this policy, we will notify users via email, in-product notice, or another mechanism required by law. Changes become effective the day they’re posted. Please contact us via email with any questions, concerns, or disputes