EU-U.S. Privacy Shield Framework: Active
Swiss-U.S. Privacy Shield Framework: Active
Purpose of Data Collection
Appcues processes four different categories of data, which reflect the different levels of sensitivity in context. We never sell this data to third parties. In limited cases, we provide it to third-party services for usage strictly within the Appcues product or business; for example, to provide analytics graphs on the Appcues dashboard. Type 1: End-user PII This is the most sensitive type of data that Appcues collects. Examples: Any user profile data passed to Appcues by the customer, using the `Appcues.identify()` SDK function Browser information that is collected by default in the Appcues SDK (e.g., OS, device type, browser language, user agent) Browsing history data that is collected by default in the Appcues SDK (e.g., current page URL, current page title) We reiterate that like all data we collect, end-user PII is never sold to third parties. Customers may opt out of browser and browser history information by contacting Appcues Support. This data is used in the targeting and customization of Appcues content. Type 2: End-user Appcues Data This data pertains to how end users are interacting with Appcues content; for example, whether a flow was shown to a given user, whether a user has clicked away a tooltip, etc. This category also includes user responses to in-Appcues forms or surveys. Though this category usually does not contain PII, we caution that form or survey responses may add PII to this data. End-user Appcues data is provided to service providers for usage within the Appcues platform. Customers may also configure Appcues to send this data upstream to other services via Segment. Data in this category is used in the targeting and customization of Appcues content, as well as displaying analytics on the Appcues dashboard. It is this data stream which is available for CSV download on the Appcues dashboard. Type 3: Customer PII Customer PII is collected by the Appcues dashboard, for example the name and email address of each of a customer's team members who are authorized to use the Appcues platform. Appcues does not store financial data about customers (e.g., credit card information), choosing instead to employ a dedicated payments processor. Data of this type is used mainly in the Appcues dashboard and editor, and within the Appcues business. Type 4: Customer Aggregate Data This category includes customer-wide statistics such as active user count, number of Appcues flows shown, how many Appcues flows are published at a time, etc. This data does not contain PII. Data in this category is used mainly in the Appcues dashboard and editor, customer emails, and within the Appcues business.
Questions or Complaints?
If you have a question or complaint regarding the covered data, please contact Appcues Inc at:
Head of Security
Boston, Massachusetts 02114
Privacy Shield organizations must respond within 45 days of receiving a complaint.
If you have not received a timely or satisfactory response from Appcues Inc to your question or complaint, please contact the independent recourse mechanism listed below
NON-HR RECOURSE MECHANISM
Appropriate statutory body with jurisdiction to investigate any claims against Appcues Inc regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission