Privacy Notice – State Information and Rights

LAST UPDATED: September 30, 2024

This page contains additional information relevant to specific state laws and regulations regarding data privacy, including rights that may be available to residents of such states. The information below applies if you are a resident of that applicable state. This Privacy Notice - State Information and Rights is an addendum to the content provided in and forms a part of AppFolio’s Privacy Notice.

1. Additional Disclosures

1.1. Categories of Personal Information Collected. The categories of personal information that we collect are described in our Privacy Notice under the section titled "Information We Collect." The business and commercial purposes for which we collect your personal information can be found in our Privacy Notice under the section titled "How We Use Your Information."

1.2. Categories of Personal Information Disclosed to Third Parties. We disclose the categories of personal information described in our Privacy Notice under the section titled "Information We Collect" to third parties for the following business and commercial purposes:

• Providing our Services, including maintaining and servicing your account

• Safeguarding your information 

• Securing and monitoring our Websites and Services

• Marketing our Services, including to provide targeted and cross-context behavioral advertising personalized to you

• Processing transactions and payments

• Putting on events and webinars

• Undertaking research and development to improve our Services, including gathering analytics for our Websites and Services

• Performing administrative functions, including business and financial recordkeeping

• Sales and customer onboarding

• Providing customer support

• Processing employment applications

The chart below specifies (a) the categories of personal information that may have been disclosed to a third party for a business purpose and (b) the categories of third parties to whom that personal information may be disclosed. More information regarding what personal information we collect and the sources of the information can be found in our Privacy Notice under the section titled “Information We Collect."

1.3. Sharing Personal Information for Cross-Context Behavioral Advertising and Targeted Advertising.

We may share certain personal information with third parties for cross-context behavioral advertising or targeted advertising purposes. The chart below specifies (a) the categories of personal information that may be shared with a third party for cross-context behavioral advertising or targeted advertising and (b) the categories of third parties to whom that personal information may be shared for the purpose of cross-context behavioral advertising or targeted advertising.

2. California Rights

2.1. Your California Rights Regarding Your Personal Information. California law provides California residents with the rights listed below. To exercise these rights, please see the “Exercising Your California Privacy Rights” section below.

• Right to Know. You have the right to know what personal information we have collected and disclosed about you in the last 12 months, including:

  • The categories of personal information we have collected about you;

  • The categories of sources of the personal information;

  • The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;

  • The categories of personal information we have sold or shared and the categories of third parties to whom the information was sold or shared; and

  • The business or commercial purposes for collecting, selling, or sharing the personal information; and

  • The specific pieces of personal information we have collected about you.

• Right to Correct. You have the right to request that we correct inaccurate personal information.

• Right to Delete. You have the right to request that we delete the personal information we have collected from you (subject to certain statutory exemptions).

• Right to Access/Portability. You have the right to request a copy of the personal information we have collected about you.

• Right to Opt Out. You have the right to opt out of the sharing of your personal information to a third party for cross-context behavioral advertising (as defined under California law).

You also have the right not to be discriminated against for exercising any of the rights listed above.

2.2. Sensitive Personal Information. Certain categories of personal information we collect and use to provide the Services may be deemed "sensitive personal information" under California law (such as: social security number, driver’s license, financial account or card numbers, precise geolocation, racial and ethnic characteristics, and content of mail, email, and text messages sent through our systems). We do not use or disclose sensitive personal information other than to provide our Services and as otherwise permitted by California law.

2.3. Exercising Your California Privacy Rights. 

• To exercise your rights to know, correct, delete, or access/portability, please submit a request by: 

  • Filling out this form to submit a Data Subject Request; or

  • Emailing privacy@appfolio.com with the subject line "California Rights Request"

• To opt out of the sharing of personal information for cross-context behavioral advertising, you may visit here.

In order for us to response to certain requests made under this Section 2.3, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or a form of government issues identification. Authorized agents can make a request on your behalf if you provide us with a valid legal power of attorney and a form of government issued identification for both the requester and authorized agent. In certain circumstances, we may decline a request to exercise the right to know, correct, delete, or access/portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.

3. Colorado, Connecticut, Montana, Texas, Utah, and Virginia Rights

3.1 Your Rights Regarding Your Personal Information. Colorado, Connecticut, Montana, Texas, Utah, and Virginia law provides their residents with certain rights, as listed below. To exercise these rights, please see the “Exercising Your Privacy Rights” section below.

• Right to Access. You have the right to know and see what personal information we have collected about you.

• Right to Correct. You have the right to request that we correct inaccurate personal information (Colorado, Connecticut, Montana, Texas, and Virginia only).

• Right to Delete. You have the right to request that we delete the personal information we have collected about you.

• Right to Data Portability. You have the right to request a copy of the personal information we have collected about you.

• Right to Opt Out. You have the right to opt out of targeted advertising (as defined by each states' respective law).

3.2 Exercising Your Privacy Rights. 

• Colorado: To exercise your rights to access, correct, delete, or data portability, please submit a request by:

  • Filling out this form to submit a Data Subject Request; or

  • Emailing privacy@appfolio.com with the subject line "Colorado Rights Request"

• Connecticut: To exercise your rights to access, correct, delete, or data portability, please submit a request by:

  • Filling out this form to submit a Data Subject Request; or

  • Emailing privacy@appfolio.com with the subject line "Connecticut Rights Request"

• Montana: To exercise your rights to access, correct, delete, or data portability, please submit a request by:

  • Filling out this form to submit a Data Subject Request; or

  • Emailing privacy@appfolio.com with the subject line "Montana Rights Request"

• Texas: To exercise your rights to access, delete, or data portability, please submit a request by:

  • Filling out this form to submit a Data Subject Request; or

  • Emailing privacy@appfolio.com with the subject line "Texas Rights Request"

• Utah: To exercise your rights to access, delete, or data portability, please submit a request by:

  • Filling out this form to submit a Data Subject Request; or

  • Emailing privacy@appfolio.com with the subject line "Utah Rights Request"

• Virginia: To exercise your rights to access, correct, delete, or data portability, please submit a request by: 

  • Filling out this form to submit a Data Subject Request; or

  • Emailing privacy@appfolio.com with the subject line "Virginia Rights Request"

• To opt out of the sharing of personal information for targeted advertising in each of the states above, you may visit here.

In order for us to respond to certain requests, you may need to verify your identity by providing us with certain pieces of your information (which we will match against what we have in our records) and/or a form of government issued identification. Authorized agents, legal guardians, or conservators may make a request on your behalf by providing (1) a valid legal power of attorney or protective order and (2) a form of government issued identification for both the requester and authorized agent via the forms linked above. In certain circumstances, we may decline a request to exercise the right to access, correct, delete, or data portability, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.

Information on how you may appeal our refusal to take action on a Data Subject Request will be made available in our response to your original request.