Data will be retained until account deletion/encrypted at rest and transit

Purpose To provide services to our products Lawful basis It is followed law by getting consent.

Data categories & Subjects Customer email, customer name, customer company, customer account password and customer mobile number, employee email, employee name, employee account password Special data categories: Not Applicable

Azure cloud - SQL managed instance, Data Center (Encrypted at rest and transit) Location: US

Data will be retained until account deletion/encrypted at rest and transit

Purpose To provide support services to our products. Lawful basis It is followed law by getting consent.

Data categories & Subjects Customer email, customer name, customer company, customer account password and customer mobile number, employee email, employee name, employee account password Special data categories: Not Applicable

Account maintenance Personal information and activity logs Location: US

Support processing Location: US

Data will be retained until account deletion/encrypted at rest and transit

Purpose To provide sales service to our products. Lawful basis It is followed law by getting consent.

Data categories & Subjects Customer email, customer name, customer company, customer account password and customer mobile number, employee email, employee name, employee account password Special data categories: Not Applicable

Sales Operations (Orders, Payment and Invoices, Licenses) Location: US

Internal Teams (Authorized persons)

Data will be retained until account deletion/encrypted at rest and transit

Purpose To provide marketing campaign services to our products. Lawful basis It is followed law by getting consent as well as by getting double sign confirmation.

Data categories & Subjects Customer email, customer name, customer company, customer account password and customer mobile number, employee email, employee name, employee account password Special data categories: Not Applicable Data categories & subjects Shared with Internal Teams (Authorized persons) External Vendors (Stripe payment processors, Avalara tax compliance)

Internal Teams (Authorized persons)

External Vendors (Mailchimp)

Data will be retained until account deletion/encrypted at rest and transit

Purpose To provide transactional email services to our products. Lawful basis It is followed law by contractual.

Data categories & Subjects Customer email, customer name Special data categories: Not Applicable Data categories & subjects Shared with Internal Teams (Authorized persons) External Vendors (Postmark)

Internal Teams (Authorized persons)

External Vendors (CookerKing)

Legal Location: US

Data categories & Subjects Customer e address and Customer consent preferences Special data categories: Not Applicable

Purpose To provide consent preference selection services based on customer need. Lawful basis It is followed law by consent and legitimate interest.

Data will be retained until account deletion/encrypted at rest and transit

Data categories & subjects Shared with Internal Teams (Authorized persons)

Internal Teams (Authorized persons)