Last updated: Jul 5, 2021
Account Data: Information pertaining to the owner of the Account, including name, email, address, billing information.Information pertaining to the owner of the Account, including name, email, address, billing information.***Business Data***: Information generated either by the Account Owner (and its Authorized Users) or Orapa, where such Business Data does not include any personal Customer Data.***Customer Data***: Information relating to the identity and identification of a client or customer of the Account Owner, including name, address, etc. that is used for client relationship management purposes.
Orapa provides a user interface experience for use in connection with a Salesforce account. The software is accessed through the browser as a web application or chrome extension. Orapa products are self-service; Authorized Users determine and are solely responsible for what and how Customer Data is collected. Orapa acts as a conduit through which Business and Customer Data flows into the Salesforce platform from you as the data collector. We do not store any data for longer than necessary to provide the Services. Orapa acts as a data processor with respect to Business Data and Customer Data and processes this data as instructed by Authorized Users, who are the data controllers.
Account Owners own and are data controllers of, Business and Customer Data. Depending on how the Account Owner and their Authorized Users choose to use the software, Customer Data may include certain personal information relating to the customers and clients of the Account Owner. Account Owners manage all Customer Data, as well as the users who create, manage, distribute, or report any Business Data generated by the Services. To the extent that Orapa processes or creates Business Data, Orapa does so as a data processor on behalf of Customers. Orapach processes Customer and Business Data on behalf of Customers in a manner consistent with this Privacy Statement. This may include performing certain analytical functions as part of the Services. Orapa only provides such services at the request of the Account Owner and does not process Customer or Business Data except as explicitly directed by the Account Owner. Orapa treats all Customer and Business Data as confidential. All Customer and Business Data are safeguarded using industry-standard security practices to prevent unlawful disclosure. Orapa does not sell or make available Customer or Business Data except as requested by valid court order, search warrant, subpoena, or otherwise as agreed by the parties or required by law. Authorized Users of Organizational Accounts may generate information that is not subsequently linked to Salesforce or their organization. Until such information is linked to Salesforce or their organization, such information belongs to the Authorized User. If the Authorized User links an Object (as the term is defined in the Terms of Service), they acknowledge that they no longer have any rights of privacy or ownership over that information, and Orapa is under no obligation to ensure that private information belonging to Authorized User is not transferred to an Organizational Account’s control. Please carefully review your Objects, including “Notes,” to ensure that any information you link to Salesforce is information you are willing to share with your employer and/or complies with your employment agreement between you and the organization. If you wish to exercise rights in relation to Account Data for which Orapa acts as a data controller, you should contact firstname.lastname@example.org. Please note, however, that Orapa can or will delete your Account or Business Data only if there is no statutory obligation or prevailing right of Orapa to retain it. Note further that if you request that Orapa deletes your Account Data, you will not be able to continue to use any Orapa service that requires Orapa’s use of your Account Data.
In certain circumstances, individuals may have the following rights under data protection law in relation to their personal information:
Orapa will take steps to ensure that it verifies your identity to a reasonable degree of certainty before it will process the data protection rights you want to exercise. When feasible, Orapa will match Customer or Account Data provided by you in submitting a request to exercise your rights with information already maintained by Orapa. This could include matching two or more data points you provide when you submit your request with two or more data points that are already maintained by us. In accordance with the verification process set forth in the California Consumer Privacy Act (“CCPA”), Orapa will require a more stringent verification process for deletion requests, or for Account Data that is considered sensitive or valuable, to minimize the harm that might be posed to you by unauthorized access or deletion of your Account Data. If Orapa must request additional information from you outside of the information that is already maintained by Orapa, Orapa will only use it for the purposes of verifying your identity so you can exercise your data protection rights, or for security and fraud-prevention purposes. Orapa will decline to process requests that are manifestly unfounded, excessive, fraudulent, or are not otherwise required by local law.