Privacy Policy and Cookie Notice

Latest Update: February 10th, 2022

This Privacy Policy (the “Policy”) contains information about how Nexapp Technologies Inc. (referred to as “Nexapp”, “we”, or “us”) collects, uses and discloses your personal data when you are:

• using the website axify.io (the “Website”);
• using our project management platform Axify, which is available at app.axify.io as a web application (the “Platform”); and
• exchanging with us by emails, social media or otherwise. 

(together with the Website and the Platform referred to as the “Services”). 

This Privacy Policy also covers our use of cookies and tracking technologies, such as pixels and beacons (together, the “cookies”). Click here to jump directly to the cookie notice section of this Policy.

In addition, this Privacy Policy covers the use of your personal data for interest-based advertising, which we conduct when permitted under applicable law. For more information about this topic, please click here to jump directly to the relevant section of this Privacy Policy. We do not conduct interest-based advertising within our Platform or use Platform Users' data when they are using the Platform. We only conduct interest-based advertising through our Website and social media.  

If you have any questions regarding the processing of your personal data, you can email us at info@axify.io.

For any questions or requests for information regarding Bill 25 and the management of personal data at Nexapp, our parent company, please contact our Data Privacy Officer, Pier-Luc Rodrigue, at plrodrigue@nexapp.ca, or our Security Officer, Marc-Olivier Duval, at moduval@nexapp.ca.

1. Key terms

In the Privacy Policy, the term “Platform User” refers to developers, employees, subcontractor personnel and end-users who are authorized to use our Platform by our customers with whom we have an agreement. 

The term “Platform Admin” refers to end-users who are authorized to use our Platform as administrators of the Platform and/or who manage Platform Users’ work through the Platform.

By comparison, the term “Website User” refers to someone who is navigating our Website, or is interacting with us by emails, social media or otherwise. 

The term “User” or “you” refers indistinctively to a Platform User, Platform Admin and/or a Website User.

2. What do we mean by “personal data”?

Personal data is information that relates to a natural person or allows for the identification of a natural person. Some information may not be personal on its own but may become personal data if associated with personal data or if the sum of the information allows us to identify you. We include cookies in our definition of personal data. The definition of what constitutes personal data is subject to the laws applicable in your jurisdiction, and this Policy shall be interpreted in accordance with applicable laws.

For the purposes of this Privacy Policy, we define personal data as any information which relates to a natural person and allows that person to be identified. For example, this means that we consider electronic identifiers, such as emails and passwords, as personal data. You should know that some laws do not include business contact information (ex. name, title, work email, etc.) and other employees' personal data in the legal definition of personal data. However, to be transparent with our Users, we included such personal data in our own definition of personal data. Click here to learn more about what type of personal data we collect and why.

We include cookies in our definition of personal data, although some laws may not consider cookies as personal data. Click here to have more information on the cookies we collect. 

3. What types of personal data does Nexapp collect, and why?

We collect personal data to provide you with our Services, for the purpose of obtaining analytics on your use of our Services, or in connection with our marketing activities. This section does not cover the cookies that we use. Our use of cookies is covered in the questions below.

Under the European General Data Protection Regulation (“GDPR”), where applicable, we use different legal bases to justify our processing of your personal data, such as consent, the performance of a contract and our legitimate interests. However, these legal bases may not be valid under all jurisdictions and are indicative. For instance, in Canada, where such legal basis is not applicable except for consent, we collect, use and disclose such personal data with your consent, which may be explicit or implied. You can withdraw your consent at any time; click here to learn how to do so.

4. What cookies do you use and why?

We use cookies for our Services to function as intended, to conduct marketing (only when using the Website), to provide functionalities on our Platform, to analyze our performance and to ensure that our Services are secure. Cookies are also useful to identify bugs and errors. We use both first-party and third-party cookies installed by partners on our Website.

Cookies are messages that web services pass to your web browser when you navigate the Internet. Your browser stores each of these messages in a small file. Our definition of cookies also includes similar technologies, like pixel and web beacons that are installed on your devices. Cookies can track you across different websites, and serve different purposes. There are various types of cookies: (1) essential; (2) functional; (3) marketing and (4) analytics. Some stay installed only during your session on a website, others are installed for several months or years.      

We collect cookies that classify in each of these categories:

5. Do you use Google Analytics? 

Yes, we do. Google Analytics is Google’s analytical tool that helps us to understand how Users engage with our Services. It uses a set of cookies to collect information and report site usage statistics without allowing us to identify individual visitors. 

In addition to reporting site usage statistics, the data collected by Google Analytics is leveraged to do remarketing, including across devices, through cookies such as Google Adwords and DoubleClick. We provide more information on interest-based advertising in the following question.

6. Do you conduct interest-based advertising (IBA)?

Yes. We use targeting cookies as part of our marketing strategy. This is called interest-based advertising. We do not conduct interest-based advertising within our Platform or as part of our Services or use Platform Users' data when they are within the Platform or using the Services. We only conduct interest-based advertising through our Website and social media.  

You can opt out of interest-based advertising by managing your cookies. Click here to jump to the section of the Privacy Policy that explains to you how to do this. You can also use WebChoices which is a browser-based tool for opting out of interest-based advertising. 

Interest-based advertising is also referred to as targeted advertising (retargeting) or behavioural advertising. Re-targeting means that the ads that you are being served are personalized based on your behaviour when browsing online. This is enabled through cookies and requires the processing of electronic data that is considered personal data under certain laws.

For instance, we use Facebook Conversion Tracking Pixel on our Website to record how efficient our advertisements are for statistical and market research purposes. Facebook collects such data for us based on your agreement with Facebook. The collected data remains anonymous for us - we can only see aggregated data. This means that we cannot see the personal data of individual users by using Facebook Conversion Tracking Pixel. However, this personal data is available to Facebook, and Facebook may connect such data with your Facebook account and use this data for their own advertising purposes, in accordance with its current privacy policy, which you can find here.     

We also use Google Remarketing and Google AdWords for interest-based advertising purposes, including retargeting, which allows us to serve relevant ads to the relevant individuals. It also allows us to create segments based on the analytics that we have obtained, and then use it as part of remarketing campaigns on our Google Ads account. Google Ads uses a different cookie than Google Analytics. You can disable Google’s use of advertising cookies at all times by clicking here. Google Analytics also offers a function for remarketing audiences. Google AdWords Remarketing keeps track of all our Website Users and follows these Website Users online to show our ads. 

If you are not comfortable with this, you can manage your Cookie preferences. Click here to jump to the relevant section of this Policy. 

7. To whom do you disclose my personal data?

Let’s be clear, we do not sell your personal data to data brokers. However, we do share your personal data with certain types of third parties to provide you with the Services, conduct marketing and as required by the law. We can also share your personal data in the context of a merger and acquisition, as part of bankruptcy procedures or for other corporate requirements.

We may share your personal data with our financial and legal advisors or auditors if reasonably required, or in the event we would be required to do so to defend our rights and interests.

In the case of a merger or acquisition, sale of assets, corporate reorganization, bankruptcy filing, insolvency procedures or similar circumstances, your personal data would be considered our assets and property of Nexapp. In these circumstances, ownership of the personal data we collected may be transferred or we may have to share some of your personal data to conclude, negotiate or discuss with third parties. We will only share what we are required to share for these specific purposes.

8. Where do you store my personal data?

We use Amazon Web Services to host our Services and store your personal data. The servers are located in Canada. However, our suppliers and third parties may process your personal data internationally, including in the United States.

9. How long do you retain my personal data?

We retain personal data for as long as necessary to provide you with the Services, to perform our marketing campaigns effectively or as required by applicable laws, whichever is longer. We use both persistent and session cookies. Session cookies are deleted once you close your browser, whereas persistent cookies remain active on your device for some time. For instance, Google Analytics cookies remain installed on your device for 2 years. This allows Google Analytics to track you for analytic purposes, as well as for marketing purposes, and to provide us with aggregated data on your behaviour.

10. How do you keep my personal data secure?

We strive to implement security features that are proportional to the risks, taking into consideration factors such as the sensitivity of the personal data that we collect. 

However, it is important to understand that we cannot guarantee the security of personal data on the Internet and that you must also take precautions, such as not sharing your credentials with anyone.

11. Can I manage my Cookie preferences?

You can always manage your cookie preferences. However, some functionalities of the Services may require cookies in order to perform as expected, or for security purposes. You can control your cookie preferences through your browser. Depending on the browser that you are using, different instructions are applicable.

12. Do I have any rights over my personal data?

Yes. These rights vary depending on where you are located. 

You generally have the right to access your personal data and to correct your personal data if inaccurate, in certain circumstances.

Under the GDPR (if applicable to you), you have additional rights, such as the right to object to the processing of your personal data, the right to data portability, the right to erasure and the right to restrict the processing of your personal data:

• The right of access: under the right of access, you have the right to gain access to your data free of charge in a commonly used format – such as an electronic format if the request is made electronically.
• The right to rectification: you are entitled to have your personal data rectified if inaccurate or incomplete and we will respond to such request within one month if not deemed complex.
• The right to erasure: ‘the right to be forgotten’, or right to erasure, means you have the right to request that your data be deleted easily and securely where there is no compelling reason for possession and continued processing.
• The right to restrict processing: you have the right to ‘block’ or restrict the processing of personal data, in certain circumstances.
• The right to data portability: you also have the right to data portability, which allows you to obtain and reuse your personal data across different services for your own purposes.

You can exercise your rights at any time by contacting us at info@axify.io. Platform Users and Admins can also review their parameters on the Platform. For instance, you can change your name, e-mail, password and other Identification Data within the Platform without involving us, in the “My Profile” section, by clicking “Edit”.

We will respond to your request within 30 days. If we cannot comply with your request, we will tell you why.

If you are located in Canada, note that the Office of the Privacy Commissioner of Canada drafted this FAQ to help you access your personal data when it is held by a business. You can also contact the Office of the Privacy Commissioner of Canada’s Information Center:

Telephone
9:00 am to 4:00 pm EST
Toll-free: 1-800-282-1376

Mailing address
Office of the Privacy Commissioner
30 Victoria Street
Gatineau, Québec
K1A 1H3

If you have any issue with how we collect, use or disclose your personal data, or how we responded to your request, please let us know at info@axify.io. We will do our best to improve our processes to make certain that it does not happen again. We will also provide you with additional information about our practices if you would like us to do so.      

If you are still not satisfied, you can lodge a complaint to the Office of the Privacy Commissioner of Canada using this online form, or to your local privacy regulators.

13. If I gave consent for you to process my personal data, may I opt out?

Yes, whenever we process your personal data based on your consent, you can withdraw that consent at any time by contacting us at info@axify.io. However, please note that you may be unable to continue using our Services or some of their functionalities if you withdraw your consent.

You can also opt-out of receiving commercial emails from us, by clicking the unsubscribe link at the bottom of such email.

14. Children

We do not knowingly collect personal data from children under the age of 13. In the event you become aware that an individual under the age of 13 has enrolled without parental permission, please advise us immediately.

15. Do you respond to “Do Not Track” signals?

If you are a resident of California, you have the right to ask companies to stop tracking you on the Internet. Please note that we do not respond to Do Not Track signals. However, if you have a legitimate request about your personal data, be sure that we will try our best to assist you!

16. Can we change this Policy?

We may need to modify this Policy to reflect new processing activities, adapt to new laws and regulations or reflect technological changes or corporate changes, such as a result of a merger and acquisition. We may also change this Policy at our sole discretion. In case of material changes, we will send an email to Platform Users and Platform Admins. You can view the date of the latest update at the top of this page, and you can always reach out to us at info@axify.io, should you have any questions. Your continued use of the Services is deemed an acceptance of this Policy.