Privacy Policy
Last updated: December 21st, 2023
Arrows Software Inc., 8605 Santa Monica Blvd, PMB 62069, West Hollywood, California 90069-4109 US (“Arrows”, “Company”, “we”,“us” or “our”) provides an onboarding software-as-a-service product and service to help businesses create a seamless customer onboarding experience. This Privacy Policy explains how Arrows collects, uses, discloses, and otherwise processes personal information in connection with our website(the “Site”) and other websites we own and operate that link to this PrivacyPolicy, and the related content, platform, services, products, and other functionality offered on or through our services (each a “Service” and collectively, the “Services”). Arrows is the controller of the personal information we hold about you in connection with your use of the Site and, in some instances, the Services. This means that we determine and are responsible for how your personal information is used.
I. Our Collection and Use of Personal Information
We collect personal information in a variety of ways. For example, you may provide us your personal information when you register for an account, interact with us via our Site or email, subscribe to our mailing lists, newsletters or other forms of marketing communications, or use some other feature of our Service.
We may link or combine your activities and information collected from you on the Site with information we receive from third parties, as well as information we collect automatically through tracking technologies (defined below). This allows us to provide you with a personalized experience regardless of how you interact with us.
Personal Information Collected from You When You Use the Site and Services
The table below sets out in further detail the categories of personal information we collect about you and how we use that information when you use theService, as well as the legal basis which we rely on to process the personal information.
We indicate below if the provision of certain personal information is mandatory or optional. If you choose not to provide personal information marked as mandatory, we may not be able to provide those aspects of the Service to you, or to respond to your queries and other requests.
Personal Information Automatically Collected
We, and our third-party partners, automatically collect information you provide to us and information about how you access and use theServices when you visit our Site, use our Services, read our emails, or otherwise engage with us. We typically collect this information through a variety of tracking technologies, including (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”)to automatically collect this personal information. We may also use this information to distinguish you from other users of our Service. This helps us monitor and analyze how you use and interact with our Services.
If you are in the EEA, UK or Switzerland: other than cookies and similar technologies that are required to operate the Site, we will only place cookies on your device or otherwise use these technologies to collect data from your device with your consent. You have the ability to opt out by disabling cookies in your browser or mobile settings. These settings will typically be found in the "options" or "preferences" menu of your browser.
We may link or combine the personal information we collect about you and the information we collect automatically. We may also anonymize and aggregate any of the personal information we collect (so that it is no longer linked to you and does not identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the Service and for marketing campaigns (for example sharing industry trends and best practices based on the information we collect). We may also share such anonymized and aggregated information with others. For more information about these practices and your choices regarding cookies, please see our Cookie Notice.
The table below sets out in detail the categories of personal information we collect about you automatically and how we use that information.
For more information about how we collect personal information about you automatically, please refer to our Cookie Policy.
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies; however, doing so may negatively impact your experience using the services, as some features and services may not work properly. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.
Personal Information from Other Sources
We also collect personal information about you from other sources, which we often combine with personal information we collect either automatically or directly from an individual.
The table below sets out in further detail the categories of personal information we collect about you from third parties and how we use that information when you use the Service, as well as the legal basis which we rely on to process the personal information and recipients of that personal information.
Additional Uses of Personal Information
We may use personal information we collect to:
- fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to deliver the Services you have requested and to process transactions, including providing you with a white paper you have requested or an online product demonstration;
- manage Arrows and its day-to-day operations;
- verify your identity and entitlement to products or Services, when you contact us or access our Services;
- communicate with individuals, including via email, social media and/or Zoom calls;
- for marketing and advertising purposes, including to market to you or offer you through email or social media, information and updates on products or services we think that you may be interested in(where applicable, we may send you marketing messages if you have given us your consent to do so or where we send you marketing messages about similar products or services if you have recently contracted with us and have not opted out of receiving such marketing messages);
- administer, improve and personalize ourServices, including by recognizing an individual and remembering their information when they return to our Services;
- process payment for our Services;
- facilitate customer benefits and services, including customer support through our command center services;
- identify and analyze how individuals use our Services;
- conduct research and analytics on our customer and user base and our Services;
- improve and customize our Services to address the needs and interests of our user base and other individuals we interact with;
- test, enhance, update and monitor theServices, or diagnose or fix technology problems;
- help maintain the safety, security and integrity of our property and Services, technology assets and business;
- to enforce our Terms of Service, to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
- prevent, investigate or provide notice of fraud or unlawful or criminal activity;
- comply with contractual and legal obligations and requirements;
- to fulfill any other purpose for which you provide personal information; and
- for any other lawful purpose, or other purpose that you consent to.
II. Our Disclosure of Personal Information
We may also share, transmit, disclose, grant access to, make available, and provide personal information with and to the following:
Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
Service providers: We may disclose your personal information to service providers who perform services for us or on our behalf, such as providers of web hosting, marketing and analytics services. A full list of Arrows service providers can be found here. We may share the information set out in the ‘Personal Information Collected from You When You Use the Site and Services’, ‘Personal Information Automatically Collected’ and ‘Personal Information from Other Sources’ sections above. These service providers will process your personal information as processors and will only process your personal information on our instructions.
Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third-party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy or receivership. These recipients will use your personal information to assess the potential transaction with us and otherwise only as disclosed in this Privacy Policy. The lawful basis we rely on for transferring this personal information is that the processing is necessary for ours and the third party’s legitimate interests, namely assessing and executing a potential transaction with us.
- in connection with the establishment, exercise, or defense of legal claims;
- to comply with laws or to respond to lawful requests and legal process;
- to protect our rights and property and the rights and property of others, including to enforce our agreements and policies;
- to detect, suppress, or prevent fraud;
- to protect the health and safety of us and others; or
- as otherwise required by applicable law.
These recipients will use your personal information in the performance of their regulatory or law enforcement role, or to advise us in connection with a potential claim or regulatory enforcement action. The lawful basis we rely on for sharing personal information with these recipients is that that the processing is either necessary to comply with a legal obligation to which we are a subject or is necessary for our legitimate interests, namely enforcing our rights or complying with requests from regulatory authorities. We may also share your personal information in this way where it is necessary for our legitimate interests, namely receiving professional legal, financial and accountancy advice.
With Your Consent: We may disclose personal information about an individual to certain other third parties or publicly with their consent or direction. For example, with an individual’s consent or direction we may post their testimonial on our Sites or service-related publications.
III. Control Over Your Information
You may control your information in the following ways:
Email Communications Preferences. You can stop receiving promotional email communications from us by clicking on the“unsubscribe” link provided in such communications. You may be able to opt-out of some service-related communications (e.g., recurring reminder emails and notifications such as task due reminders, weekly digest emails, data reports and comment notifications). Where this option is available, you may opt-out of such service-related communications by clicking on the “unsubscribe” link provided in such communications. You will not be able to opt-out of service-related communications that are necessary to use the Service, for example login verification emails, billing reminders, and other emails necessary to use the Service.
Modifying or Deleting Your Information. If you have any questions about reviewing, modifying, or deleting your information, you can contact us directly at help@arrows.to. We may not be able to modify or delete your information in all circumstances.
IV. Data Retention
The criteria used to determine the period for which personal information about you will be retained varies depending on the legal basis under which we process the personal information:
Contract. Where we are processing personal information based on a contract, we generally will retain your personal information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations for legal claims that could arise from our contractual relationship.
Legitimate Interests. Where we are processing personal information based on our legitimate interests, we generally will retain such information for a reasonable period of time in order to fulfill the legitimate interests, taking into account your fundamental interests and your rights and freedoms.
Consent. Where we are processing personal information based on your consent, we generally will retain your personal information until you withdraw your consent, or otherwise for the period of time necessary to fulfill the underlying agreement with you or provide you with the applicable service for which we process that personal information.With regards to any erasure requests, your account will be removed from the Service and it may take up to one week for your data to be deleted.
Legal Obligation. Where we are processing personal information based on a legal obligation, we generally will retain your personal information for the period of time necessary to fulfill the legal obligation.
Legal Claim. We may need to apply a “legal hold” that retains information beyond our typical retention period where we face threat of legal claim or intent to establish a claim. In that case, we will retain the information until the hold is removed, which typically means the claim or threat of claim has been resolved.
V. Children's Personal Information
Our Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. If an individual is under the age of 13, they should not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 13has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 13, we will promptly delete that personal information.
VI. Links to Third-Party Websites or Services
Our Services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Policy, this Privacy Policy does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective Privacy Policies.
VII. Updates to this Privacy Policy
We may update this Privacy Policy from time to time. When we make changes to this Privacy Policy, we will change the date at the beginning of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify individuals by email to their registered email address, by prominent posting on our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
VIII. Contact Us
If you have any questions or requests in connection with this Privacy Policy or other privacy-related matters, please send an email to help@arrows.to.
Where you choose to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide you with additional privacy-related information where the scope of the inquiry/request and/or personal information we require fall outside the scope of this Privacy Policy. In that case, the additional Privacy Policy will govern how we may process the information provided at that time.
IX. Region-Specific Disclosures
EEA, UK and Switzerland: if you are located in EEA, UK, or Switzerland, please see the Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures section for additional European-specific privacy disclosures.
We may transfer your personal data to, or store your personal data in, the following countries:
Additional European Economic Area, United Kingdom and Switzerland Privacy Disclosure
These Privacy Disclosures set out additional information for individuals accessing our Service from the European Economic Area (Member States of the European Union together with Iceland, Norway, and Liechtenstein) (“EEA”), United Kingdom (“UK”), and Switzerland. Please ensure that you have read and understood these additional privacy disclosures alongside our Privacy Policy and Terms of Service before you access or use the Service.Personal Data: When we use the term “personal data” in these Privacy Disclosures, we mean information relating to an identified or identifiable natural person.
EEA and UK Legal Representative: we have appointed EEA and UK Representatives under Article 27 of the EU GDPR and UK GDPR respectively.
Please contact our EU or UK representative if you have any queries in relation to your rights, these Privacy Disclosures and our Privacy Policy, or general privacy matters. Please ensure you reference our entity name, Arrows, in any correspondence you send our representative.
International Transfers of Your Personal Information.
The personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations. If you are located in the EEA, UK or Switzerland your personal data may be processed outside of the country in which you reside. These international transfers of your personal data will be made pursuant to appropriate safeguards, including: (i) ensuring that the personal data is transferred to countries recognised as offering an equivalent level of protection; or (ii) ensuring that such transfer is to a third-party who uses appropriate safeguards in respect of the processing in question, including but not limited to the standard contractual clauses, which are recognised as offering adequate protection for the rights and freedoms of data subjects.
We will take appropriate technical and organisational measures to ensure that your personal data is protected and secured in accordance with applicable law and this privacy policy regardless of where it is processed.
Your Privacy Rights
You have the following rights in relation to your personal information (subject to certain limitations);
Please note that if the exercise of these rights limits our ability to process personal information, we may not be able to provide our products or services to you, or otherwise engage with you going forward.
To exercise any of your privacy rights, please contact us as set out in the Contact Us section of the Privacy Policy. We may need to verify your identity before processing your request, which may require us to obtain additional personal information from you. In certain circumstances, we may decline a request to exercise the rights described above if we are unable to identify you.