How We Share Information

Information about our customers and users is an important part of our business. We do not sell our customers' or users' personal information to others.

We may share personal information with subsidiaries and affiliates controlled by Arctom that are subject to this Privacy Notice or follow privacy practices that are at least as protective as those described in this Privacy Notice.

We may also share personal information with third-party service providers that perform services on our behalf or assist us in operating our business, platform, websites, and services. These service providers may include providers of cloud hosting, payment processing, email communications, shipping and logistics, data storage, information technology, security, analytics, customer support, and third-party platform integrations.

These third parties may process personal information as necessary to provide their services to us or on our behalf and are subject to applicable contractual, confidentiality, security, and legal obligations, as appropriate.

We may also disclose personal information when required by applicable law, regulation, legal process, or governmental request, or when we reasonably believe disclosure is necessary to protect the rights, property, security, or safety of Arctom, our customers and users, our platform, or others.

Third-Party Integrations

Our platform may allow users to connect their accounts with third-party platforms and services, including LinkedIn, in order to access additional features and functionality.

When a user chooses to connect a third-party service, the user may be redirected to the third-party service to authenticate and authorize the connection in accordance with that third party's authentication and authorization procedures. We do not require users to provide us with their passwords for third-party services when authentication is handled directly by the applicable third-party service.

Depending on the integration and the permissions granted by the user, we may receive and process information from the connected third-party service, such as authorization credentials or tokens, account or organization identifiers, authorized permissions, and other information necessary to establish, maintain, and operate the requested integration.

We may also transmit information to a connected third-party service when necessary to perform actions requested or authorized by the user.

Our use of information received through third-party integrations is limited to providing, maintaining, securing, and supporting the functionality authorized by the user and is subject to applicable agreements, policies, and requirements of the relevant third-party platform.

The availability and functionality of third-party integrations depend in part on the applicable third-party providers and may be modified, suspended, or discontinued from time to time.

Users may disconnect a third-party integration through the applicable settings available on our platform, where supported, or may revoke our application's access directly through the relevant third-party service. Disconnecting or revoking access to an integration may prevent certain platform features from functioning.

LinkedIn Integration and Connected Accounts

Our platform may allow authorized users, including representatives of independent suppliers and other organizations, to connect their LinkedIn accounts and authorized LinkedIn Company Pages through LinkedIn's authentication and authorization process.

When a user chooses to connect LinkedIn, authentication and authorization are performed through LinkedIn. We do not collect or store users' LinkedIn passwords.

Depending on the permissions granted by the user, we may receive, store, and process certain information provided through the LinkedIn integration, such as authorization tokens, LinkedIn member, account, or organization identifiers, authorized permissions, connected Company Page information, and related connection information, as necessary to provide and operate the LinkedIn-related features requested or authorized by the user.

We may also process content that users create, upload, manage, edit, or submit through our platform for publication to LinkedIn Company Pages they are authorized to manage. Such content may include text, images, videos, articles, documents, product announcements, promotional content, company updates, and other marketing materials.

Where our platform provides automated or artificial intelligence-assisted tools to help users create or adapt content, users remain responsible for reviewing the content and ensuring that they have the necessary rights and authority to use and publish it. Publication to a connected LinkedIn Company Page is performed in accordance with the functionality made available through our platform and the permissions granted through LinkedIn.

Users are responsible for ensuring that they have the necessary authority and permissions to connect and manage the applicable LinkedIn account or Company Page.

Users may disconnect their LinkedIn integration through the applicable settings available on our platform, where supported, or revoke our application's access through LinkedIn. After the applicable authorization is disconnected, revoked, or expires, we will no longer use that authorization to access or publish new content to the connected LinkedIn account or Company Page.

Disconnecting LinkedIn from our platform does not automatically remove content that was previously published to LinkedIn. Users may need to manage or delete previously published content directly through LinkedIn or through our platform where such functionality is supported.

Data Sharing and Multi-Tenant Data Segregation

Our platform operates as a multi-tenant service and may be used by multiple independent suppliers, organizations, and their authorized representatives.

Information associated with each supplier or organization, including connected-account information, third-party authorization information, organization identifiers, marketing content, and related integration data, is logically segregated from information associated with other independent suppliers or organizations using our platform.

Each supplier or organization is responsible for establishing and authorizing its own connections to supported third-party services. We do not provide one independent supplier or organization with access through our platform to another supplier's or organization's LinkedIn authorization credentials, access tokens, connected LinkedIn Company Pages, or private account information.

Each supplier or organization may use the LinkedIn integration only with accounts or Company Pages for which the applicable authorized user has the necessary permissions.

We may transmit information to LinkedIn or other connected third-party services when necessary to perform actions requested or authorized by the user, such as publishing user-approved content to a connected LinkedIn Company Page.

We do not sell LinkedIn authorization credentials or access tokens, and we do not share such credentials or tokens with other independent suppliers or organizations using our platform.

We may share information with service providers that assist us in operating, hosting, securing, maintaining, and supporting our platform and its integrations, as described in the "How We Share Information" section of this Privacy Notice.

Promotional Offers

From time to time, we may send promotional offers, product information, company updates, or other marketing communications to selected groups of customers or users through Arctom or its subsidiaries, affiliates, or business departments.

Where required by applicable law, we will obtain appropriate consent before sending marketing communications. Recipients may opt out of receiving certain promotional communications by following the unsubscribe instructions provided in the communication or by using other available communication preference settings.

Opting out of promotional communications will not prevent us from sending transactional, service-related, administrative, security-related, or other non-promotional communications where appropriate.

Business Transfers

As we continue to develop our business, we may acquire, merge with, sell, reorganize, or transfer subsidiaries, business units, or other assets. In connection with such transactions, personal information may be transferred as part of the relevant business assets.

Any transferred personal information will remain subject to the commitments made in the applicable Privacy Notice in effect at the time the information was collected, except where otherwise permitted or required by applicable law or where the individual consents to different practices.

In the event that Arctom, any of its subsidiaries or affiliates, or substantially all of their relevant assets are acquired, merged, reorganized, sold, or transferred to another entity, personal information may be included among the transferred assets, subject to applicable legal requirements.

Data Retention and Deletion

We retain personal information for as long as reasonably necessary to provide our services and platform functionality, fulfill the purposes described in this Privacy Notice, maintain our business and contractual relationships, comply with applicable legal and regulatory obligations, resolve disputes, enforce our agreements, and protect the security and integrity of our platform and services.

For connected third-party integrations, including LinkedIn, we may retain authorization information, account or organization identifiers, permissions, and related connection information for as long as reasonably necessary to provide and maintain the integration.

Users may disconnect their LinkedIn integration or other supported third-party integrations through the applicable settings available on our platform, where supported, or revoke our application's access directly through the relevant third-party service.

When an authorization is disconnected, revoked, or expires, we will no longer use that authorization to access the connected third-party account or to perform new actions on its behalf. Authorization credentials or access tokens that are no longer required may be deleted or securely removed in accordance with our applicable data retention and security practices, subject to reasonable technical processing periods and any applicable legal, security, fraud-prevention, backup, audit, compliance, or recordkeeping requirements.

Content created or stored within our platform, including content created in a supplier's Media Center, may be retained separately from the third-party account connection in accordance with the user's account settings, contractual relationship with us, and our applicable data retention practices.

Disconnecting a third-party integration does not necessarily delete content previously transmitted to or published on the third-party platform. Users may need to manage or delete such content directly through the relevant third-party service or through our platform where such functionality is supported.

Upon termination or deletion of an organization's account with our platform, we may delete, anonymize, or retain personal information and connected-account data associated with that account in accordance with our applicable retention practices and legal obligations. Certain information may be retained where required or permitted by applicable law or where reasonably necessary for security, fraud prevention, compliance, dispute resolution, enforcement of agreements, or legitimate recordkeeping purposes.