# Anomalo Privacy Policy

Last Updated 01/31/2025

At Anomalo, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy.

### Privacy Policy

**1. What is Covered by this Privacy Policy**.

**1.1 _Coverage_.** At Anomalo, we take your privacy seriously. This Privacy Policy covers how we treat Personal Data that we gather when you access or use Anomalo’s data quality software and services, website, and other products and services (" **Services** "). Services also include Anomalo’s services that require you to log in, such as Anomalo’s support platform and Slack. Please read this Privacy Policy to learn how we treat your Personal Data.

**1.2 _Acceptance_.** By accessing or using our Services, you acknowledge your acceptance of the practices and policies outlined below, and you consent to our collection, use, and sharing of your information as described in this Privacy Policy.

**1.3 _Compliance with Applicable Law_.** Anomalo intends to comply with all applicable laws, including the EU and UK General Data Protection Regulation and the California Consumer Protection Act (“CCPA”), as well as the principles of the EU – US Data Privacy Framework (“DPF” and “DPF Principles”). Your rights under applicable law are summarized in the applicable Schedules below.

**1.4 _Third-party Practices_.** This Privacy Policy covers third party practices as provided below but does not cover the practices of companies that we don’t own or control, or people we don’t manage, or websites or services to which Services may link to except to the extent such websites or services are part of Services and exchange data directly with Services.

**2. Personal Data We Collect**.

**2.1** “ **Personal Data**” means any information that identifies or relates to a particular individual and includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules, and regulations. Personal Data includes, but is not limited to; name, identification number, location, online identifier, or factors specific to the identity of a natural person.

**2.2 _Categories_.** Anomalo collects the categories of Personal Data as described in the following chart. Anomalo has collected such Personal Data over the past twelve months:

| Categories of Personal Data We Collect | Examples of Personal Data We Collect | Categories of 3rd Parties with Whom We Share this Personal Data |
| --- | --- | --- |
| Profile or Contact Data | - First and last name<br>- Email address<br>- Phone number<br>- Account name<br>- Username<br>- Passwords<br>- Job Title<br>- Company name | - Service Providers<br>- Analytics Partners |
| Payment Data | - Payment card type<br>- Payment card number<br>- Billing address<br>- Billing phone number<br>- Billing email | - Service Providers |
| Device / IP Data | - IP Address<br>- Domain server<br>- Device / OS / browser type | - Service Providers<br>- Advertising Partners<br>- Analytics Partners<br>- Parties You Authorize<br>- Parties You Access<br>- Parties You Authenticate |
| Web Analytics | - Browsing history<br>- Search history<br>- Referring webpage / source | - Service Providers<br>- Advertising Partners<br>- Analytics Partners |
| Social Network Data | - Email address<br>- Username<br>- Company name | - Service Providers<br>- Analytics Partners |
| Professional- or Employment-related Data | - Job title | - Service Providers<br>- Analytics Partners |
| Geolocation Data | - IP address-based location information | - Service Providers<br>- Advertising Partners<br>- Analytics Partners |

**3. Source of Personal Data**. Anomalo collects Personal Data from:

| You | Third Parties |
| --- | --- |
| We collect information you provide directly to us. This includes data when you create an account, provide information in free-form text boxes in Services, or through responses to surveys. We also collect information automatically through Cookies when you use our Services. | We collect information from analytics providers to analyze your interaction with the Services, from third parties who help us provide customer support, and from social networks and third-party sites if you sign into Services through a social network or other third-party site. |

**4. Purposes for Collecting Personal Data**. Anomalo collects and uses Personal Data for the following reasons:

| Providing Services | Marketing Services | Legal Requirements |
| --- | --- | --- |
| We use Personal Data to provide, customize, and improve Services, including account management, processing orders, and providing support. | We use Personal Data to market Services and correspond with you, including conducting marketing activities and sending emails according to your preferences. | We use Personal Data to meet legal requirements and enforce legal terms, including fulfilling our obligations under applicable law and resolving disputes. |

**5. Sharing Personal Data**. Anomalo discloses Personal Data to the categories of service providers and other parties described below:

| Categories of 3rd Parties with Whom We Share Personal Data | Examples of 3rd Parties with Whom We Share Personal Data | Description |
| --- | --- | --- |
| Analytics Partner | - Providers that track user interactions | Analytics Partners help us provide analytics on web traffic and usage of Services. |
| Advertising Partner | - Marketing providers, ad networks | Advertising Partners help us market Services and provide relevant offers. |
| Legal-related Providers | - Legal counsel, regulators | Legal-related Providers assist with legal requirements. |
| Parties You Authorize | - Hosting, communication providers | These help you access or use Services. |
| Service Provider | - Various service providers | Service Providers help us perform business functions. |

**6. Business Transfers**

**6.1 _Corporate Transfers._** Anomalo may transfer Personal Data if it undergoes a merger, acquisition, or related transaction.

**6.2 _Aggregated, De-identified, or Anonymized Data_.** Anomalo may create aggregated, de-identified, or anonymized data and share it for lawful business purposes.

**7. Tracking Tools, Cookies, Advertising, and Opt-out**

**7.1 _Tracking Tools_.** Anomalo uses cookies and similar technologies to recognize your browser, analyze trends, and improve Services.

**7.2 _Types of Cookies_.** We use various types of Cookies:

| Type of Cookie | Examples | Description |
| --- | --- | --- |
| Essential | Authentication cookies | Required for secure login. |
| Functional | Language or region tracking cookies | Used to maintain settings and preferences. |
| Performance | Google Analytics cookies | Used for analyzing website usage. |
| Advertising | Tracking cookies | Used for interest-based advertising. |

**7.3 _Accepting Cookies_.** You can decide whether to accept Cookies through your browser's settings.

**8. Interest-based Advertisements**

Anomalo may serve advertisements targeted to users based on preferences and browsing patterns.

**9. Data Security and Retention**. Anomalo employs security measures to protect your Personal Data. We retain Personal Data for as long as necessary to provide Services.

**10. Personal Data of Children**. Anomalo does not knowingly collect Personal Data from children under 16 years of age.

**11. Changes to this Privacy Policy**. Anomalo may change this Privacy Policy and will notify users of changes.

**12. Contact Information**. For inquiries regarding this Privacy Policy or your Personal Data, contact us at privacy@anomalo.com or at our Palo Alto office.

### Schedule A. EU – US Data Privacy Framework

**1. Applicability.** Anomalo is committed to complying with DPF Principles. Anomalo has certified its commitment to comply with the DPF.

**2. Data Processing.** Anomalo will be transparent about the Personal Data it collects and your rights regarding that data.

**3. Data Retention.** Anomalo retains your Personal Data only as necessary to fulfill the original purpose of processing.

**4. Your Rights.** EU data subjects have rights regarding their Personal Data under the GDPR.

**5. Disclosure to Lawful Government Requests.** Anomalo must disclose Personal Data in response to lawful requests.

### Schedule B. European Data Subject Rights

**1. Applicability.** This Schedule includes additional rights for EU residents under the GDPR.

**2. Contact Information.** For questions regarding your rights, contact privacy@anomalo.com.

**3. Data Processing.** Anomalo will only process Personal Data if there is a lawful basis for doing so.

**4. Data Subject Rights.** You have rights regarding access, erasure, and complaint filing related to your Personal Data.

### Schedule C. California Resident Rights

**1. Applicability.** California residents have rights under the CCPA.

**4. Data Subject Rights.** You have rights concerning access, deletion, and direct marketing disclosures of your Personal Data.

### Schedule D. Rights of Residents or Data Subjects in Other Jurisdictions

**1. Nevada.** Nevada residents can opt-out of the sale of Personal Data.