Privacy Policy

Last modified: October 17, 2023

Teal Platforms Inc. and its affiliates or subsidiaries ("we", "us", "our", and similar expressions) value your privacy and we want you to understand how we collect, use, share, and protect your personal information when you visit teal.dev and any of its sub-domains (our "Website"), buy products through us, use our services, use our software platform (the "Platform" and the foregoing collectively, the "Services"), and otherwise interact with us. By using our Website or any of our Services, you are agreeing to the terms of this Privacy Policy.

  1. What is personal information?

    "Personal information" is generally any information about an identified or identifiable individual, which includes information that can be used on its own or with other information to identify, contact, or locate a natural person.

Our Platform allows an enterprise customer (“Enterprise Customer”) to embed our accounting services in connection with the products and services that the Enterprise Customer provides to its own customers (“End Customers” and collectively with Enterprise Customers, “Customers”). 

Our Services may involve collecting, using, and disclosing personal information about individuals connected to Enterprise Customers or End Customers, and other individuals who are not customers, such as people who visit our Website or interact with us outside of the Platform. 

  1. What personal information do we collect about you and how do we collect it?

    There are several types of information we collect about you: 

    1. Information you give to us.

      We collect information that you give us directly. While the categories of personal information we collect directly from you will change over time and will depend on the circumstances of our request, they may include the following: 
      1. Information you upload. You give us your personal information when you upload it to the Platform or otherwise give it to us when we provide our Services to you. This includes information we collect when you complete a transaction with us or the information you submit on the Platform.
      2. Business and financial information. We may ask you for information about your business, your finances, expenses, invoices, details of your financial transactions, payment details, tax details, details about your customers, vendors, or employees, or other business and financial information when you use our Services. 
      3. Contact data and account profile data. We collect personal information you give us directly to create your Platform and user accounts with us. . For example, if you are an authorized user of an Enterprise Customer you may be asked for information, such as an email address, first and last name, and username and password, to access our Services on behalf of the Enterprise Customer with which you are employed. You may also provide us with other optional information as part of your profile, such as avatars or profile images, other contact information, and links to social network profiles you have (including when used for authentication purposes). An End Customer may also input their own personal information to the Platform, such as when an End Customer provides business ownership information to use the Platform. 
      4. Data in contracts and other legal agreements. We may also collect information directly from you for contractual or legal reasons. For example, we may ask you to select your jurisdiction when you use the Services. 
      5. Information to verify your identity. At our request, you may give us information to verify your identity, which may include your name, date of birth, social security number, social insurance number, driver’s license number, passport number, government-issued identification details, and similar information to verify your identity. 
      6. Communications. You may give us personal information you include in your communications with us, such as information you include in SMS (text) messages, form submissions on the Website, communication means in the Services, and other electronic messages between you and us (collectively, "Electronic Messages"), or by phone or mail.
      7. Marketing preferences, surveys, contests, or promotions. If you select preferences for marketing communications, participate in surveys or contests, or take part in our promotions, we may ask you for and you may choose to provide us with your personal information. 
      8. Social and community content. When you post on our social media pages and the public areas of our Website (e.g., if you post a comment on an article we feature on the Website), you may be giving us personal information that you include in your content.
      9. Device and contact data. If you grant permission in your device settings, certain features of our Services may have access to your device and contacts information to provide the functionality intended by our Platform.

    2. Information about you that we get from other sources.

      We may receive personal information about you from other parties where you have provided consent or where we are permitted by applicable law to receive the information. We protect and process the personal information we receive from third parties as described in this Privacy Policy, consistent with any additional restrictions imposed by the source of the information. Our third-party sources may vary over time and depend upon how you use the Services. For example, we receive information from:
      1. Users of our Services. Customers may input personal information about an individual to our Services. As examples:
        • An Enterprise Customer account administrator may include personal information about its authorized users, such as names and email addresses, to allow those users to access and use the Services with its account. 
        • Since our Platform is embedded in an Enterprise Customer’s services, the Enterprise Customer may provide us with information about an End Customer so that we may provide the Platform to the End Customer as intended and requested by the End Customer. 
        • An End Customer using the Platform may provide contact information, financial details, and other personal information about their own customers to us when using the functionality of the Platform, such as when bookkeeping data about a transaction between the End Customer and its own customer is entered into the Platform. This personal information is used by us in the ways intended by our Services; it is not used for other purposes without consent of the individual or an appropriate exception under applicable laws. 
      2. Supplemental information and identity verification providers. We also collect personal information about you from third parties that assist us with verifying your identity. For example, since our Platform is embedded within the services of an Enterprise Customer, when you sign into your account with an Enterprise Customer we may receive necessary information about you to authenticate you as an End Customer that should have access to your data stored within the Platform. Our Services may also use single sign-on integrations through other platforms and providers (e.g., signing in through a social media account), which includes information sharing between us and the single sign-on provider. 
      3. Service providers. We use a variety of third-party service providers to help us deliver our Services and these service providers may give us information about you. For example, we may get information from our marketing service providers to support our marketing initiatives, improve our Services, and better monitor, manage, and measure our ad campaigns, such as details about when our service provider shows you one of our ads on or through its advertising platform. We may hire research firms that help us understand our market and if allowed under applicable laws, these researchers may provide us with personal information. We may receive personal information about you or your interaction with the Services from certain third parties we use to support our troubleshooting activities, for example when we obtain information through customer support interactions, such as technical issues that have been submitted to us, call center recordings, call monitoring records, voicemails, photographs, file uploads, and chat records. We also sometimes use third-party integrations with our Platform or our Website, and the third-party providing the integration may collect personal information about you and provide it to us so that we may deliver our or make our Website available to you.
      4. Business partners. We may also collect information about you from our business partners that assist us with providing our Services, developing our business, and understanding our market. For example, if we partner with another company to collaborate on a new feature of our Platform, we may receive personal information about you from that other company. 
      5. Linked third-party services. If you choose to integrate a third-party service we make available to you, we may receive information from that third-party service according to your settings with that third-party. 
      6. Risk management, cybersecurity & anti-fraud providers. We may receive personal information from third parties that help us assess risks associated with our offerings, including to help combat fraud and illegal activity and to help protect your personal information.
      7. Joint offering partners. We may offer co-branded services or experiences or engage in joint-marketing activities with others, including through webinars, conferences, or live events.
      8. Government agencies. We may receive information from government agencies, including from various tax agencies, to help verify your business information or to facilitate your use of our Services. 
      9. Public information. We may collect individual and household demographic information and preference information from publicly available sources, such as open government databases, social media platforms, and others.

    3. Automatic data collection.

      We, our service providers, and our business partners may automatically collect personal information about you, such as:
      1. Information from your use of the Website and Services. We collect personal information about you when you use our Website and Services. This includes information like your Internet protocol (IP) address, your geographic location, the website you visited before coming to our Website, your browser type and settings, log data, your device information (for example, if you're using a tablet, mobile phone, or desktop computer and the operating system), the date and time when you visited the Website, information about your browser configuration and plug-ins, your language preferences, and other unique identifiers.
      2. Usage information. We may collect information about your use of our Services, such as the pages you viewed on our Website, the services and features you used or interacted with on our Website or in our Platform, your browser or device type, and details about any links or communications with which you interacted. 
      3. Communication interaction data. We or our third-party service providers may collect information from email providers, chat applications, communication providers, and social networks, such as your interactions with our email, text, or other communications (e.g., whether you open or forward emails). We may do this through use of pixel tags (also known as clear GIFs), which may be embedded invisibly in our emails.
      4. Online behavioral data. We may automatically collect certain personal information about your use and interactions with our Website, social media websites, and marketing campaigns that we or our customers organize, including device information (such as your IP address and unique device IDs), page view information and search results, links, and if you are a customer contact, whether or not a campaign presented or sent to you using our offerings has been viewed, delivered, opened, clicked on, whether it has bounced, or was treated as spam.
      5. Information from cookies and other tracking technologies. We collect information about you through cookies and similar tracking technologies to provide and support our Website and the Services. 

    4. Sensitive personal information.

      We generally prohibit sensitive personal information from being used with our Services, such as untruncated financial account identifiers (e.g., credit card numbers or bank account numbers), untruncated government issued identifiers (e.g., social insurance numbers), health records or any information pertaining to an individual’s health, or other types of sensitive or special category data that is subject to specific or elevated data protection requirements under applicable laws, where the use of such data is not intended by the functionality of the Platform. If, however, we collect sensitive personal information from or about you, it will be identified at the time we request it. Please note we cannot monitor all data input into our Platform, Website, or other Services by Customers or third parties, including sensitive personal information, and to the maximum extent allowed by law, we will not be liable for how such sensitive personal information is collected, used, or shared where it is not within our commercially reasonable control to prevent the collection, use, or sharing. 

  2. How do we use your information?

    1. To make our Website and Services available to you. We use your personal information to provide our Website and Services to you and to respond to your requests. 
    2. To connect you with others. We may use your personal information in connection with our Services to connect you with other people and businesses in the way intended by our Platform. For example, if you are an End Customer, we may use your personal information to connect you with the services of the Enterprise Customer applicable to you so that through their services, you can make use of the accounting and bookkeeping functionalities of our Platform. 
    3. To fulfill the purposes for which you provided the information to us. We use your personal information when you give it to us for a specific purpose or for reasons that were described when it was collected, such as providing Services to you, or any other purpose for which you provide it, including for any other reason described in this Privacy Policy.  
    4. To determine your eligibility. We may use your personal information to evaluate your eligibility for marketing offers, products, and services. 
    5. To communicate with you. We use your personal information to communicate with you, including to send you Electronic Messages and other communications about the Services and your relationship with us. 
    6. To verify your identity. We also may use your personal information to verify your identity. If we are interacting with you in person, such as when you attend our offices, events, or the location of others that are providing a venue on our behalf, we may use your personal information for security purposes, such as creating a visitor or attendee log. 
    7. To market and promote our business to you. We use your personal information to market our Website, Services, and business to you, including through surveys and promotions. We may use your information to send you tailored marketing communications about products, services, offers, programs, and promotions of ours and those of our partners and measure the success of those campaigns. For example, we may send different marketing communications to you depending on what we think may interest you based on other information we hold about you. We use your personal information to analyze your interactions with our Website and Services and third parties' services so we can tailor our advertising to what we think will interest you. For example, we may decide not to advertise our Services to you on a social media site if you already follow us, and we may choose to serve you a particular advertisement based on your service choices with us.
    8. To customize your experience. We use your personal information to provide you with customized services. For example, we use your location information to determine your language preferences or display accurate date and time information. We also use cookies and similar technologies for this purpose, such as remembering your preferences.
    9. To create inferences and for profiling. We use personal information we collect from you and the other sources identified in our Privacy Policy to create a profile about you to reflect your preferences, characteristics, behavior, and other similar characteristics to better understand you and how our Website and Services may be relevant to you. Some jurisdictions give individuals a right to have profiling activities restricted. Please contact our Privacy Officer with any requests or information about our use of your personal information for profiling. 
    10. To improve our Website, Services, and customer experience, and for general research and development. We use your personal information to analyze and learn about how you access and use the Website and Services, to evaluate and improve our Website and Services (including by developing new products and services and managing our communications), and to monitor and measure the effectiveness of our advertising. We usually do this based on anonymous, pseudonymized, or aggregated information which does not focus on you individually. For example, if we learn that most people using our Services in a location or for a particular purpose tend to use a specific integration or feature, we might wish to expand on that integration or feature.
    11. To de-identify or anonymize your personal information and to aggregate it with other data. We combine and anonymize information about your interactions with us to create de-identified personal information, anonymized data, and aggregated data for research and development, marketing, promoting, improving, and developing our Services. Personal information does not include information that has been anonymized in such a way that it can no longer be used to identify a specific natural person, whether on its own or in combination with other information. We may use your personal information to create this kind of anonymized or aggregated data.
    12. To make our Website and Services secure. We use your personal information to keep our Website and our Services secure, such as when we use your personal information to verify your access credentials.
    13. To enforce our rights and to meet our obligations. We use your personal information to carry out our obligations and enforce our rights under contracts and our terms of service, for billing matters, or to comply with legal requirements. We may also use your personal information to protect our and others' interests, rights, and property where we have a legitimate interest in doing so.
    14. To comply with the law. We use your personal information to comply with applicable legal requirements, such as tax and other government regulations, contracts, and law enforcement requests. 
    15. Notices about our relationship with you. We will also use your personal information to give you notices about your relationship with us.
    16. Whistleblower reporting. When you report any concern of non-compliance, unethical conduct, or other alleged violation of our policies or terms of service, personal information you provide will be processed as a part of the investigation of the allegations and retained in accordance with our internal policies until the investigation is complete. While we make every effort to maintain confidentiality, depending on the investigation, disclosing your identity to other individuals may be necessary.

  3. When do we use your information?

    1. Consent. We use your personal information when you have consented to the use of it in a particular way. When you consent, you can change your mind at any time and if you withdraw your consent, unless there is a clear exception under applicable law, we will cease using your personal information.We'll normally let you know when personal information is required, and the consequences of failing to provide it or withdrawing your consent. If you do not provide personal information when requested, you may not be able to use our Services if that information is necessary to provide you with the Service or if we are legally required to collect it.
    2. Implied Consent. In some limited circumstances and only when the information is not sensitive, we will use your personal information when your consent to its use is implied. For example, if we tell you that we will be collecting your personal information and using it for a certain purpose and you do not refuse your consent within a reasonable period of time, we may imply your consent. This may happen, for example, if you call us and we advise you that we will be recording the conversation and you do not object or end the call.
    3. Exceptions to Consent. In some circumstances, such as to respond to an emergency that threatens your security or to prevent fraud, we may use or disclose your personal information without your consent to the extent allowed by privacy laws. 

  4. How do we share your personal information?

    In addition to other scenarios we have discussed in this Privacy Policy, we may share your personal information in the following ways:
    1. For certain product features. We may share your personal information in the ways intended by the functionality of our Services. For example, an End Customer may collect your personal information to use it with the Platform, and your information may then be directly or indirectly shared with an Enterprise Customer to facilitate how the End Customer delivers services to you or for use in the End Customer’s business. We may use third party integration services, often through an API, to enable you to use certain product features made available by third parties. When you use these third-party integrations, you consent to us sharing your personal information with the owner or operator of the third-party integration. You also acknowledge that you may be bound by the third party’s privacy policy. You may manage your data by visiting the third party’s security settings page or by contacting the third party. We also encourage you to review End Customer’s privacy policies when you engage them to provide products or services to you.
    2. Affiliates and subsidiaries. We may share personal information with our affiliates and subsidiaries when it is reasonably necessary or desirable, such as to help provide services to you or analyze and improve the services we or they provide, or for other purposes that we identify at the time we collect the personal information from you.
    3. Business partners. We may share personal information with our business partners. For example, we may share your personal information when our Website, Services, or other assets are integrated with the services of other parties, but only when you have been informed or would otherwise expect such sharing. 
    4. Service providers. We share personal information with our service providers that perform services on our behalf. For example, we may use third parties to help us provide customer support, manage our advertisements on other sites, and to send marketing and other communications on our behalf. We also use third parties to assist us to complete purchase and order requests, to provide us with managed cloud hosting and web services, and process credit card payments. We use a variety of technological solutions provided by third parties, which include, for example, customer relationship management (CRM) systems and technology to provide the necessary software, networking, infrastructure, and other services that we use to operate the Website and Services. We only share your personal information when you have been informed or would otherwise expect such sharing or as disclosed at the time the information is collected.
    5. Following the law or protecting rights and interests. We disclose your personal information if we determine that such disclosure is reasonably necessary to comply with the law, protect our or others' rights, property, or interests, or to prevent fraud or abuse. We may disclose your personal information in response to lawful requests by public authorities, such as to meet national security or law enforcement requirements. The laws regarding how this personal information may be used will vary by jurisdiction. 
    6. Our own advertising. We share personal information with third parties so we can provide you with tailored advertising for our business and measure and monitor its effectiveness. For example, we may share your actual or pseudonymized email address with a third-party social media platform on which we advertise to avoid serving ads to people who already use our Services.
    7. Business transfers. If we're involved in a reorganization, merger, acquisition, or sale of some or all our assets, your personal information may be transferred as part of that deal or the negotiation of contemplated deals.
    8. To provide insights, metrics, and benchmarking data. We share personal information to provide insights, metrics, and information that other organizations, people, and companies may find useful as follows: to help promote or sell its own products or services; to provide market insights and economic data; or for other purposes we disclose to you at the time we collect the information. We only provide anonymized or anonymous aggregate data for such purposes unless we have your permission in advance or as otherwise disclosed at the time the information is collected.
    9. For legal reasons. We may share your personal information with third parties for legal reasons without your consent, and as permitted by law, including: when we reasonably believe disclosure is required to comply with a subpoena, court order, or other applicable law, regulation or legal process; to protect our, our customers’, and others’ rights, property, or safety; to enforce, remedy, or apply our terms of service or other agreements; to detect or prevent fraud, cybersecurity attacks, or illegal activity; for debt collection; and with regulatory agencies, including government tax agencies, as necessary to help detect and combat fraud, or protect our customers, users, or as required for risk control programs.

  5. Automated decision-making and your personal information.

    We may use machine learning algorithms and forms of automated decision-making. For example, to personalize your experience and make it more efficient, and to determine eligibility for certain services or features we offer on our Website and through our Services. We may also use such technologies to provide and improve the Website and Services and how we deliver them to you. Some jurisdictions give individuals a right to have these automated decisions reviewed by a person or otherwise limited. Please contact our Privacy Officer with any requests or information about our use of automated decision-making technologies with your personal information.

  6. Your rights and choices.

    1. Rights to access, update, change, or delete personal information. Where applicable law requires (and subject to any relevant exceptions under law), you may have the right to access, update, change, or delete your personal information. You can access, update, delete, or change your personal information directly in your account with us (if we provide that functionality on the Website or in the Platform) or by contacting us at compliance@teal.dev to request the required changes. You can exercise your other rights (including deleting your account with us) by contacting us at the same email address. Please note that we may need to verify your identity in connection with your requests, and such a verification process may require you to provide us with additional information (e.g., government identification). If we are unable to verify your identity or request, we may not, in accordance with applicable law, be able to fulfill your request. Please note that, for technical reasons, there is likely to be a delay in deleting your personal information from our systems when you ask us to delete it. When we delete your personal information, it will no longer be retrievable. Please ensure you have exported or otherwise saved your personal information before you ask us to delete it.
    2. Withdrawal of consent. If we rely on consent for the collection, use, or disclosure of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the collection, use, or disclosure of your personal information before your withdrawal of consent. If you wish to withdraw consent, please contact our Privacy Officer, or follow any instructions on opting-out of collection and use of your personal information we provide in the Platform or our Website. Please note that if you withdraw consent, certain features of the Service may not have full functionality because certain features rely on your personal information to work as intended.
    3. Data processing and portability. Some jurisdictions’ laws may give you the right to restrict or object to the processing of your personal information or to exercise a right to data portability (e.g., to transfer your data to another processor). If such rights apply to you, you may exercise them by contacting our Privacy Officer or following any instructions we provide on the Website or in the Platform. 
    4. Commercial electronic messages. Like many other companies, we may ask you to sign up to receive emails and other Electronic Messages from us. If you no longer wish to receive those messages, you can opt-out by following the unsubscribe link in the messages or by contacting us.
    5. Complaints. You may have the right to lodge a complaint with a competent supervisory authority, subject to applicable law.

  7. Please use caution when posting on the public areas or features of our Website and Services.

    You may be able to post or make public communications on certain areas of our Website or Services, such as comments and questions fields, discussion forums, in-Platform communication functions, and other public discussion mechanisms. These kinds of communications are made at your own risk. Although we may monitor or even control these types of public posts, we are under no obligation to do so. We also cannot control the actions of other users of the Website or Services, including how they will use your public posts and any personal information you include in them. We cannot and do not guarantee that unauthorized persons will not view your public posts or respect your privacy.

  8. Where we may store and process your information.

    We are based in British Columbia, Canada, but we may process, store, and transfer personal information in Canada or elsewhere. For example, we could use third-party service providers, such as managed hosting providers, credit card processors, customer relationship management (CRM) systems, and technology partners to provide the necessary software, networking, infrastructure, and other services that we use to operate the Website and Services. These third-party providers may process or store personal information on servers outside of Canada.Locations other than Canada may have different privacy laws, which may be more or less protective. If we move personal information to a location other than Canada, the governments, courts, law enforcement, or regulatory agencies of that country may have access to your personal information through their laws. In addition to Canada and any of the provinces within Canada, your personal information may be collected, used, disclosed, or stored for any purpose stated in this Privacy Policy in the United States

  9. How do we keep your personal information secure?

    We follow industry standards on information security management to safeguard sensitive information, such as financial information, intellectual property, and any other personal information entrusted to us. Our information security systems apply to people, processes, and information technology systems on a risk management basis. No method of transmission over the Internet, or method of electronic storage, is completely secure. Therefore, we cannot guarantee the absolute security of your personal information. 

  10. How long do we keep your personal information?

    In general, we keep your personal information throughout your relationship with us. Once you terminate your relationship with us, we will continue to store archived copies of your personal information for legitimate business purposes in accordance with applicable laws, like defending or enforcing a contractual claim, for audit purposes, to resolve disputes, and to comply with the law. We will continue to store anonymous or anonymized information, such as website visits, statistical and usage data, or benchmarking data, without identifiers, to improve our Website and Services. There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.

  11. Children and privacy.

    Our Website and its features and the Services are not meant for children under 13 years of age. If you are under 13 years old, please do not give us your personal information. If you are the parent or guardian of someone under 13 years of age, please do not give us personal information of that person.

  12. How to contact us about privacy questions.

    If you have a question or a concern about our Privacy Policy or your personal information, please get in touch with us. Our Privacy Officer can be reached at compliance@teal.dev.

  13. Changes to our Privacy Policy.

    We may update this Privacy Policy from time to time to reflect, for example, changes to our privacy practices or for other operational, legal, or regulatory reasons. If we make material changes to this Privacy Policy, we will give you notice of such changes by posting the revised policy on our Website, and where appropriate, by other means. By continuing to use the Website or the Services after these changes are posted, you agree to the revised policy.

Developers

Company