Privacy Statement – California and Applicable State Law

1. Information Apollo Collects

a. Categories of Personal Information Apollo Collects

In the last twelve (12) months, we may have collected the following categories of personal information:

• Identifiers, such as: name, email address, job title and department, phone numbers (general or direct business numbers, faxes, and/or mobile numbers), and social networking URLs.
• Personal Information Categories Listed in the California Customer Records Statute, such as name, telephone numbers (general or direct business numbers, faxes, and/or mobile numbers), employment status, and employment history.
• Internet or Other Similar Network Activity, such as Internet Protocol address, online identifiers and information on a consumer’s interaction with a website, application, or advertisement.
• Professional or Employment-Related Information, such as email address, telephone numbers (general or direct business numbers, faxes, and/or mobile numbers), current or past job history, and title.
• Inferences, which may be drawn from the information identified above to make predictions about your preferences and interests.
• Geolocation Data, such as information about your physical location collected from geolocation features on your device, including your IP address.
• Commercial Information, such as products or services purchased.
• Sensitive Personal Information, such as, account log-in and password, financial data, or other credentials allowing access to your account.

b. Categories of Sources from which this Personal Information was Collected

Apollo collects personal information from the following categories of sources:

• Information obtained from public sources
• Direct research
• Contributions from Apollo’s customers or users of our freemium products
• Data provided by third-party vendors
• Direct and indirect interactions on Apollo’s website
• Direct and indirect engagements with our customers or their agents
• Direct acquisitions from vendors and contractual partners
• Communications with potential customers and other business contacts

c. Purpose for Collection of this Personal Information

Apollo collects, discloses, shares, and sells personal information for the following business and commercial purposes:

• To fulfill or meet the purpose for which the information is provided.
• To provide the consumer with information, products or services that the consumer requests from Apollo.
• To provide the consumer with email alerts, event registrations and other notices concerning Apollo products or services, or events or news, that may be of interest to the consumer.
• To carry out Apollo’s obligations and enforce Apollo’s rights arising from any contracts entered into between Apollo and an Apollo customer or other contractual counterparty, including for billing and collections.
• To improve Apollo’s website and present its contents to the consumer.
• For testing, research, analysis and product development.
• As necessary or appropriate to protect the rights, property or safety of Apollo, our customers or others.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to the consumer when collecting such consumer’s personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Apollo’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Apollo is among the assets transferred.
• To modify, enhance, or improve Apollo’s services and/or provision such services to Apollo customers.
• To include in Apollo’s database of business contacts, which Apollo licenses to its customers for such customers to use for business-to-business sales and marketing and recruiting.

d. Categories of Third Party Recipients

Apollo may disclose personal information to the following third-party recipients for the business and commercial purposes identified above:

• Apollo affiliates
• Service providers
• Apollo users
• Apollo customers

e. Sale, Sharing, and Disclosure of Personal Information

In the preceding twelve (12) months, we have sold or shared the following categories of personal information for a business purpose:

For avoidance of doubt, the personal information disclosed and/or sold by Apollo within the identified categories is limited to information related to a consumer’s profile as an employee of its employer. No sensitive personal information (e.g., sexual orientation, race, ethnicity, religious or health-related information) is collected, shared, disclosed, or sold by Apollo for purposes of providing its services.

We do not sell the personal information of minors under 16 years of age.

2. Your Rights and Choices Under Certain Statutes

The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes a consumer’s CCPA rights and explains how to exercise those rights. Those laws also apply (in slightly different form) to residents of other applicable State Privacy Lawss, which may include, in addition to California, Colorado, Connecticut, Virginia and Utah.

a. Disclosure or Sale of Personal Information and the Right to Opt-Out

We sell personal information collected for our database to our customers. This database may contain information about consumers’ business personas including name, employer, job title, email address, phone number, social media or professional profile link, and work or educational history. This information is sold to Apollo’s customers for the purpose of business-to-business sales and marketing and recruiting and is provided subject to license agreements that limit its use to those purposes.

A consumer has the right to opt out of the sale of that consumer’s personal information by Apollo by visiting our Removal Page and submitting a request to remove the consumer’s profile. or delete the consumer’s data. You may also visit our Privacy Center here. In order to submit a request, a consumer (to the extent permissible under applicable State Privacy Law) may be required to demonstrate that such person has control of an email inbox associated with the profile in question.

To the extent required under applicable State Privacy Law, consumers may also opt out of the collection of personal information through cookies on the Site, and the sharing of such personal information with third party ad partners, by adjusting the preferences in the Cookie Settings provided on the Site.

b. Access to Specific Information and Data Portability Rights

A consumer has the right to request that we disclose certain information to that consumer about Apollo’s collection and use of that consumer’s personal information over the past 12 months. Once we receive and confirm a consumer’s verifiable consumer request, we will disclose:

• The categories of personal information we collected about that consumer.
• The categories of sources for the personal information we collected about that consumer.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about that consumer.

c. Deletion Request Rights

A consumer has the right to request that Apollo delete any of its personal information that we have collected and retained, subject to certain exceptions. Once we receive and confirm a consumer’s verifiable consumer request, we will delete that consumer’s personal information from our records, direct our service providers to delete such personal information, and notify our customers of the deletion request, unless an exception applies.

We may deny a consumer’s deletion request if retaining the information is necessary for us or our service providers or customers to comply with important purposes, such as legal, auditing, accounting and security, and in particular if the data is necessary to:

• Complete the transaction for which we collected the personal information, provide a good or service that a consumer requested, take actions reasonably anticipated within the context of our ongoing business relationship with that consumer, or otherwise perform our contract with that consumer.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if a consumer previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on a consumer’s relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which a consumer provided it.

d. Exercising Access, Data Portability, and Deletion/Removal Rights

To exercise the access, data portability, and deletion/removal rights described above, please submit a verifiable consumer request to us by either:

• Emailing us at privacy@apollo.io
• Visiting www.apollo.io/privacy-policy/remove/

A consumer may only make a verifiable consumer request for access (or data portability) twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows Apollo to reasonably verify a consumer is the person about whom we collected personal information or an authorized representative.
• Describe a consumer’s request with sufficient detail that allows Apollo to properly understand, evaluate, and respond to it.

We cannot respond to a consumer’s request or provide a consumer with personal information if we cannot verify the consumer’s identity or authority to make the request and confirm the personal information relates to that consumer. Making a verifiable consumer request does not require a consumer to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

e. Authorized Agents

Under the CCPA and other applicable State Privacy Laws, consumers have the right to designate an authorized agent to act on their behalf for the purposes of making requests related to their personal information. To do this, the consumer must provide the authorized agent with written permission to act on their behalf.

Authorized agents must submit proof of their authorization when making a request. This proof can include a power of attorney, or a letter signed by the consumer granting the agent permission to act on their behalf. Apollo may also require the consumer to verify their own identity directly with us to confirm the authorization, except in cases where the agent has been provided a power of attorney pursuant to California Probate Code sections 4121 to 4130.

When an authorized agent submits a request to know, delete, or opt-out on behalf of a consumer, they must provide:

• Sufficient information that allows Apollo to reasonably verify that the agent has the authority to make the request.
• Sufficient information to identify and verify the identity of the individual the authorized agent represents, ensuring that we can accurately locate the consumer’s information in our systems.
• Documentation establishing their appointment as an authorized agent, which may include written consent from the consumer or a legal power of attorney.

Apollo reserves the right to verify the authenticity of the request and the authority of the agent. This may involve asking the consumer to confirm the agent's authority or requesting additional documentation from the agent.

Apollo will not discriminate against any consumer who chooses to exercise their rights through an authorized agent in accordance with CCPA guidelines.

f. Response Timing and Format

We endeavor to respond to a verifiable consumer request within statutorily-designated time frames, if we require more time (up to 90 days), we will inform the consumer of the reason and extension period in writing. We will deliver our written response by mail or electronically. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide a consumer’s personal information that is readily useable and should allow a consumer to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to a consumer’s verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell the consumer why we made that decision and provide the consumer with a cost estimate before completing that consumer’s request.

g. Non-Discrimination

We will not discriminate against a consumer for exercising any CCPA or other applicable State Privacy Law rights.

h. Changes to Our Privacy Statement

We reserve the right to amend this Privacy Statement at our discretion and at any time. When we make changes to this Privacy Statement, we will provide notification by email or through a notice on the page where this policy lives and is updated.

3. Consumer Rights Requests Metrics

These metrics are provided in compliance with the CCPA and California Data Broker Law.

As mandated by the CCPA and California Data Broker Law, we are committed to updating these metrics annually. The updates will be completed by July 1st of each current year to ensure compliance and transparency with these regulatory requirements.

During the previous calendar year, Apollo received the following number of requests from residents of California:

Please note Apollo handles both deletion requests and opt-out requests in the same manner. Therefore, whether an individual submits an opt-out or a deletion request, we promptly remove their profile from our database to ensure their preferences are respected and upheld.

Our reported figures on deletion and opt-out requests encompass all submissions, including those from individuals whose data may not currently be present in our database. In such cases, we proactively implement a suppression process to ensure that these individuals' information is not inadvertently collected or stored in the future.

* We have included a category titled "Requests to Opt Out/Delete (Location Unknown)" to account for instances where we received opt-out requests but were unable to determine the geographic location of the requestor.

4. When We Act as a Service Provider

Often, Apollo receives information from its customers for purposes of providing services. This information may or may not overlap with the information used in Apollo’s services. In either case Apollo often processes data received from its customers in order to provide services to those customers. In turn, if you would like to know what information those customers process or possess about you, you would need to contact that specific customer to make that inquiry.