Privacy Statement

Effective as of April 8, 2025

HR Cloud, Inc. (“HRCloud.com,” “We”, “Us”, “Our” or “the Company”) is committed to privacy protection for HRCloud.com website visitors and registrants for the Company’s events (attendees) and services (customers). This privacy statement applies to www.HRCloud.com,HR Cloud app (iOS and Android), API’s, workflows, and Workmates. HRCloud.com is owned and operated by HRCloud.com. This policy also describes the choices available to you regarding our use of your personal information and how you can access and update this information. The use of information collected through our service shall be limited to the purpose of providing the service for which the Client (Employer) has engaged.

California Consumer Privacy Act (CCPA)

If you are a resident of the state of California, under the California Consumer Privacy Act (California Civil Code §1798.100 et. Seq. (as amended from time to time, the “CCPA”)), you have the following rights:

  • The right to know or request that a business disclose what Personal Information of yours that it collects, uses, discloses and sells.
  • The right to request that a business delete Visitor Personal Information collected or maintained by the business.
  • The right to opt-out of the sale or transfer of Visitor Personal Information for consideration by a business (aka “Do Not Sell My Information”).
  • The right not to receive discriminatory or differentiated treatment by a business because you exercised a right conferred by the CCPA.

To submit a right to know, delete or opt-out (aka Do Not Sell My Information) request regarding Visitor Personal Information, click here. You may only make a verifiable customer request for access twice within a 12-month period. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

If you submit a right to know or deletion request, HR Cloud will attempt to verify your identity with a reasonably high degree of certainty. HR Cloud will require you to sign a declaration attesting to your identity. Please see below for information on how to submit an authorized request on another’s behalf. If HR Cloud cannot verify your identity it will, in accordance with its obligations under the CCPA, decline to comply with your request.

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (for a maximum total of 90 days), we will inform you of the reason and extension period in writing. We do not charge a fee to process or respond to your verifiable consumer request unless the request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. Alternatively, we may decline to respond to the request and notify you of our reason for doing so.


Collection of Personal Information under the CCPA

Depending on how a Visitor used our website or signed up for content sponsored by HR Cloud and/or one of its partners or co-sponsors, the following personal information is collected by HR Cloud:

Category Source Business Purpose Categories of Third Parties Shared With
Name
Email
Phone Number
Title
Company
Country		 Form submissions by Visitor/Lead Providers

Partners and/or Event or Content Co-Sponsors		 Provide the Service and/or Marketing Partners and/or Event or Content Co-Sponsors

Service Providers who help us provide the Services
Cookie Related Information* Visitor's use of website Website analytics/Marketing Service Providers/third party ad networks
Disclosure or Sale of Personal Information

If a Visitor signed up for content or an event that is offered by HR Cloud and a HR Cloud partner or co-sponsor, HR Cloud will disclose (i.e. transfer under the CCPA’s definition of a sale) the Visitor’s Personal Information to the partner or co-sponsor. This includes: name, email, phone number, title, company and country. Additionally, a Visitor’s cookie related information may be disclosed to our third-party ad networks. HR Cloud does not process, sell or disclose Personal Information of minors under 16 years of age.


Authorized Agent

If a Visitor would like to use an authorized agent to exercise its rights under the CCPA, the Visitor may do so by providing either (1) a copy of Visitor’s written permission for the authorized agent to submit a request on Visitor's behalf and information sufficient to verify the authorized agent’s identity or (2) power of attorney pursuant to California’s Probate Code. HR Cloud will verify the identity of the authorized agent and require that the authorized agent sign a declaration under the penalty of perjury attesting to their designation as an authorized agent of the Visitor.


EU – U.S. DPF, UK Extension to the EU-US DPF, and Swiss – U.S. DPF Compliance

HRCloud.com complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

HRCloud.com has certified to the U.S. Department of Commerce that it adheres to the DPF Principles regarding the processing of personal data received from the European Union, the United Kingdom (and Gibraltar), and Switzerland. If there is any conflict between this privacy policy and the DPF Principles, the DPF Principles shall govern. To learn more about the DPF program and to view our certification, please visit https://www.dataprivacyframework.gov/.

Covered Data

Our DPF self-certification covers both:

  • - Human Resources (HR) Data: Personal data collected in the context of the employment relationship.
  • - Non-Human Resources (Non-HR) Data: Data collected from customers, prospects, website visitors, and mobile app users.

Independent Recourse Mechanism

HRCloud.com has committed to cooperate with:
  • - The EU Data Protection Authorities (DPAs) for EU data
  • - The UK Information Commissioner's Office (ICO) for UK data
  • - The Swiss Federal Data Protection and Information Commissioner (FDPIC) for Swiss data

and comply with the advice given by these authorities with respect to unresolved complaints.

Dispute Resolution and Enforcement

HRCloud.com has committed to cooperate with the EU Data Protection Authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with respect to unresolved complaints concerning data received in reliance on the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

HRCloud.com is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

HRCloud.com may be held liable in cases of onward transfers of personal data to third parties that do not comply with the DPF Principles, unless HRCloud.com can prove it is not responsible for the event giving rise to the damage.

Binding Arbitration

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf .

Information Collected

When you visit our Website and make a request for information or register on HRCloud.com’s Web site, the Company will collect the following personal information from you on behalf of your Employer.

  • Contact information such as name, Employer name, phone number, and email address.

When browsing HRCloud.com the Company may also collect information through the use of data-gathering tools, such as cookies and Web beacons. This information includes your web browser, your internet protocol address, any information your browser attaches to the web request, and the navigation actions you take on the Company’s Web sites.

These are detailed later in the privacy policy.

Use of Information

HRCloud.com utilizes the information collected to

  • supply you with the services you request,
  • supply you with additional information about the Company’s promotions, events, partners, and services,
  • make improvements to the Company’s Services and Web sites.

Sharing collected information

HRCloud.com may share personal information that you provide with organizations that work on behalf of HRCloud.com only in the ways that are described in this privacy statement.

Service Providers

HRCloud.com may share collected personal information with contracted service providers your Employer has optionally chosen as integration with the Company’s Services and Web Sites. These service providers are:

HubSpot for ticketing & customer support chat

  • Email

HRCloud.com may share customer information with other companies, including affiliates and business partners. For example, information may be shared if you express interest in a jointly offered product with one of the Company’s business partners.

HRCloud.com does not share data about HRCloud.com event attendees with business partners unless you opt-in to share such information, or you attend a Company event and your badge is scanned by one of HRCloud.com’s business partners.

Should you opt-in or have your badge scanned by a business partner your information will be subject to the privacy statement of the business partner.

• Third Parties

HRCloud.com does not permit third parties to collect personal information through advertising and marketing technologies nor does HRCloud.com share personal information with such companies, unless they are listed in this section. HR Cloud may select additional sub-processors to fulfill these functions, however, this privacy policy will be updated to reflect any new sub-processors.

  • Hubspot for website usage and tracking
  • HotJar for improving Website experience
  • Microsoft Clarity for improving Website experience
  • Google Analytics for improving Website experience
  • Google Tag Manager for managing tags and scripts on the Website

• Compelled Disclosure

HRCloud.com may disclose your personal information as required by law, such as to comply with a subpoena, or similar legal process or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. If HRCloud.com is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Web site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

Transferring information

HRCloud.com stores information about HRCloud.com visitors in the United States.

Changing your information

Upon request HRCloud.com will provide you with information about whether we hold any of your personal information.

Links to 3rd Party Sites

Our Web site includes links to other sites whose privacy practices may differ from those of HRCloud.com. HRCloud.com encourages you to read the privacy statements of other Web sites to gain an understanding of their information practices.

HRCloud.com will ensure 3rd party sites follow our privacy requirements and the privacy requirements of your employer. You may check out the privacy policy of the 3rd party sites listed earlier in this privacy policy.

Tracking Technologies

Technologies such as cookies or similar technologies are used by HRCloud.com and our marketing partners, affiliates, or analytics or service providers. These technologies are used in analyzing trends, administering the Web site, tracking users’ movements around the site, and gathering demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.

We use cookies to remember users’ settings (e.g. language preference) for authentication. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our site, but your ability to use some features or areas of our site may be limited. These tracking cookies are identified earlier in this privacy policy.

• Log Files

As is true of most Web sites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data. We link this automatically-collected data to other information we collect about you. We do this to improve the services we offer you, to improve marketing, analytics, or site functionality.

• IP Addresses

HRCloud.com collects visitors’ Internet Protocol (IP) addresses to gather non-personal information such as the region from which a visitor is located. IP addresses are also collected when users log in to the Company’s services or Web Sites.

• Behavioral Targeting / Re-Targeting

We partner with a third party to either display advertising on our Web site or to manage our advertising on other sites. Our third party partner may use technologies such as cookies to gather information about your activities on this site and other sites in order to provide you advertising based upon your browsing activities and interests.

Do Not Track

Certain browsers offer a do not track or DNT option. Due to a lack of defined industry standards, HRCloud.com does not currently respond to DNT preference settings. HRCloud.com will continue to monitor changes in standards.

Forums and Customer Testimonials

HRCloud.com may provide comment sections and discussion boards. Information submitted in these areas may be viewed by others and may be used to send you unrequested messages. HRCloud.com is not responsible for the information you post in HRCloud.com forums.

HRCloud.com includes customer testimonials and case studies which may include quotes and comments from customers. HRCloud.com acquires consent prior to posting case studies and testimonials. To request the removal of your personal information from our blog or testimonials, contact us at support@HRCloud.com. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.

Security

Security measures are used by HRCloud.com to protect customer data. HRCloud.com uses advanced Internet security measures. The Company’s website is hosted in a secure server environment that uses a next-generation firewall and additional measures to prevent interference from outside sources. When you enter sensitive information (such as login credentials) on our login forms, we encrypt the transmission of that information using secure socket layer technology (https).

We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our Web Site, you can contact us at support@HRCloud.com.

Social Media Widgets

HRCloud.com includes Social Media Features, such as the Facebook Like button and Twitter Follow button or interactive mini-programs that run on HRCloud.com. These Features may collect your IP address, which page you are visiting on HRCloud.com, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on HRCloud.com. Your interactions with these Features are governed by the privacy statement of the company providing it.

Information Related to Data Collected through the HRCloud.com Service

Information Related to Data Collected for our Clients:

  • HRCloud.com collects information under the direction of its Clients (Employers or Data Controllers), and has no direct relationship with the individuals whose personal information it processes. If you are a customer of one of our Clients and would no longer like to be contacted by one of our Clients that use our service, please contact the Client that you interact with directly. We may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the service agreements with our Clients.

Access and Retention of Data Controlled by our Clients:

  • HRCloud.com acknowledges that you have the right to access your personal information. HRCloud.com has no direct relationship with the individuals whose personal information it processes. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct his query to HRCloud.com’s Client (Employer or Data Controller).
  • HRCloud.com will retain personal information we process on behalf of our Clients for as long as needed to provide services to our Client. HRCloud.com will retain this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Your Legal Rights

Right to be informed

  • You have a right to know what information is being collected. This privacy policy details the data items collected and shared.

Right to Access

  • You have a right to access our system and see all data related to you. You may log in to see this information or contact your employer for access.

Right to Rectification

  • You have a right to rectify any incorrect data. Please contact your employer for rectification.

Right to be Forgotten

  • You have a right to request we delete your information. Please contact your employer to initiate this request.

Right to Restrict Processing

  • You have the right to request a restriction or suppression of your personal data. Please contact your employer to initiate this request.

Right to Withdraw Consent

  • You have the right to opt-out. Please contact your employer to initiate this request.

Right to Data Portability

  • You have the right to obtain a copy of your personal data. Please contact your employer to initiate this request.

Right to Object

  • You have the right to object to the processing of your personal data in certain circumstances. Please contact your employer to initiate this request.

You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: https://edpb.europa.eu/about-edpb/board/members_en.

Privacy Statement Changes

HRCloud.com reserves the right to change this Privacy Statement to reflect changes to our information practices. If changes are made to the Privacy Statement, HRCloud.com will post a notification on the Company website. If we make any material changes you will need to provide consent again.

How to Contact Us

Questions about this Privacy Statement or the information practices of HRCloud.com should be directed to the Company by email at support@HRCloud.com or by mailing HRCloud Inc, 222 North Pacific Coast Highway, Suite 2000| El Segundo, CA 90245.

Data Protection Officer Contact Info

Name: Krishna Surendra
Email: security@HRCloud.com