Cookie Policy of AlignApp

localStorage (this Website)

localStorage allows this Website to store and access data right in the User’s browser
with no expiration date.

Personal Data processed: Tracker.

Preference Cookies (this Website)

Preference Cookies store the User preferences detected on this Website in the local
domain such as, for example, their timezone and region.

Personal Data processed: Tracker.

sessionStorage (this Website)

sessionStorage allows this Website to store and access data right in the User’s browser.
Data in sessionStorage is deleted automatically when the session ends (in other words,
when the browser tab is closed).

Personal Data processed: Tracker.

This type of service allows this Website to collect and store Users’ preferences related to the collection, use, and
processing of their personal information, as requested by the applicable privacy legislation.

iubenda Consent Solution (iubenda srl)

The iubenda Consent Solution allows to store and retrieve records of Users’ consent to the processing of Personal Data,
and information and preferences expressed in relation to the provided consent.
In order to do so, it makes use of a Tracker that temporarily stores pending information on the User’s device until it
is processed by the API. The Tracker (a browser feature called localStorage) is at that point deleted.

Personal Data processed: Data communicated while using the service and Tracker.

Place of processing: Italy – Privacy Policy.

Storage duration:

• ConS JS library localStorage (IUB_DATA): indefinite

iubenda Cookie Solution (iubenda srl)

The iubenda Cookie Solution allows the Owner to collect and store Users’ preferences related to the processing of
personal information, and in particular to the use of Cookies and other Trackers on this Website.

Personal Data processed: Tracker.

Place of processing: Italy – Privacy Policy.

Storage duration:

• _iub_cs-*: 1 year
• usprivacy: 1 year

Unless otherwise specified, this Website processes any payments by credit card, bank transfer or other means via
external payment service providers. In general and unless where otherwise stated, Users are requested to provide their
payment details and personal information directly to such payment service providers. This Website isn’t involved in the
collection and processing of such information: instead, it will only receive a notification by the relevant payment
service provider as to whether payment has been successfully completed.

Stripe (Stripe Inc)

Stripe is a payment service provided by Stripe Inc.

Personal Data processed: Tracker and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.

Storage duration:

• __stripe_mid: 1 year
• __stripe_sid: 30 minutes
• m: 2 years
• pay_sid: 1 year

PayPal (PayPal Inc.)

PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.

Personal Data processed: Tracker and various types of Data as specified in the privacy policy of the service.

Place of processing: See the PayPal privacy policy – Privacy Policy.

Storage duration:

• __paypal_storage__: indefinite
• akavpau_ppsd: duration of the session
• enforce_policy: duration of the session
• l7_az: duration of the session
• nsid: duration of the session
• ts: duration of the session
• tsrce: duration of the session
• x-cdn: duration of the session
• x-pp-s: duration of the session

This type of service helps the Owner to manage the tags or scripts needed on this Website in a centralized fashion.
This results in the Users’ Data flowing through these services, potentially resulting in the retention of this Data.

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

This type of service allows this Website to distribute their content using servers located across different countries
and to optimize their performance.

Which Personal Data are processed depends on the characteristics and the way these services are implemented. Their
function is to filter communications between this Website and the User’s browser.

Considering the widespread distribution of this system, it is difficult to determine the locations to which the contents
that may contain Personal Information of the User are transferred.

Cloudflare (Cloudflare Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all the traffic through this Website, i.e., communication between
this Website and the User’s browser, while also allowing analytical data from this Website to be collected.

Personal Data processed: Tracker and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.

This type of service helps the Owner to manage tasks, collaboration and, in general, activities related to productivity.
In using this type of service, Data of Users will be processed and may be retained, depending on the purpose of the
activity in question.
These services may be integrated with a wide range of third-party services disclosed within this privacy policy to
enable the Owner to import or export Data needed for the relative activity.

Asana (Asana, Inc.)

Asana is a project management service provided by Asana, Inc.

Personal Data processed: Data communicated while using the service and Tracker.

Place of processing: United States – Privacy Policy.

Confluence (Atlassian Pty Ltd)

Confluence is an online text-editing and collaboration service provided by Atlassian Pty Ltd.

Personal Data processed: Data communicated while using the service and Tracker.

Place of processing: Australia – Privacy Policy.

Gmail (Google LLC)

Gmail is a service that manages email communication provided by Google LLC. Such email communication is not scanned by
Google for advertising purposes. In addition, Google does not collect or use data inside this service for advertising
purposes in any other way.

Personal Data processed: Data communicated while using the service and Tracker.

Place of processing: United States – Privacy Policy.

Google Sheets (Google LLC)

Google Sheets is an online spreadsheet and collaboration service provided by Google LLC.

Personal Data processed: Data communicated while using the service and Tracker.

Place of processing: United States – Privacy Policy.

By registering or authenticating, Users allow this Website to identify them and give them access to dedicated services.
Depending on what is described below, third parties may provide registration and authentication services. In this case,
this Website will be able to access some Data, stored by these third-party services, for registration or identification
purposes.

Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to find out more,
please refer to the description of each service.

Auth0 (Auth0, Inc)

Auth0 is a registration and authentication service provided by Auth0, Inc. To simplify the registration and
authentication process, Auth0 can make use of third-party identity providers and save the information on its platform.

Personal Data processed: email address, first name, last name, password, picture, Tracker and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and
interact with them.
This type of service might still collect web traffic data for the pages where the service is installed, even when Users
do not use it.

Google Fonts (Google LLC)

Google Fonts is a typeface visualization service provided by Google LLC that allows this Website to incorporate content
of this kind on its pages.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

Font Awesome (Fonticons, Inc. )

Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows this Website to incorporate
content of this kind on its pages.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

This type of service allows Users to interact with data collection platforms or other services directly from the pages
of this Website for the purpose of saving and reusing data.
If one of these services is installed, it may collect browsing and Usage Data in the pages where it is installed, even
if the Users do not actively use the service.

Typeform widget (TYPEFORM S.L)

The Typeform widget is a service for interacting with the Typeform data collection platform provided by TYPEFORM S.L.

Personal Data processed: Data communicated while using the service and Tracker.

Place of processing: Spain – Privacy Policy.

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track
of User behavior.

Google Analytics (Google LLC)

Google Analytics is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to
track and examine the use of this Website, to prepare reports on its activities and share them with other Google
services.

Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy – Opt Out.

Storage duration:

• AMP_TOKEN: 1 hour
• _ga: 2 years
• _gac*: 3 months
• _gat: 1 minute
• _gid: 1 day

Google Ads conversion tracking (Google LLC)

Google Ads conversion tracking is an analytics service provided by Google LLC that connects data from the Google Ads
advertising network with actions performed on this Website.

Personal Data processed: Tracker and Usage Data

Place of processing: United States – Privacy Policy.

Storage duration:

• IDE: 2 years
• test_cookie: 15 minutes

Google Analytics Advertising Reporting Features (Google LLC)

Google Analytics on this Website has Advertising Reporting Features activated, which collects additional information
from the DoubleClick cookie (web activity) and from device advertising IDs (app activity). It allows the Owner to
analyze specific behavior and interests Data (traffic Data and Users’ ads interaction Data) and, if enabled, demographic
Data (information about the age and gender).

Users can opt out of Google’s use of cookies by visiting Google’s Ads Settings.

Personal Data processed: Tracker, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example)
and various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy – Opt Out.

Storage duration:

• IDE: 2 years
• _gcl_*: 3 months
• test_cookie: 15 minutes

Google Analytics Demographics and Interests reports (Google LLC)

Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available
demographic and interests Data inside Google Analytics for this Website (demographics means age and gender Data).

Users can opt out of Google’s use of cookies by visiting Google’s Ads Settings.

Personal Data processed: Tracker and unique device identifiers for advertising (Google Advertiser ID or IDFA, for
example).

Place of processing: United States – Privacy Policy – Opt Out.

Storage duration:

• IDE: 2 years
• _gcl_*: 3 months
• test_cookie: 15 minutes

WordPress Stats (Automattic Inc.)

WordPress Stats is an analytics service provided by Automattic Inc.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

Storage duration:

• tk_tc: duration of the session

Twitter Ads conversion tracking (Twitter, Inc.)

Twitter Ads conversion tracking is an analytics service provided by Twitter, Inc. that connects data from the Twitter
advertising network with actions performed on this Website.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

Storage duration:

• personalization_id: 2 years

Adgoon conversion tracking (Reklame S.r.l.)

Adgoon conversion tracking is an analytics service provided by Reklame S.r.l. that connects data from the Adgoon
advertising network with actions performed on this Website.

Personal Data processed: Tracker and Usage Data.

Place of processing: Italy – Privacy Policy.

Demandbase conversion tracking (Demandbase Ltd.)

Demandbase conversion tracking is an analytics service provided by Demandbase Ltd. that connects data from the
Demandbase advertising network with actions performed on this Website.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy – https://www.demandbase.com/privacy-policy/#information-choices.

Outbrain conversion tracking (Outbrain pixel) (Outbrain Inc.)

Outbrain conversion tracking (Outbrain pixel) is an analytics service provided by Outbrain Inc. that connects data from
the Outbrain advertising network with actions performed on this Website.

Personal Data processed: device information, Tracker, Universally unique identifier (UUID) and Usage Data.

Place of processing: United States – Privacy Policy.

Facebook Ads conversion tracking (Facebook pixel) (Meta Platforms, Inc.)

Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Meta Platforms, Inc. that connects data from the Meta advertising network with actions performed on this Website. The Facebook pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Audience Network.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

Storage duration:

• _fbp: 3 months
• fr: 3 months

The services contained in this section allow the Owner to track and analyze the User response concerning web traffic or
behavior regarding changes to the structure, text or any other component of this Website.

Google Optimize (Google LLC)

Google Optimize is an A/B testing service provided by Google LLC (“Google”).

Google may use Personal Data to contextualize and personalize the ads of its own advertising network.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

Storage duration:

• _gaexp: 3 months
• _opt_awcid: 1 day
• _opt_awgid: 1 day
• _opt_awkid: 1 day
• _opt_awmid: 1 day
• _opt_expid: 10 seconds
• _opt_utmc: 1 day

Google Optimize 360 (Google LLC)

Google Optimize 360 is an A/B testing service provided by Google LLC (“Google”).

This service allows the Owner to target groups of Users on the base of their past use of this Website. Users that
opt-out of tracking by Google Analytics will not be included in experiments created in Google Optimize 360.

Google may use Personal Data to contextualize and personalize the ads of its own advertising network.

Personal Data processed: Tracker and Usage Data.

Place of processing: United States – Privacy Policy.

Storage duration:

• _gaexp: 3 months
• _opt_awcid: 1 day
• _opt_awgid: 1 day
• _opt_awkid: 1 day
• _opt_awmid: 1 day
• _opt_expid: 10 seconds
• _opt_utmc: 1 day

This type of service allows this Website to manage the creation, deployment, administration, distribution and analysis
of online forms and surveys in order to collect, save and reuse Data from any responding Users.
The Personal Data collected depend on the information asked and provided by the Users in the corresponding online form.

These services may be integrated with a wide range of third-party services to enable the Owner to take subsequent steps
with the Data processed – e.g. managing contacts, sending messages, analytics, advertising and payment processing.

Typeform (TYPEFORM S.L)

Typeform is a form builder and data collection platform provided by TYPEFORM S.L.

Personal Data processed: Data communicated while using the service and Tracker.

Place of processing: Spain – Privacy Policy.

This type of service allows User Data to be utilized for advertising communication purposes. These communications are
displayed in the form of banners and other advertisements on this Website, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.

Some of the services listed below may use Trackers to identify Users or they may use the behavioral retargeting
technique, i.e. displaying ads tailored to the User’s interests and behavior, including those detected outside this
Website. For more information, please check the privacy policies of the relevant services.

Services of this kind usually offer the possibility to opt out of such tracking. In addition to any opt-out feature
offered by any of the services below, Users may learn more on how to generally opt out of interest-based advertising
within the dedicated section “How to opt-out of interest-based advertising” in this document.

Query Click (Query Click Limited)

Query Click is an advertising service provided by Query Click Limited.

Personal Data processed: Tracker and Usage Data.

Place of processing: United Kingdom – Privacy Policy.

Storage duration: duration of the session

Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information — including a personal identification
number — allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through this Website (or third-party services employed in this Website), which can
include: the IP addresses or domain names of the computers utilized by the Users who use this Website, the URI addresses
(Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the
size of the file received in response, the numerical code indicating the status of the server’s answer (successful
outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User,
the various time details per visit (e.g., the time spent on each page within the Application) and the details about the
path followed within the Application with special reference to the sequence of pages visited, and other parameters about
the device operating system and/or the User’s IT environment.

Personal Data processed: Data communicated while using the service and Tracker.

User

The individual using this Website who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Data Supervisor)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the
Controller, as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the
purposes and means of the processing of Personal Data, including the security measures concerning the operation and use
of this Website. The Data Controller, unless otherwise specified, is the Owner of this Website.

This Website (or this Application)

The means by which the Personal Data of the User is collected and processed.

Service

The service provided by this Website as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references made within this document to the European Union include all current member
states to the European Union and the European Economic Area.

Cookie

Cookies are Trackers consisting of small sets of data stored in the User’s browser.

Tracker

Tracker indicates any technology – e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and
fingerprinting – that enables the tracking of Users, for example by accessing or storing information on the User’s
device.

Legal information

This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of
Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates solely to this Website, if not stated otherwise within this document.