Caseware Privacy Policy

1.0 Overview

Caseware International Inc.("CWI") and its Affiliates (as defined below), hereinafter collectively referred to as "Caseware", have developed this Privacy Policy in order to demonstrate Caseware's firm commitment to your privacy.

1.2 This Privacy Policy describes how Caseware will collect, use, disclose, retain and protect your Personal Information in order to provide you with access to a variety of resources, including Desktop Programs offered and maintained by Caseware.

1.3 This Privacy Policy does NOT apply to Personal Information collected through the access or use of Caseware Cloud Services. Personal Information collected through the access or use of Caseware Cloud Services is governed by the separate and supplemental Caseware Cloud Privacy Policy.

1.4 This Privacy Policy should be read in conjunction with any and each applicable license agreement of CWI or its Affiliates governing the use of the relevant Desktop Program or Desktop Programs.

1.5 Caseware uses and discloses the Personal Information only as described in this Privacy Policy, and any applicable Caseware license agreement governing the use of the relevant Desktop Program or Desktop Programs. By using the website, or Desktop Programs you consent and agree to such use and disclosure.

1.6 As used herein, the following terms shall have the following meanings:

  • "Affiliate" means a corporation that controls, is controlled by, or is under common control with, CWI.

  • "Caseware Cloud Services" means those Cloud Services offered by Caseware Cloud Ltd. ("CWC") to its customers.

  • "Cloud Services" means computing resources provided by way of the Internet and may include the provision of storage, software, platform, computing services or other resources.

  • "Cloud Services Agreement" means an applicable agreement for the provision of Caseware Cloud Services between a customer and CWC.

  • "Desktop Program" or "Desktop Programs" means " means computer software program or programs offered by Caseware to Licensees for installation and execution on computing systems owned or operated by Licensee , and may include of one or more programs generally known as "Caseware"®, "Caseware Working Papers" ™, "Working Papers" ™, "AuditAgent"®, "Caseware Connector"™, "Connector" ™, "Caseware Financials" ™, "Caseware IFRS Financials" ™, "Caseware GAAP Financials" ™, "Caseware Review" ™, "Caseware Review and Compilation" ™, "Caseware Audit"™, "Caseware CPA Canada Engagement Templates"™, "Caseware CGA Audit Templates"™, "Caseware Audit International" ™ ,"Caseware Audit US" ™, "Caseware SSARS 21" ™, "Caseware Audit System" ™, "Caseware GoBetween" ™, "Caseware Open Engagement"®, "Caseware OpenEngagement" ™, "Caseware SDK", "Caseware COM", "Caseware Time" ™, "Practice Administration" ™, "Caseware Time and Billing"™, "TimeAgent" ™, "Caseware Today" ™, "Caseware XBRL Benchmarking" ™, "Caseware Scenarios" ™, "Caseware Not For Profit" ™, "Caseware GASB" ™, "Caseware CAFR" ™, "BizSuite" ™ , "Caseware IDEA"™, "IDEA" ®, "IDEA Server"™, "IDEA Smart Analyzer – Financial" ™, "IDEA Advanced Statistical Methods" ™, "IDEA Smart Analyzer – Tax" ™, "IDEA DART" ™, "Caseware Monitor" ™, "Caseware QuickVid" ™, "Caseware Quick Upload" ™, and "Caseware Cloud" ™.

  • "Licensee" means a party who has entered into a valid license agreement for a Desktop Program with one of CWI or its Affiliates and who has authorized you to use and access the Desktop Program.

  • "Personal Information" means information about an identifiable individual, and may include information such as a person's name, email address, residential address, telephone number, bank account details, credit scores and payment card information.

  • "Registrant Data" means any content, information, and data, including any Personal Information, provided or input as part of licensing or registering to use a Desktop Program.

  • "Website" means www.caseware.com, and includes all related webpages, and all related websites operated by Affiliates, but does not include any third-party websites which are linked to or may link from the Website whether or not such third-party websites are used in connection with but does not include the access or use of the Caseware Cloud Services themselves.

1.7 CWI has the following Affiliates:

  • Caseware Cloud Ltd.

  • Caseware Europe Limited

  • Caseware International Inc.

  • Caseware LatinoAmerica, S.R.L.

  • Caseware Asia Ptd. Ltd.

  • Caseware IDEA Inc.

  • Caseware IDEA B.V.

  • Caseware Software Holding Limited

  • Caseware UK Limited

  • Caseware RCM Inc.

  • Caseware Beijing Limited

  • Caseware Hong Kong Limited

  • Caseware Greater China Pte Ltd.

2.0 Questions or Complaints?

If you have any questions or complaints about this Privacy Policy, please contact us at:

Caseware Cloud Ltd.

1 Toronto St, Suite 1400

Toronto ON M5C 2V6

Telephone: (416) 867-9504

Fax: (416) 867-1906

Email: privacy@caseware.com

3.0 Scope

3.1 In accessing the Caseware Website or using the Desktop Programs you may provide Caseware with, and Caseware may collect, Personal Information such as:

  • last name, first name, address and date of birth;

  • communication data (e.g. telephone number, email, IP addresses, mac addresses);

  • contract master data;

  • billing and payment data;

  • IT usage data (e.g. user ID, passwords, roles, geolocation data, website usage, cookie related data, tracking and analytics data);

  • bank data (e.g. bank account details and credit card number);

  • and credit rating data (e.g. payment behavior and balance sheets).

3.2 Caseware may also collect Personal Information about you from other sources including third parties from whom we have purchased business contact information and from publicly accessible websites, such as your company's website, professional network services, or press releases.

3.3 Caseware may, at its option, combine Personal Information you have provided to Caseware with data collected from other sources as described above. Caseware may process this data to update, expand, and analyze our existing marketing records; identify new customers; and send marketing emails, as permitted by law.

4.0 Accountability

4.1 Caseware's Security and Compliance Manager is responsible for the oversight and implementation of this Privacy Policy and procedures to protect Personal Information, for receiving your privacy-related questions, and for providing you with information about Caseware's privacy practices, by posting updated information on Caseware's website.

4.2 You may send us your privacy-related questions or challenge Caseware's compliance with this Privacy Policy by submitting your concern to Caseware's Security and Compliance Manager:

Head of Technology Operations & Security

(416) 867-9504

privacy@caseware.com

5.0 Legal Bases

5.1 Caseware's legal grounds for collecting and using Personal Information as described in this Privacy Policy fall into the following four categories.

Consent: In some cases, Caseware will ask you for your consent to process your personal data, such as when we need your consent for marketing purposes. You can withdraw your consent at any time, which will not affect the lawfulness of the processing before your consent was withdrawn. If you would like to withdraw your consent, you can do so by emailing privacy@caseware.com.

Legitimate Interest: Caseware processes certain data for the legitimate interests of CWC, its Affiliates, partners, or customers. These legitimate interests include, for example, contacting you to provide support or sending you marketing information (subject to applicable law); detecting, preventing, and investigating illegal activities and potential security issues; providing the Caseware Desktop Programs; and maintaining and improving the Website and the Desktop Programs. Caseware will rely on our legitimate interests for processing Personal Information only after balancing our interests and rights against the impact of the processing on individuals.

Performance of a Contract: Caseware processes Personal Information in order to provide the Desktop Programs, and to perform our obligations under an agreement with you or a Licensee.

Other Legal Bases: In some cases, we may have a legal obligation to process your personal data, such as in response to an order of court of law or regulatory authority. We also may need to process your Personal Information to protect vital interests, or to exercise, establish, or defend legal claims.

5.2 Caseware collects Personal Information directly from you and only obtains Personal Information from other organizations (e.g., your bank or other third-party service providers) when you provide Caseware with account numbers, passwords or other credentials required to retrieve the Personal Information and for the purpose of providing you with the Desktop Programs.

5.3 You can opt out of any e-mail communication sent by Caseware. Caseware's e-mails will contain clear and obvious instructions describing how you can be removed from any mailing list. Caseware will remove you at your request within a reasonable amount of time.

6.0 Identifying Purposes

6.1 Caseware collects, uses and discloses Personal Information only for the purposes of providing and improving Caseware Desktop Programs, and in improving the Website and Caseware Cloud Services, and for such other ancillary purposes consented to by you as set out herein or as required by law.

7.0 Limiting Collection

7.1 Use of Caseware Desktop Programs may require you to provide Registrant Data, which may include Personal Information.

7.2 Caseware may collect Personal Information directly from you when you:

  • register to use a Desktop Program;

  • contact Caseware for support; and

  • visit Caseware's Website, or input data into the Website.

7.3 Caseware also uses common information-gathering technologies for indirectly collecting usage data, including cookies, web beacons and similar technologies to automatically collect information that may contain Personal Information from your computing or mobile device as you navigate the Website. Caseware may gather certain information automatically in connection with the use of the Website by individual users. This information may include IP address (or proxy server), device and application identification numbers, location, browser type, Internet service provider and/or mobile carrier, the pages and files viewed, searches, operating system and system configuration information and date/time stamps associated with your usage.

7.4 Caseware may use cookies and similar technologies such as web beacons, tags and JavaScript, alone or in conjunction with cookies, to compile information about the usage of the Website and interaction with emails from Caseware.

7.5 When visiting the Website, Caseware or an authorized third party may place a cookie on your browser and/or device, which collects information, including Personal Information, about your online activities over time and across different sites. Cookies allow CWC to track usage, determine browsing preferences and improve and customize the Website experience and Caseware Cloud Services or Desktop Programs.

7.6 Session-based and persistent cookies may be used on the Website. Session-based cookies exist only during one session and disappear from your computer when you close your browser or turn off your computer. Persistent cookies remain on your computer or device after you close your browser or turn off your computer. To change your cookie settings and preferences for the site you are visiting, control the use of cookies using your browser preferences. Disabling cookies, however, may limit your ability to use the Website.

7.7 Additionally web beacons may be used on the Website and in email communications. For example, Caseware may place web beacons in marketing emails that notify Caseware when a link in an email directs you to one of our websites. Such technologies are used to operate and improve our Website and email communications.

7.8 You can always choose not to provide Personal Information to Caseware, but it may mean that Caseware is unable to provide you with Caseware Desktop Programs, or access to the Website.

8.0 Limiting Use, Disclosure and Retention of Personal Information

8.1 Caseware collects, uses and discloses information (which may include Personal Information) for the following purposes:

  • To verify your identity.

  • To provide you with the Caseware Desktop Programs. Caseware may collect contact, billing or credit information including phone numbers, email addresses and physical addresses. Caseware Cloud Services may, for example, require data related to you in order to provide Caseware Desktop Programs, or to promote or offer you products, services and offers (including new and other Services which are offered by Caseware) that may be relevant to you. Collected Personal Information may also be used to review compliance with applicable Desktop Program license agreements.

  • To contact you for the purposes of product information, service updates, or notifications relating to the Caseware Desktop Programs. In particular, Caseware requires you to give us necessary contact information such as name and email address. We also ask for unique identifiers (log-in password names). Caseware uses such contact information to send information about Caseware's products and services.

  • To monitor and/or improve system usage, server and software performance. Caseware may use Personal Information such as login information and IP addresses of computers which access the Website to help identify you and to gather broad demographic information.

  • To assist you with technical support issues.

  • To comply with any laws, regulations, court orders, subpoenas or other legal process or investigation and to protect Caseware and other individuals from harm.

  • To improve and enhance Caseware service offerings. Caseware may use Personal Information provided by its users in an anonymous, and/or aggregated fashion to improve or enhance its Desktop Programs, Cloud Services and other service offerings. For example, the Personal Information may be used to analyze overall trends, to help us provide and improve our Website and Caseware Cloud Services and to guarantee their security and continued proper functioning, to provide necessary functionality, to assess and improve Customer and user experience of the Caseware Cloud Services, to identify future opportunities for development of the Caseware Cloud Services, or to identify customer opportunities.

8.2 By using the Desktop Programs or Website, you consent to your Personal Information being collected, held and used in this way and for any other use you authorize. Caseware will only use your Personal Information for the purposes described in this Privacy Policy or with your express permission.

8.3 It is your responsibility to keep your password or other forms of authentication to the Desktop Programs safe. You agree to notify CWC as soon as possible if you become aware of any misuse of your password, and immediately change your password within the Desktop Programs.

9.0 Accuracy

9.1 Caseware relies on you to ensure that the Personal Information you provide to us while using the Desktop Programs is as accurate, complete and up-to-date as necessary for the purposes for which it is to be used. Upon request, Caseware will provide you with information Caseware holds about you. You are welcome to make changes, request deletions or corrections to this Personal Information at any time by contacting us at the contact information listed in this Privacy Policy. We will respond to your request within a reasonable timeframe.

9.2 You are responsible for ensuring that the information you have provided is truthful, accurate, reliable and complete, and does not infringe the rights of others.

9.4 Caseware may at its own discretion, retain or delete any Registrant Data or Personal Information provided by you. Caseware may retain and use your Personal Information as necessary to comply with Caseware's legal obligations, resolve disputes, and enforce agreements with Caseware.

10.0 Where Your Personal Information is Stored

10.1 Caseware uses third party data hosting providers (e.g. Amazon Web Services) to store your Personal Information on servers located throughout the world. A complete list of third party hosting providers may be found on https://www.casewarecloud.com/security.html#security.

10.2 By providing Personal Information you consent to that Personal Information being hosted on servers in Canada. Caseware has taken reasonable measure to ensure that unauthorized access the data, and will use the necessary level of protection for, Personal Information.

11.0 Safeguards

11.1 Caseware is committed to protecting the security of your Personal Information and we take all reasonable precautions to protect it from unauthorized access, modification and disclosure. Caseware uses technical and organizational measures that provide a level of security appropriate to the risk of processing your Personal Information. For example, your Personal Information is stored on secure servers that are encrypted.

11.2 However, the Internet is not in itself a secure environment and Caseware cannot give an absolute assurance that your Personal Information will be secure at all times. Transmission of Personal Information over the Internet is at your own risk and you should only enter, or instruct the entering of, Personal Information to the Caseware Website or Desktop Programs within a secure environment.

11.3 Caseware will advise you at the first reasonable opportunity, and as required by law, upon discovering or being advised of an incident where your Personal Information is lost, stolen, accessed, used, disclosed, copied, modified or disposed of by unauthorized persons or in an unauthorized manner.

12.0 Individual Access

Upon request, CWC will provide you with a list of the third-party service providers used to host your Personal Information, and the countries in which our servers are located.

13.0 Openness

Caseware makes clear and transparent notice of its privacy practices publicly available through this Privacy Policy. Caseware may change this Privacy Policy at any time, and any amended Privacy Policy is effective upon posting to the website. Caseware will make every effort to communicate any significant changes to you via email or notification via the Caseware Cloud Services with respect to Cloud Services Customers. Your continued use of the Caseware Website or Desktop Programs will be deemed acceptance of any amended Privacy Policy.

14.0 Challenging Compliance

You may send us your privacy-related questions or challenge our compliance with our Privacy Policy by submitting your concern to our Security & Compliance Manager:

Nitin Chopra

Head of Technology Operations & Security

(416) 867-9504

privacy@caseware.com