Bizagi Group Corp and its Affiliates (“Bizagi”,“we”,“us”, or “our”) are committed to protecting your privacy whether as: public visitors to our websites (“Visitors”), individuals who register to use Bizagi’s Services (“Customers”), and/or individuals who register for corporate events (“Attendees”).

If you have questions or feedback regarding Bizagi’s Privacy Policy, please use the contact information provided in Section 20.

 

1. Scope

This Privacy Policy outlines how Bizagi collects, uses, shares and secures the personal information provided through Bizagi’s Websites (websites that link to this Privacy Policy).

Bizagi’s Xchange platform (https://www.bizagi.com/en/platform/xchange) allows access to connectors and widgets:

• Bizagi-Posted Connectors/Widgets: Governed by this Privacy Policy.
• Third-Party Connectors/Widgets: Governed by their respective privacy policies.

Bizagi“s Websites may also include links to other sites, applications, social media pages, and emails (“Channels”). Bizagi is not responsible for the privacy practices of third-party sites and encourages reviewing their policies.

Bizagi“s Websites may also include links to other sites, applications, social media pages, and HTML formatted email messages (“Channels”). Bizagi is not responsible for the privacy practices of third-party sites and encourages reviewing their policies.

2. Collection of Personal Information

Collectively, Contact Information, Billing Information, Training Information, Applicant Information, Optional Information and any other information you submit to Bizagi through our Services are referred to as “Data”.

From time to time, Bizagi and our third-party service providers may collect both personal information and non-personal information from a variety of sources that fall into three categories:

The information collected-, whether directly or indirectly, may be combined to improve Bizagi’s data accuracy and to better personalized our interactions with you.

We, our suppliers, or our business partners may automatically collect technical data about your device, browsing activity, and IP address through cookies and similar technologies (Section 5).

1. Information You Provide To Us.
   1. Customers/Attendees. When expressing an interest in obtaining additional information about the Services, using Bizagi’s digital assets, or in registering for an event, you may be required to provide your personal contact information, such as name, company name, address, phone number, and email address (“Contact Information”) so that we can provide access or communications to you. Any transaction for the Services or event registration may also require you to provide your billing information, such as billing name and address, and the number of employees within the organization that will be using the Services (“Billing Information”). Further, in order to customize any Services for you, Bizagi may also ask you to provide additional information, such as annual company revenues, number of employees, or industry (“Optional Information”).
   2. Training Information. When participating in Bizagi training courses, we may collect your name, your role, completed classes, and test scores. Bizagi may receive this data from you or your employer and will provide details on the processing.
   3. Visitors. As you navigate Bizagi’s Web sites, we may also collect information through the use of commonly used tracking technologies, such as Cookies, Web Beacons and Other Technologies (“Website Tools”). This may include standard browser information (e.g., browser type and language), your Internet Protocol (“IP”) address, the device used to access the website, and your interactions with Bizagi’s Websites (e.g., the Webpages viewed, links clicked).
   4. Applicants. If you apply for a job through our website, we may ask you to provide additional personal information, including your resume or Curriculum Vitae (“Applicant Information”). Please refer to Bizagi’s Global Recruitment Privacy Policy for detailed information.
2. Information from Third Party Sources.
   1. Direct Interactions: From your use of and interaction with us through the Channels and other activities such as account creation, submission of registrations and forms, or sales inquiries and transactions.
   2. Publicly Available Data or Third-Party Data: Includes data obtained from publicly accessible sources (e.g., social media posts), or third-party providers (e.g., marketing lists, aggregators)
   3. Automated Interactions: Involves information gathered via electronic tools such as cookies, tracking pixels, embedded URLs, and third-party widgets or plugins.
3. Automatic Data Collection.

3. Legal Basis for Processing Personal Data

The legal basis on which Bizagi collects and processes your personal data depends on the nature of the information and the context in which it is collected. In general, Bizagi processes personal data:

1. To fulfill a contractual obligation (e.g., providing services you have requested);
2. Based on our legitimate interests, provided these are not overridden by your data protection rights (e.g., improving our services, marketing relevant offerings);
3. To comply with legal obligations (e.g., regulatory reporting or government requests); or
4. Based on your consent, when explicitly provided (e.g., for marketing communications or certain cookies).

We will clearly indicate where consent is required and provide options to withdraw it at any time.

4. Use of Information Collected

Bizagi will use your Data to respond to your direct requests. Unless you notify us otherwise, Bizagi may also use your Data to:

1. Provide you with information about our related products, services, partners, promotions, and events;
2. Notify you of new product releases and service developments;
3. Customize our communications and marketing based on your website visits, preferences, and interests. Follow-up on your interests via Bizagi resellers, or partners offering complementary products and services;
4. Confirm or assist with your service-related requests (e.g., downloads, troubleshooting issues);
5. Ensure compliance with our terms, policies, and agreements;
6. Facilitate participation in Bizagi-hosted events, forums, or social platforms;
7. Personalize content and functionality across our Channels to enhance user experience
8. Analyze and improve our marketing campaigns and advertising efforts;
9. Operate, maintain, and improve Bizagi Services, websites, events, and communications;
10. Invite you to participate in questionnaires or surveys. If you choose to submit Personal Data, it may be used to enhance our products and services;
11. Anonymize collected Personal Data to generate data sets for internal analytics and product development;
12. Communicate with you in the context of an existing business relationship:
    • Provide updates or invitations for webinars, seminars or related offerings.
    • Collect feedback to improve Bizagi“s offerings and your experience.

Interest-Based Advertising:To opt out, click here. You may continue to receive non-targeted ads.

Third-Party Social Media:Bizagi may interact with you on third-party social platforms under their respective privacy policies and terms of use.

No Promotional Sale of Data:Bizagi does not sell, rent, or trade personally identifiable information for promotional purposes. We may share information with trusted partners or as required by law or legal process, including national security or law enforcement requirements.

5. Cookies, Web Beacons, and Other Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyse usage, and deliver relevant content and advertising. These tools help us understand how visitors interact with our websites and services, enable core functionality, and support personalization features. You can manage your cookie preferences at any time through the cookie settings banner or your browser settings. Please note that disabling certain cookies may impact the functionality of our websites.

For more information about the types of cookies we use, the data they collect, and how to manage your preferences, please refer to our Cookie Policy.

6. Community Features, Referrals, and Testimonials

Bizagi’s Website uses a sub-processor to operate community features such as bulletin boards, blogs, discussion forums to foster community feedback, collaboration, and knowledge-sharing. Please note that personal information you choose to submit in these areas becomes public and may be viewed, collected, or used by others. We strongly recommend that you avoid submitting sensitive or personal data and Bizagi is not responsible for the personal information you choose to submit in these forums.

Customers and Visitors may elect to use Bizagi’s referral program to inform your contacts about Bizagi’s Websites and Services. When using the referral program, Bizagi requests the contact’s name and email address. Bizagi will automatically send the contact a one–time email inviting him or her to visit Bizagi’s Websites. Bizagi does not otherwise store this information.

With your explicit consent, Bizagi may publish customer testimonials on our Websites, which may include names, titles, or other identifying details. If you wish to update or remove your testimonial, please refer to Section 20 for our contact information.

7. Sharing of information collected

7.1. Sub-processors:Bizagi may share your Data with trusted third-party service providers and partners (collectively, “Sub-processors”) who support us in delivering our products and services. These Sub-processors would be authorized to use your personal information only as necessary to perform services on Bizagi’s behalf and in accordance with applicable data protection laws.

This may include services such as hosting, customer support, analytics, communication tools, or marketing execution. For example, Bizagi may share data with trusted platforms (e.g., LinkedIn) for advertising, analytics, or promotional campaigns, always in accordance with your preferences and applicable law. Unless described in this Privacy Policy, Bizagi does not share, sell, rent, or trade any information with third parties for their promotional purposes.

We engage trusted third-party service providers and affiliates to support our operations and the delivery of services. A current list of sub-processors, including their processing purpose and location, is available at: Bizagi’s Sub-processor List.

We may leverage third-party service providers to enable artificial intelligence (AI) and generative AI functionalities within our platform. These capabilities assist customers in automating tasks such as analysing unstructured data, identifying trends, generating predictive insights, and creating AI-driven responses or content.

7.2. Bizagi Affiliates: Some Bizagi Services may be provided by our affiliated entities. In such cases, your data may be shared within our corporate group to support service delivery and customer support.

7.3. Business Partners: From time to time, Bizagi may partner with other companies to jointly offer products, services, or programs. If you engage with a jointly offered service—for example, by registering interest or making a purchase—Bizagi may share relevant data with those partners. In such cases, the partner’s privacy policy may also apply. If you do not wish for your information to be shared in this manner, you may refer to your rights under the relevant commercial contract (such as a signed Master Cloud Services Agreement).

Bizagi does not share Data about Bizagi Attendees with business partners unless: (1) you expressly opt-in to such sharing via an event registration form; or (2) you attend a Bizagi event and allow or any of its business partners to scan your attendee badge. If you do not wish for your information to be shared in this manner, you may choose not to opt-in via event registration forms and elect not to have your badge scanned at Bizagi events. If you decide to share your information with business partners in the manners described above, your information will be subject to the business partner’s respective privacy policies.

7.4. Other Third Parties: We may share your personal data with other third parties under non-disclosure agreements, government authority, or your explicit consent, respecting data minimization principles. For information collected via cookies and other tracking technologies, please refer to our Cookie Policy.

7.5. Compelled Disclosure: Bizagi reserves the right to use or disclose information provided if required by law or if Bizagi reasonably believes that use or disclosure is necessary to protect Bizagi’s rights and to comply with a judicial proceeding, court order, or other legal process.

8. International transfer of information collected

We may store and process data covered by this Bizagi notice in: (i) any country where we have facilities; and (ii) any country in which we engage service providers. A list of Bizagi’s global offices is available at: https://www.bizagi.com/en/about/offices. These transfers are necessary to support the purposes described in this Privacy Policy.

To ensure that your personal information remains protected when transferred from the European Economic Area (EEA), the United Kingdom, or other applicable jurisdictions, Bizagi has implemented appropriate safeguards, including Standard Contractual Clauses approved by the European Commission (or their UK equivalents), and similar contractual protections where required. These safeguards apply to transfers made to both Bizagi affiliates and authorized third party third-party sub-processors located outside of the EEA.

9. Communications Preferences

You can manage your preferences for receiving marketing and other non-transactional communications from Bizagi at any time. To unsubscribe, simply click the “unsubscribe” link included at the bottom of our marketing emails. You may also opt out by clicking here or by using the contact information in Section 20.

Please note that even if you opt out of marketing communications, you may still receive important transactional or service-related messages related to your use of Bizagi products or services.

10. Data Subject Rights

You may request to review, correct, delete or otherwise modify any of the personal information that you have reviously provided to us through Bizagi’s Websites and Services, subject to applicable data protection laws.

To submit a request, please contact us per Section 20 and include:

• A description of your requested action (e.g., access, correction, deletion),
• Relevant details about the data or service involved,
• The specific Bizagi Services or Channels to which your request relates, and Country.

Please note that our ability to process your request may depend on: (i) verifying your identity or authority to act on behalf of the data subject, (ii) the applicable laws based on your country of residence or citizenship, (iii) The clarity and completeness of the information you provide, and (iv) The complexity of the request, which may result in reasonable response time extensions where necessary.

We are committed to addressing your request in a timely and lawful manner.

11. Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law (such as for tax, legal, or accounting obligations).

When we no longer have a legitimate business need to process your personal data, we will delete or anonymise it. If immediate deletion is not possible (e.g., data stored in secure backups), we will isolate and protect the data from further processing until deletion becomes feasible.

12. Security

The security of your Data is a priority for Bizagi. We maintain a comprehensive information security program aligned with internationally recognized standards, including ISO/IEC 27001, to protect your data from loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Bizagi implements a combination of physical, administrative, and technical safeguards designed to ensure the confidentiality, integrity, and availability of personal information.

In the event that your personal information is acquired—or reasonably believed to have been acquired—by an unauthorized party, and if applicable law requires notification, Bizagi will notify you by e-mail or mail. This notification will occur in accordance with legal requirements and take into account the needs of law enforcement and the necessity of determining the scope of the incident and restoring the integrity of integrity of our systems.

13. Sensitive Information

We strongly advise you not to share sensitive personal information, in public areas of our services, such as bulletin boards, forums or chat rooms. These environments are not designed for transmitting confidential or sensitive data, and any information you choose to share there is at your own risk.

In limited cases, and only with your explicit and voluntary consent Bizagi may process certain sensitive personal information for specific, legitimate purposes. For example, we may collect financial information to process a transaction or complete a transaction or assess a business relationship, or demographic data to support equal employment opportunity practices in accordance with applicable law.

14. Children's Privacy

Bizagi's services and Channels are intended for business use and are not directed to children. We do not knowingly collect or solicit personal information from individuals under the age of 18, and we do not market our services to minors.

If you believe that a minor has provided personal information to Bizagi without legal consent (e.g. of a legal guardian), please refer to the contact information provided in Section 20 so that we can promptly delete the Data from our servers and make any other necessary corrections.

You may also use this contact to request the removal of content or information posted by any user under the age of 18. Please note that such requests do not guarantee complete or comprehensive removal—for example, if the content or information, shared or reposted by others.

15. CCPA & CPRA Privacy Statement for California Residents

This section supplements the information contained as described in other sections of this Privacy Policy and applies solely to visitors, users, and others who reside in the State of California. We have adopted this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and the California Consumer Privacy Act of 2020 (CPRA). Any terms defined under the CCPA & CPRA have the same meaning when used in this section.

15.1. Information We Collect, Use and Share

As stated above, in the twelve (12) months preceding the Effective Date on this Privacy Policy, we may have collected, used, or shared information about California consumers across the following categories described in Section 2 of this Policy.

The CCPA defines “sale” of information broadly and some of our personal information sharing may be considered a “sale” under this definition.

While Bizagi does not sell personal information of consumers for monetary consideration, certain use of cookies and similar technologies on our marketing websites may be considered a “sale” or “sharing” of personal information under the CCPA/CPRA definitions.

These activities are limited to our marketing websites and do not apply to our customer offerings or services. If you wish to opt out of the “sale” or “sharing” of your information, please refer to the section “Right to Opt-out of Sale” below.

15.2. How we use and share personal information

Bizagi uses the personal data described above in Section 3 of this Privacy Policy. This includes use for service delivery, analytics, communications, security, and other operational needs.

15.3. Your Privacy Rights Under CCPA & CPRA

As of January 1, 2023, California residents have the following rights under CCPA and CPRA:

• Right to Know. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
• Right to Correct. You have the right to request that we amend any inaccurate personal information that we collected from you.
• Right to Delete. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
• Right to Non-Discrimination. You have the right to not receive discriminatory treatment for exercising any of your privacy rights. Bizagi will not:
  • Deny you goods or services;
  • Charge you different prices or rates;
  • Provide a different level or quality of services; or
• Suggest that you may receive a different price, rate, or level of service, unless permitted under the law.
• Right to Opt-Out of Sale and Sharing. You have the right to Opt-out any Sales, as defined by the CCPA & CPRA, of personal Information by Bizagi. You can exercise this right by contacting us. Please note that we do not sell the personal information of minors under 16 years of age under any circumstances, as our website is not intended for users under this age.

15.4. How to Exercise Your Rights

To exercise one or more of the above CCPA & CPRA rights, please refer to the contact information provided in Section 20. We may need to verify your identityand may request additional information for this purpose. We will respond to all such requests within forty-five (45) days. If we need more time, we will notify you of the extension and explain the reasons for the delay.

16. VCDPA Privacy Statement

Bizagi has adopted this VCDPA Privacy Statement to comply with the Virginia Consumer Data Protection Act (VCDPA), which provides specific rights to consumers residing in Virginia, and any terms used herein have the same meanings defined in the VCDPA.

To the extent that Bizagi collects and processes Personal Data subject to the VCDPA, our data practices, and your rights are described below.

16.1. Your Rights Under the VCDPA

As of January 1, 2023, Virginia consumers have the right to:

• Confirm whether or not we are processing your personal data and access such data;
• Correct inaccuracies in your personal data, considering the nature of the data and the purposes of the processing;
• Delete personal data provided by or obtained about you;
• Obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format to enable its transfer to another controller (where processing is carried out by automated means); and
• Opt out of the processing of your personal data for (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Bizagi will not discriminate consumers who choose to exercise any of their VCDPA rights.

16.2. How to Exercise Your Rights

To exercise any of the rights listed above, please refer to the contact information provided in Section 20. We may need to verify your identity and request additional information to process your request. We will respond to verifiable consumer requests within forty-five (45) days. If we require more time, we will inform you of the delay and the extension period.

16.3. Appeals

If we deny your request, you have the right to appeal our decision. We will respond to appeal requests in writing within sixty days (60). If your appeal is denied, we must provide and online mechanism (if available) or an alternative method to allow you to submit a complaint to the AG (Attorney General of Virginia).

17. Other Applicable Laws

Based on your location or residency, other jurisdiction’s privacy laws may apply. Bizagi monitors our compliance with laws in the markets where we have identified customers. Please reach out using Section 20 contact information if you have any questions.

18. Annual Transparency Report

As part of our commitment to transparency and accountability, Bizagi publishes an Annual Transparency Report. This report provides information about government requests for user’s data, as well as requests to remove content or suspend user accounts.

19. Changes to this Privacy Policy

Bizagi reserves the right to review and update this Privacy Policy at least annually or more frequently as needed to reflect changes in our practices, services, or applicable data privacy laws.

We will notify users of material changes to this Privacy Policy by posting an update on Bizagi’s Websites at least thirty (30) business days before any changes taking effect. Your continued use of Bizagi’s services after the effective date of any updates to this Privacy Policy constitutes your acceptance of the revised policy.

20. Contact Us

Questions regarding this Privacy Policy or the information practices of Bizagi’s Websites and Services should be directed to privacy@bizagi.com.

Data Protecction Officer:

Symmetry Solutions Ltd, Building 11, The Tara, 15 Tara St, Dublin, D02 RY83, Ireland

V.4.0 April 2025.