Last Updated: April 18, 2022
Avalara collects personal data directly from you, for instance when you inquire about one of Avalara’s Services, or from your interactions with our website, products or Services. Details include:
Contact details. When you inquire about our Services, register for an event or seminar, download content like white papers, or enter a live chat, we may collect your contact details, such as your name, company, address, phone number, fax number, and email address. If your company uses the Services and we provision you an account, we may collect your name, email address, and associated IP address as part of your company’s use of the Services.
Account creation. When you create an account with us via our website, we may collect your contact details and a password.
Billing data. When you purchase Services or register to attend an event, we may collect billing and payment information.
Device and usage data. When you use our website or our Services, we may also automatically collect data about your device and about your usage of and activity on our website and Services. For example, we collect your device’s operating system type, IP address, device identifiers, browser type, device type, domain name, access times, and the duration of visit, and other information.
Data from our mobile apps. When you use our mobile Services, we may collect your contact details, the geographic location of the device, the geographic locations you provide to our Services, and geographic areas derived from your IP address. We may also collect information about your invoices such as postal addresses, invoice numbers, exemption certificate numbers, item descriptions, quantities, and amounts.
Chat data. When you start a live chat, Avalara will collect a log about your interaction with Avalara’s chat agents.
Avalara may also collect personal data from other sources, including third parties from whom we have purchased data, and we may combine this data with data we already have about you. For example, we may collect personal data from:
Partners. Avalara may engage in joint marketing activities or event sponsorships with our third-party partners and we may collect personal data about you from these activities. We also allow partners to provide referrals to Avalara of individuals who may be interested in learning more about Avalara’s Services. We rely on our partners to obtain your permission before sharing your personal data with us.
Service Providers. Avalara may also engage with third party service providers who help us understand how our customers are using Avalara’s Services.
Avalara uses your data to provide you with and improve upon the Services that you or your company requests, to communicate with you, and to advertise to you through third party publishers.
Providing and Improving Avalara’s Services. Avalara uses the data you provide, or data that we collect when you use our Services, to operate our Services, provide you with the Service that you or your company has requested, and to continually improve our Service offerings, internal systems, website, and processes. We may use your data to authenticate your ability to access and use the Services. We also use your data to detect and prevent fraud, protect the security of our website and Services, and enhance the safety of our Services.
We may also use data provided by you or collected by third party service providers or partners on our behalf to troubleshoot or provide customer support.
We may also use your data to plan and host corporate events, including online webinars.
We also use personal information in an aggregate form (i.e., not individually attributable to you) for business analysis, operational, marketing, and other promotional purposes.
After your account becomes inactive (that is, if you request to be removed from our database), Avalara will keep your personal information in its archives. Your information will then be used only as necessary for tax reasons or to prove Avalara’s compliance with any applicable law.
Communicating with you. Avalara’s website allows you to download white papers, fill out forms for more details about our Services, and to engage with us via our chat functionality. You can also register to attend online seminars or in-person events. We use this information to provide you with the material you requested, to follow up with you about your interest in the Services, or to register you for the event you request. We may also use personal data to understand you and your preferences so that we may enhance your experience and send you information about Avalara, our affiliates, and our partners, such as information about promotions or events.
Avalara may also receive personal data from other sources, including third parties from whom we have purchased data, and combine this with the data we already have about you. This helps us to update, expand and analyze our records, identify new customers, and create more tailored advertising to provide products and services that may be of interest to you.
If you follow or like Avalara on third party social media sites, we can see your public profile and may direct advertising to you.
Advertising. We may use data collected via cookies and other technologies to manage our advertising on other sites or to provide you offers or advertisements based upon your browsing activities and interests. For more details please see the Cookies and Other Technologies section below.
Legal bases for processing (EEA users). We collect and process information about users based in the European Economic Area where we have a basis to do so under applicable law. Avalara relies on one of the following four legal bases for processing your data:
Affiliates and Subsidiaries. We may share your data with our subsidiaries and affiliates (those entities under common control) to provide the Services you request, such as customer support, marketing, technical operations, and account management purposes.
Avalara Partners. Avalara’s extensive partner network provides a broad range of integrations that enable our Services to interconnect with third party software. We may share your data with these partners to support our mutual customers. We may also share your data with our partners who co-sponsor events that you choose to attend.
Billing. Avalara uses a third-party service provider to manage credit card processing. This service provider is not permitted to store, retain, or use billing information except for the sole purpose of credit card processing on our behalf.
Compelled Disclosure. Avalara reserves the right to share your data if required by law or to comply with a judicial proceeding, court order, or valid legal process. We may also disclose your data to protect the rights and property of Avalara, our agents, employees, partners and customers, including to prevent or stop an attack on our systems or network or to prevent spam or attempts to defraud our users. Finally, we may also need to disclose your data in connection with or during the negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction or proceeding involving the sale, transfer, divestiture or disclosure of all or a portion of our business or assets to another company.
Managing personal data. Avalara provides different accounts with varying functionality depending on the Services users access. Avalara accounts generally permit you to update your user settings or profile by logging into the applicable website or Service with your username and password. If you do not have an account but wish to make a request to manage your data, you can contact Avalara using the information in the “Contact Us” section below.
Requests to manage your data (including to update or correct your personal data) will be addressed within a reasonable timeframe. If you are an employee of an Avalara customer, you may also wish to contact your company’s system administrator for assistance in managing your data.
California residents can review Avalara’s California Consumer Privacy Act disclosures here
Avalara may process and store your data in your region or we may transfer it to the United States or to other countries in which we have affiliates, subsidiaries, or service providers. You can find a list of our global offices here. We may transfer data from the European Economic Area and Switzerland to other countries and, when we do, we use legal mechanisms like contracts to make sure there is an adequate transfer mechanism in place.
Avalara sets cookies and uses other technologies to do the following:
When you navigate our website, we may collect standard data from your web browser related to the use of our website, such as your computer’s operating system type and version, Internet protocol (IP) address, access times, browser type and language, and the websites you visited before coming to our website. We may then associate this data with the cookie Avalara sets.
Most browsers provide controls to block or delete cookies. Please refer to your browser settings to manage cookies.
Avalara takes seriously the trust you place in us. To prevent unauthorized access or disclosure, to maintain data accuracy, and to ensure the appropriate use of the information, Avalara utilizes reasonable and appropriate physical, technical, and administrative procedures to safeguard the information we collect and process. We retain data only as required or permitted by local law and while it has a legitimate business purpose.
We offer the use of a secure server. All supplied sensitive/credit information for the DAVO by Avalara Service is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our payment gateway providers database only to be accessible by those who are authorized with special access rights to such systems and required to keep the information confidential.
After a transaction, your private information (credit cards, social security numbers, financials, etc.) will not be stored on our servers.