·Hootsuite Self-Serve Terms of Service

·Last modified: July 29, 2025

·Please review these terms (the "Agreement") carefully. By accessing or using the Self-Serve Services offered by Hootsuite Inc. ("Hootsuite", "we", "us" or "our"), you are confirming that you have read, understand and accept this Agreement. This Agreement can be updated from time to time as set out in Section 40 below. You are responsible for regularly reviewing the most current version of this Agreement, which is published at: https://www.hootsuite.com/legal/terms, though we will notify you of any changes that, in our sole discretion, materially impact this Agreement. Continued use of the Self-Serve Services after any such changes have been made will constitute your consent to such changes. When we change this Agreement, we will update the "Last Modified" date above.

·This Agreement applies to the "Self-Serve Services", which are services that you access or purchase through our website or mobile applications (this does not include Hootsuite's Enterprise and Business plans), as further defined below. The terms that apply to Hootsuite's Enterprise and Business plans are available at https://www.hootsuite.com/legal/enterprise-terms. Other terms may also apply to your use of the Self-Serve Services, such as the Acceptable Use Rules and the App Directory Terms of Use.

·By using the Self-Serve Services, you confirm that:

AA. You will only use the Self-Serve Services for business and professional reasons and not for individual purposes (e.g. personal, family or household purposes);

BB. You are at least 18 years old or otherwise able to enter into a legally binding agreement;

CC. You accept and will comply with this Agreement;

DD. If you are using the Self-Serve Services as a representative of an organization, you have the power to enter into legally binding agreements for the organization; and

EE. You are responsible for anyone that uses the Self-Serve Services through your account, such as your employees, consultants or contractors ("Authorized Users").

·Hootsuite Terminology

11. We use capitalization for terms that have a special meaning in this Agreement. While some terms are defined elsewhere, this section sets out the definitions of some key terms.

·"AI Powered Services" are product features accessible in the Self-Serve Services offering artificial intelligence capabilities as further described in the Hootsuite AI Terms (published at www.hootsuite.com/legal/ai-terms).

·Ads Content" is Customer Content that you or your Authorized Users provide in connection with your creation, posting, or management of paid advertisements on a Social Network.

·"Content" is a generic term that means all information and data (such as text, images, photos, videos, audio and documents) in any format that is uploaded to, downloaded from or appears on the Self-Serve Services.

·"Customer Content" is Content that you or your Authorized Users provide to us, or upload to the Self-Serve Services.

·"Third Party Content" or "Mentions" are any Content that a third party (in other words, someone other than you, your Authorized Users or Hootsuite) creates (or otherwise originating from or belonging to a third party) and that we obtain from Social Networks or other Third-Party Services. For example, without limitation, (a) Mentions includes posts created by your followers that appear on your Facebook page; and (b) Third-Party Content includes Content obtained from Third-Party Services as part of an analysis or query conducted by you via a social listening feature of the Self-Serve Services.

·"Self-Serve Services" means our websites, such as hootsuite.com (and all its current and future subdomains), and mobile applications, and any services that you access or purchase through our websites or mobile applications, but do not include (a) Hootsuite's Enterprise and Business plans, which are governed by different terms; or (b) Third-Party Services (see below for how we define those) that you access or use in connection with our services.

·"Third-Party Services" are services that are not provided by Hootsuite but that you may access or use in connection with the Self-Serve Services. They include, without limitation, the "Social Networks", which are the social networking sites supported by the Self-Serve Services (such as X (formerly Twitter), Facebook, LinkedIn and Instagram), any extensions and applications available in the Hootsuite App Directory (http://apps.hootsuite.com); and any other third parties from which we obtain, collect and process Mentions and/or Third-Party Content.

·"you", "your", "Customer", and similar terms mean the person or legal entity accessing or using the Self-Serve Services. For the avoidance of doubt, if you are accessing and using the Self-Serve Services on behalf of a company (such as your employer) or other legal entity, "you", "your" or "Customer" means the company or other legal entity that you are using the Self-Serve Services on behalf of.

·Hootsuite's Self-Serve Services

22. Subject to the rest of this Agreement, we will allow you and your Authorized Users to access and use our Self-Serve Services in the way set out in the plan you subscribed to. You may not use or access the Self-Serve Services in any other way, such as using robots, spiders, crawlers and scraping technologies.

33. The Self-Serve Services evolve constantly. We may change the Self-Serve Services, such as by changing, adding or removing features at any time, for any reason. We may or may not provide notice of those changes to you. We will not be liable to you or any third party for the modification, price change, suspension or discontinuance of any of the Self-Serve Services.

44. The Self-Serve Services interact with Third-Party Services and depend on the availability of those Third-Party Services and the features, functionality and Third-Party Content they make available to us, which we do not control and may change without notice. If at any time a Third-Party Service stops making some or all of its features,functionality or Third-Party Content available to us, or available to us on reasonable terms as determined at any time by Hootsuite in its sole discretion (each an "Third-Party Services Change"), we may at any time at our sole discretion stop providing access to those features,functionality or Third-Party Content and we will not be liable to you or any third party for any such change.

·Acceptable Use Rules

55. You and any Authorized Users using your account must comply with the Acceptable Use Rules (including, without limitation, prohibiting use of the Enterprise Services for law enforcement, surveillance, tracking, etc. as further described in Section 2.1 of the Acceptable Use Rules) and all laws. If we reasonably believe that you have breached the Acceptable Use Rules or any applicable law, we may, at any time and without notice, remove any of your Content and suspend, restrict or terminate your account or your access to the Self-Serve Services.

·Customer Content

66. You are solely responsible for Customer Content. We may, but do not have to, review, filter, block or remove Content, including Customer Content.

·Submitted Content

77. If you use the Self-Serve Services for contests or otherwise ask people to submit Content through the Self-Serve Services ("Submitted Content"), you acknowledge and agree that:

·(A) the Self-Serve Services do not help you comply with any laws, rules, or regulations that may apply to your collection or use of Submitted Content, which is solely your responsibility; and

·(B) we will not be liable to you or any third party for the Submitted Content, and we make no warranty that any Submitted Content obtained or displayed through the Self-Serve Services is accurate or complete.

·Account Information

88. You are responsible for the completeness, security, confidentiality and accuracy of the account information you provide to us. You will promptly notify us of any unauthorized access to or use of your log-in credentials or account.

·Content and Third-Party Services

99. We are not responsible for Content provided by others, including Mentions and Content from Third-Party Services (such as Content from Social Networks and Content in apps from the App Directory). You and anyone else who accesses the Self-Serve Services may access Content that might be unlawful, offensive, harmful, inaccurate or otherwise inappropriate. We will not be liable to you for any third party for Content provided by others.

1010. If you access or purchase a Third-Party Service through the Self-Serve Services, you do so at your own risk. Your relationship with the Third-Party Service provider is an agreement between you and them. You specifically understand that we are not responsible for Third-Party Services and will not be liable to you or any third party for any losses or damages resulting from your use of Third-Party Services.

1111. If you access or enable a Third-Party Service, you grant them permission to access or otherwise process your data as required for the operation of the Third-Party Service. We are not responsible for disclosure, use, change to or deletion of your data and will not be liable to you or any third party for access to your data by a Third-Party Service.

1212. When you access the App Directory and install or use one or more apps available there, you also agree to the App Directory Terms.

1313. We may, but do not have to, preview, verify, flag, modify, filter, block or remove Third-Party Services. You must comply with all agreements and other legal requirements that apply to Third-Party Services.

1414. If you use the Self-Serve Services to create and manage Ads Content on any Social Network, the Hootsuite Ads Terms published at www.hootsuite.com/legal/ads-terms also apply to and govern that use.

·Privacy & Data Protection.

1515. We may process certain information about you and individuals associated with you, such as your employees, in connection with your use of the Self-Serve Services. This includes account information, usage data, and customer support questions as further described in our privacy policy (www.hootsuite.com/legal/privacy). If your use of the Self-Serve Services requires a Data Processing Addendum ("DPA") with Hootsuite, you may enter into a DPA by visiting www.hootsuite.com/legal/data-processing-addendum to access a pre-signed DPA. Once we receive your signed DPA, this becomes legally binding and forms a part of this Agreement.

·Confidentiality

1616. If we share non-public information about Hootsuite or the Self-Serve Services with you, you must keep it confidential and use reasonable security measures to prevent unauthorized disclosure of or access to that information.

·Intellectual Property

1717. Customer Content. You retain your rights to any Customer Content you submit, post or display on or through the Self-Serve Services. You grant us a non-exclusive, worldwide, perpetual, irrevocable, transferable, sublicensable, royalty-free license to use, host, run, copy, reproduce, process, adapt, translate, modify, publish, transmit, display and distribute Customer Content for the purposes of providing, supporting, enhancing, and developing our products and services.

1818. Feedback. We welcome your suggestions, comments, bug reports, feature requests or other feedback ("Feedback"). We do not have to keep Feedback confidential, even if you tell us it is confidential. If you provide Feedback, you grant Hootsuite a non-exclusive, worldwide, perpetual, irrevocable, transferable, sublicensable, royalty-free, fully paid-up license to use the Feedback for any purpose.

1919. Self-Serve Services. We keep all rights and interests in the Self-Serve Services. The Self-Serve Services contain Content owned or licensed by Hootsuite ("Hootsuite Content"). Hootsuite Content is protected by copyright, trademark, patent, trade secret and other laws, and, as between you and Hootsuite, we own and retain all rights in the Self-Serve Services and in any Hootsuite Content.

·Payment Terms, Trials and Renewal

2020. Fees and Trials. You must pay all fees for the Self-Serve Services you purchase, except for Self-Serve Services that we expressly offer free of charge. If you sign up for a free trial of a paid Self-Serve Service, we may require you to provide a valid credit card or other payment method. We will charge you automatically on the first day after the free trial is over, unless you cancel or downgrade to a charge-free service and uninstall any paid apps before the end of the free-trial period.

2121. Paid Services. The Hootsuite Online Payment Terms apply to your purchase of any paid Self-Serve Services.

2222. Auto-Renewal of Self-Serve Services. Self-Serve Services plans will renew automatically at the end of the term (which may be monthly or annually, depending on the plan you chose when you purchased the Self-Serve Services), and we will automatically bill you on renewal unless you cancel or downgrade the Self-Serve Services under Section 24 below.

2323. Taxes. You are responsible for paying all taxes on all fees that you pay to us. Local taxes may differ based on your payment method.

·Cancellation and Termination of Self-Serve Services

2424. You may cancel or downgrade your Self-Serve Services plan at any time by following the steps outlined here: https://help.hootsuite.com/hc/en-us/articles/1260804249650. If you cancel (or downgrade) paid Self-Serve Services, you must continue to pay for the rest of your plan term and you are not entitled to a refund.

2525. We may refuse to provide service (including the Self-Serve Services) to anyone for any reason at any time. We may also immediately suspend or terminate your access to the Self-Serve Services for any reason, at any time, without notifying you in advance. If we terminate this Agreement because you violated the Acceptable Use Rules or any other part of this Agreement, you will not receive a refund. If we terminate your access to the Self-Serve Services under this section for no reason, we will refund you for the Self-Serve Services you have not yet received.

·Disclaimer of Warranties and Limitation of Liability

2626. We offer the Self-Serve Services "as is" and are not making any warranties, conditions, representations or guarantees of any kind, whether express, implied, statutory or otherwise, including all express or implied warranties of design, merchantability, fitness for a particular purpose, title, quality and non-infringement, that the Self-Serve Services, any Third-Party Services or any Third-Party Content will meet your requirements or that the Self-Serve Services, any Third-Party Services or any Third-Party Content will always be available, accessible, uninterrupted, timely, secure, accurate, complete or error-free. Use the Self-Serve Services at your own risk. You hereby release us and our affiliates and the directors, officers, employees, agents, licensors and service providers of Hootsuite and our affiliates (the "Hootsuite Parties") from any claims, known or unknown, you have against them.

2727. We will not be liable for indirect, punitive, incidental, special, consequential or exemplary damages, or for loss of profits, goodwill or data or other intangible losses, that result from the use of, or inability to use, the Self-Serve Services or any other aspect of this Agreement. Under no circumstances will we be liable for any Third-Party Services, Third-Party Content, Social Networks or activities of third parties, any connection to or transmission from the Internet, or for any damage, loss or injury resulting from hacking, tampering, theft or other unauthorized access to or use of the Self-Serve Services or your account or the information contained in your account, including Customer Content.

2828. Our aggregate liability to you for all losses or damages arising out of this Agreement or your use of the Self-Serve Services, even if we have been advised of the possibility of such losses, will not exceed the greater of (a) the fees we received from you for the Self-Serve Services that are subject to the claim during the three-month period immediately preceding the date on which the damages arose; or (b)USD$100. The limitations of liability in this section also apply to the Hootsuite Parties and to claims brought based on any cause of action, including breach of contract, tort (including negligence), statute or other legal or equitable theory. If there is a law that limits how the limitation of liability in this section applies to you, our liability will be limited to the fullest extent permitted by law.

2929. No advice or information, whether oral or written, obtained from us or elsewhere will create any warranty or condition not expressly stated in this Agreement.

3030. Our prices are set based on limitations of liability and the disclaimers of warranties in this section. You acknowledge that they will survive and apply even if found to have failed their essential purpose.

3131. If you are dissatisfied with the Self-Serve Services or believe that you've been harmed by your use of the Self-Serve Services or this Agreement, you may terminate your use of the Self-Serve Services (as set out above). That termination is your sole and exclusive remedy (and our sole and exclusive liability) under this Agreement.

·Claims and Disputes

3232. The laws of the Province of British Columbia and Canadian law applicable in British Columbia will govern any dispute, cause of action or claim arising out of this Agreement or your use of the Self-Serve Services, including against any Hootsuite Party ("Dispute"), without giving effect to conflict-of-law principles.

3333. You will indemnify and hold harmless the Hootsuite Parties from and against all losses, damages, penalties, liability and costs, including reasonable legal fees, of any kind or nature related to any claim against a Hootsuite Party related to: (a) Customer Content, Ads Content or Submitted Content; (b) your breach of this Agreement or any laws; or (c) your use of the Self-Serve Services or any Third-Party Services (including your breach of terms for any Third-Party Services).

3434. If you breach this Agreement or violate our rights or another person's rights, we may ask a court to stop you; if we bring a claim against you, you will reimburse us for our reasonable legal fees for that claim.

3535. If you have any kind of Dispute with us, the exclusive means of resolving it will be by confidential, binding arbitration before a single arbitrator chosen by you and Hootsuite. You will give notice of your Dispute to us in writing. If we do not decide together on an arbitrator within 15 days after we receive that notice, we both agree to ask the British Columbia International Commercial Arbitration Centre (BCICAC) to appoint one for us. The arbitration will take place in Vancouver, British Columbia, under the Arbitration Act (British Columbia), and will follow the Domestic Commercial Arbitration Rules of the BCICAC. The arbitrator will have the right to decide how the costs should be divided between us. The arbitrator will have the right to accept whatever kind of evidence they think is appropriate and will have the right to make whatever award they consider fair and equitable, based on legal and equitable principles, including giving an order such as an injunction (to stop one of us from doing something) or an order that you or we pay damages to the other. The arbitrator's award can be entered into the registry of the British Columbia Supreme Court in Vancouver, British Columbia, and enforced in the same way as a court order if the court in the enforcing jurisdiction allows.

3636. Any Dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated or representative action. Hootsuite and you each waive any right to a trial by jury.

·Miscellaneous

3737. Export Compliance. You will not use or access the Self-Serve Services if you are located in any jurisdiction in which the provision of our Self-Serve Services is prohibited under Canadian, U.S. or other laws (a "Prohibited Jurisdiction") and you will not provide access to the Self-Serve Services to any government, entity or individual located in any Prohibited Jurisdiction. You confirm that you are not named on any Canadian or U.S. government list of persons or entities prohibited from transaction with any Canadian or U.S. person; (b) you are not a national of, or a company registered in, any Prohibited Jurisdiction; (c) you will not allow Authorized Users to access or use the Self-Serve Services in violation of any Canadian, U.S. or other export embargoes, prohibitions or restrictions; and (d) you will comply with all laws regarding the transmission of data exported from the country in which you (or your Authorized Users) are located to Canada and the United States.

3838. Beta Testing. From time to time, we may offer you the opportunity to install, use and test certain Hootsuite services prior to their commercial release ("Beta Services"). Use of the Beta Services is optional. If you use any Beta Services, the Hootsuite Beta Terms published at www.hootsuite.com/legal/beta-terms apply to and govern those Beta Services.

3939. AI Powered Services. If you use any AI Powered Services, the Hootsuite AI Terms published atwww.hootsuite.com/legal/ai-terms also apply to and govern that use.

4040. Amendment. We may change any part of this Agreement (including any terms or documents incorporated by reference in this Agreement) at any time by posting the revised terms on the Hootsuite website, and your use of the Self-Serve Services after the effective date of the updated Agreement or other terms constitutes your agreement to the updated Agreement or other terms, as applicable. It is important for you to review this Agreement before using the Self-Serve Services and from time to time. The updated Agreement will be effective as of the time of posting, or on such later date as may be specified in the updated Agreement, and will apply to your use of the Self-Serve Services from that point forward.

4141. Assignment. You may not assign your rights under this Agreement to anyone else. We may assign our rights to any other individual or entity.

4242. Severability. If a court finds part of this Agreement to be invalid, the rest will continue to apply with the minimum changes required to remove the invalid part.

4343. Force Majeure. We will not be liable to you or any third party for any failure to perform our obligations under this Agreement if that failure results from any cause beyond our control, such as the elements; fire; flood; severe weather; earthquake; vandalism; accidents; sabotage; power failure; denial of service attacks or similar attacks or other acts of hackers; Internet or network failures or interruptions; acts of God and the public enemy; acts of war; acts of terrorism; riots; civil or public disturbances; strikes, lockouts or labor disruptions; any laws, orders, rules, regulations, acts or restraints of any government or governmental body or authority, civil or military, including the orders and judgments of courts; or if another person (including a Social Network) changes their services or terms or no longer offers their services to you or Hootsuite on terms we believe are reasonable.

4444. Remedies. If we fail to enforce this Agreement, we are not waiving our right to do so. Any remedies we have under this Agreement are not exclusive of any other remedies we may have under this Agreement, at law or otherwise.

4545. Notices to You. Hootsuite may give notice to you by placing a banner notice on the Hootsuite platform or Hootsuite's website. We may also contact you or your Authorized Users through your Hootsuite account or contact information you provide, such as email or telephone or through your account on one or more Social Networks. If you fail to maintain accurate account information, such as contact information, you may not receive critical information about the Self-Serve Services or this Agreement.

4646. Notices to Hootsuite. For any notice to Hootsuite that you give under or regarding this Agreement, you must notify Hootsuite by email to legal@hootsuite.com with a duplicate copy sent via registered mail to the following address: Hootsuite Inc., 111 East 5th Ave, Vancouver, BC, V5T 4L1; Attention: Legal Department.

4747. Entire Agreement. This Agreement, including the other documents referred to as applicable to the Self-Serve Services in this Agreement, is the entire agreement between you and Hootsuite for your use of the Self-Serve Services. Any prior understandings, statements or and agreements (oral or written) (including any prior non-disclosure or confidentiality agreements or similar) do not apply, including additional terms that you may present (such as terms in a unilateral notice from you to us or printed on a purchase order or any other document generated by you). This Agreement is binding on the parties and their permitted successors and assigns.

·Hootsuite Privacy Policy

·Last Updated: May 2nd, 2025

·Hootsuite Inc. and its affiliates (collectively, "Hootsuite") are committed to protecting your privacy and complying with applicable data protection laws. This Privacy Policy provides information on how we manage information about you.

11. What this Privacy Policy covers

·This Privacy Policy outlines how Hootsuite collects, uses, shares, and safeguards information about you when you use our Services, visit our websites, use our mobile applications, and otherwise interact with you. We also describe the choices you have about your information. If you're independently publishing information on social media and other websites without using our Services, please refer to our Author Privacy Policy which explains how we process data for our Listening Services.

·Collectively, we refer to the Hootsuite, Talkwalker, Sparkcentral, and Heyday platforms as our "Services".

·Hootsuite Services

·Hootsuite's social media management platform allows you to bring together all of your social media accounts for easy access and management. Through this online platform, you can manage your social media, marketing, and advertising campaigns; engage with your audience; schedule and publish messages; manage customer care communications; monitor your brand and other brands; and analyze the results of these activities. We also offer training services through Hootsuite Academy.

·Hootsuite's affiliates also provide the following services:

·Talkwalker Services

·Talkwalker's social listening and consumer intelligence services are provided by Talkwalker S.à.r.l., in Luxembourg, and its affiliates. Talkwalker gathers real-time data across social channels and the web to provide its customers with comprehensive insights and data-driven solutions to optimize their social media strategies, uncover hidden trends, discover new audiences, and be crisis-ready.

·Sparkcentral Services

·Sparkcentral's social customer care solutions are provided by Sparkcentral Europe NV, in Belgium and Sparkcentral, Inc., in the US. This solution allows you to unify your customer conversations in an interactive dashboard. You can resolve customer problems more quickly, and automate, prioritize and triage conversations across multiple messaging channels or social networks.

·Heyday

·Heyday's social commerce solutions are provided by Heyday Technologies Inc., in Canada. Heyday uses a conversational AI platform that connects messaging apps with e-commerce platforms, enabling brands to engage their customers and sell directly in-chat - turning more conversations into conversions. Heyday integrates with branded websites and apps, e-commerce platforms, product feeds and order tracking management systems to meet customers with always-on virtual support and personalized recommendations that boost engagement and conversions.

·Our Customers' use of the Services

·When providing Services to our customers we may process personal information as a processor or service provider under the terms of the agreement we have entered into with them. In this situation, our customers are responsible for the processing of this information and individuals may reach out to those customers directly for any questions or concerns about the processing of their information.

22. Information we collect and how we use it

·We collect information about you when you use our Services, visit our websites, and interact with us in a business context. Information may be collected when you provide it to us directly, or automatically when you use the Services and websites. We may also collect data from other sources, including those that are publicly available or from third-party data providers.

·Using our Services

·Hootsuite collects information to provide you with our Services and to improve our service offerings. We collect contact, account, and preference details for account setup, personalization, and communication. Billing, Services plan, and business data help us manage our Services. We process Content, social profile, and messaging data to facilitate your use of our Services. Lastly, logs, usage data, and customer support data allow us to maintain security, resolve support issues, and improve our Services. Type of Information | Purpose Account Information

·Surveys, events, marketing and other activities

·Hootsuite collects information for surveys, events, and marketing efforts. We collect registration details to manage events and webinars, while feedback and opinions help us refine our products and services. We use recordings for quality assurance purposes and help us make improvements. Our interaction with you on social media and by email helps us evaluate and improve our marketing campaigns. Usage data from our website resources also guide us in improving these materials. We also gather employment-related information for hiring purposes through our careers site. Type of Information | Purpose

·Browsing our websites

·Hootsuite collects and utilizes user information from website browsing, including through chatbot interactions, cookies and tracking technologies, and website usage, to operate and maintain the websites, improve user experience, provide personalized marketing and advertising, enhance usability, and ensure security. Type of Information | Purpose

·Children's Privacy

·We do not knowingly collect personal information from children. Our Services are not intended for use by children and should only be accessed by individuals who are at least 18 years old and are using the Services for business purposes. If you believe we may have information from a child, please contact us.

33. Who we share your information with

·Hootsuite restricts access to your information to authorized employees and we do not share your information with third parties except in the circumstances explained below.

·Employees and Authorized Contractors

·Our employees and authorized contractors may access your information as necessary to fulfill their job responsibilities. For example, a customer support representative may access your account to validate your identity and respond to your question or request; our Marketing team may need access to your contact information to ensure information is sent correctly and unsubscribe requests are properly managed; and our Security team may need to review information related to the use of our Services to investigate suspected fraudulent account activity, or other attempts to compromise the Services.

·All our employees and contractors are obligated to protect the confidentiality and privacy of your information.

·Service Providers, Authorized Resellers, and Partners

·We will share information about you with authorized service providers to assist us with marketing and advertising, communicating with you, managing our customer database, professional services, and providing and managing the Services (including hosting data centers, securing our Services, and payment processing).

·We limit the number of service providers who are permitted to process your Content for the purpose of assisting us in providing the Services. Our AI-Powered Services leverage automated methods, including artificial intelligence and machine learning, to provide certain product features (e.g., to generate Content recommendations for your social posts, provide you with insights, and automating tasks). We refer to all of these service providers which process your Content as "Subprocessors."

·Where you have purchased Third-Party Services, or a service from an authorized reseller or partner, we may share information about you with the third party, reseller, or partner, as necessary to support your use of the service you purchased.

·When sharing your information with any of the above service providers, third parties, resellers and partners, we ensure they agree to obligations consistent with this Privacy Policy and any other appropriate confidentiality and security measures.

·We may also participate in and run marketing events (e.g., conferences, webinars, and provide resources) with sponsors and other organizations. Where the sponsors or other organizations wish to collect your information for their marketing purposes, we may facilitate this (e.g., information may be collected on the same registration form). However, the sponsors and other organizations will be conducting marketing activities independently under their own policies. We will provide an opportunity for you to share your information with the sponsors or other organizations for such purposes, either upon registration or during the event.

·Social Networks and Third-Party Services

·Social Networks

·Any collection, use, and management of personal information by the social networks, including Facebook, Instagram, X, and LinkedIn (collectively, the "Social Networks"), are governed by their respective privacy policies and terms. When using Social Networks, you are required to comply with their privacy policies and terms. Subject to this Privacy Policy, Hootsuite Services may use Google API Services (including YouTube API Services) to collect data from YouTube, Google My Business ("Google Reviews"), or Google Analytics. Further information may be found in the Google Privacy Policy. We recommend you carefully review their privacy policies and terms, as Hootsuite is not responsible for the Social Networks.

·Third-Party Services

·Our Services enable you to customize and connect your Hootsuite account to third-party services ("Third-Party Services"), including through apps you can access in the App Directory or which may be available to you through our platform. When you choose to connect a Third-Party Service to the Services, you are agreeing to provide your information to the Third-Party Service under their respective terms and privacy policies. When connecting with Google Workspace APIs, we do not use your data to develop, improve, or train generalized AI and/or ML models. We recommend you carefully review their privacy policies and terms, as Hootsuite is not responsible for Third-Party Services.

·Customer Organizations

·Where your employer or an entity has purchased Services on your behalf, we may disclose information about you such as your name and email address, and some usage information including whether a user has logged in to the Services, frequency of login, time spent using the Services, and enrolment and completion of Hootsuite Academy courses to assist your employer or the entity in managing its use of the Services.

·Successor and Affiliated Entities

·We may share information about you among Hootsuite-controlled affiliates and subsidiaries to provide the Services and for our general business purposes. Our affiliates and subsidiaries will protect your information in a manner that is consistent with this Privacy Policy and where applicable, in accordance with that entity's policies.

·We may also share or transfer your information if we are part of a corporate transaction such as a merger or acquisition or sale of assets. In such an event, we will inform those entities of the requirement to handle your information in accordance with this Privacy Policy.

·Government Authorities and other Legal Purposes

·We may need to disclose information about you where we believe that it is reasonably necessary to comply with a law or regulation, or if we are otherwise legally required to do so, such as in response to a court order or legal process, or to establish, protect, or exercise our legal rights or to defend against legal claims or demands. For governmental data access requests concerning you or your organization, we would first attempt to redirect the request to you and/or we would first attempt to notify you unless we are legally prohibited from doing so. Refer to our Government Data Request Policy for more details.

·In addition, we may disclose information about you if we believe it is necessary to investigate, prevent, or take action: (a) against illegal activities, fraud, situations involving potential threats to our rights or property (or to the rights or property of those who use our Services), or to protect the personal safety of any person; or (b) regarding situations that involve the security of our Services, abuse of the Services infrastructure, or the Internet in general (such as voluminous spamming, or denial of service attacks).

·Professional Advisors

·We use professional advisors, including lawyers and accountants, and may be required to disclose information about you when engaging them for their services and as necessary for audits, financial and other regulatory reviews.

44. How we safeguard your information

·Hootsuite maintains industry standard security safeguards to protect your information. This includes ensuring our employees receive appropriate security and privacy training and guidance so they are aware of the measures they need to implement to protect your information. Access controls are in place to limit access to your information to those who need it to perform their jobs. For example, information about you may be provided to our customer support representatives to help you with your requests. Individuals who are authorized to handle your information must adhere to confidentiality obligations. We encrypt data in transit and at rest, where appropriate, to ensure that your information is kept private. We undertake security and privacy reviews of our service provider to ensure that they follow our stringent requirements to safeguard your information, and we also enter into data protection agreements with our service providers. All payment information is fully encrypted and handled only by PCI certified organizations. More detailed information on our security practices is available in our Trust Center and the Hootsuite Security Practices webpage.

55. How long we retain your information

·We retain information about you only for as long as necessary to provide and manage our Services, to manage our business, and for financial and legal purposes. For example, we retain your draft and published social media posts in our product as long as you are using the Services as you may need to reference previous posts. More information on data retention for specific products can be found in the Hootsuite Help Center.

·After it is no longer necessary for us to retain information about you, or otherwise upon your request, we will dispose of your information in a secure manner or anonymize the information.

·Aggregated data is retained and used by Hootsuite for analysis, product improvement, and troubleshooting purposes. In some cases, social media content may continue to exist on the Social Networks even after you or we delete it from our Services, and you will need to contact the relevant Social Network directly if you would like to remove this content.

66. Your privacy rights and choices

·Your privacy rights

·Depending on the data protection laws that apply to you, you may have the right to:

• ·Access and obtain a copy of your information
• ·Request correction of inaccurate information Request deletion of your information
• ·Request that we transfer your information to a third party in a machine-readable format
• ·Object to our processing of your information, withdraw your consent, or ask us to restrict the processing of your information
• ·Opt out of certain disclosures of your information to third parties, including for targeted advertising purposes

·You also have the right not to be discriminated against for exercising any of these rights. If you would like to exercise any of your rights, such as access, correction, or deletion of your information, you may follow the steps below or email our Privacy team for assistance. We will handle your request within thirty (30) days unless it is unusually extensive or complex, in which case we will advise you of the expected timeline for handling your request. We may also ask for additional information to confirm your identity.

·Your privacy choices

·We explain the privacy choices available to you in the Services, when we send you marketing communications and when you browse our websites.

·Services information

·When using our Services, you may access, update, or correct most of your Account information by logging in to your account to edit your profile or organization records. For messaging content included in Inbox 2.0 and Sparkcentral services, you can delete information related to a contact, which is an individual who you have interacted with through these services, and it will delete the contact data along with their conversation history, attachments, and contact attributes.

·If you have requests that cannot be carried out through the use of the Services, such as accessing additional information or deleting information about you, please email our privacy team. Please note that we may need to retain certain information about you for as long as you maintain an account for our Services, to provide you with our Services, for record keeping purposes, for payment processing, to comply with our legal and regulatory obligations, to resolve disputes, or to enforce the applicable Terms of Service or other agreement in place between you and Hootsuite.

·If you have authorized us to access your Social Network account to provide the Services, you may revoke this access at any time by following the instructions here. For example, if you have authorized us to access your information via the YouTube API services, in addition to our normal procedure for deleting stored data, you may revoke our access to your information via the Google security settings page, located here.

·You can contact our Support team for other general requests about your account using your preferred method listed here.

·Marketing emails, advertising and website browsing

·For marketing communications, you may opt out by clicking on the unsubscribe link in the email you receive. Please note that if you are a user of our Services, unsubscribing from marketing communications will not affect product-related emails sent in connection with your use of our Services.

·For marketing communications sent by Hootsuite you may also opt out by accessing our Preference Center, or by completing the unsubscribe form.

·Hootsuite participates in interest-based advertising (where you may have visited our websites or another website which allows us to display advertising relating to our Services). The Network Advertising Initiative has developed a tool that may help you understand which third parties have currently enabled cookies for your browser and how to opt out of those cookies. For more information and to opt out of interest-based advertising, you can visit this page.

·For more information on how to opt out of marketing cookies, review our Cookie Notice.

77. International data transfers

·Our Services are managed by Hootsuite's headquarters in Canada. As the European Commission considers Canada to be a country which provides adequate data protection, information about you may be lawfully transferred from the European Economic Area ("EEA") to Canada. In addition, Sparkcentral's services are managed from Belgium, and Talkwalker's services are managed from Luxembourg. Amongst the Hootsuite corporate entities, we have incorporated appropriate data transfer mechanisms in accordance with European data protection laws.

·Hootsuite uses third-party service providers, such as managed hosting providers, credit card processors, and technology partners to provide the software, networking, infrastructure and other services required to operate the Services. These third-party service providers may process or store personal data on servers outside of the EEA, UK, and Switzerland. We rely on adequacy (if sent to Canada), and the EU-US Data Privacy Framework ("DPF"), the UK extension to the EU-US DPF, the Swiss-US DPF, or standard contractual clauses ("SCCs"), if sent to the US or onward to other countries, to ensure that information about you is lawfully transferred under European data protection laws. In the case of SCCs, we have implemented supplementary measures as outlined in the section "How we safeguard your information". The third-party service providers we use to help us deliver the Services and which process your Content are listed on this page.

·By its nature, social media data can be shared with people around the world. The Social Networks and Third-Party Services that you choose to integrate with our Services may collect, store, and process your information from various locations around the world according to their own terms and privacy policies.

88. Regional Privacy Notice

·GDPR and UK data protection laws

·Depending on the situation and the type of data involved, Hootsuite may act as a data controller or a data processor.

·Hootsuite as a data controller

·Hootsuite may act as a data controller when we are:

• ·Collecting information from you to set up and administer your Hootsuite account (for example, account information such as your name and email address);
• ·Monitoring usage information on our websites;
• ·Managing your contact and other related information to send marketing, sales, Services, and other communications to you;
• ·Responding to a support or general inquiry; and
• ·Recruiting individuals for job opportunities.

·Legal bases for processing when Hootsuite is a data controller

·The legal bases for processing information about you include:

• ·Your consent (for example, when you have provided your information to sign up for an account or for a webinar; or you have provided your employment history when applying for a job). Where we rely on your consent to process personal data, you have the right to withdraw your consent at any time.
• ·It is necessary to perform a contract (for example, we may need your information to fulfill our obligations of providing Services to you under the terms relevant to the Services you have acquired).
• ·Legitimate interest (for example, to provide, maintain and improve the Services for you, to maintain the security of the Services, and to attract new customers to maintain demand for the Services, all of which are described in the "Information we collect and how we use it" section above).
• ·In some cases, we may have a legal obligation to process your personal data to comply with relevant laws (for example, processing payroll and tax information to comply with employment and tax legislation); or processing is necessary to protect your vital interests or those of another person (for example, obtaining health-related information during a medical emergency).

·Hootsuite as a data processor

·Where you are using our Services and making decisions about the personal data that is being processed in the Services (including selecting the Social Network accounts you wish to connect to the Services, uploading and using Content, or defining your own search queries, filters and time frames for the listening services), you are acting as a data controller and Hootsuite is acting as a data processor. We rely on you to comply with applicable privacy laws when collecting, using, or disclosing information about individuals through the Services, including obtaining any necessary consents and providing any necessary notices.

·There are certain obligations under the GDPR and other data protection laws that you have as a data controller, including being responsible for managing Content on the Services. As a data processor, Hootsuite will only access and process Content to provide you with the Services in accordance with your instructions (which you provide through the Services), the Terms of Service, the Social Networks' terms, and applicable laws. As part of delivering the Services, we may process Content to further improve the Services, such as enhancing usability and developing new features.

·If you are a customer of the Services where Hootsuite acts as a data processor, we make available a data processing addendum ("DPA") to address requirements under the GDPR and UK data protection laws.

·If you are using the Services as an authorized user of a Hootsuite customer (whether that customer is your employer, another organization, or an individual), that customer determines its own policies (if any) regarding storage, access, modification, deletion, sharing, and retention of personal data and Content, which may apply to your use of the Services. Please check with that customer entity about the privacy policies it has in place.

·California Privacy Rights

·If you are a consumer as defined by the California Consumer Privacy Act ("CCPA") , this section applies to you and supplements our Privacy Policy.

·Information about your Personal Information

• ·The categories and specific types of personal information collected and sources from which personal information are collected are set out here.
• ·The business and commercial purposes for collecting personal information are set out here.
• ·The categories of third parties with whom your information is shared are set out here.

·Your Rights

·We have outlined certain rights in the section "Your privacy rights and choices"

·Under the CCPA, you have the following rights:

• ·The right to know about the personal information collected about you, which we have set out under "Information we collect and how we use it"
• ·The right to have your personal information deleted
• ·The right to correct inaccurate personal information
• ·The right not to be discriminated against for exercising consumer rights under the CCPA
• ·The right to opt-out of the "sale" or "sharing" of your personal information.

·You may access, update, or correct most of your Account information by logging in to your account; or you may exercise your rights by emailing our Privacy team.

·While we share or disclose personal information with third parties or service providers for the purpose of providing the Services, managing our relationship with you, and for personalized advertising purposes, we do not "sell" your personal information in the traditional sense. However, the definitions of "sale" and "sharing" under the CCPA may include the disclosure of your information to our advertising and marketing partners.

·You may opt out of the "sale" or "sharing" of your personal information for advertising purposes by clicking the Cookie Preferences link accessible from the Cookie Notice or at the footer of one of our main website pages and making your selection. If you require additional assistance to opt out of sharing, please email our Privacy team. We do not knowingly "sell" or "share" the personal information of individuals under 16 years of age.

·If you are a customer of the Services where Hootsuite acts as your service provider, we make available a DPA to address requirements under the CCPA and other US State privacy laws.

99. How to contact us

·If you have any questions, concerns or feedback, please email our Privacy team and Privacy Officer/Data Protection Officer at privacy@hootsuite.com; or send a letter to:

·Hootsuite Inc. 111 East 5th Avenue Vancouver, BC Canada V5T 4L1 Attn: Hootsuite Privacy Team

·If we are unable to resolve your concerns, you also have the right to contact your local data protection authority.

1010. Changes to this Privacy Policy

·We may make changes to this Privacy Policy at any time to reflect updates to our Services, applicable laws, and other factors. We will include a prominent notice on this website and/or our Services if we make any material changes, but we encourage you to stay informed by reviewing this page periodically.

·Previous Privacy Policies

·Previous versions