U.S. State Supplement to Zuora Privacy Statement

The following information shall serve to supplement (“Supplement”) the Zuora Privacy Statement (“Statement”) by explains how Zuora Inc. (“Zuora”) collects, processes, and shares personal information of residents covered by State Privacy Law.  For the purposes of this Supplement, “State Privacy Law” means collectively, all United States state privacy laws and their implementing regulations, as amended or superseded from time to time, that apply generally to the processing of individuals’ personal information and that do not apply solely to specific industry sectors (e.g., financial institutions), specific demographics (e.g., children), or specific classes of information (e.g., health or biometric information). State Privacy Laws include the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (California Civil Code §§ 1798.100 to 1798.199) (“CCPA”).  The terms “personal information”,  “sale”, “selling”, “share” and “sharing” will have the meaning under the CCPA.  Unless defined specifically in this Supplement, capitalized terms shall have the meaning set forth in the Statement.

Personal Information Zuora Collects, Processes and Shares under State Privacy Law

We collect and process personal information, and have for the preceding 12 months, including the following:

– If you request product information or customer support, or if you register to receive newsletters or other promotional material, we may collect your personal information including name, work e-mail, employer name, job title, work phone number, work location, and IP address in response to a request. We may also collect personal information if someone refers you to us or if you refer someone to us to receive information about our products and services.

– If you submit information to us, such as filling out a survey about your user experience.

– If you use social media features or interact with our Site (e.g., “like” or “share” buttons), we collect your personal information. The other website may also collect your personal information. Your interactions with the other site’s features are subject to the terms of the company providing the site.

Our sources of personal information may include: 

• You, such as through your use of our Site, products, or services;
• Our affiliate companies or third parties; and  
• Referring individuals who think you may be interested in our products or services.

We disclose your personal information to third parties as required for business purposes or under applicable law, including: 

• Our affiliates, contractors, vendors or third parties who process personal information on our behalf; 
• Channel partners such as distributors and resellers; and 
• Any parties to whom we are legally required to disclose your personal information.

Categories of Data and Business Purpose

Zuora collects and processes, and has for the preceding 12 months, the following categories of personal information about California residents:

Zuora does not collect sensitive personal information in its capacity as a controller and therefore does not disclose Sensitive Personal Information for purposes other than permitted under applicable State Privacy Law. 

We may use your personal information, including for the following purposes to: 

• Respond to requests or product inquiries, and to provide services or support; to provide security and safety of the site, our IT and users of the site, and also to prevent and detect fraud; 
• Provide a customized web experience, including tracking your activities to understand site usage and improve the content and offerings of the website; 
• Operate our business, which includes analysis of our website performance, research, and improvement and development of our products and services; and 
• Comply with and enforce legal and contractual obligations.

Sale of Personal Information

We do not sell or share personal information and thus, we do not offer an opt-out.  However, should this practice change, Zuora will provide specific notice and an opportunity to opt-out.

Your Consumer Rights 

Depending on your location and subject to applicable State Privacy Law, you may have the following rights with regard to your personal information: 

1. Request disclosure, free of charge, the following information (if applicable) covering the preceding 12 months regarding:

• The right to know what personal information, if any, we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, and the business or commercial purpose for such activities. 
• The right to access a copy of your personal information in a portable format.
• The right to delete personal information provided by you or obtained from you, subject to certain exceptions.
• The right to correct inaccurate personal information that we maintain about you.
• The right not to receive discriminatory treatment from us for exercising your rights under applicable State Privacy Law.

1. Request deletion of personal information Zuora collected from you, subject to certain conditions and limitations under the law; and

1. Be free from unlawful discrimination for exercising your rights under the State Privacy Law.

How To Exercise Your Rights

You may submit a request by contacting us at support@zuora.com. For security purposes, we may request additional information to verify your identity before further action is taken on your request.

Contact Us

If you have any questions regarding this Supplement, you may write to us at privacy@zuora.com.

Date: January 1, 2023