Privacy Policy

General Policy

This privacy policy (this “Privacy Policy”) describes how Tesorio, Inc. (“Tesorio”, “we,” “us,” or “our”) collects, uses, maintains, protects and discloses information about you when you visit our websites www.tesorio.com, dashboard.tesorio.com and pay.tesorio.com (collectively, the “Websites”) or access or use our proprietary cash flow management platform (the “Platform”), accessible on our Websites through a log-in portal, and our related support and professional services (together with the Platform, the “Services”).

Our customers are the businesses that subscribe to the Platform (“Customers”). If you use the Platform through a Customer’s account, including to view or pay a Customer’s invoices through our payment portal (pay.tesorio.com), you are an “End-User”. The Customer administers the Platform for its End-Users and is responsible for managing their accounts, so please direct your data privacy questions to the Customer, as your use of the Platform is subject to its policies. We are not responsible for our Customers’ privacy or security practices.

What We Collect And How We Use It

Categories of Sources of Personal Data

We collect personal data from the following categories of sources:

• Directly from you, when you provide it to us digitally or physically, including when you use the Websites or the Platform or contact us by email, instant messaging, telephone or any other means
• Our Customers, when you are an End-User within a Customer’s account or when a Customer uploads content containing personal data
• Service providers and other third parties, such as marketing partners, data brokers and the visitor identification partners described in the section Information Collected By Or Through Third-Party Advertisers

Contact Information

When you create an End-User account or use a form on the Websites (for example to contact us, request a demo or register for a webinar or other event), you will be asked to provide certain information, which may include your name, email address, phone number, company name, job title and enterprise resource planning provider (“Contact Information”). We may also receive Contact Information about you from third parties, such as data brokers and marketing partners.

When you submit a form on www.tesorio.com, the details you enter are sent to the service providers we use to handle form submissions, newsletter sign-ups and event registrations. If you have allowed Marketing cookies, Google and our demo platform also receive contact details you enter, and our visitor identification partners may receive information you type into a form, even if you do not submit it, as described in the section Information Collected By Or Through Third-Party Advertisers.

Billing Information

To purchase a subscription to our Platform, or to pay an invoice to a Customer through our payment portal (pay.tesorio.com), you may provide payment details such as your name, billing address and card or bank account details (“Billing Information”). Payments are processed by our third-party payment processor.

On our payment portal, card numbers and card security codes are entered into fields provided by our payment processor, and we do not receive your full card number or card security code. We receive the other Billing Information you enter and share it with our payment processor to process your payment.

Other Information

We may also collect the following information (“Other Information”):

1. From Your Activity

When you visit the Websites or use the Platform, we automatically receive certain technical information with each request, such as your IP address, browser type and language, the page requested, referring pages and URLs, and the date and time. We use this information to deliver the pages you ask for and to keep the Websites and Platform secure. On www.tesorio.com, information about how you use the site, such as the time spent on particular pages and which links you click, is collected through the cookies and tools described in items 3 and 4 below and in the section Information Collected By Or Through Third-Party Advertisers. When you sign in to or use the Platform, including its sign-in pages on dashboard.tesorio.com and pay.tesorio.com, our service providers record sessions, measure how features are used and may show in-product guidance, and third-party tools that run there, such as our payment processor’s, may set their own cookies, so that we can operate, secure, support and troubleshoot the Platform. The information we collect automatically may include Contact Information, and we may maintain it or associate it with Contact Information we collect in other ways or receive from third parties. We also collect internet or other electronic network activity information when you receive our sales and marketing emails, such as whether you open them and click links in them.

2. From Phone or Video Calls

We may record calls with your consent for quality assurance purposes. A recording contains audio information and, if your camera is on, visual information.

3. From Cookies and Similar Technologies

On www.tesorio.com, our cookie banner groups cookies and similar technologies (pixels, scripts and browser storage) into four categories:

• Necessary. These run without asking for your consent. They include Cookiebot (Usercentrics), which shows the cookie banner, remembers your choice and keeps a record of it; Google Tag Manager, which loads our site tags only as your choice allows; and the Vimeo and YouTube video players, which play the videos embedded on our pages. These services receive technical information such as your IP address, browser type and the page you are visiting.
• Preferences. Remember settings you choose on the site. We do not currently use any cookies or similar technologies in this category.
• Statistics. Help us understand how the site is used, as described in item 4 below.
• Marketing. Measure our advertising, identify visiting companies and people, and load our interactive product demos. These partners are described in the section Information Collected By Or Through Third-Party Advertisers, and the campaign details our own tags keep when you allow this category are described below.

On your first visit to www.tesorio.com, a banner asks which categories you allow. Until you click “Allow all cookies” or “Allow selection”, only Necessary cookies and tools run, so ignoring the banner, scrolling or clicking “Use necessary cookies only” does not start any advertising, analytics or visitor-identification technology. You can change or withdraw your choice at any time, as described in the section Do Not Sell or Share My Personal Information.

When you arrive from a link that carries campaign parameters or an advertising click identifier, we keep those values in your browser temporarily, so that a form you submit later in the same visit can record where your visit came from. Unless you allow Marketing cookies, these values leave your browser only inside a form you choose to submit. If you allow Marketing cookies, our own tags also keep these details, along with the landing page address, in first-party cookies and your browser’s storage, where they can remain after your visit until they expire or are cleared, so that forms you submit later can record where your visits came from. They also keep the address of the page that referred you to our site.

Cookies found by automated scans of www.tesorio.com are listed, with the provider, category, purpose and duration of each, at www.tesorio.com/cookie-declaration. You can also block or delete cookies in your browser settings, although blocking Necessary cookies may stop some features of www.tesorio.com from working.

Our help center (help.tesorio.com), security portal (security.tesorio.com) and AP Inbox page (poweredby.tesorio.com) run on platforms provided by other companies, which may use their own cookies and analytics on those sites and may receive information you submit there. For example, the company that provides our help center receives the messages you send us through it. If you request early access on our AP Inbox page, we receive the details you enter, such as your name, email address and company, and use them as described in the section Contact Information.

4. Third-Party Analytics Providers

If you allow the Statistics category in the cookie banner, the following analytics services run on www.tesorio.com:

• Google Analytics 4 (Google) receives information such as the pages you view, an identifier for your browser and your IP address. We use it to understand which pages are visited, how visitors arrive, how long they stay and what they click. For how Google uses information from sites that use its services, please visit www.google.com/policies/privacy/partners/.
• Microsoft Clarity (Microsoft) records how a visitor clicks, scrolls and moves between pages and produces heatmaps. We use Clarity to see how visitors move through www.tesorio.com and to find usability problems. For how Microsoft collects and uses data, please visit www.microsoft.com/privacy/privacystatement.

Information Collected By Or Through Third-Party Advertisers

If you allow the Marketing category in the cookie banner, we work with the advertising, visitor identification and demo platform partners described below on www.tesorio.com. They may place cookies or pixels in your browser and receive information such as the page you are on, identifiers for your browser, device or visit, click identifiers from ads and actions you take, for example submitting a form. These partners may collect information about your online activities over time and across different websites. We may also receive Other Information back from these partners, such as advertising identifiers, IP addresses, which ad brought you to our site and, from the visitor identification partners, the company or person they believe is visiting. What we do with this information is described in the section How We Use And Share The Information.

• Advertising measurement and audience partners. These tell us whether our advertising brings visitors and form submissions to www.tesorio.com, and some of them build audiences so that we can show you advertising after you leave www.tesorio.com, which is known as behavioral, retargeting or remarketing advertising. We currently use Google Ads, Meta and LinkedIn for this, together with review and comparison websites. When you submit a form, our Google Ads tags use Google’s enhanced conversions feature to send Google a hashed (scrambled) form of the contact details you entered, such as your email address, so that Google can match the form submission to an advertising click.
• Visitor identification partners. These attempt to work out which company, and in some cases which individual person, is visiting www.tesorio.com. They receive the pages you view and identifiers for your browser, device and visit, and may receive information you type into forms on the site, even if you do not submit the form. They combine this information with their own data about companies and people and report that identification back to us. This is how a visit during which you have not given us your details can become a named record in our sales systems.
• Interactive product demos. Some of our pages embed an interactive product demo from our demo platform, which loads only after you allow Marketing cookies. The demo platform records how you use the demo, may ask for your contact details before you continue, and connects your demo activity with your visits to www.tesorio.com and with contact details you submit in forms on the site.

You can opt out as described in the section Do Not Sell or Share My Personal Information. You can also set preferences for how Google advertises to you at adssettings.google.com, and opt out of interest-based advertising by participating providers at https://optout.networkadvertising.org, https://optout.aboutads.info and, if you are located in the European Union, https://www.youronlinechoices.eu/.

Information About Others

You may have the opportunity to provide contact information for other people or entities through our Websites. By providing Tesorio with such third party information, you warrant that you have obtained the consent of such third parties to give Tesorio such information.

Google Data Within Our App

Our Platform provides connectivity with Gmail in order for Customers to send emails from their Gmail account via the Platform. Notwithstanding anything else in this Privacy Policy, if a Customer provides our Platform access to Gmail, the Platform’s use of such data within Gmail will be subject to these additional restrictions:

1. The Platform will only use access to read, write, modify or control Gmail message bodies (including attachments), metadata, headers, and settings to provide a web email client that allows users to compose, send, read, and process emails and will not transfer this Gmail data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.
2. The Platform will not use this Gmail data for serving advertisements.

The Platform will not allow humans to read this data unless we have the Subscriber’s affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for the Platform’s internal operations and even then only when the data has been aggregated and anonymized.

Categories of Personal Information We Have Collected in Past 12 Months

In the past 12 months we have collected personal information in all the categories described in the sections above titled Contact Information, Billing Information, Other Information, Information Collected By Or Through Third-Party Advertisers, Information About Others, and Google Data Within Our App.

The personal information we share for advertising and measurement, and how to opt out, are described in the section Do Not Sell or Share My Personal Information.

How We Use And Share The Information

We use the Contact Information, Billing Information and Other Information (collectively, “Information”) to provide and improve the Websites, the Platform and our Services, and we use Contact Information and Other Information to solicit your feedback and to inform you about our products and services and those of our promotional partners. We also use and share Information as follows:

1. We will access, use, and share the Information as required to provide our Services to you and to address your questions or requests regarding the Websites, the Platform, Services, and/or support.
2. We may employ other companies and individuals to perform functions on our behalf, such as hosting, technical assistance, database management and back-up, payment processing, usage analytics, reporting and visualization tools, and customer service. The advertising, analytics, visitor identification and demo platform partners described above receive information as explained in the section Do Not Sell or Share My Personal Information.
3. We may use and share aggregated information that does not identify you, for example to operate and improve the Websites, the Platform and our Services or to describe them to current and prospective business partners.
4. We may share your personal information with our parent companies, subsidiaries, affiliates, joint ventures or other companies under common control with us, including to support the marketing, sale and delivery of our services.
5. In the event of a corporate sale, merger, reorganization, sale of assets, dissolution, or similar event, the Information may be part of the transferred assets.
6. To the extent permitted by law, we may also disclose the Information: (i) when required by law, court order, or other government or law enforcement authority or regulatory agency; or (ii) whenever we believe that disclosing such Information is necessary or advisable, for example, to protect the rights, property, or safety of Tesorio or others.

Do Not Sell or Share My Personal Information

Tesorio does not sell personal information in exchange for money. We do share identifiers with the advertising, analytics, visitor identification and demo platform partners described in the sections Third-Party Analytics Providers and Information Collected By Or Through Third-Party Advertisers, so that they can measure our advertising, build audiences so that we can show you our advertising after you leave www.tesorio.com, report on how www.tesorio.com is used, identify visiting companies and people, and connect your use of our interactive demos with your visits. The identifiers shared include cookie and device identifiers, your IP address, the pages you view, click identifiers from ads, contact details you submit in a form (for Google Ads enhanced conversions, in hashed form, and for our demo platform) and information you type into a form, even if you do not submit it (for visitor identification). Under California law, sharing identifiers with these partners for advertising and measurement may be treated as “selling” or “sharing” personal information.

These partners’ tools run on www.tesorio.com only after you allow the Statistics or Marketing categories in the cookie banner. You can opt out at any time in the following ways:

• Click “Do Not Sell or Share My Personal Information” or “Manage Cookies” in the footer of our web pages on www.tesorio.com. Both links open the cookie settings dialog, where you can leave the Marketing and Statistics categories unselected and save your selection. Your choice is saved immediately and applies in full once you reload the page. You can delete cookies already stored in your browser, including cookies that partners set on their own domains, in your browser settings.
• Turn on Global Privacy Control, a setting in some browsers and browser extensions that tells websites you do not want your personal information sold or shared (see globalprivacycontrol.org). When your browser sends this signal, we treat it as a valid request to opt out of sale and sharing for that browser: the Statistics and Marketing categories are turned off, even if you allowed them earlier, unless you allow them again after we tell you about the signal.

How Tesorio Protects Your Information

We take commercially reasonable steps to protect your Information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, we cannot guarantee the security of our databases or that your Information will not be intercepted while being transmitted to and from us over the Internet.

Choices About How We Use And Disclose Your Information

If you no longer wish to receive our newsletter or other promotional communications, you may opt out by using the unsubscribe link in those emails or by emailing us at privacy@tesorio.com.

Your choices about cookies and tracking technologies are described in the sections From Cookies and Similar Technologies and Do Not Sell or Share My Personal Information.

How You Can Access And Correct Your Information

End-Users can access their contact information by visiting the Account Settings page on the Dashboard once they have logged in or by writing to us at privacy@tesorio.com. Individual End-Users can deactivate their account by contacting us at deactivate@tesorio.com.

Deactivating an End-User account only removes the End-User profile, and we may retain certain information associated with the account in our archives, including for analytical and record-keeping purposes.

Visiting The Websites From Outside The United States

Tesorio is based in the United States. If you use the Websites or the Platform from outside the United States, your information may be transferred to, stored and processed in the United States and other countries where our service providers operate, whose privacy laws may not be as protective as those where you live.

External Websites

The Websites and the Platform may contain links to third-party websites. We have no control over the privacy practices or the content of those websites.

Children Under The Age Of 16

The Websites are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16, we will endeavor to delete that information.

Changes To This Privacy Policy

This Privacy Policy is effective as of the date stated at the top of this Privacy Policy. We may change this Privacy Policy from time to time, and any such changes will be posted on the Platform and Websites.

How To Contact Us

If you have questions about this Privacy Policy, please contact Tesorio via e-mail at: privacy@tesorio.com

Additional Information Regarding Data Subject Rights

If you are located in a jurisdiction that provides data subject rights, such as the EEA, the UK, Switzerland and certain US states, you may have additional rights in relation to your personal data:

• The right of access: your right to request a copy of the personal data we hold about you or request portability of your personal data
• The right to rectification: your right to request that we correct personal data about you if it is incomplete or inaccurate
• The right to erasure: under certain circumstances, you may ask us to delete the personal data we have about you (unless it remains necessary for us to continue processing your personal data for a legitimate business need or to comply with a legal obligation as permitted under the GDPR, in which case we will inform you)
• The right to restrict processing: your right, under certain circumstances, to ask us to suspend our processing of your personal data
• If we have collected and processed your personal data with your consent, the right to withdraw your consent. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent
• The right to object: your right to object to us processing your personal data (for example, if you object to us processing your data for direct marketing)
• Rights in relation to automated decision-making and profiling: your right, in certain circumstances, not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects for you, and our obligation to be transparent about any profiling or automated decision-making we do
• The right to opt out from the sale or sharing of your personal data
• The right to complain to a data protection authority about our collection and use of your personal data

To exercise any of these rights, email us at privacy@tesorio.com. Before we act on a request to access, correct or delete your personal data, we will verify your identity as described in the section Request Verification. We do not ask you to verify your identity to opt out of the sale or sharing of your personal data or to withdraw your consent. You can also opt out of advertising and analytics tracking on www.tesorio.com as described in the section Do Not Sell or Share My Personal Information, and opt out of marketing emails as described in the section Choices About How We Use And Disclose Your Information.

Right to Non-Discrimination

If you exercise your CCPA consumer rights, we will not deny you goods or services, charge you different prices or rates for goods or services (including through the use of discounts or other benefits or imposing penalties), or provide you a different level or quality of goods or services.

Authorized Agent

You may designate someone as an authorized agent to make a request on your behalf by providing written permission for the agent to act on your behalf; the agent will need to verify their identity with us. Agents authorized by power of attorney do not need to provide written permission but must show documentation that power of attorney has been granted. We will deny a request from an agent who does not submit proof that they have been authorized by you to act on your behalf.

Request Verification

Before we respond to a request to access, correct or delete your personal data, we will need to verify that you are who you say you are.

For requests to access specific information or requests to delete unique information, we may require a higher level of verification. Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity, we may deny a request to access, correct or delete your personal data, and we will tell you that we could not verify your identity.

In some cases, we may have no reasonable method by which we can verify a consumer’s identity. For example, if the only information we hold about you is tied to a browser cookie and has not been linked to your name, email address or other Contact Information, we may be unable to verify that a request comes from you.