Privacy Policy

Effective date: October 1, 2026 · Last updated: October 1, 2026

Approli is operated by Red Opal Inc. (“Red Opal,” “Approli,” “we,” “us,” or “our”).

Business Address:
Red Opal Inc.
107 Briar Lane
Morris, Illinois 60450
United States

This Privacy Policy explains how Red Opal Inc. collects, uses, discloses, stores, and protects information in connection with Approli, including the Approli website, applications, software, services, and related online services (collectively, the “Services”).

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to information processed through Approli's public website, customer accounts, employee and administrator accounts, applications, and other Services that link to this Privacy Policy.

For organizations that use Approli to manage their workforce, the organization that subscribes to Approli (the “Customer”) may determine what employee, applicant, contractor, or other personnel information is entered into Approli and how that information is used.

In those circumstances, the Customer may act as the controller, business, or other responsible party for personal information under applicable law, while Red Opal may process such information on the Customer's behalf to provide the Services.

This Privacy Policy does not replace or override any separate agreement between Red Opal and a Customer concerning the processing of personal information.

2. Information We Collect

Depending on how you use Approli, we may collect the following categories of information.

A. Account and Contact Information

We may collect information such as:

• Name
• Business or organization name
• Email address
• Telephone number
• Mailing or business address
• Username and account credentials
• Organization, department, job title, or role
• Customer support and communications information

B. Workforce and Human Resources Information

Customers may enter information concerning their employees, contractors, volunteers, applicants, or other personnel.

Depending on the features used by a Customer, this information may include:

• Employee identification information
• Employment and organizational information
• Department and job information
• Work schedules and shifts
• Attendance and time records
• Clock-in and clock-out information
• Leave and absence information
• Workflows and approvals
• Onboarding information
• Performance or operational information
• Payroll-related information entered or generated through applicable features
• Notes, comments, documents, and other information submitted by a Customer

Red Opal processes Customer-provided workforce information primarily to provide the Services according to the Customer's instructions and applicable contractual terms.

C. Usage and Technical Information

We may automatically collect information associated with your use of the Services, including:

• IP address
• Browser and device information
• Operating system
• Approximate location derived from IP address
• Login information
• Date and time of access
• Pages, screens, or features accessed
• Application activity
• Diagnostic and error information
• Security and authentication information
• Information concerning interactions with the Services

We use this information for purposes including security, troubleshooting, service operation, analytics, and improvement of the Services.

D. Communications

If you contact us, we may retain the contents of your communications and information necessary to respond to your request.

3. How We Use Information

Red Opal may use personal information for the following purposes:

• Providing, operating, and maintaining Approli
• Creating and administering accounts
• Authenticating users
• Processing transactions and subscriptions
• Providing customer support
• Responding to inquiries
• Performing requested workforce-management functions
• Processing information according to Customer instructions
• Maintaining service availability and reliability
• Detecting, preventing, and investigating fraud, abuse, security incidents, and unauthorized access
• Monitoring and improving system performance
• Developing and improving Approli
• Diagnosing technical problems
• Sending service, security, administrative, and transactional communications
• Complying with legal and regulatory obligations
• Enforcing our agreements, policies, and legal rights
• Protecting the rights, property, safety, and security of Red Opal, our Customers, users, and others
• Establishing, exercising, or defending legal claims

We do not use Customer workforce data for purposes incompatible with providing the Services or the applicable Customer agreement.

4. Customer-Provided Data

Approli is designed to allow organizations to manage workforce and operational information.

Where a Customer enters personal information into Approli, the Customer is generally responsible for determining what information is collected and the purposes for which it is used.

Customers are responsible for:

• Providing appropriate notices to their employees and other individuals whose information they submit;
• Obtaining any consents or authorizations required by applicable law;
• Ensuring that their use of Approli complies with applicable employment, privacy, labor, and other laws;
• Configuring Approli appropriately for their organization's policies; and
• Responding to requests from individuals concerning information for which the Customer is responsible.

Where applicable, Red Opal will reasonably assist Customers with privacy requests and other obligations as provided by the applicable Customer agreement and law.

5. How We Share Information

We may disclose personal information in the following circumstances.

A. Service Providers

We may use third-party service providers that process information on our behalf to operate, maintain, secure, or support Approli.

These providers may provide services such as:

• Cloud hosting and infrastructure
• Domain registration and DNS services
• Email and communications delivery
• Authentication and security
• Customer support
• Data storage and backup
• Payment processing
• Monitoring and diagnostics
• Other technical or operational services

Service providers are permitted to process information as necessary to provide the services for which they have been engaged, subject to applicable contractual and legal requirements.

B. Microsoft Azure

Approli's application and related infrastructure are hosted using Microsoft Azure.

Depending on the Services used, Approli may use Azure infrastructure and services for application hosting, databases, storage, security, identity, communications, monitoring, and related infrastructure functions.

Microsoft's contractual privacy and security obligations for applicable Azure services are governed by Microsoft's applicable product terms and Data Protection Addendum.

C. Domain Registration and DNS Services

The Approli domain may be registered and managed through Porkbun, LLC.

Porkbun may process domain-registration information, account information, DNS information, and related registration data in accordance with its own agreements and privacy practices.

Porkbun's privacy policy explains the information it collects and the circumstances in which it may disclose information, including disclosures associated with domain registration, legal requirements, and service providers.

Porkbun's role as a domain registrar or DNS provider does not mean that Porkbun operates the Approli application or controls Customer data stored within Approli.

D. Legal Requirements and Protection of Rights

We may disclose information where reasonably necessary to:

• Comply with applicable law, regulation, legal process, subpoena, court order, or governmental request;
• Detect or prevent fraud, abuse, security incidents, or unlawful activity;
• Protect the rights, property, or safety of Red Opal, Approli users, Customers, or others;
• Establish, exercise, or defend legal claims; or
• Enforce our agreements and policies.

E. Business Transfers

If Red Opal is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, dissolution, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

6. Information We Do Not Sell

Red Opal does not sell personal information in exchange for money.

We also do not sell Customer workforce information to data brokers.

We may use service providers and other third parties as described in this Privacy Policy to operate and improve Approli.

Nothing in this section limits disclosures that are required or permitted by applicable law.

7. Cookies and Similar Technologies

Approli may use cookies, local storage, session technologies, and similar technologies necessary to operate the Services.

These technologies may be used for purposes including:

• Authentication
• Maintaining sessions
• Security
• Remembering preferences
• Service functionality
• Performance monitoring
• Diagnosing technical problems

Where non-essential cookies or similar technologies are used, we may provide additional choices or notices as required by applicable law.

You can configure your browser or device to restrict certain cookies. Some Approli functionality may not operate correctly if necessary cookies are disabled.

8. Data Security

Red Opal uses reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Security measures may include access controls, authentication mechanisms, encryption in transit, cloud security controls, logging and monitoring, secure application configuration, and other safeguards appropriate to the nature of the information and Services.

No internet-based service, cloud environment, application, or electronic transmission can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide the Services;
• Maintain Customer accounts;
• Fulfill contractual obligations;
• Meet legal, regulatory, accounting, or reporting requirements;
• Resolve disputes;
• Enforce agreements; and
• Detect or prevent security incidents, fraud, or abuse.

Retention periods may vary depending on the type of information, the purpose for which it was collected, Customer instructions, applicable agreements, and legal requirements.

When information is no longer required for legitimate business or legal purposes, we may delete, anonymize, or otherwise dispose of it in accordance with our retention practices.

10. Customer Account Deletion and Data

Customers may request closure of their Approli account or deletion of Customer data, subject to applicable contractual, legal, security, and operational requirements.

Following account termination, certain information may remain for a limited period where necessary for legal compliance, fraud prevention, security, dispute resolution, accounting, backup systems, or other legitimate purposes.

Where information is maintained in backups, it may remain until the applicable backup is overwritten or securely deleted according to our retention procedures.

11. Privacy Rights

Depending on where you live and the law applicable to you, you may have rights concerning your personal information.

These rights may include, where applicable:

• The right to know or access personal information;
• The right to correct inaccurate personal information;
• The right to request deletion of personal information;
• The right to obtain a copy of certain personal information;
• The right to object to or restrict certain processing;
• The right to withdraw consent where processing is based on consent;
• The right to opt out of certain forms of processing where applicable; and
• The right to appeal a privacy decision where required by law.

These rights are subject to applicable legal limitations and exceptions.

If you are an employee, contractor, volunteer, applicant, or other individual whose information is maintained by an organization using Approli, your request may need to be directed to that organization because the organization may be responsible for the relevant personal information.

12. How to Submit a Privacy Request

To submit a privacy-related request to Red Opal, contact us using the information below:

Red Opal Inc.
107 Briar Lane
Morris, Illinois 60450
United States

Privacy inquiries: privacy@approli.com

When submitting a request, please provide sufficient information for us to understand and verify the request.

We may need to verify your identity before fulfilling certain requests in order to protect personal information and prevent unauthorized disclosure.

Where required by applicable law, we will respond within the applicable legal timeframe.

13. Children's Privacy

Approli is intended for business and organizational use and is not directed toward children under the age of 13.

We do not knowingly collect personal information directly from children under 13 through the Services.

If you believe that a child under 13 has provided personal information to Approli without appropriate authorization, please contact us so that we can investigate and take appropriate action.

Where a Customer uses Approli to process information relating to minors as part of its legitimate organizational activities, the Customer remains responsible for ensuring that its collection and use of that information complies with applicable law.

14. International and Cross-Border Processing

Red Opal is based in the United States, and Approli may use service providers and infrastructure located in the United States or other jurisdictions.

As a result, personal information may be processed or stored in jurisdictions other than the jurisdiction in which you reside.

Where applicable law requires safeguards for international transfers of personal information, Red Opal will use legally recognized transfer mechanisms or other appropriate safeguards.

15. Third-Party Services and Links

Approli may contain links to third-party websites, applications, integrations, or services.

Third-party services are governed by their own privacy policies and terms. Red Opal is not responsible for the privacy practices of third parties that it does not control.

If a Customer enables an integration with a third-party service, information may be exchanged with that service as necessary to provide the requested integration.

16. Email and Service Communications

We may send emails and other communications relating to:

• Account administration;
• Security;
• Service availability;
• Password or authentication events;
• Billing or subscription matters;
• Customer support;
• Policy or agreement changes; and
• Other operational matters.

These communications are considered service-related communications and may be sent even where you have opted out of promotional communications.

Where we send promotional communications, applicable opt-out mechanisms will be provided where required by law.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Approli, our practices, technology, legal requirements, or other circumstances.

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.

If a change is material and applicable law requires additional notice, we will provide notice through appropriate means.

Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy, to the extent permitted by applicable law.

18. Contact Us

Questions, privacy requests, and concerns regarding this Privacy Policy may be directed to:

Red Opal Inc.
107 Briar Lane
Morris, Illinois 60450
United States

Privacy: privacy@approli.com

Website: approli.com

Red Opal Inc.
Operator of Approli
107 Briar Lane, Morris, Illinois 60450, United States