Apptio

Apptio Privacy Policy: User-Focused Overview

*Effective June 2025. This is a practical summary, not legal advice.*

1. Data Collection and Use

Information Apptio may collect

Depending on how you interact with Apptio, it may collect:

• Identity and business details: name, job title, company, address, phone number, email, country, industry, revenue, employee count, and similar company information.
• Communications and submissions: email content, support requests, inquiries, testimonials, bulletin-board or chat-room posts.
• Software-service information: account details, login information, usage logs, and activity within Apptio’s hosted applications.
• Technical and behavioral data: IP address, device and browser details, operating system, unique device identifiers, access times, pages viewed, links clicked, referring pages, and approximate location inferred from IP address.
• Tracking information: cookies, web beacons, advertising and social-media tracking technologies, and session-replay tools that visualize how visitors use the Website.
• Information from others: prospect and sales-lead information from the TBM Council, resellers, partners, vendors, and other business sources.
• Job applicants: resumes, education and employment history, interview information, demographic information, and background-check information.

Purposes

Apptio may use information to:

• Provide, operate, configure, support, and improve its Website and Software Services.
• Manage accounts, relationships, contracts, vendors, and partnerships.
• Send marketing and administrative communications.
• Analyze usage, personalize content, and target advertising on third-party websites and platforms.
• Detect fraud, protect security, resolve disputes, and enforce agreements.
• Create de-identified data, which Apptio says it will not attempt to re-identify unless legally permitted.

For Software Services, Apptio generally acts as a data processor on the customer’s instructions; the customer is the controller and determines how customer-uploaded data is handled. For its Website and business relationships, Apptio is generally the controller.

2. User Rights and Choices

Depending on location and applicable law, users may be able to:

• Access or obtain a copy of their Personal Information.
• Correct inaccurate information.
• Request deletion or blocking of information.
• Object to or restrict certain processing (particularly under GDPR).
• Withdraw consent where processing relies on consent.
• Complain to a relevant data-protection authority.

Users may unsubscribe from marketing emails, but cannot opt out of essential account, service, security, or administrative messages. Cookies can generally be controlled through Apptio’s cookie settings or browser settings. Cookies must be enabled for the Software Services.

California residents may additionally request disclosure of collected information, deletion, correction, and opt-out of certain “sale” or “sharing” connected with advertising cookies. They may use the Global Privacy Control signal, although Apptio says its effect may be limited to the particular browser or device. California users should not be discriminated against for exercising these rights.

3. Third-Party Sharing

Apptio may share information with:

• Affiliates and subsidiaries.
• Service providers, contractors, consultants, and subprocessors.
• Advertising and marketing partners, including for targeted advertising.
• Professional advisers such as lawyers and accountants.
• Potential buyers or successors in a merger, acquisition, financing, asset sale, bankruptcy, or similar transaction.
• Law enforcement or government authorities when legally required.
• Other parties where Apptio believes disclosure is necessary to prevent fraud, protect rights or safety, investigate claims, or enforce its Terms of Use.

Apptio states it does not share information with unaffiliated companies for their own marketing purposes unless the user opts in. However, advertising, targeting, social-media cookies, and related tracking may still involve third-party collection and may constitute “sharing” under California law.

Third-party websites linked from Apptio are not covered by this Policy, and Apptio is not responsible for their practices.

4. AI/ML Training

The Policy does not expressly state that Personal Information is used to train artificial-intelligence or machine-learning models. It permits analytics, service improvement, personalization, advertising, and creation of de-identified data, but does not clearly confirm or prohibit AI training. Users seeking certainty should request clarification, particularly regarding Software Services data and session-replay information.

5. Key User Obligations and Risks

• Continued use of the Website or Software Services is treated as consent to the Policy, where legally permitted.
• Users must keep passwords confidential and should not share them.
• Information voluntarily posted in public forums may be read, copied, or used by others; Apptio disclaims responsibility for third-party use.
• Refusing to provide requested information may prevent access to certain services or personalization.
• Disabling cookies may impair Website functionality; Software Services require cookies.
• Apptio does not honor “Do Not Track” signals and may continue tracking through cookies, pixels, and other tools.
• Data may be transferred internationally, including to the United States. For European, UK, and Swiss data, Apptio states it relies on Standard Contractual Clauses or other lawful mechanisms.

6. Liability and Disputes

The Policy contains no detailed liability cap, arbitration clause, governing-law provision, or dispute-resolution procedure. It does state that Internet security cannot be guaranteed and that Apptio takes only “reasonable steps” to protect information. Any dispute terms may instead appear in the Terms of Use or customer agreement.

7. Policy Changes

Apptio may change the Policy at any time. Changes become effective when posted on the Website or through the Software Services, and continued use constitutes acceptance where permitted by law. The Policy encourages frequent review but does not promise individual notice by email. Cookie-information changes are likewise made effective by updating the revision date.