ResNexus Privacy Policy

This Privacy Policy describes the privacy practices of Convoyant, LLC dba ResNexus and its affiliated companies ("ResNexus", "we", "us" and/or "our"), for data and personal information we collect:

• Through websites owned and operated by us, including https://www.resnexus.com/ and other websites owned or controlled by ResNexus ("Sites");
• Through software applications (including chat functionality and other automated tools) made available by us for use through computers and mobile devices ("Apps");
• From other third party sources such as public databases, marketing partners, etc.

In this Privacy Policy we refer to the Sites, Apps, and Offline Interactions as the "Services".

Travelers please note, if you are booking stays or travel services with a travel provider, ResNexus may provide the platform through which such actions occur. However, your interactions, including any personal information that you share with a travel provider, are subject to the privacy policies of each such travel provider.

ResNexus provides users with a wide variety of services through the Website that allow users to manage properties in the travel industry, promote those properties, and distribute information related to availability and booking through the Site and Apps ("Services"). For purposes of clarity, the term "Services" includes all functionality made available through the Website, such as the online booking engine, back office property management system, connectivity API's, payment processing, and related support services. 

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Site or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). We may provide notice of changes in other circumstances as well. By continuing to use the Services after those changes become effective, you agree to be bound by the revised Privacy Policy.

You agree that ResNexus may process your personal data in the manner described in this section and our users agree that they will not process the personal data of any third person with whom they may come in contact through the use of the Services, except in compliance with the following terms:

A. Information You Provide. When you register for, or access, a ResNexus Account, or otherwise access the Services, we (ResNexus) may collect some personal Information that can be used to contact or identify you ("Personal Information"), such as your name, phone number, email address, and home and business postal addresses. Personal Information may also include records of purchases and contacts with ResNexus or one of our Subscribers/Users.

We use your Personal Information, data collected from cookies, and other logging data to:

• Provide and improve our Services and customer service (R&D)
• Administer your use of the Services
• Process payments, including conducting authentication
• Process transactions with partners
• Notify you of changes to our Services
• Send you information you have requested
• Better understand your needs and interests
• Carry out obligations under any contract we have with you
• Personalize and improve your experience on our Sites
• Communicate with you about software updates, product announcements, and other marketing promotions
• Perform functions as otherwise described to you at the time of collection

If you no longer wish to receive communications from us, please follow the "unsubscribe" instructions provided in any of those communications, or update your account settings, as applicable. We do not sell your Personal Information, Files or any other information about you to third parties.

We may also collect some Information (ourselves or by using third party services) using logging and cookies, such as IP addresses, which can sometimes be correlated with Personal Information. We use this Information for the above purposes and to monitor and analyze use of the Services, for the Services' technical administration, to increase our Services' functionality and user-friendliness, and to verify users have the authorization needed for the Services to process their requests.

The security of your personal information is important to us. When you enter sensitive information (such as a social security number) on our order forms and when you add or upload Files, we encrypt the transmission of that information using secure socket layer technology (SSL).

We follow generally accepted standards to protect the information submitted to us, both during transmission and once we receive it.

We do not sell your Personal Information, Files or other information about you to third parties. We may use certain trusted third-party companies and individuals to help us provide, analyze, and improve the Services (including but not limited to data storage, maintenance services, database management, web analytics, payment processing, and improvement of the Services' features). These third parties may have access to your Information only for purposes of performing these limited tasks on our behalf and under obligations similar to those in our Privacy Policy. We use industry standard storage service to store your Files and other Information.

In addition, many of the Services are hosted in a secure server environment (the ResNexus cloud) that uses a firewall and other advanced technology to prevent interference or access from outside intruders.

We may retain and use your Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Consistent with these requirements, we will attempt to delete your information quickly upon request. Please note, however, that there might be latency in deleting Information from our servers and backed-up versions might exist after deletion. In addition, we do not delete from our servers Files that you have in common with other users.

We may, at our discretion, disclose your non-private, aggregated, or otherwise non-personal Information, such as usage statistics of our Services.

Personal information collected may include the following:

• Contact data–such as your first and last name, salutation, billing and mailing addresses, phone number, email address, professional title, and company name.
• Demographic data–such as your city, state, country of residence, and postal code.
• Communications data–including details from our interactions with you via various sources such as:
• Electronic Communications–Information from emails, online chats, and messages you send through our Services.
• SMS/Text Messages–If you opt into our SMS/MMS messaging programs, we will collect and use your mobile phone number to send messages as described in our SMS/MMS Terms. Additionally, we also collect content and metadata (e.g., date, time) of text messages you send to or receive from us.
• Phone Calls–Details from phone conversations with our representatives, which may include call duration, time, and, where permitted by law, recorded content.
• Support–Screenshots, videos, or other information you provide to our support team to assist with inquiries or investigations.
• User-Generated Content (UGC)–including photographs, videos, reviews, and other content you upload or share through our Services or on social media platforms that we access, including any metadata associated with such content.
• Online identifiers and account information–such as your username or passwords for any of our websites.
• Payment and transactional data–including payment card information or bank account numbers used to bill for our services and your billing and payment history.
• Marketing data–such as your preferences for receiving our marketing communications and details about your engagement with them.
• Audio, electronic, and visual information–such as video and voice recordings of conversations with you as permitted by law.
• Professional or employment-related information–such as your job title, employer information, work history and education information, such as the schools you attended.
• Other data not specifically listed here–which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

B. Legal Compliance and Protection.
We may disclose to outside parties Files and Personal Information stored in your ResNexus Account which you access and Information about you that we collect when we have a good faith belief that disclosure is reasonably necessary to (a) comply with a law, regulation or compulsory legal request; (b) protect the safety of any person from death or serious bodily injury; (c) prevent fraud or abuse of ResNexus, its Services or its users; or (d) to protect ResNexus' property rights.

We audit our internal processes for compliance with legal and contractual requirements, our internal policies and enforce the terms and conditions that govern the Services to
prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

C. General Customer Privacy Protections.
You agree that you will not use the Services in any way for spamming, chain letters, junk mail or distribution lists to contact any person who has not given specific permission to be included in such. "Spam" is defined as sending emails or text messages to others without permission to email or text the individual and a way to unsubscribe from such communications.

ResNexus reserves the right to suspend email activity due to abuse, server overload or any performance-based reason.

ResNexus in no way guarantees delivery of emails through the Service due to spam filters and other imperfect technologies.

D. Children.
The Services are not directed at children, and we do not knowingly collect personal information directly from users under the age of 13 or from other websites or services directed at children. Consistent with the Federal Children's Online Privacy Protection Act of 1998 (COPPA), we will not knowingly request or collect personal information from any child under age 13 without obtaining the required parental consent.

E. International data transfers.
We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country. 

We may combine personal information we receive from you with personal information we obtain from other sources, such as:

• Public sources–such as government agencies, public records, social media platforms, and other publicly available sources.
• Private sources–such as data providers, social media platforms, data licensors, account intelligence providers (who help us identify the types of visitors to our Services), and entities to which we provide services (which may include your employer).
• Partner organizations–such as the travel and accommodations providers with whom we work.
• Marketing partners–such as joint marketing partners and event co-sponsors.

We, our service providers and our business partners may automatically receive and store certain types of information about you, your computer or mobile device, and your interaction with our Services over time, our communications and other online services such as:

• Log data–Our web servers may collect "log data." Log data provides aggregate information about the number of visits to different pages on the Sites. Third-party vendors may also collect aggregate log data independently from us.
• Communication interaction data–such as your interactions with our email (sent by us, and/or our marketing service providers), chat messages, voicemail, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

Some of our automatic data collection is facilitated by cookies and similar technologies. When you come to our Website, or use our Services our Web server sends a cookie to your computer. Cookies are files that Web browsers place on a computer's hard drive and are used to tell us whether customers and visitors have visited the Site previously.

Standing alone, cookies do not identify you personally. They merely recognize your browser. Unless you choose to identify yourself to ResNexus, either by responding to a promotional offer or opening an account, you remain anonymous to ResNexus. Cookies come in two flavors: session and persistent-based. Session cookies exist only during an online session. They disappear from your computer when you close your browser software or turn off your computer. Persistent cookies remain on your computer after you've closed your browser or turned off your computer. They include such information as a unique identifier for your browser.

ResNexus uses session cookies containing encrypted information to allow the system to uniquely identify you while you are logged in. This information allows ResNexus to process your online transactions and requests. Session cookies help us make sure you are who you say you are after you've logged in and are required in order to use the ResNexus application. ResNexus uses persistent cookies, that only ResNexus can read and use, to identify the fact that you are a ResNexus customer or prior ResNexus Website visitor (whatever the case may be). We are especially careful about the security and confidentiality of the information stored in persistent cookies. For example, we do not store account numbers or passwords in persistent cookies. Users who disable their Web browsers' ability to accept cookies will be able to browse our Website but will not be able to successfully use our Service.

Third Party Cookies–We may from time to time engage third parties to track and analyze non-personally identifiable usage and volume statistical information from visitors to our website to help us administer our website and improve its quality. Such third parties may use cookies to help track visitor behavior. Such cookies will not be used to associate individual website visitors to any personally identifiable information. All data collected by such third parties on behalf of ResNexus is used only to provide us with information on site usage and is not shared with any other third parties.

The Sites may contain links to other websites. We do not control, and make no representations whatsoever regarding, such other websites or the products and services offered by or through websites accessed through links on the Sites, even those with which we may have an affiliation. If you decide to access third party websites linked through the Sites you do so at your own risk. You should carefully review the Privacy Policy and terms of these websites.

We do not collect certain sensitive data, for example, health data, biometric data, or data revealing racial or ethnic origin, from visitors to the Sites.

When you submit content to be used in our Services, such as comments, reviews, or media files, please be aware that this information may be publicly accessible. We may share your UGC with other users, display it on our website, or distribute it through various media channels. By providing this content, you consent to its public dissemination and acknowledge that it may be viewed by others.

ResNexus is PCI DSS compliant via external audit and is extensively audited annually. The Services strictly observe PCI security protocols including constant scanning and security testing. PCI DSS is a set of requirements designed to ensure that all companies that process, store or transmit credit card information maintain a secure environment. Essentially, any business that processes credit cards should adhere to these security standards in order to protect cardholder data and fight against credit card theft.

Our Services have security measures in place to help protect against the loss, misuse, and alteration of the payment data under our control. When our Services are accessed, Secure Socket Layer (SSL) technology protects information using both server authentication and data encryption to help ensure that payment data is safe and secure. ResNexus also implements an advanced security method based on dynamic data and encoded session identifications, and hosts our Services in a secure server environment that uses a firewall and other advanced technology to prevent interference or access from outside intruders. Finally, ResNexus provides unique user names and passwords that must be entered each time a customer or user logs on. These safeguards help prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of payment data and other information.

ResNexus assumes no liability or risk associated with the intentional or unintentional misuse of PCI guidelines by individual users or Subscribers of our Services. This covers existing PCI laws as well as additional laws that may be added at any point in the future.

We are committed to ensuring the security and protection of the personal information that we collect on your behalf, and are GDPR compliant with regards to breach notifications, right to access, right to rectification, right of erasure, right to be forgotten, right to data portability, right to withdraw consent at any time, privacy by design, and data protection officers. ResNexus does not own any of the "Customer Data" and acts as the Data Processor. Our Subscribers, travel providers, and other users of our Services agree to assume the responsibilities of the Data Controller and to follow GDPR and other data protection guidelines in regards to personal information and data security.

To assist the Subscribers (users, travel providers) of our Services to be GDPR compliant and comply with other data protection laws, We provide tools to protect your personal information and data by allowing them to:

• Notify individual guests how their personal data is used.
• Notify individual guests what information is held and how it is processed.
• Allow individual guests to correct inaccurate or incorrect personal data.
• Allow individual guests to have their personal data deleted or removed permanently from their ResNexus Account records.
• Limit the amount of personal data shared to what is necessary to complete the transaction or purchase of direct services with the property.
• Allow the individual guest to receive their personal data in a commonly used format and transmit that personal data to another entity.
• Allow the individual guest to opt-out of using their personal data for direct marketing purposes or other data share scenarios not directly necessary to complete the transaction with the property.
• Notify the individual guest if their personal data was breached within the property's ResNexus Account.
• Ensures the individual guest is not subject to automated decision-making and profiling without human intervention.

ResNexus reserves the right to access, at the request of the individual guest, the Customer Data and remove the personal information of the individual guest. ResNexus reserves the right to withhold, remove and/or discard Customer Data if required to do so as per the legal requirements of the General Data Protection Regulation (GDPR) or other data protection laws. If you have more specific questions related to the Company's GDPR compliance and the tools it provides to the Subscriber, please contact the ResNexus' Data Protection Officer through support@resnexus.com or at the following postal address: 185 East 200 North, Salem, UT 84653.

We may request specific information from you to help us confirm your identity and process your request. Whether or not we are required to fulfill any request you make will depend on a number of factors (e.g., why and how we are processing your personal information), if we reject any request you may make (whether in whole or in part) we will let you know our grounds for doing so at the time, subject to any legal restrictions.

In addition to your rights outlined above, if you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.

ResNexus is committed to making the ResNexus online booking engine as accessible as possible to people with special needs, including those with visual, hearing, cognitive and motor impairments. ResNexus uses web content accessibility guidelines (WCAG) 2.1 or later. In addition, ResNexus recommends that our users install the UserWay widget or other accessibility widget to provide the best user experience.

ResNexus provides tools for you to follow the requirements found in Title III, 28 CFR Section 36.302(e) of the American with Disabilities Act and allows travel providers to:

• Modify their policies, practices, or procedures to ensure that individuals with disabilities can make reservations for accessible guest rooms or units during the same hours and in the same manner as individuals who do not need accessible rooms or units.
• Identify and describe accessible features in guest rooms or units offered through the ResNexus online booking engine in enough detail to reasonably permit individuals with disabilities to assess independently whether a guest room or unit meets his or her accessibility needs.
• Ensure that accessible guest rooms or units are held for use by individuals with disabilities until all other guest rooms or units of that type have been rented and the accessible room or unit requested is the only remaining room or unit of that type.
• Reserve, upon request, accessible guest rooms/units or specific types of guest rooms/units and ensure that the guest rooms/units requested are blocked and removed from all reservations systems.
• Guarantee that the specific accessible guest room or unit reserved through its reservation service is held for the reserving customer, regardless of whether a specific room or unit is held in response to reservations made by others.

To assist travel providers to be ADA compliant ResNexus provides a general ADA statement on the ResNexus online booking engine.

Travel providers agree to assume the legal responsibilities for (a) providing accurate information, (b) enabling and using the tools provided by ResNexus, and (c) following the requirements of the American with Disabilities Act (ADA) on their ResNexus online booking engine and reservation system. 

You warrant that any artwork, images or pictures supplied to ResNexus does not infringe on any copyright or trademark.

All artwork, images or pictures stored in your ResNexus Account are the property of ResNexus and are licensed for ResNexus to use.

We receive and store any personal information you post to the Sites or provide to us when you set up a user account, sign up for our newsletters or promotions, request a demo, purchase services, or make a reservation for travel services through one of our Services. You can choose not to provide such personal information, in which case you will not be able to access or use portions of the Services or some of their features.

We require customers who register to use the Services offered on our Site and Apps (collectively, the "Services") to give us contact information, such as your first and last name, billing and mailing addresses, phone number, email address, professional title, and company name. We also request demographic data such as city, state, country of residence and postal code at the time you express interest in attaining additional information, or when you register for the Service. We may also ask for additional personal information, such as billing name and address, and credit card number. Customers can opt out of providing this additional information by not entering it when asked. Customers can update or remove their personal information at any time by logging into the Services and editing their Personal Information. Customers can view their updated profile to confirm their edits have been made.

ResNexus uses the information we collect to set up the Service for individuals and their organizations. We may also use the information to contact customers to further discuss customer interest in our company, the Service we provide, and to send information regarding our company or partners, such as promotions and events. Customers are invited to receive an email newsletter by providing an email address. Customer email addresses and personal customer information will not be distributed or shared with third parties. 

Customers can opt out of being contacted by us, or receiving marketing information from us, at any time by visiting resnexus.com/unsubscribe or sending an email to support@resnexus.com. Again, email information will not be distributed or shared and customers can opt out of receiving any communication by emailing support@resnexus.com at the time it is distributed, or at the time any customer registers for the Service.

We generally store/retain your personal information as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, as we determine is necessary for business records, and as required under applicable law. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. In some cases, we may specifically ask you for your consent to collect, use or share your personal information, such as where required by law.

When we no longer require the personal information we have collected about you, we may either delete it or de-identify, aggregate or anonymize it. If we de-identify, aggregate or anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you. 

You are responsible for maintaining the confidentiality of any account information, including your login and password, and for restricting access to your computer, and you agree to accept responsibility for all activities that occur under your account or password. ResNexus reserves the right to refuse service, terminate accounts, remove or edit content, or cancel subscriptions in its sole discretion. You are also solely responsible for the accuracy and currency of the data entered into the Services under your user account. You agree to indemnify and hold ResNexus harmless from and against any claim related to content, accuracy, or currency of the information you provide through the Services.

ResNexus does not own any of the "Customer Data". You have sole responsibility for the accuracy, quality, integrity, legality, reliability, appropriateness, and intellectual property ownership or right to use of all Customer Data. ResNexus reserves the right to access the Customer Data for maintenance and analysis purposes only. 

In addition to any other things that might constitute a misuse of the Services, you must NOT, and must NOT attempt to do the following things:

• Modify, alter, tamper with, repair or otherwise create derivative works of any of the Services
• Reverse engineer, disassemble or decompile the software used to provide or access the Services, or attempt to discover or recreate the source code used to provide or access the Services, except and only to the extent that the applicable law expressly permits doing so
• Use the Services for research or benchmarking or any related endeavor with the intent of creating a competing or similar product
• Use the Services in any manner or for any purpose other than as expressly permitted by our Terms, the Privacy Policy, or any other policy, instruction or terms applicable to the Services
• Sell, lend, rent, resell, lease, sublicense or otherwise transfer any of the rights granted to you with respect to the Services to any third party
• Remove, obscure or alter any proprietary rights notice pertaining to the Services
• Access or use the Services in a way intended to improperly avoid incurring fees or exceeding usage limits or quotas
• Use the Services to: (i) engage in any unlawful or fraudulent activity or perpetrate a hoax or engage in phishing schemes or forgery or other similar falsification or manipulation of data; (ii) send unsolicited or unauthorized junk mail, spam, chain letters, pyramid schemes or any other form of duplicative or unsolicited messages, whether commercial or otherwise; (iii) advertise or promote a commercial product or service that is not available through the Company; (iv) store or transmit inappropriate content, such as content: (1) containing unlawful, defamatory, threatening, pornographic, abusive, libelous or otherwise objectionable material of any kind or nature, (2) containing any material that encourages conduct that could constitute a criminal offense, or (3) that violates the intellectual property rights or rights to the publicity or privacy of others; (v) store or transmit any content that contains or is used to initiate a denial of service attack, software viruses or other harmful or deleterious computer code, files or programs such as Trojan horses, worms, time bombs, cancelbots, or spyware; or (vi) abuse, harass, stalk or otherwise violate the legal rights of a third party
• Interfere with or disrupt servers or networks used by ResNexus to provide the Services or used by other users' to access the Services, or violate any third party regulations, policies or procedures of such servers or networks or harass or interfere with another user's full use and enjoyment of any of the Services
• Access or attempt to access the ResNexus' other accounts, computer systems or networks not covered by our Terms, through password mining or any other means
• Share passwords or other access information or devices or otherwise authorize any unregistered third party to access or use the Services
• Permit others to use your ResNexus Account credentials, whether directly or indirectly disassemble, decompile, reverse engineer, or otherwise modify or attempt to access the software, related code, or any portion of the Services
• Permit a direct competitor to use your ResNexus Account credentials to access the Services in order to gain competitive information on the Service or to provide such information to others

Your access to and use of the Sites and our Services are also subject to our Terms and for our Subscribers the Terms of Service agreed to on the first login of our Services. 

We have reasonable security measures in place to protect against loss, misuse and alteration of personal information under our control. When you enter personal information to book a reservation or set up an account, we encrypt that information using secure socket layer technology (SSL). In addition, electronically stored personal information is stored and backed-up on a secure network with firewall protection and access to our electronic information systems requires user authentication via password or similar means. We also employ access restrictions, limiting the scope of employees who have access to certain personal information. While we strive to safeguard personal information, we cannot guarantee or warrant the security of any information you disclose or transmit to us and you do so at your own risk. 

If you have questions or concerns regarding this Privacy Policy or our processing of personal information, you may contact us by sending an email to support@resnexus.com.