Cookie Policy

Cookies are small data files stored by a browser. Similar technologies include local or session storage, software development kit storage, pixels, tags, embedded scripts, and device identifiers. In this Policy, “cookies” includes those technologies when they perform a similar function.

Cookies may be temporary and expire when a browser session ends, or persistent and remain until their set expiration or deletion. They may be set by the AssociationOps360 domain or by an approved service provider used to deliver a configured function.

The public website uses Vercel Web Analytics to measure aggregate visits and page views on public informational pages without analytics cookies or cross-site advertising profiles. Our collection code removes URL query parameters and fragments, excludes sign-in and trial-intake pages, and does not send form fields or customer operational records. The public contact form does not require a marketing cookie to operate.

The secured service may use strictly necessary cookies or equivalent storage for authentication, security, session continuity, fraud and abuse prevention, load distribution, accessibility, and core preferences. The exact cookie names, providers, purposes, and durations must match the final hosted configuration before production launch.

Strictly necessary: required to provide requested functions, maintain sessions, authenticate users, protect accounts, prevent abuse, route traffic, preserve security state, and record privacy choices. Disabling these technologies may prevent part of the service from working.

Functional: remember optional choices such as language, display, or workflow preferences. Functional cookies will be used only when the corresponding feature is enabled and described.

Performance and analytics: Vercel Web Analytics supplies aggregate visitors, page views, public-page paths, referring domains, countries, and browser or device categories. It uses a temporary anonymized session identifier rather than a persistent tracking cookie. These statistics do not identify the people viewing the site or establish that someone requested a demo or trial.

Advertising and targeting: support advertising, campaign attribution, or cross-context behavioral profiles. AssociationOps360 does not represent that these cookies are active. They must not be activated until this Policy, the Privacy Policy, the provider list, and any required consent controls are updated.

Depending on the configured technology, information may include session identifiers, privacy choices, authentication state, page or feature interactions, timestamps, IP address, browser and device attributes, referral information, error events, and security signals. Cookies should not store plaintext passwords or full payment-card information.

Operational records submitted through the secured service remain governed by the Customer Subscription Agreement, Privacy Policy, and Data Processing Addendum. A cookie does not expand a user’s authorization to access another organization, property, role, or record.

A third party may set or receive a cookie only when its service is actually configured, such as hosting, authentication, security, support, payment, communications, or consent management. Amazon Cognito may use session and security storage for secured-service sign-in. AWS S3, SES, CloudWatch, and SNS support server-side storage, communications, logging, and notifications rather than advertising cookies. The Subprocessor List identifies the applicable providers and functions.

Links to third-party websites do not cause AssociationOps360 to control those sites’ cookies. Users should review the third party’s privacy and cookie information before using an external service.

Where law requires consent for a nonessential category, AssociationOps360 will request that consent before activating the technology and will provide a way to change the choice. Rejecting nonessential cookies will not prevent use of functions that do not depend on them.

Users may also manage or delete cookies through browser or device settings. Blocking strictly necessary cookies can impair sign-in, security, preferences, form continuity, or other requested functions. Choices are often specific to the browser and device and may need to be renewed after cookies are cleared.

AssociationOps360 does not sell personal information for money or use customer operational records for cross-context behavioral advertising. Our public-page analytics collection is disabled when the browser sends Global Privacy Control or an enabled Do Not Track signal.

Vercel discards its analytics session identifier after 24 hours. Our current analytics plan provides 30 days of aggregate history. Other session technologies expire when the session ends or after a limited inactivity period; persistent technologies use a defined duration appropriate to their configured purpose.

AssociationOps360 may update this Policy when the service, providers, law, or cookie practices change. The effective date will be revised, and material changes will be communicated through an appropriate website, account, consent, or direct notice before newly required consent-based processing begins.

Questions or privacy requests may be sent to support@associationops360.com. Formal service may be directed to H4 Legacy Holdings, LLC, 7901 4th Street North, Suite 300, St. Petersburg, Florida 33702.