Easy rule: “That” is used with objects, “who” is used with human(s). There are exceptions, but this one is correct most of the time.
Except that is not the rule.