Privacy Policy

1. Information We Collect

1.1 Information you provide to us

• Account & profile data: name, email address, password, company name, role, billing details (e.g., billing contact, address, VAT/tax ID).
• Content you submit: messages, files, support tickets, feedback, and other data you choose to provide.
• Communications: emails and messages sent to us (including support, sales, and marketing communications preferences).

1.2 Information we collect automatically

• Usage data: feature interactions, settings, log files, timestamps, identifiers associated with your account or browser.
• Device & technical data: IP address, device type, operating system, browser type, language, referring/exit pages, performance data, crash reports.
• Cookies & similar technologies: pixels, tags, SDKs, local storage to remember settings, authenticate sessions, measure usage, and personalize content. See "Cookies" below.

1.3 Information from third parties

• Service providers & partners: analytics, payments, authentication, fraud prevention, customer support tools.
• Single sign-on and integrations: if you connect third-party services (e.g., identity providers, communication channels), we receive data necessary to enable the integration, according to your settings with that provider.

2. How We Use Information

We use information to:

• Provide, operate, maintain, and secure the Services.
• Authenticate users and prevent fraud, abuse, and spam.
• Personalize and improve features, recommendations, and user experience.
• Provide customer support; respond to requests and inquiries.
• Process payments and manage subscriptions.
• Send transactional messages (e.g., security alerts, invoices, service changes).
• Conduct analytics, research, testing, and product development.
• Comply with legal obligations and enforce agreements.

3. Legal Bases for Processing (EEA/UK users)

Where GDPR/UK GDPR applies, we rely on:

• Performance of a contract (to provide the Services).
• Legitimate interests (e.g., to secure, improve, and market the Services in a proportionate manner).
• Consent (where required for certain cookies/marketing).
• Legal obligation (e.g., tax, accounting, law enforcement requests).

You may withdraw consent at any time where consent is the legal basis.

4. Sharing of Information

We do not sell personal information. We share information with:

• Service providers processing data on our behalf under contracts (e.g., hosting, cloud infrastructure, email delivery, analytics, payments, customer support).
• Integration partners that you choose to connect; sharing is controlled by you and the integration's settings.
• Affiliates for support, operations, and corporate purposes consistent with this Policy.
• Law, safety, and rights: when required by law or to protect users, our Services, or our rights.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

5. International Data Transfers

We may transfer, store, and process information in countries other than where it was collected. Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) for transfers from the EEA/UK/Switzerland, and implement technical and organizational measures to protect personal data.

6. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of data and our business needs.

7. Security

We use administrative, technical, and physical safeguards designed to protect information (including encryption in transit, access controls, and logging). No system is 100% secure; you are responsible for maintaining the secrecy of your credentials and promptly notifying us of any suspected compromise.

8. Your Privacy Rights

Depending on your location, you may have rights including:

• Access, correction, deletion of personal data.
• Portability (receive your data in a portable format).
• Restriction or objection to certain processing (including direct marketing).
• Withdrawal of consent where processing is based on consent.
• Complaint to a supervisory authority.

To exercise rights, contact privacy@subsimo.com. We may request verification of identity as permitted by law.

9. Cookies and Similar Technologies

We use necessary cookies to operate the Services and, with consent where required, analytics and advertising cookies to understand usage and improve performance. You can manage cookies through in-product settings (where available), your browser settings, or applicable consent banners.

10. Children's Privacy

The Services are not directed to children under 16 (or as defined by local law), and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us to delete it.

11. Third-Party Links and Services

The Services may link to third-party websites or allow you to enable third-party integrations. Their privacy practices are governed by their own policies; please review those policies.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Effective Date." If changes materially affect your rights, we will provide additional notice as required by law.

13. Contact

Controller: Subsimo
Email: privacy@subsimo.com