PRIVACY POLICY

SaaSync, LLC (“SaaSync,” “us,” “we,” or “our”) has prepared this Privacy Policy (“Privacy Policy”) to describe how we collect, use, disclose, and otherwise process personal information through the public SaaSync website available at https://www.saasync.com/, the SaaSync Help Center available at https://support.saasync.com/, and other websites that link to this Privacy Policy (collectively, the “Website”), the SaaSync platform (the “Platform”), and the services we provide (collectively, the “Services”).

For personal information that SaaSync processes on behalf of a Customer through the Platform, SaaSync generally acts as a processor or service provider and the Customer determines how and why the information is processed. If your information was submitted to the Platform by or on behalf of a SaaSync Customer, you should direct questions and requests concerning that information to the relevant Customer. When SaaSync collects information for its own Website, account administration, billing, security, analytics, or marketing purposes, SaaSync generally determines how and why that information is processed. Capitalized terms not defined in this Privacy Policy have the meanings defined in the Service Agreement, available at https://www.saasync.com/service-agreement/.

We may modify this Privacy Policy from time to time. We will post the revised Privacy Policy and update its effective date. If required by applicable law, we will provide additional notice or obtain consent before a material change takes effect.

1. COLLECTION OF PERSONAL INFORMATION

   1.1. Personal Information. Personal information you may provide to us through the Platform or otherwise includes:

   • Contact details, such as your first and last name, email and mailing addresses, and phone number.
   • Registration information, such as your username and password, API access credentials that you set to establish an online Account with us.
   • Communications that we exchange, including when you contact us with questions, feedback, or otherwise.
   • Payment and transactional data, such as the information needed to complete your Orders and registrations on or through the Platform (which does not include credit card information, which is provided by you directly to our payment processing service provider), and information about Services or subscriptions you have purchased from us.
   • Website activity and advertising information, such as your IP address, approximate location derived from your IP address, browser type, device type, operating system, advertising or cookie identifiers, referring website, pages viewed, links selected, and the dates and times of your visits. We and our analytics and advertising partners may collect this information using cookies, pixels, tags, and similar technologies on the public Website.
   • Consent and preference records, such as a consent identifier, consent date and time, country, pseudonymized IP address, overall consent status, category-level choices, and information about the cookies presented when you made your choice.
   • Marketing data, such as your preferences for receiving communications about our Services, subscriptions activities, events, and publications, and details about how you engage with our communications.
   • Other information that we may collect which is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed on the Platform at the time of collection.

   We use Google Tag Manager to deploy and manage Website tags and scripts, c15t with its Inth-hosted service to manage cookie and advertising preferences and record visitors' choices, and Google Analytics 4 (“GA4”) to measure Website use. We may use Google Ads and the Meta Pixel to measure advertising and create audiences of prior Website visitors. We do not currently provide email addresses, phone numbers, uploaded contact lists, or other directly identifying contact information to Google or Meta for retargeting or audience matching. We do not use advertising technologies to collect Customer Data from the authenticated Platform, and we do not use Customer integration data for advertising.

   1.2. Deidentified or Aggregate Information – Personal information does not include Deidentified and Aggregate Information. “Deidentified Information” means information that cannot reasonably identify, relate to, describe, be capable of being associated with, or be linked, directly or indirectly, to a particular individual, and for which SaaSync has implemented technical safeguards and business processes that prohibit reidentification of the individual. “Aggregate Information” means information that relates to a group or category of individuals, from which individual identities have been removed, that is not linked or reasonably linkable to any individual or household, including via a device.

   1.3. Sources of Personal Information. We obtain personal information from the following categories of sources:

   • Personal Information You Provide. SaaSync collects personal information when you voluntarily submit it to us.
   • Personal Information that is Automatically Collected. SaaSync and its analytics and advertising partners may automatically collect information about your computer or mobile device and your activity over time on the Website and other online services.
   • Personal Information Obtained from Third Parties. SaaSync may receive personal information about you from other third party sources, including from your service providers, providers of Third Party Services, other customers, business partners, or data providers. We may merge or combine such personal information with the personal information we collect from you directly or automatically.

2. USE OF PERSONAL INFORMATION

   SaaSync's primary purpose in collecting personal information is to provide the Platform and Services. This may include transmitting personal information from Customer-controlled applications and data stores, which may be held by your service providers, to Third Party Services. SaaSync may also use personal information for various purposes, including without limitation:

   • Fulfilling your requests for selecting and purchasing subscriptions.
   • Establish and maintain your Account on the Platform.
   • Understanding and analyzing the usage trends and preferences of our Users to make our Platform and Services better, diagnose technical issues, prevent fraud, and develop new features and functionality.
   • To personalize your experience on the Platform and to deliver information about offers relevant to your interests.
   • To verify your identity or determine your eligibility for offers and promotions.
   • To communicate with you, including responding to any of your requests or questions.
   • To provide Users with maintenance and support including responding requests for customer support or responding to your feedback.
   • To send you materials, updates, information, special offers, and promotional material about SaaSync using direct marketing or interest-based advertising.
   • To understand how visitors use the Website, measure the effectiveness of our marketing, create audiences of prior Website visitors, show advertisements for SaaSync to those visitors on other websites and online services, and measure whether an advertisement resulted in a Website visit or other interaction.
   • To respond to requests from law enforcement and as required by applicable law, court order, or government investigation.

3. SHARING OF PERSONAL INFORMATION

   In addition to the specific situations discussed elsewhere in this Privacy Policy, SaaSync may share your personal information in the following circumstances:

   3.1. Related Companies and M&A Transactions. We may share your personal information with companies that are affiliated with us (that is, that control, are controlled by, or are under common control with us). In addition, if we transfer all or part of its business or make a sale of assets or is otherwise involved in a merger or business transfer, we may transfer your personal information to a third party as part of that transaction, including at the negotiation stage.

   3.2. Consent. We may ask if you would like us to share your personal information with other unaffiliated third parties who are not described elsewhere in this Privacy Policy, and we may do so with your consent.

   3.3. Service Agreement. We process personal information on behalf of our Customers and their clients or purchasers to the extent such information was provided to us for processing pursuant to the Service Agreement. For example, a Customer's Account information may be made available to a Third Party Service as necessary for the Customer to complete a transaction with the provider of that Third Party Service.

   3.4. Legal Compliance. We may disclose personal information in response to subpoenas, warrants, or court orders, in connection with any legal process, or to comply with relevant laws. We may also share your personal information in order to establish or exercise our contract rights; to defend against a legal claim; to investigate, prevent, or take action regarding possible illegal activities or fraud; to protect the safety and security of other Users; or to prevent a violation of our Service Agreement.

   3.5. Service Providers. We may share your personal information with third parties who perform services on our behalf that are necessary for the orderly operation of the Website, Platform, and Services. Among other things, service providers may help us perform billing, payment processing, website hosting, app design, maintenance services, consent management, database management, web analytics, app analytics, fraud protection, credit risk reduction, marketing, or other activities described in this Privacy Policy.

   3.6. Referrals. Users may recommend other Users to join the Platform by providing their contact information. Users may also provide information about other Users of the Platform such as referrals to certain Third Party Services.

   3.7. Analytics and Advertising Partners. We may disclose Website activity and advertising information to analytics and advertising partners, including Google and Meta. These partners may use cookies, pixels, tags, and similar technologies to collect or receive information from our Website and elsewhere on the Internet for analytics, advertising measurement, audience creation, and the delivery of advertisements. Our advertising partners may process information under their own terms and privacy policies, including for matching advertising identifiers, measuring advertising performance, protecting the security and integrity of their services, and improving their products and services.

   SaaSync does not sell personal information in exchange for money. However, some privacy laws may define disclosures to advertising partners for cross-context behavioral advertising as “selling,” “sharing,” or targeted advertising even when no money is exchanged.

4. SECURITY OF PERSONAL INFORMATION

   No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from the risks presented by unauthorized access or acquisition, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of any unauthorized access or acquisition of your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

5. YOUR CHOICES

   You can make the following choices regarding your personal information:

   5.1. Modifications to Your Personal Information. We rely on you to update and correct the personal information contained in your Account. Note that we may keep historical information in our backup files as permitted by law. If our Platform does not permit you to update or correct certain personal information, please contact us as described below.

   5.2. Marketing Emails. You may choose to provide us with your email address for the purpose of allowing us to send newsletters, surveys, offers, and other promotional materials. You can stop receiving marketing emails by clicking the “unsubscribe” links in the emails or by contacting us as described below. If you decide not to receive marketing emails, we may still send you service-related communications, such as those about your Account, to fulfill Orders you have requested, or deliver notifications directly to you through the Platform.

   5.3. Interest-Based Advertising and Privacy Choices. The choices presented to you depend on your location. For visitors in the European Economic Area, the United Kingdom, and Québec, we do not activate non-essential analytics or advertising technologies unless the visitor makes a choice permitting their use. Visitors may later change or withdraw their choices through the cookie or privacy-preference control available on the Website.

   For visitors in other locations, including the United States outside California, non-essential analytics or advertising technologies may be activated unless the visitor opts out. California visitors receive a California-specific opt-out experience. You may opt out of our use or disclosure of personal information for interest-based advertising by selecting the “Your Privacy Choices” control available on the Website and saving your preference.

   Your preference applies to the browser and device on which it is selected and is generally stored for 365 days. On the same browser and device, we may share that preference between www.saasync.com and support.saasync.com so that you do not need to make the same selection separately on each SaaSync subdomain. If you clear your cookies, use another browser or device, or otherwise remove the preference cookie, you may need to make your selection again. After you opt out, we will use reasonable measures to prevent applicable advertising technologies on that browser from collecting or disclosing information for retargeting. Your opt-out does not necessarily delete information previously collected by an advertising partner, and you may continue to see advertisements that are not based on your activity on our Website.

   You may also manage advertising preferences through the controls offered by Google and Meta or through participating industry tools at optout.aboutads.info. Browser settings may allow you to block or delete cookies, but doing so may affect Website functionality.

   5.4. Browser Preference Signals. Some browsers and devices permit you to broadcast a preference that you not be tracked or that your personal information not be sold or shared. We do not currently respond to “Do Not Track” signals. For California visitors, we treat a recognized Global Privacy Control signal as a request to opt out of the sale or sharing of personal information or the use of personal information for targeted advertising on that browser and device. We do not currently apply Global Privacy Control signals to visitors outside California. You may also exercise the browser- and device-specific advertising choice described in Section 5.3.

6. OTHER SITES AND SERVICES

   The Platform may contain links to other websites and online services operated by third parties, including providers of Third Party Services. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or online services that are not associated with us. We do not control third party websites or online services, including providers of Third Party Services, and we are not responsible for their actions. Other websites and services follow different rules regarding the collection, use, and sharing of your personal information. We encourage you to read the privacy policies of the other websites and online services you use.

7. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

   SaaSync is based in the United States. We and the service providers described in this Privacy Policy may process personal information in the United States and other countries whose data-protection laws may differ from those of your country. Where applicable law requires a transfer safeguard, we use an appropriate mechanism, which may include an adequacy decision, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another legally recognized safeguard. Where SaaSync processes personal information on behalf of a Customer, the applicable transfer terms are addressed in our Data Processing Addendum. You may contact us as described below for more information about applicable transfer safeguards.

8. RESIDENTS OF THE EEA, UNITED KINGDOM, AND SWITZERLAND

   The following applies to individuals in the European Economic Area (EEA), United Kingdom, and Switzerland when the applicable data-protection law governs our processing. This section primarily describes processing for which SaaSync determines the purposes and means. When SaaSync processes personal information on behalf of a Customer through the Platform, the Customer generally determines the applicable lawful basis and is responsible for responding to requests concerning that information.

   8.1. Lawful basis for processing. The lawful bases on which we process your personal information are described in the table below. If you have questions about how we process your personal information, contact us as described in the section titled “CONTACTING US” below.

   Processing Purpose	Lawful Basis
   • To use non-essential cookies and similar technologies. • To create retargeting audiences and deliver interest-based advertising. • To send marketing communications where consent is required.	Processing is based on your consent. You may withdraw consent at any time through the applicable Website preference control, an unsubscribe mechanism, or by contacting us. Withdrawal does not affect processing that occurred before withdrawal.
   • To establish and maintain your Account. • To provide the Platform and Services you request. • To process payments and administer subscriptions. • To provide service-related communications and support.	Processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
   • To comply with tax, accounting, regulatory, court-order, and other applicable legal requirements.	Processing is necessary to comply with our legal obligations.
   • To secure, maintain, troubleshoot, and improve the Website, Platform, and Services. • To prevent fraud and misuse. • To respond to inquiries and administer our business. • To perform limited analytics that do not require consent.	Processing is necessary for our legitimate interests in operating, securing, supporting, and improving our business and Services. We consider the effects on your rights and do not rely on legitimate interests where those interests are overridden by your rights and interests.

   We will use your personal information only for the purposes for which we collected it, unless we reasonably determine we need to use it for another reason and that reason is compatible with the original purpose. For example, we consider aggregation and deidentification of personal information to be compatible with the purposes listed above and in your interest, because the aggregation and deidentification of such information reduces the likelihood of improper disclosure of that information.

   8.2. Retention. SaaSync retains your personal information:

   • For so long as your Account is active or as needed to provide you with the Platform, the Services, or to fulfill our contractual obligations;
   • As necessary to comply with our legal obligations, resolve disputes, and enforce our agreements; and
   • For so long as is necessary for the purposes for which we collected such personal information.

   We configure our retargeting audiences to retain Website visitors for up to 180 days. Our consent-management preference is generally stored on a visitor’s browser for 365 days. We may retain consent and preference records for up to five years to document privacy choices and compliance. Analytics and advertising partners may retain information according to their own settings, retention schedules, and legal obligations.

   8.3. Your Rights. Applicable data-protection laws give you certain rights regarding your personal information. You may ask us to take the following actions in relation to personal information that we hold:

   • Access. Provide you with information about our processing of your personal information and give you access to your personal information.
   • Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
   • Correct. Update or correct inaccuracies in your personal information.
   • Restrict. Restrict the processing of your personal information.
   • Object. Object to processing based on our legitimate interests and object to direct marketing.
   • Delete. Delete your personal information.

   Where applicable, you may also withdraw consent, lodge a complaint with a supervisory authority, and request information about safeguards used for international transfers. These rights may be limited in certain circumstances under applicable law.

   When we receive your request, we may ask you to verify your identity before we can act on your request. We may withhold information where we are required by law to do so or if the search for that information would require disproportionate effort or have a disproportionate effect to, for example, the cost of providing the information, the time it would take to retrieve the data, or how difficult it may be to obtain the information requested.

   If you are in the EEA, United Kingdom, or Switzerland and would like to exercise an applicable right, please submit your request as described in the section titled “CONTACTING US” below. You may also submit a complaint to the data-protection authority in the country or region where you live or work or where you believe an infringement occurred. Lists and contact information are available from the European Data Protection Board, the UK Information Commissioner's Office, and the Swiss Federal Data Protection and Information Commissioner.

9. CANADIAN RESIDENTS

   We use non-sensitive Website activity and advertising information for interest-based advertising as described in this Privacy Policy. For visitors in Québec, we use a consent banner and do not activate non-essential analytics or advertising technologies unless the visitor makes a choice permitting their use. Visitors elsewhere in Canada may have non-essential analytics or advertising technologies activated unless they opt out and may use the “Your Privacy Choices” control available on the Website to make the browser- and device-specific choice described in Section 5.3. A privacy choice is intended to take effect promptly and remain effective for the duration described above. Canadian residents may also withdraw consent or submit a privacy request by contacting us as described below. Withdrawal of consent does not affect processing that occurred before the withdrawal.

10. UNITED STATES STATE PRIVACY DISCLOSURES

Certain U.S. state privacy laws provide residents with rights regarding their personal information when the relevant law applies to the business processing the information. Depending on the law and circumstances, these rights may include access, correction, deletion, portability, and the right to opt out of certain sales, sharing, targeted advertising, or profiling.

SaaSync does not sell personal information for monetary consideration. As described above, our disclosure of Website activity and advertising information to Google, Meta, or similar advertising partners may be considered “selling,” “sharing,” or targeted advertising under some state privacy laws.

Regardless of whether a particular state privacy law applies to SaaSync, Website visitors may use the “Your Privacy Choices” control available on the Website to opt out of SaaSync’s use of applicable advertising technologies for retargeting on that browser. Where applicable law provides additional rights, you may submit a request by contacting us at . We may need to verify certain requests. We will not unlawfully discriminate against you for exercising an applicable privacy right.

11. NOTICE TO CALIFORNIA RESIDENTS

Under California Civil Code sections 1798.83-1798.84, California residents who have an established business relationship with SaaSync are entitled to ask us for a notice describing what categories of personal information we share with third parties for their direct marketing purposes. This notice will identify the categories of information shared with and will include a list of the third parties with which it is shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit your request to the address listed in the section titled “CONTACTING US” below.

12. CHILDREN

The Website and Services are not directed to children under 16, and SaaSync does not knowingly sell or share the personal information of children under 16 for interest-based advertising. If you believe a child has provided personal information to us, please contact us.

13. CONTACTING US

If you have any questions or concerns about our Privacy Policy, wish to make a privacy request, or have another privacy or security concern, please contact us at

Effective Date: September 3, 2026