Privacy Policy

Effective Date: September 1, 2026
Last Updated: September 1, 2026

This Privacy Policy explains how SystemsPal ("we," "us," or "our"), operated from Germany, handles personal information when you visit systemspal.com, grow.systemspal.com, or app.systemspal.com (the "Sites"), respond to our advertising, communicate with us, or purchase or use our services (the "Services").

This Policy applies to information for which SystemsPal determines the purposes and means of processing. Information our business customers process about their own customers, leads, prospects, personnel, or other individuals ("Client Customer Data") is governed primarily by the customer's instructions and our Data Processing Addendum.

1. Information We Collect

Depending on your interaction with us, we may collect contact and business information; account, subscription, billing, payment-status, support, and transaction information; device, usage, cookie, advertising, and approximate-location information; communications and call recordings; and information received from service providers, advertising partners, integrations, public sources, or other lawful sources. Payment providers generally collect full payment credentials directly; SystemsPal may receive limited billing, transaction, fraud, and payment-status information.

2. How We Use Information

We may use personal information as reasonably necessary to provide, operate, secure, support, administer, develop, improve, and market SystemsPal; create and manage accounts; process payments and collect amounts owed; communicate with customers and prospects; conduct lawful business-to-business marketing, analytics, advertising, attribution, and audience creation; prevent fraud, abuse, security incidents, and unlawful activity; enforce agreements; comply with law; establish, exercise, or defend legal claims; and support financing, corporate transactions, reorganizations, or sales of assets.

Where a legal basis is required, we rely as applicable on contract performance or pre-contract steps, legal obligations, legitimate interests, and consent. Legitimate interests may include operating and improving the Services, security, fraud prevention, customer administration, analytics, enforcing agreements, and lawful marketing. We may use and disclose aggregated, anonymized, or de-identified information for any lawful purpose, subject to applicable law.

3. Client Customer Data

Our business customers generally determine why and how Client Customer Data is processed and are responsible for its collection, notices, legal bases, consents, communications, retention decisions, and responses to privacy requests. SystemsPal processes Client Customer Data under the DPA and the applicable customer agreement. If your information was submitted by one of our customers, direct privacy requests to that customer; we may refer such requests to them.

4. Disclosures, Tracking, and Advertising

We may disclose personal information to service providers, subprocessors, contractors, communications and infrastructure providers, payment providers, analytics, advertising and AI providers, professional advisers, affiliates, transaction counterparties, authorities, and other parties where reasonably necessary for the purposes above, at your direction, or as required or permitted by law. Some third parties may act as independent controllers under their own privacy notices.

We do not sell personal information for monetary consideration. Certain advertising, analytics, attribution, or audience activities may constitute a "sale," "sharing," or targeted advertising under some U.S. state laws. Where applicable, you may exercise available opt-out rights through our Privacy Choices page. We honor recognized universal opt-out signals to the extent required by law.

We and third parties may use cookies, pixels, local storage, SDKs, server-side technologies, and similar tools for authentication, preferences, security, analytics, attribution, advertising, and measurement. Where consent is legally required, non-essential technologies are used subject to the applicable consent mechanism.

5. Communications and Call Recording

We may send service, account, sales, or marketing communications as permitted by law. Marketing SMS is sent only where the required consent or other lawful basis exists. Message frequency varies. Message and data rates may apply. You may reply STOP to opt out of SMS and HELP for help. We do not share, sell, or provide your mobile phone number or text-messaging opt-in data or consent to third parties or affiliates for their own marketing or promotional purposes. Service providers may process that information only as needed to provide messaging or support the Services.

Sales, onboarding, support, or other calls may be recorded for quality, training, recordkeeping, security, and dispute-resolution purposes where permitted by law. We provide notice or obtain consent where required.

6. Retention and Security

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, legitimate business operations, security, fraud prevention, legal or accounting obligations, disputes, and enforcement of agreements. Retention periods vary by data type, context, legal requirements, and operational need. Backup or archival copies may remain until overwritten or deleted through ordinary retention cycles.

We use technical, administrative, and organizational safeguards appropriate to the nature and risk of the information. No method of storage or transmission is completely secure, and we do not guarantee absolute security.

7. Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; opt out of certain sale, sharing, or targeted advertising; appeal certain decisions; or lodge a complaint with a competent supervisory authority. These rights are subject to legal exceptions and limitations.

Requests may be sent to privacy@systemspal.com. We may verify identity or authority, request information reasonably necessary to process the request, deny or limit requests where permitted by law, and charge a fee where applicable law allows. We respond within the time required by applicable law and may extend that period where legally permitted.

8. International Processing

SystemsPal and its providers may process information in the United States and other countries. Where applicable law requires a transfer mechanism, we rely on an adequacy decision or recognized framework, standard contractual clauses, or another lawful mechanism. Service providers may change as our Services and operations evolve.

9. U.S. State Disclosures

Residents of U.S. states with comprehensive privacy laws may have additional rights described above, including rights concerning targeted advertising, sale or sharing, profiling, sensitive data, authorized agents, and appeals, where those laws apply to SystemsPal. We do not knowingly sell or share personal information of persons under 16 where prohibited. California residents may use the Privacy Choices page for applicable sale/sharing opt-outs.

10. Children, Third Parties, and Changes

The Sites and Services are not directed to children under 16, and we do not knowingly collect their personal information except where provided through a business customer and processed under that customer's instructions. Third-party websites and services are governed by their own privacy practices.

We may update this Policy as our practices, providers, Services, or legal requirements change. The date above identifies the current version. Additional notice will be provided only where required by applicable law.

11. Contact

SystemsPal
Email: privacy@systemspal.com
Phone: (888) 260-9444