Privacy Policy

01Scope

This Privacy Policy explains how Envion Software ("we," "us," or "our") collects, uses, discloses, and protects personal data when you visit https://envionsoftware.com, contact us, subscribe to marketing communications, or otherwise interact with the Envion Software website (collectively, the "Service").

This Policy applies only to processing for which we determine the purposes and means. It does not govern third-party websites, services, or platforms that maintain their own privacy notices.

02Who we are and how to contact us

• Controller / responsible organization: Envion Software
• Registered or principal address: Boston, Massachusetts, United States — full postal address available on request.
• Privacy contact: hello@envionsoftware.com
• Data protection officer: not applicable — no DPO has been appointed.
• Local representative: not applicable — no EU/UK representative has been appointed at this time.

03Personal data we collect

Depending on how you interact with the Service, we may collect the following categories of personal data.

• Contact and inquiry data. Your name, email address, telephone number if provided, organization, subject, message, attachments, and any other information you choose to provide through a contact form, assessment, or correspondence.
• Marketing and preference data. Your email address, subscription status, consent record, communication preferences, and information about whether you open or interact with our messages where permitted.
• Device, log, and usage data. Internet Protocol address, device and browser type, operating system, language, referring page, pages viewed, links selected, timestamps, approximate location derived from IP address, diagnostic events, and cookie or similar identifiers.
• Consent and request records. Records of privacy choices, cookie settings, opt-outs, rights requests, and our responses.
• Sensitive data. We do not intentionally request sensitive personal data through the contact form. Please do not include health, biometric, government-identifier, financial-account, precise-location, or similarly sensitive information unless we specifically request it and provide an appropriate notice.

Sources. We collect data directly from you, automatically from your browser or device, and from service providers that support analytics, website hosting, and marketing delivery.

04Cookies and similar technologies

We use cookies, pixels, local storage, and similar technologies for the purposes described below. Where law requires consent, non-essential technologies remain disabled until you choose to enable them. You can change your choices at any time through the Manage Cookies link in the website footer. Withdrawing consent does not affect processing that occurred before withdrawal.

Browser and device controls may also allow you to block or delete cookies. Blocking some technologies may affect site functionality. Where required by applicable law, we respond to recognized browser-based opt-out preference signals, such as Global Privacy Control, for the browser or device sending the signal.

A complete, current description of the cookies and storage we use is available in the Cookie Policy at https://envionsoftware.com/cookie-policy.

05Why we use personal data and our legal bases

The legal basis depends on the activity and the law that applies where you live. Where a law requires us to identify a legal basis, we rely on the bases described below.

Where we rely on legitimate interests, those interests are: responding to business inquiries addressed to us, operating and securing a reliable website, understanding aggregated usage so we can improve content, and establishing or defending legal claims. We balance these interests against your rights and expectations before relying on them.

06Marketing communications

We send promotional email or similar communications only as permitted by applicable law. You can unsubscribe by selecting the unsubscribe link in a message or contacting hello@envionsoftware.com. We may retain a minimal suppression record so that we can honor your choice. Transactional or service-related messages, if any, are not marketing and may continue when necessary to respond to your request.

Our marketing messages identify the sender and include the contact and opt-out information required in the recipient’s location. Marketing addresses are collected directly from you — we do not purchase third-party lead lists.

07How we disclose personal data

We may disclose personal data to the following recipients for the purposes described in this Policy:

• Website hosting, content delivery, security, and technical support providers.
• Analytics providers identified in our cookie controls or cookie list.
• Email delivery, customer-communication, and marketing-platform providers.
• Professional advisers, auditors, insurers, and corporate service providers where necessary.
• Public authorities, courts, regulators, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, or the integrity of the Service.
• A buyer, investor, successor, or other relevant party in connection with a proposed or completed merger, financing, reorganization, sale, or transfer, subject to appropriate safeguards.

We do not sell personal data, and we do not share it for cross-context behavioral advertising.

Current key vendors and processing locations: website hosting and technical infrastructure providers, and the privacy-friendly analytics provider enabled only with your consent — processing primarily in the United States.

08International data transfers

We and our service providers may process personal data in countries other than the country where you live. Those countries may have different data-protection rules. Where required, we use an approved transfer mechanism and supplementary safeguards, such as adequacy decisions, standard contractual clauses, or another lawful mechanism. Details of applicable safeguards may be requested at hello@envionsoftware.com.

Primary hosting and processing countries: United States. Transfer mechanisms, where required: standard contractual clauses or another lawful mechanism under applicable data-protection law.

09Data retention

We retain personal data only for as long as reasonably necessary for the stated purposes, including to meet legal, accounting, security, and dispute-resolution needs. We consider the amount, nature, sensitivity, risk, purpose, and legal requirements when setting a retention period.

When retention ends, we delete, anonymize, or securely isolate the data unless continued storage is required by law.

10Security

We use administrative, technical, and physical measures designed to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorized access, or disclosure — including encrypted transport, access controls, and data minimization. No method of transmission or storage is completely secure.

11Your privacy rights and choices

Depending on your location and subject to legal conditions and exceptions, you may have the right to:

• Ask whether we process your personal data and request access to it.
• Request correction of inaccurate or incomplete personal data.
• Request deletion or erasure of personal data.
• Request restriction of, or object to, certain processing.
• Receive certain personal data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Opt out of marketing, sale or sharing, targeted advertising, or certain profiling where applicable.
• Appeal a refusal to act on a request where applicable.
• Lodge a complaint with a competent privacy or data-protection authority.

To exercise a right, contact hello@envionsoftware.com or use the contact form at https://envionsoftware.com/contact. We may need to verify your identity and authority. An authorized agent may submit a request where permitted, but we may require proof of authorization and direct verification. We will not unlawfully discriminate against you for exercising a privacy right.

12Automated decision-making

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects.

13Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children below the applicable age without legally valid authorization. If you believe a child has provided personal data in violation of applicable law, contact hello@envionsoftware.com so we can investigate and take appropriate action.

14Regional disclosures

EEA, United Kingdom, and Switzerland. Where GDPR or equivalent law applies, the controller, lawful-basis, transfer-safeguard, and rights details above apply to you. You may lodge a complaint with your local supervisory authority.

United States state privacy laws. Where a state privacy law applies, the sections above describe the relevant data categories, purposes, and recipients. We do not sell personal data and do not share it for cross-context behavioral advertising. We do not unlawfully discriminate against you for exercising a privacy right.

Other locations. We will provide additional notices, rights, and safeguards where local law requires them.

15Third-party links and services

The Service may link to or integrate with third-party services. Their processing is governed by their own notices, not this Policy. Review those notices before providing personal data.

16Changes to this Policy

We may update this Policy to reflect changes in our practices, technology, or legal obligations. We will post the revised version at https://envionsoftware.com/privacy-policy, update the "Last updated" date, and provide any additional notice or obtain consent when required. Material changes take effect as described in the notice provided.

17Contact and complaints

Privacy inquiries and rights requests: hello@envionsoftware.com

Postal address: Boston, Massachusetts, United States — full postal address available on request.

Privacy request channel: the contact form at https://envionsoftware.com/contact or the email above.

If you are not satisfied with our response, you may contact the privacy or data-protection authority in your location where applicable.