Privacy Policy

1. Scope and roles

This policy applies to the Climb Analytics website at climb-analytics.com and to the Climb Analytics application (together, the “Service”), operated by Climb Analytics, LLC, a Georgia limited liability company (“Climb Analytics,” “we,” “us”). Two kinds of information are involved, and our role differs for each:

• Information we collect directly from website visitors and account users (for example, an email you send us or account details). For this information we act as a controller.
• Customer Data that a customer connects from third-party systems such as FieldRoutes, Podium, and Applause and that we process to provide analytics. For this information we act as a processor / service provider on the customer’s behalf, under the customer’s instructions and agreement. If you are an employee, technician, or customer of one of our customers and have questions about that data, please contact that business (the controller) directly.

2. Information we collect

From website visitors

• Contact informationyou choose to give us — for example, when you email us to request a demo (such as your name, email, company, and what you tell us about your business).
• Basic technical/log data that our hosting provider records to deliver and secure the site, such as IP address, browser type, and timestamps.

From product users and customers

• Account information such as name, work email, organization, and role, and authentication data managed by our identity provider.
• Customer Dataingested from the Third-Party Sources a customer connects — for example customer, appointment, payment, subscription, employee, communication, and review records — which we process to produce analytics for that customer.
• Usage data about how the application is used, for security, support, and product improvement.

3. How we use information

• to provide, operate, secure, support, and improve the Service;
• to respond to your inquiries and schedule and conduct demos;
• to produce analytics and reports for the customer whose data we process;
• to create aggregated and de-identified statistics, benchmarks, and market insights (see Section 3a);
• to monitor, prevent, and address fraud, abuse, security, and technical issues;
• to comply with law and enforce our agreements.

We do notsell your personal information, and we do not “share” it for cross-context behavioral advertising. We do not disclose personal information or a customer’s identifiable business data to another operator, broker, or buyer except in the aggregated, de-identified form described below or with that customer’s separate opt-in for the verified marketplace.

3a. Benchmarking, market insights, and the verified marketplace

Aggregated and de-identified insights.We create statistics, benchmarks, and market insights derived in part from Customer Data — for example, to show an operator how it compares to peers, or to describe industry trends. We produce these only in de-identified, aggregated form under a defined standard: outputs reflect a group of operators large enough that no single operator or individual can reasonably be identified, small groups are suppressed (including in thin local markets), we do not attempt to re-identify the data, and recipients are contractually prohibited from doing so. This information is not personal information and is not a “sale” of personal information. For these Aggregated Insights we act as an independent controller/business, separate from our processor role for raw Customer Data. The specific standard we apply — including minimum cohort sizes and re-identification prohibitions — is set out in our Data Processing Addendum.

Verified marketplace (opt-in only).We may offer a program through which an operator can choose to make itself discoverable to vetted brokers or buyers — for example, to explore a sale or financing. An operator’s identity, individual figures, or personal information are disclosed to those third parties only with the operator’s separate, affirmative, and revocable authorization, and only to the extent chosen. Benchmarking participation and marketplace enrollment are distinct choices, and neither is required to use the Service.

We never use Customer Data to train models for the benefit of other customers, or to build generalized products, except in the aggregated, de-identified form described here.

4. How we share information

We share information only as needed to run the Service:

• Service providers / subprocessorsthat host and support the Service under confidentiality and data-protection obligations — for example Microsoft Azure (cloud hosting and data storage), our authentication provider, our error-monitoring provider, and our website host. Each organization’s data is logically isolated from others’.
• Legal and safety— when required by law or to protect rights, safety, or the integrity of the Service.
• Business transfers— in connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your direction— for a customer’s Customer Data, as the customer instructs, including — only with the operator’s separate opt-in — disclosure of the operator’s chosen information to vetted brokers or buyers through the verified marketplace (Section 3a).
• Aggregated / de-identified insights— benchmarks and market insights that do not identify any operator or individual may be provided to other operators and to third parties such as brokers, as described in Section 3a. This is not a sale or sharing of personal information.

We do not otherwise disclose one customer’s identifiable data to another customer, a broker, or any buyer.

5. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit and at rest, role-based access controls, single sign-on, and hard logical isolation of each organization’s data. Connections to Third-Party Sources are read-only. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data retention

We keep each category of information only as long as needed for the purposes described here:

• Contact informationfrom website inquiries — until you ask us to delete it or it is no longer needed for follow-up, whichever is sooner.
• Account information— for the life of the account and a short wind-down period after it closes.
• Customer Data— for the term of the customer’s subscription; on termination we delete or de-identify it within a commercially reasonable wind-down period, except where retention is required by law.
• Security and usage logs— for a limited period consistent with security and operational needs.
• Aggregated / de-identified insights— because they no longer identify anyone, may be retained after termination.

We may retain information longer where required to comply with law, resolve disputes, or enforce our agreements.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to opt out of any “sale” or “sharing” of personal information (we do neither). We will not discriminate against you for exercising these rights. To make a request about information we hold as a controller, email hello@climb-analytics.com. For Customer Data we process on a customer’s behalf, please contact that business, and we will assist them as their processor. We may need to verify your identity before acting on a request.

8. Cookies and tracking

Our marketing website does not use advertising or cross-site tracking cookies. It may use strictly necessary cookies or similar technologies needed to deliver and secure the site. The application may use cookies necessary for authentication and session management. You can control cookies through your browser settings; disabling necessary cookies may affect functionality.

9. International data

We operate in the United States, and information may be processed in the United States or other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Children

The Service is for businesses and is not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes to this policy

We may update this policy from time to time. We will change the effective date above and, where appropriate, provide additional notice. Your continued use of the Service after an update takes effect constitutes acceptance.

12. Contact

For privacy questions or requests, contact us at hello@climb-analytics.comwith “Privacy” in the subject line, or by mail to Climb Analytics, LLC, c/o Rocktomic Fulfillment Center, Georgia, USA.

Questions about these terms? Contact us at hello@climb-analytics.com.