Privacy Policy

This Privacy Policy explains how effizient, operated by Effizient LLC ("effizient," "we," "us," or "our"), collects, uses, shares, and protects personal information in connection with the effizient platform, including our operations workspace and our customer-facing wholesale ordering portal (together, the "Services"). This Policy applies to the business subscribers who use the Services ("Customer," "you") and to the individuals whose personal information we process. Your use of the Services is also governed by our Terms of Service (the "Agreement").

1. Who We Are

effizient provides software that helps wholesale and consumer-packaged-goods businesses manage customers, orders, pricing, fulfillment, and accounting workflows, and offers those businesses' buyers a self-service ordering portal. Effizient LLC is the entity responsible for the Services. Our contact details are at the end of this Policy.

2. Scope and Our Role

Our role under data protection law depends on the information involved:

• As a processor / service provider. When you use the Services, you upload and generate data about your own business, including personal information about your own customers, their staff, and your buyers ("Customer Data"). We process Customer Data on your behalf and on your documented instructions solely to provide the Services. For that processing you are the controller (or business) and we are the processor (or service provider). Our processing of Customer Data is governed by our Data Processing Addendum ("DPA"), which forms part of the Agreement.
• As a controller. We act as a controller for the account, registration, billing, and usage information we collect to operate, secure, support, and improve the Services and to run our business. This Policy describes that processing.

If you are an individual whose personal information was provided to us by one of our Customers (for example, you are a wholesale buyer ordering through a Customer's portal), that Customer is the controller of your information. Please direct requests about that information to the relevant Customer; we will assist them as described in Section 12 and in the DPA.

3. Information We Collect

Account and Identity Information

When you or your team register for and use the Services, we collect:

• Name, business email address, and authentication credentials
• Role, permissions, and account preferences
• Communications you send to us, including support requests

Organization Information

We collect information about the business that subscribes to the Services, such as:

• Business name, address, and contact details
• Plan, account configuration, and connected integrations
• Tax or business identifiers you provide

Customer Data

To provide the Services, we process data that you or your team upload or generate in the platform. This may include personal information about your own customers and their personnel, such as:

• Names, business email addresses, and phone numbers
• Shipping and billing addresses
• Products, catalogs, pricing, and payment terms
• Orders, invoices, and order history

We process Customer Data as a processor on your behalf and only to provide the Services, as described in Section 2 and in the DPA.

Usage and Analytics Information

We automatically collect information about how your team uses the Services, including:

• Pages viewed, features used, and actions taken
• Session recordings to understand and improve the user experience
• Referring pages and time spent in the Services

Device and Log Information

We collect technical information when you access the Services, such as:

• IP address, browser type, and device identifiers
• Operating system and access times
• Log and diagnostic data

Billing Information

We collect your subscription plan, billing contact, and transaction records. Payment card and bank account details are collected and processed directly by our payment processor, Stripe, including bank connections used for ACH payments. effizient does not store full payment card numbers or full bank account numbers.

4. How We Use Your Information

As a controller, we use the information described above to:

• Provide, operate, and maintain the Services
• Authenticate users and secure accounts
• Process subscriptions, billing, and payments
• Provide customer support and respond to your requests
• Analyze usage patterns and identify and fix usability issues
• Develop, test, and improve the Services and new features
• Communicate with you about your account, service updates, and, where permitted, relevant products
• Detect, prevent, and address fraud, abuse, security, and technical issues
• Comply with legal obligations and enforce the Agreement

5. Legal Bases for Processing

Where the EU or UK General Data Protection Regulation ("GDPR") applies to our processing as a controller, we rely on the following legal bases:

• Performance of a contract — to provide the Services and administer your account
• Legitimate interests — to secure, support, analyze, improve, and market the Services, balanced against your rights
• Consent — where required, for example certain cookies or marketing communications; you may withdraw consent at any time
• Legal obligation — to comply with applicable law, including tax and accounting requirements

For Customer Data that we process as a processor, the Customer is responsible for establishing the legal basis for the processing.

6. How We Share Your Information

We do not sell your personal information. We share personal information only in the following circumstances:

• Subprocessors: Vendors that host, operate, and support the Services on our behalf, listed below
• Integrations you enable: Third-party services you connect at your direction, such as QuickBooks Online and Shopify, to sync data you choose to share
• Professional advisors: Auditors, lawyers, and accountants under confidentiality obligations
• Corporate transactions: In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy
• Legal and safety: When required by law, legal process, or to protect the rights, property, or safety of effizient, our Customers, or others

Subprocessors

We engage the following subprocessors to help provide the Services. Each is bound by contractual obligations consistent with this Policy and the DPA. The DPA at /dpa contains our subprocessor commitments, including how we notify you of changes and your right to object.

7. No Sale or Sharing of Personal Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"). We have not sold or shared personal information for such purposes in the preceding twelve months. When we act as a service provider for Customer Data, we process that information only for the business purposes permitted under our contract with the Customer.

8. Cookies and Analytics

We use cookies and similar technologies that are necessary to authenticate users, maintain sessions, and secure the Services, as well as analytics technologies to understand how the Services are used and to improve them. We use product analytics that may record sessions to identify usability issues. Session recordings are configured to mask or exclude sensitive fields and do not capture passwords or full payment details. Where required by law, we obtain consent for non-essential cookies.

9. International Data Transfers

We operate the Services primarily from the United States, and our subprocessors may process information in the United States and other countries. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or IDTA, and, where applicable, the EU-US Data Privacy Framework. Transfers of Customer Data are governed by the DPA.

10. Data Retention

We retain account, organization, and usage information for as long as your account is active and as needed to provide the Services, and thereafter as required to comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. We retain Customer Data for the term of the Agreement and return or delete it after termination in accordance with the DPA. Residual copies in backups are purged on a rolling basis.

11. Security

We use technical and organizational measures designed to protect personal information, including encryption of data in transit and at rest, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

12. Your Privacy Rights

Depending on where you live and our role in the processing, you may have the following rights regarding your personal information:

• Access to and a copy of the personal information we hold about you
• Correction of inaccurate or incomplete information
• Deletion of your personal information
• Portability of your information in a structured, machine-readable format
• Restriction of or objection to certain processing, and withdrawal of consent

If you are a California resident, the CCPA/CPRA provides rights to know, access, correct, and delete personal information, to opt out of the sale or sharing of personal information (which we do not do), to limit the use of sensitive personal information, and to be free from discrimination for exercising your rights. If the GDPR or UK GDPR applies, you have the rights described above and the right to lodge a complaint with your data protection supervisory authority.

To exercise these rights, contact us at privacy@effizient.io. We will verify your request as required by law. If your information was provided to us by a Customer that acts as the controller, we will refer your request to that Customer and assist them in responding. If we decline your request, you may appeal by replying to our response, and you may also complain to a supervisory authority or your state attorney general.

13. Children's Privacy

The Services are a business-to-business tool and are not directed to consumers or to children. We do not knowingly collect personal information from anyone under 18 years of age, or under 16 in the European Economic Area and the United Kingdom. If you believe a child has provided us with personal information, please contact us so we can delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the version and effective date shown at the top of this page and, where appropriate, provide additional notice. Your continued use of the Services after an update takes effect constitutes acceptance of the revised Policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, or to exercise your rights, contact us at privacy@effizient.io. See also our Terms of Service, Acceptable Use Policy, Data Processing Addendum, and Service & Support Policy.

Effizient LLC
5900 Balcones Drive, Suite 100
Austin, Texas 78731
United States

Email: privacy@effizient.io