Privacy Policy

Effective: July 1, 2025

1. Introduction

Exellius Systems, Inc. ("we," "our," or "us") respects your privacy. This policy explains how we collect, use, disclose, and protect your data when you use our B2B data platform ("Service"). By using our Service, you agree to the practices described in this policy.

2. Information We Collect

2.1 Data You Provide

Account Information: Name, work email, company details, payment info
Inquiries: Contact forms, support tickets
Integration Data: CRM credentials (if integrations are enabled)

2.2 Automatically Collected Data

Usage Data: IP address, browser, timestamps
Cookies: Session and authentication tokens
Device Info: OS, device identifiers

2.3 Business Contact Data

We collect and license professional contact data from:

Public directories
Verified user submissions
Partner APIs

3. How We Use Information

Purpose	Legal Basis
Service delivery (e.g. lead access)	Contractual necessity
Fraud prevention	Legitimate interest
Product improvement (analytics)	Consent (if required)
Marketing communications	Opt-in consent

4. Information Sharing

4.1 Service Providers

Stripe, PayPal (payments)
AWS, Google Cloud (hosting)

4.2 Legal Obligations

We may disclose data when required by law, court orders, or valid subpoenas.

4.3 Corporate Transactions

In the event of a merger or acquisition, user data may be shared under confidentiality.

5. International Data Transfers

Data may be stored or processed in regions like the EU, US, or APAC. We use:

Standard Contractual Clauses for EU data
Local compliance in APAC
Primary storage: [Your Country]

6. Cookies and Tracking

Cookie Type	Purpose	Duration
Essential	Authentication	Session
Analytics	Usage trends	12 months
Marketing	Ad targeting	24 months

Manage preferences anytime via the Cookie Settings link in our footer.

7. Data Subject Rights

You have the right to:

Access your data
Rectify inaccurate information
Request data deletion (where legally allowed)
Export your data in a portable format

Email privacy@exellius.com — we respond within 30 days.

8. Security Measures

Technical: AES-256 encryption, annual pen testing
Organizational: Role-based access, security training
Compliance: SOC 2 Type II audits

9. Policy Updates

We notify users of significant changes via:

Email alerts (30 days before)
In-app banners (visible for 14 days)

10. Contact Us

Data Protection Officer: [Name]
dpo@exellius.com
[Company Address]