Privacy Policy

TierX ("TierX," "we," "us," or "our") respects the privacy of users of our website, software, platform, and related services (collectively, the "Services").

This Privacy Policy describes how TierX collects, uses, discloses, and otherwise processes personal information under its control. It also explains the distinction between information controlled by TierX and data collected, stored, processed, routed, or distributed by customers using TierX.

TierX is designed as a self-hosted lead distribution platform. Customer Lead Data is generally stored and processed on infrastructure selected, configured, operated, or controlled by the customer rather than in a TierX-controlled lead database.

This Privacy Policy describes our current practices and is not a warranty or guarantee that any particular security measure, system, service, transmission, storage method, or third-party service will be completely secure, uninterrupted, error-free, or immune from unauthorized access, loss, misuse, or other security incidents.

011. Information TierX Collects

Account Information

When you create, maintain, or use a TierX account, we may collect information such as:

• Name
• Email address
• Account credentials
• Organization or company information
• Account preferences and settings
• Communications you send to us
• Subscription and billing-related information, if applicable

Passwords are not intended to be stored in plain text.

Technical and Usage Information

When you access or use the Services, TierX or service providers used by TierX may automatically collect technical, diagnostic, and usage information, which may include:

• IP address
• Browser and device information
• Operating system
• Login activity and timestamps
• Features accessed or used
• Application and system logs
• Error and diagnostic information
• Performance information
• Security-related events
• Other technical information generated through use of the Services

We may use this information to operate, maintain, secure, troubleshoot, analyze, and improve TierX.

022. Customer Lead Data

For purposes of this Privacy Policy, "Customer Lead Data" means information that a customer collects, imports, enters, stores, processes, routes, transmits, distributes, or otherwise manages using TierX.

TierX is designed so that Customer Lead Data is generally stored on infrastructure selected or controlled by the customer.

TierX does not routinely collect or store Customer Lead Data in a TierX-controlled lead database.

Customers determine, among other things:

• What Customer Lead Data is collected
• From whom it is collected
• How and why it is collected
• What information is entered into TierX
• How that information is used
• How long it is retained
• Which buyers, recipients, vendors, or other third parties receive it
• Which integrations and endpoints are connected to TierX
• What information is transmitted through those integrations
• What permissions are granted to users of their deployment

TierX does not independently determine these matters on behalf of customers.

Limited Access for Support and Related Purposes

TierX may receive or obtain limited access to Customer Lead Data when a customer voluntarily provides such information to us or authorizes access for technical support, troubleshooting, diagnostics, maintenance, investigation of an issue, security purposes, or another service requested by the customer.

Any such access is incidental to providing the requested service and does not change the customer's responsibility for or control over its Customer Lead Data.

Customers should avoid providing TierX with Customer Lead Data when it is unnecessary to resolve a support or technical issue.

033. Customer-Controlled and Self-Hosted Infrastructure

TierX is designed to allow customers to operate the platform using customer-selected or customer-controlled infrastructure.

Depending on deployment and configuration, Customer Lead Data may be stored in a customer-controlled PostgreSQL database or other supported infrastructure.

Customers control or select important aspects of that environment, which may include:

• Servers and hosting
• Databases
• Network configuration
• User access
• Authentication credentials
• Administrative permissions
• Backups
• Disaster recovery
• Data retention
• Database security
• Firewalls and other network protections
• Software updates and dependencies
• Connected applications
• Third-party integrations
• Buyer endpoints

Customers are responsible for appropriately configuring, maintaining, monitoring, securing, backing up, and administering infrastructure under their control.

TierX does not control and cannot guarantee the confidentiality, integrity, availability, security, performance, reliability, backup, restoration, or continued availability of customer-controlled infrastructure or Customer Lead Data stored on that infrastructure.

044. How TierX Uses Information

TierX may use information under its control to:

• Create and administer accounts
• Authenticate users
• Provide and operate the Services
• Communicate regarding accounts or the Services
• Provide technical support
• Maintain and troubleshoot the Services
• Monitor reliability and performance
• Diagnose technical problems
• Maintain security
• Detect or prevent fraud, abuse, or unauthorized activity
• Improve or develop TierX
• Maintain business and financial records
• Comply with applicable legal obligations
• Enforce our agreements
• Establish, exercise, or defend legal claims
• Protect TierX, our users, and others

TierX does not use Customer Lead Data for TierX's own advertising or marketing purposes.

055. Lead Buyers, Recipients, Integrations, and Third-Party Endpoints

TierX enables customers to configure HTTP endpoints, APIs, integrations, and other methods through which Customer Lead Data may be transmitted to lead buyers, vendors, business partners, service providers, or other recipients selected by the customer.

Customers determine which recipients receive Customer Lead Data and what information is transmitted.

TierX does not independently select or approve recipients merely because the platform technically permits a customer to connect or transmit data to them.

Once Customer Lead Data is transmitted to a third party selected by a customer, that third party may independently collect, store, use, disclose, retain, secure, or otherwise process the information according to its own systems, agreements, policies, and legal obligations.

TierX does not control the systems, conduct, security, privacy practices, data retention practices, availability, or subsequent use of Customer Lead Data by independent third-party recipients.

The technical ability of TierX to connect with, transmit information to, or interoperate with a third-party service does not constitute a representation, endorsement, warranty, or guarantee regarding that third party's privacy, security, reliability, legality, availability, or data practices.

066. Service Providers Used by TierX

TierX may use third-party service providers to help operate the Services and our business, including providers of:

• Website or application infrastructure
• Authentication
• Transactional email
• Payment processing
• Analytics
• Performance monitoring
• Error tracking and diagnostics
• Customer support
• Security and fraud prevention
• Other operational services

These providers may process limited Account Data, technical information, or other information as reasonably necessary to provide their services to TierX.

We take reasonable steps to select service providers that maintain appropriate privacy and security practices. Service providers are permitted to process personal information only as necessary to provide services to TierX or as otherwise permitted by applicable law.

Where required or appropriate, we use contractual protections governing service providers' handling of personal information.

However, third-party service providers operate systems and services that are not controlled exclusively by TierX. TierX cannot guarantee the security, availability, performance, conduct, or privacy practices of any independent third party.

Use of a third-party service provider does not constitute a warranty or guarantee by TierX that the provider's systems will be uninterrupted, error-free, completely secure, or immune from unauthorized access, compromise, loss, or other security incidents.

077. Analytics, Cookies, and Similar Technologies

TierX or service providers used by TierX may use cookies, logs, analytics technologies, local storage, or similar technologies to:

• Operate the Services
• Authenticate users
• Maintain sessions
• Remember settings
• Understand usage
• Diagnose technical problems
• Detect security issues
• Measure performance
• Improve the Services

Third-party technologies may collect information according to their own privacy practices.

Where required by applicable law, TierX will provide applicable choices regarding non-essential cookies or similar technologies.

Available choices may vary depending on your location, applicable law, browser, device, and the technologies being used.

088. Disclosure of Information

TierX may disclose information under its control:

• To service providers performing services on our behalf
• At your direction or with your consent
• As reasonably necessary to provide or operate the Services
• To investigate suspected fraud, abuse, unauthorized activity, or security incidents
• To enforce our agreements or protect our legal rights
• When required or permitted by applicable law
• In response to subpoenas, court orders, warrants, regulatory requests, or other legal process
• When reasonably necessary to protect the rights, property, security, or safety of TierX, our users, or others
• In connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction

TierX does not sell Customer Lead Data.

TierX does not sell personal information collected through TierX user accounts for monetary compensation.

099. Data Retention

TierX may retain Account Data and other information under its control for as long as reasonably necessary or appropriate for purposes including:

• Providing the Services
• Maintaining business records
• Maintaining transaction and financial records
• Security and fraud prevention
• Troubleshooting
• Resolving disputes
• Enforcing agreements
• Establishing or defending legal claims
• Complying with legal obligations

Retention periods may vary according to the type of information, operational requirements, applicable law, and legitimate business needs.

Deletion of an account does not necessarily result in immediate deletion of every copy of information.

Certain information may remain temporarily in logs, backups, archives, security records, or other systems, or may be retained when reasonably necessary or legally permitted.

TierX generally does not determine or control retention periods for Customer Lead Data stored on customer-controlled infrastructure.

1010. Data Security

TierX uses administrative, technical, and organizational safeguards that we consider reasonable and appropriate for information under our control, taking into account factors such as the nature of the information, the Services, available technology, and applicable requirements.

Depending on the applicable component of the Services, safeguards may include technologies or practices such as:

• HTTPS/TLS
• Secure authentication mechanisms
• Password hashing
• Authentication tokens
• Role-based access controls
• Access restrictions
• Security logging or monitoring

These descriptions identify measures or technologies that may be used and do not constitute a warranty or guarantee of security.

No software, database, server, network, storage system, authentication mechanism, encryption method, transmission method, or security system can be guaranteed to be completely secure.

Accordingly, TierX cannot guarantee that information will never be accessed, disclosed, altered, corrupted, intercepted, lost, destroyed, unavailable, or otherwise affected by unauthorized persons, malicious actors, software vulnerabilities, infrastructure failures, third-party failures, human error, or other events.

Customers are responsible for securing infrastructure, credentials, databases, servers, networks, backups, integrations, endpoints, user accounts, and other systems under their control.

1111. Data Availability, Loss, and Backups

Because Customer Lead Data is generally maintained on customer-controlled infrastructure, TierX does not guarantee the availability, accuracy, completeness, integrity, preservation, recoverability, or successful backup of Customer Lead Data.

Customers are responsible for implementing backup, redundancy, retention, restoration, and disaster-recovery procedures appropriate for their business and data.

Customers should not rely on TierX as their sole backup, archival, disaster-recovery, or data-preservation mechanism.

TierX cannot guarantee that Customer Lead Data will be recoverable following deletion, corruption, hardware failure, software failure, misconfiguration, unauthorized access, a security incident, third-party failure, or other loss.

1212. Your Privacy Rights

Depending on where you reside and applicable law, you may have certain rights concerning personal information TierX controls, including rights to:

• Request access to certain personal information
• Request correction of inaccurate information
• Request deletion of certain information
• Request information concerning use or disclosure
• Obtain a copy of certain information
• Object to or restrict certain processing where applicable
• Withdraw consent where applicable
• Exercise applicable rights regarding sale or sharing
• Appeal certain privacy decisions where required by law

These rights are subject to applicable legal definitions, exceptions, limitations, verification requirements, and eligibility requirements.

TierX does not represent that every privacy right described above applies to every individual or in every jurisdiction.

Where applicable law provides a right, TierX will process eligible requests as required by that law.

To submit a privacy request regarding information controlled by TierX, contact:

privacy@tierx.io

TierX may take reasonable steps to verify the identity and authority of a person submitting a request.

If a request concerns Customer Lead Data controlled by a TierX customer, the request generally should be directed to that customer. TierX may not possess or have the technical ability or authority to independently access, locate, modify, export, or delete Customer Lead Data stored on customer-controlled infrastructure.

1313. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable privacy laws.

Depending on the jurisdiction, applicability of the law, and circumstances, these may include rights relating to access, correction, deletion, portability, disclosure, sale, sharing, targeted advertising, profiling, or certain categories of sensitive personal information.

TierX will honor applicable rights to the extent required by laws applicable to TierX.

Nothing in this Privacy Policy is intended to limit or waive rights that cannot lawfully be limited or waived.

1414. Children's Privacy

TierX is a business-oriented platform and is not directed to children under 13.

TierX does not knowingly solicit personal information from children under 13 through TierX user accounts.

Customers independently determine what Customer Lead Data they collect or process using their deployments and are responsible for determining whether that collection and processing is lawful and appropriate.

If TierX learns that it has directly collected personal information from a child in circumstances prohibited by applicable law, we will take appropriate steps as required by law.

1515. International Users and Data Transfers

TierX and service providers used by TierX may process information under TierX's control in the United States or other jurisdictions in which TierX or its service providers operate.

Privacy and data-protection laws may differ between jurisdictions.

Where applicable law requires particular safeguards for international transfers of information controlled by TierX, we will implement applicable measures required of us.

The location in which Customer Lead Data is stored on customer-controlled infrastructure is generally determined by the customer and its selected infrastructure providers.

1616. Third-Party Websites, Services, Software, and Infrastructure

TierX may interact with or provide links or technical compatibility with third-party websites, applications, APIs, databases, hosting providers, software, services, or other systems.

TierX does not control independent third parties and does not guarantee their availability, security, privacy practices, functionality, accuracy, reliability, continued compatibility, or performance.

A reference, link, integration, or technical compatibility with a third party does not constitute an endorsement, warranty, or guarantee by TierX.

Customers and users should independently evaluate third-party services before using them or transmitting information to them.

1717. Changes to Third-Party Services

Third-party services, APIs, integrations, browsers, hosting environments, operating systems, and other technologies may change independently of TierX.

TierX does not guarantee that any third-party integration or functionality will remain available, compatible, or unchanged.

Changes made by third parties may affect how information is transmitted, received, stored, or processed.

1818. Changes to This Privacy Policy

TierX may modify this Privacy Policy periodically to reflect changes in the Services, technology, our practices, legal requirements, or other circumstances.

When we update this Privacy Policy, we will revise the "Last Updated" date above.

Where applicable law requires additional notice or consent for a particular change, we will provide such notice or obtain such consent as required.

Continued use of the Services is subject to the then-applicable Privacy Policy, except where applicable law requires otherwise.

1919. No Guarantee Created by This Privacy Policy

This Privacy Policy is intended to describe TierX's privacy and data-handling practices.

Except to the extent expressly required by applicable law, nothing in this Privacy Policy should be interpreted as a representation or guarantee that any particular security control, technology, procedure, third-party service, infrastructure, transmission, storage system, or other measure will prevent every unauthorized access, disclosure, loss, misuse, alteration, interruption, security incident, or other event.

Nothing in this Privacy Policy limits any rights or obligations that cannot lawfully be limited under applicable law.

Additional terms governing use of TierX, including applicable warranties, disclaimers, responsibilities, and limitations, are contained in the TierX Terms of Service.

2020. Contact Us

Questions regarding this Privacy Policy or TierX's privacy practices may be directed to:

TierX

Email: privacy@tierx.io