Tsunami Automation – Privacy Policy

1. Who We Are

This Privacy Policy describes how Tsunami Automation Global LLC ("Tsunami Automation", "we", "us", or "our") collects, uses, discloses, and safeguards personal information when you:

• Visit or use our websites, landing pages, and online properties, including tsunamiautomation.com and any subdomains (the "Sites");
• Interact with our emails, forms, chat widgets, AI assistants, or other online features; and
• Use our software platform, automation services, and related consulting or implementation services (together, the "Services").

Unless we say otherwise, Tsunami Automation is the "controller" of personal information processed under this Policy for website visitors, marketing contacts, and our direct customers. When we process personal information on behalf of a business customer about their own end users, we generally act as a "processor" or "service provider" and our use of that information is governed by our contract with that customer.

If you have questions about this Policy, please contact us at the email above.

2. Scope

This Policy applies to personal information we collect and process when:

• You visit or interact with our Sites;
• You request information about our Services, subscribe to our newsletter, download a resource, complete a quiz or assessment, or book a call with us;
• You become our customer and we collect contact, billing, or account information about you or your organization; and
• You otherwise communicate with us online or offline in connection with the Services.

This Policy does not apply where we process personal information only on behalf of our business customers about their own clients or contacts.

3. Information We Collect

3.1 Information You Provide Directly

You may provide personal information directly to us when you fill out forms, subscribe to our newsletter, book a call, create an account, sign a proposal, participate in surveys or events, or communicate with us.

Common examples include:

• Identification and contact details: name, business name, role or title, email address, phone number, mailing or billing address;
• Business information: company size, industry, existing tools and systems, automation goals;
• Account information: username, password, and settings;
• Payment information: limited payment or billing details (credit card data is handled by our payment processor);
• Support and communications: content of messages, questions, or feedback you send us;
• Survey, quiz, or assessment responses: information you provide when completing automation readiness tools.

3.2 Information Collected Automatically

When you use the Sites or Services, we and our service providers automatically collect certain information using cookies, pixels, and logs:

• Device and browser information: IP address, operating system, browser type and version, language settings;
• Usage information: pages viewed, links clicked, time spent, referring/exit pages, date and time of visits;
• Approximate location: derived from your IP address (city, region, country);
• Log and diagnostic data: error reports, performance data, technical logs.

3.3 Information From Third Parties

We may receive personal information about you from:

• Business customers who share contact details for team members;
• Lead sources and partners, such as referral partners or directory listings;
• Integrated tools and platforms when you connect third-party services to our systems;
• Public sources such as company websites or social media profiles.

4. How We Use Personal Information

4.1 Providing and Operating the Sites and Services

• To operate, maintain, and provide the Sites and Services;
• To create and manage accounts and profiles;
• To process orders, subscriptions, invoices, and payments;
• To deliver automations, workflows, reports, and AI-powered features.

4.2 Communicating With You

• To respond to inquiries, requests, or support tickets;
• To send administrative information, such as confirmations, technical notices, updates, and security alerts;
• To schedule and manage calls, demos, audits, or onboarding sessions.

4.3 Marketing, Personalization, and Lead Generation

• To send marketing or promotional communications about our Services;
• To run advertising and retargeting campaigns;
• To personalize your experience on our Sites.

You may opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting us.

4.4 Analytics, Improvement, and Security

• To monitor and analyze usage and performance;
• To maintain security and integrity of our systems, prevent fraud, and detect suspicious activity;
• To develop new features and improve user experience.

4.5 Legal, Compliance, and Protection

• To comply with applicable laws, regulations, and legal processes;
• To enforce our agreements, resolve disputes, and protect our rights or the rights of others;
• To respond to claims, audits, or regulatory inquiries.

4.6 Other Purposes With Your Consent

We may use personal information for other purposes that are clearly disclosed at the time you provide the information, or with your consent.

5. Cookies and Similar Technologies

We and our partners use cookies, pixels, local storage, and similar technologies to:

• Remember your preferences and settings;
• Keep you signed in where applicable;
• Analyze traffic and usage patterns;
• Deliver and measure the effectiveness of advertising campaigns.

You can control cookies through your browser settings. Where required by law, we will obtain your consent before setting analytics or marketing cookies.

6. How We Share Personal Information

6.1 Service Providers and Sub-Processors

We engage trusted third-party service providers for hosting, analytics, CRM, marketing tools, communication, payment processing, and professional advisors. These providers may access personal information only to perform services on our behalf.

6.2 Business Customers

When we process personal information on behalf of a business customer, we may share relevant information back to that customer as necessary.

6.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

6.4 Legal Obligations and Protection of Rights

We may disclose personal information to comply with applicable law, enforce our agreements, or protect our rights and the safety of others.

6.5 With Your Consent

We may share personal information when you consent to or direct us to do so.

We do not sell personal information for money. However, some use of marketing cookies and advertising tools may be considered a "sale" or "sharing" under certain privacy laws.

7. International Data Transfers

Tsunami Automation is based in the United States and uses service providers and infrastructure located in the United States and other countries. Your personal information may be transferred to and processed in jurisdictions that may not provide the same level of data protection as your home country.

Where required by law, we will implement appropriate safeguards, such as standard contractual clauses, to protect personal information during international transfers.

8. Data Retention

We retain personal information for as long as reasonably necessary to:

• Provide the Sites and Services;
• Fulfill the purposes described in this Policy;
• Comply with our legal, tax, and accounting obligations;
• Resolve disputes and enforce our agreements.

When personal information is no longer needed, we will delete or anonymize it.

9. Your Privacy Rights and Choices

9.1 Email Marketing and Communications

You can opt out of marketing emails at any time by clicking the "unsubscribe" link or by contacting us at support@tsunamiautomation.com. We may still send non-marketing messages relating to your use of the Services.

9.2 Rights Under EEA/UK/Swiss Data Protection Laws

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have the following rights:

• Right of access: to obtain confirmation whether we process your personal information and to receive a copy;
• Right to rectification: to correct inaccurate or incomplete personal information;
• Right to erasure: to request deletion of your personal information in certain circumstances;
• Right to restriction: to request we restrict processing in certain cases;
• Right to data portability: to receive certain personal information in a structured, machine-readable format;
• Right to object: to object to certain processing, including direct marketing;
• Right to withdraw consent: where our processing is based on your consent.

To exercise these rights, contact us at support@tsunamiautomation.com and indicate "EEA/UK/Swiss data rights". You also have the right to lodge a complaint with your local supervisory authority.

9.3 Rights Under U.S. State Privacy Laws (e.g., CCPA/CPRA)

If you are a resident of certain U.S. states, you may have additional rights, including:

• The right to know what categories of personal information we collect, use, disclose, and "sell" or "share";
• The right to access specific pieces of personal information;
• The right to correct inaccurate personal information;
• The right to delete personal information, subject to exceptions;
• The right to opt out of "sale", "sharing", or certain types of targeted advertising;
• The right to non-discrimination for exercising your privacy rights.

To exercise your U.S. state privacy rights, contact us at support@tsunamiautomation.com with the subject line "Privacy Rights Request". You may also designate an authorized agent to make a request on your behalf.

10. Children's Privacy

Our Sites and Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16.

If you believe we may have collected information from a child under 16, please contact us at support@tsunamiautomation.com.

11. Third-Party Sites and Services

Our Sites may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of those third parties, and this Policy does not apply to them.

When you connect or integrate third-party tools with our Services, the use of your information by those third parties is governed by their own terms and privacy policies.

12. Security

We use technical and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures may include access controls, encryption, logging, and security reviews.

However, no system or transmission of data over the internet is completely secure. You are responsible for keeping account credentials confidential and for notifying us promptly if you suspect unauthorized access.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top and provide additional notice where required.

Your continued use of the Sites or Services after an updated Privacy Policy becomes effective indicates that you have read and understood the current version.

14. How to Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal information, please contact us at: