Personyze Privacy Policy

Last updated: May 2026

We will never sell your personal data. Personyze is a B2B SaaS platform that helps our customers personalize their websites, emails, and apps. This Privacy Policy explains how Personyze collects, uses, and protects personal data — both for visitors of websites that use Personyze (“Personyze-Enabled Sites”) and for our direct customers.

1. Who we are

For any privacy-related question, request, or complaint, contact us at support@personyze.com.

2. If you are a visitor of a Personyze-Enabled Site

This section applies if you are browsing a website that uses Personyze to deliver personalized content, recommendations, A/B testing, popups, or similar experiences. It should be read alongside the Privacy Policy of that specific site, which will contain further details about how your data is processed by the site itself.

Our role. When you visit a Personyze-Enabled Site, Personyze acts as a data processor on behalf of the site operator (the data controller). The site operator decides what data is collected and how it is used. Personyze only processes that data to provide the personalization, analytics, and optimization services contracted by the site operator.

What we collect. Personyze uses cookies and similar technologies to collect data about how you interact with Personyze-Enabled Sites and the devices you use to access them. This may include:

• IP address (captured and stored only in a truncated or anonymized form where feasible)
• Device characteristics — screen size, device type, browser information, language, operating system
• Geographic location at the country/region level (derived from IP)
• Unique device or cookie identifiers
• Browsing behavior on the Personyze-Enabled Site — pages viewed, dwell time, clicks, referrer, scroll depth, custom events configured by the site operator
• Inferred audience segments based on the above

This information is stored in a pseudonymized profile. Neither Personyze nor the site operator uses this profile to identify you as an individual unless you have separately provided identifying information (for example, by signing in or filling out a form) and the site operator has chosen to pass that information to Personyze.

How to opt out. You may opt out of Personyze tracking at any time by:

• Visiting the opt-out page on the Personyze-Enabled Site and selecting “Disable Tracking”, where available
• Enabling the Global Privacy Control (GPC) signal in a supporting browser
• Enabling “Do Not Track” (DNT) in your browser
• Configuring cookie preferences via the site’s cookie banner, where applicable

Your rights. Depending on your jurisdiction (including under the EU/UK GDPR, the California Consumer Privacy Act / CPRA, and similar U.S. state privacy laws such as VCDPA, CPA, CTDPA, UCPA, TDPSA, and OCPA), you may have the right to access, correct, delete, restrict, or port your personal data; to object to certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority. To exercise these rights, please contact the operator of the Personyze-Enabled Site you visited — they control your data. If you cannot reach them, you may also contact us at support@personyze.com and we will route your request appropriately.

3. If you are a Personyze customer or visit personyze.com

This section applies if you have a Personyze account, evaluate the Service, or interact with Personyze directly (for example, by submitting a contact form, requesting a demo, or browsing personyze.com).

What we collect about you as a customer:

• Account information — name, business email, company name, role, billing details
• Authentication and usage logs — login times, IP address, browser, actions taken in the platform
• Communications — emails, support tickets, chat transcripts
• Marketing data — pages visited on personyze.com, content downloaded, demos requested

How we use it. To provide and improve the Service, manage your account, send billing communications, deliver support, secure our systems, prevent fraud, and (with your consent or as otherwise permitted by law) send you marketing communications about Personyze products you may find relevant. You can unsubscribe from marketing emails at any time using the link at the bottom of each email.

Your rights as a customer. The same rights described in Section 2 apply to you in your individual capacity. To exercise them, email support@personyze.com.

4. Data we never want to receive

Personyze is not designed to process certain categories of sensitive personal data. You should never use the Service to collect, upload, transmit, or store any of the following:

• Government-issued identifiers (Social Security numbers, tax IDs, driver’s license numbers, passport numbers)
• Financial account numbers or payment card data subject to PCI DSS
• Protected health information regulated by HIPAA or comparable laws
• Precise geolocation, biometric, or genetic data
• Personal data of children under 13 (or under 16 where applicable) without proper consent
• Account passwords or security credentials
• Special categories of data under GDPR Article 9 (racial or ethnic origin, political opinions, religious beliefs, trade-union membership, sexual orientation, health data)

5. Data sharing

We do not sell or share personal data for cross-context behavioral advertising. The fees our customers pay are for the Service itself, not for personal data.

We share data only with:

• Sub-processors who help us run the Service (e.g., cloud hosting, email delivery, payment processing). All sub-processors are bound by data-protection obligations no less protective than those we owe our customers. A current list is available on request.
• Legal authorities, where we are legally required to do so or where it is necessary to protect our rights, our customers, or the public.
• Acquirers, in the event of a merger, acquisition, or sale of assets — subject to the same protections described here.

6. International transfers

Personyze may transfer personal data to countries outside your country of residence, including the United States. Where such transfers are subject to the GDPR or UK GDPR, we rely on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum as appropriate. For Swiss data, we apply the modifications described by the Swiss FDPIC. Further detail is available in our Data Processing Addendum (the “DPA”), which forms part of our Terms & Conditions.

7. Security

Personyze maintains administrative, technical, and physical safeguards consistent with industry practice for SaaS providers of comparable size and scope. These include encryption in transit (TLS), role-based access control with least-privilege principles, network protections, regular patching, written incident-response processes, personnel under confidentiality obligations with privacy and security training, and reputable cloud-hosting providers for physical security. Additional detail is provided in Annex 2 of our DPA.

8. Data breach notification

If Personyze becomes aware of a confirmed security incident affecting your data, we will notify the affected customer without undue delay and in any event within seventy-two (72) hours of confirmation, and will provide reasonable cooperation in any investigation, mitigation, and notification obligations under applicable law.

9. Retention

Personyze retains personal data only as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Customer Data is retained in accordance with the retention settings configured in the customer’s account and our then-current data-retention practices. On termination, data is returned or deleted within ninety (90) days, subject to applicable legal-retention requirements and standard backup-rotation cycles. Aggregated or de-identified data that cannot reasonably be linked to a person is not subject to deletion.

10. Changes to this policy

We may update this Privacy Policy from time to time. For material changes that reduce your rights or expand our use of personal data, we will provide reasonable advance notice — either by email (to customers) or by posting a prominent notice on personyze.com. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact

For any privacy question, request, or complaint:

Personyze
Email: support@personyze.com
Website: www.personyze.com