Privacy Policy

Last updated: June 20, 2026

This Privacy Policy explains how Elite Services Provider Inc. ("Elite Services Provider Inc.", "Company", "we", "us", or "our") collects, uses, stores, discloses, protects, and otherwise processes personal data in connection with our website, software, trial environments, support channels, billing flows, and related services (collectively, the "Service").

Service operator:

Elite Services Provider Inc.
Principal business address: 1001 S. Main St. Ste 600, Kalispell, MT 59901, United States
Support email for privacy requests: [email protected]

1. Scope

This Privacy Policy applies to personal data we process as a business operator of the Service, including when you:

visit our public website;
submit a registration form, trial request, support request, or contact request;
create or administer an account;
use the LMS, SaaS administration functions, billing functions, or related modules;
communicate with us by email, form, or other support channel.

This Privacy Policy does not override any separate written data processing agreement, enterprise agreement, or other signed contract that expressly governs the same processing activity.

2. Categories of Personal Data We May Collect

Depending on how you interact with the Service, we may collect and process:

Identity and account data

name, display name, username, organization role, and account identifiers;
email address, phone number, and authentication settings;
support verification information and account recovery information.

Organization and business data

organization name, organizational structure, plan assignment, billing state, and operational preferences;
records necessary to provision services, maintain entitlements, and administer accounts.

Payment and transaction data

invoice identifiers, payment status, payment gateway references, subscription status, billing cycle, and tax-related transaction records;
limited payment metadata from processors or wallet-related verification flows.

We do not store full payment card numbers unless explicitly stated in a separate processor-controlled flow. Payment processors may collect payment credentials directly under their own terms and privacy policies.

Technical, device, and security data

IP address, browser type, device characteristics, operating system, approximate geolocation inferred from network information, timestamps, session identifiers, and access logs;
authentication logs, two-factor state, security events, abuse-prevention signals, and audit trails;
diagnostics, usage telemetry, and error or performance data.

Communications data

support emails, form submissions, access issues, security requests, and contact messages;
administrative, onboarding, service, legal, and billing communications.

User-provided operational data

If you use the Service, you or your organization may input borrower, guarantor, customer, document, financial, communication, or other operational data. We process that data on the instructions and account of the relevant account holder or organization, subject to our Terms and any applicable contract.

3. Sources of Personal Data

We may collect personal data:

directly from you;
from your organization, account owner, or authorized administrator;
automatically through your interaction with the Service;
from payment processors, cloud providers, identity providers, support tools, communication providers, or security vendors;
from legal, regulatory, fraud-prevention, or public record sources where permitted by law.

4. How We Use Personal Data

We may use personal data to:

provide, host, maintain, authenticate, secure, and support the Service;
create and administer accounts, trials, subscriptions, invoices, and entitlements;
communicate with you about onboarding, support, incidents, payments, renewals, policy changes, or legal matters;
detect, investigate, prevent, and respond to fraud, abuse, unauthorized access, policy violations, and security incidents;
improve performance, reliability, usability, security, and product development;
perform analytics, aggregated reporting, capacity planning, and operational monitoring;
enforce our Terms, contracts, and legal rights;
comply with legal obligations, court orders, law enforcement requests, audits, and regulatory requirements.

5. Website Notices, Transparency, and Consumer Rights Channels

Where applicable, we maintain a public privacy notice and one or more means by which eligible users may submit privacy-related requests. We may require verification before acting on a request to protect account security and the privacy of others.

6. How We Disclose Personal Data

We may disclose personal data:

to service providers and processors who host, secure, support, analyze, communicate, deliver, or process parts of the Service;
to payment processors, billing vendors, email providers, messaging providers, cloud infrastructure providers, and fraud-prevention vendors;
within our corporate or ownership structure where necessary for operations, security, compliance, or transactions;
to legal, regulatory, governmental, or enforcement authorities where required or where we reasonably consider disclosure necessary to protect rights, safety, security, or property;
in connection with a financing, merger, acquisition, restructuring, asset sale, or similar corporate transaction;
to your authorized administrators or account owners;
with your direction or consent.

We may also use and disclose aggregated, de-identified, or statistical information that does not identify a natural person.

6A. Analytics and Risk Output Notice

Where the Service displays analytics, portfolio metrics, risk signals, projections, planning outputs, or similar internal decision-support information, those outputs may reflect user-entered data, historical snapshots, assumptions, thresholds, and automated logic. They are provided as software outputs for internal operational use only and are not guaranteed to be accurate, complete, current, or suitable for any regulated, financial, legal, underwriting, provisioning, or commercial decision.

Organizations remain solely responsible for validating their own data and for determining whether any analytics or risk-related output should be relied upon.

7. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

providing and securing the Service;
maintaining business, tax, accounting, contractual, and audit records;
preserving backups, logs, dispute records, and evidence;
complying with legal, regulatory, and enforcement obligations;
protecting against fraud, abuse, duplicate requests, and improper deletion.

Retention may differ by data type, account state, billing status, legal obligation, and risk profile. Even if service features become unavailable under a lower plan or after suspension, data may remain retained according to operational, legal, archival, and recovery requirements.

We may also apply automated inactivity and retention workflows. At the time of this Policy, inactive organizations without an active plan may receive a warning after a defined inactivity window and may then be permanently deleted if the owner does not log in or reactivate the organization within the follow-up period. If that deletion workflow completes, organization data, files, attachments, and related records may be permanently erased and may not be recoverable. You are responsible for maintaining your own exports and backups if you want to preserve data beyond the lifecycle of your account.

To the maximum extent permitted by law, retention, backup, archival, export, restoration, and recovery mechanisms are provided on an operational best-effort basis and not as a warranty of uninterrupted preservation, recoverability, or permanent availability of any tenant data or personal data.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal data. No method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

We may require identity verification, two-factor authentication, account restrictions, session controls, logging, and support gating as part of our security practices.

9. Data Breach and Security Incident Handling

If a security incident affects personal information, we may investigate, contain, remediate, preserve logs and evidence, engage service providers or authorities, and provide notice as required by applicable law.

For businesses conducting business in Montana, Montana's breach law requires disclosure without unreasonable delay in specified circumstances and also requires notice to the Attorney General's consumer protection office in certain cases.

10. Electronic Communications

We may send transactional, legal, administrative, security, onboarding, billing, and service-related communications electronically. These communications are part of operating the Service and are not optional where necessary for account administration, legal compliance, or security.

Marketing messages, where used, may be subject to additional controls such as unsubscribe mechanisms, except where a communication is transactional or otherwise exempt under applicable law.

11. Children

The Service is intended for business and professional use and is not directed to children. We do not knowingly solicit or provide the Service to children in a manner intended to fall within the scope of children's online consumer services.

If we learn that personal information was collected from a child in violation of applicable law, we may take steps to delete the information or disable the related account.

12. International Transfers

We may process and store personal data in the United States and in other jurisdictions where our providers or infrastructure operate. By using the Service, you understand that data may be transferred to jurisdictions with privacy laws different from those of your own jurisdiction.

13. Montana Consumer Data Privacy

Where the Montana Consumer Data Privacy Act ("MCDPA") applies, eligible consumers may have rights that may include:

confirming whether we process personal data about them;
accessing personal data;
correcting certain inaccuracies;
deleting certain personal data;
obtaining a portable copy of certain personal data;
opting out of targeted advertising, sale of personal data, or certain profiling activities, where applicable.

Where applicable, we will respond without undue delay and generally no later than 45 days after receipt of a verified request, subject to any lawful extension. If we decline a request, we will explain why and describe how to appeal when required by law.

To submit a privacy request or appeal, contact: [email protected] with the subject line Privacy Request or Privacy Appeal.

14. Choices and Controls

Depending on your relationship with us and applicable law, you may:

update certain account information through your account;
request account support, correction, or deletion review;
disable or not enable certain optional communications;
submit a privacy request or appeal as described above.

We may deny or limit requests where permitted by law, including where we cannot verify identity, where legal obligations require retention, where rights of others would be affected, or where requests are excessive, repetitive, technically infeasible, or abusive.

15. Cookies and Similar Technologies

We may use cookies, local storage, session tools, security tokens, and similar technologies to:

authenticate sessions;
remember preferences;
operate forms and account flows;
maintain security and fraud controls;
understand usage and improve the Service.

Your browser or device may provide controls for managing cookies and local storage, but blocking essential mechanisms may impair the Service.

16. Third-Party Services

Third-party websites, processors, and integrations may collect personal data independently when you interact with them. Their processing is governed by their own notices and terms, not this Privacy Policy.

17. Changes to this Privacy Policy

We may revise this Privacy Policy from time to time. The updated version becomes effective when posted unless a later effective date is stated. If we make a material change where notice is required, we will provide notice in a manner we consider appropriate to the relationship and the applicable law.

18. Contact

For privacy-related questions, verified rights requests, or appeals, contact:

Elite Services Provider Inc.
1001 S. Main St. Ste 600
Kalispell, MT 59901
United States
[email protected]