Privacy Policy

This Privacy Policy explains how Sisu Logistic, LLC (DBA Sisu IO) ("ClimbSuite," "we," "us") collects, uses, and shares personal information when you use the ClimbSuite platform and websites (the "Service"). For personal data we process on behalf of our customers (our customers' contacts/leads), the customer is the controller and we act as processor under the Data Processing Addendum.

1. Information we collect

• Account data you provide: name, email, organization, billing details.
• Content & contacts you upload to run your business (e.g., your CRM contacts, course content).
• Usage data: log data, device/browser info, and analytics about how the Service is used.
• Cookies & similar tech: see our Cookie Policy.

2. How we use information

To provide, secure, and improve the Service; to process payments; to communicate with you (service and, with consent where required, marketing messages); to provide support; to detect abuse and comply with law.

3. How we share information

• Service providers / subprocessors that help us run the Service (hosting, payments, email delivery,

analytics) — see [Subprocessors](/subprocessors). They are bound to protect the data.

• At your direction, with third parties you connect (e.g., your payment processor).
• Legal / safety: to comply with law, enforce our terms, or protect rights and safety.
• Business transfers: in a merger, acquisition, or asset sale, with notice as required.
• We do not sell personal information. [REVIEW: confirm against CPRA "sale/share" definitions.]

4. Your rights

Depending on your location (e.g., GDPR/EEA, UK, CPRA/California), you may have rights to access, correct, delete, port, or restrict your personal data, and to object or withdraw consent. To exercise rights, contact tero@sisulogistic.co. If you are a contact of one of our customers, please direct requests to that customer; we will assist them as processor.

5. International transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers. [REVIEW with counsel.]

6. Data retention

We keep personal data as long as needed to provide the Service and for legitimate/legal purposes, then delete or anonymize it. [REVIEW: state specific retention periods.]

7. Security

We use reasonable technical and organizational measures (access controls, encryption in transit, tenant isolation) to protect data. No system is perfectly secure.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We may update this Policy and will post the new version with a revised date; material changes will be notified as required.

10. Contact

Sisu Logistic, LLC (DBA Sisu IO), Miami, Florida, USA — tero@sisulogistic.co