Accordingly, Inc. ("Accordingly," "we," "us," or "our") is committed to protecting your privacy and the security of your information. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, platform, APIs, mobile apps, logistics services, and AI/automation tools (collectively, the "Services").

If you do not agree with this Privacy Policy, you may not use the Services.

1. Information We Collect

We collect information in the following categories:

1.1 Information You Provide

• Account information: name, email address, phone number, business information
• Profile data: job title, department, preferences
• Customer Data: content, files, messages, order data, shipment data, vendor data, and other inputs you upload into the platform
• Financial information: billing details, payment method tokens (we do not store full payment card numbers)
• Communications: support requests, chat conversations, emails, feedback
• AI prompts & inputs: data you submit to AI Features to generate outputs

1.2 Information We Automatically Collect

• Usage data: pages viewed, features used, actions taken, timestamps
• Device data: IP address, browser type, OS, device identifiers
• Log data: access logs, authentication logs, audit logs
• Cookies & tracking technologies: session cookies, analytics cookies, preference settings

1.3 Logistics Data

If you use our logistics features, we may collect:

• shipping details
• order details
• delivery addresses and contact information
• consignee information
• warehouse information
• delivery confirmations and status

1.4 Information from Integrations & Third Parties

If you connect Accordingly to third-party systems (e.g., accounting platforms, CRMs, productivity tools), we may receive information such as:

• customer records
• vendor profiles
• inventory data
• financial or order details
• user identity information

We only receive and process this information according to your instructions.

2. How We Use Your Information

We use personal information to:

2.1 Provide & Maintain the Services

• Enable core platform functionality
• Manage user accounts
• Process shipments, orders, and logistics workflows
• Run AI and automation features
• Provide integrations and APIs

2.2 Improve & Develop the Services

• Analyze usage patterns
• Test feature performance
• Train Accordingly-specific models on generalized data, non-personal
• Ensure service reliability and scalability

We do not use Customer Data to train generalized public AI models.

2.3 Communicate with You

• Product updates
• Support communications
• Billing notifications
• Security alerts

2.4 Secure the Services

• Fraud prevention
• Abuse detection
• Access control
• Incident response

2.5 Legal & Compliance

• Comply with applicable laws
• Enforce our agreements
• Protect the rights and safety of users and the public

3. How We Share Information

We do not sell personal information. We share information only in the following limited circumstances:

3.1 Service Providers

We work with vetted service providers that help us operate the Services, such as:

• cloud hosting and storage
• authentication and identity tools
• analytics tools
• communications tools
• logistics, warehousing, and delivery partners
• payment processors

All service providers must adhere to confidentiality obligations and maintain appropriate security controls.

3.2 Third-Party Logistics Providers

If you use our logistics features, we share necessary shipment data with third-party carriers and logistics partners for:

• transportation
• warehousing
• delivery
• returns processing

This is required to perform the Logistics Services you request.

3.3 AI & Automation Processing

When you use AI Features, your inputs may be processed by machine learning systems strictly to:

• generate outputs
• improve safety and quality
• prevent abuse
• provide the AI functionality you requested

We do not permit external model providers to use your data for training unrelated products unless explicitly mentioned in this or other agreements.

3.4 Business Transfers

If Accordingly is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of the transaction.

3.5 Legal Compliance

We may disclose information when required:

• by law
• by lawful request
• to investigate violations
• to prevent harm

4. How We Protect Your Information

We maintain administrative, technical, and physical safeguards consistent with:

• SOC 2 controls
• HIPAA compliance
• GDPR requirements
• Industry cybersecurity standards
• Role-based access controls
• Encryption in transit and at rest
• Secure software development practices
• Continuous monitoring and auditing

We restrict access to personal data only to authorized personnel with a legitimate need.

5. Data Retention

We retain personal information:

• as long as required to provide the Services
• as long as your account is active
• as long as required by law or contracts
• in accordance with our data retention schedule

Customer Data is deleted or returned upon request within the timeframes required under the MSA, DPA, or applicable law.

6. Your Rights & Choices

Depending on your region, you may have rights under GDPR, CCPA/CPRA, and other privacy laws.

6.1 Access & Correction

You may access and update your personal information through your account or by contacting us.

6.2 Deletion

You may request deletion of personal information, subject to legal or contractual retention obligations.

6.3 Data Portability

You may request a copy of your personal information in machine-readable format.

6.4 Opt-Out of Communications

You may opt out of marketing emails at any time.

6.5 Cookies

You can manage cookie preferences using your browser or our cookie banner.

6.6 AI Data Opt-Out

Where applicable, you may opt out of allowing your data to improve Accordingly-specific AI models.

7. International Data Transfers (GDPR)

If you are located in the EEA, UK, or Switzerland, your data may be transferred to the United States or other jurisdictions that may not provide equivalent data protection. We use:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)
• Additional safeguards

to ensure lawful cross-border data transfers.

8. HIPAA & Health Information

Accordingly is capable of supporting HIPAA-compliant processing only if Customer executes a Business Associate Agreement (BAA) with Accordingly. Without a BAA, Customer must not upload or process Protected Health Information (PHI).

9. Children's Privacy

Accordingly does not knowingly collect information from children under 13 (or under the minimum age in applicable jurisdictions). Users must not upload information about minors without appropriate consent.

10. Data Processing Addendum (DPA)

If Customer requires Accordingly to process personal data as a processor under GDPR or similar laws, the DPA governs such processing and applies automatically where required by law.

11. Cookies & Tracking Technologies

We use:

• essential cookies
• analytics cookies
• preference cookies
• security-related cookies

Our Cookie Policy provides additional details and controls.

12. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for their privacy practices or content.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or email in accordance with the MSA.

14. Contact Us

For questions, requests, or complaints about this Privacy Policy or data rights, contact:

Accordingly, Inc.

Email: privacy@accordingly.com

Address: 1925 Lovering Avenue Wilmington, DE 19806

EU Representative: Adam Brogden (contact@gdprlocal.com)