Privacy Policy

IntelligentSystems LLC (“Company,” “we,” “us,” or “our”) is an Ohio limited liability company that operates intsystemsllc.com and the associated financial intelligence platforms, including RedThread Systems and BluePrint (collectively, the “Platform”).

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, create an account, use the Platform, or interact with us. It applies to all users, including visitors, registered users, and paying customers.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue your use of the Platform immediately.

This Privacy Policy is incorporated by reference into our Terms of Service.

2.1 Information You Provide Directly

• Account creation: name, business email address, organization/company name, job title, and password.
• Purchases: billing name, billing address, and payment card details (collected and processed by our PCI-compliant payment processor; we do not store full card numbers).
• Contact: name, email address, and the content of your message.
• Surveys or promotions: any information you voluntarily provide.

2.2 Information Collected Automatically

• Log data: IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on pages, and access timestamps.
• Device information: device type, screen resolution, and unique device identifiers.
• Usage data: features accessed, searches conducted, reports generated, and interactions with Platform tools.
• Cookies and similar technologies: see Section 6 for details.

2.3 Information from Third Parties

• Payment processors: transaction confirmations and billing-related information.
• Analytics providers: aggregated usage and performance data.
• Publicly available sources: business contact information for outreach purposes.

2.4 Information We Do Not Collect

The Platform processes publicly available SEC filing data and other publicly available financial information. We do not collect or process the personal data of individuals referenced in such public filings unless those individuals are also registered users of our Platform. The Platform is intended solely for use by business professionals aged 18 and over. We do not knowingly collect personal information from individuals under the age of 18.

We process your personal information on the following legal bases: (i) performance of a contract; (ii) compliance with a legal obligation; (iii) legitimate interests; and (iv) consent, where you have provided your explicit consent, including for marketing communications. You may withdraw consent at any time.

We do not sell your personal information.

4.1 Service Providers

We engage trusted third-party vendors who process data on our behalf, including payment processors (e.g., Stripe), cloud hosting and infrastructure providers, email service providers, and analytics providers. These service providers are contractually restricted from using your personal information for any purpose other than providing services to us.

4.2 Legal Requirements

We may disclose your personal information if required by applicable law, regulation, valid court order, subpoena, or governmental request. Where permitted by law, we will attempt to notify you before complying with such a request.

4.3 Business Transfers

If we are involved in a merger, acquisition, asset sale, or other corporate transaction, your personal information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a materially different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law.

• Account data: retained for the duration of your account and for 90 days after account closure.
• Payment records: retained for a minimum of 7 years to comply with financial recordkeeping requirements.
• Communications and support records: retained for 3 years from the date of last interaction.
• Log and usage data: retained for up to 12 months, then aggregated or deleted.

6.1 What We Use

• Strictly necessary cookies to keep you logged in during your session.
• Functional cookies to remember your preferences.
• Analytics cookies to analyze how you use the Platform.
• Marketing cookies (only with your consent) to deliver relevant communications.

6.2 Your Choices

When you first visit the Platform, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies. You may change your cookie preferences at any time via the cookie settings link in the website footer. You may also control cookies through your browser settings.

6.3 Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control (GPC) browser signal. When we detect a GPC signal from a California resident's browser, we will treat it as an opt-out request with respect to the sale and sharing of personal information for cross-context behavioral advertising, as required under the CCPA/CPRA.

7.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out: Opt out of the sale or sharing of your personal information.
• Right to Limit Use of Sensitive Personal Information: Request that we limit use of sensitive personal information to necessary purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at admin@intsystemsllc.com or submit a request via our Privacy Request Form. We will acknowledge receipt within ten (10) business days and respond substantively within forty-five (45) calendar days.

7.2 Rights for Other Users

Regardless of your location, you may:

• Access and update your account information by logging into your account settings.
• Opt out of marketing emails by clicking the “unsubscribe” link in any marketing email.
• Request deletion of your account by contacting us at admin@intsystemsllc.com.
• Submit a “Do Not Sell or Share My Personal Information” request via our Privacy Request Form.

7.3 EU/UK Users (GDPR / UK GDPR)

If you are located in the European Union or United Kingdom, you have the following rights under the GDPR and UK GDPR: (i) right of access; (ii) right to rectification; (iii) right to erasure (“right to be forgotten”); (iv) right to restriction of processing; (v) right to data portability; (vi) right to object to processing; and (vii) right not to be subject to solely automated decision-making.

To exercise any of these rights, contact us at admin@intsystemsllc.com or submit a request via our Privacy Request Form. We will respond within one (1) month.

For users in the EU and UK, we act as a data controller. Our lawful bases for processing are: contract performance; compliance with legal obligations; legitimate interests; and consent. We do not transfer personal data outside the EU/EEA or UK without ensuring adequate protection, such as through Standard Contractual Clauses.

We implement commercially reasonable security measures including:

• Encryption of data in transit using TLS/HTTPS.
• Access controls and authentication requirements for Platform personnel.
• Use of a PCI-DSS-compliant payment processor; we do not store raw payment card data.
• Regular review of our security practices.

No method of data transmission is completely secure. In the event of a data breach, we will notify you as required by applicable law, including the GDPR's 72-hour supervisory authority notification requirement where applicable.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated Privacy Policy on the Platform with a new effective date.
• Send a notification to your registered email address for material changes.

Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.