Premonio, Inc., a Delaware corporation, Dover, DE

Premonio, Inc. (“Premonio,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we collect through our websites, applications, software platforms, products, and services.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit premonio.com, use the Premonio GOALS platform, request a demo, communicate with us, subscribe to our services, or otherwise interact with us.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Depending on how you interact with Premonio, we may collect the following categories of information.

1.1 Information You Provide Directly

• Name and professional title
• Business email address
• Telephone number
• Company or organization name
• Job title and business information
• Account credentials
• Billing and payment information
• Information submitted through contact, demo, or consultation forms
• Communications and correspondence with Premonio
• Information provided when requesting customer support
• Information provided during onboarding or implementation
• Information contained in files, datasets, or other materials you upload to the platform

1.2 Business and Revenue Data

When customers use Premonio’s software and services, they may provide business information such as:

• Revenue and financial metrics
• Sales and marketing information
• Lead and opportunity data
• Customer relationship management (CRM) information
• Pipeline and conversion information
• Budgets and forecasts
• Goals, targets, and KPIs
• Marketing campaign information
• Sales-stage information
• Plan-versus-actual performance information
• Other business data submitted by an authorized customer

Customer-provided business information may contain personal information relating to employees, prospects, customers, partners, or other individuals. As between Premonio and the customer, the customer is responsible for ensuring it has the necessary rights and legal basis to submit such information to the platform.

1.3 Information Collected Automatically

• IP address
• Browser type and version
• Device type
• Operating system
• Approximate location derived from IP address
• Pages and features accessed
• Referring website
• Date and time of activity
• Session and usage information
• Application performance and diagnostic information
• Cookies and similar technologies

1.4 Information From Third-Party Services

If you or your organization connect Premonio to third-party applications or services, we may receive information from those services according to the permissions granted by you or your organization. These services may include CRM, marketing, analytics, financial, productivity, or other business systems. You should review the privacy policies of any third-party service you connect to Premonio.

2. How We Use Information

• Provide, operate, and maintain our services
• Create and manage user accounts
• Provide requested software functionality
• Build and manage go-to-market and revenue plans
• Analyze business and performance data
• Generate forecasts, scenarios, reports, recommendations, and insights
• Provide AI-assisted analysis and recommendations
• Import, process, synchronize, and organize customer data
• Provide customer support
• Process payments and subscriptions
• Communicate with customers and users
• Respond to inquiries and demo requests
• Improve our products and services
• Monitor service performance and security
• Detect and prevent fraud, abuse, and unauthorized access
• Troubleshoot technical problems
• Comply with legal obligations
• Enforce our agreements
• Protect the rights, property, and safety of Premonio, our customers, and others

We may also use aggregated or de-identified information for analytics, research, benchmarking, product improvement, and business planning, provided that such information does not reasonably identify an individual.

3. Customer Data and Business Information

Premonio is designed to help businesses analyze revenue, sales, marketing, financial, and operational information. When an organization provides data to Premonio, the organization generally determines what information is submitted to the platform and how that information may be used.

If you access Premonio through an organization, your use of the service may be governed by an agreement between Premonio and that organization. In such circumstances, your organization may control your account and may have access to information associated with your use of the service. If you have questions about how your organization’s data is handled, you should contact your organization.

In this context, Premonio typically acts as a “service provider” / “processor” for personal information a customer submits to the platform, and as a “business” / “controller” for personal information relating to our own website visitors, prospects, and billing contacts. Section 17 below describes the data-processing terms that govern the processor relationship. 

4. AI and Automated Analysis

Certain Premonio services may use artificial intelligence, machine learning, statistical modeling, predictive analytics, or automated processing to generate insights, recommendations, forecasts, scenarios, reports, or other outputs.

AI-generated or algorithmically generated information may be based on:

• Information supplied by customers
• Information imported from connected systems
• Information generated through use of the platform
• Benchmarks or other reference information
• Other permitted sources

AI-generated outputs may contain errors or inaccuracies and should be reviewed by qualified personnel before being relied upon for significant business, financial, operational, or strategic decisions. Unless otherwise agreed with a customer, Premonio does not represent that AI-generated outputs are guaranteed to be accurate, complete, or suitable for a particular purpose.

4.1 AI Sub-Processors and What They Receive

Premonio uses Anthropic’s Claude models and Google’s Gemini models, accessed via API, as sub-processors to help generate AI-assisted analysis, recommendations, forecasts, and other outputs within the platform. Premonio may also use select open-source language models for certain low-complexity, low-cost processing tasks.

Before any customer information reaches the GOALS platform or is shared with an AI provider, Premonio converts data imported from a customer’s Salesforce or other CRM system (via API connection or CSV upload) into aggregate metrics. These imports are limited to lead-stage names, stage-transition timestamps, and deal dollar amounts — they do not include personal identifiers such as names, email addresses, phone numbers, or other contact information. Premonio does not store individual-level lead or opportunity records in its database; this limited, non-identifying data is used only to calculate aggregate conversion-rate and lead-velocity metrics by lead source.

Only these aggregated, non-personal metrics (for example, lead source names, conversion-rate percentages, and revenue figures) — never individual lead or opportunity records — are used within GOALS or provided to any AI provider, including Anthropic, Google, or any open-source model Premonio may use.

Premonio’s agreements with its AI providers require that customer data submitted through the platform is not used to train the providers’ underlying models (for example, via Anthropic’s and Google’s enterprise/API data-handling commitments). A current list of AI and other sub-processors is available in Section 17.

5. Cookies and Similar Technologies

Premonio may use cookies, pixels, local storage, analytics tools, and similar technologies to:

• Keep websites and applications functioning
• Remember preferences
• Understand website traffic
• Measure product usage
• Improve website and application performance
• Maintain security
• Analyze marketing effectiveness

Where required by applicable law, we will provide appropriate choices regarding non-essential cookies and similar technologies, including a cookie banner or preference center that allows you to accept or reject non-essential cookies before they are set.

Premonio currently uses the following analytics and advertising technologies on premonio.com: Google Analytics (website usage analytics) and the LinkedIn Insight Tag (marketing campaign measurement and retargeting). We do not currently use any other third-party advertising or analytics cookies. If this changes, this section will be updated accordingly.

6. How We Share Information

Service Providers

We may use third-party companies to provide services such as:

• Cloud hosting
• Data storage
• Payment processing
• Analytics
• Customer support
• Email delivery
• Security
• Authentication
• Software infrastructure
• Data integration
• AI and machine-learning services

These providers may process information on our behalf and are contractually required to handle information according to applicable contractual and legal requirements, and only for the purposes for which we engage them. A current subprocessor list is available at [INSERT URL] or upon request (see Section 17).

Business Transfers

If Premonio is involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

Legal Requirements

• Comply with applicable law
• Respond to lawful requests
• Protect our rights or property
• Prevent fraud or abuse
• Protect the security of our services
• Protect the safety of individuals

With Your Direction

We may disclose information when you instruct us to do so or otherwise provide authorization.

We do not sell personal information in exchange for monetary consideration. As described in Section 11, certain uses of cookies and analytics/advertising technology may be considered “sharing” under California law; see Section 11 for your opt-out rights.

7. Data Retention

• Provide our services
• Maintain customer accounts
• Fulfill contractual obligations
• Comply with legal and accounting requirements
• Resolve disputes
• Enforce agreements
• Prevent fraud and abuse
• Maintain legitimate business records

Customer data may be deleted or returned according to the applicable customer agreement and our technical capabilities. Certain information may remain in backups for a limited period before being securely overwritten. [INSERT: specific retention periods or the general rule used, e.g., “account data is retained for the duration of the customer relationship plus 90 days.”]

8. Data Security

Premonio uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security.

Customers are responsible for maintaining appropriate security practices for their accounts, including protecting passwords and access credentials and controlling user permissions.

9. International Data Transfers

Premonio and its service providers may process information in countries other than the country in which you reside, including the United States.

For personal information subject to the EU General Data Protection Regulation (GDPR) or UK GDPR, Premonio relies on recognized transfer mechanisms — such as the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum — when transferring personal information out of the EEA/UK. 

Where applicable law requires other safeguards for international transfers, we will use appropriate mechanisms required by applicable law.

10. Your Privacy Rights (General)

Depending on your location and applicable law, you may have rights relating to your personal information, which may include the right to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of personal information
• Request restriction of certain processing
• Object to certain processing
• Request portability of certain information
• Withdraw consent where processing is based on consent
• Appeal certain privacy decisions
• Submit a complaint to an applicable data protection authority

These rights may be subject to legal limitations and exceptions. To exercise applicable privacy rights, contact us using the information provided in Section 16. We may need to verify your identity before completing certain requests, and we will not discriminate against you for exercising these rights.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), may provide additional rights regarding your personal information, which may include:

• The right to know what personal information is collected, used, disclosed, or sold/shared
• The right to request deletion
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information
• The right to limit use and disclosure of sensitive personal information, where applicable
• The right not to receive discriminatory treatment for exercising applicable privacy rights

Premonio does not sell personal information for monetary consideration. Because Premonio uses the LinkedIn Insight Tag for marketing measurement and retargeting (see Section 5), that data transfer may be considered “sharing” under CPRA even though no money changes hands. You may opt out of such sharing at any time via the “Do Not Sell or Share My Personal Information” link in the website footer, or by submitting a request using the contact information in Section 16.

California residents may also designate an authorized agent to submit a request on their behalf, subject to identity-verification requirements.

12. European and UK Privacy Rights (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the GDPR, UK GDPR, and/or Swiss FADP may apply to personal information we process about you as a controller (for example, website visitor and prospect data). Our legal bases for processing typically include:

• Performance of a contract (e.g., providing the services you or your organization requested)
• Legitimate interests (e.g., securing our services, improving our products, and direct marketing to business contacts, balanced against your rights)
• Consent (e.g., certain non-essential cookies or marketing communications, which you may withdraw at any time)
• Compliance with a legal obligation

In addition to the rights described in Section 10, EEA/UK/Swiss individuals have the right to lodge a complaint with their local data protection authority.

As of the effective date of this Policy, Premonio does business exclusively with customers located in the United States and has not appointed an EU or UK representative under GDPR Article 27 / UK GDPR Article 27. Premonio will evaluate whether such an appointment is required at the time it enters into a customer relationship involving the EEA, UK, or Switzerland, based on the volume and nature of the processing involved.

Where Premonio processes personal information on behalf of a customer as a processor (see Section 3 and Section 17), the customer, as controller, is the appropriate party to receive and route individual rights requests under GDPR, and Premonio will assist the customer in responding as required by the applicable Data Processing Agreement.

13. Children’s Privacy

Premonio’s services are intended for businesses and professional users. Our services are not directed toward children under the age of 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age. If you believe that a child has provided personal information to us, please contact us using the information in Section 16 and we will take appropriate steps to delete it.

14. Third-Party Websites and Services

Our website or services may contain links to third-party websites, applications, or services. Premonio is not responsible for the privacy practices, security, or content of third parties. We encourage you to review the privacy policies of third-party services before providing them with personal information.

15. Marketing Communications

We may send business communications, product announcements, newsletters, event invitations, or other marketing communications where permitted by law. You may unsubscribe from marketing communications by using the unsubscribe mechanism included in the communication or by contacting us. You may still receive transactional or service-related communications necessary to administer your account.

16. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or your personal information, contact:

Premonio, Inc.

Registered-agent mailing address: 8 The Green, Suite A, Dover DE 19901

Email: info@premonio.com

Phone: (650) 727-0983

Website: https://premonio.com/

For privacy requests, please include sufficient information for us to understand and process your request.

17. Data Processing Agreement and Subprocessors

For customers that submit personal information to Premonio for processing on their behalf (see Section 3), a separate Data Processing Agreement (“DPA”) governs Premonio’s processing activities as a service provider/processor, including security commitments, confidentiality obligations, audit rights, breach-notification timelines, and international transfer mechanisms (SCCs/UK Addendum where applicable).

Premonio’s current sub-processors include the following categories:

• AI providers: Anthropic (Claude API) and Google (Gemini API), used to generate AI-assisted analysis and recommendations from aggregated, non-personal business metrics (see Section 4.1); Premonio may also use select open-source language models for low-complexity, low-cost tasks
• Database / cloud infrastructure hosting: Neon (serverless Postgres) [INSERT: confirm current hosting provider(s) if different, e.g., AWS/GCP/Azure underlying Neon]
• [INSERT: payment processor, e.g., Stripe]
• [INSERT: email delivery / customer support tooling, e.g., SendGrid, Intercom, Zendesk]
• [INSERT: any additional infrastructure, monitoring, or support vendors with access to customer data]

A current list of subprocessors used to deliver the Premonio platform is available at [INSERT URL, e.g., premonio.com/subprocessors] or upon request. Premonio will provide notice of new subprocessors as required by the applicable DPA.

Where a separately executed customer agreement or DPA conflicts with this Privacy Policy regarding customer data processing, the applicable customer agreement or DPA will control to the extent permitted by law.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make changes, we will update the “Last Updated” date at the top of this policy. Where required by applicable law, we will provide additional notice (for example, for material changes affecting how previously collected personal information is used). Your continued use of our services after an updated Privacy Policy becomes effective means that you acknowledge the updated policy.