1. Introduction

At NegoGenie.com (referred to herein as "NegoGenie," "we," "us," or "our"), we are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you access our website and use our digital bill negotiation services. This policy applies to all users of our website, regardless of location, and is intended to comply with international data protection laws—including the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable regulations.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices as described herein, please do not use our Services.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for an account or use our Services, we may collect the following types of personal data:

• Contact Information: Email address and telephone number.
• Account Details: Username, password, and billing information necessary for subscription or payment processing.
• Service Data: Details related to your bill negotiation requests (such as billing statements, account numbers, or service provider details) that you provide so that we can analyze and negotiate your bills.
• Communication Records: Information provided during your interactions with our customer support team or via surveys, feedback forms, and other communications.

2.2 Automatically Collected Data

When you visit our website, we also collect information automatically through cookies and other tracking technologies:

• Usage Data: Pages visited, the time and duration of visits, browser type, operating system, IP address, and device identifiers.
• Technical Data: Information about your device’s configuration and settings, which helps us optimize and secure our Services.

2.3 Payment and Transaction Information

While processing payments through third-party processors (e.g., Paddle), we may receive information about your transaction. However, we do not store sensitive financial information (such as full credit card numbers); such data is handled directly by our secure payment partners in accordance with industry standards.

3. How We Use Your Information

We use your personal data for the following purposes:

• Providing and Managing the Service: To create and manage your account, process your subscription or commission-based fees, and facilitate the bill negotiation process.
• Customer Support: To respond to inquiries, resolve issues, and improve our Service.
• Communication: To send you account-related notices, updates, promotional offers (where consent is provided), and important service announcements.
• Service Improvement: To analyze user behavior, conduct research, and enhance our website’s functionality and security.
• Compliance and Legal Obligations: To comply with applicable laws and regulatory requirements, and to protect our legal rights.

4. Legal Basis for Processing Personal Data

We process your personal data on various lawful bases, including:

• Performance of a Contract: Processing necessary to provide the Services and fulfill our contractual obligations to you.
• Consent: In cases where we ask for your consent (e.g., for marketing communications), you have the right to withdraw such consent at any time.
• Legal Obligation: Processing is required to comply with applicable laws, regulations, or legal processes.
• Legitimate Interests: In instances where processing is necessary for our legitimate interests (such as improving our Services or ensuring security), provided that such interests are not overridden by your rights and freedoms.

If you are located in the European Economic Area (EEA), you have additional rights under the GDPR as explained in Section 7 below.

5. How We Share Your Information

5.1 With Service Providers and Partners

We may share your personal data with trusted third parties who help us provide, maintain, and improve our Services. This includes:

• Payment Processors: Third parties such as Paddle that handle payment transactions securely.
• Hosting and Infrastructure Providers: Companies that support our IT and cloud-based infrastructure.
• Customer Support and Analytics Providers: Partners who help us manage customer inquiries and analyze service usage data.
• Legal and Compliance Advisors: Consultants and legal experts assisting us in meeting our regulatory obligations.

5.2 For Legal, Regulatory, and Security Purposes

We may disclose your personal data if required to do so by law, regulation, or a valid legal process (e.g., a subpoena or court order). We may also share information to:

• Prevent or investigate possible wrongdoing in connection with the Services.
• Protect the rights, property, or safety of NegoGenie, our users, or others.

5.3 International Data Transfers

As an international service, your personal data may be transferred to and processed in countries outside of your home jurisdiction. When such transfers occur, we ensure that adequate safeguards are in place, such as using Standard Contractual Clauses approved by the European Commission or other legally recognized mechanisms, to maintain your data protection rights.

5.4 No Sale of Personal Data

We do not sell or trade your personal data to third parties for marketing purposes. Your information is used solely to provide and improve our Services as described in this Privacy Policy.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. This means:

• Account Information: Your account and service-related data will be kept for the duration of your subscription and for a reasonable period after account termination for legal, accounting, or dispute resolution purposes.
• Usage Data: Automatically collected usage and technical data may be retained for analytical and security purposes, in an aggregated and anonymized form where possible.

7. Your Rights and Choices

If you are located in the EEA or a region with similar data protection laws, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may ask us to correct or update any inaccurate or incomplete personal data.
• Right to Erasure: Also known as the "right to be forgotten," you can request that we delete your personal data, subject to legal and contractual restrictions.
• Right to Restrict Processing: You may ask us to limit the processing of your personal data in certain circumstances.
• Right to Data Portability: You can request a structured, commonly used, and machine-readable format of your personal data to transfer to another service.
• Right to Object: You may object to the processing of your personal data on grounds related to your particular situation, including direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent for processing, you may withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, please contact us at privacy@negogenie.com. We may require additional information to verify your identity before processing your request.

8. Data Security

We implement a variety of industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: Secure transmission of data using encryption protocols (e.g., HTTPS, SSL/TLS).
• Access Controls: Restricting access to personal data on a need-to-know basis.
• Regular Audits: Conducting regular security audits and assessments to maintain data integrity and confidentiality.
• Employee Training: Ensuring our team is trained on data protection and privacy practices.

While we take extensive measures to protect your information, no system is completely foolproof. By using our Services, you acknowledge that we cannot guarantee absolute security.

9. Use of Cookies and Tracking Technologies

9.1 Cookies and Similar Tools

We use cookies and similar technologies to:

• Enhance Your Experience: Remember your preferences and provide a personalized experience.
• Analyze Usage: Understand how users interact with our website to improve our Service.
• Marketing: When permitted by law, serve targeted advertisements and promotional messages.

9.2 Managing Cookies

Most web browsers allow you to manage your cookie settings. You can usually set your browser to notify you when cookies are being set, or to block or delete cookies altogether. Please note that if you disable cookies, some features of our website or Services may not function as intended.

10. Third-Party Links and Services

Our website may contain links to third-party websites or services that are not controlled by NegoGenie. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third parties you visit, as they may have different data collection and usage practices.

11. Children's Privacy

Our Services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to promptly delete such information from our records.

12. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in our practices or legal requirements. If significant changes are made, we will provide notice by updating the "Effective Date" at the top of this policy and, where appropriate, by providing a notice on our website. Your continued use of the Services after any such modifications constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the details below:

• Email: privacy@negogenie.com
• Mail: NegoGenie Ltd., Attn: Carrer Frigola, Paterna, Valencia, Spain

By using NegoGenie.com, you agree to the terms outlined in this Privacy Policy. We value your trust and are committed to safeguarding your personal data with the highest standards of security and transparency.