1. Introduction

Welcome to ConsultNow (the "Service"), owned and operated by ConsultNow ("we," "us," or "our"). We provide a multi-tenant, software-as-a-service platform designed to help organizations with their consulting needs.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when a client organization (a "Tenant") and its authorized users ("Users") access and use our Service.

Protecting your privacy and the confidentiality of your data is our highest priority. Our multi-tenant architecture is designed with strict data segregation at its core, ensuring that one Tenant's data is never accessible to another.

2. Information We Collect

We collect information in three main ways:

2.1. Information Provided by Tenants and Users

Account Information: When a Tenant signs up for our Service, we collect information about the organization and its primary contact, including company name, contact name, email address, and payment/billing information.

User Credentials: We collect personal information from Users who are granted access by a Tenant, such as their name, email address, and password, to create and manage their accounts.

Tenant Data: This is the most critical data. Our Service allows Tenants and their Users to upload, create, and manage information related to their organizational consulting activities. This may include, but is not limited to:

• Strategic plans and documents
• Employee information and feedback
• Financial data and reports
• Internal communications
• Project details and analysis
• Any other business-sensitive information uploaded to the platform.

ConsultNow treats all Tenant Data as strictly confidential. We do not access, view, or use Tenant Data except as required to provide the Service, for technical support initiated by the Tenant, or as required by law.

2.2. Information We Collect Automatically

Log and Usage Data: Like most SaaS platforms, we automatically collect information when you use the Service. This includes your Internet Protocol (IP) address, browser type and version, operating system, the pages you visit, the time and date of your visit, and other diagnostic data. This data is used for security, analytics, and service improvement.

Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

2.3. Information from Third Parties

Payment Processors: We use third-party services for payment processing (e.g., Stripe, PayPal). We do not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their own Privacy Policy.

3. How We Use Your Information

We use the collected information for various purposes:

• To Provide and Maintain our Service: To operate the platform, manage user accounts, and ensure the core functionality of the consulting tools.
• To Manage Tenant Relationships: To process subscriptions, send invoices, and manage the overall client account.
• To Improve Our Service: We may use anonymized and aggregated usage data (which does not identify any individual or organization) to understand how our Service is being used and to drive product improvements and research. We will never use confidential Tenant Data for this purpose.
• For Security: To monitor for security threats, prevent fraud, and enforce our terms of service.
• For Communication: To send you service-related updates, security alerts, and support messages. We may also send marketing communications, which you can opt-out of at any time.
• To Comply with Legal Obligations: To respond to lawful requests from public authorities or to comply with applicable laws and regulations.

4. Data Sharing and Disclosure

4.1. Multi-Tenant Data Segregation

Our platform is built on a multi-tenant architecture that logically isolates each Tenant's data. A Tenant and its Users can only access their own Tenant Data. There are no circumstances under which we would intentionally share or reveal Tenant Data with another Tenant.

4.2. Third-Party Service Providers (Sub-processors)

We may share information with trusted third-party vendors who perform services on our behalf, such as:

• Cloud hosting and infrastructure providers (e.g., AWS, Google Cloud, Azure)
• Payment processing services
• Customer support and communication tools
• Analytics services

These providers are contractually obligated to safeguard your data and are not permitted to use it for any other purpose.

4.3. Legal Requirements

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect the security of the Service, or protect the personal safety of Users or the public.

4.4. Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership.

5. Data Security

We implement robust administrative, technical, and physical security measures to protect your information. These measures include:

• Encryption of data in transit (using TLS/SSL) and at rest.
• Strict access controls and role-based permissions within our organization.
• Regular security assessments and vulnerability scanning.
• A secure, logically segregated database architecture for our multi-tenant environment.

While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure.

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access: You can request copies of your personal data.
• The right to rectification: You can request that we correct any information you believe is inaccurate.
• The right to erasure: You can request that we erase your personal data, under certain conditions.
• The right to restrict processing: You can request that we restrict the processing of your personal data, under certain conditions.
• The right to data portability: You can request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise these rights, please contact us at support@lounge3.com. Note that requests for the erasure or modification of Tenant Data should be directed to the administrator of your Tenant organization.

7. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

8. Children's Privacy

Our Service is not intended for use by anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. We encourage you to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: support@lounge3.com