Privacy Policy

Netsky LLC, doing business as Zenith Analysis (Zenith, we, us, or our), provides financial analysis, due-diligence, reporting, data-room, and related software services. This Privacy Policy explains how we process personal information through zenithanalysis.com, our applications, customer and marketing communications, events, and other services that link to this policy (collectively, the Service).

1. Scope and our role

This policy applies when Zenith decides why and how personal information is processed, such as website, account, billing, support, and marketing data. It also describes at a high level how we handle data submitted by business customers.

For personal information contained in accounting records, bank records, uploaded documents, data rooms, or other data a customer submits or connects (Customer Data), Zenith generally acts as a processor or service provider on that customer's behalf. The customer controls that data and its privacy notice applies. Requests about Customer Data should usually be directed to the relevant customer. Our Data Processing Addendum provides additional processor terms.

2. Personal information we collect

Depending on how you interact with the Service, we may collect:

• Contact and professional information: name, business email, phone number, employer, title, business address, and communication preferences.
• Account and identity information: account identifiers, login and authentication data, organization membership, roles, permissions, and profile details.
• Transaction and billing information: subscription, purchase, invoice, payment status, and billing-contact information. Payment-card details are generally collected directly by our payment processor rather than stored by Zenith.
• Customer Data: financial statements, general-ledger and transaction data, bank-account and proof-of-cash information, tax documents, accounting-system data, customer and vendor records, contracts, data-room documents, reports, prompts, messages, and other files or content submitted to the Service.
• Communications: support requests, survey and form responses, meeting notes, feedback, and the content of emails or other communications with us.
• Device and usage information: IP address, browser and device type, operating system, referring page, pages and features used, timestamps, approximate location derived from IP address, diagnostic events, and interaction data.
• Cookie and advertising information: cookie identifiers, conversion events, campaign and referral information, and similar online identifiers described in our Cookie Policy.

Please do not submit protected health information, government identification numbers, or other highly sensitive information unless a Zenith feature and your written agreement expressly contemplate it.

3. Sources of personal information

We collect personal information:

• directly from you and your organization;
• automatically from browsers, devices, cookies, logs, and analytics technologies when you use the Service;
• from services you choose to connect, such as accounting, banking, payment, and identity providers;
• from customers and authorized users who invite you, share a data room, or submit information about you; and
• from public sources and business partners, including company websites, professional networks, event organizers, referral partners, and data providers.

4. How we use personal information

We may use personal information to:

• provide, configure, maintain, and secure the Service;
• authenticate users, administer accounts and permissions, and operate data rooms and integrations;
• import, normalize, analyze, and report on Customer Data at the customer's direction;
• process purchases, subscriptions, billing, and related records;
• respond to inquiries, provide support, and communicate service notices;
• monitor performance, troubleshoot errors, prevent fraud and abuse, and protect users, Zenith, and others;
• understand use of the Service, develop features, conduct research, and create aggregated or de-identified analytics;
• send product news, event information, and marketing communications, subject to your choices;
• measure campaigns and advertising conversions;
• enforce agreements, exercise or defend legal claims, and comply with law; and
• complete a corporate transaction such as a financing, acquisition, or asset sale.

5. AI and automated processing

Certain features send prompts, documents, extracted text, financial information, or other Customer Data to artificial-intelligence providers to parse records, identify patterns, generate summaries, or answer authorized users' questions. We use this information to provide the feature requested by the customer, secure it, and evaluate its performance.

We do not use Customer Data to train a generalized Zenith model unless we separately disclose that use and obtain any consent required by law or contract. Third-party AI providers process information under their applicable contracts and service settings. AI output can be inaccurate and is subject to human review; see our Terms of Service.

6. How we disclose personal information

We may disclose personal information to:

• Service providers: vendors that provide hosting, databases, authentication, storage, security, error monitoring, analytics, AI, email, support, payments, and other operational services.
• Connected-service providers: accounting, banking, payment, and other providers when a customer or user enables an integration.
• Customers and authorized users: the organization that manages your account, deal participants, data-room recipients, and others to whom an authorized user directs us to provide access.
• Professional advisers: auditors, insurers, accountants, consultants, and legal advisers subject to appropriate confidentiality duties.
• Authorities and affected parties: where reasonably necessary to comply with law or legal process, protect rights and safety, investigate misconduct, enforce our agreements, or respond to an emergency.
• Business transaction participants: actual or prospective investors, lenders, buyers, sellers, and advisers in connection with a financing, merger, reorganization, bankruptcy, or sale of all or part of the business.
• Others at your direction: when you authorize or ask us to disclose the information.

7. Advertising, sale, and sharing

We do not sell personal information for money. We may use advertising and conversion tools that disclose online identifiers and usage information to advertising providers. Some U.S. privacy laws may define that activity as “sharing,” “sale,” or targeted advertising even when no money changes hands. You may request to opt out by emailing privacy@zenithanalysis.com and can limit these technologies using the controls described in our Cookie Policy. We do not knowingly sell or share personal information of people under 18.

8. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including to provide the Service, maintain business and tax records, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security and continuity. Retention depends on the type and sensitivity of the information, customer instructions and contract terms, account status, legal limitation periods, and technical backup cycles.

Customer Data is generally retained while the relevant account or engagement is active and thereafter for a limited period consistent with the customer agreement and our legal and operational obligations. Customers may request export or deletion by contacting us. When data is deleted from active systems, residual copies may remain temporarily in restricted backups until overwritten through normal cycles.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit, encryption at rest where appropriate, credential and token protection, monitoring, backups, incident-response procedures, and vendor review. Security measures vary by system and data sensitivity. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

10. International data transfers

Zenith is based in the United States, and we and our providers may process information in the United States and other countries whose privacy laws may differ from those where you live. Where required, we rely on approved adequacy decisions, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another valid transfer mechanism, together with supplementary safeguards where appropriate. See our GDPR Compliance Statement and Data Processing Addendum for more information.

11. Your choices

• Account information: update certain information in the Service or contact us for help.
• Marketing: use the unsubscribe link in a marketing email or contact us. You may still receive transactional and service communications.
• Cookies: use browser and provider controls described in the Cookie Policy. Blocking essential storage may prevent parts of the Service from working.
• Connected services: disconnect an integration through available account controls or contact us. Disconnecting stops future collection but does not automatically delete information already imported.

12. U.S. state privacy rights

Depending on where you live and subject to applicable thresholds and exceptions, you may have rights to know or access personal information; correct inaccuracies; delete information; receive a portable copy; opt out of sale, sharing, targeted advertising, or certain profiling; restrict certain uses of sensitive personal information; and appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

Submit a request or appeal to privacy@zenithanalysis.com with the subject “Privacy Request.” Describe your request and state of residence. We may ask for information reasonably necessary to verify your identity and authority. Authorized agents may submit a request where permitted by law, but we may require proof of authorization and direct identity verification. If Customer controls the information, we will direct the request to Customer or assist Customer as required.

For the preceding 12 months, the categories we have collected and disclosed for the business purposes described above may include identifiers; professional and account information; commercial and transaction information; internet or electronic activity; approximate geolocation; financial information contained in Customer Data; and inferences generated by analytics. The sources, purposes, and recipient categories are described in Sections 3, 4, and 6.

13. European privacy rights and legal bases

If European Economic Area, UK, or Swiss data-protection law applies, Zenith generally relies on the following legal bases when acting as controller: performance of a contract; legitimate interests in operating, securing, improving, and marketing a business service; compliance with legal obligations; and consent where required. You may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent without affecting earlier lawful processing.

You may lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can try to address the concern. More detail is available in our GDPR Compliance Statement.

14. Children

The Service is intended for business users and is not directed to children under 18. We do not knowingly collect personal information directly from children. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

15. Third-party services and websites

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own notices, not this policy. Review those notices before providing personal information. Zenith is not responsible for third-party privacy or security practices.

16. Changes to this policy

We may update this policy to reflect changes in the Service, law, or our practices. We will post the revised version here and update the date above. If changes materially affect how we use information already collected, we will provide additional notice when required by law.

17. Contact us

For questions or privacy requests, contact Netsky LLC, doing business as Zenith Analysis, at privacy@zenithanalysis.com. For EU, UK, and Swiss data-protection questions, you may also use GDPR@zenithanalysis.com.