Privacy Policy

PantoSource ("Company," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you use or interact with our website (pantosource.com), applications, and services (collectively, the "Services"). By accessing or using our Services, you acknowledge that you have read and understood the practices described below. If you disagree with any aspect of this Privacy Policy, please do not use our Services.

Quick Summary

• Data We Collect: Names, email addresses, phone numbers, billing information, device information, and IP addresses.

• How We Use Data: To provide and enhance our services, process payments, ensure security, track marketing analytics, and communicate with users.

• Your Rights: Access, rectify, delete, restrict, and object to the processing of your personal data.

• Data Sharing: We share data with trusted service providers and for legal reasons, but do not sell your information.

• Security Measures: We use encryption and other security protocols to protect your data.

• Contact Us: Reach out via privacy@pantosource.com for any privacy-related inquiries.

1. Who We Are

PantoSource provides a marketing analytics and attribution platform that helps e-commerce businesses track website visitor activities, attribute customer actions to their respective marketing sources, and send event data back to advertising platforms for optimization.

We primarily operate in and host data in the United States. We may process and store your data in the U.S., where privacy laws may differ from those in your jurisdiction.

1.1 Controller vs. Processor

• PantoSource as Data Controller: When we collect personal data from individuals directly (for example, users signing up for a PantoSource account), we act as the data controller under applicable data protection laws.

• PantoSource as Data Processor: When our customers use our platform to process personal data relating to their own end-users (e.g., website visitors or customers), PantoSource acts as a processor. In such scenarios, customers must ensure they have the appropriate legal bases, consents, or notices in place for such data processing.

2. Information We Collect

2.1 Information You Provide Directly

Account & Subscription Data: When you sign up for a PantoSource account or subscribe to our paid plans, we collect:

• First name, last name, email address, phone number

• Company name and billing information (e.g., billing address)

Payment Data: Payment details (e.g., credit card numbers) are processed securely by our payment processor (Stripe). PantoSource does not store full card numbers or bank account details on its servers.

User Communications & Support: If you contact us through email or chat, we collect:

• The content of your message and any attachments

• Contact details you provide for response purposes

2.2 Information Collected Automatically

Device & Usage Data: We (or our service providers) collect data such as:

• IP addresses, browser type, device identifiers

• Screen resolution, pages visited, timestamps, and referring URLs

Cookies & Tracking Technologies: Our Services use cookies, pixels, and related technologies to remember user sessions, perform analytics, and personalize experiences. See Section 8 (Cookies) for details.

Event Data: When you or your customers integrate our tracking on a website, we automatically capture events such as page views, add to cart, and purchases. This information is used to provide attribution and analytics services.

2.3 Information from Third Parties

Ad Platforms: We may receive campaign or performance data (like click IDs, hashed identifiers) from Google Ads, Meta (Facebook), TikTok, Pinterest, Snapchat, and other platforms to help measure and optimize advertising.

E-commerce Platforms: When you connect your Shopify, WooCommerce, or other e-commerce platform, we receive order and transaction data necessary to provide our attribution services.

2.4 Sensitive Data

We do not intentionally collect or process special categories of personal data (e.g., health information, biometric data, government IDs) and instruct customers not to send such information to us.

3. How We Use Your Information

We use personal data to:

Provide & Improve Services:

• Enable you to access and use our platform

• Track marketing analytics and measure attribution

• Handle billing and subscription matters

• Develop new features and enhance user experience

Security and Fraud Prevention:

• Detect and prevent fraudulent activities

• Analyze user behavior and technical data for security purposes

Communications:

• Respond to inquiries and provide customer support

• Send service updates and account notifications

• With consent where required, send newsletters or product announcements

Compliance & Protection:

• Enforce our Terms of Service

• Comply with legal obligations or respond to lawful requests from authorities

4. Legal Bases for Processing (EEA/UK)

For individuals in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal bases for processing personal data:

• Consent: For certain marketing communications or non-essential cookies.

• Contractual Necessity: For providing the services you subscribe to.

• Legitimate Interests: For fraud prevention, analytics, and business improvement, balanced against your rights and freedoms.

• Legal Obligations: For recordkeeping and responding to lawful data access requests.

5. How We Share Your Information

We do not sell personal information. However, we may share data as follows:

Service Providers: We use third-party vendors (e.g., cloud hosting, payment processors, customer support tools) to support our operations. They only process personal data under written agreements that require data protection.

Advertising & Analytics Partners: We may share hashed or matched data with platforms like Meta, Google, TikTok, or Pinterest to measure or improve ad campaigns, subject to compliance with privacy laws.

Business Transfers: If PantoSource undergoes a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify you of any such change.

Legal & Regulatory: We may disclose personal data to comply with applicable laws, respond to lawful requests, or protect PantoSource's rights or the safety of others.

With Consent: If you give explicit consent or direct us to share your data with a third party.

6. International Data Transfers

6.1 Data Hosting

We process and store data primarily in the United States. By using our Services, you consent to such transfers, storage, and processing of your data in the U.S.

6.2 Transfers from EEA/UK

For data transfers from the European Economic Area (EEA) or United Kingdom, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure compliance with GDPR. We also implement supplementary measures such as encryption to enhance data security.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

Retention Periods:

• Account Information: Retained while your subscription is active, plus a reasonable period (up to 90 days) after cancellation for auditing or compliance.

• Billing Records: May be retained for up to 7 years as required by tax or accounting laws.

• Anonymized Data: We may keep aggregated metrics indefinitely to improve our Services.

Requesting Deletion: If you want to delete your account or personal data, contact us at privacy@pantosource.com. We will respond within 30 days. Some data may be retained to satisfy legal, security, or contractual requirements.

8. Cookies & Tracking Technologies

We use cookies, pixels, and other tracking technologies for:

• Authentication: To recognize you when you log in

• Analytics: To understand how users interact with our Services

• Personalization: To remember your preferences

Managing Cookies: You can manage cookies through your browser settings. Please note that disabling cookies may affect certain features of our Services.

Do Not Track: Our Services currently do not respond to Do Not Track (DNT) or Global Privacy Control (GPC) signals.

9. Security Measures

We use industry-standard technical and organizational measures to safeguard personal data:

• Encryption: TLS 1.2+ encryption for data in transit; AES-256 encryption for data at rest

• Access Controls: Role-based permissions and multi-factor authentication for administrative accounts

• Regular Audits: Periodic security assessments and vulnerability scans

• Staff Training: Regular training programs on data protection and security best practices

Data Breach Notification: In the event of a data breach that compromises personal data, we will notify affected users within 72 hours of becoming aware of the breach, in compliance with applicable laws.

No method of transmission or storage is 100% secure. If you suspect an account breach, please contact support@pantosource.com immediately.

10. Your Privacy Rights

10.1 Rights for EEA/UK Residents

If you are located in the EEA or UK, you have the right to:

• Access: Receive a copy of personal data we hold about you

• Rectify: Correct inaccurate personal data

• Erase: Request deletion of personal data ("right to be forgotten")

• Restrict or Object: Limit or oppose certain data processing activities

• Portability: Obtain your data in a structured, machine-readable format

• Withdraw Consent: If processing is based on consent

To exercise these rights, email privacy@pantosource.com.

10.2 Rights for California Residents

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request what personal information we collect, use, or disclose

• Right to Access: Request a copy of your personal information

• Right to Delete: Ask us to delete personal data we have about you

• Right to Correct: Request correction of inaccurate personal data

• Right to Opt Out: Opt out of the "sale" or "sharing" of personal information

• Right to Non-Discrimination: We will not discriminate if you exercise these rights

Note: We do not sell personal information for monetary consideration.

To exercise these rights, email privacy@pantosource.com.

10.3 Other U.S. State Privacy Rights

Residents of other states with privacy laws (e.g., Colorado, Connecticut, Virginia, Utah) may have similar rights. To submit a request, email privacy@pantosource.com.

11. Customer Responsibilities

11.1 Consent Management

As a PantoSource customer, you are solely responsible for implementing and managing user consent mechanisms on your website in compliance with applicable laws. This includes:

• Obtaining consent from your website visitors before enabling tracking

• Displaying appropriate cookie banners and privacy notices

• Recording and managing user consent preferences

PantoSource provides tools to help you integrate consent management, but the responsibility for compliance lies with you as the data controller for your end-users.

11.2 Prohibited Data

You agree not to use PantoSource to collect, store, or process:

• Health information protected under HIPAA or similar laws

• Payment card data governed by PCI-DSS

• Government-issued identification numbers

• Biometric data or other special categories of personal data

12. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data about a minor, please email privacy@pantosource.com, and we will take appropriate steps to delete it.

13. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify you by:

• Posting a prominent notice on our website

• Sending an email to your registered email address

The "Last Updated" date at the top indicates when this Privacy Policy was last revised. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Address:
30 N Gould St Ste R,
Sheridan, Wyoming 82801,
USA

Email: privacy@pantosource.com

For general support inquiries: support@pantosource.com