SplashBI Privacy Policy

Splash Business Intelligence, Inc. (SplashBI) · splashbi.com

Effective Date: 18 Aug 2026

1. Introduction and Scope

Splash Business Intelligence, Inc. and its affiliates and subsidiaries (collectively, "SplashBI", "we", "us", or "our") respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information, and describes your rights and choices.

SplashBI handles personal information in two distinct roles:

• As a controller, for information we collect for our own purposes through the splashbi.com website and related pages (the "Site"), our marketing, events, sales, and business operations. This part of the Policy is the focus of the sections on the Site, cookies, advertising, and your rights.
• As a processor (service provider), for personal information contained in Customer data that we access when providing our software and services (the "Software" and "Services"). In that role our Customer is the controller and directs how that data is handled, as described in the section on Customer Data below.

By using the Site you acknowledge this Privacy Policy. Where required by law, we rely on your consent, managed through our cookie consent tool, before setting non-essential cookies or similar technologies.

This Policy applies to individuals worldwide who interact with the Site, our marketing, and our business. We aim to give everyone the same core protections. Because privacy laws differ by country and region, the choices and rights available to you may depend on where you are located, and the regional sections under Your Privacy Rights describe additional rights that may apply to you. Where local law requires a higher standard, we apply that standard to you.

2. Your Privacy Choices at a Glance

• Cookies and tracking: manage or withdraw consent anytime through the "Cookie Settings" link in our footer, which opens the Cookiebot preference center.
• Do Not Sell or Share: use the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link in our footer to opt out of cross-context behavioral advertising.
• Global Privacy Control: we treat a valid GPC browser signal as a request to opt out of sale and sharing for that browser.
• Marketing email: unsubscribe using the link in any marketing email, or contact us at the address below.
• Access, correction, and deletion: submit a request as described in Your Privacy Rights below.

3. Definitions

"You" means any individual whose personal information we collect, including Site visitors, prospects, event and webinar registrants, partners, and individuals whose data is provided to us by a Customer.

"Personal information" (or "personal data") means information that identifies, relates to, or could reasonably be linked with a particular individual or household, as defined by applicable law. It does not include lawfully available public information or de-identified or aggregated data.

"Customer" means an organization or individual that has entered into an agreement with SplashBI to use the Software or receive Services, including trial users and OEM partners.

"Services" and "Software" mean the SplashBI products and related services provided to Customers under a separate agreement.

4. Personal Information We Collect

a. Information you provide to us

We collect information you provide when you fill out a form (for example to book a demo, request pricing, contact us, subscribe to communications, register for a webinar or event, download gated content, or apply to partner with us), when you submit feedback through our on-site feedback tool, or when you otherwise communicate with us. This may include your name, business email, phone number, company, job title, country, the products or topics you are interested in, and the content of your message.

b. Information we collect automatically

When you use the Site, we and our providers automatically collect certain information through cookies and similar technologies, including your IP address, device and browser type, operating system, general location inferred from your IP address, referring and exit pages, pages and content viewed, links clicked, dates and times of access, and other interaction data. See Cookies and Similar Technologies below for the specific tools we use.

c. Information from third parties

We may receive information about you from third parties, such as our marketing and advertising partners, event co-hosts, data enrichment providers, and social media platforms, and we may combine it with information we already hold to improve our outreach and understand interest in our products.

d. Customer data we process on behalf of Customers

When we provide the Software and Services, we may access personal information contained in a Customer's data (for example on a support call or in a file submitted to our help desk). In that context the Customer is the controller and is responsible for the personal information in its data. If you interact with a SplashBI product provided by a Customer and wish to exercise your rights, please contact that Customer directly. We handle such data only to provide the Services and as the Customer instructs.

5. Cookies and Similar Technologies

We use cookies, pixels, tags, and similar technologies on the Site. We manage consent to these technologies through Cookiebot, our consent management platform. When required by law, non-essential cookies (preferences, statistics, and marketing) are set only after you give consent, and you can change or withdraw your choices at any time through the "Cookie Settings" link in our footer. Strictly necessary cookies, which are required for the Site to function and to record your consent, do not require consent.

The categories we use are: Necessary (site delivery, security, and consent records), Preferences (remembering your settings), Statistics (understanding how the Site is used), and Marketing (measuring and delivering relevant advertising). The technologies we use include the following. The authoritative, always-current list of cookies, providers, and durations is published in our Cookie Declaration on the Cookie Policy page, generated by Cookiebot.

The Google Analytics, HubSpot, Meta, LinkedIn, and Google advertising technologies may collect online identifiers and activity data and share them with those providers. You can control these through the cookie settings described above and the opt-out choices in Your Privacy Rights below. You can also manage some advertising cookies at the providers' own tools and through industry opt-out pages.

a. Prior consent for non-essential technologies

Other than (i) strictly necessary cookies required to operate the Site and to record your consent preferences, and (ii) technologies necessary to make available interactive features you choose to use to contact us or request information, including our contact and demo-request forms, SplashBI does not set, load, or execute any cookies, tags, pixels, software development kits, or similar tracking technologies, and does not transmit Personal Information to any analytics or advertising partner, before obtaining your affirmative consent through our consent management platform. Where a form or other interactive feature is provided by a third party, any analytics, measurement, or tracking functions of that third party remain subject to this consent requirement and are not activated before consent is given. Where consent is refused, withdrawn, or not provided, non-essential technologies are not loaded and no associated Personal Information is collected or disclosed by means of them. Consent may be granted, refused, or withdrawn, and previously recorded choices revisited, at any time through the "Your Privacy Choices" control in the footer of each page. Our consent management platform maintains a record of your consent status.

b. Third-party analytics and advertising technologies

Subject to the prior-consent requirement above, the Site uses the following third-party technologies, each of which may act as an independent controller or as our processor and may set cookies or receive online identifiers and usage data: (a) Google LLC, comprising Google Analytics 4 for audience measurement and Google Ads for advertising and conversion measurement; (b) HubSpot, Inc., for marketing analytics, form processing, and advertising measurement; (c) LinkedIn Corporation, for the LinkedIn Insight Tag used in advertising and conversion measurement; and (d) Reddit, Inc., for an advertising pixel used in advertising and conversion measurement. Embedded video content is delivered by Vimeo, Inc. A current, automatically maintained inventory of the specific cookies set by these technologies, together with their purposes and retention periods, is available in our Cookie Policy at splashbi.com/legal/cookie-policy.

6. How We Use Personal Information, and Our Legal Bases

We use personal information to: respond to your inquiries and requests; provide demos, pricing, and gated content; manage events and webinars; send you marketing and product communications where permitted; personalize and improve the Site and our marketing; measure and deliver advertising; understand interest in our products; operate, secure, and troubleshoot the Site; comply with law; and establish, exercise, or defend legal claims.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: your consent (for non-essential cookies, marketing communications, and certain processing); our legitimate interests (for analytics, security, business operations, and business-to-business marketing to relevant professional contacts, balanced against your rights); performance of a contract or steps taken at your request; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

7. How and Why We Disclose Personal Information

• Service providers and processors: vendors that host the Site, manage forms and our CRM, provide analytics and consent management, and support our operations, under contracts that limit their use of the information to providing services to us.
• Advertising and marketing partners: the platforms named above, with whom we share online identifiers and activity data to measure and deliver advertising. This constitutes "sharing", and may constitute a "sale", under certain US state laws. See the next section.
• Legal and safety: authorities and others when required by law, to respond to legal process, to enforce our agreements, or to protect our rights, users, or the public.
• Corporate transactions: an acquirer or successor in the event of a merger, acquisition, financing, reorganization, or sale of assets.
• With your direction or consent: other parties when you ask us to or agree to it.

We do not sell personal information for money. We do not disclose the content of Customer data except as directed by the Customer or as required by law.

8. "Sale" and "Sharing" for Cross-Context Behavioral Advertising

Some US state privacy laws define "sale" and "sharing" broadly. Because we use advertising technologies such as the Meta Pixel, the LinkedIn Insight Tag, the Reddit advertising pixel, and Google advertising tags, our disclosure of online identifiers and browsing activity to those partners for cross-context behavioral advertising may not be treated as "sharing" of personal information for advertising purposes.

You can opt out of this at any time using the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link in our footer, by adjusting your cookie settings, or by enabling Global Privacy Control in your browser. We do not knowingly sell or share the personal information of individuals under 16 years of age.

9. Your Privacy Rights

a. All users

You may ask us to access, correct, update, or delete personal information we hold about you as a controller, and you may opt out of marketing communications at any time. We will honor requests as required by applicable law.

b. California residents (CCPA/CPRA)

Subject to the CCPA as amended by the CPRA, California residents have the right to know and access the personal information we collect, to delete it, to correct inaccurate information, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and not to receive discriminatory treatment for exercising these rights. In the preceding 12 months we have collected the following categories of personal information.

Sources of this information are you, your device and browser as you use the Site, and our service providers and marketing partners. We use it for the purposes described above. We do not use or disclose sensitive personal information for purposes that require a right to limit. To opt out of sale or sharing, use the footer link or enable Global Privacy Control. You may use an authorized agent to submit requests. We will not discriminate against you for exercising your rights.

c. Other US state residents

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect) have rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale, and certain profiling. Where these laws provide an appeal process, you may appeal a decision on your request by replying to our response. We honor recognized opt-out preference signals such as GPC where required.

d. EU, EEA, UK, and Switzerland (GDPR)

If you are in these regions, you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent. You may lodge a complaint with your local supervisory authority. Where we act as a processor for a Customer, please direct requests to that Customer as controller.

e. Canada

If you are in Canada, you have rights under PIPEDA and applicable provincial laws, including Quebec's Law 25, to access and correct your personal information, to withdraw consent, and to be informed about how your information is used and disclosed. We obtain consent where required, and you may direct requests to our privacy contact below.

f. Brazil

If you are in Brazil, you have rights under the Lei Geral de Protecao de Dados (LGPD), including to confirm processing, access, correct, anonymize or delete your data, obtain portability, be informed about sharing, and withdraw consent. Our processing relies on the legal bases set out in the LGPD, such as consent and legitimate interests.

g. Australia

If you are in Australia, we handle personal information in accordance with the Privacy Act and the Australian Privacy Principles. You may request access to and correction of your personal information and may complain to us and, if unsatisfied, to the Office of the Australian Information Commissioner.

h. Other regions

If you are in another jurisdiction with a data protection or privacy law, such as India (Digital Personal Data Protection Act), the United Arab Emirates and other Gulf countries, Singapore (PDPA), South Africa (POPIA), Japan (APPI), or elsewhere, you may have rights to access, correct, delete, or object to the processing of your personal information, and to withdraw consent. We honor the rights that apply to you under your local law. Contact us using the details below and we will respond as that law requires.

i. How to exercise your rights

Submit requests by email to privacy@splashbi.com or through the request options in our footer. We will verify your request using information we hold or reasonable identity checks, respond within the timeframes required by applicable law, and, where the law allows, may charge a fee or decline manifestly unfounded or excessive requests. You may designate an authorized agent to act for you with proof of authorization. If we decline a request, we will explain why, and where the law provides an appeal or complaint route we will tell you how to use it.

10. Global Privacy Control and Opt-Out Preference Signals

Our consent tool recognizes opt-out preference signals. If you enable Global Privacy Control (GPC) in a supported browser or extension, we treat it as a valid request to opt out of the sale and sharing of personal information for that browser and, where applicable, to withdraw consent to marketing cookies. Because such signals are browser and device specific, you may need to set them on each browser and device you use.

11. International Data Transfers

SplashBI operates from the United States and maintains staff and offices in the United Kingdom, India, and other regions. Personal information we collect may be transferred to, and processed in, countries other than your own, including the United States, whose laws may differ from those of your country. Where we transfer personal data out of the EEA, the UK, or Switzerland, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. This replaces our previous reliance on the EU-US Privacy Shield, which is no longer a valid transfer mechanism. For transfers from other regions, we use the transfer mechanisms recognized under the applicable local law, such as consent, contractual protections, or approved safeguards. You may request a copy of the relevant safeguards using the contact details below.

12. Data Retention

We keep personal information only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. To decide how long to keep information, we consider its nature and sensitivity, the purpose for which we hold it, whether we can achieve that purpose by other means, and our legal, tax, and contractual obligations. As a general matter, we retain marketing and prospect contact data for the duration of our relationship with you and for up to 36 months after your last engagement, unless you ask us to delete it sooner or we must retain it longer. Information stored through the Site's forms is retained under the same criteria, and we operate a process to delete personal information on valid request.

13. Security and Certifications

We maintain administrative, technical, and physical safeguards designed to protect personal information, and our controls are supported by independent audits and frameworks, including SOC 1 Type II, SOC 2 Type II, ISO/IEC 27001, and GDPR-aligned practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect information across our systems and to respond appropriately to any incident.

14. Children's Privacy

The Site is intended for business users and is not directed to children. We do not knowingly collect personal information from, and do not knowingly sell or share the personal information of, individuals under 16 years of age. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

15. Third-Party Links and Services

The Site links to and embeds third-party websites and services, such as video players, form and marketing tools, and social media. We are not responsible for the privacy practices of those third parties. Their handling of your information is governed by their own policies, which we encourage you to review.

16. Marketing Communications

Where permitted, we may send you marketing about our products, events, and content. You can opt out at any time using the unsubscribe link in our emails or by contacting us. We will still send you service or transactional messages related to your requests.

17. Customer Data and Our Role as a Processor

When we access personal information contained in a Customer's data while providing the Software or Services, the Customer is the controller and is responsible for the privacy of that information, including the legal basis for it and the rights of the individuals it concerns. We act on the Customer's documented instructions, use the data only to provide the Services, and apply appropriate safeguards. If you are an individual whose data is held by a Customer, please direct privacy requests to that Customer, which controls the information and can act on your request.

18. Dispute Resolution and Regulatory Oversight

We will investigate and attempt to resolve complaints and disputes about our use and disclosure of personal information in accordance with this Policy. Individuals in the EU, EEA, and Switzerland may, in certain circumstances, submit unresolved complaints to binding arbitration before the American Arbitration Association, with the exclusive location for such arbitration being Atlanta, Georgia, United States. SplashBI is subject to the regulatory authority of the U.S. Federal Trade Commission (Consumer Response Center, 600 Pennsylvania Avenue NW, Washington, DC 20580; consumerline@ftc.gov; www.ftc.gov).

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date above and post the updated Policy on the Site, and, where required, provide additional notice or seek your consent. Changes apply prospectively from the date of publication. We encourage you to review this page periodically.

20. Contact Us

If you have questions or requests about this Privacy Policy or your personal information, contact us at:

Splash Business Intelligence, Inc. (SplashBI)

3079 Peachtree Industrial Blvd., Duluth, GA 30097, USA

Privacy requests: privacy@splashbi.com · General: info@splashbi.com

Phone: +1 678-248-5756 · Toll-free: +1 (844) 293-6669