Privacy Policy

EFFECTIVE DATE: 07 OCTOBER 2026  |  LAST UPDATED: 07 OCTOBER 2026

SpringDB LLC ("SpringDB", "we", "us", or "our") respects your privacy. This Privacy Policy explains what personal information we collect through springdb.io and our related websites, products, and services, how we use it, who we share it with, and the choices and rights you have over it.

This Policy applies to springdb.io and its subdomains, including dataexchange.springdb.io and dashboard.springdb.io, together with the marketing, sales, support, and product activities operated from them (collectively, the "Services"). Our Services are directed to businesses and professional users located in the United States.

1. Two roles we play with personal information

SpringDB handles personal information in two distinct roles, and your rights differ depending on which applies.

• As a business (controller). When you visit our website, submit a form, subscribe to our newsletter, attend an event, listen to our podcast, or buy our services, we decide how your information is used. Sections 2 through 8 describe this role.
• As a service provider (processor). When we source, license, enrich, standardize, store, or deliver data on behalf of a client, or when we implement and operate platforms inside a client environment, we act on that client instructions under a written agreement. The client privacy policy governs that data. If you believe your information is held by one of our clients, contact that company directly, or contact us and we will route your request.

Section 9 explains how to reach us about personal information that may appear in datasets we source, license, or deliver.

2. Information we collect

2.1 Information you give us

• Identifiers and contact details: name, business email address, phone number, company name, job title, and postal address.
• Commercial information: services you inquire about or purchase, proposals, orders, billing contacts, and transaction records.
• Account credentials: username and password if you register for a dashboard or data exchange account.
• Content you submit: message text in contact and demo request forms, assessment and audit questionnaire answers, resource and eBook download requests, event registrations, support tickets, survey responses, and podcast or webinar participation details.
• Payment details: processed by our payment and banking providers. We do not store full card numbers on our systems.

2.2 Information collected automatically

• IP address and approximate location derived from it, including city, region, and country.
• Device and browser information: browser type and version, operating system, device type, screen size, and language.
• Usage information: pages viewed, referring and exit pages, links and buttons clicked, files downloaded, scroll depth, session duration, and timestamps.
• Cookie identifiers and similar device identifiers set by us and by the providers listed in Section 3.
• Server logs retained for security, fraud prevention, and troubleshooting.

2.3 Information from other sources

• Visitor identification providers. We use identity resolution technology that matches a visitor IP address or device signal to a company record, and in some cases to a professional contact record, so that our team can follow up on business interest. This technology may associate your visit with your employer and with professional contact details.
• Data partners and licensors. We work with 30 or more data providers and technology platforms. We may receive or verify business contact details, firmographic attributes, technographic install data, and intent signals relating to professional roles at companies.
• Publicly available sources, including company websites, public filings, professional networks, and business directories.
• Clients and partners who refer you, co-host an event with us, or share a lead with your permission.
• Social and advertising platforms where you interact with our pages, posts, lead forms, or advertisements.

3. Cookies, pixels, and tracking technologies

We and our providers use cookies, pixels, tags, software development kits, local storage, and server logs to operate the Services, measure performance, and support marketing. The table below lists the technologies in use on springdb.io at the date above. Where a tag is loaded through our tag manager, the tag manager is listed first.

4. How we use personal information

• To provide, operate, secure, and improve the Services, including hosting, account access, and technical support.
• To respond to inquiries, demo requests, assessment requests, and support messages.
• To deliver the services, data, and deliverables you or your employer have requested, and to manage contracts, invoicing, and collections.
• To send newsletters, podcast announcements, event invitations, product updates, and other marketing communications, subject to your choices.
• To identify companies showing interest in our Services and to prioritize outreach to relevant professional contacts.
• To measure and improve campaign performance, website usability, content quality, and conversion rates.
• To prevent fraud, abuse, unauthorized access, and other security incidents, and to enforce our terms.
• To create aggregated or de-identified statistics, benchmarks, and research. We do not attempt to re-identify information once it is de-identified, and we require the same of recipients.
• To comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

We do not use personal information collected through our website to train publicly available generative artificial intelligence models.

5. How we disclose personal information

We disclose personal information to the categories of recipients below. We do not disclose it for any purpose other than those described in this Policy.

• Service providers and processors that host our site, deliver email, manage our customer relationship and marketing systems, process payments, provide analytics, provide visitor identification, supply security and backup services, and provide professional advice. They are bound by contract to use the information only for the services they perform for us.
• Affiliated ventures operated by the same ownership group, including SpringDigital, DataPros, and DataStorage, where a request relates to their services.
• Technology and data partners when we arrange, fulfill, or support a licensing or implementation engagement you or your employer have asked us to pursue, including when we register an opportunity with a platform partner on your behalf.
• Advertising and social platforms for measurement and audience matching, as described in Sections 3 and 6.
• Professional advisors, such as auditors, accountants, insurers, and lawyers.
• Government authorities and other parties where disclosure is required by law, subpoena, court order, or other legal process, or where necessary to protect rights, safety, or property.
• A successor entity in connection with a merger, acquisition, financing, reorganization, or sale of assets. Information transferred this way remains subject to this Policy until the successor provides notice of a change.

6. Sale, sharing, and targeted advertising

SpringDB does not sell personal information for money that we collect from visitors through our website forms.

However, United States privacy laws define "sale" and "sharing" broadly. Our use of visitor identification technology and advertising and analytics tags means that device identifiers, IP addresses, and internet activity information may be disclosed to those providers for cross context behavioral advertising or for other valuable consideration. Under those definitions, this activity may be treated as a sale or a sharing of personal information, and as targeted advertising.

You may opt out at any time by using the Cookie Settings control, by enabling a browser opt out preference signal such as Global Privacy Control, or by emailing privacy@springdb.io with the subject line "Do Not Sell or Share My Personal Information".

Separately, SpringDB sources, licenses, and delivers third party datasets as part of its commercial offering. Those datasets may contain business contact information and other personal information about individuals in professional capacities, and the licensing of that data is a sale under several state privacy laws. Section 9 explains your rights over that information.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

7. Your United States privacy rights

Depending on your state of residence, you may have some or all of the rights below. States with comprehensive privacy laws currently include California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island, among others.

• Know and access. Request confirmation of whether we process your personal information and obtain a copy of it, including, where applicable, the categories collected, the sources, the business purposes, and the categories of recipients.
• Delete. Request deletion of personal information we have collected about you, subject to legal exceptions.
• Correct. Request correction of inaccurate personal information.
• Portability. Receive a copy in a portable and, where technically feasible, readily usable format.
• Opt out of the sale or sharing of personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects.
• Limit the use of sensitive personal information. We do not collect sensitive personal information through our website for the purpose of inferring characteristics.
• Non-discrimination. We will not deny services, charge a different price, or provide a different quality of service because you exercised a privacy right.

How to submit a request

Email privacy@springdb.io or write to us at the address in Section 17. Please tell us which right you wish to exercise and the state you reside in.

Verification. We will ask for information that allows us to reasonably verify your identity, such as the email address or phone number already associated with your record. We use that information only to process the request.

Authorized agents. You may use an authorized agent. We will require written permission signed by you and may still verify your identity directly.

Timing. We acknowledge requests promptly and respond within 45 days, with one extension of up to 45 additional days where reasonably necessary. We will tell you if an extension is needed.

Appeals. If we decline your request, you may appeal by replying to our decision with the word "Appeal" in the subject line. We will respond to an appeal within 45 days, or 60 days where state law allows, and will explain the reasons for the decision and how to contact your state attorney general if you disagree.

8. Additional California disclosures

In the preceding 12 months, we have collected the following categories of personal information defined by the California Consumer Privacy Act, as amended. The sources, purposes, and recipients for each are described in Sections 2, 4, and 5.

Retention. We retain each category for the periods set out in Section 11.

Shine the Light. California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. Send that request to privacy@springdb.io.

Financial incentives. We do not offer financial incentives in exchange for the retention or sale of personal information.

9. Individuals in our data products

SpringDB sources and licenses datasets from third party data providers and makes them available to business customers through our Data Exchange, InstaDB, and related delivery platforms. These datasets are compiled by the originating providers, not by SpringDB, and consist primarily of company information and business contact information about individuals acting in a professional capacity.

If you believe your personal information appears in data we license or deliver, you may ask us to access, correct, delete, or stop the sale of that information. Email privacy@springdb.io with the subject line "Data Product Request" and provide the email address, employer, and job title you expect to appear in the record, so that we can locate it.

Where SpringDB acts only as a conduit or processor for a client or an originating provider, we will forward your request to the responsible party and tell you who that party is, so you can exercise your rights at the source.

Several states, including California, Texas, Oregon, and Vermont, maintain data broker registries and deletion mechanisms. Where those requirements apply to our activities, we comply with the applicable registration and deletion request processes.

10. Email, calls, and text messages

We send marketing email in line with the CAN-SPAM Act. Every marketing message identifies us, provides a physical mailing address, and includes an unsubscribe link that we honor promptly. Transactional and service messages relating to an active account, order, or support request may continue after you unsubscribe from marketing.

If you provide a phone number and consent to be contacted by phone or text message, you may withdraw that consent at any time by replying STOP to a text message or by telling us during a call or in writing. Message and data rates may apply. We do not share mobile numbers collected for messaging with third parties for their own marketing.

We record podcast and webinar sessions where participants are told in advance, and we publish those recordings on the channels we announce.

11. Data retention

• Marketing contacts: up to 36 months after the last interaction, unless you ask us to delete earlier.
• Client and prospect records: for the duration of the relationship and up to 7 years after it ends, for contractual, tax, and audit purposes.
• Website analytics and cookie data: up to 14 months for event level analytics data, and for the lifetime of each cookie as disclosed in our Cookie Policy.
• Server and security logs: up to 12 months.
• Consent records: for as long as needed to evidence compliance.

Aggregated and de-identified information that cannot reasonably be linked to you may be retained indefinitely.

12. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls on a least privilege basis, multi-factor authentication for administrative systems, logging, vendor due diligence, and periodic review of our controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable state law.

13. Children

The Services are intended for business users and are not directed to children. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us with personal information, contact privacy@springdb.io and we will delete it.

14. Third party sites and services

Our Services link to websites and platforms we do not control, including partner sites, podcast platforms, social networks, and the sites of our affiliated ventures. This Policy does not apply to them. Review the privacy policy of each site you visit.

15. Visitors outside the United States

SpringDB is based in the United States and the Services are intended for users in the United States. If you access the Services from another country, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

16. Changes to this Policy

We may update this Policy to reflect changes in our practices, technologies, or legal requirements. We will post the revised version on this page and update the Last Updated date above. Material changes will be highlighted on the Services, and where required by law we will seek your consent. Your continued use of the Services after a revision takes effect indicates your acceptance of it.

17. Contact us