Privacy Policy

Effective Date: April 23, 2026  ·  Last Updated: April 23, 2026

1. About this policy

Imagined Cloud, LLC ("Imagined.Cloud," "we," "us," or "our") is a Florida limited liability company that provides OutSourcer®, a vendor compliance automation platform for the debt recovery industry. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website at imagined.cloud (the "Site") or otherwise interact with us.

This policy applies to our Site and to personal information we collect from website visitors, prospective customers, and individuals who contact us. It does not apply to personal information we process on behalf of our customers through the OutSourcer® platform itself — that processing is governed by our contractual agreements with those customers and the applicable Data Processing Addendum.

2. Information we collect

Information you provide directly

When you fill out a form on our Site (for example, the "Book a Demo" form), contact us by email, or otherwise communicate with us, we collect the information you choose to share, which may include:

• Name, title, and company name
• Business email address and phone number
• Content of messages and inquiries you send us
• Information about your role, your organization, and the business challenges you are trying to solve

Information collected automatically

When you visit our Site, we and our service providers automatically collect certain technical information, including:

• IP address and approximate location (city/region level)
• Browser type, device type, operating system, and screen resolution
• Pages viewed, referring URL, and links clicked
• Date and time of visit and time spent on pages
• Cookie and similar tracking identifiers (see Cookies and analytics)

Information from third parties

We may receive information about you from third-party sources, such as LinkedIn, business data providers, event registration lists, and referrals from existing customers or partners, where permitted by law.

3. How we use your information

We use the personal information we collect for the following purposes:

• To respond to your inquiries — When you request a demo or send us a question, we use your contact information to follow up with you.
• To provide and improve our Site — We use technical and usage information to operate, maintain, secure, and enhance the Site.
• For marketing and business development — With appropriate notice and opt-out rights, we may use your business contact information to send you information about OutSourcer®, industry updates, and relevant events.
• For analytics — We use aggregate usage data to understand how visitors use our Site and to improve its content, design, and functionality.
• To comply with legal obligations — We may use information to comply with applicable laws, respond to lawful requests, and protect our rights and the rights of others.
• For security and fraud prevention — We use information to detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.

We process personal information on the following legal bases, where required by law: (i) your consent; (ii) our legitimate business interests in operating and marketing our business, where those interests are not overridden by your rights; (iii) the performance of a contract with you or your organization; or (iv) compliance with legal obligations.

4. When we share information

We share personal information only in limited circumstances, as described below. We do not sell personal information, and we do not share personal information with third parties for their own marketing purposes.

• Service providers. We share information with trusted third-party service providers who help us operate our business — for example, cloud hosting (Microsoft Azure), email and communication tools, analytics services (Google Analytics), and customer relationship management systems. These providers are contractually required to protect your information and use it only for the purposes we specify.
• Legal and safety reasons. We may disclose information if we believe in good faith that disclosure is necessary to comply with applicable law, respond to a valid subpoena or legal process, protect the rights, property, or safety of Imagined.Cloud, our customers, or others, or detect and prevent fraud or security issues.
• Business transfers. If Imagined.Cloud is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any such change and of any choices you may have.
• With your consent. We may share information for any other purpose with your consent.

5. Cookies and analytics

Our Site uses cookies and similar technologies to operate the Site, remember your preferences, and understand how visitors use the Site. For detailed information, please see our Cookie Policy.

Google Analytics. We use Google Analytics, a web analytics service provided by Google, LLC, to collect and analyze aggregated information about Site usage. Google Analytics uses cookies to collect information such as your IP address (truncated for privacy where supported), pages visited, and referring URLs. This information is transmitted to and stored by Google. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6. How we protect your information

Imagined.Cloud maintains a SOC 2 Type II-attested information security program. We use administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These safeguards include:

• Encryption of data in transit using TLS and at rest using AES-256
• Role-based access controls with the principle of least privilege
• Continuous security monitoring and logging
• Annual independent third-party audits (SOC 2 Type II)
• Employee training on security and privacy practices

No system is perfectly secure. While we work hard to protect your information, we cannot guarantee absolute security and we encourage you to take care when sharing information online.

7. Data retention

We retain personal information only for as long as is necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Typical retention periods include:

• Demo and contact form submissions: Up to 24 months from the date of submission, unless you become a customer or ask us to delete it sooner.
• Email correspondence: Retained in accordance with our records retention policy, typically up to 7 years.
• Website analytics data: Retained in accordance with Google Analytics default settings (14 months), then aggregated or deleted.
• Legal and compliance records: Retained as required by applicable law.

8. Your privacy rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — The right to request a copy of the personal information we hold about you.
• Correction — The right to request correction of inaccurate or incomplete personal information.
• Deletion — The right to request deletion of your personal information, subject to certain exceptions.
• Opt-out of marketing — The right to opt out of marketing communications at any time, which you can do by clicking the "unsubscribe" link in our emails or by contacting us directly.
• Data portability — The right to receive your personal information in a structured, commonly used, and machine-readable format (where applicable).
• Withdraw consent — Where we rely on your consent, the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the information in the Contact us section. We will respond to your request in accordance with applicable law. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction.

9. California privacy rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including:

• The right to know what personal information we collect, use, disclose, and (if applicable) sell or share about you
• The right to delete personal information we have collected, subject to certain exceptions
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information (we do not currently sell or share personal information as those terms are defined under the CCPA)
• The right to limit the use and disclosure of sensitive personal information (we do not use sensitive personal information for purposes requiring this right)
• The right not to be discriminated against for exercising your rights

To exercise these rights, please contact us using the information in the Contact us section. We will verify your request before fulfilling it. You may designate an authorized agent to make a request on your behalf.

10. Children's privacy

Our Site is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected personal information from a child, please contact us and we will take steps to delete the information.

11. International users

Imagined.Cloud is based in the United States. If you access the Site from outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States or other countries, where data protection laws may differ from those in your jurisdiction. By using the Site, you consent to such transfers.

Where required by law (for example, under the EU General Data Protection Regulation), we implement appropriate safeguards for international data transfers, such as standard contractual clauses.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify you by email or a prominent notice on our Site. Your continued use of the Site after the effective date of any changes constitutes your acceptance of the updated policy.

13. How to contact us

If you have questions or concerns about this Privacy Policy or our privacy practices, or if you would like to exercise any of your privacy rights, please contact us: