ESAT™ Privacy Policy

Effective date: May 13, 2026

This Privacy Policy explains how SATRDE collects, uses, discloses, stores, and protects information when customers, users, and visitors access or use the Services. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information we collect

We may collect information directly from users, automatically through use of the Services, and from third parties.

1.1 Information provided by users

• Name, email address, and phone number
• Organization name and job title
• Account credentials
• Billing and payment information
• Support communications
• Files, documents, and data submitted through the Services

1.2 Customer Data

Customers may upload or provide data through the Services (“Customer Data”), which may include program participant information, employment or training data, case management information, demographic data, and reports or analytics data. SATRDE processes Customer Data on behalf of customers and in accordance with applicable agreements.

1.3 Automatically collected information

• IP address, browser type and version, and device identifiers
• Operating system and log files
• Usage, activity, and session information
• Cookies and similar tracking technologies

2. How we use information

• Provide, operate, and maintain the Services
• Authenticate users and secure accounts
• Process transactions and subscriptions
• Respond to support requests
• Improve and enhance the Services
• Monitor system performance and security
• Conduct analytics and reporting
• Comply with legal obligations and enforce agreements and policies
• Communicate updates, notices, and service-related information

We do not sell personal information to third parties.

3. Customer Data processing

To the extent SATRDE processes Customer Data on behalf of a customer: the customer remains the owner and controller of Customer Data; SATRDE acts as a service provider or processor; and SATRDE processes Customer Data only as necessary to provide the Services and fulfill contractual obligations. Customers are responsible for ensuring they have appropriate legal rights and permissions to provide Customer Data to SATRDE.

4. Cookies and tracking technologies

SATRDE may use cookies, pixels, local storage, and similar technologies to maintain user sessions, remember preferences, improve functionality, analyze traffic and usage patterns, and secure the Services. Users may control cookies through browser settings; disabling cookies may affect functionality.

5. How we share information

• With service providers and subprocessors assisting in operation of the Services
• To comply with legal obligations, court orders, or government requests
• To protect the rights, safety, and security of SATRDE, users, or others
• In connection with a merger, acquisition, financing, or sale of assets
• With customer authorization or consent

SATRDE does not sell or rent personal information to advertisers or unrelated third parties.

6. Data security

SATRDE implements commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. Measures may include encryption in transit and at rest, access controls, authentication procedures, audit logging, network monitoring, and regular security assessments. While SATRDE takes reasonable steps to protect information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

SATRDE retains information for as long as necessary to provide the Services, fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements. Customer Data may be deleted following termination of services in accordance with applicable agreements and retention schedules.

8. User rights and choices

Depending on applicable law, individuals may have rights to:

• Access personal information
• Correct inaccurate information
• Request deletion of information
• Restrict or object to processing
• Request portability of information
• Withdraw consent where applicable

Requests may be submitted using the contact information below. SATRDE may require verification before responding.

9. Children's privacy

The Services are not directed to children under thirteen (13) years of age unless expressly authorized through a customer relationship involving lawful collection and processing activities. SATRDE does not knowingly collect personal information directly from children except as authorized by customers and applicable law.

10. Third-party services

The Services may integrate with or contain links to third-party websites, applications, or services. SATRDE is not responsible for the privacy practices or content of third-party services.

11. International data transfers

If information is transferred across national borders, SATRDE will take appropriate steps to ensure such transfers comply with applicable data protection laws.

12. HIPAA, FERPA, and regulated data

Certain customer relationships may involve regulated data subject to laws such as HIPAA, FERPA, or state confidentiality requirements. In such cases, additional contractual protections, including Business Associate Agreements or Data Use Agreements, may apply.

13. Changes to this Privacy Policy

SATRDE may update this Privacy Policy from time to time. Updated versions will be posted with a revised effective date. Continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact information

SATRDE, LLC · 174 Saundersville Rd, Suite 202, Hendersonville, TN 37075 · support@satrde.com · 877-544-3445

15. California and state-specific privacy rights

Residents of certain states may have additional privacy rights under state law, including rights related to accessing collected information, requesting deletion, opting out of certain data sharing practices, and non-discrimination for exercising privacy rights. SATRDE will comply with applicable state privacy laws to the extent required.

16. Governing law

This Privacy Policy shall be governed by the laws of the State of Tennessee, without regard to conflict of law principles.