PRIVACY POLICY and GDPR

Last Updated: August 2026

1. INTRODUCTION AND SCOPE

Scott's Add-Ins, LLC ("Company", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website (scottsaddins.com), our Excel add-in products, and related services (collectively, the "Services").

This Privacy Policy applies to all visitors, users, and others who access or use the Services (collectively, "Users", "you", "your"). Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use the Services.

2. INFORMATION WE COLLECT

2.1 INFORMATION YOU PROVIDE DIRECTLY

We collect information you voluntarily provide when you:

●      Create or register an account

●      Use the Services

●      Communicate with us via email, chat, or support requests

●      Subscribe to our newsletter or marketing communications

●      Fill out surveys or feedback forms

This information may include:

●      Name, email address, phone number

●      Company/organizational information

●      Account credentials and authentication information

●      Billing and payment information

●      Profile information and preferences

●      Communications and correspondence

2.2 INFORMATION COLLECTED AUTOMATICALLY

When you access the Services, we automatically collect certain information:

●      Device information (device type, operating system, unique device identifiers)

●      Browser information (browser type, version, language)

●      IP address and geolocation data

●      Log data (access times, pages visited, actions taken)

●      Usage patterns and interaction data

●      Referral source and traffic information

2.3 COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar tracking technologies to:

●      Remember your preferences and login information

●      Understand how you use the Services

●      Analyze website traffic and performance

●      Provide personalized content and experiences

●      Prevent fraud and improve security

We use both session-based and persistent cookies. You can control cookie preferences through your browser settings, though some features may not function properly if cookies are disabled.

2.4 THIRD-PARTY DATA

When you connect the Services to third-party platforms (such as Xero), we may receive information from those platforms in accordance with their authorization protocols and privacy policies. We do not control how third-party platforms handle your data.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

●      To provide, maintain, and improve the Services

●      To process transactions and send related information

●      To send transactional communications (account updates, security alerts)

●      To respond to your inquiries and customer support requests

●      To send marketing communications (with your consent where required)

●      To analyze usage patterns and improve user experience

●      To detect, prevent, and address fraud and security issues

●      To comply with legal and regulatory obligations

●      To establish and enforce agreements with you

●      To protect our rights, privacy, safety, and property

●      For any other purpose disclosed when information is collected

 

4. HOW WE SHARE YOUR INFORMATION

4.1 SERVICE PROVIDERS

We share information with third-party service providers who perform services on our behalf, such as:

●      Cloud hosting and storage providers

●      Payment processors and financial institutions

●      Email and customer communication services

●      Analytics and data analysis services

●      Customer support platforms

These service providers are contractually obligated to use your information only for the purposes necessary to provide services to us.

4.2 THIRD-PARTY INTEGRATIONS

If you authorize integration with third-party platforms (such as Xero), we share necessary information to facilitate that integration. Third-party platforms have their own privacy policies that govern how they use your data.

4.3 LEGAL REQUIREMENTS AND PROTECTION

We may disclose your information when required by law or when we believe in good faith that such disclosure is necessary to:

●      Comply with legal obligations, court orders, or governmental requests

●      Enforce our Terms and Conditions and other agreements

●      Protect against fraud and security threats

●      Protect the safety, rights, and property of the Company, users, or the public

 

4.4 BUSINESS TRANSFERS

If Scott's Add-Ins is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.5 AGGREGATED AND ANONYMIZED DATA

We may share aggregated and anonymized information that cannot identify you personally. This data may be used for marketing, analytics, research, and other purposes without restriction.

5. DATA RETENTION

We retain your information for as long as necessary to provide the Services, fulfill the purposes outlined in this Privacy Policy, or comply with legal obligations. Retention periods vary depending on the type of information and the purposes for which we use it:

●      Account information: retained while your account is active, plus 30 days after deletion

●      Transaction records: retained for 7 years for tax and compliance purposes

●      Marketing information: retained until you unsubscribe

●      Log data: retained for 90 days for security and analytical purposes

When information is no longer needed, we will securely delete or anonymize it.

6. DATA SECURITY

We implement comprehensive technical and organizational security measures to protect your information from unauthorized access, alteration, disclosure, and destruction. These measures include:

●      Encryption of data in transit using 256-bit TLS  or higher

●      Encryption of data at rest using AES-256 encryption

●      Access controls and role-based permissions

●      Regular security audits and vulnerability assessments

●      Incident response procedures

●      Employee security training

However, no method of transmission or storage over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for protecting your account credentials and must notify us immediately of any unauthorized access.

7. YOUR PRIVACY RIGHTS

7.1 GDPR RIGHTS (EU/EEA Residents)

If you are located in the EU/EEA, you have the following rights under the GDPR:

●      Right to access: obtain a copy of your personal data

●      Right to rectification: correct inaccurate or incomplete data

●      Right to erasure: request deletion of your data (right to be forgotten)

●      Right to restrict processing: limit how your data is processed

●      Right to data portability: receive your data in a portable format

●      Right to object: object to processing for marketing or profiling

●      Right to withdraw consent: withdraw any consent you have provided

To exercise these rights, contact us at help@scottsaddins.com with your request.

7.2 CCPA RIGHTS (California Residents)

If you are a California resident, you have the following rights under the CCPA:

●      Right to know: request what personal information we collect and use

●      Right to delete: request deletion of your personal information

●      Right to opt-out: opt out of the sale or sharing of your personal information

●      Right to correct: request correction of inaccurate information

●      Right to limit use: limit use and disclosure of sensitive personal information

To exercise these rights, contact us at privacy@scottsaddins.com. We will verify your identity before fulfilling your request.

7.3 OTHER JURISDICTIONS

Depending on your jurisdiction, you may have additional privacy rights. We will honor all privacy rights to the extent required by applicable law.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to, processed in, and stored in countries other than your country of residence. These countries may have data protection laws that differ from your home country. When we transfer information internationally, we implement appropriate safeguards, such as Standard Contractual Clauses, to ensure your information is protected.

By using the Services, you consent to the transfer of your information to countries outside your country of residence, including the United States.

9. THIRD-PARTY LINKS AND SERVICES

The Services may contain links to third-party websites, applications, and services that are not operated by Scott's Add-Ins. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your information.

10. CHILDREN'S PRIVACY

The Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete such information immediately.

11. MARKETING COMMUNICATIONS

We may send you marketing communications about new features, promotions, and services. You can opt out of marketing communications at any time by:

●      Clicking the "unsubscribe" link in any marketing email

●      Updating your preferences in your account settings

●      Contacting us at help@scottsaddins.com

Please note that even if you opt out of marketing communications, we will continue to send you transactional and administrative communications.

12. DATA BREACH NOTIFICATION

If we become aware of a security breach that compromises your personal information, we will notify you without undue delay and provide information necessary for you to take protective measures. We will also notify relevant regulatory authorities as required by law.

13. CALIFORNIA PRIVACY RIGHTS NOTICE

California residents have the right to know whether personal information is sold or disclosed for a business purpose. In the past 12 months, Scott's Add-Ins has not sold personal information and does not intend to do so. We share personal information with service providers as described in this Privacy Policy.

14. DO NOT TRACK

Some browsers include a Do Not Track feature. Currently, there is no industry standard for recognizing Do Not Track signals. We do not currently respond to Do Not Track browser signals, but we provide you with choices regarding the collection and use of your information through the mechanisms described in this Privacy Policy.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make material changes, we will notify you by email or by posting a prominent notice on the website. Your continued use of the Services following the posting of revised Privacy Policy constitutes your acceptance of the changes.

16. CONTACT US

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us:

Scott's Add-Ins, LLC Email: help@scottsaddins.com Website: www.scottsaddins.com

17. CALIFORNIA RESIDENT SPECIFIC CONTACT

California residents can submit privacy requests to: Scott's Add-Ins, LLC Privacy Request Portal: www.scottsaddins.com/privacy-request Email: help@scottsaddins.com

IMPORTANT DISCLAIMER

Scott's Add-Ins provides this policy for informational purposes and disclaims liability for any consequences arising from its use.