Privacy Policy

Effective Date: September 8, 2026 Last Updated: September 8, 2026

1. Introduction

At Phillforce, we believe businesses should be able to use intelligence without giving up control of their information. Phillforce, Inc. (“Phillforce,” “we,” “our,” or “us”) provides customer acquisition intelligence technology designed to help businesses understand how their acquisition systems are performing, identify areas that may be limiting growth, prioritize what deserves attention, and make better-informed commercial decisions. Providing that experience requires us to process certain information. Some of it is basic account information, some is technical information generated when you use the platform, and some may be business or commercial evidence that you choose to provide so Phillforce can produce a more useful and relevant diagnosis. This Privacy Policy explains what information we collect, why we collect it, how we use it, when it may be shared, how long we keep it, how we work to protect it, and the choices and privacy rights available to you. This Privacy Policy applies to Phillforce websites, Phillforce Intelligence, Ask Phill, our account and authentication systems, customer-facing services, and other Phillforce products or services that link to this Privacy Policy. By using Phillforce, you acknowledge that you have read this Privacy Policy.

2. Who We Are

Phillforce is operated by: Phillforce, Inc. 8 Wading Bird Loop Blythewood, SC 29016 United States Website: phillforce.com Privacy enquiries: privacy@phillforce.com General enquiries: philip@phillforce.com Depending on the context, Phillforce may act as a controller or business that determines why and how personal information is processed, or as a processor or service provider processing information on behalf of a business customer. For example, Phillforce generally determines how account, security, billing, website, product-usage, support, and platform administration information is processed. Where a business customer provides personal information relating to its own customers, leads, users, or prospects for processing through Phillforce, that business may remain responsible for determining the purposes for which that information is processed, while Phillforce processes the information on its behalf and subject to the applicable agreement and law.

3. Information We Collect

We try to collect information because it serves a legitimate purpose in operating, securing, improving, or providing Phillforce. The information we collect depends on how you interact with Phillforce.

Account and Profile Information

When you create or manage a Phillforce account, we may collect information such as:

• Full name
• Email address
• Profile photograph
• Job title
• Company or organization
• Time zone
• Account preferences
• Authentication information
• Connected login providers
• Account settings

Phillforce user profiles are not intended to function as publicly searchable social profiles unless we specifically introduce such a feature and provide appropriate notice.

4. Business and Commercial Evidence

Phillforce works best when it understands the business being analyzed. You may choose to provide business and commercial information including:

• Company name
• Public website
• Primary market
• Target audience
• Products or services
• Acquisition goals
• Reporting period
• Website visitors
• Leads
• Qualified leads
• Meetings
• Proposals
• Customers
• Acquisition expenditure
• Customer acquisition cost
• Average customer value
• Conversion information
• Lead sources
• Sales-cycle information
• Lost-deal reasons
• Customer objections
• Offer information
• Buyer or customer journey information
• Other acquisition-related information

We refer to information that a customer directly provides to Phillforce for analysis as “client-supplied evidence.” Client-supplied evidence may be commercially confidential even where it does not constitute personal information. Phillforce may use this information to calculate metrics, identify patterns, evaluate acquisition systems, generate diagnoses, prioritize potential constraints, provide recommendations, develop interventions, create reports, and help customers understand their acquisition systems.

5. Information From Public Sources

Phillforce may analyze publicly accessible business information in order to provide customer acquisition intelligence. This may include information available through:

• Public websites
• Public landing pages
• Publicly available business content
• Public calls to action
• Public product or service information
• Public pricing information
• Public business messaging
• Public resources
• Public business pages
• Public social or professional pages where permitted
• Other publicly accessible business information relevant to the analysis

Phillforce uses public information to understand businesses and acquisition systems. Phillforce is not intended to be used to gain unauthorized access to private systems, bypass security controls, conduct unlawful surveillance, or collect information in violation of applicable law or our Acceptable Use Policy.

6. Information Collected Automatically

When you visit or use Phillforce, our systems may automatically receive certain technical and usage information. This may include:

• IP address
• Browser type
• Device type
• Operating system
• Session information
• Login activity
• Referral information
• Pages or features used
• Diagnostic activity
• Application activity
• Error information
• Security-related events
• Cookie identifiers
• Approximate location derived from IP address where permitted

We may use this information to operate the service, maintain security, prevent abuse, improve product performance, troubleshoot technical issues, understand usage patterns, and improve the Phillforce experience.

7. Communications

If you contact Phillforce, request support, submit feedback, participate in a review, complete a form, send us an email, or otherwise communicate with us, we may collect and retain the information contained in those communications. We may use this information to respond to you, provide support, improve the product, resolve disputes, maintain records, and protect Phillforce and its users.

8. Transaction and Billing Information

Where you purchase a Phillforce product, subscription, review, implementation engagement, or other service, we may process information necessary to administer the transaction. This may include:

• Customer name
• Company
• Billing email
• Purchase history
• Subscription status
• Payment status
• Invoice information
• Transaction identifiers

Payment card information is generally intended to be handled by the applicable payment processor rather than stored directly by Phillforce where our payment architecture allows. Payment processors may process your information under their own privacy policies and terms.

9. Information We Do Not Want You to Provide Unnecessarily

Phillforce is a customer acquisition and commercial intelligence platform. It is not designed to operate as a repository for highly sensitive personal information. Unless a Phillforce feature specifically requires and supports it, please do not provide information such as:

• Social Security numbers
• Government identification numbers
• Bank account passwords
• Payment-card passwords or security credentials
• Medical records
• Detailed health information
• Biometric information
• Highly sensitive personal records
• Precise personal location histories
• Passwords for third-party services
• Other sensitive information unrelated to the service

Data minimization is an important part of our privacy and security approach.

10. How We Use Information

Phillforce may use information where reasonably necessary to:

• Create and administer user accounts
• Authenticate users
• Provide Phillforce Intelligence
• Provide Ask Phill
• Analyze customer acquisition systems
• Interpret public and client-supplied evidence
• Calculate acquisition metrics
• Generate diagnoses
• Identify potential acquisition constraints
• Prioritize recommendations
• Develop interventions
• Generate analytical reports
• Produce modeled commercial scenarios
• Maintain diagnosis history
• Maintain account settings
• Personalize analysis to a business context
• Process purchases and subscriptions
• Provide customer support
• Respond to requests
• Send account notifications
• Send billing notifications
• Send service notifications
• Send security communications
• Protect Phillforce systems
• Detect and prevent fraud
• Detect and prevent abuse
• Investigate violations of our policies
• Monitor product performance
• Improve reliability
• Improve the Phillforce product
• Improve analytical methods
• Maintain records
• Comply with legal requirements
• Establish, exercise, or defend legal rights

We aim to connect information collection and use to a legitimate product, security, operational, contractual, or legal purpose.

11. Artificial Intelligence and Automated Analysis

Artificial intelligence and automated analytical systems are part of how Phillforce helps customers understand their acquisition systems. AI and automated systems may support features including:

• Ask Phill
• Acquisition diagnosis
• Evidence interpretation
• Constraint identification
• Funnel interpretation
• Recommendation development
• Intervention development
• Analytical explanations
• Reports
• Modeled scenarios
• Acquisition prioritization

Information submitted to these features may be processed through Phillforce systems and approved technology providers where necessary to provide the service. Phillforce uses AI as a business intelligence and decision-support system. Phillforce is not designed to make employment, housing, credit, insurance, healthcare, criminal justice, or similarly legally significant decisions about individuals. AI-generated outputs are intended to assist businesses in understanding available evidence and making their own commercial decisions.

12. Customer Data Isolation

One customer’s private commercial information should not be exposed to another customer simply because both customers use Phillforce. Phillforce maintains technical and organizational safeguards intended to restrict access to information based on appropriate account, workspace, authorization, and access boundaries. We do not intentionally provide one customer’s private commercial evidence to another customer.

13. AI Model Improvement and Customer Information

Phillforce will not intentionally expose one customer’s private commercial evidence to another customer for the purpose of improving that other customer’s diagnosis. Phillforce does not intend to use customers’ private commercial evidence to train general-purpose shared AI models in a manner that makes the information available to other customers, except where the customer has expressly agreed to such use or where the information has been appropriately transformed, aggregated, anonymized, or otherwise processed in accordance with applicable law and contractual obligations. If Phillforce materially changes how private customer information is used for AI or model-development purposes, we will update our disclosures and obtain additional consent where required by applicable law.

14. Google and LinkedIn Authentication

Phillforce may allow you to create or access your account using Google, LinkedIn, or another supported identity provider. If you choose to use one of these services, Phillforce may receive information permitted by you and the provider, such as:

• Your name
• Email address
• Profile photograph
• Provider-specific account identifier

We use this information to:

• Authenticate you
• Create or connect your Phillforce account
• Display appropriate account information
• Help prevent unauthorized access
• Maintain account functionality

Phillforce does not receive your Google or LinkedIn password. We request only permissions reasonably necessary for the feature being provided. If Phillforce introduces additional Google, LinkedIn, or third-party integrations beyond authentication, we will provide appropriate information explaining what information the integration accesses and why. You may be able to disconnect a supported provider through Phillforce account settings or through the provider itself, subject to security requirements necessary to preserve access to your Phillforce account.

15. Legal Bases for Processing

Where applicable privacy law requires Phillforce to identify a legal basis for processing personal information, we may rely on one or more of the following:

Performance of a Contract

We process information where necessary to create and operate your account, provide Phillforce, deliver purchased products or services, and perform our agreement with you.

Legitimate Interests

We may process information where reasonably necessary for legitimate business interests such as:

• Product security
• Fraud prevention
• Abuse prevention
• Customer support
• Service improvement
• Product analytics
• Maintaining business operations
• Protecting legal rights

We consider whether those interests are outweighed by applicable privacy rights.

Consent

We rely on consent where consent is required, including for certain optional cookies, marketing communications, or optional processing activities.

Legal Obligations

We may process information where necessary to comply with applicable laws, regulations, lawful requests, court orders, or other legal requirements. Other lawful bases may apply where permitted by applicable law. Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

16. How We Share Information

Phillforce does not need to sell customer information in order to operate our business. We may disclose limited information to service providers that help us operate and deliver Phillforce. These providers may include companies providing:

• Cloud hosting and infrastructure
• Artificial intelligence technology
• Authentication services
• Email delivery
• Analytics
• Payment processing
• Security monitoring
• Customer support infrastructure
• Professional services
• Other technology necessary to operate Phillforce

We expect providers processing information on our behalf to use it only for authorized purposes and subject to appropriate legal, contractual, confidentiality, or security obligations. We may also disclose information where reasonably necessary to:

• Comply with applicable law
• Respond to valid legal process
• Protect Phillforce
• Protect customers
• Protect other individuals
• Investigate fraud
• Investigate security incidents
• Enforce our Terms
• Establish legal claims
• Exercise legal rights
• Defend legal claims
• Complete a legitimate financing, merger, acquisition, reorganization, sale, or similar corporate transaction

If ownership of Phillforce changes, information may be transferred as part of that transaction subject to applicable law and appropriate safeguards.

17. Sale and Sharing of Personal Information

Phillforce does not sell personal information for monetary consideration. Certain U.S. privacy laws use terms such as “sell,” “share,” “targeted advertising,” and similar concepts more broadly than their ordinary meaning. If Phillforce engages in an activity that qualifies as a sale, sharing, targeted advertising, or similar regulated activity under applicable law, we will provide the notices, choices, and opt-out mechanisms required by that law. Where legally required, Phillforce will also recognize supported browser or device-based privacy preference signals.

18. Cookies and Similar Technologies

Phillforce may use cookies and similar technologies. These may include:

Strictly Necessary Cookies

Used for authentication, security, session management, and essential service functionality.

Preference Cookies

Used to remember settings and user preferences.

Analytics Cookies

Used to understand product and website usage and improve Phillforce.

Marketing Cookies

Used only where Phillforce implements applicable advertising or marketing technologies. Some cookies are necessary for Phillforce to function properly. Other cookies may be optional depending on their purpose and applicable law. Where consent is legally required before using non-essential cookies or similar technologies, Phillforce will provide an appropriate consent or preference mechanism. Additional information will be available in the Phillforce Cookie Policy.

19. International Users and Data Transfers

Phillforce, Inc. is a United States company and serves users internationally. Information may therefore be processed in the United States or other countries in which Phillforce or its approved service providers operate. Privacy and data-protection laws differ between countries. Where applicable law requires additional safeguards for international transfers, Phillforce will use an appropriate lawful transfer mechanism or recognized safeguard. Depending on the circumstances, this may include contractual safeguards or another transfer mechanism permitted by applicable law.

20. Data Retention

Phillforce does not believe information should be retained indefinitely simply because storage is available. We retain information for the period reasonably necessary to:

• Provide Phillforce
• Maintain active accounts
• Preserve legitimate diagnosis history
• Maintain customer service history
• Meet legal requirements
• Meet accounting requirements
• Protect the platform
• Prevent fraud
• Investigate security incidents
• Resolve disputes
• Enforce agreements

Different categories of information may have different retention periods. When deciding how long to retain information, we may consider:

• Why the information was collected
• Whether the account remains active
• The sensitivity of the information
• Legal requirements
• Regulatory requirements
• Contractual requirements
• Security requirements
• Whether the information remains necessary to provide the service

Information removed from active systems may temporarily remain in protected backup systems until those backups are replaced through their normal lifecycle. Phillforce will not intentionally restore deleted information to ordinary active use merely because it remains in a backup, unless restoration is reasonably necessary for security, disaster recovery, legal compliance, or another legitimate purpose.

21. Security

Protecting customer information is an important part of operating Phillforce responsibly. Phillforce maintains administrative, organizational, and technical safeguards designed to reduce risks including:

• Unauthorized access
• Unauthorized disclosure
• Unauthorized alteration
• Misuse
• Accidental loss
• Destruction
• Account compromise

Our safeguards may include appropriate measures relating to:

• Access control
• Authentication
• Secure communications
• Authorization
• Monitoring
• Software security
• Infrastructure security
• Backups
• Account protection
• Operational security

No internet-connected system can reasonably guarantee absolute security. For security reasons, Phillforce does not publicly disclose detailed defensive architecture, security configurations, vulnerabilities, security thresholds, internal security procedures, or other information that could weaken those protections. Customers may review our public-facing Security & Trust Statement for additional high-level information about our approach to security.

22. Your Privacy Rights

Privacy rights vary depending on where you live. Subject to applicable law, you may have the right to:

• Know whether Phillforce processes personal information about you
• Access personal information
• Receive a copy of certain personal information
• Correct inaccurate personal information
• Request deletion of personal information
• Request restriction of certain processing
• Object to certain processing
• Withdraw consent where processing is based on consent
• Request portability of certain information
• Opt out of certain sale or sharing activities
• Opt out of targeted advertising where applicable
• Object to certain profiling activities where applicable
• Appeal certain privacy-request decisions where applicable
• Complain to an appropriate privacy or data-protection regulator

Phillforce will not discriminate against you merely because you exercise a privacy right protected by applicable law. Privacy requests may be submitted to: privacy@phillforce.com Phillforce may need to verify your identity before completing certain requests. Where permitted by law, an authorized agent may submit a request on your behalf.

23. United States Privacy Rights

Phillforce is headquartered in the United States and may be subject to federal and state privacy requirements depending on the nature, location, and scale of our operations. Different U.S. states provide different privacy rights. Where an applicable U.S. state privacy law applies to Phillforce and to you, we intend to honor the rights provided under that law. These rights may relate to:

• Access
• Deletion
• Correction
• Data portability
• Targeted advertising
• Certain profiling activities
• Sale of personal information
• Sharing of personal information
• Sensitive personal information
• Appeals of privacy-request decisions

24. California Privacy Notice

This section applies where the California Consumer Privacy Act, as amended, applies to Phillforce and the relevant individual. California residents may have rights including the right to:

• Know what personal information is collected
• Know how personal information is used
• Access personal information
• Request deletion
• Request correction
• Opt out of certain sale or sharing
• Limit certain uses of sensitive personal information where applicable
• Exercise applicable rights without unlawful discrimination

Categories of information Phillforce may collect may include:

Identifiers

Such as name, email address, IP address, and account identifiers.

Commercial Information

Such as purchases, subscription information, and customer relationship information.

Internet or Electronic Activity

Such as product usage, website interactions, browser information, device information, and application activity.

Professional Information

Such as job title, company, and organization.

Inferences and Analytical Information

Where generated from information provided to or observed by Phillforce.

Other Information

Information voluntarily provided by customers in connection with the service. Phillforce does not sell personal information for monetary consideration. If a Phillforce practice constitutes “sharing,” targeted advertising, or another regulated activity under California law, Phillforce will provide the legally required mechanism to exercise the applicable right. Requests may be submitted through: privacy@phillforce.com or through additional privacy controls provided by Phillforce.

25. European Economic Area and European Union

If you are located in the European Economic Area or another jurisdiction governed by the General Data Protection Regulation, you may have rights including:

• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data portability
• Withdrawal of consent

These rights are subject to applicable conditions and exceptions. You may also have the right to lodge a complaint with the supervisory authority in the country where you live, work, or believe a violation occurred. Where Phillforce relies on legitimate interests, you may have a right to object in circumstances provided by applicable law. Where required, Phillforce will provide additional information concerning international-transfer safeguards or other applicable processing arrangements.

26. United Kingdom Privacy Rights

If you are located in the United Kingdom, you may have rights under applicable UK data-protection law relating to:

• Access
• Correction
• Deletion
• Restriction
• Objection
• Portability
• Certain automated processing

You may also have the right to complain to the Information Commissioner’s Office or another competent authority. Phillforce will provide additional United Kingdom-specific safeguards where legally required.

27. Users in Nigeria and Other Countries

Phillforce serves a global audience. Privacy and data-protection laws in countries outside the United States may provide additional rights or requirements. For individuals in Nigeria, applicable rights may arise under Nigerian data-protection law. Users located in Canada, Brazil, Australia, African countries, Asian countries, Latin American countries, Middle Eastern countries, and other jurisdictions may similarly have rights under applicable local privacy laws. Where an applicable law grants you additional rights not expressly listed in this Privacy Policy, Phillforce intends to respect those rights where the law applies to our processing. You may contact privacy@phillforce.com if you have questions about privacy rights applicable to your location.

28. Automated Analysis and Profiling

Phillforce uses automated systems to analyze businesses, commercial evidence, customer acquisition conditions, and related signals. For example, Phillforce may:

• Identify an acquisition priority
• Calculate funnel movement
• Evaluate acquisition-system signals
• Identify potential constraints
• Calculate modeled scenarios
• Recommend an intervention
• Prioritize areas requiring attention

These outputs are intended to support commercial decision-making by businesses. Phillforce does not intend these systems to make solely automated decisions about individuals that determine eligibility for:

• Employment
• Housing
• Credit
• Insurance
• Healthcare
• Education admissions
• Criminal justice outcomes
• Other similarly significant individual rights

Where applicable privacy law provides rights concerning automated decision-making or profiling, Phillforce will honor those rights where the relevant processing falls within that law.

29. Account and Data Deletion

Users may delete or request deletion of their Phillforce account subject to applicable law and legitimate retention requirements. Where available, account deletion may be initiated through: Settings → Privacy & Data → Delete Account For security, Phillforce may require reauthentication, identity verification, or another confirmation step before completing account deletion. Depending on the account and services used, deletion may include:

• Profile information
• Account information
• Saved diagnoses
• Business evidence
• Reports
• Ask Phill history
• Authentication connections
• Other stored account information

Certain information may be retained where reasonably necessary for:

• Legal compliance
• Accounting
• Fraud prevention
• Security
• Dispute resolution
• Enforcement of agreements
• Other legitimate legal obligations

Additional details will be provided in the Phillforce Account & Data Deletion Policy.

30. Organizational and Workspace Data

If you use Phillforce on behalf of a company or another organization, that organization may control certain information associated with its workspace. Authorized workspace owners or administrators may eventually be able to:

• Invite users
• Remove users
• Manage permissions
• Manage company information
• Manage workspace settings
• Access certain business intelligence associated with the workspace

Where personal information is submitted to Phillforce by your employer or another organization rather than directly by you, your privacy request concerning that information may need to be directed to the organization in the first instance. Phillforce will assist business customers with legally required privacy requests where appropriate and where required by applicable agreements or law.

31. Marketing Communications

There is a difference between communications required to operate your account and promotional communications. Phillforce may send transactional communications relating to:

• Account verification
• Password changes
• Security events
• Authentication
• Billing
• Purchases
• Subscriptions
• Product operation
• Diagnoses
• Reports
• Service notices
• Important changes

Marketing communications are treated separately. Where required, marketing messages will be sent subject to applicable consent or opt-out requirements. You may unsubscribe from promotional emails by using the unsubscribe mechanism included in the communication or by contacting Phillforce. Unsubscribing from marketing does not necessarily prevent Phillforce from sending essential account, billing, security, or service communications.

32. Children’s Privacy

Phillforce is designed for businesses, founders, professionals, and organizations. The service is not intended for children under 18. Phillforce does not knowingly seek to collect personal information from children under 18 through the ordinary use of the platform. If you believe that a child has improperly provided personal information to Phillforce, please contact: privacy@phillforce.com We will review the situation and take appropriate action where required.

33. Third-Party Websites and Services

Phillforce may contain links to third-party websites or integrate with third-party platforms. Those services may operate under their own privacy policies, terms, and practices. This Privacy Policy does not control the independent privacy practices of another company merely because Phillforce links to or integrates with that service. We encourage users to review the privacy policies of services they choose to use or connect to Phillforce.

34. Business Transfers

Phillforce may grow, raise capital, restructure, acquire businesses, be acquired, merge with another organization, sell assets, or participate in another corporate transaction. If such a transaction involves the transfer of information, that information may be transferred as part of the transaction subject to applicable law and appropriate confidentiality, contractual, or data-protection safeguards. A successor receiving information covered by this Privacy Policy would be expected to process that information consistently with applicable legal obligations.

35. Legal Requests and Protection of Rights

Phillforce may preserve, access, or disclose information where we reasonably believe doing so is necessary to:

• Comply with applicable law
• Respond to valid legal process
• Respond to lawful requests from competent authorities
• Protect Phillforce
• Protect our customers
• Protect other individuals
• Investigate fraud
• Investigate abuse
• Investigate security incidents
• Enforce our Terms of Service
• Establish legal claims
• Exercise legal rights
• Defend legal claims

We will evaluate legal requests in accordance with applicable legal requirements.

36. Privacy Complaints

If you have concerns about how Phillforce handles your information, we would like the opportunity to investigate and address them. Please contact: privacy@phillforce.com Please provide enough information for us to understand your concern without including unnecessary sensitive personal information. Depending on where you live, you may also have the right to complain directly to an appropriate privacy or data-protection regulator.

37. Changes to This Privacy Policy

Phillforce will continue to evolve. We may update this Privacy Policy when:

• Our products change
• New features are introduced
• New integrations are introduced
• Our processing practices change
• Our service providers change
• Applicable laws change
• Regulatory requirements change
• Our corporate structure changes

The “Last Updated” date at the beginning of this Privacy Policy will indicate when the current version was revised. Where a change materially affects how personal information is collected, used, or shared, Phillforce will provide additional notice where required or where we believe the change is important enough that users should be specifically informed. Where applicable law requires renewed consent before a materially different use of information, Phillforce will seek that consent before beginning the relevant processing.

38. Contact Phillforce

Questions about this Privacy Policy, privacy requests, or concerns about your information may be directed to: Phillforce, Inc. 8 Wading Bird Loop Blythewood, SC 29016 United States Privacy: privacy@phillforce.com General enquiries: philip@phillforce.com Website: phillforce.com

Phillforce, Inc. Clarity before activity.