Privacy Policy

1. Introduction

Thayer Systems, LLC ("Thayer Systems," "we," "us," or "our") respects your privacy and is committed to protecting the data you share with us. This Privacy Policy explains how we collect, use, and protect information when you use our websites, software, and related services, including Wingbeat, Talon, and Perch (collectively, the "Services").

By using the Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Services.

2. Information We Collect

Thayer Systems does not collect personally identifiable information ("PII") beyond what is necessary to operate and improve the Services. The information we collect falls into the following categories:

2.1 Information You Provide

• Account Information: When you register, we collect basic business details such as your name, company name, email address, and billing information.
• Communications: If you contact us, we may collect your email address, message content, and related metadata to respond to inquiries.
• Subscription Data: Information related to your plan selection, payment method, and billing history.

2.2 Automatically Collected Data

When you use our Services, we may automatically collect limited technical and usage information, such as:

• Browser type and device information
• IP address (anonymized)
• Referring and exit pages
• Time spent on site and pages viewed
• Aggregated performance and engagement metrics

2.3 Tracking Technologies

We use cookies, pixels, and API integrations to enhance site functionality and understand product performance. These tools collect non-personal, anonymized usage data to help us improve our Services.

You can adjust your browser settings to block or delete cookies, though some features of the Services may not function properly as a result.

3. How We Use Information

We use collected information solely to operate, maintain, and improve the Services. This includes:

• Delivering core product functionality and user analytics
• Authenticating accounts and maintaining security
• Processing payments and managing subscriptions
• Improving our tools and identifying performance trends
• Responding to customer inquiries and providing support
• Sending account-related notifications and updates

We do not sell, rent, or share user data for advertising or marketing purposes.

4. Google API Services — User Data Policy

Thayer Systems uses Google APIs to provide features within our Services, including integration with Google Ads and Google Search Console. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4.1 Data Accessed

When you connect a Google account to our Services, we may access the following types of Google user data, strictly limited to what you explicitly authorize:

• Google Ads: Campaign performance data, keyword metrics, cost and conversion data, and account structure — accessed read-only to surface optimization insights within Talon and Perch.
• Google Search Console: Organic search performance data, keyword rankings, impressions, and click-through rates — accessed read-only to provide paid vs. organic overlap analysis within Perch.
• Google Analytics (GA4): Aggregated website traffic metrics, goal completions, and conversion events — accessed read-only to provide revenue attribution and assisted conversion reporting.

4.2 How We Use Google User Data

Google user data is used exclusively to:

• Display your connected account metrics within our dashboard products (Talon, Perch)
• Generate optimization alerts and recommendations based on your own data
• Power cross-channel comparisons between paid search spend and organic performance

We do not use Google user data to:

• Serve advertising or build advertising profiles
• Train machine learning or AI models
• Share data with third parties for any purpose unrelated to your direct use of our Services
• Transfer data to other apps or services without explicit user consent

4.3 Data Sharing

We do not share Google user data with any third parties except as strictly necessary to operate the Services (e.g., our secure cloud hosting infrastructure). All such sub-processors are contractually bound to equivalent data protection standards and are prohibited from using the data for any other purpose.

4.4 Data Storage and Protection

Google user data accessed through our integrations is:

• Transmitted exclusively over encrypted connections (HTTPS/TLS)
• Stored in secured, access-controlled databases with role-based permissions
• Never written to logs or exported in identifiable form outside of your account context

4.5 Data Retention and Deletion

Google user data is retained only as long as your account remains active and the integration is connected. When you disconnect a Google integration or terminate your account:

• Your Google OAuth tokens are immediately revoked and deleted
• Associated cached metrics are deleted within 30 days
• You may request immediate deletion of all your data by emailing admin@thayersystems.com

5. Data Sharing and Third-Party Access

We share limited information only as necessary to provide and maintain functionality:

• Service Providers: Payment processors, analytics vendors, or hosting partners that support the Services.
• Third-Party Integrations: When you connect external platforms (e.g., Google Ads, Meta Ads), you grant Thayer Systems permission to access your data on a read-only basis for analysis.
• Legal Requirements: We may disclose data when required to comply with applicable laws or lawful requests.

All partners and third-party vendors are required to comply with privacy and data security standards consistent with this Policy.

6. Data Retention

We retain collected information only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law.

When your account is terminated, we retain anonymized usage data for analytics and delete personally identifiable data within 90 days unless legal or operational requirements dictate otherwise.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect data from unauthorized access, loss, or misuse. This includes:

• Encrypted data transmission (HTTPS and TLS)
• Secure credential storage and role-based access controls
• Routine data integrity and access audits

Despite these measures, no system is completely secure. You acknowledge and accept this risk by using the Services.

8. Data Privacy and HIPAA Disclaimer

Thayer Systems is not a HIPAA-compliant platform and should not be used to collect, process, or store protected health information ("PHI").

Users are responsible for ensuring that their connected data sources and uploaded materials comply with applicable data protection and privacy regulations.

9. International Users

Thayer Systems is based in the United States. By using our Services, you consent to the transfer and processing of your data within the U.S. and other countries where we or our service providers operate.

We comply with applicable U.S. and international data protection laws, including GDPR principles for transparency, purpose limitation, and data minimization.

10. Children's Privacy

Our Services are intended for business users aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected data from a minor, we will delete it promptly.

11. Your Data Rights

Depending on your jurisdiction, you may have rights to:

• Access and review the data we hold about you
• Request correction or deletion of your data
• Withdraw consent for certain processing activities

To exercise these rights, contact admin@thayersystems.com. We will respond to verified requests within applicable legal timeframes.

12. Third-Party Links

Our Services may contain links to external websites or services. Thayer Systems is not responsible for the privacy practices, content, or data collection policies of those third parties. We encourage you to review their respective privacy statements.

13. Updates to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top indicates the most recent revision. Material changes will be communicated via email or posted notice within the Services.

Continued use of the Services after updates take effect constitutes your acceptance of the revised Policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact: