Privacy Policy

This Privacy Policy explains how AventasD ("AventasD," "we," "us") collects, uses, discloses, and protects information when you visit sltax360.com or use the SlTax360 web-based software platform and related services (the "Services").

SlTax360 is an enterprise SaaS platform used by insurance professionals to support surplus lines tax workflows (for example: transaction preparation, filing support, reporting, reconciliation, integrations, and related compliance operations). This policy is written for business users and their organizations.

Important: If you use SlTax360 on behalf of an organization, your organization may be the "controller" (or business) of certain data, and AventasD may act as a "processor" (or service provider). In that case, we process data under the applicable contract (such as a Master Services Agreement and, if applicable, a Data Processing Addendum).

1) Scope

This Policy applies to information processed through:

• sltax360.com (website)
• the SlTax360 application and APIs
• support channels (email, chat, tickets)
• demos, events, and other business interactions

It does not cover third-party websites or services you access via links or integrations.

2) Information We Collect

A. Information you provide

• Account data: name, business email, title, company, role/permissions, authentication details.
• Billing and commercial data: billing contact info, invoices, subscription plan details, payment status (we generally use third-party payment processors; we do not want or need your full card number stored in our systems).
• Support and communications: messages, attachments, meeting notes, and feedback.

B. Information processed in the platform (Customer Data)

Depending on how your organization uses the Services, SlTax360 may process:

• Insurance transaction data relevant to surplus lines compliance (policy/transaction references, insured and risk attributes, premium/fee/tax fields, filing metadata, producer/agency information).
• Documents and attachments you upload or route into the platform (including invoices, bordereaux, schedules, and other compliance documents).
• Integration data exchanged with systems you connect at your direction (e.g., policy/admin systems, accounting tools, storage, email ingestion, workflow tools).

Some of this may include personal information (for example, names and contact details of insureds, producers, or operational contacts), depending on what you or your users submit.

C. Automatically collected information

• Device and usage data: IP address, browser type, device identifiers, pages/screens viewed, feature usage, timestamps, and crash/performance logs.
• Cookies and similar technologies: described in Section 9.

3) How We Use Information

AventasD uses information to:

A. Provide and operate the Services

• create and administer accounts and access controls
• process workflows and generate outputs you request
• provide customer support and service communications
• maintain platform availability and reliability

B. Improve the Services

• analyze usage to improve features, usability, and performance
• debug, test, and enhance functionality

C. Security and compliance

• prevent fraud, misuse, and unauthorized access
• monitor for security events
• comply with legal obligations and enforce contracts/policies

D. Business communications

• send administrative messages (service updates, security notices, billing notices)
• send product announcements and marketing communications where permitted by law and subject to your preferences

4) Legal Bases (Where Applicable)

Where laws require a legal basis (e.g., GDPR/UK GDPR), we rely on:

• performance of a contract (to deliver the Services)
• legitimate interests (security, fraud prevention, service improvement, business operations)
• consent (for certain cookies/analytics/marketing where required)
• legal obligations (compliance, accounting, lawful requests)

5) How We Share Information

We do not sell personal information in the traditional sense. We share information only as needed:

A. Service providers (subprocessors)

We use vetted vendors for hosting, monitoring, analytics, email delivery, customer support tooling, and related infrastructure. They may process information only to provide services to AventasD and must meet confidentiality and security obligations.

B. Integrations you enable

If you connect third-party services, we share data with them at your direction. Their privacy practices are governed by their own policies.

C. Business transfers

If AventasD is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be disclosed as part of that transaction (subject to confidentiality and applicable law).

D. Legal, safety, and enforcement

We may disclose information if we reasonably believe it's necessary to comply with law or protect rights, safety, and security, including investigating fraud or security incidents.

E. Aggregated or de-identified information

We may share aggregated or de-identified data for analytics and business insights where it can't reasonably identify an individual.

6) Data Security

We use administrative, technical, and organizational safeguards designed to protect information, such as:

• role-based access controls
• encryption in transit (and encryption at rest where appropriate)
• monitoring/logging for security events
• secure development and vulnerability management practices

No system is perfectly secure, but we aim for controls aligned with enterprise expectations.

7) Data Retention

We retain information as long as necessary to:

• provide the Services
• meet contractual requirements
• comply with legal/accounting obligations
• resolve disputes and enforce agreements

Retention periods may vary by data type and contract. Certain logs may be retained for security and audit purposes for a limited period.

8) International Transfers

SlTax360 may process data in the United States and other locations where AventasD or its service providers operate. Where required, we apply appropriate safeguards for cross-border transfers.

9) Cookies and Similar Technologies

We use cookies and similar technologies for:

• essential site/session functionality
• authentication and security
• preferences and performance
• analytics and (where applicable) marketing

You can control cookies through your browser settings. Where required, we provide consent controls.

10) Analytics and Session Tools

We may use analytics tools to understand how users interact with the Services and to improve performance and usability. Where required, we honor consent choices and configure tools to reduce identifiability.

11) Email, Phone, and SMS Communications

A. Email

You may receive service-related emails (security, billing, outages). Marketing emails, if any, will include an unsubscribe mechanism.

B. Phone/SMS (if enabled)

If you provide a phone number and opt in, we may send messages for service, billing, security, and (where permitted) marketing. Message/data rates may apply. You can opt out by replying STOP.

12) Your Privacy Rights

Depending on your location, you may have rights such as:

• access, correction, deletion
• restriction/objection to certain processing
• data portability
• withdrawal of consent (where applicable)

To submit a request, contact us using Section 15. If we process data as a processor for your organization, we may direct you to your organization to submit requests.

13) Children's Privacy

The Services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children under 16.

14) Third-Party Links

We may link to third-party sites/services. AventasD is not responsible for their privacy practices.

15) Contact Us

For privacy questions or requests, contact:

AventasD
Email: privacy@sltax360.com

16) Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and provide additional notice if required by law.