Privacy Policy

Effective date: August 6, 2026

1. Introduction

Ascend Planning Solutions, LLC ("we", "our", or "us") operates the website at https://ascendplanningsolutions.com. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our services. Ascend Planning Solutions offers EPM tool implementation services and FP&A process consulting.

2. Scope of This Policy

This Privacy Policy applies to all personal information collected through https://ascendplanningsolutions.com and any related applications, services, APIs, or communications provided by Ascend Planning Solutions, LLC.

It does not apply to third-party websites, products, or services even if they are linked from our platform.

By using our services, you acknowledge that you have read and understood this policy.

3. Information We Collect

We may collect the following categories of information:

Full name
Email address
IP address
Device information
Usage data

4. How We Use Information

We use personal information to:

Provide, maintain, and improve our services
Respond to support requests and communicate about the service
Secure the platform and detect fraud or abuse
Comply with legal obligations
Send marketing and product update communications where permitted by law
Understand usage patterns and improve product performance through analytics

5. Cookies and Tracking

We use cookies and similar technologies to keep users signed in, remember preferences, and improve site performance.

We also use analytics tools to understand feature usage and performance trends.

6. Third-Party Service Providers

We work with trusted service providers to operate the platform.

Current providers may include trusted third-party service providers that support our operations, such as hosting, analytics, and communications.

These providers may process personal information on our behalf subject to contractual and legal safeguards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. It is then securely deleted or anonymised.

8. Your Privacy Rights

Depending on where you are located and the laws that apply, you may have the right to:

Right of Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete information.
Right to Erasure: Request deletion of personal information, subject to legal exceptions.
Right to Data Portability: Receive a machine-readable copy of your data where applicable.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Restriction: Request that we limit how we process your information in certain circumstances.
Right to Withdraw Consent: Withdraw consent at any time where we rely on consent as our legal basis.

How to Exercise Your Rights

You may submit a Data Subject Access Request (DSAR) or any other privacy request by emailing us at info@ascendplanningsolutions.com.

We will acknowledge your request within 5 business days and provide a substantive response within 30 days of receipt, or such shorter period as required by applicable law.

In complex cases, we may extend this by a further 60 days and will notify you accordingly.

9. Legal Basis and Jurisdiction

We process personal information in accordance with applicable privacy laws in the United States, European Union, England and Wales, United Kingdom, Canada, Australia, Singapore, Ireland, Germany, France, Netherlands, Scotland, and Northern Ireland.

The legal basis we rely on for each category of processing activity is described below.

Account Creation and Core Service Delivery

Legal basis: Contract performance

Processing is necessary to perform our agreement with you.

Transaction Records and Regulatory Compliance

Legal basis: Legal obligation

Processing is required to meet applicable legal requirements.

Security Monitoring, Fraud Prevention, and Abuse Detection

Legal basis: Legitimate interests

We have a legitimate interest in keeping the service and our users secure.

Platform Analytics and Product Improvement

Legal basis: Legitimate interests

We have a legitimate interest in understanding how the service is used. Anonymised or aggregated data is used where possible.

Marketing and Promotional Communications

Legal basis: Consent

We only send marketing emails where you have opted in. You may withdraw consent at any time.

Privacy Contact

We have not appointed a formal DPO but have designated a responsible person to oversee privacy compliance. All privacy enquiries should be directed to the contact address in Section 12.

10. Security

We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.

11. International Transfers

If personal information is transferred across borders, we take steps to ensure the information receives an adequate level of protection under applicable law.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise a privacy right, contact us:

Email: info@ascendplanningsolutions.com

Postal address: 5900 Balcones Drive STE 32793 Austin TX 7873

Privacy requests: info@ascendplanningsolutions.com

We aim to respond to all privacy enquiries within 5 business days.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and provide notice where required.

Annex A. Jurisdiction-Specific Privacy Disclosures

The following provisions supplement this Privacy Policy and apply where the relevant law governs your relationship with us.

EU GDPR (Regulation (EU) 2016/679)

We are a data controller under the European Union General Data Protection Regulation. The legal bases for processing are set out in Section 9.

Your rights under Articles 15–22 GDPR include access, rectification, erasure ("right to be forgotten"), restriction, data portability, objection, and rights related to automated decision-making.

You have the right to lodge a complaint with the supervisory authority in your EU member state. A directory is available at edpb.europa.eu.

We have not fixed a specific retention period for each category of Personal Data. Instead, retention is determined by the criteria described in Section 7 (Data Retention)—namely, how long the data remains necessary for the purposes described in this Policy—after which it is securely deleted or anonymised.

International transfers outside the EEA rely on adequacy decisions, Standard Contractual Clauses (SCCs) approved under Commission Implementing Decision (EU) 2021/914, or other safeguards under Article 46 GDPR.

Where SCCs are used, supplementary measures are applied where necessary in line with the EDPB's Schrems II guidance.

UK GDPR & Data Protection Act 2018

The UK General Data Protection Regulation (UK GDPR) applies to processing of personal data of UK residents alongside the Data Protection Act 2018.

Your rights and our obligations broadly mirror the EU GDPR.

You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

International transfers from the UK rely on the UK Addendum to the EU SCCs or the UK International Data Transfer Agreement (IDTA).

Data Protection Complaints Procedure

We maintain a formal complaints procedure for data-protection concerns.

You may submit a complaint to us using the contact details in this Policy. We will acknowledge your complaint within 30 days and aim to provide a substantive response without undue delay.

You are not required to complain to us before contacting the ICO, and you retain the right to lodge a complaint directly with the ICO at any time.

California (CCPA / CPRA)

California residents have the following rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (Cal. Civ. Code §§ 1798.100–1798.199):

Right to Know: What personal information we collect, the sources, the purposes, and the categories of third parties to whom it is disclosed.
Right to Delete: Personal information we have collected, subject to enumerated exceptions in § 1798.105(d).
Right to Correct: Inaccurate personal information.
Right to Opt Out of Sale or Sharing: Personal information for cross-context behavioral advertising. We honor the Global Privacy Control (GPC) signal as a valid opt-out request. As required by Cal. Civ. Code § 7025(c)(6), effective January 1, 2026, when we detect an opt-out preference signal from your browser, we display a visible "Opt-Out Request Honored" confirmation so you can verify your signal was received and applied.
Right to Limit Use of Sensitive Personal Information: Including precise geolocation, government IDs, financial credentials, genetic/biometric data, racial or ethnic origin, religious beliefs, sex life or sexual orientation, and content of mail, email, or text messages not addressed to us.
Right to Non-Discrimination: For exercising privacy rights.
Right to Opt Out of Automated Decision-Making: Where applicable under forthcoming CCPA regulations and Article 11 ADMT rules.

You may submit a verifiable consumer request via info@ascendplanningsolutions.com, or by emailing "Do Not Sell or Share My Personal Information" to info@ascendplanningsolutions.com.

We respond within 45 days, extendable by 45 days with notice.

Authorized agents may act on your behalf with written authorization.

Categories of Personal Information Collected and Disclosed

Categories of personal information collected and disclosed are described in Sections 3–4 above.

Other U.S. State Privacy Laws

Residents of states with comprehensive privacy laws, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa, Tennessee, Indiana, Florida (FDBR), Delaware, New Jersey, New Hampshire, Minnesota, and Maryland, have the right to access, correct, delete, port, and opt out of targeted advertising, sale, and certain profiling.

To exercise these rights, contact info@ascendplanningsolutions.com or visit our privacy request page.

We respond within 45 days as required by law and honor authorized agent requests.

CalOPPA (California Online Privacy Protection Act)

Pursuant to Cal. Bus. & Prof. Code §§ 22575–22579, this Privacy Policy is conspicuously posted on our website.

We notify users of material changes by updating the effective date.

We disclose how we respond to Do Not Track ("DNT") browser signals. At present, no industry-standard interpretation of DNT exists, but we do honor the Global Privacy Control (GPC) signal as an opt-out of sale/sharing under CCPA/CPRA.

Canada (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the ten fair-information principles in Schedule 1:

Accountability
Identifying purposes
Consent
Limiting collection
Limiting use, disclosure, and retention
Accuracy
Safeguards
Openness
Individual access
Challenging compliance

Complaints may be filed with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Australian Privacy Principles

We comply with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs) in Schedule 1.

Australian residents may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

We notify the OAIC and affected individuals of eligible data breaches under the Notifiable Data Breaches scheme (Part IIIC).

Singapore (PDPA)

We comply with the Personal Data Protection Act 2012 (PDPA).

You have the right to request access to and correction of the personal data we hold about you, and to withdraw consent to our collection, use, or disclosure of your personal data.

We appoint a Data Protection Officer responsible for ensuring our compliance and honor "Do Not Call" registry requirements where applicable.

Complaints may be lodged with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

Data Breach Notification

If a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where required by Article 33 GDPR / UK GDPR.

We will notify affected individuals without undue delay where required by applicable breach-notification law, including U.S. state breach laws, Australia's NDB scheme, PIPEDA breach reporting, and LGPD Article 48.

Sub-Processors

We engage the following categories of sub-processors to provide the Service:

Cloud hosting
Transactional email
Payment processing
Customer support
Analytics
Error monitoring
Security services

Each sub-processor is bound by a written contract requiring confidentiality, security, and processing only on our documented instructions, including the GDPR Article 28 / UK GDPR / LGPD Article 39 requirements.

We provide reasonable advance notice of new sub-processors where required by enterprise customer DPAs.