Privacy Policy

1. Scope of Policy

This Privacy Policy applies to:

• visitors to www.imonitorit.com (the "Site");
• customers using the iMonitorIT services (the "Services").

This Policy does not apply to third-party systems monitored by the Services.

2. Information We Collect

We may collect and process the following categories of information:

Business Information

• Name, company name, email address, phone number
• Account registration and billing details

Service Configuration Data

• Monitoring configurations
• Test credentials provided by Customer
• Monitor identifiers and configuration metadata

Operational Data

• Call validation results
• Alerting and reporting data
• Temporary call recordings generated during monitoring

Technical Data

• IP address
• Browser/device information
• Usage logs and analytics

3. No Consumer Financial Data Processing

The Services are designed to validate system availability and workflow logic using Customer-supplied test credentials.

Provider:

• does not access, authenticate, process, or store live consumer financial data;
• does not interact directly with Customer core banking systems;
• does not process Nonpublic Personal Information (NPI) in the ordinary course of providing the Services.

Any test data used in connection with the Services is controlled and provided by Customer.

4. How We Use Information

We use collected information to:

• provide and operate the Services;
• generate alerts, reports, and monitoring results;
• communicate with customers regarding service status and support;
• improve system performance and reliability;
• maintain security and prevent fraud or misuse.

5. Data Retention

• Call recordings are retained for approximately 48 hours and then automatically deleted.
• Monitoring logs and business records are retained in accordance with Provider's internal data retention policies.

6. Data Security

Provider maintains administrative, technical, and physical safeguards appropriate to the nature of the Services.

• Credentials are stored in encrypted form.
• Multi-factor authentication (MFA) secrets are not stored.
• Access to systems is restricted to authorized personnel.

7. Third-Party Service Providers

Provider uses third-party vendors to support delivery of the Services, including:

• cloud hosting providers
• telecommunications carriers
• analytics and monitoring tools
• payment processors (e.g., Stripe)

These providers are contractually obligated to maintain appropriate confidentiality and security protections.

8. Cookies and Analytics

The Site may use cookies and similar technologies to:

• improve user experience;
• analyze Site usage;
• support functionality.

Users may manage cookie preferences through their browser settings.

9. Customer Responsibilities

Customers are responsible for:

• ensuring that any data provided for monitoring is appropriate for testing purposes;
• not submitting real consumer financial data unless explicitly agreed in writing.

10. Your Rights

You may request access to or correction of your business contact information by contacting:

11. Changes to this Policy

Provider may update this Privacy Policy from time to time. Updates will be posted with a revised effective date.

Continued use of the Site or Services constitutes acceptance of the updated Policy.

12. Governing Agreement

For additional information regarding service terms and data handling obligations, please refer to the Master Subscription & Services Agreement (Version 19), available at https://www.imonitorit.com/legal/msa, including Exhibit B — Information Security & GLBA Addendum.