Privacy Notice

Effective 2026-10-15 · Version 1.4

Who we are

ChannelPROS, Inc. ("ChannelPROS," "we," "us") is a Washington corporation that provides a B2B channel-partner-management platform. This notice explains how we handle personal data for which we are the controller — for example, our business contacts, prospects, website visitors, and people who contact us directly.

Personal data that customers process through our platform (data about their partners and contacts) is processed by us as a processor on our customers' behalf, and is governed by our agreement and Data Processing Agreement with each customer rather than by this notice.

We also offer ChannelPROS Academy, a subscription training product. Academy subscriber account data — the names and business email addresses of the users on a subscription (up to five per company) and their login and security records — is personal data for which we are the controller, and it is covered by this notice. Academy does not collect partner data or any special-category data.

What data we collect

We hold minimal business-contact personal data: names, business email addresses, and partner-company firmographic information. We do not process special-category data, government identifiers, financial-account data, or consumer/household data.

Why we process it, and our lawful basis

We process this data to identify and manage business and channel relationships and to communicate in a B2B context. Our lawful basis is legitimate interests (GDPR Art. 6(1)(f)) — pursuing ordinary business-relationship management, balanced against the rights of individuals, who are engaged in a professional capacity. Our assessment of this basis is documented internally and available on request. For ChannelPROS Academy subscriber accounts, our basis is performance of our contract with you (Art. 6(1)(b)) — to provide the Academy subscription you signed up for — together with legitimate interests in keeping those accounts secure.

Who we share it with

We share data only with vetted service providers ("sub-processors") who help us run the service — currently our hosting and database provider and our email-delivery provider, each bound by a data processing agreement. Our AI-feature provider receives only company-level information and no personal data, under a ring-fenced design, and our development-tooling provider does not process the personal data our customers hold in the platform; neither is a sub-processor of that data. Our current sub-processor list is available on request. Payments for paid subscriptions are processed by PayPal, which handles payment information as an independent controller under its own terms, not as our sub-processor.

International transfers

Our service providers are located in the United States. Where personal data originating in the EEA or UK is transferred, those transfers are covered by Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable).

How long we keep it

We keep personal data only as long as necessary for the purpose described, in line with our data retention policy. When a business relationship ends, we delete the associated contact data within 30 days. We retain security and audit logs for up to 12 months to protect and maintain the integrity of the service and to defend against legal claims, after which they are deleted. Residual copies in encrypted backups age out within our short recovery window. If you ask us to erase your data, we erase your contact data promptly; limited entries in our security and audit logs may be retained to the end of the 12-month period, as the law permits, and then deleted.

How we protect it

We apply appropriate technical and organizational measures, including encryption in transit and at rest, tenant data isolation, access controls with multi-factor authentication on administrative systems, and audit logging.

Your rights

You have the right to access, correct, delete, restrict, port, or object to the processing of your personal data, and to withdraw consent where consent applies. To exercise any right, email privacy@channelpros.ai. We respond within one month (extendable by up to two months for complex requests, with notice). You also have the right to lodge a complaint with your data-protection supervisory authority.

California residents: you have comparable rights under the CCPA/CPRA, including access and deletion; we do not sell personal information.

EU/UK representative

EU Representative: Melanie Schoebel, Baixada de la Font 10, 17491 Peralada (Gerona), Spain - mschoebel@channelpros.ai.

UK Representative: K1 Channel Consulting International Ltd, 17 Fordham Street, London, E1 1HS, United Kingdom - andy@k1channelconsulting.com (attention: Andrew Ranson, Managing Director).

Changes to this notice

We may update this notice; the effective date above reflects the latest version. Material changes will be communicated through our usual channels.