A layered notice written for global SaaS buyers and real data governance conversations.

1. Scope and who “Prime RP” means

In this notice, “Prime RP”, “we”, “us”, and “our” refer to the service operators and relevant contracting entity identified in your order form, contract, or onboarding materials. This notice covers:

• visitors to the public website at primerp.ai;
• people who contact us for sales, demos, support, feedback, security, or privacy inquiries;
• authorized users of Prime RP products and related web or mobile experiences; and
• business contact information we process in connection with enterprise sales, implementation, and account management.

If you use Prime RP through an employer, client, or other organization, that organization may also control certain processing of your information. In those cases, your employer or contracting organization may have its own privacy obligations.

2. Data we collect

Depending on how you interact with Prime RP, we may collect the following categories of information:

• identity and account data, such as name, email address, company, role, username, profile photo, or login identifier;
• contact and communications data, such as message content, inquiry details, support requests, feedback, and meeting requests;
• service usage data, such as device, browser, log, crash, session, page, and interaction information;
• operational content submitted into the service, such as task details, approval comments, uploaded files, HR records, or workflow data;
• technical identifiers, such as IP address, cookie or local storage identifiers, notification tokens, and security event logs;
• commercial data, such as billing contacts, contract details, and implementation scoping information; and
• in limited cases, sensitive or regulated information where required by your use case, contract, or documented workflow, subject to appropriate controls.

3. Where data comes from

We collect information:

• directly from you when you contact us, request a demo, create an account, or submit content through the service;
• from your organization, administrators, or implementation team when they provision accounts or configure workflows;
• automatically from devices and browsers when you use the public site or service; and
• from integrations, publicly available sources, or service providers where relevant to your implementation, support, or requested services.

4. Why we process personal data

We process personal data to:

• provide, secure, operate, and improve the Prime RP website, platform, and related services;
• set up accounts, manage authentication, permissions, and organizational workspaces;
• support approvals, tasks, collaboration, communications, HR workflows, hiring, finance workflows, procurement, and other service features;
• respond to sales, support, feedback, legal, privacy, or security inquiries;
• monitor performance, troubleshoot issues, maintain availability, and prevent fraud, abuse, or unauthorized access;
• comply with legal obligations, enforce contracts, and protect our rights, users, and systems; and
• analyze service usage, rollout feedback, and product quality to improve the service and inform roadmap decisions.

5. Lawful bases where applicable

Where laws such as the GDPR or UK GDPR apply, we rely on one or more of the following bases:

• performance of a contract or pre-contract steps requested by you or your organization;
• our legitimate interests in operating, securing, supporting, and improving the service;
• your consent, where required by law or where we choose to rely on consent;
• compliance with legal obligations; and
• in limited cases, protection of vital interests or public interest where applicable law permits.

6. How we share data

We may share personal data with:

• service providers and infrastructure partners helping us host, secure, support, monitor, or operate the service;
• implementation partners or contractors operating under confidentiality and security obligations;
• your organization, administrators, or authorized users according to account configuration and workflow design;
• advisers, auditors, insurers, or professional service providers where necessary for business operations or compliance;
• authorities, courts, regulators, or law enforcement where required by law or valid legal process; and
• buyers, successors, or counterparties in connection with an actual or proposed transaction, reorganization, or corporate restructuring.

We do not state that we “sell” personal information unless that term applies under specific law. If a law gives you opt-out rights, see the regional notices below.

7. International transfers

Prime RP may process data in more than one country depending on hosting, support operations, or service providers. Where required by applicable law, we use appropriate safeguards for restricted international transfers, such as contractual measures, adequacy mechanisms, or other lawful transfer tools.

8. Data retention

We retain personal data for as long as needed for the purposes described above, for the duration of your account or contract, and for reasonable periods afterwards for security, continuity, audit, support, backup, dispute resolution, and legal compliance. Retention periods vary depending on the type of data, your configuration, and applicable law.

9. Your privacy rights

Depending on your location, you may have rights to request access to, correction of, deletion of, restriction of, portability of, or objection to certain processing of your personal data.

• EEA, UK, and similar regimes: you may have rights to access, rectify, erase, restrict, object, and request portability, and to withdraw consent where processing relies on consent.
• California and certain U.S. state laws: you may have rights to know, access, delete, correct, opt out of certain data uses, appeal, or limit use of certain sensitive data depending on the law and our role.
• Enterprise accounts: we may direct you to your organization if it controls the relevant data or the relevant account relationship.

To exercise rights, contact privacy@primerp.ai.

If you want to request account deletion specifically, use the Account Deletion Request page.

10. Security

We use administrative, technical, and organizational measures designed to protect personal data appropriate to the nature of the information and the risks involved. No system can promise absolute security, but we aim to design with least privilege, auditability, role-based controls, and operational resilience in mind.

11. Regional notices

EEA and UK

If the GDPR or UK GDPR applies, you have the right to lodge a complaint with your local supervisory authority. Where required, we provide information concisely, transparently, intelligibly, and in accessible language.

California and other U.S. states

Residents may have additional rights under state privacy laws, including rights to know, access, delete, correct, appeal, or opt out of certain disclosures or targeted advertising, depending on the law and our practices at the relevant time.

12. Cookies and local storage

The launch site currently uses essential local storage for theme preference and basic interface state. See the Cookie Notice for more details.

13. Children

Prime RP is not directed to children, and we do not knowingly collect personal data from children in a manner prohibited by law. If you believe a child has submitted information improperly, contact us so we can review and act appropriately.

14. Updates and contact

We may update this notice from time to time. Material changes will be reflected by updating the effective date and, where appropriate, giving additional notice. For privacy questions or rights requests, contact privacy@primerp.ai.