Website Privacy Policy

Updated May 2026

This Website Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or interact with our website.

1. Introduction

Waverock Software, Inc. and its affiliate Waverock Software Holdings, LLC (collectively, “Waverock,” “we,” “us,” or “our”) respect your privacy and are committed to protecting it. This Website Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect personal information when you visit or interact with our website at https://waverocksoftware.com, including any subdomains or pages that link to this Policy (the “Website”).

We operate in and may process personal information from individuals located in multiple jurisdictions, including the United States, Canada, the United Kingdom (“UK”), the European Economic Area (“EEA”), and other countries. This Policy is intended to address our obligations under applicable privacy and data-protection laws, including, where applicable, the EU and UK General Data Protection Regulation (together, “GDPR”), Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”) and substantially similar provincial laws, and U.S. state privacy laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”).

Please read this Policy carefully to understand our practices regarding your personal information. If you do not agree with this Policy, your choice is not to use our Website.

2. Scope and Relationship to Other Documents

This Privacy Policy applies only to personal information that we collect through the Website or that you choose to submit through the Website. The Website is an informational resource about Waverock and our investment and acquisition activities. As explained in our Website Terms and Conditions (available at /terms.html), use of the Website does not constitute an offer or solicitation of securities, does not create an investor, advisory, or other professional relationship between you and Waverock, and should not be relied upon for any investment decision.

Waverock is a privately held holding company, and the Website does not provide or offer any products or services. If your submission of information through the Website leads to discussions relating to a potential transaction—such as a possible sale of a business, assets, or equity interests to Waverock—any exchange of confidential or proprietary information relating to that potential transaction will occur outside the Website and will be governed by a separately negotiated non-disclosure agreement (“NDA”) or other written agreement between the parties. That agreement will supersede this Privacy Policy with respect to the treatment of any such information.

This Privacy Policy therefore does not apply to information exchanged pursuant to an NDA, letter of intent, due-diligence process, data-room access, or other transaction document. In all such cases, the relevant agreement will control. For all matters relating to Website use, including disclaimers regarding investment offers and restrictions on solicitation or distribution, please refer to our Website Terms and Conditions, which are incorporated by reference into this Privacy Policy.

3. Who We Are and How to Contact Us

Waverock Software, Inc. is the organization responsible for the processing of personal information described in this Policy.

If you have any questions about this Policy, our privacy practices, or your rights, you may contact us using the details above. If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so that we can try to resolve your concerns.

4. Personal Information We Collect

We may collect the following categories of personal information from or about you when you visit or interact with the Website.

4.1 Information You Provide Directly

We collect personal information that you provide directly to us, for example when you: (a) submit a contact or inquiry form; (b) request information or marketing communications; (c) register for an event, webinar, or newsletter; (d) apply for employment with us; or (e) otherwise choose to communicate or interact with us through the Website.

The types of information we may collect directly from you include: (a) identifiers such as name, email address, phone number, company name, job title, and similar contact details; (b) content of your communications, including the information you include in forms or messages you send to us; and (c) resume, CV, or other employment-related information if you apply for a position with us.

4.2 Information Collected Automatically

When you visit or use the Website, we and our service providers may automatically collect certain technical and usage information, such as: (a) IP address; (b) browser type and version; (c) device identifiers; (d) operating system; (e) referring URL and exit pages; (f) pages viewed, links clicked, and other Website activity; (g) dates and times of visits; and (h) approximate location based on IP address.

We may collect this information using analytics tools or similar technologies that operate independently of cookies. For information about cookies and similar tracking technologies used on the Website, please see the Cookies section below.

4.3 Information from Third Parties

We may receive personal information about you from third parties in connection with your use of the Website, such as: (a) analytics providers; (b) marketing or advertising partners; (c) event partners (for example, if you register for a joint event); and (d) publicly available sources (e.g., professional profiles or business websites). We combine this information with other information we collect where permitted by law.

5. How We Use Your Personal Information

We use personal information for the purposes described in this Policy, including to: (a) operate, maintain, and improve the Website; (b) respond to your inquiries, requests, or questions; (c) send you information about Waverock, our portfolio, events, and thought leadership, where permitted by law and according to your preferences; (d) understand how visitors use the Website and to analyze trends and usage to help us improve the Website and our communications; (e) detect, prevent, and respond to security incidents, fraud, or other malicious, deceptive, or illegal activity; (f) protect the rights, property, and safety of Waverock, our users, or others; and (g) comply with legal and regulatory obligations and to establish, exercise, or defend legal claims. We also use personal information for other purposes disclosed to you at the time we collect your information or with your consent where required by law.

6. Legal Bases for Processing (EEA/UK Users)

If you are in the EEA, UK, or Switzerland, our legal bases for processing your personal data under GDPR or UK GDPR may include: (a) where processing is necessary to respond to your requests or otherwise perform a contract with you; (b) where we have a legitimate interest in processing your personal data (for example, to operate and improve the Website, to communicate with you about our activities, and to ensure the security of our systems) and those interests are not overridden by your fundamental rights and freedoms; (c) where you have provided your consent for specific processing, such as certain marketing communications; and (d) where processing is required to comply with applicable laws or regulations.

You may withdraw your consent at any time where our processing is based on your consent, without affecting the lawfulness of processing based on consent before its withdrawal.

7. How We Disclose or Share Personal Information

We do not sell your personal information. We may disclose personal information: (a) to companies that provide services to us, such as hosting, data storage, analytics, email delivery, customer relationship management, security, and other support services (these service providers are authorized to use your personal information only as necessary to provide services to us); (b) to entities that are under common ownership or control with Waverock, including Waverock Software Holdings, LLC and our portfolio companies, who may use your information in a manner consistent with this Policy; (c) to auditors, legal counsel, or other professional advisers who require the information to provide services to us; (d) in connection with joint marketing activities, events, or webinars that you choose to attend or receive information about; (e) to government authorities, law enforcement, courts, or others when we believe disclosure is required by applicable law, regulation, legal process, or to protect the rights, property, or safety of Waverock, our users, or others; and (f) in connection with any actual or contemplated merger, acquisition, financing, asset sale, insolvency, restructuring, or similar corporate transaction, your personal information may be transferred as part of that transaction, subject to any applicable legal requirements.

8. Cookies and Similar Technologies

The Website may use cookies and similar tracking technologies (including session and persistent cookies) to operate the Website, remember your preferences, measure traffic, and improve performance. You may control cookies through your browser settings. Disabling cookies may affect certain features of the Website.

9. reCAPTCHA and Similar Tools

We may use Google reCAPTCHA or similar services to protect our Website from spam and abuse. These services may collect hardware and software information (such as device and application data) and send it to the service provider for analysis. This information is used to protect the Website and is subject to the service provider’s own privacy policy.

10. International Transfers of Personal Information

Waverock is headquartered in the United States, and the Website is operated from the United States. When you visit the Website or provide personal information to us, your information may be transferred to, stored in, or accessed from the United States or other jurisdictions that may not provide the same level of data protection as your home jurisdiction.

When we transfer personal data from the EEA, UK, or Switzerland to a country that has not been deemed to provide an adequate level of protection, we implement appropriate safeguards in accordance with applicable law, such as: (a) Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner’s Office; or (b) other appropriate contractual or legal safeguards.

Where Canadian privacy laws apply, we take steps to ensure that personal information transferred outside Canada is protected by safeguards that are comparable to those that we use in Canada, and we contractually require service providers to protect that information and use it only for authorized purposes.

By using the Website and providing us with personal information, you acknowledge the transfer, storage, and processing of your information in the United States and other countries, subject to the safeguards described in this Policy and applicable law.

11. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, including to: (a) provide the Website and related services; (b) manage our relationship with you; (c) comply with legal, accounting, or reporting obligations; and (d) resolve disputes and enforce our agreements.

When we no longer have a legitimate business need or legal requirement to retain personal information, we will delete, anonymize, or aggregate it, or, if that is not possible (for example, because the information is stored in backup archives), we will securely store the information and isolate it from further processing until deletion is possible.

12. Your Rights and Choices

12.1 EEA, UK, and Swiss Residents

If you are in the EEA, UK, or Switzerland, you may have the following rights under GDPR or UK GDPR, subject to certain conditions and exceptions: (a) the right to request access to your personal data and obtain a copy; (b) the right to request that we correct or complete inaccurate or incomplete data; (c) the right to request that we delete your personal data in certain circumstances; (d) the right to request that we restrict the processing of your personal data; (e) the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible; (f) the right to object to certain processing, including processing based on our legitimate interests or for direct marketing; and (g) where processing is based on consent, the right to withdraw your consent at any time.

To exercise any of these rights, please contact us at info@waverocksoftware.com. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

You also have the right to lodge a complaint with a supervisory authority, particularly in the EU or UK member state where you live or work, or where you consider that your rights have been infringed.

12.2 Canadian Residents

If you are in Canada, you may have rights under PIPEDA or substantially similar provincial laws, including: (a) the right to request access to personal information we hold about you; (b) the right to request correction of inaccurate or incomplete personal information; and (c) the right to withdraw your consent to our processing of your personal information, subject to legal or contractual restrictions and reasonable notice.

To exercise these rights, please contact us at info@waverocksoftware.com. We may request information necessary to verify your identity and to locate your personal information.

12.3 U.S. State Privacy Rights (Including California)

Certain U.S. states provide residents with specific privacy rights. If you are a California resident, you may have rights under the CCPA/CPRA, including: (a) to request that we disclose the categories and specific pieces of personal information we collect, the categories of sources, the purposes for collecting, and the categories of third parties with whom we share personal information; (b) to request that we delete personal information we have collected from you, subject to certain exceptions; (c) to request that we correct inaccurate personal information; (d) to be free from discrimination for exercising your rights; and (e) if we sell or “share” personal information (as these terms are defined under CCPA/CPRA), the right to opt out of such sale or sharing.

At this time, we do not sell or share personal information for cross-context behavioral advertising as those terms are defined under CCPA/CPRA. If that changes, we will update this Policy and provide appropriate opt-out mechanisms.

To exercise your rights under U.S. state privacy laws, please contact us at info@waverocksoftware.com. We may need to verify your identity before responding to your request.

12.4 Marketing Communications

You can opt out of marketing communications from us at any time by following the unsubscribe instructions in the communication or by contacting us at info@waverocksoftware.com. Even if you opt out of marketing communications, we may still send you non-promotional messages related to your interactions with us, such as responses to your inquiries.

13. Children’s Privacy

The Website is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take reasonable steps to delete that information. If you believe that we may have collected information from a child under 16, please contact us at info@waverocksoftware.com.

14. Security

We use reasonable technical and organizational measures designed to protect personal information from accidental or unlawful destruction, loss, alteration, unauthorized access, disclosure, or misuse. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we may also provide additional notice (such as by posting a prominent notice on the Website or by sending you an email, where appropriate).

Your continued use of the Website after we post any changes to this Policy means that you accept the updated Policy.

16. Contact Us

If you have questions or concerns about this Policy or our privacy practices, or if you wish to exercise any of your rights, you may contact us at: