Privacy Policy

System Path LLC ("SystemPath," "we," "us," or "our") operates the website at systempath.com and the Beacon food safety management platform (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, use the Beacon platform, or engage our consulting and training services.

By using our Services, you acknowledge that you have read and understand this Privacy Policy.

1. Information We Collect

Information You Provide to Us

• Account Information: Name, email address, phone number, company name, job title, and facility information when you create an account or submit a form.
• Contact and Inquiry Information: Information you provide when you fill out contact forms, request demos, schedule discovery calls, or subscribe to our newsletter.
• Payment Information: Billing details processed through our third-party payment processor, Stripe. We do not store your full credit card number on our servers.
• Food Safety Data: HACCP plans, compliance records, inspection reports, lot traceability data, documents, and other food safety information you enter into the Beacon platform.
• Communications: Records of correspondence when you contact us for support or other inquiries.

Information Collected Automatically

• Device and Technical Data: Browser type and version, operating system, device type, screen resolution, IP address, and unique device identifiers.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, and other interactions with our website and platform.
• Cookies and Similar Technologies: We use first-party and third-party cookies, pixels, and similar technologies to collect information about your browsing activity. See Section 3 for details.
• Location Data: We use a locally hosted geolocation database (MaxMind GeoLite2) to resolve your IP address to an approximate country and city. Your IP address is not transmitted to MaxMind for this purpose.
• Visitor Tracking: We use our own first-party tracking system to record your visits to our marketing website, including pages viewed, referring URLs, UTM campaign parameters, and the date and time of your visit. This data is associated with a first-party cookie identifier and is stored in our database to help us understand how visitors find and use our website.
• AI-Processed Data: If you use AI-powered features within the Beacon platform, the content you provide (such as documents, queries, or food safety data) may be processed by third-party AI service providers to generate responses and suggestions.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate, maintain, and improve the Beacon platform and our Services
• Process and respond to your inquiries, demo requests, and support tickets
• Process payments and manage subscriptions
• Send transactional communications such as account confirmations, service updates, and compliance alerts
• Send marketing communications about our services, with the ability to opt out at any time
• Analyze website usage patterns and measure the effectiveness of our content and advertising
• Serve targeted advertisements and measure ad performance through remarketing
• Detect, prevent, and address technical issues, fraud, and security threats
• Comply with legal obligations and enforce our terms
• Provide AI-assisted features such as document drafting, compliance analysis, and intelligent search within the Beacon platform
• Analyze user interactions through session recordings and heatmaps to identify usability issues and improve website design
• Determine your approximate geographic location for analytics and to customize your experience

3. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience, analyze usage, and support our advertising efforts.

Google Analytics 4

We use Google Analytics 4 ("GA4"), a web analytics service provided by Google LLC ("Google"), to understand how visitors interact with our website. GA4 collects information such as pages visited, session duration, approximate geographic location (derived from IP address), and device and browser details. Google Analytics uses first-party cookies to distinguish unique users and throttle request rates. IP addresses are anonymized by default in GA4.

Google Signals

We have enabled Google Signals within our Google Analytics property. Google Signals allows Google to associate your visit data with information from your Google account (if you are signed in to Google and have enabled Ads Personalization). This enables cross-device reporting and remarketing audience building. The data collected through Google Signals is aggregated and cannot be used by us to identify individual users.

Advertising and Remarketing

We use Google Ads remarketing to display advertisements to users who have previously visited our website as they browse other websites in the Google Display Network or use Google Search. This involves the use of cookies and tracking pixels placed by Google to recognize your browser and serve ads based on your prior visit to our website.

Through these advertising features, certain information about your website visits may be shared with Google for the purpose of delivering and measuring the effectiveness of our advertisements. This may include pages visited, actions taken on our site, and device identifiers. Google may combine this data with information collected from other websites and services.

Enhanced Conversions: When you submit a form on our website, certain first-party data you provide (such as your email address, phone number, and name) may be hashed and sent to Google to improve the measurement of our advertising campaigns. This data is hashed before transmission and is used solely for conversion matching purposes.

Meta Pixel (Facebook)

We use Meta Pixel, a tracking tool provided by Meta Platforms, Inc. ("Meta"), to measure the effectiveness of our advertising on Facebook and Instagram, build retargeting audiences, and understand how visitors interact with our website after viewing our ads. Meta Pixel collects information such as pages visited, actions taken, and device information. This data may be used by Meta to deliver targeted advertisements across Meta's platforms.

Conversions API: In addition to the browser-based Meta Pixel, we use Meta's Conversions API to send conversion event data directly from our servers to Meta. This server-side integration may transmit hashed versions of your email address, phone number, name, IP address, and browser information to Meta for ad measurement and optimization. Because this data is sent server-side, it operates independently of your browser's cookie settings or ad-blocking tools.

LinkedIn Insight Tag

We use the LinkedIn Insight Tag, provided by LinkedIn Corporation (a Microsoft company), to measure the effectiveness of our advertising on LinkedIn, build retargeting audiences, and gain insights into website visitor demographics such as job title, company, and industry. The Insight Tag collects information about your visit, including pages viewed and actions taken. This data may be used by LinkedIn to deliver targeted advertisements on its platform.

Managing Your Preferences

You can control or limit how cookies and tracking technologies are used:

• Google Ads Settings: Opt out of personalized advertising by visiting Google Ads Settings.
• Google Analytics Opt-Out: Install the Google Analytics Opt-Out Browser Add-On to prevent Google Analytics from collecting data about your visits.
• Network Advertising Initiative: Opt out of interest-based advertising from participating members at NAI Opt-Out.
• Digital Advertising Alliance: Manage your advertising preferences at DAA Opt-Out.
• Meta (Facebook) Ads: Manage your ad preferences in your Facebook Ad Settings.
• LinkedIn Ads: Manage your ad preferences in your LinkedIn Ad Settings.
• Browser Settings: Most web browsers allow you to manage cookies through their settings. You can set your browser to block or delete cookies, though some features of our website may not function properly as a result.

4. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to the websites you visit. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to or alter its practices when it receives a DNT signal. If a uniform standard for responding to DNT signals is adopted, we will update this policy accordingly.

5. Third-Party Services

We use trusted third-party service providers to operate and improve our Services. These providers have access to your information only to the extent necessary to perform their functions and are obligated to protect it. Our key service providers include:

• Google LLC: Analytics (Google Analytics 4), advertising (Google Ads), and cross-device insights (Google Signals).
• Stripe, Inc.: Payment processing for Beacon platform subscriptions. Stripe's handling of payment data is governed by their Privacy Policy.
• Amazon Web Services (AWS): Cloud infrastructure, data storage, and transactional email delivery (Amazon SES) for the Beacon platform. AWS's handling of data is governed by their Privacy Notice.
• Cal.com: Scheduling for demos and consultations.
• Meta Platforms, Inc.: Advertising measurement and retargeting (Meta Pixel). Meta's handling of data is governed by their Privacy Policy.
• LinkedIn Corporation (Microsoft): Advertising measurement, retargeting, and visitor demographics (LinkedIn Insight Tag). LinkedIn's handling of data is governed by their Privacy Policy.
• MaxMind, Inc.: Geolocation services using a locally hosted GeoLite2 database to determine approximate visitor location from IP addresses. The database file is periodically downloaded from MaxMind; your IP address is not sent to MaxMind's servers in real time. MaxMind's privacy policy is available at maxmind.com/privacy-policy.
• AI service providers, including Anthropic PBC, OpenAI, Inc., Google LLC, and Voyage AI: AI services powering intelligent features within the Beacon platform, including document analysis, compliance assistance, and semantic search. Content you submit to AI-powered features may be processed by these providers. Your data is not used to train their models. Privacy policies for the two primary providers are available at anthropic.com/privacy and openai.com/privacy; each provider publishes its own policy on its website.
• Cloudflare, Inc.: Security services, bot protection, content delivery, and CAPTCHA verification (Cloudflare Turnstile). When you submit a form, Cloudflare may collect your IP address and browser information to verify you are not a bot. Cloudflare's handling of data is governed by their Privacy Policy.

We do not sell your personal information in exchange for monetary consideration. Some of our advertising practices may be considered "sharing" under certain state privacy laws, as described in Section 8. Your food safety data within the Beacon platform is never shared with anyone outside of the authorized users within your organization, except as necessary to provide the Services or as required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS) and at rest
• Role-based access controls within the Beacon platform
• Tenant-level data isolation ensuring that each organization's data is logically separated from other organizations
• Regular security assessments and monitoring

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing our Services, complying with legal obligations, resolving disputes, and enforcing our agreements.

• Website Analytics Data: Retained in Google Analytics according to our configured data retention settings.
• Account Information: Retained for the duration of your active account and for a reasonable period thereafter.
• Food Safety Records: Retained within the Beacon platform according to your organization's configured retention policies and applicable regulatory requirements.
• Marketing Communications: Contact information is retained until you unsubscribe or request removal.
• AI Interaction Data: Content submitted to AI-powered features is processed under enterprise data processing terms that prohibit our AI service providers from using it to train their models, and is never used for cross-customer learning.

8. Your Rights

Regardless of where you reside, we are committed to transparency and providing you with reasonable access to your data. You may:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to legal retention requirements
• Opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us
• Opt out of interest-based advertising using the mechanisms described in Section 3

To exercise any of these rights, contact us at [email protected]. We will respond to your request within a reasonable timeframe.

Additional Rights for U.S. Residents

Depending on your state of residence, you may have additional rights under applicable state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and similar laws in other states. These rights may include:

• The right to know what categories of personal information we collect, the purposes for collection, and the categories of third parties with whom we share it
• The right to request deletion of your personal information
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising
• The right not to be discriminated against for exercising your privacy rights

Sale and Sharing of Personal Information: We do not sell your personal information in exchange for monetary consideration. However, some of our advertising practices, such as sharing data with advertising partners like Google and Meta for targeted advertising purposes, may be considered "sharing" or "selling" under certain state privacy laws. You may opt out of this sharing by using the advertising opt-out mechanisms described in Section 3 above, or by contacting us at [email protected].

To exercise any of these rights, contact us at [email protected]. We will verify your identity before processing your request and respond within the timeframe required by applicable law (typically 45 days for CCPA requests).

9. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to promptly delete that information. If you believe a child has provided us with personal information, please contact us at [email protected].

10. Third-Party Links

Our website may contain links to third-party websites and services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Effective date" at the top of this page. For Beacon platform users, we will provide notice of material changes through the platform. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Phone: (313) 484-4887
• Address: System Path LLC, 7722 Market St, Suite B, Canton, MI 48187