Privacy Policy

1. Introduction

Blue Spruce Technologies Inc. is a managed IT services and cybersecurity company providing network defense, threat detection, and response services. We understand that you care about your privacy, and we take that seriously. This policy explains how Blue Spruce Technologies collects, uses, and protects your data, and outlines your rights under applicable privacy laws.

2. Privacy Contact

Blue Spruce Technologies Inc. is headquartered in the United States. For questions about this privacy policy or to exercise your privacy rights, please contact:

Privacy Contact
Blue Spruce Technologies Inc.
privacy@bluespruce.ai

3. Information We Collect

Blue Spruce Technologies collects only the information necessary to provide, secure, and support our services. We do not collect or process customer business content such as documents, emails, or intellectual property.

Details regarding the types of data collected are available to authorized customers upon request and are governed by our service agreements.

4. Use of Information

Collected data is used to: deliver and improve services; investigate security threats; and communicate with customers securely. We do not use customer data for marketing, nor do we sell or share it for commercial purposes.

5. Data Protection Measures

We implement layered security controls, including data encryption in transit and at rest, role-based access controls and MFA, continuous monitoring, regular vulnerability scanning, secure software development practices, and security awareness training for all staff.

6. Retention and Deletion

Customer data is retained only as needed for service delivery and compliance. Upon service termination, we continue to honor our data protection obligations. Data is deleted upon verified customer request following our secure destruction process.

7. Website Tracking and Cookies

We use a cookie-less tracking system that does not rely on browser cookies or device fingerprinting. This tool collects only technical and contextual data such as pages visited, visit timestamps and duration, referring domains, and IP addresses (used to infer the visiting organization). This data is used exclusively to improve website performance and understand organizational interest in our services. We do not use it for advertising or behavioral profiling of individuals.

8. Third Parties and Subprocessors

We store data with secure cloud providers and subprocessors necessary to operate our services. A list of subprocessors is available on request. We do not authorize these third parties to use customer data for any other purpose.

9. Transfers to the U.S.

Blue Spruce Technologies processes all service-related data in the United States. Where required by applicable law or contract, we support international data transfers using industry-standard safeguards.

We operate under strict security and confidentiality obligations and ensure that data entrusted to us is protected regardless of its geographic origin.

10. Privacy Requests

Blue Spruce Technologies does not collect personal data as part of its core services. Our systems process only network metadata necessary to deliver and support cybersecurity and managed IT operations for our customers. We do not collect, store, or associate data with individuals outside of customer-authorized business contacts.

If you are a customer or authorized representative with a privacy-related question, you may contact us at privacy@bluespruce.ai. We will review all inquiries and respond as required by applicable law or contract.

11. Children's Data

Blue Spruce Technologies does not market services to children or knowingly collect personal information directly from individuals under the age of 16. However, as part of delivering network defense and monitoring services to K–12 educational institutions, we may process limited technical metadata related to student devices or accounts.

This metadata may include IP addresses, device identifiers, or other non-content diagnostic information necessary for security and service performance. Blue Spruce Technologies does not access, collect, or process the contents of student communications, documents, or personal files.

12. Questions or Complaints

For privacy concerns, please contact:

Blue Spruce Technologies Inc.
privacy@bluespruce.ai
bluesprucetechnologies.com/privacy-policy