Skip to content
GreeneStep — think new

Trust center

Your data. Your rules.

Choose your cookies, use your privacy rights and see how we protect the data your business runs on.

Cookie preferences

Only strictly necessary cookies are on by default. Everything else waits for your yes, and you can change your mind here at any time.

Strictly necessary

Sign-in, security, load balancing and remembering your cookie choice. The site cannot work without them.

gs_session · session  |  gs_consent · 12 months

Functional

Remember your language, currency and ROI calculator inputs.

Analytics

Count visits and see which pages help, using aggregated data.

Marketing

Measure campaigns and show relevant GreeneStep ads on other sites.

We record your choice, its date and the version of this notice, and ask again after 12 months or when our cookies change. Global Privacy Control signals are treated as a refusal of marketing cookies.

Your privacy rights.

Under the EU GDPR, UK GDPR and similar laws in Canada, Australia, New Zealand, India, Singapore, South Africa and US states, you can ask us to:

  • AccessGet a copy of the data we hold about you.
  • CorrectFix anything inaccurate or incomplete.
  • EraseAsk us to delete your data.
  • RestrictLimit how we use it while a question is settled.
  • PortReceive it in a machine-readable format.
  • ObjectSay no to processing based on our interests, including marketing.
  • Withdraw consentAt any time, as easily as you gave it.
  • Opt out of sale or sharingWhere US state laws apply.

We answer within one month. You can also complain to your data protection authority, such as the ICO (UK) or the Data Protection Commission (Ireland).

Make a request

Privacy contact: info@greenestep.com. We verify identity before acting on a request.

Security, built in.

The controls that protect every GreeneStep company.

Encryption in transit

TLS 1.2 or higher on every connection.

Role-based access

People see only what their role needs.

Single sign-on

OAuth 2.0 and SAML with your identity provider.

Audit logging

Who changed what, and when.

Secure API tokens

Scoped tokens for integrations and portals.

Data isolation

Each company separated from every other.

Automated backups

Regular backups with tested restores.

Monitoring and alerts

Health and threat monitoring with alerts.

PCI-DSS compliant accounting

Integrated GAAP accounting built for audit.

Data residency

Where your data lives.

Version 27 places each company on a region-aware cloud instance (UC1, UC2 or UC3) chosen by region, currency and availability. Hosting is also available in GreeneStep’s private, secure US data center, on-premises, or with a host you choose.

  • Isolation

    Each company’s data is kept separate from every other company.

  • International transfers

    Covered by Standard Contractual Clauses and the UK addendum, subject to legal confirmation.

  • Sub-processors

    Cloud hosting, email delivery and payments. Contact us for the current list.

  • Retention

    Kept while your subscription is active, then exported to you and deleted on a schedule set in your DPA.

Need a security questionnaire or DPA?

Request our security pack

Notice version 27.0. Contact info@greenestep.com with privacy questions.