The short version
- We collect your work identity details, how you use the Application, and technical information about your device and connection.
- We use this information to run and secure the Application, support you, and meet legal and audit requirements.
- Your use of the Application is logged and may be reviewed for security and compliance.
- We don’t sell your information or use it for advertising.
- You can ask to access or correct your information by contacting Billing@bluesageusa.com.
Scope and who we are
This Privacy Statement explains how Blue Sage Solutions (“Company,” “we,” “us”) collects, uses, shares, and protects personal information when Authorized Users use Blue Sage Billing (the “Application”). Authorized Users include employees, contractors, consultants, and others the Company has given access.
For the purposes of data protection law, Blue Sage Solutions, 270 Sylvan Avenue, Englewood Cliffs, NJ 07632 is responsible for your personal information processed through the Application.
This statement supplements the Blue Sage Privacy Policy, which describes how the Company handles your personal information more broadly. It should be read together with the End User License Agreement for the Application.
Information we collect
The table summarizes the categories of personal information the Application processes. Some information comes directly from you, some is generated automatically as you use the Application, and some comes from other Company systems.
| Category | Examples | Source |
|---|---|---|
| Identity and account | Name, employee or contractor ID, work email, username, job title, department, manager, role and permissions | Company directory and identity provider (Delphi) |
| Authentication | Sign-in times, single sign-on tokens, multi-factor authentication events, failed sign-in attempts | Identity provider and the Application |
| Usage and activity | Pages and features used, records viewed, created, changed, exported, or deleted, search queries, timestamps | Generated automatically by the Application |
| Device and technical | IP address, browser type and version, operating system, device identifiers, network location, error logs | Generated automatically by your browser and Company network |
| Content you provide | Information you enter, upload, or attach, including comments, files, form responses, and support requests | You |
| Client Name Contacts | Client Names and Address | Blue Sage Dashboard |
The Application is not designed to collect sensitive personal information, such as health information, government ID numbers, or biometric data, unless stated in the row above. Do not enter this type of information unless your role and Company Policies require it.
How we use your information
We use personal information processed through the Application to:
- provide the Application, authenticate you, and grant access based on your role;
- operate, maintain, troubleshoot, and improve the Application;
- respond to support requests and communicate with you about the Application, including updates, outages, and changes to terms;
- protect the security and integrity of the Application, Company systems, and Company Data;
- detect, investigate, and respond to security incidents, misuse, and violations of Company Policies;
- keep audit trails and meet legal, regulatory, and contractual obligations; and
- produce aggregated or de-identified reports about how the Application is used.
We don’t sell personal information, share it for cross-context behavioral advertising, or use it to make decisions about you based solely on automated processing that have legal or similarly significant effects.
Monitoring and logging
The Application is a Company system. To the extent permitted by applicable law, we log and may review activity in the Application, including sign-ins, the records you access, and actions you take. Logs are reviewed by authorized personnel in the Billing team for security, auditing, troubleshooting, and investigations.
International transfers
The Application is hosted on Amazon Web Services (AWS) regional infrastructure. If your information is transferred to another country, we protect the transfer with appropriate safeguards, such as standard contractual clauses or intra-group data transfer agreements. You can ask for more information using the contact details below.
How long we keep it
We keep personal information only as long as needed for the purposes described in this statement, or longer if the law requires it.
| Information | Retention period |
|---|---|
| Account and profile | While you have access, plus 1 year after access ends |
| Audit and security logs | 1 year, or longer if needed for an investigation or legal hold |
| Technical and error logs | 90 days |
| Content you provide | For as long as needed for billing, accounting, tax, and audit purposes |
| Support requests | 1 year after the request is closed |
When the retention period ends, we delete or anonymize the information securely.
How we protect it
We use technical and organizational measures designed to protect personal information, including single sign-on and multi-factor authentication, role-based access controls, encryption in transit and at rest, activity logging, regular security testing, and staff training. No system is completely secure, so please report any suspected security issue right away to Billing@bluesageusa.com.
Your privacy rights
Depending on where you are located, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct information that is inaccurate or incomplete;
- ask us to delete information, where we no longer have a reason to keep it;
- object to or ask us to restrict certain processing;
- receive your information in a portable format; and
- lodge a complaint with your local data protection authority.
Some of these rights are limited where we need to keep information for legal, security, or audit purposes. To make a request, contact Billing@bluesageusa.com. We may need to verify your identity before responding. We won’t retaliate against you for exercising your rights.
You can usually correct your name, title, and department in UKG, and those changes will update the Application automatically.
Personal data about others
If you enter personal information about colleagues, customers, or other people into the Application, you are responsible for doing so only as your role requires, keeping it accurate, and following the Blue Sage Data Protection Policy. Don’t enter more personal information than the task needs.
Changes to this statement
We may update this Privacy Statement to reflect changes to the Application, our practices, or the law. When we do, we’ll update the version number and effective date at the top of this page. If the changes are significant, we’ll let you know through the Application or by email before they take effect.
Contact us
If you have questions about this Privacy Statement or how your information is handled in the Application, contact:
Carmine Cacciavillani
Email: Billing@bluesageusa.com
Data Protection Officer: SOctaviano@bluesageusa.com
Address: 270 Sylvan Avenue, Englewood Cliffs, NJ 07632
For technical help with the Application itself, contact info@bluesageusa.com.