Data and privacy

Primer's compliance standards (SOC 2 Type II, GDPR, CCPA) and Trust Center, how Primer accesses your data, what the website pixel collects, and where to find the privacy policy.

Privacy policy and terms

• Privacy policy: sayprimer.com/privacy-policy

• Terms of service: sayprimer.com/terms-of-service

Compliance and the Trust Center

Primer is SOC 2 Type II attested and GDPR and CCPA compliant. Current compliance reports, subprocessors, and security details are published in Primer's Trust Center at trust.sayprimer.com — the authoritative source, kept up to date as certifications renew. You can also request a copy of the latest SOC 2 report from [e-mail].

Compliance status and certification dates are managed by Primer's security/legal team, not set in the product, so specifics live in the Trust Center rather than here.

For a signed DPA or MSA, or a specific GDPR / CCPA / data-processing question, contact [e-mail] — these are handled by Primer's security/legal team, not configured in the app.

CRM access is read-only

Primer connects to your CRM read-only — it reads records to build audiences and never writes, edits, or deletes anything in your CRM. See Connecting a CRM. Deleting a connection in Primer disables the sync and removes Primer's access.

What the website pixel collects

The website pixel collects, for visitors to your site:

• Pageviews and form-field submissions

• Device metadata (browser, device type, screen, language)

• A visitor/session identifier stored in the browser

• Attribution data (referrer, UTM parameters, ad click IDs)

The pixel automatically skips bots and non-production hosts (like localhost and staging domains), so those don't pollute your data.