Privacy Policy
Last updated: July 17, 2026
This Privacy Policy explains how IT Partners Plus LLC, a Delaware limited liability company (“ITPartners+,” “we,” “us,” or “our”) handles personal data in connection with Current, our software-as-a-service platform at current.day (the “Service”). Current is a business-to-business service for managed services providers and their teams; it is not directed to consumers or to children.
Two roles matter throughout this policy. For the data your organization puts into its workspace (“Customer Data”), your organization is the controller and we act as a processor, handling that data only to provide the Service under your instruction. For the data we collect to run our business — account, billing, and marketing information — we act as the controller. This policy covers customers in the United States, Canada, and the EU/UK.
What we collect
Account and contact information
Names, business email addresses, roles, workspace configuration, and authentication details for the people who administer and use a workspace.
Billing information
Subscription plan, seat counts, and billing contacts. Payments are processed by Stripe; we receive transaction and status information but never store full card numbers.
Customer Data in the workspace
The business records you and your integrations bring into Current — companies, contacts, deals, projects, tasks, time entries, tickets, quotes, communications, and files. This can include personal data about your employees, your clients, and their contacts. You determine what enters your workspace.
Usage and technical data
Log data needed to operate and secure the Service — such as IP address, device and browser type, timestamps, and actions taken in the app — used for security, troubleshooting, and reliability.
Marketing and inquiry data
Information you submit when you request a demo, contact support, or otherwise reach out.
How we use it
- to provide, secure, maintain, and support the Service;
- to process subscriptions, seats, trials, and payments, and to manage dunning;
- to power the features you use, including AI features and the integrations you connect;
- to detect, prevent, and investigate fraud, abuse, and security incidents;
- to communicate with you about your account, service changes, and support; and
- to comply with legal obligations and enforce our agreements.
We do not sell personal data, and we do not use Customer Data for advertising.
AI features
Current includes built-in AI features that generate briefs, drafts, summaries, and analyses from data in your workspace. To provide them, relevant workspace data is processed by our AI subprocessor. AI outputs are drafts for you to review before acting on them. We do not use Customer Data to train our own or any third party’s foundation models.
Integrations you connect
When you connect a third-party service, data flows between it and Current under your instruction, and only as needed to provide the feature. Integrations you may enable include:
- ConnectWise PSA — two-way synchronization, including billing records;
- Kaseya Autotask PSA — two-way synchronization, including billing records;
- Microsoft 365 (via Microsoft Graph) — using delegated permissions your Microsoft administrator grants and can revoke, covering Teams messages, SharePoint files, Outlook calendars, and Microsoft To Do tasks; and, where you explicitly enable mailbox capture, email ingestion limited to messages involving your known CRM contacts;
- HubSpot — data import;
- ScalePad Quoter and Lifecycle Manager;
- ConnectWise CPQ — won-quote retrieval and quote-to-project conversion;
- CrewHu — customer-satisfaction feedback;
- Handwrytten — physical direct mail; to fulfill a card, the recipient name and mailing address you provide are shared with Handwrytten;
- NeverBounce — email verification, using your own key; and
- View-only reporting feeds — ConnectWise RMM, Datto RMM, Datto Backup, Datto EDR, Auvik, RocketCyber, Addigy, and Inky.
Each of these services is independently controlled by its provider and governed by that provider’s own privacy terms.
Subprocessors
We use a limited set of vendors to run the Service. They process personal data only on our instructions and under contractual data-protection commitments. Our current categories of subprocessors are:
- Cloud infrastructure and database hosting (Supabase) — hosting the application and its database;
- Payment processing (Stripe) — billing and payments; ITPartners+ never stores full card numbers;
- Transactional email (Resend) — sending account and system emails;
- AI processing (Anthropic) — generating briefs, drafts, and analyses from your workspace data, which you review as drafts;
- Microsoft (Graph API) — where you connect Microsoft 365.
A current list of subprocessors is available on request through the contacts below.
Security
We take security seriously. ITPartners+ maintains a SOC 2 Type II audit attestation of its controls. We enforce per-tenant isolation using database row-level security so tenants cannot access each other’s data, encrypt data in transit, and apply role-based access controls. No method of transmission or storage is perfectly secure, but we work to protect your data using appropriate technical and organizational measures. Our SOC 2 report is available under NDA on request.
Data retention & deletion
We retain Customer Data for as long as your workspace is active. On termination, you may request an export of Customer Data within a 30-day window, after which we delete it on request or in accordance with our retention schedule. We retain account, billing, and log data only as long as needed for the purposes described here or as required by law (for example, financial records). You may also request deletion of specific personal data, subject to legal retention requirements.
Your rights — GDPR / UK
If you are in the EEA or the UK, the EU GDPR and UK GDPR apply. For Customer Data, your organization is the controller and we act as its processor; if you are an individual whose data appears in a customer’s workspace, please direct requests to that organization, and we will assist it as processor. For data where we are the controller (account, billing, and marketing data), we rely on these legal bases: performance of a contract (to provide the Service and process billing), our legitimate interests (to secure, support, and improve the Service, and for business communications), consent (where required, such as certain marketing), and compliance with legal obligations.
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete data (the “right to be forgotten”);
- restrict or object to certain processing;
- data portability; and
- withdraw consent where processing is based on consent.
You may also lodge a complaint with your supervisory authority. A Data Processing Addendum, incorporating the appropriate safeguards, is available on request.
Your rights — US states
Depending on your state of residence (for example, under the CCPA/CPRA and similar state laws), you may have the right to know what personal information we collect and how we use it, to access and delete your personal information, to correct inaccuracies, and to opt out of the “sale” or “sharing” of personal information and of certain targeted advertising. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it to serve targeted ads. We will not discriminate against you for exercising these rights. For personal information within a customer’s workspace, we act as a service provider and will route your request to the relevant customer.
Your rights — Canada
For customers and individuals in Canada, we handle personal information consistently with PIPEDA. We collect and use personal information for the purposes described here, obtain consent where required, and give you the ability to access and correct your personal information and to ask questions about our handling of it. For Customer Data, the relevant customer organization is the responsible organization and we act on its behalf.
Where your data is stored
Customer Data is stored in the United States. Our production database, file storage, and backups are hosted in US regions, and our subprocessors process data in the United States unless stated otherwise. If your organization needs its data hosted in another region, contact us through the Help Center contact form and we will tell you what we can support. Regional hosting is not available by default and is arranged case by case.
International transfers
We are based in the United States and may process data in the United States and other countries where we or our subprocessors operate. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable), to protect that data.
Cookies
We use only essential cookies required for authentication and to keep you signed in during a session. We do not use third-party advertising trackers, and we do not run analytics-tracking pixels for marketing. Our pages load fonts from Google Fonts, which means your browser’s IP address is disclosed to Google when fonts are served. You can control cookies through your browser settings, though disabling essential cookies will prevent you from signing in.
Children
Current is a business service intended for use by adults in a professional capacity. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.
Changes
We may update this Privacy Policy from time to time. When we do, we will post the updated version with a new “Last updated” date, and for material changes we will provide notice by email or in-product notice. Your continued use of the Service after an update takes effect constitutes acceptance of the updated policy.
Contact
To reach us about this policy or to exercise your rights, use the Help Center contact form at current.day/help/contact. For privacy-specific requests, contact privacy@itpartners.com, or write to us at IT Partners Plus LLC, 2851 Charlevoix Dr, Suite 100, Grand Rapids, MI 49512.