1. Information We Collect
Information you provide
- Contact form. When you reach out through our contact form, we collect your name, company (optional), email address, and the content of your message.
- Subscribe form. When you subscribe for updates, we collect your email address.
- Other communications. If you correspond with us, we keep a record of that correspondence.
Information collected automatically
- Log and device data. Like most websites, our servers and hosting providers automatically record information such as IP address, browser type, device type, operating system, referring URL, pages viewed, and the date and time of requests.
- Cookies and analytics. We may use cookies, local storage, and similar technologies that are strictly necessary to operate the Services, and privacy-conscious analytics that help us understand aggregate usage and improve performance. You can control cookies through your browser settings; disabling some cookies may affect how the Services work.
2. How We Use Information
- To respond to inquiries and communicate with you.
- To send updates you have asked to receive. You can unsubscribe at any time.
- To operate, maintain, secure, debug, and improve the Services.
- To detect, prevent, and address fraud, abuse, spam, and security incidents.
- To comply with legal obligations and enforce our terms.
Where the GDPR or UK GDPR applies, we rely on the following legal bases: your consent (for example, subscribing for updates), our legitimate interests (for example, responding to inquiries, securing and improving the Services), and compliance with legal obligations.
3. How We Share Information
We share personal information only as described below:
- Service providers. With vendors that process information on our behalf, such as website hosting, email delivery, analytics, and security providers, subject to contractual confidentiality and data protection obligations.
- Legal and safety. When we believe disclosure is required by law, legal process, or to protect the rights, property, or safety of NapX, our users, or others.
- Business transfers. In connection with a financing, merger, acquisition, reorganization, or sale of assets, subject to standard confidentiality protections.
- With your direction. When you ask us to or otherwise consent.
4. No Sale of Personal Information
We do not sell personal information, and we do not “share” personal information for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the preceding 12 months.
5. Your California Privacy Rights
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), gives you the following rights, subject to certain exceptions:
- Right to know. To request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we disclose it.
- Right to delete. To request deletion of personal information we have collected from you.
- Right to correct. To request correction of inaccurate personal information.
- Right to opt out of sale or sharing. To opt out of the sale or sharing of personal information. As noted above, we do not sell or share personal information.
- Right to limit. We do not use or disclose sensitive personal information for purposes that would trigger the right to limit.
- Non-discrimination. We will not discriminate against you for exercising any of these rights.
In the preceding 12 months, we have collected the following categories of personal information: identifiers (such as name, email address, and IP address), professional information (such as company), and internet or network activity (such as log and usage data). We collect these from you directly and automatically from your device, for the business purposes described in Section 2, and disclose them only to the categories of recipients described in Section 3.
To exercise your rights, submit a request through our contact form. We will verify your request by matching information you provide with information we hold, and we will respond within the time required by law. You may use an authorized agent to submit a request on your behalf; we may ask for proof of authorization and to verify your identity directly.
6. Rights for Visitors in the EEA and UK
If you are located in the European Economic Area or the United Kingdom, you may have the right to access, rectify, erase, restrict, or object to the processing of your personal information, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, please use our contact form.
7. Data Retention
We keep personal information only as long as reasonably necessary for the purposes described in this Policy, including to respond to your inquiry, maintain our subscriber list until you unsubscribe, and comply with legal, accounting, and security obligations. When information is no longer needed, we delete or de-identify it.
8. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
9. Children's Privacy
The Services are not directed to children. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share personal information of consumers under 16. If you believe a child has provided us personal information, please let us know through our contact form and we will delete it.
10. International Data Transfers
NapX is based in the United States, and we and our service providers may process information in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK Addendum, where required.
11. Do Not Track and Global Privacy Control
Because there is no common industry standard for “Do Not Track” signals, the Services do not currently respond to them. We honor Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information for the browser or device sending the signal, where required by applicable law.
12. Third-Party Links
The Services may link to third-party websites and services, such as social media profiles. Their privacy practices are governed by their own policies, and we are not responsible for them.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise its effective date and, where the changes are material, provide additional notice as required by law.
14. Contact Us
Questions or requests about this Privacy Policy or our privacy practices can be sent through our contact form. NapX is based in Silicon Valley, California.
