Privacy Policy
NexetRisk, Inc.
Our Privacy Commitment
At NexetRisk, we take your privacy seriously. We only collect data necessary to provide our Service, we never sell your information, and we protect your data using industry-leading security measures.
Data We Collect
Account Information
- •Name and email address
- •Company name and job title
- •Billing address and payment information
- •Account preferences and settings
To provide and manage your account
Usage Data
- •Login times and IP addresses
- •Feature usage patterns
- •Dashboard access logs
- •API call records
To improve the Service and monitor security
Uploaded Data
- •Transaction records
- •User profile data
- •Fraud labels
- •Model scores
To provide risk analytics services to you
Technical Data
- •Browser type and version
- •Device information
- •Operating system
- •Timezone settings
To optimize Service performance
Table of Contents
1. Introduction
NexetRisk, Inc. ("NexetRisk," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our risk management platform (the "Service").
By using our Service, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.
This policy applies to: • Visitors to our website • Users who register for an account • Enterprise customers who subscribe to our Service
2. Information We Collect
We collect several types of information to provide and improve our Service:
2.1 Information You Provide • Account information during registration (name, email, company) • Billing information for payment processing • Data you upload for analysis • Communications with our support team
2.2 Information Collected Automatically • Log data (IP addresses, browser type, access times) • Device information (hardware model, operating system) • Usage information (features accessed, time spent) • Data collected through cookies and similar technologies
2.3 Information from Third Parties • Single sign-on data from authentication providers • Payment confirmation from payment processors • Business contact information for verification
3. How We Use Your Information
We use the information we collect for:
3.1 Service Delivery • Creating and managing your account • Processing and analyzing your uploaded data • Generating risk reports and insights • Providing customer support
3.2 Service Improvement • Analyzing usage patterns to improve features • Developing new features and services • Conducting research and analysis • Fixing bugs and technical issues
3.3 Communications • Sending service-related notifications • Providing product updates and newsletters • Responding to your inquiries • Sending marketing communications (with your consent)
3.4 Security and Compliance • Detecting and preventing fraud • Monitoring for suspicious activity • Complying with legal obligations • Enforcing our Terms of Service
5. Data Security
We implement industry-standard security measures to protect your data:
5.1 Technical Safeguards • TLS 1.3 encryption for all data in transit • AES-256 encryption for data at rest • Two-factor authentication for all accounts • Regular security audits and penetration testing
5.2 Organizational Measures • Background checks for employees • Security awareness training • Role-based access controls • Incident response procedures
5.3 Infrastructure Security • Hosted in SOC 2 certified data centers • Redundant backup systems • Intrusion detection and prevention • 24/7 security monitoring
5.4 Compliance Certifications • SOC 2 Type II • ISO 27001 • GDPR Compliant • CCPA Compliant
While we strive to protect your data, no method is 100% secure. In the event of a data breach, we will notify affected users in accordance with applicable law.
6. Data Retention
6.1 Retention Periods We retain your information for the following periods: • Account data: As long as your account is active • Uploaded data: Per your subscription plan (Standard: 90 days, Professional: 1 year, Enterprise: customizable) • Usage logs: 2 years • Billing records: 7 years (tax compliance requirement)
6.2 After Account Termination When you terminate your account: • Account data is deleted within 30 days • Uploaded data is deleted within 30 days (unless you request immediate deletion) • Backups are purged within 90 days • Some data may be retained for legal compliance
6.3 Data Deletion Requests You may request deletion of your data at any time. We will process deletion requests within 30 days.
8. Your Rights
Depending on your location, you may have the following rights:
8.1 Right to Access You can request a copy of the personal data we hold about you.
8.2 Right to Rectification You can request correction of inaccurate or incomplete personal data.
8.3 Right to Erasure You can request deletion of your personal data ("right to be forgotten").
8.4 Right to Restriction You can request restriction of processing of your data in certain circumstances.
8.5 Right to Data Portability You can request to receive your data in a structured, machine-readable format.
8.6 Right to Object You can object to processing based on legitimate interests.
8.7 Right to Withdraw Consent Where processing is based on consent, you can withdraw it at any time.
To exercise these rights, contact us at: privacy@riskguard.com
9. International Data Transfers
9.1 Data Location Our primary data centers are located in the United States. Your data may also be stored in: • European Union (Frankfurt) • Asia-Pacific (Singapore)
9.2 Transfer Safeguards For international data transfers, we use: • Standard Contractual Clauses (SCCs) • Voluntary adherence to Privacy Shield principles • Adequacy decisions (where applicable)
9.3 Data Sovereignty Enterprise customers can choose data residency regions to comply with local regulations.
10. Children's Privacy
Our Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that we have collected personal information from a child, please contact us immediately and we will delete that information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes become effective when we post the updated policy on this page.
For significant changes, we will: • Notify you via email • Display a prominent notice in the Service • Provide at least 30 days notice before changes take effect
We encourage you to review this policy periodically to stay informed about how we protect your information.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Data Protection Officer NexetRisk, Inc. 100 Market Street, Suite 500 San Francisco, CA 94105 United States
Email: privacy@riskguard.com Phone: +1 (415) 555-0124
EU Representative: NexetRisk EU Ltd. 123 Data Street Dublin, Ireland eu-privacy@riskguard.com
We will respond to all requests within 30 days.
Quick Actions
If you have any questions about this Privacy Policy, please contact our privacy team at privacy@riskguard.com