Privacy Policy

Last Updated: December 22, 2025

Our Commitment to You

Welcome to NineOneSix Systems' Privacy Policy. We believe in being upfront about how we handle your information, so we've created this page to explain exactly how we safeguard your information and respect your digital rights.

At NineOneSix Systems, we handle your data with the same care we'd want for our own information. This policy explains what information we gather, why we need it, and how we put it to use.

The Information We Gather

Personal Information

We may collect personal information about you, including but not limited to:

Name
Email address
Phone number
Postal address
Payment information
Account credentials
Profile information (such as profile photo, bio, preferences)
Government-issued identification (where required for verification)

Usage Data

We may also collect information about how the Service is accessed and used, including:

Log data (IP address, browser type, pages visited, time spent on pages)
Device information (device type, operating system, unique device identifiers)
Location data (with your consent, where applicable)
Cookies and tracking technologies
Interaction data (clicks, scrolls, feature usage patterns)
Error logs and performance data

Information from Third-Party Services

NineOneSix Systems may integrate with the following third-party services:

Google Fonts
Vercel Analytics (if applicable)

If you register or grant us access to a third-party provider, we may collect additional personal data associated with your third-party account. This information might include your name, email address, profile picture, and contact list.

When you grant us access to your third-party account, you are giving NineOneSix Systems permission to use, share, and store your data in a manner consistent with this Privacy Policy.

How We Use Your Information

We use your information to:

Keep your account running smoothly
Process your requests and transactions
Provide customer support and respond to inquiries
Fix technical issues and improve system performance
Make our Service better through research and development
Keep you informed about important changes, updates, and new features
Personalize your experience and provide relevant content
Protect against misuse, fraud, and security threats
Comply with legal obligations
Enforce our Terms of Service

Automated Decision-Making

If we use automated systems to make decisions that affect you (such as fraud detection or content moderation), you have the right to:

Request information about the logic involved
Request human review of significant decisions
Contest decisions and provide additional information

Data Sharing and Disclosure

We share your information only when:

You give us permission – We'll always ask before sharing your information for new purposes
We need service providers – Like payment processors, cloud hosting, email services, or analytics providers who are contractually bound to protect your data
The law requires it – In response to valid legal requests, subpoenas, or court orders
It's necessary to protect our users or our rights – To prevent fraud, enforce our policies, or protect safety
Business transfers – In connection with a merger, acquisition, or sale of assets (you'll be notified of any change in ownership)

We will never:

Sell your personal information to third parties
Use your data for purposes you haven't agreed to
Keep your information longer than we need it
Share your data with advertisers without your explicit consent
Use your private communications for advertising purposes

Third-Party Service Providers

Our service providers include cloud infrastructure providers, payment processors, analytics services, customer support platforms, and security services. All service providers are contractually required to:

Process data only as we instruct
Maintain appropriate security measures
Delete data when the service relationship ends
Notify us immediately of any security incidents

Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy. After retention periods expire, we securely delete or anonymize your data. You can request earlier deletion at any time, subject to legal retention requirements.

Account information:

Duration of account + 30 days (Service provision)

Transaction records:

7 years (Legal and tax requirements)

Usage logs:

90 days (Security and troubleshooting)

Customer support tickets:

3 years (Quality assurance)

Marketing preferences:

Until consent withdrawn

Your Rights

Your data belongs to you, and we've built our systems to reflect this principle. You have the right to:

Access – Request a copy of your personal information
Correction – Fix inaccurate or incomplete information
Deletion – Request removal of your information ("right to be forgotten")
Portability – Receive your data in a structured, machine-readable format
Restriction – Limit how we process your information
Objection – Object to processing based on legitimate interests
Withdraw consent – Revoke previously given consent at any time
Non-discrimination – Exercise your rights without penalty or reduced service quality

How to Exercise Your Rights

You can exercise these rights by:

Self-service: Access your privacy settings in your account dashboard
Email: Contact us at privacy@nineonesixsystems.com
Web form: Submit a request through our contact form
Mail: Write to our Privacy Team at 2400 Old Brick Rd. Glen Allen, VA 23060

We respond to all data rights requests within 30 days. For complex requests, we may extend this to 60 days with prior notice.

Data Security

Your data security is fundamental to our operations.

Technical Safeguards

Encryption: We employ AES-256 encryption for data at rest and TLS 1.3 for data in transit
Access controls: Multi-factor authentication and role-based access for all systems
Network security: Firewalls, intrusion detection, and DDoS protection
Secure development: Security-first coding practices and regular code reviews

Organizational Safeguards

Security assessments: Comprehensive penetration testing and vulnerability assessments quarterly
Employee training: All team members complete security awareness training annually
Access audits: Regular review and adjustment of system access privileges
Vendor vetting: Extensive security due diligence for all service providers

Incident Response

In the event of a data breach:

We will investigate and contain the incident immediately
We will notify affected users within 72 hours of confirmation
We will notify relevant regulatory authorities as required by law
We will provide clear information about what happened, what data was affected, and steps you can take
We will offer appropriate remediation measures

While we maintain robust security measures, no online service is impenetrable. We strongly recommend enabling two-factor authentication on your account and using unique, strong passwords.

Cookies and Tracking Technologies

We use cookies and similar technologies to keep our Service working properly and to understand how people use our site.

Types of Cookies We Use

Essential

Required for basic functionality (Session duration)

Functional

Remember your preferences (1 year)

Analytics

Understand how you use our service (2 years)

Your Cookie Choices

Essential cookies cannot be disabled as they're necessary for the Service to function
All other cookies require your consent and can be managed through our cookie preference center
You can also control cookies through your browser settings
We honor Do Not Track (DNT) and Global Privacy Control (GPC) signals

For more information about our use of cookies, please contact us at privacy@nineonesixsystems.com.

Children's Privacy

Our Service is not intended for use by children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover we've collected information from a child without parental consent, we will delete it promptly.

For services that may be used by children with parental consent, we provide:

Parental controls and monitoring tools
Age-appropriate privacy settings
Limited data collection
No behavioral advertising

International Data Transfers

NineOneSix Systems is based in the United States. When we transfer data internationally, we follow applicable data protection laws and use appropriate safeguards:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements with all international service providers
Adequacy decisions where applicable
Supplementary measures as needed based on destination country assessment

For transfers from the EEA, UK, or Switzerland, we rely on:

The EU-U.S. Data Privacy Framework (where applicable)
Standard Contractual Clauses
Binding Corporate Rules (where applicable)

California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: Request disclosure of personal information collected, used, and shared
Right to Delete: Request deletion of personal information
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt out of the sale or sharing of personal information
Right to Limit: Limit use of sensitive personal information
Right to Non-Discrimination: Not be discriminated against for exercising your rights

Categories of Personal Information Collected: Identifiers (name, email, IP address), Commercial information (purchase history), Internet activity (browsing history, interactions), Geolocation data, Professional information, Inferences drawn from the above.

We do not sell your personal information. If this changes, we will provide a clear "Do Not Sell or Share My Personal Information" link.

To exercise your California privacy rights, contact us at privacy@nineonesixsystems.com or call (800) 701-0396.

European Privacy Rights (GDPR)

For users in the European Economic Area (EEA), United Kingdom (UK), and Switzerland, we process your personal data based on the following legal bases:

Providing our Service

Legal Basis: Contract performance

Account security

Legal Basis: Legitimate interest

Fraud prevention

Legal Basis: Legitimate interest

Marketing (with consent)

Legal Basis: Consent

Legal compliance

Legal Basis: Legal obligation

Product improvement

Legal Basis: Legitimate interest

Your GDPR Rights

You have the right to:

Access your personal data
Rectify inaccurate personal data
Erase your personal data ("right to be forgotten")
Restrict processing
Data portability
Object to processing
Withdraw consent
Lodge a complaint with a supervisory authority

Data Protection Officer: Contact privacy@nineonesixsystems.com for DPO inquiries

EU Representative: Not applicable at this time

We respond to all data rights requests within 30 days.

Other Regional Privacy Rights

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Other U.S. States

Residents of states with comprehensive privacy laws have similar rights to access, delete, correct, and opt out of certain processing. Contact us to exercise these rights.

Brazil (LGPD)

Brazilian users have rights under the Lei Geral de Proteção de Dados, including access, correction, anonymization, portability, and deletion. Contact our DPO to exercise these rights.

Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about your rights under local law, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

Minor changes: We'll update the "Last Updated" date at the top of this page
Material changes: We'll notify you via email and/or a prominent notice in our Service at least 30 days before changes take effect
Significant changes affecting your rights: We'll seek your consent where required by law

If we introduce new features involving additional data types (e.g., advanced analytics), we will update this policy accordingly and notify you.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

Contact Us

Questions or concerns about our Privacy Policy? We're here to help.

General Privacy Inquiries:

Email: privacy@nineonesixsystems.com

Data Protection Officer:

Email: privacy@nineonesixsystems.com

Address: 2400 Old Brick Rd. Glen Allen, VA 23060

Phone: (800) 701-0396

Mailing Address:

NineOneSix Systems Inc.
Attn: Privacy Team
2400 Old Brick Rd.
Glen Allen, VA 23060
United States

We aim to respond to all inquiries within 5 business days.

Governing Law

This policy is governed by the laws of the United States, without regard to conflict of law principles. For questions about your privacy or this policy, contact us at privacy@nineonesixsystems.com.

For EU/EEA/UK users, this does not affect your rights under applicable data protection laws or your right to bring claims before your local supervisory authority or courts.

Accessibility

This Privacy Policy is available in accessible formats upon request. Contact us at hello@nineonesixsystems.com for alternative formats.

This Privacy Policy was last reviewed and updated on December 22, 2025.