Our Commitment to You
Welcome to NineOneSix Systems' Privacy Policy. We believe in being upfront about how we handle your information, so we've created this page to explain exactly how we safeguard your information and respect your digital rights.
At NineOneSix Systems, we handle your data with the same care we'd want for our own information. This policy explains what information we gather, why we need it, and how we put it to use.
The Information We Gather
Personal Information
We may collect personal information about you, including but not limited to:
- Name
- Email address
- Phone number
- Postal address
- Payment information
- Account credentials
- Profile information (such as profile photo, bio, preferences)
- Government-issued identification (where required for verification)
Usage Data
We may also collect information about how the Service is accessed and used, including:
- Log data (IP address, browser type, pages visited, time spent on pages)
- Device information (device type, operating system, unique device identifiers)
- Location data (with your consent, where applicable)
- Cookies and tracking technologies
- Interaction data (clicks, scrolls, feature usage patterns)
- Error logs and performance data
Information from Third-Party Services
NineOneSix Systems may integrate with the following third-party services:
- Google Fonts
- Vercel Analytics (if applicable)
If you register or grant us access to a third-party provider, we may collect additional personal data associated with your third-party account. This information might include your name, email address, profile picture, and contact list.
When you grant us access to your third-party account, you are giving NineOneSix Systems permission to use, share, and store your data in a manner consistent with this Privacy Policy.
How We Use Your Information
We use your information to:
- Keep your account running smoothly
- Process your requests and transactions
- Provide customer support and respond to inquiries
- Fix technical issues and improve system performance
- Make our Service better through research and development
- Keep you informed about important changes, updates, and new features
- Personalize your experience and provide relevant content
- Protect against misuse, fraud, and security threats
- Comply with legal obligations
- Enforce our Terms of Service
Automated Decision-Making
If we use automated systems to make decisions that affect you (such as fraud detection or content moderation), you have the right to:
- Request information about the logic involved
- Request human review of significant decisions
- Contest decisions and provide additional information
Data Sharing and Disclosure
We share your information only when:
- You give us permission – We'll always ask before sharing your information for new purposes
- We need service providers – Like payment processors, cloud hosting, email services, or analytics providers who are contractually bound to protect your data
- The law requires it – In response to valid legal requests, subpoenas, or court orders
- It's necessary to protect our users or our rights – To prevent fraud, enforce our policies, or protect safety
- Business transfers – In connection with a merger, acquisition, or sale of assets (you'll be notified of any change in ownership)
We will never:
- Sell your personal information to third parties
- Use your data for purposes you haven't agreed to
- Keep your information longer than we need it
- Share your data with advertisers without your explicit consent
- Use your private communications for advertising purposes
Third-Party Service Providers
Our service providers include cloud infrastructure providers, payment processors, analytics services, customer support platforms, and security services. All service providers are contractually required to:
- Process data only as we instruct
- Maintain appropriate security measures
- Delete data when the service relationship ends
- Notify us immediately of any security incidents
Data Retention
We retain your data only as long as necessary for the purposes outlined in this policy. After retention periods expire, we securely delete or anonymize your data. You can request earlier deletion at any time, subject to legal retention requirements.
- Account information: Duration of account + 30 days (Service provision)
- Transaction records: 7 years (Legal and tax requirements)
- Usage logs: 90 days (Security and troubleshooting)
- Customer support tickets: 3 years (Quality assurance)
- Marketing preferences: Until consent withdrawn
Your Rights
Your data belongs to you, and we've built our systems to reflect this principle. You have the right to:
- Access – Request a copy of your personal information
- Correction – Fix inaccurate or incomplete information
- Deletion – Request removal of your information ("right to be forgotten")
- Portability – Receive your data in a structured, machine-readable format
- Restriction – Limit how we process your information
- Objection – Object to processing based on legitimate interests
- Withdraw consent – Revoke previously given consent at any time
- Non-discrimination – Exercise your rights without penalty or reduced service quality
How to Exercise Your Rights
You can exercise these rights by:
- Self-service: Access your privacy settings in your account dashboard
- Email: Contact us at privacy@nineonesixsystems.com
- Web form: Submit a request through our contact form
- Mail: Write to our Privacy Team at 2400 Old Brick Rd. Glen Allen, VA 23060
We respond to all data rights requests within 30 days. For complex requests, we may extend this to 60 days with prior notice.
Data Security
Your data security is fundamental to our operations.
Technical Safeguards
- Encryption: We employ AES-256 encryption for data at rest and TLS 1.3 for data in transit
- Access controls: Multi-factor authentication and role-based access for all systems
- Network security: Firewalls, intrusion detection, and DDoS protection
- Secure development: Security-first coding practices and regular code reviews
Organizational Safeguards
- Security assessments: Comprehensive penetration testing and vulnerability assessments quarterly
- Employee training: All team members complete security awareness training annually
- Access audits: Regular review and adjustment of system access privileges
- Vendor vetting: Extensive security due diligence for all service providers
Incident Response
In the event of a data breach:
- We will investigate and contain the incident immediately
- We will notify affected users within 72 hours of confirmation
- We will notify relevant regulatory authorities as required by law
- We will provide clear information about what happened, what data was affected, and steps you can take
- We will offer appropriate remediation measures
While we maintain robust security measures, no online service is impenetrable. We strongly recommend enabling two-factor authentication on your account and using unique, strong passwords.
Cookies and Tracking Technologies
We use cookies and similar technologies to keep our Service working properly and to understand how people use our site.
Types of Cookies We Use
- Essential: Required for basic functionality (Session duration)
- Functional: Remember your preferences (1 year)
- Analytics: Understand how you use our service (2 years)
Your Cookie Choices
- Essential cookies cannot be disabled as they're necessary for the Service to function
- All other cookies require your consent and can be managed through our cookie preference center
- You can also control cookies through your browser settings
- We honor Do Not Track (DNT) and Global Privacy Control (GPC) signals
For more information about our use of cookies, please contact us at privacy@nineonesixsystems.com.
Children's Privacy
Our Service is not intended for use by children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover we've collected information from a child without parental consent, we will delete it promptly.
For services that may be used by children with parental consent, we provide:
- Parental controls and monitoring tools
- Age-appropriate privacy settings
- Limited data collection
- No behavioral advertising
International Data Transfers
NineOneSix Systems is based in the United States. When we transfer data internationally, we follow applicable data protection laws and use appropriate safeguards:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all international service providers
- Adequacy decisions where applicable
- Supplementary measures as needed based on destination country assessment
For transfers from the EEA, UK, or Switzerland, we rely on:
- The EU-U.S. Data Privacy Framework (where applicable)
- Standard Contractual Clauses
- Binding Corporate Rules (where applicable)
California Privacy Rights (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of personal information collected, used, and shared
- Right to Delete: Request deletion of personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out: Opt out of the sale or sharing of personal information
- Right to Limit: Limit use of sensitive personal information
- Right to Non-Discrimination: Not be discriminated against for exercising your rights
Categories of Personal Information Collected: Identifiers (name, email, IP address), Commercial information (purchase history), Internet activity (browsing history, interactions), Geolocation data, Professional information, Inferences drawn from the above.
We do not sell your personal information. If this changes, we will provide a clear "Do Not Sell or Share My Personal Information" link.
To exercise your California privacy rights, contact us at privacy@nineonesixsystems.com or call (800) 701-0396.
European Privacy Rights (GDPR)
For users in the European Economic Area (EEA), United Kingdom (UK), and Switzerland, we process your personal data based on the following legal bases:
- Providing our Service: Contract performance
- Account security: Legitimate interest
- Fraud prevention: Legitimate interest
- Marketing (with consent): Consent
- Legal compliance: Legal obligation
- Product improvement: Legitimate interest
Your GDPR Rights
You have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Erase your personal data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
- Lodge a complaint with a supervisory authority
Data Protection Officer: Contact privacy@nineonesixsystems.com for DPO inquiries
EU Representative: Not applicable at this time
We respond to all data rights requests within 30 days.
Other Regional Privacy Rights
Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Other U.S. States
Residents of states with comprehensive privacy laws have similar rights to access, delete, correct, and opt out of certain processing. Contact us to exercise these rights.
Brazil (LGPD)
Brazilian users have rights under the Lei Geral de Proteção de Dados, including access, correction, anonymization, portability, and deletion. Contact our DPO to exercise these rights.
Other Jurisdictions
We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about your rights under local law, please contact us.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes:
- Minor changes: We'll update the "Last Updated" date at the top of this page
- Material changes: We'll notify you via email and/or a prominent notice in our Service at least 30 days before changes take effect
- Significant changes affecting your rights: We'll seek your consent where required by law
If we introduce new features involving additional data types (e.g., advanced analytics), we will update this policy accordingly and notify you.
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
Contact Us
Questions or concerns about our Privacy Policy? We're here to help.
General Privacy Inquiries:
Email: privacy@nineonesixsystems.com
Data Protection Officer:
Email: privacy@nineonesixsystems.com
Address: 2400 Old Brick Rd. Glen Allen, VA 23060
Phone: (800) 701-0396
Mailing Address:
NineOneSix Systems Inc.
Attn: Privacy Team
2400 Old Brick Rd.
Glen Allen, VA 23060
United States
We aim to respond to all inquiries within 5 business days.
Governing Law
This policy is governed by the laws of the United States, without regard to conflict of law principles. For questions about your privacy or this policy, contact us at privacy@nineonesixsystems.com.
For EU/EEA/UK users, this does not affect your rights under applicable data protection laws or your right to bring claims before your local supervisory authority or courts.
Accessibility
This Privacy Policy is available in accessible formats upon request. Contact us at hello@nineonesixsystems.com for alternative formats.
This Privacy Policy was last reviewed and updated on December 22, 2025.