1. Overview
This Notice supplements the NtelSec Privacy Policy for residents of California, Virginia, Colorado, Connecticut, and Utah.
2. Categories of Personal Information Collected (last 12 months)
We collect the following categories of personal information:
- Identifiers — name, business email, IP address, account ID
- Customer records — billing contact, business address
- Commercial information — subscription history, transactions
- Internet/network activity — log data, auth events, usage analytics (on by default; you can opt out at any time)
- Geolocation — approximate location derived from IP address
We do not intentionally collect sensitive personal information such as government IDs, biometric data, precise geolocation, or health data.
3. Purposes of Use
We use personal information to:
- Provide and secure the Service
- Support self‑assessment workflows
- Improve the Service
- Handle billing and administration
- Ensure legal compliance
4. Disclosures
We disclose personal information to service providers/subprocessors under written contracts, to advisors, in corporate transactions, and as required by law. Our Privacy Policy describes the categories of service providers we use.
We do not sell personal information for money. On our marketing website we share limited identifiers (cookie identifiers, IP address, and conversion events) with Google for advertising measurement, which may be considered "sharing" for cross-context behavioral advertising under California law. You can opt out at any time via the "Do Not Sell or Share My Personal Information" link in our footer, the Cookie Settings link, or a Global Privacy Control (GPC) signal, which we honor as a valid opt-out.
5. User Rights & Exercise Procedures
You have the following rights:
- Right to know/access — request access to the personal information we hold about you
- Right to delete — request deletion of your personal information
- Right to correct — request correction of inaccurate personal information
- Right to data portability — receive your personal information in a portable format
- Right to opt‑out of sale/sharing — opt out of the advertising-measurement sharing described in Section 4 via the "Do Not Sell or Share My Personal Information" link, Cookie Settings, or GPC
- Right to limit sensitive personal information use — not applicable, as we do not collect sensitive personal information
- Right to non‑discrimination — we will not discriminate against you for exercising your privacy rights
To submit a request, email privacy@ntelsec.com. We will verify your identity and respond within statutory timeframes. Authorized agents may submit requests with proof of authorization.
Appeals (where applicable) can be submitted to the same email address with "Privacy Appeal" in the subject line.
6. Data Retention
- Customer content: retained for your subscription term and returned and/or deleted following termination per your agreement
- Security logs: retained for at least 12 months for security, forensics, and compliance
- Billing records: retained as required by tax and corporate law
Longer retention periods may apply where required by law. See the Retention section of our Privacy Policy for the criteria we use.
Version 2.0 · Effective July 14, 2026 — supersedes v1.0 (July 28, 2025).