Privacy Policy

This policy covers the NOTT website, contact forms, and pre-contract communications. Production deployments and customer integrations are governed by the applicable service agreement, data processing terms, and technical scope agreed with each customer.

For website inquiries, NOTT acts as the controller of the information you submit. For production workflows, the contractual roles of NOTT and the customer depend on the integration and are documented before processing begins.

When you contact us, we may collect your name, business email, company, subject, message, and technical request details. We may also process limited security and delivery data needed to operate the website, prevent abuse, and troubleshoot submissions.

Please do not include customer records, credentials, secrets, payment data, health data, or other sensitive production information in a website inquiry.

We use inquiry data to respond, assess technical fit, arrange discovery, maintain communication history, secure the service, and meet legal obligations. We do not use website inquiry data to train shared public AI models.

We may use service providers for website hosting, email delivery, security, and operational support. They receive only the information needed to perform their service and are subject to appropriate contractual or confidentiality obligations.

We may disclose information when required by law, to protect the service and its users, or as part of a corporate transaction. We do not sell personal information.

Inquiry data is retained only as long as reasonably needed for communication, security, contractual follow-up, and legal recordkeeping. Retention for production data is defined separately for each deployment.

We use access controls and transport encryption appropriate to the service. No system is risk-free, so deployment-specific security requirements are reviewed during technical discovery rather than assumed from this website policy.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to request data portability or withdraw consent where consent is the legal basis.

You may also have the right to complain to your local data protection authority. We may need to verify your identity before completing a request.

To ask a privacy question or exercise a privacy right, use the contact form on this website and include “Privacy request” in the subject. We will route the request to the appropriate person and respond within the period required by applicable law.