Privacy Policy

Coverage

This is the corporate-level privacy policy for all Nevtan products and services, including nevtan.com, Nevtan Sign, Nevtan Engage, Nevtan Cloud, customer portals, APIs, and future Nevtan offerings. Individual products may publish supplemental privacy documentation where product-specific disclosures are required.

Privacy Policy

Nevtan ("Nevtan," "we," "our," or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Nevtan collects, uses, stores, discloses, and safeguards personal information when you access or use our websites, products, applications, APIs, services, and related offerings (collectively, the "Services").

This Privacy Policy applies to all Nevtan products and services, including:

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

• Nevtan Sign
• Nevtan Engage
• Nevtan Cloud
• Nevtan websites and customer portals
• APIs and developer services
• Customer support services
• Future Nevtan products and offerings

1. Who We Are

Nevtan is a technology company that develops software, cloud infrastructure, communications, and business productivity solutions to help organizations operate, communicate, and scale more effectively.

Our Services include:

• Electronic signatures and document workflows (Nevtan Sign)
• Customer engagement and marketing automation (Nevtan Engage)
• Cloud hosting, infrastructure, and developer tools (Nevtan Cloud)
• Artificial intelligence features integrated across products
• Related business productivity and communications solutions

2. Scope of This Policy

This Privacy Policy applies to the following individuals and entities who interact with Nevtan Services:

• Website visitors — Browsing nevtan.com or any Nevtan product website
• Customers — Organizations or individuals with a Nevtan account or subscription
• Trial users — Individuals accessing Services during a free trial period
• Authorized users — Employees or agents of customers using Services on behalf of their organization
• Administrators — Users managing accounts, billing, or team configurations
• Developers — Users accessing APIs, SDKs, or developer tools
• Prospective customers — Individuals who have submitted inquiries, demo requests, or contact forms
• Support contacts — Individuals who contact Nevtan support or submit help requests
• Business partners — Vendors, resellers, integration partners, and affiliates

3. Information We Collect

The information Nevtan collects depends on how you interact with our Services. We collect information in three ways: information you provide directly, information collected automatically, and information received from third parties.

4. Information You Provide

You may provide information directly to Nevtan when you create an account, register for services, request a demo, contact support, subscribe to communications, complete forms, participate in surveys, attend webinars or events, or purchase subscriptions.

• Identity Information — Full name, company name, job title, professional profile
• Contact Information — Email address, telephone number, mailing address
• Account Information — Username, password credentials, account preferences, settings
• Billing Information — Billing address, subscription tier, tax information
• Communications — Messages sent to support, survey responses, event registrations, feedback
• Payment Cards — Payment card information is processed by authorized payment providers and is not stored directly by Nevtan.

5. Customer Product Data

Customers control and are responsible for the data they submit to Nevtan Services. Depending on the products used, customer data may include the following:

• Nevtan Sign — Documents, contracts, agreements, electronic signatures, audit records, approval workflows, signer information, completion certificates
• Nevtan Engage — Contact records, email addresses, customer segments, campaign content, messaging activity, marketing automation data, behavioral events
• Nevtan Cloud — Application code and configurations, databases, infrastructure resources, system logs, monitoring data, customer-managed files and content
• All Products — Any additional data submitted by customers or their authorized users in the course of using the Services

6. Information Collected Automatically

We automatically collect certain technical and usage information when users access or interact with our Services. This information helps us maintain security, diagnose issues, and improve performance.

• Device Information — Device type and model, browser type and version, operating system, language and regional settings.
• Usage Information — Pages and features accessed, session duration, navigation paths, feature adoption events, error events.
• Network Information — IP address, approximate geographic location derived from IP, network identifiers, connection type.
• Security Information — Login activity and timestamps, authentication events, failed access attempts, security-related log data.

7. Cookies and Similar Technologies

Nevtan uses cookies and related technologies to authenticate users, maintain sessions, improve security, remember preferences, analyze usage patterns, and improve website performance.

Our Cookie Policy provides full details on the types of cookies used, how to manage preferences, and how consent is collected where required. Please review our Cookie Policy at nevtan.com/cookies.

8. How We Use Information

Nevtan uses information collected for the following purposes:

• Service Delivery — To provide, operate, maintain, support, and improve our Services.
• Account Management — To create and administer customer accounts, manage subscriptions, and process billing.
• Customer Support — To respond to inquiries, diagnose issues, and provide technical and account assistance.
• Security — To detect, prevent, investigate, and respond to fraud, abuse, unauthorized access, and security threats.
• Product Improvement — To analyze usage patterns, identify areas for improvement, and enhance reliability and functionality.
• Communications — To send service notifications, product updates, administrative messages, and support communications.
• Marketing — Where permitted, to provide information about products, services, events, and promotions. Users may unsubscribe at any time.
• Legal Compliance — To comply with applicable laws, regulations, court orders, and legal obligations.
• AI Features — To provide AI-powered functionality within our Services where customers have enabled those features. See Section 15.

9. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal information, Nevtan relies on one or more of the following grounds depending on the nature of the processing activity and the jurisdiction involved.

• Contractual Necessity — Processing is necessary to perform the Services requested by the customer or user — including account creation, service delivery, billing, and support.
• Legitimate Interests — Processing is necessary for Nevtan's legitimate interests in operating, securing, and improving our Services, provided those interests are not overridden by the individual's rights.
• Legal Obligation — Processing is required to comply with applicable laws, regulations, court orders, or regulatory requirements.
• Consent — Where required by law — such as for certain marketing communications or non-essential cookies — Nevtan obtains consent before processing. Consent may be withdrawn at any time.
• Vital Interests — In rare circumstances, processing may be necessary to protect the vital interests of an individual.

10. How We Share Information

We do not sell personal information. Nevtan does not sell personal information to third parties. We do not share personal information for third-party advertising purposes.

We may disclose personal information in the following limited circumstances:

• Service Providers & Subprocessors — Vendors engaged to help operate the Services — including cloud hosting providers, payment processors, analytics providers, customer support platforms, and communication providers. These providers are subject to contractual data protection obligations.
• Business Transactions — In connection with a merger, acquisition, financing, reorganization, or sale of assets, where personal information may be transferred as part of the transaction. We will provide notice of any such transfer as required by law.
• Legal & Regulatory — To comply with applicable laws, enforceable court orders, lawful government or regulatory requests, or legal process.
• Protection of Rights — To protect the rights, safety, security, or property of Nevtan, our customers, users, or others — including to investigate potential violations of our agreements.
• With Consent — For any other purpose with the express consent of the individual where required.

11. International Data Transfers

Nevtan operates globally and personal information may be processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, Nevtan implements appropriate safeguards for international transfers of personal information. These may include:

Customers who require specific contractual commitments regarding international data transfers should refer to our Data Processing Addendum (DPA), available at nevtan.com/dpa.

• Standard Contractual Clauses or equivalent contractual mechanisms recognized by applicable law
• Adequacy decisions by relevant regulatory authorities
• Other legally recognized transfer mechanisms appropriate to the jurisdiction

12. Data Security

Nevtan maintains administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction.

Security measures include:

• Encryption of data in transit using modern transport protocols
• Encryption of data at rest across databases, backups, and storage
• Role-based access controls and least-privilege access policies
• Continuous monitoring, logging, and alerting
• Vulnerability management and security testing
• Incident response processes with defined notification procedures
• Periodic security assessments

13. Data Retention

Nevtan retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account information — Retained for the duration of the customer relationship and for a reasonable period afterward to support billing disputes, legal obligations, and account recovery requests.
• Customer product data — Retained for the duration of the active subscription. Following account termination, customers are provided a period to export their data before deletion is completed.
• Usage and log data — Generally retained for operational, security, and diagnostic purposes for a defined period, after which data is deleted or anonymized.
• Billing and financial data — Retained as required by applicable financial recordkeeping obligations.
• Marketing contact data — Retained until unsubscribe or opt-out is received, or until the contact is no longer relevant to Nevtan's business, whichever occurs first.
• Support communications — Retained for a reasonable period to support ongoing customer assistance and quality review.

14. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. Nevtan supports the exercise of these rights for individuals across all jurisdictions where our Services are used.

• Access — Request a copy of the personal information Nevtan holds about you.
• Correction — Request correction of inaccurate or incomplete personal information.
• Deletion — Request deletion of your personal information where it is no longer necessary, where consent has been withdrawn, or where required by applicable law.
• Restriction — Request that Nevtan limit or pause certain processing activities.
• Portability — Request your personal information in a structured, commonly used, machine-readable format.
• Objection — Object to processing based on legitimate interests, including for direct marketing purposes.
• Withdrawal of Consent — Withdraw consent at any time where processing relies on consent, without affecting the lawfulness of prior processing.
• Non-Discrimination — Exercise privacy rights without being subject to discriminatory treatment in the Services provided.

15. AI and Automated Processing

Nevtan may provide AI-powered functionality across its products and services. These features are designed to improve productivity and enhance the user experience.

Examples of AI-powered features may include:

• Document summarization and analysis (Nevtan Sign)
• Workflow recommendations and automation assistance
• Content generation and optimization (Nevtan Engage)
• Intelligent search and classification
• Customer support assistance
• Infrastructure optimization and anomaly detection (Nevtan Cloud)

16. Children's Privacy

Nevtan Services are designed for business and professional use and are not directed toward children under the age of 18.

Nevtan does not knowingly collect personal information from children. If we become aware that personal information has been collected from a child without appropriate parental or guardian consent, we will take steps to delete that information promptly.

If you believe a child has submitted personal information to Nevtan without authorization, please contact us at privacy@nevtan.com.

17. Third-Party Services and Integrations

Our Services may integrate with or provide links to third-party products, platforms, or services. Nevtan is not responsible for the privacy practices, security, or content of third parties.

Users should review the applicable privacy policies of any third-party services they choose to connect or integrate with Nevtan products. Third-party integrations are subject to the terms and conditions of those third parties.

18. Changes to This Privacy Policy

Nevtan may update this Privacy Policy periodically to reflect changes in our Services, technology, data practices, or applicable law.

When material changes are made, we will provide notice through our websites, applications, email, or other appropriate channels. The effective date at the top of this Policy reflects when the most recent version took effect.

Continued use of our Services following publication of an updated Privacy Policy constitutes acknowledgment of the revised Policy. If you do not agree to the updated terms, you should discontinue use of the relevant Services and contact us to discuss your account.

19. Global Privacy Rights

Nevtan is committed to supporting privacy rights for users across all jurisdictions in which our Services are available. The rights described in Section 14 are offered globally, not limited to users in specific regions.

In certain jurisdictions, local law may provide additional or different rights, impose specific disclosure requirements, or govern how requests must be handled. Where such requirements apply, Nevtan will comply with applicable local obligations.

Users who believe their privacy rights have not been respected may contact us at privacy@nevtan.com. Users may also have the right to lodge a complaint with the relevant data protection authority or regulatory body in their jurisdiction.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or Nevtan's privacy practices, please contact us through any of the following channels:

• Privacy Team — privacy@nevtan.com — For privacy rights requests, policy questions, and data inquiries
• Legal Team — legal@nevtan.com — For legal notices, DPA requests, and contractual matters
• Security Team — security@nevtan.com — For security-related concerns or vulnerability reports
• Website — nevtan.com