Privacy Policy
Last Updated: September 2026
This Privacy Policy explains how Nontronite ("we," "us," or "our") collects, uses, discloses, and protects the personal information of users ("you" or "your") who access and utilize the nontronite.xyz website and Software-as-a-Service (SaaS) platform located at nontronite.xyz (collectively, the "Services"). We are committed to protecting your privacy and complying with applicable federal and state privacy laws, including the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.), the Colorado Privacy Act (C.R.S. § 6-1-1300 et seq.), the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.), the Utah Consumer Privacy Act (Utah Code § 13-11-101 et seq.), and other State comprehensive privacy laws (TX, OR, MT, FL, TN, etc.).
By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms outlined herein, you must immediately discontinue your use of the Services. This policy applies solely to information collected through our Services and does not apply to any third-party websites, services, or applications that you may access via links provided within our platform. We encourage you to review the privacy policies of any third-party services you interact with.
As a SaaS provider operating within the United States, we adhere to a notice-and-choice framework for data processing. Unless otherwise required by specific sectoral laws such as the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA), or applicable state comprehensive privacy statutes, we generally do not require opt-in consent for the collection and use of your personal information for primary business purposes. However, we provide you with specific choices and opt-out rights regarding the sale or sharing of your personal information, as detailed in the sections below.
1. Information We Collect
We collect various categories of personal information depending on how you interact with our Services, the features you utilize, and the nature of your relationship with us. The primary categories of personal information we collect include identifiers, commercial information, internet or other electronic network activity information, geolocation data, and inferences drawn from such information. We collect this data directly from you when you create an account, subscribe to our newsletter, communicate with our support team, or voluntarily provide information through forms and surveys.
Specifically, when you register for an account or utilize our SaaS platform, we collect personal identifiers such as your first and last name, email address, business address, phone number, and account login credentials. We also collect professional and commercial information, including your job title, company name, and industry. As you navigate our website, we automatically collect internet network activity information, such as your Internet Protocol (IP) address, browser type, operating system, referring website URLs, and the dates and times of your visits. This technical data is essential for maintaining the security and functionality of our Services.
Furthermore, we collect information regarding your usage of our SaaS platform, including feature utilization logs, error reports, and performance metrics. If you interact with our customer support team, we maintain records of your communications, including email correspondence and chat transcripts. In certain circumstances, we may also collect inferences drawn from your usage patterns to optimize our platform's performance and user experience. We do not knowingly collect "sensitive personal information" as defined under the California Consumer Privacy Act as amended by the CPRA, such as social security numbers, driver's license numbers, or financial account credentials, unless strictly necessary for authentication or billing purposes and with appropriate safeguards.
2. How We Use Your Information
We use the personal information we collect for specific, explicit, and legitimate business purposes necessary to provide you with our SaaS Services and to operate our business effectively. The primary purpose for collecting your information is to create and manage your user account, authenticate your identity, and deliver the specific SaaS functionalities you have requested. We also use your information to communicate with you regarding your account, provide customer support, and respond to your inquiries, feedback, or complaints in a timely manner.
Additionally, we process your personal information to improve and optimize our Services, conduct analytics, and monitor platform performance. This includes tracking usage trends, diagnosing technical issues, and developing new features or enhancements. We may use your contact information to send you important administrative notices, such as updates to our Terms and Conditions (site-terms.php) or this Privacy Policy. Where required by law, such as under the Restore Online Shoppers' Confidence Act, 15 U.S.C. §§ 8401-8405 (ROSCA), we ensure that all material terms of any subscription or negative-option features are clearly disclosed prior to billing.
We also utilize your information to ensure the security of our platform, prevent fraud, and comply with our legal obligations. This involves monitoring for suspicious activity, enforcing our agreements, and protecting the rights and safety of our users. Our practices are designed to comply with the Federal Trade Commission Act § 5, 15 U.S.C. § 45 (FTC Act — unfair/deceptive practices), ensuring that our privacy promises are fully honored and that we do not engage in deceptive data practices. We retain your personal information for as long as your account is active or as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
3. Information Sharing
Nontronite does not sell, rent, or trade your personal information to third parties for monetary consideration. However, we may share your personal information with trusted third-party service providers, contractors, and vendors who perform services on our behalf. These providers assist us with hosting infrastructure, data analytics, customer relationship management, email delivery, and payment processing. We share only the information necessary for these providers to perform their designated functions, and we require them to enter into strict contractual agreements to protect your personal information and prohibit its unauthorized use or disclosure.
We may also disclose your personal information to our affiliates, subsidiaries, or parent companies for internal administrative and operational purposes. In the event of a merger, acquisition, reorganization, or sale of substantially all of our assets, your personal information may be transferred as part of that transaction. We will provide notice via our website or directly to affected users prior to such a transfer if it results in a material change to our privacy practices, and we will take reasonable steps to ensure the receiving entity honors this Privacy Policy.
Furthermore, we may share your personal information when we believe it is necessary to comply with applicable law, legal process, or government requests. This includes responding to subpoenas, court orders, or other lawful requests by law enforcement or regulatory authorities. We may also disclose information to protect the legal rights, property, or safety of Nontronite, our users, or the public. Under the California Consumer Privacy Act as amended by the CPRA, we do not engage in "sharing" (cross-context behavioral advertising) or "selling" of personal information for valuable consideration without providing users with the right to opt-out, as detailed in Section 5.
4. Cookies and Tracking
We use cookies, web beacons, pixels, and similar tracking technologies on our website to enhance your browsing experience, analyze site traffic, and understand how visitors interact with our Services. Cookies are small data files stored on your device that allow us to recognize your browser and remember certain information about your visit. We utilize both "essential" cookies, which are necessary for the basic functioning of the website, and "non-essential" cookies, which help us improve our marketing efforts and platform analytics. For a comprehensive breakdown of the specific cookies we use, please review our Cookie Policy.
Our use of tracking technologies is governed by applicable state and federal laws, including the Electronic Communications Privacy Act, 18 U.S.C. § 2511 (limited application) and various State wiretapping/cpw statutes (e.g., California Invasion of Privacy Act § 631, session-replay litigation). To ensure compliance with these regulations, we do not engage in unauthorized session replay or interception of electronic communications without proper disclosure and consent where required. We provide you with the ability to manage your cookie preferences through our cookie consent banner and your browser settings. However, disabling essential cookies may impact your ability to access certain features of our SaaS platform.
In accordance with the California Consumer Privacy Act as amended by CPRA — 'Do Not Sell or Share My Personal Information' / Global Privacy Control obligations (Cal. Civ. Code § 1798.120, § 1798.135), we honor "Do Not Sell or Share My Personal Information" requests and Global Privacy Control (GPC) signals transmitted by your browser. If we detect a GPC signal, we will treat it as a request to opt-out of the sharing of your personal information for cross-context behavioral advertising. We also participate in industry-standard opt-out programs, such as the Digital Advertising Alliance (DAA) and AdChoices, to ensure you have control over interest-based advertising.
5. Your Rights and Choices
Depending on your state of residence, you may be entitled to specific privacy rights regarding the personal information we collect about you. Under the California Consumer Privacy Act as amended by the CPRA, California residents have the right to know the categories of personal information collected, the right to request deletion of their personal information, the right to correct inaccurate personal information, and the right to opt-out of the sale or sharing of their personal information. To exercise these rights, you may submit a verifiable consumer request by contacting us at [email protected].
Similarly, residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws (TX, OR, MT, FL, TN, etc.) have rights to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt-out of targeted advertising, the sale of personal data, and certain profiling. If you are an authorized agent acting on behalf of a consumer, you may submit a request on their behalf, provided you have valid written authorization. We will not discriminate against you for exercising your privacy rights, and we will respond to your request within the timeframes permitted by applicable law.
To the extent we process personal information that falls under the Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6801-6809 (GLBA) for financial institutions, or the Health Insurance Portability and Accountability Act (HIPAA) where applicable, such information is exempt from certain state privacy law requirements. However, we remain committed to safeguarding all sensitive data in accordance with federal standards. If you wish to opt-out of our sharing of personal information for cross-context behavioral advertising, you may click the "Do Not Sell or Share My Personal Information" link in our website footer or enable GPC in your browser.
6. Data Security
We implement comprehensive administrative, technical, and physical safeguards designed to protect the personal information we collect from unauthorized access, alteration, disclosure, or destruction. Our security measures include encryption of data in transit and at rest, secure network infrastructure, regular vulnerability scanning, and strict access controls. Access to personal information is restricted to authorized personnel who require such information to perform their job duties, and these individuals are subject to confidentiality obligations.
Despite our robust security measures, no method of transmission over the Internet or electronic storage is completely secure. While we strive to utilize commercially acceptable means to protect your personal information, we cannot guarantee absolute security. In the event of a data breach involving your personal information, we will comply with all applicable state data breach notification laws to inform you and relevant authorities of the incident. We continuously evaluate and update our security protocols to address emerging threats and ensure ongoing compliance with industry best practices.
As part of our SaaS operations, we maintain audit logs and conduct periodic security assessments to identify and mitigate potential vulnerabilities. We require our third-party service providers to maintain similarly robust security standards. However, you are also responsible for maintaining the security of your account credentials and ensuring that your access to our platform is protected. We encourage you to use strong passwords and enable multi-factor authentication where available to enhance the security of your account.
7. International Data Transfers
While Nontronite is primarily based in the United States and processes personal information within the US, we acknowledge that our SaaS platform may be accessed by users globally. If you are accessing our Services from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States. By using our Services and providing your personal information, you consent to this transfer and processing of your data in accordance with this Privacy Policy and applicable US laws.
We take steps to ensure that any cross-border transfers of personal information are conducted in compliance with applicable legal frameworks. For transfers originating from jurisdictions with strict data localization or transfer requirements, we utilize appropriate safeguards such as Standard Contractual Clauses or other legally recognized transfer mechanisms. We will not transfer your data to jurisdictions that do not provide an adequate level of data protection unless we have implemented necessary contractual and technical safeguards.
If you have questions regarding our international data transfer practices, or if you wish to object to the transfer of your personal information to the United States, please contact us using the information provided in the Contact Information section. Please note that objecting to such transfers may impact your ability to utilize certain features of our SaaS platform, as our primary infrastructure is located within the United States.
8. Children's Privacy
Our Services are intended for use by businesses and professionals, and they are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete such information in accordance with the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA) and the COPPA Rule as amended effective June 2025 (16 C.F.R. Part 312, 2025 amendments).
The amended COPPA Rule introduces heightened requirements regarding data minimization, security, and parental notice. We align our practices with these requirements by ensuring that our data collection is strictly limited to what is necessary for the operation of our business-to-business SaaS platform. We do not use personal information to create profiles for targeted advertising to children, nor do we disclose data that could potentially identify a child. If you believe we have collected information from a child under 13, please contact us immediately at [email protected] so we can investigate and take appropriate remedial action.
For users between the ages of 13 and 16 (or the applicable age of digital consent in their state), we rely on the consent provided during the account registration process. We encourage parents and guardians to monitor their children's online activities and to contact us if they have any concerns regarding our data collection practices. Our SaaS platform is designed for enterprise use, and we assume that all users are authorized representatives of their respective organizations acting within the scope of their employment.
9. Changes to Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological advancements. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and provide notice of the changes on our website. We encourage you to review this policy periodically to stay informed about how we collect, use, and protect your personal information.
If we make material changes that significantly alter your rights or our data processing practices, we will provide more prominent notice, such as via email to registered users or a prominent banner on our website. Your continued use of our Services following the effective date of any changes constitutes your acknowledgment and acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you must cease using our Services and request the deletion of your account.
We will retain previous versions of this Privacy Policy for your reference. If you wish to obtain a copy of a prior version, or if you have questions regarding the specific changes made, you may contact our privacy team using the information provided below. We are committed to maintaining transparency in our data practices and ensuring that you are always aware of how your personal information is handled.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data collection and processing practices, please do not hesitate to contact us. We have designated a privacy team to handle all inquiries related to your personal information and to ensure compliance with applicable federal and state privacy laws. You can reach us through the following contact methods:
- Company: Nontronite
- Email: [email protected]
- Phone: +15161683850
- Mailing Address: One World Trade Center, 285 Fulton Street, New York, NY 10007, United States
For specific privacy rights requests, such as requests to know, delete, or opt-out, please use the contact information above and include "Privacy Rights Request" in the subject line. We will verify your identity before processing your request to ensure the security of your personal information. We are committed to resolving your inquiries promptly and in accordance with applicable legal timelines.
By providing this contact information, we aim to maintain an open line of communication with our users. Whether you are a California resident exercising rights under the California Consumer Privacy Act as amended by the CPRA, or a resident of another state utilizing rights under the Virginia Consumer Data Protection Act or Colorado Privacy Act, our team is available to assist you. We value your trust and are dedicated to protecting your privacy while delivering high-quality SaaS solutions.