1. Information We Collect
We may collect the following categories of information:
- Identity and Contact Data: name, company name, email address, phone number, job title, billing or notice address.
- Technical Data: IP address, browser type, device information, operating system, time zone, and high-level diagnostic data.
- Usage Data: page views, clicks, page timing, form interactions, and portal activity.
- Portal and Contract Data: invite acceptance status, account authentication events, signature timestamps, session context, proposal approvals, and billing workflow events.
- Billing and Transaction Data: payment method references, invoice status, subscription status, and payment processor metadata. We do not store raw full card numbers or card security codes.
2. How We Collect Information
We collect information in several ways:
- Directly from you when you fill out forms, request services, sign agreements, or use the client portal.
- Automatically through cookies, session storage, analytics tooling, logs, and standard web telemetry when you visit the site or portal.
- From service providers and counterparties such as payment processors, hosting providers, authentication providers, analytics tools, or client contacts acting on behalf of an organization.
3. How We Use Information
We use collected information for legitimate business and operational purposes, including to:
- Provide, secure, maintain, and improve our website, portal, and client services.
- Respond to inquiries, proposals, onboarding flows, and client support requests.
- Authenticate users, maintain contract and billing records, and verify electronic signatures or approvals.
- Monitor reliability, investigate abuse or incidents, and protect our infrastructure and users.
- Send operational, legal, billing, onboarding, and service communications.
4. Disclosure and Service Providers
We may disclose information to service providers and contractors that help us operate our business, including hosting providers, analytics vendors, email providers, authentication providers, domain/DNS vendors, cloud infrastructure vendors, and payment processors. We may also disclose information when required by law, to protect rights or safety, or in connection with a business transfer. We do not sell personal information for money.
5. Retention, Security, and Incident Handling
We retain information for as long as reasonably necessary for the purposes described in this policy, including contract administration, billing records, security monitoring, backup and restore operations, and legal compliance. We use commercially reasonable administrative, technical, and organizational measures to protect information, but no internet or cloud transmission can be guaranteed completely secure. If we identify a material security issue within Northline-managed scope that affects your information or systems, we will use commercially reasonable efforts to investigate and communicate next steps.
6. Your Choices and Contact
You may contact us to update account information, request correction of inaccurate information, or ask privacy questions. You may also manage cookie preferences where available and unsubscribe from non-essential marketing communications. Depending on your location and the context of our relationship, additional rights may apply under privacy law.
- General privacy contact: [email protected]
- Operational support contact: [email protected]