Privacy Policy
Last Updated: September 2026
This Privacy Policy ("Policy") describes how Nealite ("we," "us," or "our") collects, uses, discloses, retains, and safeguards personal information in connection with nealite.xyz, accessible at nealite.xyz, and all related software, applications, platforms, features, and services (collectively, the "Services"). Nealite is a software-as-a-service provider that processes personal information both as a business (in respect of our own customers, prospects, and website visitors) and, in certain circumstances, as a service provider or processor on behalf of our enterprise customers. This Policy is incorporated by reference into, and forms an integral part of, our Terms of Service available at terms-service.php, and should be read together with our Cookie Policy available at cookies_terms.php.
By accessing, registering for, or otherwise using the Services, or by submitting personal information to us, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree with any part of this Policy, you must discontinue use of the Services. Where we process personal information on behalf of a business customer, that customer is the controller of the information and we act on its documented instructions; in such cases, you should direct privacy inquiries to that customer, and any conflict between this Policy and our data processing agreement will be resolved in favor of the data processing agreement.
We adopt this Policy in accordance with applicable United States law, including the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act, Cal. Civ. Code § 1798.100 et seq., the California Online Privacy Protection Act, Cal. Bus. & Prof. Code § 22575, the Children's Online Privacy Protection Act, 15 U.S.C. § 6501 et seq., the Wiretap Act / Electronic Communications Privacy Act, 18 U.S.C. § 2511, and comparable comprehensive privacy statutes enacted in Virginia, Colorado, Connecticut, Utah, Texas, and other states. This Policy is provided electronically and is intended to satisfy applicable notice requirements under the E-SIGN Act, 15 U.S.C. § 7001.
1. Information We Collect
Categories of Personal Information
We collect the following categories of personal information, which correspond to the categories defined under the CCPA as amended by the CPRA, now codified at Cal. Civ. Code § 1798.100 et seq.: identifiers (such as name, email address, postal address, telephone number, account credentials, and IP address); customer record information (such as billing address and payment-related details); commercial information (such as subscription tier, purchase and renewal history, and service usage); internet or other network activity (such as browsing history on our properties, interaction with our interfaces, and device or log data); geolocation data (limited to approximate location derived from IP address); professional or employment-related information (such as employer name, job title, and business contact details); and inferences drawn from the foregoing to create a profile reflecting preferences, behavior, or likely interest in our Services.
Information You Provide Directly
We collect information you voluntarily submit when you create an account, configure your workspace, subscribe to a paid plan, submit a support ticket, participate in a survey, request a demonstration, register for a webinar, or otherwise communicate with us. This includes account registration details, authentication credentials, billing and invoicing details, configuration and provisioning data, the content of your communications with us, and any files, records, or datasets you upload to the Services. You are responsible for ensuring that any personal information you submit about third parties has been collected and disclosed in accordance with applicable law.
Information Collected Automatically
When you interact with the Services, we and our authorized third-party partners automatically collect technical and usage information through cookies, pixels, software development kits, log files, and similar technologies. This information may include your IP address, browser type and version, operating system, device type and unique identifiers, referring and exit URLs, pages viewed, features used, session duration, clickstream data, timestamps, and error diagnostics. We use this information to operate, secure, troubleshoot, and improve the Services, and to understand aggregate usage patterns.
Information from Third Parties
We may receive personal information from identity and single sign-on providers, payment processors, fraud-prevention and security vendors, marketing and analytics partners, channel partners and resellers, and publicly available or commercially licensed sources. Where required, we will provide a Notice at Collection at or before the point of collection that identifies the categories of personal information collected, the purposes of collection, and whether the information is sold or shared, consistent with Cal. Civ. Code § 1798.100(a).
2. How We Use Your Information
We use personal information to provide, maintain, and operate the Services; to create and administer accounts; to process payments and manage subscriptions; to authenticate users and enforce access controls; to personalize and improve the Services; to communicate with you about service updates, security alerts, and administrative matters; to respond to inquiries and provide customer support; to detect, investigate, and prevent fraud, abuse, and security incidents; to comply with legal, tax, and regulatory obligations; and to establish, exercise, or defend legal claims. We may also use personal information to send marketing communications where permitted by law, subject to your right to opt out at any time.
We do not use personal information for purposes that are materially different, unrelated, or incompatible with the purposes disclosed at collection without first providing notice and, where legally required, obtaining your consent. Where we rely on consent as a basis for processing, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Retention periods vary based on the nature of the information and the context of collection; for example, account records are generally retained for the duration of the customer relationship plus any applicable statutory limitation period, while server logs are retained for a shorter security-focused window. We may deidentify or aggregate personal information so that it can no longer reasonably be linked to an identifiable individual, in which case we will maintain it in deidentified form and will not attempt to reidentify it, consistent with Cal. Civ. Code § 1798.140(m).
3. Information Sharing
We disclose personal information to the categories of recipients described below, for the business and commercial purposes set out in this Policy. We do not disclose personal information to third parties for their own independent marketing purposes without your direction or consent.
Service Providers and Contractors
We share personal information with vendors that perform services on our behalf, including cloud hosting and infrastructure providers, payment processors, email and communication providers, analytics providers, customer support platforms, and professional advisors. These entities are bound by written contracts that limit their use of personal information to the performance of services for us and require them to provide at least the same level of privacy protection as required by applicable law, consistent with the requirements applicable to service providers and contractors under Cal. Civ. Code § 1798.140(ag) and (j).
Sale and Sharing of Personal Information
Certain disclosures of personal information to advertising, analytics, or marketing partners may constitute a "sale" or "sharing" for cross-context behavioral advertising under the CCPA as amended by the CPRA, now codified at Cal. Civ. Code § 1798.100 et seq. You have the right to opt out of such sale or sharing at any time by contacting us at [email protected] or by using the opt-out mechanism described in our Cookie Policy. We do not sell or share the personal information of consumers we know to be under sixteen (16) years of age without affirmative authorization, and we do not sell sensitive personal information.
Business Transfers, Legal Requirements, and Aggregated Data
We may disclose personal information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case we will require the recipient to honor this Policy or provide notice of any material change. We may also disclose personal information where we believe in good faith that disclosure is necessary to comply with applicable law, regulation, subpoena, or court order; to protect the rights, property, or safety of Nealite, our users, or the public; or to investigate and remedy violations of our Terms of Service. We may share aggregated or deidentified information that cannot reasonably be linked to an identifiable individual.
4. Cookies and Tracking
We use cookies and similar tracking technologies, including strictly necessary cookies, functional cookies, analytics cookies, and advertising cookies. Strictly necessary cookies are required for the Services to function and cannot be disabled through our consent interface. For a complete description of the cookies we use, their purposes, and their retention periods, please review our Cookie Policy at cookies_terms.php, which is consistent with the requirements of the California Online Privacy Protection Act, Cal. Bus. & Prof. Code § 22575.
We and our third-party partners may use analytics and advertising technologies that collect information about your activity across the Services and, in some cases, across third-party websites and applications. Such tracking may implicate the Wiretap Act / Electronic Communications Privacy Act, 18 U.S.C. § 2511, and analogous state wiretapping and invasion-of-privacy statutes. Accordingly, we do not permit non-essential tracking technologies to be deployed on our properties before obtaining the consents required by applicable law, and we honor opt-out preference signals where required. Decisions such as Van v. Zoo and In re Google Analytics underscore the importance of informed, specific consent for such tracking, and we seek to align our practices with those expectations.
You may control cookies through your browser settings and through any consent management tool we make available. Disabling certain cookies may impair the functionality of the Services. We recognize opt-out preference signals, including the Global Privacy Control, where required by law, and we treat such signals as a valid request to opt out of sale or sharing of personal information for the browser or device from which the signal is sent, consistent with the mandatory recognition requirements applicable in Colorado and similar state frameworks.
5. Your Rights and Choices
California Privacy Rights
If you are a California resident, you have the right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it; the right to request deletion of personal information, subject to statutory exceptions; the right to request correction of inaccurate personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; and the right not to be discriminated against for exercising these rights. These rights are conferred by the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act, Cal. Civ. Code § 1798.100 et seq.
Other State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy legislation may have rights to confirm whether we process their personal information, to access and obtain a copy of that information, to correct inaccuracies, to delete personal information, to obtain a portable copy, and to opt out of targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects. Where applicable, you may appeal our decision on a privacy request by replying to our determination with the subject line "Privacy Appeal"; we will respond in writing within the period required by applicable law.
How to Exercise Your Rights
To exercise any right described in this Policy, submit a request to [email protected] or call +18281066554. You may also designate an authorized agent to submit a request on your behalf, provided that the agent is registered with the applicable Secretary of State where required and that you provide written permission or verifiable authorization. We will confirm receipt within ten (10) business days and respond to verifiable consumer requests within forty-five (45) days, subject to a permissible extension where reasonably necessary.
Verification and Non-Discrimination
We may verify your identity before fulfilling a request by matching the information you provide against our records. Where we cannot verify your identity with reasonable certainty, we may deny the request and explain the basis for denial. Information collected for verification purposes is used solely for that purpose and is deleted thereafter. We will not deny goods or services, charge different prices, provide a different level of quality, or retaliate against you for exercising your privacy rights, subject to the limited exceptions permitted by law.
Marketing and Communication Choices
You may opt out of marketing emails by using the unsubscribe link contained in each message or by contacting us at [email protected]. We will continue to send transactional and administrative messages where necessary to operate your account. You may also update or correct your account information by signing into the Services.
6. Data Security
We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or misuse. These measures include encryption in transit, access controls and role-based permissions, network monitoring and intrusion detection, secure development practices, vendor due diligence, incident response procedures, and periodic security assessments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any suspected unauthorized access. In the event of a security incident involving personal information, we will notify affected individuals and regulators as required by applicable state breach-notification statutes and other applicable law.
To the maximum extent permitted by applicable law, and without limiting any non-waivable rights, our liability arising out of or relating to the security of personal information is limited as set forth in our Terms of Service at terms-service.php, including any limitation of liability, warranty disclaimer, and indemnification provisions contained therein, which apply equally to this Policy.
7. International Data Transfers
Nealite is headquartered in the United States, and the personal information we collect is generally stored and processed on servers located in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction and may not provide the same level of protection.
Where we transfer personal information from the European Economic Area, the United Kingdom, Switzerland, or other jurisdictions with transfer restrictions, we implement appropriate safeguards, which may include standard contractual clauses, supplementary technical and organizational measures, and vendor assessments, in each case as required by applicable law and subject to your rights as described in this Policy.
By using the Services, you consent to the transfer and processing of your personal information as described in this section, to the extent such consent is recognized under applicable law. You may contact us at [email protected] for more information about the safeguards we use.
8. Children's Privacy
The Services are intended for business and professional use and are not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under thirteen (13) in violation of the Children's Online Privacy Protection Act, 15 U.S.C. § 6501 et seq., or the Amended COPPA Rule, 16 C.F.R. Part 312 (2025 amendments in effect). If you are under thirteen (13), you may not create an account or use the Services.
If we learn that we have collected personal information from a child under thirteen (13) without verifiable parental consent, we will delete that information promptly. Parents or guardians who believe that a child under thirteen (13) has provided personal information to us may contact us at [email protected] to request access to, or deletion of, that information, and to request that we cease further collection or use.
Where the Services are used by a school, district, or educational institution, we process student data solely as a service provider at the direction of that institution and consistent with the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, and applicable state student privacy laws. For users between thirteen (13) and eighteen (18), we do not sell or share personal information without affirmative authorization, as required by Cal. Civ. Code § 1798.120(c).
9. Changes to Policy
We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Material changes will be communicated through the Services, by email, or by other prominent notice prior to the effective date of the change, where required by law.
Your continued use of the Services after the effective date of a revised Policy constitutes your acceptance of the revisions, to the extent permitted by applicable law. This Policy and any revisions are provided to you electronically, and you agree that electronic delivery satisfies any requirement that communications be in writing, consistent with the E-SIGN Act, 15 U.S.C. § 7001, and applicable state adoptions of the Uniform Electronic Transactions Act.
If any provision of this Policy is found to be unenforceable, the remaining provisions will remain in full force and effect. Our failure to enforce any provision of this Policy does not constitute a waiver of that or any other provision. This Policy is governed by the laws of the jurisdiction specified in our Terms of Service, without regard to conflict-of-law principles. Copies of prior versions of this Policy may be requested at [email protected].
10. Contact Information
If you have questions, concerns, or requests regarding this Policy or our handling of your personal information, please contact us using the details below. We are committed to resolving privacy complaints promptly and transparently.
- Company: Nealite
- Email: [email protected]
- Phone: +18281066554
- Address: 415 Mission Street, San Francisco, CA 94105, United States
For California residents, requests to know, delete, correct, or opt out of the sale or sharing of personal information may be submitted using the contact details above. Please include sufficient detail to allow us to identify and verify your request, such as your full name, email address associated with your account, and the specific right you wish to exercise.
If you are a resident of a state with comprehensive privacy legislation and are unsatisfied with our response, you may contact your state Attorney General or the applicable supervisory authority. We will cooperate with the relevant authorities in resolving any unresolved complaints. This Policy does not create any rights for third parties, and no provision of this Policy should be construed as a waiver of any right or remedy available to Nealite under applicable law.