Privacy notice
What we collect, why, and how we protect it.
Nanicto LLC is registered in the United States, with its registered address in Albuquerque, New Mexico. This notice explains what personal information we collect through this website and our services. It also says what you can ask us to do with it.
What we collect
We collect what you give us and what the service needs.
Messages and requests
The name, email address, phone number, organisation, and message you send us, including an incident callback request.
Service information
System details, account names and error messages that we need to do an agreed piece of work. We collect this only during a session you start or agree to, and only for the scope you approved.
Payment information
We do not collect or store payment card numbers. We keep the payment status of your job or plan (for example, whether a check or ACH payment has cleared).
Website
This website does not use advertising trackers. If we switch on analytics, this notice will list it before it is turned on.
Why we use it
We use it to reply to you, to do the work you approved, and to keep records the law requires.
We use personal information to answer your request, carry out the scope you approve, and bill and refund as our refund policy sets out. We also use it to support you and to meet our legal duties. We do not use it for advertising.
Who sees it
We do not sell personal information.
We share information only with service providers that help us run the business, such as hosting, email and ticketing. Their contracts limit how they use it. Our affiliated teams and partners, including partners in India, may access personal information to deliver services, under the same security and confidentiality controls. We share information where the law requires it.
How it is protected
How we protect your information.
In transit
Encrypted connections (TLS) for the website and for remote sessions.
Access
Access is limited to what each person needs, with multi-factor sign-in for staff accounts.
Monitoring and response
Activity is logged, and we have a written plan for responding to a security incident.
Remote sessions
You see each action on your screen, and the session ends when you close it. We do not keep access after the session.
How long we keep it
We keep it only as long as the service and the law need.
We keep records for as long as they are needed to deliver the service, handle a refund or dispute, and meet legal retention duties. When a record is no longer needed, we delete it or de-identify it.
Your choices
You can ask what we hold, correct it, or ask us to delete it.
Email hello@nanicto.com to ask what we hold about you, to correct it, or to ask us to delete it. We will respond within the time the law that applies to you requires. Residents of states with privacy laws, and people in Canada, have the rights set by those laws. Where a law requires it, we will tell you how to make a complaint.
Breaches
What we do if your information is exposed.
If a security incident affects personal information, we notify the people affected. We also notify authorities where the law requires it, within the time that law sets.
Children and changes
Not for children. We will tell you about changes.
This website and our services are not aimed at children under 13, and we do not knowingly collect their information. If we change this notice in a way that matters, we will post the change here and state its date.
Questions about privacy go to hello@nanicto.com.