Privacy Policy

1. Scope

This Privacy Policy applies to:

• visitors to nfact.com and users of the nFACT platform and related services (the "Service"); and
• individuals whose business contact information appears in the nFACT directory of service-provider companies, whether or not they have created an account.

For personal information covered by this Privacy Policy, nFACT is the controller. Use of the Service is also governed by our Terms and Conditions.

2. Information We Collect

2.1 Information you provide. When you create an account, claim or edit a profile, or use the Service, you may provide:

• account information, such as name, work email address, phone number, company, job title, and password;
• profile content, such as company details, service lines, service areas, licenses, certifications, insurance information, and business contact details for people at your company;
• documents you upload, such as certificates of insurance, Forms W-9, licenses, and safety records;
• communications with us and messages sent through the Service; and
• billing and payment information.

2.2 Information collected automatically. When you use the Service, we collect device and usage information, such as IP address, browser type, device identifiers, pages viewed, time spent, searches, features used, and referring URLs, through cookies and similar technologies.

2.3 Information from other sources. To build and maintain the directory, we collect information from:

• public sources, such as company websites, state licensing boards, and business registries, including company names, addresses, websites, service lines, and licenses;
• commercial business-data providers, including the business contact information of people who work at service-provider companies, such as name, job title, work email address, and work phone number;
• trade association partners, including the membership and certification status of companies and individuals; and
• customers of the Service, who may record their relationships with service providers and information about them.

2.4 Business information only. The directory contains business contact information. We do not seek home addresses, personal phone numbers, or sensitive personal information, such as health information or government identification numbers, other than taxpayer identification information that a service provider chooses to submit on a Form W-9.

3. How We Use Information

We use the information described above to:

• operate and provide the Service, including the directory and marketplace that let buyers find, evaluate, and contact service providers;
• verify companies, licenses, insurance, certifications, and association memberships;
• provide compliance tracking and document management;
• create and manage accounts, process payments, and provide support;
• send service messages, such as account notices, compliance reminders, invitations, and notifications;
• send business communications about the Service, subject to the choices described in Section 7;
• develop, train, and improve the Service and its AI features, using de-identified and aggregated data as described in our Terms and Conditions;
• display advertising and sponsored listings from third parties on the Service, using only aggregated and de-identified data to select, place, and measure them, as described in our Terms and Conditions;
• protect the security and integrity of the Service, prevent fraud and misuse, and enforce our Terms and Conditions; and
• comply with legal obligations.

4. Legal Bases for Processing

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal information on the following legal bases:

• Legitimate interests, to operate a business directory and marketplace for the trades, verify companies and credentials, secure and improve the Service, and send business communications. We balance these interests against your rights and offer the choices described in Section 7.
• Contract, to provide the Service to account holders.
• Consent, where the law requires it. You may withdraw consent at any time.
• Legal obligation, where we must process information to comply with law.

5. How Information Is Shared and Displayed

5.1 Users of the Service. Service-provider profiles, including the business contact information on them, are visible to signed-in buyers and to authorized personnel of our trade association partners. Service providers who sign in see only their own company's profile. Public, signed-out pages display limited company information, such as company name, location, service lines, and the name of the company's chief executive, and do not display individuals' email addresses or phone numbers, except contact details a person or company has provided to nFACT for publication, such as contact information in press releases, media contacts, and nFACT staff contact details. Documents a service provider uploads are visible as the provider's settings and the features of the Service allow.

5.2 Trade association partners. We display the membership and certification status that our trade association partners supply. We may provide those partners with reports about their own members, with lists of service-provider companies for the partner’s membership outreach, and with aggregated or de-identified reports.

5.3 Service providers. We share information with vendors that host, store, process, deliver email, process payments, provide analytics, or support the Service for us. They must protect the information and use it only to provide services to nFACT.

5.4 Legal and safety. We may disclose information to comply with law, legal process, or government requests, and to protect the rights, property, or safety of nFACT, our users, or others.

5.5 Business transfers. Information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of assets.

5.6 At your direction. We share information when you direct us to or consent.

We do not sell or rent contact lists to list brokers or marketers.

6. How Users May Use Directory Information

Users of the Service may use directory and contact information only for legitimate business purposes connected to finding, evaluating, engaging, and managing subcontractors and trade partners, or, for trade association partners, for the association’s member services and membership outreach. Our Terms and Conditions prohibit users from selling, sharing, or scraping directory information. Each user is responsible for its own communications and for complying with applicable email, telemarketing, and privacy laws when it contacts anyone it finds through the Service.

7. Your Choices

• Claim your company's profile. Service providers can claim and update their company's profile at no cost at nfact.com/check-your-listing.
• Correct or remove your contact details. Email admin@nfact.com to ask us to correct your business contact details or remove them from the directory. When we remove your details, we add you to a suppression list so you are not added back from another source. Removing an individual's contact details does not remove the company's business listing.
• Email. Every marketing email from nFACT includes an unsubscribe link. You will continue to receive service messages related to your account.
• Text messages. You can stop SMS messages by replying STOP, as described in our Terms and Conditions.
• Cookies. You can set your browser to refuse cookies or to alert you when cookies are sent. Some parts of the Service may not work without them.

8. Your Privacy Rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• receive a portable copy of your information;
• restrict or object to processing, including processing based on legitimate interests;
• withdraw consent where processing is based on consent; and
• opt out of certain processing, as provided by applicable law.

European Economic Area, United Kingdom, and Switzerland. You may also lodge a complaint with your local data protection authority.

Canada. You may access and correct your personal information and withdraw consent, subject to legal and contractual restrictions. We send commercial electronic messages to recipients in Canada in accordance with Canada's Anti-Spam Legislation.

United States. Residents of states with consumer privacy laws may exercise the rights those laws provide. We will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request, and you may appeal a decision on your request by replying to our response.

How to make a request. Email admin@nfact.com. We verify requests by confirming them through the email address associated with the information. We respond within the time required by applicable law, generally within 30 days, or within 45 days where state law allows.

9. Data Retention

We keep account information while your account is active and afterward as needed for legal, tax, audit, and dispute purposes. We keep directory information while it remains reasonably current and relevant, and we review directory records at least annually to update or remove outdated information. We keep suppression records for as long as needed to honor opt-out and removal requests.

10. Security

We use administrative, technical, and physical safeguards to protect personal information, including encryption in transit and at rest, role-based access controls, and access logging. No method of transmission or storage is completely secure. We will notify affected individuals and authorities of a security incident as required by law.

11. International Transfers

nFACT is based in the United States. Information is processed in the United States and in other countries where our service providers operate. Where required, we use appropriate safeguards, such as standard contractual clauses, for transfers of personal information.

12. Children

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. For material changes, we will provide notice by email or within the Service.

14. Contact Us

nFACT, Inc., 3839 McKinney Avenue, Suite 155, Dallas, TX 75204