Privacy Policy

1. Information We Collect

We collect information to provide, improve, and secure our Services.

1.1 Information You Provide Directly

• Account Information: name, email, phone number, organization/business name, user role, password.
• Billing & Payment Information: payment method, billing address, transaction history (processed by secure third-party processors).
• Project & Workspace Data: documents, files, notes, assignments, tasks, messages, and other data you upload or create.
• Support Requests: messages or attachments submitted to our support team.

1.2 Information Collected Automatically

When you use our Platform, we may collect:

• Device information (browser type, operating system, hardware details)
• Log data (IP address, pages visited, time/date, referring pages)
• Usage data (features used, interactions, user behavior)
• Cookies, web beacons, tracking pixels, and similar technologies

1.3 Information from Third Parties

We may receive information from:

• Authentication services (Google, Microsoft, etc.)
• Payment processors
• Partner institutions or enterprise customers
• Integrations (e.g., cloud storage, communication tools)

2. How We Use Your Information

We use the collected information to:

2.1 Provide and Operate the Platform

• Authenticate users
• Deliver core SaaS features
• Enable collaboration between team members
• Store and process project content

2.2 Improve the Service

• Analyze usage trends
• Recommend corrections
• Develop new features
• Conduct troubleshooting and performance optimization

2.3 Communicate With You

• Account updates and notifications
• Security alerts
• Customer support responses
• Marketing communications (opt-out available)

2.4 Protect Users and the Platform

• Prevent fraud, abuse, and security incidents
• Enforce Terms & Conditions
• Comply with legal obligations

3. Legal Bases for Processing (GDPR)

If you are located in the EU or UK, we process your data under the following legal bases:

• Contract Fulfillment: to deliver the Service you subscribed to.
• Legitimate Interests: service improvement, security, analytics.
• Consent: marketing communications, non-essential cookies.
• Legal Compliance: responding to lawful data requests.

4. How We Share Information

We do not sell your personal information.

We may share your data with:

4.1 Service Providers — trusted vendors assisting with:

• cloud hosting
• payment processing
• analytics
• customer support
• communication tools
• authentication services

4.2 Enterprise or Institutional Administrators — if you use an enterprise, organization, or university account, administrators may access:

• user lists
• usage data
• project/workspace content (depending on access settings)

4.3 Legal or Security Requirements — we may disclose information to:

• comply with laws or lawful requests
• detect or prevent fraud or security threats
• protect the rights and safety of users or the platform

4.4 Business Transfers — if our company undergoes a merger, acquisition, restructuring, or sale of assets, your information may be transferred.

5. Cookies & Tracking Technologies

We use cookies to:

• remember user preferences
• keep you logged in
• analyze usage
• personalize experiences
• improve platform performance

You can control cookies through your browser settings.

6. Data Retention

We retain your data for as long as:

• your account remains active, or
• necessary to provide the Services, or
• required by law.

Upon account closure, data may be:

• deleted,
• anonymized, or
• retained for legal or compliance purposes.

You may request deletion at any time (see section 9).

7. Data Security

We use industry-standard measures to protect your data, including:

• encryption in transit and at rest
• access controls and role-based permissions
• intrusion detection
• routine audits and vulnerability testing
• secure development practices

However, no system is 100% secure, and we cannot guarantee absolute protection.

8. International Data Transfers

Your data may be transferred to and stored on servers located in other countries. We use approved mechanisms such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Protective contractual and organizational measures

9. Your Rights (GDPR, CCPA, and Others)

Depending on your region, you may have the right to:

• Access your data
• Correct inaccurate information
• Request deletion (“right to be forgotten”)
• Limit or object to processing
• Port your data to another provider
• Opt out of marketing communications
• Opt out of sale/sharing of data (we do not sell data)
• Withdraw consent at any time

To exercise your rights, email us at: contact@nduproject.com

10. Children’s Privacy

The Service is not intended for children under 16 unless access is provided through an educational institution with appropriate consent.

We do not knowingly collect data from children without proper authorization.

11. Third-Party Links

Our Platform may contain links to third-party websites.

We are not responsible for their privacy practices.

12. Changes to This Privacy Policy

We may update this Policy from time to time. We will notify users of significant changes through:

• email notifications,
• in-app alerts, or
• posting an updated version online.

Continued use of the Service constitutes acceptance of the updated Policy.

13. Contact Information

If you have questions or requests related to privacy, contact us at:

• Company: Ndu Project
• Email: contact@nduproject.com
• Website: www.nduproject.com