Privacy Policy

1. Information We Collect

Account Information

When you create an account or use the NarrowGateX platform, we collect:

• Name and job title
• Business email address
• Phone number (only if you choose to enable SMS notifications)
• Organization name and billing information
• Login credentials (passwords are stored in hashed form and never readable by us)

Platform Usage Data

As you use the platform, we collect data generated by your activity:

• Vendor, contract, invoice, and spend data you upload or enter
• Workflow actions, task completions, and in-app interactions
• Feature usage patterns and session information
• Device type, browser, and IP address for security and session management
• Log data including timestamps and error reports

SMS-Related Information

If you opt in to SMS notifications, we collect your mobile phone number solely for the purpose of delivering those notifications. SMS consent and phone numbers are not used for marketing and are not shared with third parties or affiliates for any marketing purpose.

2. How We Use Your Information

Platform Delivery

We use your information to operate the NarrowGateX platform, authenticate your account, process your data inputs, generate system insights, and provide support when you need it.

Transactional SMS Notifications

If you have opted in to SMS, we use your phone number to send transactional notifications related to your platform activity, such as contract renewal alerts, invoice anomalies, vendor updates, and workflow notifications. These messages are operational only. We do not send marketing or promotional SMS messages.

Security and Compliance

We use account and usage data to detect unauthorized access, investigate security incidents, and comply with applicable legal obligations.

Product Improvement

We use aggregated, non-identifiable usage data to understand how the platform is used and to improve features. This does not involve sharing identifiable data with third parties.

3. Data Sharing

We do not sell your personal information. We share data only as follows:

Infrastructure and Service Providers

We work with a limited set of third-party service providers (cloud hosting, database infrastructure, email delivery, analytics) that process data on our behalf under contractual obligations consistent with this policy. These providers are not permitted to use your data for their own purposes.

Legal Requirements

We may disclose information if required by law, court order, or to protect the rights, property, or safety of NarrowGateX, our users, or the public.

Business Transfers

If NarrowGateX is acquired or merges with another organization, your information may be transferred as part of that transaction. We will notify users in advance if this occurs.

4. Data Security

We apply industry-standard security practices to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No system is completely immune to breach, but we take our responsibility to protect your data seriously and will notify affected users in the event of a material incident.

5. Your Rights and Choices

Access and Correction

You can view and update your account information at any time from within the platform settings.

SMS Opt-Out

You can opt out of SMS notifications at any time by:

• Replying STOP to any SMS message you receive from us, or
• Disabling SMS notifications in your account settings within the platform

After opting out, you will not receive further SMS messages unless you re-enable notifications.

Account Deletion

To request deletion of your account and associated data, contact us at the address below. We will process deletion requests within 30 days, subject to any legal retention requirements.

Data Portability

You may request an export of your platform data by contacting us. We will provide a machine-readable copy of your data upon verified request.

6. Data Retention

We retain your account and usage data for as long as your account is active, plus a reasonable period after account closure to satisfy legal and business obligations. SMS opt-in records are retained as required to demonstrate compliance with applicable messaging regulations.

7. Children's Privacy

NarrowGateX is a B2B platform intended for use by business professionals. We do not knowingly collect information from individuals under the age of 18.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify users by email or in-app notification. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy, your data, or how to exercise your rights, contact us at: