Privacy Policy
Last updated: January 2026. Effective date: January 1, 2026.
Last updated: January 2026. Effective date: January 1, 2026.
NetChangeGuardAI ("Company," "we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services (collectively, the "Service").
Please read this Privacy Policy carefully. By accessing or using NetChangeGuardAI, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy. If you do not agree with our practices, please do not use our Service.
When you create an account, we collect your name, company name, email address, phone number, job title, and password. You may also provide optional information such as company size, industry, and use case description.
To provide our Service, we collect network topology data, device configurations, and change request information you input into our platform. This includes device names, IP addresses, vendor types, configuration changes, and approval workflow details—but excludes sensitive credentials and passwords, which are encrypted separately.
We automatically collect information about your interactions with our platform: pages visited, features used, time spent, errors encountered, and performance metrics. This helps us improve the Service and understand customer needs.
We collect device information: IP address, browser type, operating system, device identifiers, and HTTP request headers. This information helps us optimize the Service for different devices and detect security threats.
We use cookies, web beacons, and similar tracking technologies to remember your preferences, understand usage patterns, and detect fraud. You can control cookie preferences through your browser settings.
When you contact us via email, phone, or chat, we collect your message content, contact information, and our response. We maintain these communications for customer service, dispute resolution, and record-keeping purposes.
We share your information with vendors who provide essential services: cloud hosting providers, payment processors, customer support platforms, and analytics tools. These providers are contractually bound to use your information only as necessary to provide services.
We may disclose your information when required by law (subpoena, court order, law enforcement request) or when we believe disclosure is necessary to protect our rights, your safety, or others' safety.
If NetChangeGuardAI is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
We may share anonymized, aggregated data with partners, researchers, and the public. This data cannot reasonably identify you and may be used for industry benchmarking, research, and market analysis.
We will not share your personal information with third parties for marketing purposes unless you explicitly consent. You can withdraw this consent at any time.
We implement industry-standard security controls: AES-256 encryption at rest, TLS 1.3 encryption in transit, regular penetration testing, and vulnerability assessments. Access to customer data is restricted to authorized personnel with need-to-know basis.
NetChangeGuardAI maintains SOC 2 Type II, FedRAMP authorization, HIPAA compliance, and PCI DSS compliance. We undergo regular third-party audits to validate our security posture.
Our infrastructure is hosted on secure, certified data centers with physical access controls, biometric authentication, 24/7 monitoring, and redundant systems for disaster recovery.
In the event of a data breach, we follow responsible disclosure practices: immediate investigation, mitigation of damage, notification of affected individuals within legally required timeframes, and cooperation with regulatory authorities.
While we implement reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your information. You use our Service at your own risk.
Upon account termination, we will delete your account information and network data according to your retention settings, unless required by law to retain. You may request data deletion at any time by contacting us.
You have the right to access your personal information. You can download a copy of your data through your account settings or by contacting us.
You can correct inaccurate or incomplete information through your account settings. Contact us if you need assistance updating your information.
You may request deletion of your personal information, subject to legal retention obligations. Some data may be retained in anonymized form for research and analytics.
You have the right to receive your personal information in a portable, machine-readable format. We will provide this within 30 days of request.
You may object to our processing of your information for certain purposes, particularly marketing or analytics. We will honor your request and will not process for those purposes.
To exercise any of these rights, contact us at [email protected]. We will verify your identity and respond within 30 days. You will not be charged a fee unless your request is excessive.
Our primary data centers are located in the United States. If you are outside the US, your information will be transferred to and stored in the US. By using our Service, you consent to this transfer.
For EU residents, we process personal data under the legal basis of our legitimate business interests or your consent. We comply with GDPR requirements including data protection impact assessments and implement standard contractual clauses for international transfers.
Enterprise customers can request data storage in specific regions (EU, Asia-Pacific) for an additional fee. Contact our sales team for regional infrastructure options.
NetChangeGuardAI is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information and terminate the child's account.
We may update this Privacy Policy periodically. We will notify you of material changes via email or by posting the updated policy on our website. Your continued use of our Service after changes become effective constitutes your acceptance of the updated policy. We recommend reviewing this policy regularly.
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:
If you are a California resident, you have additional privacy rights under CCPA:
To submit a CCPA request, email [email protected] with "CCPA Request" in the subject line. Provide sufficient information to verify your identity. We will respond within 45 days.