Privacy Policy
This policy describes how Needs Assessment Portal (we, us, our) collects, uses and shares personal data when you use our services.
Summary
We collect the minimum personal data necessary to provide and improve our services. We never sell personal data. We implement industry-standard safeguards and provide controls for customers to manage their data and privacy preferences.
Data we collect
- Account data: name, email, organization, role, profile details.
- Usage data: logs, pages visited, actions performed, timestamps, IP addresses.
- Content data: needs assessment records, attachments, comments and metadata uploaded by you or your organization.
- Support and billing: support requests, customer success notes, billing addresses and invoices.
- Third-party data: data from connectors or integrations you enable (e.g., SSO providers).
How we use your data
- To provide, maintain, and operate the platform.
- To authenticate users, manage accounts and permissions.
- To respond to support requests and communicate product updates.
- To analyze usage and improve product features and performance.
- For billing, legal and security purposes.
Security
We implement administrative, technical and physical safeguards such as encryption in transit (TLS), role-based access controls, audit logging, vulnerability management, and regular security reviews. Access to customer content is limited to authorized personnel under confidentiality obligations.
Data retention
We retain personal data as long as necessary to provide services, meet legal obligations, resolve disputes, and enforce agreements. Customers can request deletion or export of their organization data; see the Your rights section.
Your rights
- Access: request a copy of your personal data.
- Correction: ask us to correct inaccurate or incomplete data.
- Deletion: request removal of personal data where permitted by law.
- Portability: request a machine-readable export of your data.
- Restrict or object: where applicable, object to certain processing activities.
To exercise rights, contact us using the details below. We may require verification and will respond in accordance with applicable law.
Children
Our services are intended for business and professional use. We do not knowingly collect or solicit personal information from children under 16. If you believe we have data about a child, contact us to request deletion.
Changes to this policy
We may update this policy periodically. Material changes will be communicated via email (if applicable) or posted with a revised effective date. We recommend checking this page regularly.