Privacy Policy
Last Updated: September 2026
This Privacy Policy describes how Niterite ("we," "us," or "our") collects, uses, discloses, and protects personal information when you access or use our software-as-a-service (SaaS) platform, website located at niterite.org, and related services (collectively, the "Services"). By accessing or using the Services, you expressly consent to the data practices described in this Privacy Policy. As a provider of SaaS solutions, we understand the critical importance of data security and privacy, and we design our Services with privacy in mind.
The United States does not have a single federal omnibus privacy statute. Instead, our data practices are governed by a patchwork of federal sectoral laws—including the Health Insurance Portability and Accountability Act (HIPAA) where applicable, and the Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6801-6809 (GLBA) for financial institutions—and a rapidly growing framework of state comprehensive privacy laws. We adhere to the notice-and-choice model prevalent in the US, providing you with meaningful notice of our practices and offering choices regarding how your personal information is used. Where required by specific state laws, we provide enhanced rights and disclosures as outlined below.
This policy applies to all users of our Services, including visitors, registered users, and authorized customer administrators. If you are a user accessing our Services through your employer or another organization, that organization is the controller of your data, and we act as a processor on their behalf. In such cases, please direct your privacy inquiries to your employer's privacy or IT department. This Privacy Policy should be read in conjunction with our Terms of Service and our Cookie Policy.
1. Information We Collect
We collect various types of personal information to provide, maintain, and improve our SaaS platform. The specific categories of information we collect depend on how you interact with our Services. We collect information directly from you when you create an account, subscribe to our Services, or communicate with our support team. This typically includes personal identifiers such as your first and last name, email address, business address, phone number, and professional title. We also collect payment and billing information, such as credit card numbers and billing addresses, which are processed securely through third-party payment gateways in compliance with the Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6801-6809 (GLBA) for financial institutions, where applicable.
In addition to information you provide directly, we automatically collect certain technical and usage data when you access or use our Services. This includes Internet Protocol (IP) addresses, browser type and version, time zone settings, operating system, and platform. We also collect log data, which records how you interact with our platform, including the pages you visit, the time and date of your visit, the time spent on individual pages, and page interaction statistics. This information is essential for maintaining the security of our platform, troubleshooting technical issues, and understanding user behavior to optimize our Services.
Furthermore, we may receive information from third parties, such as marketing partners or data enrichment services, to enhance the data we hold about your organization or to provide you with a more tailored experience. If you use third-party integrations or APIs in connection with our SaaS platform, we may receive information from those third parties. We only collect personal information that is relevant and necessary for the purposes outlined in this Privacy Policy, adhering to the data minimization principles encouraged by the Federal Trade Commission Act § 5, 15 U.S.C. § 45 (FTC Act — unfair/deceptive practices).
2. How We Use Your Information
Niterite uses the personal information we collect for various business purposes, primarily to facilitate the provision of our SaaS Services to you. We use your account information to create and manage your user profile, authenticate your identity, and grant you access to the appropriate features of our platform. Your contact information is used to communicate with you regarding your account, including sending you service announcements, technical notifications, security alerts, and administrative messages. We also use your information to process transactions, manage subscriptions, and send you related billing and invoice information in compliance with the Restore Online Shoppers' Confidence Act, 15 U.S.C. §§ 8401-8405 (ROSCA).
Beyond operational necessities, we use your personal information to improve and optimize our Services. We analyze usage data and log information to understand how users navigate and utilize our platform, allowing us to identify trends, measure user engagement, and diagnose technical issues. This analysis helps us develop new features, enhance existing functionality, and personalize your experience. We may also use your information to provide customer support, respond to your inquiries, and address any complaints or issues you may have regarding our Services.
We may also use your personal information for security, legal, and compliance purposes. We monitor and analyze usage patterns to detect, prevent, and address technical issues, fraud, and other malicious activities. We use your information to enforce our Terms and Conditions, protect our legal rights, and comply with applicable laws and legal processes. In certain circumstances, we may use your information to provide you with marketing and promotional communications about our Services. Where required by law, we will obtain your opt-in consent before sending such communications, and you may opt out at any time.
3. Information Sharing
We do not sell your personal information to third parties for monetary consideration. However, we may share your personal information with specific categories of third parties to facilitate our business operations and provide our Services. We share information with our service providers, vendors, and contractors who perform services on our behalf, such as hosting providers, cloud infrastructure services, analytics providers, and customer support platforms. These service providers are contractually obligated to protect your personal information and are prohibited from using it for any other purpose.
We may also share your personal information with our affiliates and subsidiaries, provided that they adhere to the privacy and security standards outlined in this Privacy Policy. In the event of a merger, acquisition, reorganization, bankruptcy, or other change of corporate control, we may transfer your personal information to the acquiring or successor entity. We will notify you via email or a prominent notice on our website of any such change in ownership or control of your personal information.
Additionally, we may disclose your personal information if we believe it is necessary to comply with applicable laws, regulations, legal processes, or governmental requests. This includes disclosures to law enforcement agencies, courts, or regulatory authorities when required by law, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. We may also share information to enforce our Terms of Service, which are governed by principles derived from the Uniform Commercial Code (UCC) Article 2 as adopted by the states and the Uniform Computer Information Transactions Act (UCITA, adopted only in MD/VA/LA) where applicable. Furthermore, we share information as necessary to comply with the SAFE WEB Act permanently reauthorized 2015 (21st Century DOJ/Apps Act-era codification, 15 U.S.C. § 8401 note) for cross-border fraud prevention.
4. Cookies and Tracking
niterite.org uses cookies, web beacons, pixels, and other tracking technologies to operate, maintain, and improve our website and SaaS platform. Cookies are small data files stored on your device that allow us to recognize you and remember your preferences. We use essential cookies that are necessary for the basic functionality of our website, such as enabling you to log in to secure areas or remember items in your shopping cart. We also use analytics and performance cookies to understand how visitors interact with our website, allowing us to gather statistics and improve site performance.
We may use advertising and targeting cookies to deliver relevant advertisements and marketing communications to you. Under the California Consumer Privacy Act as amended by CPRA — 'Do Not Sell or Share My Personal Information' / Global Privacy Control obligations (Cal. Civ. Code § 1798.120, § 1798.135), we honor "Do Not Sell or Share My Personal Information" requests and Global Privacy Control (GPC) signals. If you enable GPC in your browser, we will treat this as a request to opt-out of the sharing of your personal information for cross-context behavioral advertising. We also participate in the Digital Advertising Alliance (DAA) and Network Advertising Initiative (NAI) self-regulatory programs and honor opt-out requests through the AdChoices icon.
Certain tracking technologies, such as session replay tools or form analytics, may capture your interactions with our website. We strictly limit the use of these tools to comply with the Electronic Communications Privacy Act, 18 U.S.C. § 2511 (limited application) and state wiretapping/cpw statutes (e.g., California Invasion of Privacy Act § 631, session-replay litigation). We ensure that no sensitive personal information is captured through these mechanisms. For more detailed information about the specific cookies we use and how to manage your preferences, please review our comprehensive Cookie Policy.
5. Your Rights and Choices
Depending on your state of residence, you may have certain rights regarding your personal information. If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA) (Cal. Civ. Code § 1798.100 et seq.). These rights include the right to know what personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the third parties with whom we share it. You also have the right to request deletion of your personal information, the right to correct inaccurate personal information, and the right to opt-out of the sale or sharing of your personal information.
If you are a resident of Virginia, Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.); Colorado, Colorado Privacy Act (C.R.S. § 6-1-1300 et seq.); Connecticut, Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.); or Utah, Utah Consumer Privacy Act (Utah Code § 13-11-101 et seq.), you have similar rights to access, correct, delete, and obtain a copy of your personal information, as well as the right to opt-out of targeted advertising, the sale of personal data, and profiling. These rights are also extended to residents of other states with comprehensive privacy laws (TX, OR, MT, FL, TN, etc.).
To exercise any of these rights, please submit a verifiable consumer request by contacting us using the information provided in the Contact Information section below. We will verify your identity before processing your request. We will respond to your request within the timeframes required by applicable law, generally within 45 days. We will not discriminate against you for exercising your privacy rights. If you have an account with us, you can also manage certain communication preferences and privacy settings directly within your account dashboard.
6. Data Security
The security of your personal information is a top priority for Niterite. We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, firewalls, intrusion detection systems, and regular security assessments. Access to personal information is strictly limited to authorized personnel who require such access to perform their job duties, and these individuals are subject to confidentiality obligations.
Despite our robust security measures, no system can ever be completely secure. We continuously evaluate and update our security protocols to address emerging threats and vulnerabilities. In the event of a data breach that compromises your personal information, we will notify you and the appropriate regulatory authorities in accordance with applicable state data breach notification laws. We maintain an incident response plan to ensure a swift and coordinated response to any security incident.
As a SaaS provider, we understand that our customers rely on us to protect the data they process through our platform. We undergo regular independent third-party audits and maintain industry-standard certifications to demonstrate our commitment to data security. However, you are also responsible for maintaining the security of your account credentials and ensuring that your use of our Services complies with applicable security requirements. We encourage you to use strong passwords and enable multi-factor authentication where available.
7. International Data Transfers
While Niterite is primarily based in the United States, our SaaS platform may be accessed by users located outside of the US. If you are accessing our Services from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States. By using our Services and providing your personal information, you consent to this transfer and processing.
We take steps to ensure that your personal information is adequately protected during international transfers. We use standard contractual clauses, binding corporate rules, or other legally recognized transfer mechanisms when transferring personal information from the European Economic Area, the United Kingdom, or other regions with data transfer restrictions to the United States. We monitor legal developments regarding international data transfers and will update our practices as necessary to maintain compliance.
If you are a user located in a jurisdiction with specific data localization laws, we will store and process your data in accordance with those requirements where feasible. Our SaaS infrastructure is designed to provide flexibility in data residency, allowing our enterprise customers to select specific geographic regions for data storage. For more information on how we handle international data transfers, please contact us using the information provided below.
8. Children's Privacy
Our Services are intended for use by businesses and professionals, and they are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information as soon as possible. Parents or guardians who believe we have collected information from a child under 13 should contact us immediately.
Our practices comply with the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA), and the COPPA Rule as amended effective June 2025 (16 C.F.R. Part 312, 2025 amendments). The 2025 amendments to the COPPA Rule introduce enhanced requirements regarding parental consent, data minimization, and restrictions on third-party tracking technologies. We ensure that our marketing and advertising practices do not target children, and we do not allow third parties to collect personal information from children through our platform.
If our Services are used in an educational context, we may act as a "school official" under the Family Educational Rights and Privacy Act (FERPA) and comply with applicable student data privacy laws, such as the Student Online Personal Protection Act (SOPPA). In such cases, we process student data solely for educational purposes authorized by the school district and do not use it for commercial advertising or profiling. Schools are responsible for obtaining necessary consents from parents or guardians before providing student data to us.
9. Changes to Policy
Niterite reserves the right to update or modify this Privacy Policy at any time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date at the top of this page. For material changes that affect your rights, we will provide a more prominent notice, such as an email notification to registered users or a prominent banner on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.
Your continued use of our Services after the effective date of any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the revised terms, you may discontinue your use of the Services. We will retain previous versions of this Privacy Policy in our archives, and you may request a copy of the policy in effect at the time you provided your personal information.
In the event of a change in corporate structure, such as a merger or acquisition, we may transfer your personal information to the successor entity. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy. We will take all necessary steps to ensure that the successor entity honors the commitments made in this Privacy Policy.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently. You can reach our Data Privacy Officer or designated privacy team using the contact information provided below.
- Company: Niterite
- Email: [email protected]
- Phone: +17603782712
- Address: 233 S Wacker Dr, Chicago, IL 60606, United States
For verification purposes, when submitting a privacy rights request, please include your full name, email address associated with your account, and a detailed description of your request. We may require additional information to verify your identity before processing your request. We aim to respond to all legitimate inquiries within 30 days, as required by applicable state privacy laws.