Privacy Policy

1. Scope

This policy covers www.scvue.com, the SCVue marketing website, and nothing else. This website has no accounts, no sign-in, and no way to upload, import, or analyze files.

The SCVue application at app.scvue.com is a separate service with its own privacy policy, which is presented to you when you register for an account and subscribe. Nothing on this page describes how the application handles your data. The same applies to the nDiligence corporate website and to nDiligence's professional services engagements, which are governed by their own terms.

2. Who we are

SCVue is a product of nDiligence, Inc. ("nDiligence", "we", "us", "our"), a California corporation, which operates this website and is the controller of the personal information described below.

nDiligence, Inc.
1 Belvedere Place, Suite 200
Mill Valley, CA 94941
United States

Privacy questions about this website can be sent to privacy@ndiligence.com.

3. What we collect

3.1 The contact form

If you write to us through the contact form, we collect your first name, your last name and phone number if you choose to give them, your email address, and your message. We also record the network address the submission came from and the time it arrived, which are used to limit abuse of the form and are included in the email we receive.

3.2 Aggregate analytics

This website uses Vercel Web Analytics to count page views and see which sources send traffic here. It sets no cookie. A visitor is identified by a hash created from the incoming request, which is discarded after twenty four hours, and it does not build a profile of an individual visitor or follow one to other websites. Vercel describes how the product handles data in its Web Analytics privacy and compliance notice.

The following may be recorded with each page view:

• the time of the request;
• the page address and the route pattern behind it;
• the referring website and filtered query parameters;
• an approximate location derived from the request, to the level of country, region and city;
• the device type, the operating system and its version, and the browser and its version.

3.3 Your language preference

The site is published in several languages. When you pick one from the language selector, we store that choice in a cookie named scvue_locale so the site opens in the same language next time. It holds nothing but the language code and expires after a year. Before you make a choice, the site reads the language preference your browser sends with each request in order to pick a starting language. That preference is not stored.

3.4 Server logs

Our hosting provider, Vercel, keeps ordinary web server records of requests to this site, including network address, time, page requested, and browser type. These exist to run the site and to investigate faults and abuse.

4. How we use it

• To read and answer what you send us through the contact form.
• To publish, operate, and secure this website, and to investigate faults and abuse of it.
• To understand in aggregate which pages people read, so we can improve them.
• To remember the language you chose.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use this website's data to build advertising profiles. We will only send you marketing email if you ask us to, and any such email carries a way to stop it.

5. Legal bases

Where the General Data Protection Regulation, the UK GDPR, or an equivalent regime applies, we rely on our legitimate interests in answering enquiries addressed to us, in keeping this website available and free from abuse, and in understanding aggregate readership; on your consent where we ask for it, such as for marketing email, which you can withdraw at any time; and on legal obligation where the law requires us to keep or produce something.

6. Who else processes it

Two providers process data on our behalf for this website. Each is bound by a written agreement restricting it to processing on our instructions.

• Vercel Inc. (United States): hosting of this website, its server logs, and its aggregate analytics. Privacy notice.
• Resend (United States): delivery of the email that carries your contact form submission to us. Privacy policy.

Both process in the United States. Where personal information originating in the European Economic Area, the United Kingdom, or Switzerland reaches them, the transfer is made under the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum where applicable. A copy of the clauses we rely on is available on request.

7. How long we keep it

Contact form submissions and the email correspondence that follows them are kept for twenty four months from our last exchange with you, unless you ask us to delete them sooner or we need them longer to deal with a dispute. Server logs are kept for our hosting provider's retention period. Aggregate analytics carry no personal information and are kept for twenty four months. The language cookie sits in your own browser and expires after a year.

Beyond what is described above, this website stores and retains nothing. There is no account, no visitor database, and no profile kept about you.

8. Who we share it with

We share the information described above with the two providers named in section 6, and otherwise only where the law requires it, or to establish or defend a legal claim, or in connection with a merger, acquisition, or sale of assets, in which case it transfers subject to this policy. We do not disclose it to advertisers or data brokers.

9. Security

This website is served over an encrypted connection. The contact form validates and bounds what it accepts, limits how often it can be submitted from one network address, and passes submissions straight to email rather than storing them in a database on this site. No system is perfectly secure, and we cannot guarantee that a determined attack will never succeed. Where a breach affects your personal information, we will notify you and the relevant authorities as the law requires and without undue delay.

10. Children

This is a business website. It is not directed at children and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

11. Your rights

Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to receive it in a portable form, to object to or restrict how we use it, to withdraw a consent you gave, and to be free from discrimination for exercising any of these rights. Residents of California, of other United States states with comprehensive privacy laws, and of the European Economic Area, the United Kingdom, and Switzerland all have rights of this kind under their own regimes.

Write to privacy@ndiligence.com and we will answer within the period the applicable law allows, which is one month under the GDPR and forty five days under the CCPA. We may need to verify who you are before we act, and we will not charge you for a routine request.

If you are in the European Economic Area or the United Kingdom you may also complain to your local supervisory authority, though we would ask you to come to us first.

12. Changes

We may update this policy. The date at the top of the page shows when the current version took effect, and a material change will be posted here before it applies.

13. Contact

Questions and requests about this policy can be sent to privacy@ndiligence.com, through the contact form, or by post to:

nDiligence, Inc.
1 Belvedere Place, Suite 200
Mill Valley, CA 94941
United States