Effective Date: June 27, 2025

Company: netElastic ("netElastic," "we," "us," or "our")

This Privacy Policy explains how netElastic collects, uses, discloses, and protects personal information gathered through our website (netelastic.com), virtualized network software solutions (including vBNG and vRouter products), licensing systems, customer support channels, and enterprise portals.

1. Scope & Roles (Controller vs. Processor)

netElastic as a Data Controller: When you visit our website, request demos, subscribe to marketing, or manage enterprise account credentials, netElastic acts as the Data Controller responsible for processing your personal data.

netElastic as a Data Processor: When our customers deploy netElastic software within their own network architecture, customer network traffic and subscriber end-user data are controlled by the customer. In such cases, netElastic processes technical telemetry or support diagnostics solely in accordance with our Data Processing Addendum (DPA) and service contracts.

2. Information We Collect

A. Information Collected Directly

Business Contact Information: Name, job title, corporate email address, phone number, physical address, and company name provided during inquiries, whitepaper downloads, or trade shows.

Account Credentials: Usernames, passwords, and security tokens for accessing portals and software licensing managers.

Communications & Support Data: Content of email correspondence, technical support tickets, survey responses, and live chat logs.

B. Automatically Collected Technical & Telemetry Data

Website Analytics: IP addresses, browser specifications, operating system, referring URLs, time spent on pages, and device identifiers.

Software Telemetry & License Validation: License keys, software version info, deployment host system parameters, uptime metrics, error logs, and system crash reports transmitted back to validate licensing and maintain system health.

3. Legal Bases for Processing (EU/UK & Global Frameworks)

If you reside in the European Economic Area (EEA), the United Kingdom, or similar jurisdictions, our legal basis for processing your personal data depends on the interaction:

Performance of a Contract: Processing required to fulfill software licensing, account management, and customer support obligations.

Legitimate Interests: Operations such as securing network software, preventing licensing fraud, optimizing product stability, and managing standard B2B outreach.

Consent: Explicit consent provided for promotional newsletters or optional tracking cookies (which can be withdrawn at any time).

Legal Obligation: Compliance with tax, accounting, or regulatory requirements.

4. Disclosure and Sharing of Personal Information

netElastic does not sell personal data or share personal data for cross-context behavioral advertising. We share information only with trusted entities as described below:

Service Providers & Sub-processors: Trusted third parties assisting with infrastructure hosting, CRM, automated billing, analytics, and customer support tooling under strict confidentiality and data protection agreements.

Authorized Channel Partners & Resellers: Regional distributors or technology partners involved in delivering software or local services you requested.

Legal and Regulatory Authorities: When required by subpoena, court order, or applicable global law, or to defend netElastic’s legal rights, property, and safety.

Business Reorganizations: In connection with any merger, sale of assets, or corporate acquisition, provided the receiving party agrees to honor this policy.

5. Global Data Transfers

netElastic is headquartered in the United States and operates cloud infrastructure globally. Personal data collected outside the US may be transferred to and processed on servers located in the US or other third countries.

To ensure compliance with international data transfer rules (such as GDPR Article 46):

We implement Standard Contractual Clauses (SCCs) and the UK Addendum for transfers out of Europe.

We apply technical, organizational, and logical access safeguards to protect international data flows.

6. International & Regional Privacy Rights

Depending on your jurisdiction, you may hold specific privacy rights regarding your personal data:

Right to Access & Portability: Request a copy of the personal data we hold about you in a structured, machine-readable format.

Right to Correction / Rectification: Request that inaccurate or incomplete personal data be updated.

Right to Erasure / "Right to be Forgotten": Request deletion of your personal data, subject to necessary legal or contractual retention requirements.

Right to Object / Restrict Processing: Object to direct marketing or request restrictions on certain processing activities.

Right to Withdraw Consent: Revoke previously granted consent for communications or tracking without affecting prior lawful processing.

Opt-Out of Automated Signals: Our systems recognize automated privacy signals, such as Global Privacy Control (GPC).

To exercise any of these rights, contact us at info@netelastic.com.

7. US State-Specific Disclosures (CCPA / CPRA & State Laws)

Under US state privacy laws (including California, Virginia, Colorado, Utah, and Texas):

Categories Collected (Past 12 Months): Identifiers (name, email, IP address); Commercial Data (licensing history, requested demos); Internet/Network Activity (website engagement, telemetry logs).

Sale & Sharing: We do not sell or share personal information for targeted advertising.

Sensitive Information: We do not process Sensitive Personal Information (SPI) to infer consumer characteristics.

8. Data Security and Retention

Security Safeguards: We deploy physical, technical, and administrative protections including end-to-end encryption (TLS 1.2+ for data in transit), role-based access controls, database hardening, and regular vulnerability checks.

Data Retention: We retain personal information only for as long as necessary to maintain active accounts, satisfy contract terms, meet tax/accounting obligations (typically 7 years for financial records), or resolve disputes.

9. Policy Updates

We may update this Privacy Policy periodically to reflect changes in software architecture, regulatory standards, or operational practices. Updates will be posted on our website with a revised "Effective Date."

10. Contact Information & Privacy Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy, or wish to exercise your data protection rights, please reach out to us at:

netElastic

Attention: Privacy & Compliance

Email: info@netelastic.com

Website:netelastic.com