US Privacy Notice
This Privacy Notice has been designed to inform the data subjects concerned by our processing activities, such as website visitors, end-users or customers of our clients or partners (“you”) , “yours”, “your”) of our policies regarding the collection, use, and disclosure of personal data.
This privacy notice does not apply to personal data processing by N.Rich Technologies Oy. If you are located in the European Union or interacting with N.Rich Technologies Oy, please refer to our general Privacy Notice
N.Rich US Inc. (“N.Rich”, “we”, “us”, “our”) will be transparent with you about why and how we collect personal data as we respect your privacy.
This Privacy Notice explains how we collect, use, disclose, and safeguard your personal information when you interact with our US website and related services and functionalities, including targeted advertising and analytics, specifically in compliance with applicable US privacy laws including the California Consumer Privacy Act (CCPA), the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), and other relevant state privacy regulations.
We have separate Privacy Policies for N.Rich clients using N.Rich software and for Potential Customers of N.Rich Technologies Products and Services
Please note that this Privacy Notice may be revised and reissued from time to time. You should visit this page regularly to review the latest version.
- In brief
N.Rich provides intent data, sales intelligence and advertising services for Business-to-Business (B2B) companies. We process both personal and behavioural data in order to enable serving advertising and content that is more relevant for your work and professional interests.
We use cookies and similar technologies and you can opt-out at any time via our Privacy Center or by contacting us at privacy-us@n.rich
- What we do
We are a US company developing and operating and providing two software-as-a-service platforms called N.Rich and IntentHub. N.Rich is an Account-Based Go-To-Market software platform offering advertising, sales intelligence, and automation capabilities to B2B companies. IntentHub is an intent data software platform for sales, marketing and customer-success functions of B2B companies. What this means is that our customers use our services to be able to offer more relevant products, services and messages to their existing and potential customers through utilizing individual and company data, behavioural signals and targeted advertising capabilities we offer. We collect individual and company-level behavioral data from millions of websites globally, through programmatic advertising systems, our clients’ or partners’ websites or their customer relationship systems (CRM), and from our partners and augment this data using algorithms and machine-learning. We also deliver targeted advertising to companies and professionals through the said advertising systems.
- Personal Information we collect
We collect and process the following categories of personal information in the context of business and professional roles related to organizations, such as companies or individuals acting as contractors, agents, or employees. We do not intend to process data related to end-users in a “consumer mode”; however, due to the nature of data collection, it may be unavoidable. Since it is often impossible to separate professional and “consumer mode data”, we are typically forced to process “consumer mode” data as well. Whenever possible, we take active steps to avoid processing “consumer mode” data.
Therefore, we collect and process the following categories of personal information:
- Pseudonomysed Personal Information
- From third-party websites: IP addresses and unique user identifiers stored as cookies, collected automatically by the N.Rich Tag installed on third-party websites.
- From client websites: IP addresses and unique user identifiers stored as cookies, collected automatically by the N.Rich Tag installed on client websites.
This data alone cannot be associated with an individual, such as hashed user identifiers, IP addresses, unique user identifiers and anonymized behavioral signals.
- Direct personal information
- From client websites: Information pertaining to your professional capacity, such as your LinkedIn profile, obtained via a pixel installed on our clients' websites.
- From our clients: Business customer data collected in accordance with our clients' own privacy policies, including name, business email address, phone number, or job title. This data comes through integrations with clients' software systems or through direct import into the N.Rich platform.
- Activity data
- Online activity: Information about which third-party or client-hosted web pages you visit and your interactions with them or related advertisements. This includes information about emails you receive from us or our clients and how you engage with such communications.
- Behavioral and interaction data: Online and offline activity data that may be associated with the other categories listed above and used for creating personal behavioral profiles for marketing, sales, and analytics purposes.
- Other interactions: Information stored within our clients' systems about your interactions, such as phone calls or meetings.
- Geolocation data: Location information derived from your IP address.
We do not intentionally collect or process sensitive personal information as defined by US state privacy laws.
For a more detailed breakdown, please consult the table below:
Category Data Source Data Collected Purpose Our role and legal basis Pseudonymised personal information of end-users. Third-party websites (collected automatically by the N.Rich Tag) or imported from the CRM of our Clients to our platform. IP addresses, unique user identifiers stored as cookies, web pages visited, interaction with web pages, email interactions. Personalized marketing, campaign performance analysis, and customer engagement optimization strategy. N.Rich is a service provider / processor. The legal basis is established by our Clients who are the businesses / controllers. Pseudonymised Personal Information of end-users. Client websites (collected automatically by the N.Rich Tag). IP addresses, unique user identifiers stored as cookies. Personalized marketing, campaign performance analysis, and customer engagement optimization strategy. N.Rich is a business / controller. Direct personal information of end-users Clients (collected through client software integrations where our clients import data into our platform). Business customer data: name, business email address, phone number, job title, professional capacity information (e.g., LinkedIn profile). Understanding customer engagement, improving marketing effectiveness. N.Rich is a service provider / processor. The legal basis is established by our Clients who are the businesses / controllers. Behavioral data Clients (collected through client software integrations where our clients import data into our platform). Website activity (our clients, partner or third-parties) Social media messages / engagement Client interaction data (emails, calls, meetings logged in CRM and shared with N.Rich) Personalized marketing, tailored communications to meet user preferences. N.Rich is a service provider / processor. The legal basis is established by our Clients who are the businesses / controllers. Direct personal data Provided directly by individuals contacting us. Contact details (e.g., name, email address) (obtained directly from individuals contacting N.Rich) Support and communication, responding to inquiries. N.Rich is a business / controller. Event Logs N.Rich website / platform (Collected directly from platform users during interactions). - Date/Time Stamp;
- Application ID (e.g. name and version);
- Initiating Process ID or event origination (e.g. entry point URL, page, form);
- Code location (e.g. module, subroutine);
- User initiating action (e.g. user ID);
- Location (e.g. IP address or location);
- User preference when users provide their consent
Data security, ensuring the security and integrity of systems. N.Rich is a business / controller. Email List Targeting Client-provided email lists Hashed email addresses matched to digital IDs Delivering targeted advertising to specific professionals Service Provider / Processor when following client instructions for targeting; Job Title Targeting Third-party data providers and client specifications Professional role information, company affiliations, targetable digital IDs Directing advertisements to individuals with specific professional roles at designated companies Service Provider / Processor when following client specifications; Website Visitor Analytics Website visitor data collected via N.Rich Tag, combined with third-party professional databases IP addresses, browsing behavior, professional profiles (e.g., LinkedIn profile information), job titles, company information Providing company and job-title level insights for B2B communication and relationship management Service Provider / Processor when analyzing data on behalf of clients LinkedIn Profile Matching Client websites via pixel technology combined with third-party professional databases Professional LinkedIn profile information, browsing behavior, website interactions Matching website visitors to their public LinkedIn profiles to enable personalized B2B communications and more relevant content delivery Provider / Processor when performing matching at client direction - Pseudonomysed Personal Information
- Methods of collection
We gather personal and activity data using the following methods:
- N.Rich tag: A tracking code deployed on third-party and client websites to collect behavioral and interaction data.
- CRM and partner integrations: Data collected through integrations with our clients’ software systems.
- Client data uploads: Information imported directly into the N.Rich software by our clients.
- Cookies and similar technologies: We use cookies and similar technologies to store unique user identifiers in browsers. These are used to ensure targeted and relevant advertising, maintain a consistent behavioral profile, serve personalized content, and provide analytics on user interactions with our own and our clients’ business offerings. More information about the cookies used by N.Rich is available here.
If you use a Google, Facebook, Linkedin or Twitter account, these platforms may – depending on the settings saved in your account – link your web and app browser history with your personal account and use information from your personal account in order to personalise advertisements. You can find more detailed information on this matter from: Google Privacy Statement, Facebook Data Usage Policy, Linkedin Privacy Policy, and from Twitter Privacy Policy.
When N.Rich tags or pixels are deployed on a client's website, we act as a Service Provider, and all data is collected on behalf of that client unless otherwise specified in a data sharing agreement.
- How we use your information
We use personal information for the following business purposes:
- Targeted advertising: Including identification and targeting via LinkedIn profile matching and job title targeting.
- Analytics: Website visitor analytics and behavior tracking to provide insights to our customers.
- Service delivery: Providing, maintaining, and improving our services.
- Compliance: Ensuring adherence to applicable privacy laws and responding to lawful requests.
Advanced US capabilities
N.Rich US Inc. offers several specialized data processing capabilities specifically designed for the US market. These capabilities involve sophisticated data processing activities that support targeted advertising and analytics while maintaining appropriate privacy protections.
Email List Targeting
We process customer-provided email lists to enable targeted advertising to specific individuals. This process involves several steps to maintain data security while delivering effective advertising.
We receive email lists from customers who wish to reach specific contacts. These lists are immediately secured through a hashing process that converts email addresses into non-readable code strings. We then work with specialized third-party data providers who match these hashed emails to targetable digital IDs without accessing the original email addresses. This allows us to deliver targeted advertising through our global demand-side platform while maintaining appropriate data protection. Once campaigns are active, we provide detailed analytics on engagement at the job title or person level, giving customers valuable insights into campaign performance.
Job Title Targeting
Our job title targeting capability enables customers to direct advertisements to individuals with specific professional roles at designated companies. When customers specify the companies and job titles they wish to target, our system interfaces with third-party data providers who maintain databases of targetable IDs for North American end users. zThis enables us to provide person-level analytics that offer valuable business intelligence while maintaining appropriate privacy safeguards.
Website Visitor Analytics
Our enhanced website visitor analytics can recognize visitors at the personal or job title level, providing valuable insights for B2B companies. The implementation of this capability varies based on visitor and customer location.
For US visitors to US customer websites, consent mechanisms follow US privacy requirements, which may differ from those required for European visitors. For US visitors to EU customer websites, appropriate consent is collected before any personal identification occurs, in accordance with applicable privacy regulations. In both scenarios, we provide person-level analytics to customers showing company and job title information of website visitors, enabling more effective business communication and relationship management.
For all these advanced capabilities, N.Rich implements appropriate security measures and data minimization practices to protect personal information while delivering valuable business services.
- Sharing Your Personal Information
In the preceding twelve (12) months, we have disclosed non-identifiable personal data, which is described above, for a business purpose to the following categories of third parties
- our partners affiliates who assist us in providing better services and enhance our operational efficiency and marketing activities ;
- our clients;
- our sub-processors / service providers that were contracted to perform certain services on our behalf, such as data processing, analytics, advertising, and communication services.
We share personal information with third-party service providers including, but not limited to, advertising and analytics partners, who process this data solely for delivering targeted advertisements and analytics services.
We may share your information with our clients and partners for the above-mentioned purposes and for carrying out related or complementary activities such as advertisement delivery or analytics.
We may share end user information with our affiliated companies, or from time to time use third parties to assist us with data processing, software development, hosting, database management and administrative tasks related to the processing activities described in this document. These third parties may be permitted to access your information, but they may only do so to perform these tasks on our behalf and are not allowed to disclose or use your information for any other purpose.
It is important to highlight that we will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice. Moreover, we will not sell or disclose this data to any other third party, but we are using pseudonymised personal information such as cookies and IP addresses for targeting advertising through third parties. Such use may be considered “selling” according to CCPA, so we provide an option for you to opt-out from such use here.
In addition, N.Rich may receive requests from law enforcement agencies / institutions as required by applicable law, court order, or governmental regulations. These requests may be necessary to investigate an alleged crime, to establish, exercise or defend legal rights. However, N.Rich will only fulfil such requests when allowed by the applicable law.
- What is our role?
Under the US applicable state privacy laws, N.Rich may fulfill simultaneously two alternative roles towards you, depending on the personal data processed and its source. Therefore:
-
As a "Business" (under CCPA/CPRA) or "Controller" (under other state privacy laws) when we:
- Process unique user identifiers stored as cookies and IP address data when you visit third-party websites (other than our clients' websites).
- Process user identifiers stored as browser cookies and IP address data when you visit our clients' websites, but for our own purposes (such as improving our services).
-
As a "Service Provider" (under CCPA/CPRA) or "Processor" (under other state privacy laws) when we:
- Process user identifiers and IP address data collected from our clients' websites solely according to our clients' instructions.
- Process direct personal information (e.g., name, email address, phone number, job title) that our clients share with us to perform services on their behalf.
Our privacy practices are designed to comply with all these requirements, including provisions related to consumer rights, data minimization, and opt-out mechanisms. For California residents specifically, we honor "Do Not Sell or Share My Personal Information" requests in accordance with CCPA requirements or any other applicable US state privacy laws.
N.Rich has created a dedicated online service that allows end-users to verify what is the role fulfilled by N.Rich related to the processing of personal data pertaining to the given data subject. This online service is available at the following address: My data
-
- Your rights and choices
Depending on your state of residence, you may have the following rights:
- Right to know: Access information regarding how your personal data is processed.
- Right to delete: Request deletion of your personal information.
- Right to correct: Correct inaccuracies in your personal information.
- Right to opt-out: Opt-out of the sale or sharing of your personal data, targeted advertising, and certain profiling activities. We comply with "Do Not Sell My Personal Information" and Global Privacy Control (GPC) signals. You can opt-out of the sale or sharing of your information through our Privacy Center or by enabling GPC signals on your browser or by sending an email to privacy-us@n.rich
- Right to limit the use and disclosure of sensitive information: It is important to note that we do not process sensitive information.
- Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights. Exercising your rights will not result in denial of services, charging of different prices, or reduction in service quality.
To exercise these rights, please visit our Privacy Center.
- Children’s privacy
N.Rich takes the protection of children’s privacy very seriously. N.Rich does not process personal data of persons under the age of 18. If N.Rich is informed about the processing of such personal data from a child under the relevant age without parental consent, we would take all reasonable steps to delete that data.
- Data retention
We retain your information, related to your data, only for as long as is necessary for the purposes detailed in this notice or in accordance with the retention period set by our clients when we process personal data on their behalf. When this personal data is no longer required, N.Rich will delete it in a secure manner.
N.Rich may also process personal data for statistical and algorithm / machine learning training purposes, but in such cases, the data will be anonymised.
Please note that the lifetime of the cookies that we set is 540 days and it will be reset every time you visit a website or see an advertisement with our tracking code. So unless you delete the cookies yourself, the cookies we set may take up to 540 days to expire from the last time you visited a web page with our tracking code.
- Data security
N.Rich takes the security of all data it processes very seriously as the security of the foregoing data is at the heart of N.Rich’s concern. We had put in place a framework of policies, procedures, and training to cover professional secrecy, data protection, confidentiality and security. A regular audit of the appropriateness of the measures is put in place to keep the data secure.
Despite our continuous efforts to protect your personal data, you should acknowledge that:
- Due to the fast development of the IT development sector, in particular, in the security and privacy sector of the Internet, there are limitations which are beyond our control;
- The security, stability of the IT systems, and privacy of the information processed cannot be guaranteed; and
- Any such information and data may be read or interfered with a third-party, despite our continuous efforts to avoid that.
- Changes to this privacy notice
We are aware that transparency and accountability are an ongoing responsibility, therefore, this Privacy Policy will be kept under regular review. Any changes to this Privacy Notice will be published on our website. We encourage you to periodically review it in order to be informed.
- Contact information
Company N.Rich US Inc, a Delaware based company Software platform name N.Rich Website https://nrich.io Privacy center https://privacy.nrich.ai/my-data Email address privacy-us@n.rich Postal address 169 Madison Ave STE 15643, New York, NY 10016 Phone +13476958698 We are happy to answer if you have any questions about this Privacy Notice or our data processing practices.
- Other N.Rich Privacy Notices