Legal
Delphi Insights, Inc. is a Delaware corporation and the operator of NUL Systems, a governance, risk, and compliance platform accessible at nulsystems.com. For purposes of data protection law, we are the data controller of personal information collected about our visitors and account holders, and the data processor of Customer Data submitted through the Service.
Contact: privacy@delphiinsights.us
When you create an account or use the Service, we collect:
When you use the Service, we automatically collect:
We may receive information from authentication providers (if you sign in with a third-party service), payment processors (transaction confirmations), analytics providers, and publicly available sources used for enrichment or verification.
We use the information we collect to:
If you are located in the EEA or UK, we process your personal information under the following legal bases:
We do not sell your personal information. We share information only in the following circumstances:
We share information with trusted third-party service providers who help us operate the Service, under contractual obligations of confidentiality and data protection. These include:
We may disclose information to comply with a valid legal process (subpoena, court order, law enforcement request), protect the rights, property, or safety of Delphi Insights, our users, or the public, or investigate suspected fraud or violations of our Terms.
If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on our website.
We may share information for any other purpose with your explicit consent.
We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:
We use cookies and similar technologies to operate the Service, remember your preferences, analyze usage, and improve performance. You can control cookies through your browser settings, though disabling certain cookies may affect functionality. Where required by law, we will request your consent before setting non-essential cookies.
The types of cookies we use include: strictly necessary (for login and session management), functional (preferences), analytics (usage measurement), and where applicable, marketing (subject to consent).
We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit (TLS), encryption at rest, access controls, regular security reviews, and monitoring. Details of our current security practices are available at our Security & Trust page. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If you are located in the EEA, UK, or certain other jurisdictions, you have the following rights with respect to your personal information:
To exercise any of these rights, contact us at privacy@delphiinsights.us. We will respond within thirty (30) days. We may need to verify your identity before processing your request.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
To exercise these rights, contact us at privacy@delphiinsights.us with the subject line "California Privacy Rights Request."
We are headquartered in the United States and process data in the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. Where required by law, we rely on appropriate safeguards for international data transfers, including the European Commission's Standard Contractual Clauses (SCCs) and equivalent mechanisms.
The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it promptly. Parents or guardians who believe their child has provided personal information to us should contact us at the email address in Section 14.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the Service at least thirty (30) days before the changes take effect. The "Last Updated" date at the top indicates when this Policy was most recently revised.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:
End of Privacy Policy
