Privacy Policy

1. Definitions

• Namirasoft: Namira Software Corporation.
• Service: Namirasoft Access.
• Namirasoft Services: the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you and governs identity across Namirasoft Services.
• Policy: a rule you define that allows or denies specified actions on specified resources within a Namirasoft product.
• Role: a named set of policies that can be assigned together.
• Permission: a grant of roles or policies from one person to another, identifying who granted it and who received it.
• Owner: the Account on whose behalf access is exercised; a person may act for their own Account or, where authorized, for another.
• Personal Information: information that identifies, relates to, or can reasonably be linked to an identifiable individual, including you.
• Processing: any operation performed on information, such as storing, evaluating, or organizing it.

2. Namirasoft Account

Access to Namirasoft Access requires a Namirasoft Account. You register and sign in through Namirasoft Account, which authenticates your identity. Your identity, login, device and network details, and any other personal information associated with your Namirasoft Account are collected and handled by Namirasoft Account under the Namirasoft Account Privacy Policy, not by this Service. For this Service, this Privacy Policy controls; for identity and authentication, the Namirasoft Account Privacy Policy controls.

3. Information We Collect

To provide the Service, Namirasoft Access processes:

• Account identifiers received from Namirasoft Account, used to associate policies, roles, and permissions with you and, where you act for another Account, with that Owner.
• Policies and roles you define, including the product, the entity, the actions and resources they cover, whether they allow or deny, their names and descriptions, and any categories, tags, or field values you add to organize them.
• Permissions you grant or receive, including the roles or policies involved, a record of the grant, and any categories, tags, or field values you add to organize them.
• Identity of the people involved in a Permission, including the name and email address of the person who granted the access and of the person who received it, so the grant can be identified and applied.

Information about others. When you grant access to another person, you provide their email address, and Namirasoft Access records the name and email address of the people involved in the grant. This information identifies who a Permission is between and lets the access be applied to the right person. You are responsible for the people you grant access to and for ensuring you are entitled to grant that access and to provide their email address for this purpose. A person named in a Permission may contact us or the Owner who granted or received it to exercise their rights, as described in section 14.

4. Information We Do Not Collect

Because of how the Service is built, Namirasoft Access does not:

• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• hold the data or content inside the products that your policies protect, which each product holds and secures under its own policy;
• decide who may access your resources; you and the Owners you work with define the policies, and Namirasoft Access evaluates them;
• send or deliver anything to an external channel;
• use your policies, roles, or permissions for advertising, or sell them.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for certain security, fraud-prevention, legal, or business purposes, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal-basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above solely to: store the policies and roles you define; record the permissions you grant and receive; evaluate whether a given request is allowed by the applicable policies so each product can apply the result; show you the access that has been granted to and by you; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We do not use your policies, roles, or permissions for advertising.

8. Automated Decision-Making

Namirasoft Access evaluates whether a request is allowed by applying the policies that you and the Owners you work with have defined. These evaluations are carried out mechanically from those policies; Namirasoft does not decide who may access your resources and does not override the policies you set. Because an access decision can determine whether you are able to use a particular resource, it may have a significant effect on you. Where you are denied access you believe you should have, the Owner who defined the applicable policy is responsible for it, and you should contact that Owner; where a decision involves Namirasoft’s own processing, you can contact us to review it. Namirasoft Access is not used to profile you or to make decisions about you for advertising.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• Within Namirasoft Services so that each product can apply the access you and the Owners have defined, and so the people involved in a Permission can see the access granted to or by them;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• At your direction or with your consent when you ask us to share information or otherwise agree;
• Aggregated or de-identified information that cannot reasonably identify you.

A current list of the material service providers we use may be made available on request.

10. International Transfers

Namirasoft is based in Canada, and your information may be processed in Canada and in other countries where we or our service providers operate. We handle information in accordance with applicable Canadian privacy laws, including PIPEDA and applicable provincial privacy legislation, and we take steps intended to ensure your information remains protected when it is processed in another country. Where required by applicable law, we use appropriate safeguards for such transfers. Because privacy laws differ between countries, information processed in another country may be subject to that country’s laws.

11. Data Security

We use security practices aligned with recognized industry standards to protect information within the Service. These measures may include access controls, authentication protections, encryption in transit, monitoring, logging, and operational safeguards appropriate to the nature of the information processed, and we continually review and strengthen them. You also help keep your information safe by keeping your Namirasoft Account credentials and tokens confidential, granting access only to people you intend, and reviewing the permissions you have granted.

12. Data Security Incidents and Breach Notification

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

13. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Access keeps the policies, roles, and permissions you create for as long as your Namirasoft Account exists, or until you delete them. You can create, change, and delete policies and roles, and grant and revoke permissions, at any time through the Service. Deleting a policy, role, or permission removes the rule or grant; it does not by itself change the data held in the products those rules protected, which each product retains under its own policy. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete a policy, role, or permission, or when your records are removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

14. Data Integrity and Responsibility

You decide what your policies and roles are and who you grant access to, and you are responsible for those choices, including the accuracy of the email addresses you provide and your entitlement to grant the access. Namirasoft Access evaluates the policies as you define them and applies the result. Namirasoft does not set your policies and is not responsible for the access decisions that follow from them, which reflect the rules you and the Owners have chosen.

15. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view and manage your policies, roles, and permissions in the Service at any time. For other requests, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. Because a Permission involves another person, and because your identity is governed by Namirasoft Account, a request concerning the identity of a person named in a Permission is carried out with the Owner who granted or received it or with Namirasoft Account, and where appropriate we will coordinate the request. For identity and account rights, use Namirasoft Account.

To make a request, you can contact us through support.namirasoft.com or by email at accounts@namirasoft.com, and to protect your information we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

16. Children’s Privacy

The Service is not directed to individuals under 18. Eligibility and accounts are managed by Namirasoft Account; if Namirasoft Account determines that an account belongs to a person under 18, the account and its information are handled under the Namirasoft Account Privacy Policy.

17. Communications

Namirasoft Access does not send commercial communications; it stores and evaluates the access you define. It may notify a person that access has been granted to or from them through applicable Namirasoft Services, such as Namirasoft Account or Namirasoft Notification Sender, under their own terms and your Namirasoft Account notification settings.

18. Cookies and Tracking

The Service uses cookies that are strictly necessary to sign you in and operate it, such as your authentication session managed through Namirasoft Account, together with analytics cookies from Google Analytics that help us understand how it is used. The Namirasoft public websites may additionally use advertising cookies from Google. Google Analytics and Google advertising are operated by Google under its own privacy terms. You can manage cookies through your browser settings and any cookie controls we make available.

19. Accountability and Privacy Contact

Namirasoft is accountable for the Personal Information under its control, including information transferred to service providers for processing on our behalf. We have designated a Privacy Officer who is responsible for our compliance with this Policy and applicable privacy law and who oversees our handling of Personal Information.

Privacy Officer, Namira Software Corporation, British Columbia, Canada. You can reach our Privacy Officer by email at accounts@namirasoft.com or through the Contact Us section.

20. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint to our Privacy Officer using the contact details above. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

21. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy at any time to reflect changes in the Service, legal requirements, or security practices. When material changes occur, Namirasoft may notify users through email and/or announcements through the Service or its website, where appropriate or as required by applicable law. Your continued use of Namirasoft Access after updates are posted constitutes acceptance of the revised Policy. If you do not agree with the updated Policy, you must stop using the Service.

Contact Us

For questions, comments, requests, or concerns regarding this Privacy Policy or information practices relating to Namirasoft Access, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.