Privacy Policy

1. Definitions

• Namirasoft: Namira Software Corporation.
• Service: Namirasoft Access.
• Namirasoft Services: the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you and governs identity across Namirasoft Services.
• Policy: a rule you define that allows or denies specified actions on specified resources within a Namirasoft product.
• Role: a named set of policies that can be assigned together.
• Permission: a grant of roles or policies from one user to another, identifying who granted it and who received it.
• Owner: the individual or organization account holder whose resources and access configuration are managed through Namirasoft Access; a user may act for their own Account or, where authorized, for another Account.
• Administrator: a user to whom the Owner has given access to Namirasoft Access so that they can grant access to others on the Owner’s behalf, such as by defining policies and roles and granting or revoking permissions. An Administrator acts only within the authority the Owner grants, and the Owner remains responsible for that access. An Administrator may be an individual or a Service User.
• User / Authorized User: any party that acts through a Namirasoft Account, whether an individual or a Service User (a nonhuman identity such as an application or AI agent). An Authorized User is a user who has been granted a role, policy, or permission through Namirasoft Access. Service Users are handled under the Namirasoft Account Privacy Policy. In this Policy, references to consent, privacy rights, and Personal Information apply to identifiable individuals associated with Accounts, not to Service Users themselves.
• Personal Information: information that identifies, relates to, or can reasonably be linked to an identifiable individual, including you.
• Processing: any operation performed on information, such as storing, evaluating, or organizing it.

2. Namirasoft Account

Access to Namirasoft Access requires a Namirasoft Account. You register and sign in through Namirasoft Account, which authenticates your identity. Your identity, login, device and network details, and any other personal information associated with your Namirasoft Account are collected and handled by Namirasoft Account under the Namirasoft Account Privacy Policy, not by this Service. For authorization, access management, permissions, roles, and policies handled through Namirasoft Access, this Privacy Policy applies. For identity, authentication, and account management handled through Namirasoft Account, the Namirasoft Account Privacy Policy applies.

3. Information We Collect

To provide the Service, Namirasoft Access processes:

• Account identifiers received from Namirasoft Account, used to associate policies, roles, and permissions with you and, where you act for another Account, with that Owner.
• Policies and roles you define, including the product, the entity, the actions and resources they cover, whether they allow or deny, their names and descriptions, and any categories, tags, or field values you add to organize them.
• Permissions you grant or receive, including the roles or policies involved, a record of the grant, and any categories, tags, or field values you add to organize them.
• Identity of the people involved in a Permission, including the name and email address of the person who granted the access and of the person who received it, so the grant can be identified and applied.
• Access activity records, such as when a policy, role, or permission is created, changed, or removed, used to operate, secure, troubleshoot, and audit the Service.

Information about others. When you grant access to another person, you provide their email address, and Namirasoft Access records the name and email address of the people involved in the grant. This information identifies who a Permission is between and lets the access be applied to the right person. You are responsible for the people you grant access to and for ensuring you are entitled to grant that access and to provide their email address for this purpose. A person named in a Permission may contact us or the Owner who granted or received it to exercise their rights, as described in section 14.

4. Information We Do Not Collect

Namirasoft Access does not:

• collect your Namirasoft Account password or sign in credentials, which are handled by Namirasoft Account;
• store the content, files, data, or resources inside the Namirasoft products whose access it manages;
• decide on its own what any user may access or do (the Owner, or an Administrator the Owner authorizes, defines the policies, roles, and permissions, which Namirasoft Access evaluates when a Namirasoft product asks);
• perform actions inside Namirasoft products on a user’s behalf, or process the information those products handle when such actions occur;
• use policies, roles, permissions, or authorization information for advertising, or sell it.

When access is granted to a user, any information collected, used, or disclosed as a result of actions taken through that access is handled by the Namirasoft product, service, application, or integration involved and is governed by its own privacy policy.

The person or organization that creates, manages, or grants access to a user is responsible for ensuring the permissions they provide are appropriate and that the resulting use complies with applicable policies, terms, and legal requirements.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. We may also handle your Personal Information without additional consent where applicable law permits or requires it, including to provide the Service and carry out the actions requested by you or by other authorized users, record permissions and access granted by Owners and authorized Administrators, manage permissions, roles, and policies, maintain security, prevent fraud or misuse, address technical issues, comply with legal obligations, or protect the rights and safety of Namirasoft, our users, and others. Where our activities are also subject to laws that use a legal basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above solely to: store the policies and roles you define; record the permissions you grant and receive; evaluate whether a given request is allowed by the applicable policies so each product can apply the result; show you the access that has been granted to and by you; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We do not use your policies, roles, or permissions for advertising.

8. Automated Decision Making

Namirasoft Access performs automated evaluation of access requests based on the policies, roles, and permissions configured by Owners and authorized Administrators. These evaluations determine whether a requested action is permitted within a Namirasoft product. Namirasoft Access does not make independent judgments about you, evaluate personal characteristics, or create profiles, and it is not used to profile you or to make decisions about you for advertising. If you are denied access you believe you should have, the Owner or Administrator who defined the applicable policy is responsible for it; where you believe Namirasoft Access has incorrectly processed your information, you can contact us to review it.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• Within Namirasoft Services so that each product can apply the access you and the Owners have defined, and so the people involved in a Permission can see the access granted to or by them;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• At your direction or with your consent when you ask us to share information or otherwise agree;
• Aggregated or deidentified information that cannot reasonably identify you.

10. International Transfers

Namirasoft is based in Canada, and your information may be processed in Canada and in other countries where we or our service providers operate. We handle information in accordance with applicable Canadian privacy laws, including PIPEDA and applicable provincial privacy legislation, and we take steps intended to ensure your information remains protected when it is processed in another country. Where required by applicable law, we use appropriate safeguards for such transfers. Because privacy laws differ between countries, information processed in another country may be subject to that country’s laws.

11. Security Commitment

Namirasoft maintains administrative, technical, and organizational measures to protect Personal Information against unauthorized access, disclosure, alteration, misuse, loss, or destruction. These measures may include access controls, authentication protections, encryption in transit, monitoring, logging, and operational safeguards appropriate to the nature of the information processed, and we continually review and strengthen them. You also help keep your information safe by keeping your Namirasoft Account credentials and tokens confidential, granting access only to people you intend, and reviewing the permissions you have granted.

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

12. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Access keeps the policies, roles, and permissions you create for as long as your Namirasoft Account exists, or until you delete them. You can create, change, and delete policies and roles, and grant and revoke permissions, at any time through the Service. Deleting a policy, role, or permission removes the rule or grant; it does not by itself change the data held in the products those rules protected, which each product retains under its own policy. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete a policy, role, or permission, or when your records are removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

13. Data Integrity and Responsibility

You decide what your policies and roles are and who you grant access to, and you are responsible for those choices, including the accuracy of the email addresses you provide and your entitlement to grant the access. Namirasoft Access evaluates the policies as you define them and applies the result. Namirasoft does not set your policies and is not responsible for the access decisions that follow from them, which reflect the rules you and the Owners have chosen.

14. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view and manage your policies, roles, and permissions in the Service at any time. For other requests, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. Because a Permission involves another person, and because your identity is governed by Namirasoft Account, a request concerning the identity of a person named in a Permission is carried out with the Owner who granted or received it or with Namirasoft Account, and where appropriate we will coordinate the request. For identity and account rights, use Namirasoft Account.

To make a request, contact us using the options in the Contact Us section at the bottom of this page. To protect your information, we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

15. Children’s Privacy

The Service is not directed to individuals under 18. Eligibility and accounts are managed by Namirasoft Account; if Namirasoft Account determines that an account belongs to a person under 18, the account and its information are handled under the Namirasoft Account Privacy Policy.

16. Communications

Namirasoft Access does not independently send communications, including commercial communications; it stores and evaluates the access you define. Where enabled, the people involved may be notified when access is granted, changed, or removed, and such a message is sent to the verified email address on that person’s Namirasoft Account.

17. Cookies and Tracking

The Service uses cookies that are strictly necessary to sign you in and operate it, together with Google Analytics cookies that help us understand how it is used. Google Analytics is operated by Google under its own privacy terms. You can manage cookies through your browser settings.

18. Accountability and Privacy Contact

Namirasoft is responsible for the Personal Information under its control and takes steps to ensure that such information is handled in accordance with this Privacy Policy and applicable privacy laws. Namirasoft has designated a person accountable for its compliance with this Privacy Policy, and their identity is available on request.

Questions, requests, or concerns regarding Namirasoft’s privacy practices or the handling of Personal Information may be submitted using the contact options in the Contact Us section at the bottom of this page.

19. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint using the contact options in the Contact Us section at the bottom of this page. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

20. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we make changes, we revise the effective date and post the updated Policy here. For minor or clarifying updates, your continued use of the Service after the updated Policy is posted indicates your acceptance of it. Where a change materially affects how we collect, use, or disclose your Personal Information, we will show you what has changed and ask you to review and agree to the updated Privacy Policy and Terms of Service before you continue using the Service. If you do not agree with an updated Policy, you may stop using the Service and request deletion of your Account.

Contact Us

For questions, comments, requests, or concerns regarding this Privacy Policy or information practices relating to Namirasoft Access, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.