Privacy Policy

1. Definitions

• Namirasoft: Namira Software Corporation.
• Service: Namirasoft Storage.
• Namirasoft Services: the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you and governs identity across Namirasoft Services.
• Storage Provider: a storage service you already use and connect to the Service, such as a cloud drive, an object store, or a file server. Your files live with your Storage Providers, not with Namirasoft Storage.
• Storage Resource: a connection you create to one of your Storage Providers, with its name, its type, and the settings that connection needs.
• Access Method: the way a person or a system reaches your storage through the Service, such as the web console, SFTP, WebDAV, HTTP, or an S3 compatible connection.
• Storage User: a sign in you create so a person or a system can reach your storage through the Service. A Storage User is created by you and exists only within the Service; it is not a Namirasoft Account.
• Assignment: the rule you set that gives a Storage User access to a Storage Resource, fixing the folder it starts from and which actions it may perform.
• Workspace: a grouping of products and data, created and managed in Namirasoft Workspace, used to organize your Storage Resources.
• Personal Information: information that identifies, relates to, or can reasonably be linked to an identifiable individual, including you.
• Processing: any operation performed on information, such as storing, transferring, or organizing it.

2. Namirasoft Account

Access to Namirasoft Storage requires a Namirasoft Account. You register and sign in through Namirasoft Account, which authenticates your identity. Your identity, login, device and network details, and any other personal information associated with your Namirasoft Account are collected and handled by Namirasoft Account under the Namirasoft Account Privacy Policy, not by this Service. Namirasoft Account also issues any Service User you use, a non-human identity such as an application or AI agent for automated access, which is created and handled under that same policy. Namirasoft Account establishes these identities, while the access that lets another user or a Service User act in Namirasoft Storage is granted and managed through Namirasoft Access and handled under the Namirasoft Access Privacy Policy. A Storage User is different from both, because it is a sign in you create inside this Service for reaching your storage, as described in section 3.

3. Information We Collect

To provide the Service, Namirasoft Storage processes:

• Account identifiers received from Namirasoft Account, used to associate your connections with you and show you your own records.
• The connections you create to your Storage Providers, each with its name, the type of service it connects to, and the settings that service needs, such as an address, a project or account identifier, or the name of a bucket or folder, together with a reference to the credential it uses, the Workspace it belongs to, and any categories, tags, or field values you add.
• The Storage Users you create, meaning the name of each sign in and a reference to its password.
• The Assignments you create, meaning which Storage User may reach which connection, the folder that access starts from, and which actions are allowed, such as listing, downloading, creating, overwriting, renaming, copying, moving, or deleting.

How the Service reaches your Storage Providers. Every Storage Provider asks for different things, so each one is connected through a form of its own. What that form needs in order to sign in, such as a key, a token, or a password, is not stored by this Service. Those values are kept encrypted in Namirasoft Secret, and Namirasoft Credential supplies them to the Service at the moment a connection runs. What this Service holds is the connection you set up and a reference to the credential it uses, never the secret value itself.

Your files pass through, they do not stay. When someone you authorized opens your storage through the Service, the request travels through the Service to the Storage Provider that holds the files, and the files travel back the same way. The Service does not keep a copy of your files and does not build a list of what you store. When a folder is opened, what appears comes from the Storage Provider at that moment, not from anything this Service holds. What the Service keeps is what you created, meaning your connections, your Storage Users, and your Assignments.

What a sign in shows us. When a Storage User connects through an Access Method, the Service receives the name it signs in with and the network address it connects from, so it can check the sign in and apply the Assignment that governs it.

Activity records. Where you attach a log group to a connection, records of its activity are written to Namirasoft Log and kept under the retention you set there.

4. Information We Do Not Collect

Namirasoft Storage does not:

• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• store the keys, tokens, or passwords used to reach your Storage Providers, which are kept encrypted in Namirasoft Secret and supplied through Namirasoft Credential when a connection runs;
• keep your files, or build an index, catalogue, or search of what you store;
• provide storage of its own, since your files remain with the Storage Providers you connect;
• use your files or your connections for advertising, or sell them.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. When you first use Namirasoft Storage, you agree to this Privacy Policy and the Terms of Service, which is how you give your consent to the handling of your Personal Information described here, and you can withdraw it as described in section 6. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for security, fraud prevention, technical operation, or legal compliance, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can remove a Storage Resource, a Storage User, or an Assignment at any time in the Service, and you can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above to: operate the connections you create to your Storage Providers; authenticate the Storage Users you create and apply the Assignments that govern what each one may reach and do; carry requests and files between your Storage Providers and the people and systems you authorized; write activity records to the log group you choose; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We do not use your files or your connections for advertising, and we do not sell them.

8. Automated Decision-Making

Namirasoft Storage checks each request against the Assignment that applies and allows or refuses it accordingly. This is a direct application of the rules you set, and you can change them at any time. The Service does not use your information to make decisions that produce legal or similarly significant effects about you, and it does not profile you.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• With the Storage Providers you connect, which receive the requests made through the Service and the files being written, and return the files being read. Each Storage Provider is operated by a separate company under its own terms and privacy policy, and your relationship with it, including what it keeps and how it handles your files, is governed by that policy;
• Within Namirasoft Services where needed to operate the Service, including supplying the credentials you keep in Namirasoft Credential and Namirasoft Secret when a connection runs, writing activity records to Namirasoft Log, and applying your Workspace and the access others have through Namirasoft Access;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• At your direction or with your consent when you ask us to share information or otherwise agree;
• Aggregated or de-identified information that cannot reasonably identify you.

10. International Transfers

Namirasoft is based in Canada, and your information may be processed in Canada and in other countries where we or our service providers operate. Where your files travel through the Service, they travel between your Storage Provider and the people and systems you authorized, and where those sit is determined by the Storage Providers you chose and the locations you set with them. We handle information in accordance with applicable Canadian privacy laws, including PIPEDA and applicable provincial privacy legislation, and we take steps intended to ensure your information remains protected when it is processed in another country. Where required by applicable law, we use appropriate safeguards for such transfers. Because privacy laws differ between countries, information processed in another country may be subject to that country’s laws.

11. Security Commitment

Namirasoft maintains administrative, technical, and organizational measures to protect Personal Information within the Service against unauthorized access, disclosure, alteration, misuse, loss, or destruction. These measures may include access controls, authentication protections, encryption in transit, monitoring, logging, and operational safeguards appropriate to the nature of the information processed, and we continually review and strengthen them. Access to information within the Service is limited to what is needed to operate, support, and secure it, under confidentiality obligations and internal controls. The keys, tokens, and passwords used to reach your Storage Providers are kept encrypted in Namirasoft Secret and supplied through Namirasoft Credential rather than held by this Service.

Traffic is encrypted where the protocol in use supports it. Some Storage Provider types use protocols that are not encrypted, and if you connect one of those, that connection is not protected in transit. Choosing a protected protocol, granting each Storage User only the access it needs, and keeping your Storage User passwords confidential all help keep your information safe.

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

12. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Storage keeps the Storage Resources, Storage Users, and Assignments you create for as long as your Namirasoft Account exists, or as needed to provide the Service. Because your files are not kept here, there is nothing of your stored content for the Service to retain; what your Storage Providers keep is governed by their own policies, and activity records are kept under the retention you set in Namirasoft Log. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete a Storage Resource, a Storage User, or an Assignment, the record is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

13. Data Integrity and Responsibility

You decide which Storage Providers to connect, which Storage Users exist, and what each one may reach and do, and you are responsible for those choices and for being authorized to connect the storage you connect.

Information about others. When you create a Storage User for another person, their name and sign in details are information about them that you placed in the Service, and the files they reach through it are held by your Storage Provider. You are responsible for having the right to create those sign ins and to give that access, and for telling the people you give them to how their access works. Where a person asks to exercise a right over information you hold in the Service, you are responsible for it as the party who created it, and we will handle any request we receive in accordance with applicable law.

Removing a connection in the Service removes your access through the Service; it does not delete anything held by your Storage Provider, which continues to hold your files under its own terms.

14. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view and change your Storage Resources, Storage Users, and Assignments in the Service at any time, and delete any of them. For other requests, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. Because your files are held by your Storage Providers rather than by this Service, a request concerning the files themselves is carried out by the Storage Provider that holds them, under its own policy. For identity and account rights, use Namirasoft Account.

To make a request, contact us using the options in the Contact Us section at the bottom of this page. To protect your information, we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

15. Children’s Privacy

The Service is not directed to individuals under 18. Eligibility and accounts are managed by Namirasoft Account; if Namirasoft Account determines that an account belongs to a person under 18, the account and its information are handled under the Namirasoft Account Privacy Policy.

16. Communications

Namirasoft Storage does not send commercial communications; it operates the connections you create. When we need to contact you about your account or the services you use, for example a security, technical, or account-related notice, we send the message to the verified email address on your Namirasoft Account, the address you signed up with and verified there. These messages are part of providing the Service.

17. Cookies and Tracking

The Service uses cookies that are strictly necessary to sign you in and operate it, such as the cookies used to maintain your authenticated session, together with Google Analytics cookies that help us understand how it is used. Google Analytics is operated by Google under its own privacy terms. You can manage cookies through your browser settings.

18. Accountability and Privacy Contact

Namirasoft is responsible for the Personal Information under its control and takes steps to ensure that such information is handled in accordance with this Privacy Policy and applicable privacy laws. Namirasoft has designated a person accountable for its compliance with this Privacy Policy, and their identity is available on request.

Questions, requests, or concerns regarding Namirasoft’s privacy practices or the handling of Personal Information may be submitted using the contact options in the Contact Us section at the bottom of this page.

19. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint using the contact options in the Contact Us section at the bottom of this page. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

20. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we make changes, we revise the effective date and post the updated Policy here. For minor or clarifying updates, your continued use of the Service after the updated Policy is posted indicates your acceptance of it. Where a change materially affects how we collect, use, or disclose your Personal Information, we will show you what has changed and ask you to review and agree to the updated Privacy Policy and Terms of Service before you continue using the Service. If you do not agree with an updated Policy, you may stop using the Service and request deletion of your Account.

Contact Us

For questions, comments, or concerns regarding this Privacy Policy or how the Service handles information, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.