Privacy Policy

1. Introduction

Gannet Solutions ("Company," "we," "us," or "our") operates NirmIQ, a cloud-based requirements management and FMEA platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at nirmiq.com and app.nirmiq.com (the "Service").

We are committed to protecting your privacy and handling your data in an open and transparent manner. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, company name, job title, and password when you register for an account.
• Billing Information: Payment card details, billing address, and transaction history (processed securely through Stripe).
• Profile Information: Optional information such as profile photo, department, and contact preferences.
• Communication Data: Information you provide when contacting support or participating in surveys.

2.2 Project and Business Data

To provide our Service, we store and process data you input into the platform:

• Requirements documentation and specifications
• FMEA analyses (DFMEA, PFMEA)
• Traceability links and relationships
• Test cases and verification data
• Comments, annotations, and collaboration data
• Audit logs and change history

Important: Your project data belongs to you. We do not access, use, or share your project data for any purpose other than providing the Service, unless required by law or with your explicit consent.

2.3 Automatically Collected Information

When you use our Service, we automatically collect:

• Device Information: Browser type, operating system, device identifiers.
• Log Data: IP address, access times, pages viewed, and referring URL.
• Usage Data: Features used, actions taken, and performance metrics.
• Cookies and Similar Technologies: See our Cookie Policy for details.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience
• Comply with legal obligations and regulatory requirements

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With vendors who perform services on our behalf (hosting, payment processing, analytics).
• Organization Administrators: Account administrators in your organization can view usage data and manage users.
• Legal Requirements: If required by law, subpoena, or other legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: When you explicitly authorize sharing.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data centers with physical security controls
• Employee security training and background checks
• Incident response and breach notification procedures

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for a period necessary to fulfill legal obligations, resolve disputes, and enforce agreements. You may request deletion of your data at any time.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Objection: Object to processing of your data
• Restriction: Request restriction of processing

To exercise these rights, contact us at info@gannetsolutions.com.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission where applicable.

9. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: