Effective Date: November 19, 2025
Last Updated: November 19, 2025
This Privacy Policy ("Policy") explains how Nafasi, Inc. ("Company," "we," "us," "our," or "Nafasi") collects, uses, discloses, and otherwise processes personal information through our corporate website located at nafasi.co and all subdomains thereof (collectively, the "Website"). This Policy applies to all visitors and users of the Website.
By accessing or using the Website, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use the Website. We are committed to protecting your privacy and maintaining your trust. This Policy is designed to be transparent and compliant with applicable privacy laws, including the California Consumer Privacy Act (CCPA) and the European Union's General Data Protection Regulation (GDPR).
Contact Information: When you use our contact forms, subscription forms, or fill out service request forms, we collect information such as your name, email address, phone number, company name, job title, and any other information you choose to provide.
Communication Information: If you email us directly or communicate with us through our chatbot or live chat features, we collect and retain the content of your communications, including attachments, along with metadata such as the date and time of communication.
Service Request Information: When you request a consultation, proposal, or service information, we may collect additional details about your business needs, budget, timeline, project requirements, and preferences to better serve you.
Payment Information: When you make a payment through our Website, payment information (such as credit card details) is processed securely through our payment processor, Stripe. We do not directly store full credit card numbers on our servers. We do retain transaction records, including transaction amounts, dates, and invoice details.
Account Information: If you create an account on our Website, we collect your username, password (encrypted), account preferences, and any profile information you provide.
Log Data: Our servers automatically record information about your interactions with the Website, including your IP address, browser type, operating system, referring URL, pages visited, time and date of access, and duration of visit.
Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance user experience, remember your preferences, and analyze Website usage patterns. This includes:
Device Information: We may collect information about your device, including device type, model, operating system, and unique device identifiers.
Location Information: If you grant permission, we may collect general geographic information based on IP address. We do not collect precise location data without explicit consent.
CRM Data: We integrate with customer relationship management (CRM) platforms that may share information about your business interactions with Nafasi.
Marketing Platforms: If you interact with our content on social media or other third-party platforms, those platforms may provide us with anonymized data about your interactions.
Webhooks and APIs: We receive information from third-party services (including Calendly for scheduling) that integrate with our Website through webhooks and APIs.
We share information with third-party service providers who assist us in operating our Website and conducting our business, including:
These service providers are contractually obligated to use your information only as necessary to provide services to us and maintain the confidentiality and security of your data.
If Nafasi, Inc. is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
We may disclose your information when required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to:
We may share your information with third parties when you provide explicit consent or direct us to do so.
We may share aggregated, de-identified information that cannot reasonably be used to identify you with third parties for marketing, analytics, research, and other purposes without restriction.
If you are a California resident, you have the following rights under the CCPA:
Right to Know: You have the right to request what personal information we collect, use, and share about you.
Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information.
Right to Non-Discrimination: We will not deny, charge different prices for, or provide different quality of services based on your exercise of these privacy rights.
Right to Limit Use: You have the right to limit our use and disclosure of sensitive personal information to what is necessary to provide the services you request.
Verification: To exercise these rights, contact us at admin@nafasi.co. We will verify your identity before processing your request.
If you are located in the European Union or United Kingdom, you have the following rights under the GDPR:
Right of Access: You have the right to obtain a copy of personal data we hold about you.
Right to Rectification: You have the right to correct inaccurate or incomplete personal data.
Right to Erasure: You have the right to request deletion of your personal data (the "right to be forgotten").
Right to Restrict Processing: You have the right to request that we limit the processing of your personal data.
Right to Data Portability: You have the right to receive your personal data in a portable format.
Right to Object: You have the right to object to processing of your personal data, including for direct marketing purposes.
Right to Lodge a Complaint: You have the right to lodge a complaint with the applicable data protection authority in your jurisdiction.
Residents of other jurisdictions may have additional privacy rights under applicable law. Please contact us for more information about your specific rights.
We implement comprehensive technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, and destruction, including:
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials.
We retain personal information for the period necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. Specific retention periods:
Our Website is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information immediately and terminate the child's account. If you believe we have collected information from a child, please contact us at admin@nafasi.co.
We use the following types of cookies:
You can control cookie preferences through your browser settings. To opt-out of specific tracking services, visit:
Our Website may contain links to third-party websites and services that are not operated by Nafasi. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your information.
Nafasi is based in the United States. Information we collect may be transferred to, stored in, and processed in the United States or other countries. If you are located outside the United States, your information may be transferred internationally and may be subject to different data protection laws than those of your country of residence.
For EU/UK residents: We ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses or other legally recognized mechanisms.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or would like to report a privacy concern, please contact us:
Nafasi, Inc.
Email: admin@nafasi.co
Website: https://www.nafasi.co
We will respond to your inquiry within 30 days (or within 45 days for formal privacy rights requests under CCPA/GDPR).
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of material changes by:
Your continued use of our Website following the posting of changes constitutes your acceptance of the updated Privacy Policy.
California residents have the right to know what categories of personal information are collected and how it is used. In the past 12 months, we have collected and used the following categories of personal information:
If you are a resident of Virginia, Colorado, Connecticut, or Utah, you have similar rights to those described in Section 5.1, including rights to access, correct, delete, and port your information, as well as the right to opt-out of targeted advertising.
This Privacy Policy has been designed with the intention of complying with:
© 2025 Nafasi, Inc. All Rights Reserved.
Engineering Equity - Building technology that serves everyone.