Privacy Policy

This Privacy Policy describes how Nimble Security Inc., a Delaware corporation (“Nimble,” “we,” “us,” or “our”), collects, uses, and shares information in connection with the company website located at https://www.nimble.security/ (the “Site”).This Privacy Policy does not govern personal information that Nimble processes on behalf of customers through the Nimble platform. Such processing is governed by our agreements with those customers, including any applicable data processing agreement.

By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account Registration. If you create an account on the Site, we collect your name, email address, and any other information you provide during registration (such as company name, job title, or profile photo).
• User-Generated Content. If you post, submit, or share content through the Site (such as comments, discussion posts, or other contributions), we collect and store that content along with associated metadata (such as the date, time, and your account identifier).
• Newsletter Subscription. If you subscribe to our newsletter, we collect your email address.
• Event Registration. If you register for an event, we may collect your name, email address, company name, and job title.
• Communications. If you contact us directly, we may collect your name, company, email address, and the content of your message.

1.2 Information Collected Automatically

When you visit the Site, certain information is collected automatically, including:

• Log Data. Your IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and time spent on pages.
• Cookies and Similar Technologies. We use cookies and similar tracking technologies to operate the Site and analyze usage. See Section 5 below for more detail.
• Device Information. Device type, screen resolution, and general location (city/region level, derived from IP address).

1.3 Information from Third-Party Services

When you visit the Site, certain information is collected automatically, including:

• Webflow. Our Site is hosted on Webflow, which may collect log data and use cookies for site functionality and analytics. Webflow’s privacy policy is available at https://webflow.com/legal/privacy.
• Google Analytics. We use Google Analytics to collect and analyze information about how users interact with the Site, including pages visited, session duration, traffic sources, and general geographic location. Google Analytics uses cookies and may collect your IP address. Google’s privacy policy is available at https://policies.google.com/privacy. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.
• LinkedIn Insight Tag. We use LinkedIn’s tracking pixel (Insight Tag) to measure the effectiveness of our LinkedIn campaigns, enable retargeting, and gain aggregated demographic insights about Site visitors. The LinkedIn Insight Tag may collect information including your IP address, device and browser information, timestamps, and page URLs. If you are a LinkedIn member, this information may be associated with your LinkedIn account. LinkedIn’s privacy policy is available at https://www.linkedin.com/legal/privacy-policy. You can opt out of LinkedIn’s data collection for advertising purposes in your LinkedIn account settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To operate and maintain the Site. Including delivering Content, hosting pages, managing user accounts, and ensuring site functionality.
• To provide account features. To create and manage your account, authenticate your identity, and enable you to post and interact with User Content on the Site.
• To send newsletters. If you have subscribed, we use your email address to send periodic newsletters.
• To communicate with you. To respond to your inquiries, provide event-related information, send account-related notifications, or send administrative notices.
• To analyze and improve the Site. To understand how users interact with the Site, identify trends, measure the effectiveness of marketing campaigns, and improve the user experience. This includes analysis through Google Analytics and LinkedIn Insight Tag.
• To protect our rights. To enforce our Terms of Service, protect the security and integrity of the Site, moderate User Content, and comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information.

We may share your information in the following limited circumstances:

• Service Providers. We share information with third-party service providers who assist us in operating the Site (e.g., Webflow for hosting, email delivery providers for newsletters). These providers are contractually obligated to use your information only to provide services to us and in accordance with this Privacy Policy.
• Analytics and Advertising Partners. We share information with Google (via Google Analytics) and LinkedIn (via LinkedIn Insight Tag) to analyze Site usage and measure marketing effectiveness. These partners may use cookies and similar technologies to collect information about your use of the Site. See Section 5 for details and opt-out options.
• Legal Requirements. We may disclose your information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request.
• Business Transfers. In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change by updating this Privacy Policy.
• With Your Consent. We may share your information for any other purpose with your explicit consent.

4. Data Retention

We retain your information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy:

• Account information is retained for as long as your account is active. If you delete your account, we will delete your account information within a commercially reasonable timeframe, except as required by law or as necessary to resolve disputes.
• User Content is retained for as long as your account is active. Upon account deletion, your User Content may be removed or anonymized at our discretion. Content that has been shared with or viewed by other users may persist in anonymized form.
• Newsletter email addresses are retained until you unsubscribe or request deletion.
• Log data and analytics are retained in accordance with our service providers’ standard retention periods (typically 14–26 months for Google Analytics).
• Communications are retained for as long as necessary to resolve your inquiry and for a reasonable period thereafter.

5. Cookies and Tracking Technologies

5.1 What We Use

5.1 Your Choices

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete existing cookies. Note that disabling cookies may affect the functionality of the Site.

Do Not Track. Some browsers offer a “Do Not Track” (“DNT”) signal. Because there is not currently a universally accepted standard for responding to DNT signals, our Site does not currently respond to them. Third parties, including our analytics and advertising partners, may collect information about your online activities over time and across different websites or online services as described in this Privacy Policy.

You can also opt out of specific tracking technologies:

• Google Analytics: Install the Google Analytics Opt-Out Browser Add-on.
• LinkedIn: Adjust your advertising preferences in your LinkedIn account settings.

6. Your Rights and Choices

6.1 Your Account

If you have an account on the Site, you may update your account information at any time by logging into your account. You may also request deletion of your account by contacting us at the email address below. Upon account deletion, we will delete or anonymize your personal information in accordance with Section 4 above.

6.2 Newsletter

You may unsubscribe from our newsletter at any time by clicking the “unsubscribe” link in any newsletter email, or by contacting us at the email address below.

6.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to Delete. You may request that we delete the personal information we have collected about you, subject to certain exceptions.
• Right to Correct. You may request that we correct inaccurate personal information.
• Right to Opt-Out of Sale/Sharing. We do not sell your personal information. Our use of the LinkedIn Insight Tag may constitute “sharing” of personal information for cross-context behavioral advertising under the CCPA/CPRA. You may opt out of this sharing by adjusting your LinkedIn advertising preferences or by contacting us at the email address below.
• Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.
• Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.

To exercise these rights, contact us at the email address below. We will verify your identity before processing your request.

6.4 Other U.S. State Privacy Laws

Residents of other states with applicable privacy laws (including Virginia, Colorado, Connecticut, and others) may have similar rights. Contact us to exercise those rights.

6.5 International Users

The Site is operated from the United States. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate.

7. Security

We implement reasonable administrative, technical, and organizational measures designed to protect the information we collect. However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information.

8. Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date at the top of this page. Your continued use of the Site after any changes constitutes your acceptance of the revised Privacy Policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: