1. Information We Collect
1.1 Information You Provide
We collect information you provide directly to us, such as when you:
- Create an account or use our services
- Request early access or contact our sales team
- Subscribe to our newsletter or marketing communications
- Participate in surveys, contests, or promotions
- Contact us for customer support
This information may include:
- Name, email address, phone number, and company information
- Account credentials and authentication information
- Payment information (processed securely by third-party payment processors)
- Communication preferences and marketing consent
- Any other information you choose to provide
1.2 Information Collected Automatically
When you use our services, we automatically collect certain information, including:
- Log data (IP addresses, browser type, operating system)
- Usage data (features used, time spent, frequency of access)
- Device information (device type, unique device identifiers)
- Network monitoring data (only as configured by your organization)
1.3 Network Monitoring Data
As a network monitoring service, SuperNMS processes technical data about your network infrastructure, including:
- Network device status and performance metrics
- SNMP data and device configurations
- Network traffic patterns and connectivity information
- System logs and alert data
Important: We only access network data that you explicitly configure SuperNMS to monitor. We do not access any data outside the scope of your monitoring configuration.
2. How We Use Your Information
We use the information we collect to:
- Provide Services: Deliver, maintain, and improve our network monitoring services
- Customer Support: Respond to your requests, provide technical support, and resolve issues
- Communication: Send you service-related notifications, updates, and marketing communications (with your consent)
- Analytics: Analyze usage patterns to improve our services and develop new features
- Security: Detect, prevent, and respond to security threats and fraudulent activity
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
3. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
3.1 Service Providers
We work with trusted third-party service providers who assist us in operating our business, such as:
- Cloud hosting and infrastructure providers
- Payment processing companies
- Email and communication service providers
- Analytics and monitoring tools
These providers are contractually obligated to protect your information and use it only for the services they provide to us.
3.2 Legal Requirements
We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:
- Comply with legal obligations or respond to lawful requests
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing
- Protect the personal safety of users or the public
3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
4. Data Security
We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption: Data is encrypted in transit and at rest using industry-standard encryption
- Access Controls: Strict access controls limit who can access your data
- Monitoring: Continuous security monitoring and incident response procedures
- Compliance: SOC 2 Type II and ISO 27001 certified security practices
- Regular Audits: Regular security assessments and penetration testing
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but maintain industry-leading security practices.
5. Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
- Account Data: Retained while your account is active and for a reasonable period thereafter
- Monitoring Data: Retained according to your retention settings (typically 30-365 days)
- Support Communications: Retained for up to 3 years for quality assurance
- Marketing Data: Retained until you opt out of communications
You may request deletion of your personal information at any time, subject to legal and contractual obligations.
6. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request access to the personal information we have about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your information in a structured format
- Restriction: Request restriction of processing in certain circumstances
- Objection: Object to processing of your information for certain purposes
To exercise these rights, please contact us at privacy@supernms.com. We will respond to your request within 30 days.
6.1 Marketing Communications
You can opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link in our emails
- Updating your preferences in your account settings
- Contacting us directly at privacy@supernms.com
7. International Data Transfers
SuperNMS operates globally, and your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.
When we transfer personal information internationally, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by regulatory authorities
- Adequacy decisions by relevant data protection authorities
- Certification schemes and codes of conduct
8. Children's Privacy
Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending you an email notification (if you have provided an email address)
- Providing notice through our services
The updated policy will be effective immediately upon posting unless otherwise specified.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We are committed to resolving any privacy concerns you may have and will respond to your inquiries promptly.