Effective: Nov 14, 2025
This Privacy Policy describes how Nemroot Technologies LLC and its subsidiaries and affiliates (collectively, "Nemroot", "we", "us" and/or "our") collects and manages your personal information - meaning information that relates to an identified or identifiable individual - as part of providing any services and products developed or administered by us, including without limitation our reputation management tools, messaging and communication tools, payment processing and related services, application programming interfaces, web and mobile applications, and any other services Nemroot may offer (collectively, the "Services"). Any capitalized terms used but not otherwise defined in this Privacy Policy have the meanings provided in Nemroot's Terms of Service.
To jump directly to a specific section of this Privacy Policy, click on the applicable link below:
This Privacy Policy primarily covers:
"Clients": companies, organizations, or other entities that have contracted with Nemroot for the Services. Where this term is used in this Privacy Policy in the context of the processing of the personal information of a Client, it refers to a Client that is an individual.
"Authorized Users": employees, agents, contractors, and any other users (including but not limited to Developer Partners or Third-Party Providers) whom a Client has authorized to access the Services on its behalf.
"Customers": individuals who are current or potential clients, customers, or patients of a Client.
In addition to the above, this Privacy Policy applies to individuals who visit http://www.nemroot.com ("Website"), which is part of the Services. In this Privacy Policy, "you" and "your" refers to you the reader, and how we process your personal information will depend on whether you are a Client, Authorized User, Customer, or Website visitor.
By using the Services or otherwise providing us with personal information, you acknowledge that your personal information will be processed and used in the manner set out in this Privacy Policy. We may amend this Privacy Policy from time to time in line with the Changes to Our Privacy Policy section below.
What personal information we collect depends on the nature of your interaction with the Services. While some personal information is collected automatically or through sources outside of Nemroot, most is collected when you use our Services. A breakdown of our collection practices is below. In all cases, the actual personal information we collect will vary depending on the Services used and your relationship with Nemroot.
If you are a Client or an Authorized User, we collect personal information from you in connection with your Subscription Documentation and use (or prospective use) of the Services, such as:
As part of our registration process and agreement to provide the Services, we may also collect additional information, such as your employer identification number, federal tax identification number, and other business-related information. When you add payment information to your account, we use a third-party service provider to collect and store your payment information.
For Clients using Nemroot's Payments Service, in addition to the information listed above, Nemroot may also collect or receive a copy of your driver's license or other identification documentation, a self-selected photograph of you, information about your financial account and transaction history (such as a voided check or bank statement), Social Security number of other national identification number, and business and individual public records such as liens, judgments, and lawsuits. For more information, please see the Nemroot Payments Service Terms.
If you are a Customer, we collect information from you through your use of the Services, which may include your use of our Webchat widget, contact forms, review invitations, Payments Service, and other related products. We also collect your personal information when you communicate with a Client via text message, phone, email, social media, or otherwise, or make a purchase from or otherwise complete a transaction with a Client.
Depending on the Services you use, we may collect personal information such as your:
We may also collect personal information when you visit our Website to browse, request information about our Services, download a white paper, schedule a product demo, or you subscribe to our media channels (e.g., blogs, YouTube, etc.). This personal information may include your:
Certain information may also be collected automatically when you visit our Website. For more information, see the Information Collected Automatically subsection below.
If you are a business partner integrated with Nemroot or looking to do so, we collect information such as your name and contact details as part of your application to integrate with our Services.
We collect certain information automatically whenever anyone uses our Services - whether you are a Client, Authorized User, Customer, or Website visitor.
We automatically collect details of your use of our Services, including traffic data, location data, logs, communication records (such as time of call or text message, call duration, call completion status, source number, and destination number) and other communication-related data, and the resources you access and use through the Services. We may also create inferred or derived data, such as a summary of information included in content processed by our artificial intelligence features.
Other websites, such as our Clients' websites, may integrate Nemroot's widgets (such as Nemroot Webchat). When you visit a site with an embedded Nemroot widget, we receive certain information about you, including information about the web page you visited and other information about your device.
We receive information about the device and software you use to access our Services, such as your internet protocol (IP) address, web browser type, operating system version, phone carrier and manufacturer, application installations, device identifiers, mobile advertising identifiers, and push notification tokens.
If you choose to link our Services to a third-party account, we may receive information about you from that third party, including your profile information, photo, and use of that account. If you choose to link a Google account to our Services, Nemroot's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy. If you choose to link your Google email account to our Services, Nemroot may use information from the emails in your linked account to develop, train, and improve artificial intelligence and/or machine learning models personalized for you, and in doing so may transfer such information to third-party artificial intelligence tools. Please note that Nemroot does not use Google Workspace APIs to develop, improve, or train generalized/non-personalized artificial intelligence and/or machine learning models.
The information we collect automatically by cookies, web beacons, and similar technologies may include:
See the Cookies and Similar Technologies section of this Privacy Policy for more information.
Customer proprietary network information ("CPNI") is certain information that relates to a U.S. Client/Authorized User or Customer that Nemroot collects in the course of providing the Nemroot Phones Service, and includes information such as: phone numbers dialed and received by Clients; number of phone numbers assigned to an account; average length of calls; and call detail records and usage data. CPNI does not include basic contact information (such as name, phone number, and address).
Nemroot uses CPNI for the purposes described in this Privacy Policy other than for marketing purposes, and protects the confidentiality of CPNI as required by law. Nemroot personnel are not permitted to access, use, or share any CPNI unless they are authorized and have a legitimate business need to do so.
Depending on whether you are a Client, Authorized User, Customer, or a Website visitor, we may also collect personal information about you from third parties including our marketing and service partners, identity verification and public record investigation services, and banks and other financial institutions. We may also collect information from you that is publicly available. For example, we may source information about a business from public search pages, or receive information about you if you interact with us or share your information through various social media channels.
We may at times receive or create de-identified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual. We maintain and use such information in de-identified form and do not attempt to re-identify the information except as required or permitted by law.
We use your personal information to provide you and our Clients with our Services and to manage our business operations. This includes communicating with you as part of our Services, as well as use for advertising and marketing purposes and as otherwise permitted by law. The nature of how we use personal information will depend on the specific Services you use, and may vary depending on whether you are a Client, Authorized User, Customer, or Website visitor. A more detailed breakdown of how we use personal information is below.
We may use your personal information to:
We may use your personal information to:
Please see the Your Rights and Choices section of this Privacy Policy for details regarding your choices you have regarding marketing communications and targeted advertisements from us.
We may use your personal information to communicate with you or provide information you have requested, such as:
We may use your personal information for legal, compliance, and security-related purposes, including to:
In certain instances, Nemroot may share the personal information it processes in order to provide our Services and for other purposes, as described in detail below.
We may share personal information with our Clients and their Authorized Users to provide the Services, fulfill requests, and for other purposes as described in this Privacy Policy. If you are a Customer, as part of providing the Services (for example, when you use our Webchat widget on a Client website, complete a transaction through our Payments Service, or leave a review for a Client), Nemroot will share your personal information with the applicable Client, such as your contact information, transaction details, and review and communication content.
If a Client integrates Nemroot with other applications or platforms, we may share personal information with the third-party integration partners selected by the Client when Nemroot is instructed to share that information as part of the Services.
We may also share personal information with third parties to provide, maintain, and improve our Services, including service providers who may access information about you to perform services on our behalf or on behalf of our Clients, such as hosting and information technology services, payment processing services, identity verification and fraud prevention services, marketing and advertising services, data analytics and personalization services, and customer support services. The Nemroot Service Partner page contains a list of Nemroot's main service providers who process personal information on Nemroot's behalf, as may be updated from time to time.
Additionally, we may share personal information we receive with our subsidiaries and affiliates for any of the purposes described in this Privacy Policy.
We may share personal information if we believe it is necessary:
We may share personal information with a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Nemroot's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Nemroot is among the assets transferred.
We retain personal information as long as reasonably necessary to provide the Services and for the other purposes set forth in this Privacy Policy. For example, we may retain information about users of our Services in order to comply with our legal and regulatory obligations or to protect our interests as part of providing the Services.
To determine the appropriate duration of the retention of personal information, we consider the amount, nature, and sensitivity of the personal information, and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other obligations. As to each type of personal information Nemroot collects, the retention period will vary depending on our relationship with the applicable individual. Generally, we retain a Client's personal information - including personal information of their Authorized Users and Customers - for the duration of our agreement with the Client plus a reasonable period following termination.
We strive to provide you with choices regarding the personal information we process about you. Depending on the nature of your relationship with Nemroot, you may be able to manage your personal information and preferences directly as part of the Services or by contacting Nemroot, as described below.
Your ability to update and manage the personal information we process will differ depending on your relationship with Nemroot and what Services you use.
We rely on you to ensure that the information in your account is accurate, complete, and up to date and ask that you notify us of any changes to your personal information. If you are a Client or Authorized User, you may access, change, or correct certain Nemroot account information at any time by logging into your account. You may also submit a request here or send us an email at data-privacy@nemroot.com to request access to, correct, or delete any personal information that you have provided to us or we have collected in a data controller capacity. We may need to verify your identity before processing your request. In certain instances, we may not be able to accommodate your request due to legal, contractual, or technical restrictions. Please note that as we cannot delete all of your personal information except by also deleting your Nemroot account.
Clients wishing to delete or exercise other choices about the Customer data Nemroot processes on their behalf in a service provider/processor capacity may do so by submitting a request here or sending us an email at data-privacy@nemroot.com. In some cases, we may retain a copy of your usage records, including the personal information contained in them, to carry out necessary functions like billing, troubleshooting, and detecting, preventing, and investigating spam, fraudulent activity, and network exploits and abuse. We may also be required to preserve Client records, including those containing personal information, due to litigation, law enforcement requests, or government investigations. If we have to do this, we will delete the impacted records when we are no longer legally obligated to retain them. We may, however, retain or use records after they have been de-identified, if permitted by law.
When we provide our Services to our Clients and their Authorized Users, we generally act as data processor or service provider on their behalf. This means that when we receive and otherwise process information pertaining to Customers as part of providing the Services, such as Customer names, contact information, text messages, call records, etc., we do so on behalf of our Clients and in accordance with their instructions. As such, if you wish to access, modify, or delete any personal information or the content of communications Nemroot processes as a service provider or data processor on behalf of a Client, you should direct your request to that Client rather than to Nemroot.
In other instances, if applicable, contact us as described in the Contact Us section of this Privacy Policy.
If you submit a request to update, delete, or otherwise manage your personal information, we will try to help you with your request free of charge. However, we may request that you pay a reasonable fee, such as if you request a transcript or a reproduction by mail. We will only do so if we are authorized by law, and if we notified you before and you've accepted the fees. To avoid any fraudulent request and protect your personal information, we may ask that you provide a proof of identity with your request. We will not use such personal information for any other purposes.
We will respond to your request as soon as reasonably practicable, and within the time period required by law. Please note that in certain circumstances, we may refuse to act or impose limitations on your rights, as permitted by the applicable law. If we cannot process your request, we may inform you of the reasons why, subject to any legal or regulatory restrictions, and outline further steps available to you.
In certain cases, depending on the nature of your request, there may also be residual information that will remain within our databases and other records, which, due to applicable law or as part of Services that are in the process of being carried out, will not be removed or changed. We will also retain information relating to your request for recordkeeping and compliance purposes.
As part of providing the Services, Nemroot (whether directly or through a third party) may send you different types of communications.
Nemroot may send you marketing and other promotional communications for new or existing Services that we think you might be interested in. These communications may include promotional emails, and marketing text messages if you have opted in to receive them. You may unsubscribe from Nemroot's promotional emails via the unsubscribe link provided in such emails. To stop receiving marketing text messages from Nemroot, text "REMOVE" in response to any Nemroot marketing text message you receive. If you unsubscribe from Nemroot marketing text messages and wish to resubscribe, reply "JOIN." For more information about text messages Nemroot sends on its own behalf, see our SMS Terms and Conditions.
Please note that you may still receive certain non-marketing communications from Nemroot after opting out as set forth above. These messages may include transaction-specific or account-specific communications.
If you are a Customer, our Clients may also send you marketing and promotional communications as part of their use of the Services. In these instances, please follow the instructions within those messages to opt out or reach out to the Client directly.
As part of your interaction with our Services, you may receive various non-marketing communications from Nemroot via email, text message, or telephone. These include, but are not limited to:
For Clients and Authorized Users:
For Customers:
For information about your choices regarding Nemroot's use of cookies and other similar technologies, see the Cookies and Similar Technologies section of this Privacy Policy.
We have implemented reasonable security measures that are designed to protect the information we maintain. These measures vary based on the sensitivity of the information we collect and process. However, we cannot guarantee that the collection, transmission, and storage of personal information will always be completely secure.
Where we have given you (or you have chosen) a password for access to certain features of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. Nemroot strongly recommends Clients enable multi-factor authentication.
This Privacy Policy only applies to information Nemroot processes when you visit our Website or otherwise use our Services. Nemroot's Clients are independent third parties that maintain their own business practices and policies outside of their relationship with Nemroot and their use of the Services. As a result, we are not responsible for the privacy policies or data practices of our Clients.
Moreover, while visiting our Website or using the Services, you may be directed through links to third-party websites or services that are not operated or controlled by Nemroot. We are not responsible for the privacy practices and policies of these third parties, and we encourage you to review the privacy policies of these third parties, as their practices may differ from ours.
Our Services are not targeted to or directed at children under the age of 13, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. If you have reason to believe a child under the age of 13 has provided personal information to us, we encourage the child's parent or guardian to contact us as described in the Contact Us section of this Privacy Policy to request that we remove the information from our systems.
Our Services are primarily hosted in the United States. If you choose to use the Services from other regions of the world with laws governing data processing that differ from those in the United States, please note that you are transferring your personal information outside of those regions to the United States for processing. Additionally, Nemroot (or our service providers on our behalf) may transfer your data from the United States to other regions in connection with our processing of data. We utilize appropriate safeguards for the transfer of personal information in various jurisdictions, and have implemented contractual arrangements or other measures for such purposes.
Your provision of personal information to us via the Services constitutes your consent to the transfer and processing of your personal information as described in this Privacy Policy.
If you are an Australian user accessing or using the Services from Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles contained therein apply to personal information collected or held by Nemroot entities with an "Australian link" (within the meaning of the Privacy Act). In addition, Nemroot is committed to complying with other applicable commonwealth, state, or territory privacy and data protection laws and regulations.
The table below provides a summary of certain categories of personal information Nemroot collects, the sources of that personal information, and how we use and disclose that personal information, as required by the California Consumer Privacy Act of 2018, as amended ("CCPA"). For more information, please see the generally applicable sections of our Privacy Policy above.
| Category of Personal Information | Examples* | Categories of Sources | Commercial/Business Purposes | With Whom it is Shared |
|---|---|---|---|---|
| Identifiers | Name, address, IP address, email address | • You or your devices, for example, through your use of our Services • Business partners • Service providers • Clients and Authorized Users |
• Provide, maintain, and support our Services • Manage our business and for internal operations • Advertise and market to you • Communicate with you • Legal, compliance, and security-related purposes |
• Clients and Authorized Users • Business partners, including advertising partners and ad networks • Service providers • Legal and other regulatory authorities |
| California Customer Records (Cal. Civ. Code § 1798.80(e)) | Name, telephone number | • You or your devices, for example, through your use of our Services • Business partners • Service providers • Clients and Authorized Users |
• Provide, maintain, and support our Services • Manage our business and for internal operations • Advertise and market to you • Communicate with you • Legal, compliance, and security-related purposes |
• Clients and Authorized Users • Business partners, including advertising partners and ad networks • Service providers • Legal and other regulatory authorities |
| Internet/Network Information | Website browsing activity and interactions, advertisement interactions | • You or your devices, for example, through your use of our Services • Service providers |
• Provide, maintain, and support our Services • Manage our business and for internal operations • Advertise and market to you • Communicate with you • Legal, compliance, and security-related purposes |
• Service providers • Business partners, including advertising partners and ad networks • Legal and other regulatory authorities |
| Geolocation Data | Course location information based on your device activity | • You or your devices, for example, through your use of our Services • Service providers |
• Provide, maintain, and support our Services • Advertise and market to you • Legal, compliance, and security-related purposes |
• Service providers • Business partners, including advertising partners and ad networks • Legal and other regulatory authorities |
| Sensory Information | Call recordings, transcripts, and other audio, electronic, and similar information | • You or your devices, for example, through your use of our Services • Service providers |
• Provide, maintain, and support our Services • Manage our business and for internal operations • Legal, compliance, and security-related purposes |
• Clients and Authorized Users • Service Providers • Legal and other regulatory authorities |
| Professional or Employment Information | Job title, professional website, job application information | You, for example, if you fill out a form on our Website, create a Nemroot account, or apply for a role at Nemroot | • Provide, maintain, and support our Services • Manage our business and for internal operations • Legal, compliance, and security-related purposes |
• Service providers • Business partners • Legal and other regulatory authorities |
| Inferences | Inferences drawn from any of the above categories of personal information (e.g., preferences or characteristics) | • You or your devices, for example, through your use of our Services • Clients and Authorized Users |
• Provide, maintain, and support our Services • Manage our business and for internal operations • Advertise and market to you • Legal, compliance, and security-related purposes |
• Clients and Authorized Users • Business partners • Service providers • Legal and other regulatory authorities |
Nemroot does not "sell" or "share" sensitive personal information, or otherwise use or disclose sensitive personal information for purposes other than those specified in § 1798.121(a) of the CCPA.
| Category | Source | Purpose | Sharing |
|---|---|---|---|
| Social Security Number | You, for example, if you sign up for the Nemroot Payments Service | • Provide, maintain, and support our Services • Legal, compliance, and security-related purposes |
• Service providers • Legal and other regulatory authorities |
| Driver's License or State ID Number | You, for example, if you sign up for the Nemroot Payments Service | • Provide, maintain, and support our Services • Legal, compliance, and security-related purposes |
• Service providers • Legal and other regulatory authorities |
| Account Login and Password | You, if you create a Nemroot account | • Provide, maintain, and support our Services • Legal, compliance, and security-related purposes |
• Service providers • Legal and other regulatory authorities |
| Health Data | You, if you provide such information to a Client via the Services | • Provide, maintain, and support our Services • Legal, compliance, and security-related purposes |
• Service providers • Legal and other regulatory authorities |
*Note that the actual personal information collected will depend on the nature of an individual's relationship with Nemroot and the specific Services provided.
If you are a California resident, you may exercise your rights under the CCPA to have personal information Nemroot collects about you in a data controller/business capacity by following the instructions in the Your Rights and Choices section of this Privacy Policy.
If you are located in Canada, subject to applicable law and the nature of your relationship with Nemroot, you may have the right to review, correct, delete, or otherwise limit our use of your personal information that has been previously provided to us. You may also have the right to access information about the ways in which your personal information is or has been used and the names of individuals and/or organizations to which your information has been disclosed. You may exercise such rights by following the instructions in the Your Rights and Choices section of this Privacy Policy.
The Office of the Privacy Commissioner of Canada drafted this FAQ to help you access your personal information when it is held by a business. You can also contact the Office of the Privacy Commissioner of Canada's Information Centre at 1-800-282-1376 or by mail at: Office of the Privacy Commissioner, 30 Victoria Street, Gatineau, Québec K1A 1H3.
If you have any issue with how we process your personal information, or how we responded to your request, please let us know. We will try to improve our processes and provide you with additional information about our practices if you would like us to do so. If you are still not satisfied, you can lodge a complaint to the Office of the Privacy Commissioner of Canada using this online form, or to your local privacy regulators.
Nemroot will post any changes we make to our Privacy Policy on this page. The date the Privacy Policy was last revised is identified at the top of this page. If we make material changes to how we process personal information, we will notify Clients and Authorized Users by email to the primary email addresses specified in their accounts. If you are a Client or Authorized User, you are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Services and this Privacy Policy to check for any changes.
Collection of Mobile Information: Nemroot processes consumer lead information, including mobile phone numbers, solely on behalf of automotive dealerships for service-related communication. Nemroot does not collect mobile consent directly, does not originate consumer contact, and does not sell, share, or use mobile numbers for marketing or promotional purposes. We collect mobile phone numbers solely for the purpose of delivering service related messages, account notifications, support communications, and other operational messaging.
No Sharing of Mobile Information: We do not share, sell, rent, or disclose mobile phone numbers or SMS consent data with third parties or affiliates for marketing or promotional purposes.
SMS Opt-In & Opt-Out: Users may opt in to receive SMS updates from Nemroot or from businesses using Nemroot’s messaging tools. Messaging frequency may vary. Message & data rates may apply.Reply STOP to opt out at any time. Reply HELP for help.
Use of Mobile Information: Mobile information will only be used for delivering messages associated with the Services, including appointment reminders, order updates, verification codes, and customer support.
If you have questions about our Privacy Policy, our data processing practices, or our compliance with applicable privacy laws, please email us at data-privacy@nemroot.com, write to us at: Nemroot Technologies LLC, Attn: Legal Department, or contact us via support@nemroot.com.
In the event you are a user with a disability, or are supporting an individual with a disability, and are having difficulty navigating this Privacy Policy or the information linked within this Privacy Policy, please contact us at data-privacy@nemroot.com.