Privacy Policy

1. Introduction

NSSG Consulting ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Name and contact information (email, phone number)
• Company name and job title
• Business requirements and challenges
• Budget and timeline information
• Messages and inquiries you send us

2.2 Information We Collect Automatically

When you visit our website, some information is collected automatically by our hosting and delivery providers (Vercel and Cloudflare, including Cloudflare Web Analytics) and by Google Analytics, which sets analytics cookies only if you consent. Section 4 explains what each one collects and what your consent choice changes:

• Browser type and version
• IP address and location data
• Pages visited and time spent on pages
• Referring website addresses
• Device information

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Send you information about our services and updates
• Improve our website and user experience
• Analyze usage patterns and optimize our services
• Comply with legal obligations
• Prevent fraud and ensure security

4. Analytics, Cookies, and Your Consent

4.1 Google Analytics 4

Our pages load Google Analytics 4 through Google's gtag.js script. Loading that script means your browser connects to Google's servers, which receive your IP address and browser details as part of the request.

We configure Google Consent Mode so that analytics storage, ad storage, ad user data, and ad personalization all start as denied before you make a choice. While analytics storage is denied, Google Analytics does not set analytics cookies on your device. Under Consent Mode, Google's tag may still send limited signals without cookies, such as the fact that a page was loaded.

• If you choose "Accept All", or turn on Analytics Cookies under "Customize": analytics storage switches to granted. Google Analytics may then set its first-party cookies and record how you use the site, such as pages visited, the referring site, device and browser type, and approximate location derived from your IP address.
• If you choose "Reject Non-Essential", or leave Analytics Cookies off: analytics storage stays denied.
• Advertising: ad storage, ad user data, and ad personalization stay denied whatever you choose. We do not use Google Analytics for advertising.

4.2 Cloudflare Web Analytics

Our site is served through Cloudflare, which adds its Web Analytics script to our pages. It loads whether or not you accept analytics cookies, because it is not controlled by our consent banner. It sends Cloudflare page-load and performance measurements, such as the page address, the referring site, and load timings. Cloudflare states that Web Analytics does not use cookies or local storage to track visitors.

4.3 How Your Choice Is Stored

Your consent choice is saved in your browser's local storage, not in a cookie, and we ask again after 12 months. To change your choice at any time, use the "Cookie settings" link in the site footer. You can also clear this site's stored data in your browser, and the banner will appear again on your next visit. The Provenance page applies the choice you made elsewhere on the site but does not show the banner itself. You can also block cookies through your browser settings.

5. Third-Party Services

We use the following third-party services that may collect information:

• Resend: For processing contact form submissions
• Cloudflare Turnstile: For bot protection on our forms. The Turnstile script loads on our pages.
• Google Analytics 4: For website analytics, as described in Section 4.1
• Cloudflare Web Analytics: For page-load and performance measurement, as described in Section 4.2
• Google Fonts: Our page fonts load from Google's servers, which receive your IP address and browser details as part of the request
• Hosting Providers: Vercel hosts the website and Cloudflare provides network delivery and security in front of it

These third parties have their own privacy policies governing their use of information.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the internet is fully secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Contact form submissions and inquiries are typically retained for up to 5 years for business purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Objection: Object to processing of your personal information
• Portability: Request transfer of your information
• Withdraw Consent: Withdraw consent for data processing

To exercise these rights, please contact us at [email protected].

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

13. Vendor Pitch Evaluation Submissions

Our agent-evaluation service (the "Evaluate Vendors" page) accepts uploaded files and accompanying context from prospects evaluating AI-agent vendor pitches. The following describes our handling of those submissions.

13.1 What We Collect

• Uploaded files in PDF, DOCX, PPTX, TXT, or MD format (up to 10 files, 25 MB per file, 100 MB total)
• Submitter name and email
• Company name (optional)
• Vendor name and pipeline stage
• Free-text context you choose to provide
• A timestamp and a server-generated submission ID

You should not include sensitive personal data (Social Security numbers, payment-card data, medical records, or similar) in either the uploaded files or the free-text context.

13.2 Where Submissions Are Stored

Submissions are stored in a private, encrypted Cloudflare R2 bucket. Only NSSG staff with explicit access can review them. Files are never made publicly accessible.

13.3 Retention and Deletion

Submitted files and accompanying metadata are automatically deleted 90 days after submission via a Cloudflare R2 lifecycle rule. You may also request earlier deletion by emailing [email protected] and referencing your submission ID.

13.4 What We Do Not Do

• We do not share submissions with any third party outside NSSG staff who review them.
• We do not use submissions to train, fine-tune, or otherwise improve any AI model.
• We do not resell, rent, or otherwise commercialize submission content.

13.5 NDA-Sensitive Context

If you indicate that the vendor pitch is NDA-sensitive, our review process treats the submission as confidential under standard professional consulting practice. We do not sign third-party NDAs as part of this free review service. If you require a formal NDA, please contact us before submitting.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us: