nCino's Privacy Statement
Effective Date: June 1, 2024
nCino Inc. (the, “Company”) and our subsidiary companies nCino Opco, Inc., Integrated Lending Technologies, LLC, DocFox, Inc., nCino Canada, Inc., nCino Global Limited, nCino France SAS, nCino Germany GmbH, nCino Spain SL, nCino Sweden A.B, nCino K.K, nCino APAC Pty Ltd, FinSuite Pty Ltd, nCino New Zealand Limited, DocFox Africa Pty Ltd. (collectively “nCino,” “we” or “us”) are committed to privacy and to transparency in our information practices. This Privacy Statement describes how we collect, use, disclose, and otherwise process the personal information described in this Privacy Statement, as well as the rights and choices individuals have regarding such personal information. This Privacy Statement applies to the extent we process personal data on our own behalf, as a controller or business.
You can click the links below to go directly to a particular section in our Privacy Statement.
1. Scope
This Privacy Statement applies to our collection, use, disclosure, and other processing of personal information, as a controller or business, related to:
Our Websites (each, a “Website”) and mobile applications (each, an “App”) that display or link to this Privacy Statement
Marketing activities including any communication about nCino events, products and services which may be aimed at former, current, and prospective clients and customers.
Individuals who interact or communicate with us related to our Services or our business.
(Collectively, the “Services”).
Our collection, use, disclosure, and processing of personal information about individuals will vary depending upon the circumstances. This Privacy Statement is intended to describe our overall privacy and data protection practices.
Not covered by this Privacy Statement. This Privacy Statement does not apply to job applicants and candidates who apply for employment with us or to our employees and non-employee workers. It also does not apply to the personal information that we process on behalf of our customers, as a processor or service provider. Our customers are the controller (or “business”) for the personal information that we process on their behalf and may be subject to separate data protection agreements.
Additional privacy notices. In some cases, different or additional notices about our data collection and processing practices may be provided and apply to our processing of certain personal information. The additional notice will control to the extent there is a conflict with this Privacy Statement, with respect to your personal information that is subject to that notice.
2. Collection of Personal Information
Generally, we collect your personal information on a voluntary basis. However, if you decline to provide certain personal information that is marked mandatory, you may not be able to access certain Services or we may be unable to fully respond to your request or inquiry.
We may collect personal information directly from individuals, automatically related to the use of the Services, and in some cases, from third parties (such as social networks, platform providers, payment processors, data providers, and operators of certain third- party services that we use). In some cases (such as where required by law), we ask for your consent or give you certain choices prior to collecting or using certain personal information.
Information we collect directly. We collect information that you provide to us, such as:
Registration information. When you register for a nCino demonstration or register interest or sign up to attend our events as well as other requests that you submit to us. For example, if you register for or attend an event that we host or sponsor, we collect certain personal data from you, such as your name and email address, phone number, address and other contact information, that you otherwise submit to us. When you fill out a ‘Contact Us’ form, signup for our mailing lists, or otherwise request information from us, we collect and maintain records of your request.
Payment details. When you make a purchase or payment, we may collect purchase and payment information in order to process your payment, such as your credit card number and applicable shipping and billing address.
Communications and interactions. When you email, call, or otherwise communicate with us and with members of our team, we collect and maintain a record of your contact details, communications and our responses. We also maintain records communications and information that you post in chat sessions, forums and in other areas of the Services, well as on our social media channels, and information you provide to us related to any customer support requests.
Sweepstakes, contests and promotions. If you participate in sweepstakes, contests and promotions that we offer, we will collect your name, age, email address, and other registration information related to contests, sweepstakes and promotions.
Information collected from third parties. We may also collect personal information about individuals from other third-party sources, such as social media platforms and channels, forums and other third-party sites, and public databases, as well as from other third parties who support our business activities. For example:
If you post information about us or our Services or engage with us on third party platforms or social media, we may collect personal information about you from that third party platform or account. These third-party platforms and services control the information they collect and share about you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies.
In some cases, we may use or augment the personal information we have about you with information obtained from other sources, such as public databases and other third parties. nCino may combine or aggregate the information we collect from third party sources with the information we may collect about you directly or otherwise.
Information we may collect via automated means or derive about you. We may also, directly or via third parties, collect personal information related to your use of our Services and your interactions with us and our content, including information your device and browser information, activities and usage data about your use of our Services, and location information derived from your IP address or your mobile device.
For information about our collection of personal information via cookies and similar tracking technologies, and the choices you have regarding our use of cookies and related information collection, see Section 6. Cookies, Analytics and Targeting below.
We do not collect, use or disclose of sensitive personal information from the use of the Services.
3. Purposes of Use and Processing of Personal Information
While the purposes for which we may process personal information will vary depending upon the circumstances, in general we collect, use, disclose and otherwise process personal information for the purposes set forth below, as well as the legal basis for such processing, as applicable under relevant laws (see Section 15A)
Providing support and services: including, for example, to communicate with you related to our Services or business, provide products and services you request (and send related information), operate our Services; to communicate with you about your access to and use of our Services; to respond to your inquiries; to provide troubleshooting, fulfill your requests and provide technical support; and for other customer service and support purposes. (Legal basis: performance of our contract with you; and our legitimate interests)
Analyzing and improving our business: including to better understand how users access and use our Services, to evaluate and improve our Services and business operations, and to develop new features, offerings, and services; to conduct surveys, and other evaluations, such as customer satisfaction surveys; and for other research and analytical purposes. (Legal basis: our legitimate interests)
Personalizing content and experiences: including to provide or recommend features, content, social connections, and referrals; tailor content we send or display on our Services; to offer location customization and personalized help and instructions; and to otherwise personalize your experiences. (Legal basis: our legitimate interests and/or with your consent)
Advertising, marketing and promotional purposes: including to reach you with more relevant ads and to evaluate, measure, and improve the effectiveness of our ad campaigns; to send you newsletters, offers, or other information we think may interest you; to contact you about our Services or information we think may interest you; and to administer promotions and contests. (Legal basis: our legitimate interests and/or with your consent)
Securing and protecting our business: including to protect and secure our business operations, assets, Services, network and information and technology resources; to investigate, prevent, detect and take action regarding fraud, unauthorized access, situations involving potential threats to the rights or safety of any person or third party, or other unauthorized activities or misconduct. (Legal basis: our legitimate interests and/or compliance with laws)
Defending our legal rights: including to manage and respond to actual and potential legal disputes and claims, and to otherwise establish, defend or protect our rights or interests, including in the context of anticipated or actual litigation with third parties. (Legal basis: our legitimate interests and/or compliance with laws)
Planning and facilitating business transactions: related to any actual or contemplated merger, acquisition, asset sale or transfer, financing, bankruptcy or restructuring of all or part of our business. (Legal basis: our legitimate interests and/or compliance with laws)
Auditing, reporting, corporate governance, and internal operations: including relating to financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; and our general business, accounting, record keeping and legal functions. (Legal basis: our legitimate interests and/or compliance with laws)
Complying with legal obligations: including to comply with the law, our legal obligations and legal process, such warrants, subpoenas, court orders, and regulatory or law enforcement requests. (Legal basis: our legitimate interests and/or compliance with laws)
4. Disclosure of Personal Information
We may disclose the personal information we collect to third parties, as reasonably necessary for the purposes described above and as otherwise directed or consented to by you, including:
Vendors and service providers: to our service providers, processors and others who perform functions on our behalf. These may include, for example, IT and hosting providers, help desk, payment processors, analytics providers, consultants, auditors and legal counsel.
Subsidiaries and affiliates: to our affiliates or subsidiaries, who will use and disclose this personal information in accordance with the principles of this Privacy Statement, including to share relevant news, information and offers with you.
Third party platforms, providers and networks: to third party platforms and providers that we use to provide or make available certain features or portions of the Services, or as necessary to respond to your requests. We may also make certain information that includes personal data available to third parties in support of our marketing, analytics, advertising and campaign management (see Section 6. Cookies, Analytics and Targeting for more information).
Business transfers: as part of any actual or contemplated merger, sale, and transfer of our assets, acquisition, financing or restructuring of all or part of our business, bankruptcy or similar event; and prior to the completion of such a transfer, where necessary for due diligence or to plan for the transfer, such as to lenders, auditors, and third-party advisors, such attorneys and consultants, where permitted by law.
Legally required: where we are required to do so by law or legal process (e.g., to law enforcement, courts or others, e.g., in response to a subpoena or court order).
Protect our rights: where we believe it necessary to respond to claims asserted against us or, comply with legal process (e.g., subpoenas or warrants), enforce or administer our agreements and terms, for fraud prevention, risk assessment, investigation, and to protect the rights, property, or safety of us, our clients and customers or others. including personal information, related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
5. Aggregate and Non-identifiable Data
We may also use, disclose and aggregate, non-identifiable personal information for quality control, analytics, research, development and other purposes. Where we use, disclose or process de-identified personal information (data that is no longer reasonably linked to an identified or identifiable natural person, household, or personal or household device)we will maintain and use the information in de-identified form and not to attempt to reidentify the information, except as permitted by applicable privacy laws.
6. Cookies, Analytics and Targeting
Our Services may use first party and third-party cookies, pixel tags, plugins, and other tools to gather device, usage and browsing information when users access our Services. For instance, when you visit our Websites, our server may record your IP address (and associated location information) and other information such as the type of your internet browser, your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, and the pages you view and links you select on the Services, as well as date and time stamps associates with your usage of and activities on our Websites.
We use the information for security purposes, to facilitate navigation, to improve, analyze and optimize our Services and their functionality, to personalize and improve your experience while using the Services, to improve and measure our advertising campaigns, and to better reach users with relevant advertising both on our Services and on third party websites.
Cookies: these are small text files that a website transfers to your browser to store and sometimes collect information about your usage of websites, such as time spent on the websites, pages visited, language preferences, and other anonymous traffic data. You can control the way in which cookies are used by altering your browser settings. You may refuse to accept cookies by activating the setting on your browser that allows you to reject cookies. However, if you select such a setting, this may affect the functioning of our Services.
Pixel tags and other similar technologies (also known as web beacons and clear GIFs): these may be used in connection with some Websites to, among other things, track the actions of users of the Websites (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Websites and response rates. We and our service providers may also use pixel tags in HTML emails to our customers, to help us track email response rates, identify when our emails are viewed, track whether our emails are forwarded, and conduct analytics.
Third party analytics tools: our Websites use automated devices and applications operated by third parties, such as Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Websites and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices and opt-out of collection of your browsing data by Google Analytics at https://tools.google.com/dlpage/gaoptout.
Targeted advertising: we work with third parties, such as ad networks, channel partners, mobile ad networks, analytics and measurement services and others (“third-party ad companies”) to personalize content and advertising and to manage our advertising on third-party sites, mobile apps and online services. We may share certain information with these third-party ad companies, and we and them may use cookies, pixels tags, and other tools to collect usage and browsing information within our Services, as well as on third-party sites, apps and services, such as IP address, location information, device ID, cookie and advertising IDs, and other identifiers, as well as browsing information. We and these third-party ad companies use this information to provide you more relevant ads and content on third-party sites and apps, and to evaluate the success of such ads and content.
Custom lists and matching: we may share or make available certain customer list information (such as your name, email address and other contact information) with third parties (i) so that we can better target ads and content to you across third party sites, platforms and services, and (ii) in some cases, these third parties may help us to enhance our customer lists with additional demographic or other information, so we can better target our advertising and marketing campaigns.
Managing your preferences. We make available several ways for you to manage your preferences regarding targeted advertising, matching and cookies within our Services. Many of these are browser and device specific, which means that you need to set the preference for each browser and device you use to access our Services; in addition, if you delete or block cookies, you may need to reapply these preferences.
Cookie preference manager: you can review or change your preferences for targeting cookies and tags on one of our Websites by clicking the Cookie Settings icon. These settings are browser and device specific. So, if you come to our Website from a different device or from a different browser on the same device, or if you delete cookies, you will need to reapply your preferences.
Custom lists and matching: once you review or change preferences for targeting cookies and tags on one of our Websites by clicking the Cookie Settings icon, you will be opting out of custom lists and matching.
Industry ad choice programs: you can also control how participating third-party ad companies use the information that they collect about your visits to our Websites and use of our mobile applications, and those of third parties, in order to display more relevant targeted advertising to you. If you are in the U.S., you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance). You may also use the DAA AppChoices (https://youradchoices.com/appchoices) tool in order to help control interest-based advertising on apps on your mobile device. In addition, users in the following jurisdictions may obtain more information at the following links:
EU Users: youronlinechoices.eu (European Interactive Digital Advertising Alliance)
Canada Users: youradchoices.ca/choices/ (Digital Advertising Alliance of Canada)
Japan: http://www.ddai.info/optout (Data Driven Advertising Initiative in Japan)
Browser settings: if you wish to prevent cookies from tracking your activity on one of our Websites or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies.The Help portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Services who disable cookies will be able to browse the Site, but some features may not function.
Browser signals: our Websites do not recognize browser ‘do-not-track’ signals. If you are a resident of California, see Section 15B. California Residents for information about how we process ‘Global Privacy Control’ signals.
7. Third Party Sites and Links
The Services may contain links to third-party services. We do not own, operate, or control the websites of third parties. Accordingly, this Privacy Statement does not apply to any services maintained or operated by third parties. When you click on those links, you will go to a third-party website where you will be subject to that service’s privacy policy or similar statement and terms of use, and we encourage you to read that policy statement. We are not responsible for the privacy practices of other services, and we expressly disclaim any liability for their actions, including actions related to the use and disclosure of personal information by those third parties.
8. International Data Transfers
nCino is headquartered in the United States. We and our vendors have operations in multiple jurisdictions, and our business processes and technical systems may operate across borders. Your personal information may be transferred to and processed in the United States and elsewhere, where our affiliates and vendors are located, and it may be subject to the laws and request from law enforcement authorities in these jurisdictions.
The United States and other countries may not have equivalent data protection laws as the country from which you provided the personal information. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we transfer or process it. Where the GDPR, UK GDPR, Brazil, Swiss or UK data protection laws apply, this generally includes entering into the EU standard contractual clauses and/or the UK International Data Transfer Agreement for data transfers where required by applicable laws.
Data Privacy Framework. nCino Inc. and nCino Opco, Inc. (US nCino entities) comply with EU-U.S. Data Privacy Framework the UK extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Privacy Framework (the "Data Privacy Frameworks") as set forth by the U.S. Department of Commerce. nCino certified to the U.S. Department of Commerce that it complies with the Data Privacy Frameworks regarding the collection, use, and retention of personal information transferred from the European Union, United Kingdom, and Switzerland to the United States. If there is any conflict between the terms in this privacy policy and the Data Privacy Framework (DPF) Principles, the Data Privacy Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
US nCino entities are responsible for the processing of Personal Data it receives under the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF, and subsequently transfers to a third party acting as an agent on behalf. US nCino entities comply with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF Principles for all onward transfers of Personal Data from the EU, UK and Switzerland, including the onward transfer liability provisions.
In compliance with the DPF, US nCino entities commit to resolve inquiries and complaints about our collection or use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our DPF practices should first contact nCino using the information in the "How to contact us" section, below. If you do not receive a timely response of if you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. Under certain conditions, more fully described on the DPF website (https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
The Federal Trade Commission has jurisdiction over nCino's compliance with the DPF.
US nCino entities also commit to cooperate with EU data protection authorities (DPAs), the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the UK Information Commissioner’s Office (UK ICO). US nCino entities further commit to comply with the advice given by the such authorities with regard to human resources data transferred from the EU, UK and Switzerland in the context of the employment relationship. You can contact the data protection supervisory authority in your jurisdiction for assistance with any concerns relating to human resources data.
9. Children
The Services are not intended or directed at children. If you are a parent and you believe we have collected your child’s information, please contact us as set forth below in Section 14. Contact Us and we will delete such information from our systems.
10. Security
We have implemented safeguards that are intended to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security. There are also certain steps you can take to better protect against unauthorized access to your personal information. For example, you should not reuse passwords across multiple sites and services or share your password with others.
11. Retention
nCino will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Statement unless a longer retention period is required or permitted by law. We may retain personal information for longer where required by our legal and regulatory obligations, professional indemnity obligations, or where we believe it is necessary to establish, defend or protect our legal rights and interests or those of others. With respect to the data and files we handle as a processor, we retain this personal information in accordance with our clients’ instructions.
12. Privacy Choices and Rights
You may have certain privacy rights under applicable privacy laws, including (subject to certain limitations) the right to access and review your personal information held by us, to request the amendment of incomplete or inaccurate information, to request deletion of certain personal information, and to lodge a complaint regarding our privacy practices. This will depend on the privacy laws in the jurisdiction you are resident in.
We make available a number of ways that you can manage your privacy choices and submit privacy requests related to your personal data. These include:
Access, deletion and correction: you may submit a request to us to exercise your privacy rights, as applicable, by contacting us at privacy@ncino.com. We will respond to your request as required under applicable privacy law and will may request that you provide certain information to enable us to verify you and your request.
Marketing communications and reminders: you may unsubscribe or opt-out from our marketing emails and future communications at any time by following the instructions included in those emails.
Cookie preferences: you can review and change your cookie preferences and custom lists and matching for each of our Websites that you visit by clicking the Cookie Settings link on our cookie banners.
In addition, residents of certain jurisdictions may be entitled to additional rights under the laws of those jurisdictions, as set forth in Section 15. Additional Privacy Information for Certain Jurisdictions below.
13. Controller and Representative
The controller for your personal information is nCino Inc., 6770 Parker Farm Drive, Wilmington, NC, 28405 USA
This Privacy Statement applies to each nCino entity when acting as a controller for the personal information subject to this Privacy Statement.
Data subjects may exercise their rights with respect to their personal information processed by any of the nCino controllers by contacting nCino as set forth in Section 14. Contact Us.
14. Contact Us
Any questions, inquiries, complaints, and requests related to this Privacy Statement can be directed to us by email at privacy@ncino.com or by mail at:
nCino Inc.
6770 Parker Farm Drive,
Wilmington, NC, 28405 USA
15. Additional Information for Certain Jurisdictions
This section includes additional information as required under the privacy laws of certain jurisdictions.
EEA, UK and Brazil
Subject to the conditions set out in applicable law, individuals in the European Union/European Economic Area, United Kingdom, and Brazil (as well as in other jurisdictions where similar rights apply) have the following rights regards our processing of their personal information:
Right of access: to confirm whether we are processing your personal information and to receive a copy of that personal information (along with certain other details).
Right to correction (rectification): to request that we correct any personal information we hold about you that is inaccurate or incomplete.
Right to erasure: to request that we delete your personal information under certain circumstances, such as where we no longer need it or if you withdraw your consent (where applicable). (NOTE: If you request that we delete your personal information, we may do so by deleting your account(s) with us.) Brazilian Users may also request the anonymization, blocking, or erasure of unnecessary or excessive personal information, or personal information processed in violation of the LGPD.
Right to restrict (block) processing: to request that we restrict the processing of your personal information under certain circumstances, such as where you contest its accuracy or object to our use or stated legal basis.
Right to data portability: to receive a copy of personal information we have obtained from you in a structured, commonly used, and machine-readable format and to reuse it elsewhere or to ask us to transfer it to a third party of your choice, under certain circumstances.
Right to object: to object to our processing of your personal information on the basis of our legitimate interests, in which case, we must stop such processing unless we have compelling legitimate grounds that override your interest or where we need to process it for the establishment, exercise, or defense of legal claims. Where we are relying on our legitimate interests (other than marketing), we believe that we have a compelling interest in such processing, but we will individually review each request and related circumstances.
Right to object to marketing: to request that we stop processing your personal information for marketing purposes, on the basis of our legitimate interests. If you do so, we will stop such processing for our marketing purposes.
Right not to be subject to automated decision making: to not be subject to a decision when it is based on automatic processing if it produces a legal effect or similarly significantly affects you, unless it is necessary for entering into or performing a contract between us.
Right to withdraw your consent: where you have consented, to withdraw your consent to our processing of your personal information, without affecting the lawfulness of our processing prior to the withdrawal of your consent. Brazilian Users also have the right to be informed about the consequences of denying or withdrawing consent.
Right to lodge a complaint: to lodge a complaint with a supervisory authority if you believe our processing of your personal information infringes the law.
Please note that some of these rights may be limited, such as where we have an overriding interest or legal obligation to continue to process the data. Please contact us using the information set out in Section 14. Contact Us, if you wish to exercise any of your rights or if you have any inquiries or complaints regarding the processing of your personal information by us.
California Residents
This section provides California residents with additional information regarding our collection, use and disclosure of their personal information, as well as their privacy rights, under California privacy laws. In this section, we describe how we handle their personal information, as required by the California Consumer Privacy Act (“CCPA”). This section does not address or apply to our handling of personal information that is exempt under the CCPA.
Categories of personal information that we collect and disclose. Our collection, use and disclosure of personal information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident. In the table below we describe the categories of personal information we may collect about California residents (including the categories of personal information that we have collected about California residents in the past 12 months), as well as the categories of third parties to whom we may disclose such information for a business or commercial purpose.
In addition, we may disclose any of the categories of personal information we collect about you to other third parties as directed by or consented to by you, or where necessary to fulfill your specific requests.
Categories of Personal Information | Third party disclosures for business or commercial purposes |
Identifiers: including direct identifiers, such as name, user ID, username, account number or unique personal identifier; email address, phone number, address and other contact information; IP address and other online identifiers. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law (such as disclosures of sweepstakes and contests winners) |
Customer records: including personal information, such as name, account name, user ID, contact information, education and employment information, account number, and financial or payment information that individuals provide us in order to purchase or obtain our Services. For example, this may include information collected when an individual registers for an account, purchases or orders our products and services, or enters into an agreement with us related to our products and Services. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law (such as disclosures of sweepstakes and contests winners) |
Commercial information: including records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies. For example, this may include demographic information that we receive from third parties in order to better understand and reach our customers. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law (such as disclosures of sweepstakes and contests winners) |
Internet and electronic network activity information: including, but not limited to, browsing history, search history, and information regarding interactions with an internet website, application, or advertisement, including other usage data related to your use of any of our Services or other online services. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law |
Location data: including location information about a particular individual or device. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law |
Audio, visual and other electronic data: includes electronic or visual information, such as your photograph or electronic signature, call recordings, and webinar and other event recordings. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law |
Professional information:includes professional and employment-related information, such as current and former employer(s) and position(s), credentials, resume, business contact information and professional memberships. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law |
Education information: includesinformation about an individual’s educational history (such as the schools attended, degrees you were awarded, and associated dates). | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law |
Biometric information: physiological, biological or behavioral characteristics that can be used alone or in combination with each other to establish individual identity. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law |
Profiles and inferences: includes inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior or attitudes. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law |
Protected classifications: we may collect some information that is considered a protected classification under California/federal law, including your gender, date of birth, and marital status. | service providers advisors and agents regulators, government entities and law enforcement affiliates and subsidiaries advertising networks data analytics providers social networks internet service providers, operating systems and platforms others as required by law |
Sales and sharing. The CCPA defines a “sale” as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” broadly includes disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising. While we do not disclose personal information to third parties in exchange for monetary compensation, we may “sell” or “share” (as defined by the CCPA): (i) identifiers, usage data, customer records, commercial information and profiles with our affiliates and subsidiary companies (e.g., so that they may improve or enhance their own records and for other purposes); and (ii) identifiers, usage data and commercial information to ad networks, social media platforms and data analytics providers (e.g., in order to improve and measure our ad and marketing campaigns). We do not sell or share sensitive personal information, nor do we sell or share nor do we sell or share any personal information about individuals who we know are under sixteen (16) years old.
California residents’ rights. Under the CCPA, California residents have the following rights (subject to certain limitations) with respect to the personal information we collect and maintain about them:
Opt out of sales and sharing: to opt-out of our sale and sharing of their personal information.
Limit uses and disclosures of sensitive personal information: to limit certain uses or disclosures of sensitive personal information to those uses authorized by the CCPA.
Deletion: to request deletion of their personal information, subject to certain exceptions.
To know/access: to know what personal information we have collected about the them, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about them.
Correction: to request correction of inaccurate personal information.
Non-discrimination: not to be subject to discriminatory treatment for exercising their rights under the CCPA.
Submitting CCPA Requests. California residents may exercise their CCPA privacy rights to know/access, delate, correct, and limit use/disclosure of sensitive personal information by emailing privacy@ncino.com. We will respond to verifiable requests received from California residents as required by law. When you submit a request to know or a request to delete, we will take steps to verify your request by matching the information provided by you with the information we have in our records. You must provide us with this information via email so that we can process and verify your request. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents may initiate a request on behalf of another individual by contacting us via email or phone; authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.
For more information about our privacy practices, contact us as set forth in the Section 14. Contact Us above.
nCino's Modern Slavery Statement
nCino is a pioneer in cloud banking and digital transformation solutions for the global financial services industry. We are committed to the highest standards of business conduct in our relationships with each other, with companies with which we do business, and with our stockholders and others. This is nCino's statement regarding the UK Modern Slavery Act.