NationGraph Privacy Policy

Last updated: August 20, 2026

NationGraph Inc. (“NationGraph,” “we,” “us,” or “our”) provides an intelligence platform for organizations that sell to, fund, or work with state, local, and education sector (“SLED”) public bodies. This Privacy Policy explains how we collect, use, disclose, and protect personal information.

This Policy covers two distinct populations, and the parts that apply to you depend on which one you fall into:

Part I applies if you visit our website, contact us, attend our events, subscribe to our communications, or use the NationGraph platform as a customer or an authorized user of a customer.
Part II applies if you are a public sector official, employee, or representative whose professional information appears in the NationGraph platform because it is contained in public records. We did not collect this information from you directly. Part II explains where it comes from, why we hold it, and how to exercise your rights over it, including how to request removal.

This Policy is incorporated into our Website Terms of Use. Disputes relating to this Policy are subject to the dispute resolution, arbitration, and class action waiver provisions of those Terms.

If you have any question about this Policy, contact us at privacy@nationgraph.com.

Summary of Key Points

Question	Answer
Do we collect information from third parties?	Yes. This is central to our business. We collect public sector records and professional contact information from government sources, public records requests, and licensed data providers. See Part II.
Do we sell or share personal information?	Our platform provides subscribing customers with access to professional contact information about public sector personnel. Depending on how your state’s law defines “sale” and “sharing,” this may constitute one. We honor opt-out requests regardless of the characterization. See Sections 9 and 15.
Are we a consumer reporting agency?	No. Our information is not a consumer report and may not be used for credit, employment, housing, insurance, or other eligibility decisions. See Section 11.
Do we process sensitive personal information?	We do not seek it, our customer agreements prohibit customers from submitting it, and we remove it where we identify it. See Section 8.
Do we use your data to train AI models?	No. We do not use Customer Content to train, develop, or improve machine learning models, matching the commitment in our customer agreements. See Section 7.
Do we collect information from children?	No. Our services are for business use by adults. See Section 13.
How do I exercise my rights?	Email privacy@nationgraph.com. See Sections 10 and 15.

‍

Part I. Visitors, Prospects, Customers, and Users

1. Information We Collect About You

1.1 Information you provide. We collect information you give us directly, including:

Identity and contact information: name, business email address, business phone number, employer, job title, and country or region.
Account credentials: username, password, and authentication data. Where you sign in through Google or Microsoft single sign-on, we receive your name, email address, and profile identifier from that provider. We do not receive or store your password for those accounts.
Commercial and billing information: subscription plan, order and invoice history, credit balances and usage, and payment method details. Payment card data is collected and processed by our payment processor and is not stored on our systems.
Content you submit: search queries, prompts, uploaded files, notes, saved records, and other material you submit to the platform (“Customer Content”).
Communications: the content of your emails, support requests, demo and contact form submissions, event registrations, survey responses, and newsletter subscriptions.

1.2 Information collected automatically. When you use our website or platform, we automatically collect log and usage data, including IP address, approximate location derived from IP address, browser and device type, operating system, language preference, referring URL, pages and features viewed, search and query activity, session duration, navigation patterns, timestamps, and error and diagnostic reports.

1.3 Recorded meetings. We use meeting assistants to record, transcribe, and summarize sales, onboarding, and support calls. Where a call is recorded, we aim to notify participants at or before the start of the recording. If you do not wish to be recorded, tell us and we will stop the recording or exclude you from it. Recordings and transcripts may contain your voice, image, name, and statements.

1.4 Information from third parties. We receive information about you from:

Business contact data providers, which supply or enrich professional contact details for sales and marketing purposes.
Our customers, where you are an authorized user provisioned under their subscription.
Analytics, advertising, and event platforms, and publicly available professional sources such as employer websites and professional networking profiles.

2. How We Use This Information

We use the information described in Section 1 to:

create, authenticate, and administer accounts, and provide the platform and support;
process orders, invoices, credits, and payments, and collect amounts owed;
respond to your inquiries, requests, and support tickets;
send service and administrative communications, including changes to our terms and policies;
send marketing and promotional communications, subject to your preferences and applicable law, from which you can unsubscribe at any time;
run and evaluate events, campaigns, surveys, and content programs;
monitor, secure, and troubleshoot our systems, and detect, prevent, and investigate fraud, abuse, and violations of our agreements;
measure and improve our website, platform, products, and customer experience;
produce aggregated and de-identified statistics about usage, which we may publish or use commercially, provided they do not identify you; and
comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

3. Legal Bases

Where a legal basis is required, we rely on: performance of a contract with you or your employer; our legitimate interests in operating, securing, marketing, and improving our business, balanced against your rights; your consent, where we ask for it and which you may withdraw at any time; and compliance with legal obligations.

‍

Part II. Public Sector Records in the NationGraph Platform

4. What This Part Covers, and Why It Exists

Our platform aggregates records generated by public bodies and makes them searchable and analyzable for our customers. Those records frequently name individuals who work in or with the public sector, for example a procurement officer named on a purchase order, a department head quoted in council minutes, or a contract administrator listed in a solicitation.

If you are one of those individuals, we hold information about you that we did not obtain from you. We think you are entitled to a plain explanation of that, which is what this Part provides.

5. What Information We Hold

For individuals connected to public bodies, we may hold: name; job title and role; employing agency, department, or institution; business email address; business telephone number; business mailing address; professional responsibilities; named involvement in procurement activity such as solicitations, awards, contracts, purchase orders, grants, and budget documents; statements attributed to the individual in published meeting minutes, agendas, or recordings of public proceedings; and derived attributes we generate, such as role classification, seniority, category tagging, and relevance scoring.

We hold this information in an individual’s professional capacity only. We do not seek personal email addresses, personal phone numbers, home addresses, or any information about an individual’s private life.

6. Where It Comes From

Public records published by public bodies, including budgets, adopted and proposed contracts, purchase orders, solicitations and awards, grant records, meeting agendas and minutes, staff directories, procurement guidelines, and press releases.
Recordings and transcripts of public proceedings, including publicly posted video of council, board, and committee meetings.
Freedom of information and public records requests that we or our service providers submit to public bodies under applicable access-to-information laws, and the responses we receive.
Licensed third-party data providers that supply or verify professional contact information.
Our own enrichment, meaning attributes we derive by processing the sources above.

7. How We Use It, and What We Do Not Do With It

We use these records to operate the platform: to make public sector activity searchable, to generate analytics, summaries, scores, and alerts, and to make the results available to subscribing customers for their internal business use under a written agreement.

We use artificial intelligence and machine learning to classify, extract, summarize, and score these records. We provide some of these features through third-party AI providers, currently including Anthropic, OpenAI, and Google, which process content on our behalf under agreements that restrict their use of it.

We do not use Customer Content to develop, train, or enhance artificial intelligence or machine learning models. This is the same commitment we make in our customer agreements.

We do build and improve our own classification, extraction, and scoring models using public records and other non-customer source data, which is how the platform works.

We do not use these records to make automated decisions that produce legal or similarly significant effects about any individual.

8. What We Exclude

We do not intentionally collect, and we do not want to hold: protected health information; payment card, bank account, or other financial account numbers; social security numbers, driver’s license numbers, and other government identification numbers; student education records; information about individuals in their private capacity; and special or sensitive categories of personal information as defined under applicable data protection laws.

Public records occasionally contain such information despite the redaction obligations of the disclosing body. Where we become aware of it, we remove or suppress it. If you believe such information about you is present in our platform, contact privacy@nationgraph.com and we will prioritize the request.

9. Disclosure to Customers

We make platform records, including the professional information described in Section 5, available to customers who subscribe to our services. Our customer agreements restrict what customers may do with that information, including prohibitions on resale, redistribution, sublicensing, and use to build competing datasets, and they prohibit the eligibility uses described in Section 11.

Because we provide access to personal information for consideration, some US state privacy laws may characterize this as a “sale” or “sharing” of personal information. Rather than rely on a particular characterization, we provide every individual with the ability to opt out and to request removal, as described in Section 10.

10. Your Rights Over Platform Records

You may, at any time and regardless of where you live:

Ask what we hold about you. We will provide the professional information associated with your name in the platform.
Ask us to correct it. Public records are frequently out of date. We will correct inaccuracies we can verify.
Ask us to remove you. We will suppress your contact details from the platform and add your identifiers to a suppression list so they are not re-added by later ingestion. We may continue to hold records of official acts where a public body has published them and where removal would defeat the public-record nature of the source, and we will tell you if that applies.
Opt out of any disclosure characterized as a sale or share.

To make any of these requests, email privacy@nationgraph.com with your name and employing agency. We will respond within the period required by applicable law, and in any event within 45 days. We do not charge for these requests and we will not discriminate against you for making one.

11. Not a Consumer Reporting Agency

NationGraph is not a consumer reporting agency as defined in the Fair Credit Reporting Act, 15 U.S.C. section 1681 et seq. (“FCRA”), and the information we make available is not a consumer report. It is not collected, assembled, or evaluated for the purpose of furnishing a consumer report, and it may not be used, in whole or in part, as a factor in establishing any individual’s eligibility for credit or insurance, employment, promotion, reassignment or retention, housing or tenancy, government licenses or benefits, or any other purpose covered by the FCRA or any comparable state law.

Our customer agreements and our Website Terms of Use prohibit these uses. If you believe information from our platform has been used for a prohibited purpose, contact privacy@nationgraph.com.

‍

Part III. Provisions Applicable to Both Parts

12. How We Share Information

We disclose personal information to:

Customers, as described in Section 9.
Service providers and processors that perform functions on our behalf under written contracts limiting their use of the information, in the following categories: cloud hosting and infrastructure; customer relationship management and marketing automation; payment processing and billing; analytics and product telemetry; communications, email, and calendaring; meeting recording and transcription; artificial intelligence and machine learning providers; public records request processing; business contact data providers; identity and access management; security monitoring and compliance automation; and professional advisers including counsel and accountants. A current list of subprocessors is available on request at privacy@nationgraph.com.
Affiliates, including NationGraph Canada Inc.
Acquirers and counterparties, in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to confidentiality obligations.
Authorities and third parties, where we reasonably believe disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of NationGraph, our customers, or others, or to enforce our agreements.

We do not disclose personal information to third parties for their own independent marketing purposes.

13. Cookies and Online Tracking

We and our service providers use cookies, web beacons, pixels, and similar technologies on our website to keep it secure and functioning, remember preferences, measure traffic, and support our marketing. Some of these technologies are operated by third parties for analytics and advertising, including Google Analytics. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.

Where these technologies constitute a “sale” or “sharing” of personal information, or targeted advertising, under applicable state law, you may opt out as described in Section 15.

Global Privacy Control. We recognize and honor Global Privacy Control signals. If your browser or extension transmits a GPC signal, we treat it as a valid opt-out of the sale or sharing of your personal information for targeted advertising, and apply it automatically without further action by you.

Do Not Track. There is no finalized uniform standard for Do Not Track browser signals, and we do not currently respond to them. California law requires us to disclose this.

14. Children

Our website and platform are intended for business use by individuals aged 18 or over. We do not knowingly collect personal information from anyone under 18 and we do not market to children. If you believe we hold information about a person under 18, contact privacy@nationgraph.com and we will delete it.

15. Your Privacy Rights

15.1 Rights available to you. Depending on your state or country of residence, you may have the right to: confirm whether we process your personal information; access it and obtain a copy in a portable format; correct inaccuracies; request deletion; obtain information about the categories of personal information we process, the sources, the purposes, and the categories of recipients; opt out of processing for targeted advertising, sale, sharing, or profiling with legal or similarly significant effects; limit the use of sensitive personal information; withdraw consent; and be free from discrimination for exercising any of these rights.

15.2 How to exercise them. Email privacy@nationgraph.com. Include your name, the email address or agency we would associate with you, and what you are asking for. We will acknowledge and respond within the period required by applicable law, and in any event within 45 days, and we may extend once where permitted with notice to you.

15.3 Verification. We will take reasonable steps to verify your identity before acting on a request, and will use information you provide for verification only. If we cannot verify you from information we already hold, we may ask for more. We may decline a request we cannot verify, or where an exception under applicable law applies.

15.4 Authorized agents. You may use an authorized agent. We may require written, signed authorization and may verify your identity directly.

15.5 Appeals. If we decline your request, you may appeal by emailing privacy@nationgraph.com with “Appeal” in the subject line. We will respond in writing with our decision and the reasons for it. If your appeal is denied, you may complain to your state attorney general or other competent authority.

15.6 California Shine the Light. California residents may request once per year, free of charge, information about personal information we disclosed to third parties for their direct marketing purposes in the preceding calendar year. Send requests to privacy@nationgraph.com.

15.7 Canada. If you are in Canada, you may access and request correction of your personal information and withdraw consent subject to legal and contractual restrictions, and you may complain to the Office of the Privacy Commissioner of Canada.

16. Categories of Personal Information

The table below states the categories of personal information we have processed in the preceding twelve months, using the categories set out in California law. We report them separately for the two populations described at the start of this Policy.

Category	Site, prospects, customers and users	Public sector records in the platform
A. Identifiers (name, postal address, phone, unique and online identifiers, IP address, email, account name)	Yes	Yes
B. California Customer Records information (name, contact details, employment and employment history)	Yes	Yes
C. Protected classification characteristics	No	No
D. Commercial information (transactions, orders, billing)	Yes	No
E. Biometric information	No	No
F. Internet or other network activity (browsing, search, interactions)	Yes	No
G. Geolocation data (approximate, derived from IP address)	Yes	No
H. Audio, electronic, visual, or similar information (call recordings; recordings of public proceedings)	Yes	Yes
I. Professional or employment-related information	Yes	Yes
J. Education information (student records)	No	No
K. Inferences and derived attributes (classification, tagging, scoring)	Yes	Yes
L. Sensitive personal information	No	No

Sources of each category are described in Sections 1 and 6. Purposes are described in Sections 2 and 7. Recipients are described in Section 12.

17. Retention

We keep personal information only for as long as we need it for the purposes described in this Policy, or for longer where a law, regulation, audit, tax obligation, or actual or anticipated legal claim requires it. Our general practice is as follows:

Account and platform-use data is retained while the account is active and for a period after it closes, then deleted or anonymized.
Customer Content is deleted following a customer’s request after termination, on the timeline set out in the customer agreement.
Public sector records are retained on an ongoing basis as an archive of public sector activity, because their value is historical and comparative. Suppression requests under Section 10 are honored and persist.
Marketing contact data is retained until you unsubscribe or object, and suppression records are kept indefinitely so that we can continue to honor your choice.
Meeting recordings and transcripts are retained for a limited period and then deleted in the ordinary course.

Where deletion is not immediately possible because information is held in backup archives, we isolate it from further processing until deletion occurs.

18. Security

We maintain administrative, technical, and organizational measures intended to protect personal information against unauthorized access, use, alteration, and destruction, and we review them periodically. Information about our current security program and attestations is available at our Trust Center, linked from our website.

No method of transmission or storage is completely secure, and we cannot and do not guarantee the security of any information. You transmit information to us at your own risk.

19. International Transfers

We are based in the United States and our platform is hosted in the United States. We have an affiliate in Canada. If you access our services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction, and where required we implement appropriate safeguards for those transfers.

20. Accuracy and No Reliance

Records in our platform originate substantially from third parties, including public bodies, and may be incomplete, inaccurate, superseded, or delayed. We do not warrant the accuracy, currency, or completeness of any record, and users are responsible for verifying information before relying on it. This Section does not limit your rights under Section 10 or Section 15 to request correction of information about you.

21. Changes to This Policy

We may update this Policy at any time. When we do, we will revise the “Last updated” date above and post the current version on our website. If changes are material, we will provide prominent notice or contact you directly. Your continued use of our website or platform after the effective date constitutes acceptance of the updated Policy.

22. Contact Us

NationGraph Inc.

1111B S Governors Ave

Dover, DE 19904

United States

Privacy requests and questions: privacy@nationgraph.com

Legal notices: legal@nationgraph.com

Product support: support@nationgraph.com