Privacy Policy

Last updated: August 27, 2026

This Privacy Policy describes how Neblex LLC ("Neblex", "we", "our") collects, uses, and discloses personal information when you visit the public-facing portions of our website (the "Site"). This policy applies only to the Site. Personal information processed by the Neblex product platforms - Neblex CPQ and Neblex Integration Fabric - on behalf of our customers is governed separately under the executed Master Services Agreement (MSA) and Data Processing Addendum (DPA) between Neblex and that customer. This includes any business data your organization moves through Integration Fabric flows, forms, or on-premises agents: Neblex processes that data solely as a processor on the customer's instructions under the applicable agreements, and it is never used for marketing or sold.

1. Scope and Audience

Neblex is a U.S.-based company providing enterprise software to business organizations: Neblex CPQ, a configure-price-quote platform, and Neblex Integration Fabric, an integration and automation platform. Neblex LLC is the data controller for personal information collected through the Site. The Site is directed at business audiences and is available in the United States, Canada, the United Kingdom, Switzerland, and a number of European countries, including member states of the European Economic Area (EEA); the set of available regions may change over time. Additional disclosures for visitors in those regions appear in the sections on legal bases, international transfers, and EEA/UK privacy rights below.

2. Information We Collect

We collect personal information in two ways:

Information you provide directly - when you fill out a contact form, request a demo, request a free trial, subscribe to updates, or correspond with us, we collect the information you submit, which typically includes your name, business email, business phone number, company name, job title, and the content of your message.

Information collected automatically - when you access the Site, our hosting and content-delivery provider automatically captures basic server-log information about each request, which may include your IP address, the date and time of the request, the page or asset requested, the referring URL, your browser type and version, your operating system, and an approximate geographic region derived from your IP address. This information is used in aggregated form to operate, secure, and improve the Site (for example, to count unique visitors per region or to identify abusive traffic). We do not use this information to build a behavioral profile of you, and we do not combine it with any third-party advertising or tracking data.

3. Cookies and Similar Technologies

The Site uses only strictly-necessary cookies and similar technologies required for the Site to function and to stay secure. In practice this means: security cookies set by our hosting and content-delivery provider, Cloudflare, as part of its bot-management and denial-of-service protection (for example, cookies of the "__cf_bm" family), and the technical signals processed by Cloudflare Turnstile, the CAPTCHA that protects our contact form against automated abuse. Turnstile runs only on the contact page, does not track you across sites, and is not used for advertising. The Site does not use cookies or tracking technologies for advertising, behavioral retargeting, cross-site tracking, or analytics profiling, and the Site does not load third-party advertising or marketing pixels. All fonts and page assets are served from our own domain; no font or asset requests are sent to third-party servers when you browse the Site.

The Site is served through a content-delivery and hosting provider that produces basic server-side traffic statistics (such as request counts, approximate visitor counts per region, and origin response performance) from standard request logs. These statistics are derived from network metadata and do not require setting cookies on your device or running tracking scripts in your browser.

Because we do not use non-essential cookies, the Site does not display a cookie-consent banner and does not provide an in-product cookie-preferences mechanism. If your browser sends a Global Privacy Control (GPC) signal or similar opt-out indicator, we honor it as a request to opt out of any sale or sharing of personal information; we do not sell or share personal information for cross-context behavioral advertising in any case.

You can manage or block cookies and clear local storage through your browser settings. Doing so may affect how parts of the Site function (for example, your theme preference will not persist across visits).

4. How We Use Your Information

We use personal information for the following purposes:

  • to operate, maintain, secure, and improve the Site;
  • to respond to your inquiries, demo requests, free-trial requests, and other communications;
  • to send you information about Neblex products and services that may be of interest, where you have opted in or where permitted by applicable law;
  • to analyze aggregate usage trends and Site performance;
  • to detect, prevent, and respond to fraud, abuse, security incidents, and violations of these Terms; and
  • to comply with legal obligations and enforce our agreements.

Legal Bases for Processing (EEA, UK, and Switzerland)

Where the GDPR, the UK GDPR, or the Swiss FADP applies to our processing of your personal information, we rely on the following legal bases:

  • Steps prior to entering a contract (Art. 6(1)(b) GDPR) - when you request a demo, request a trial, or make a purchase inquiry, we process the information you submit in order to respond to your request.
  • Legitimate interests (Art. 6(1)(f) GDPR) - operating, securing, and improving the Site (including the server-log processing and bot protection described above), responding to general correspondence, and defending our legal rights. We balance these interests against your rights and process only what is proportionate to the purpose.
  • Consent (Art. 6(1)(a) GDPR) - for optional marketing communications, where required. You may withdraw consent at any time with effect for the future.
  • Legal obligation (Art. 6(1)(c) GDPR) - where processing is necessary to comply with a legal requirement that applies to us.

Providing personal information through the Site is voluntary; however, we cannot respond to an inquiry without the contact details it asks for.

5. How We Share Information

We do not sell personal information. We may share personal information as follows:

  • Service providers - with vendors who process information on our behalf to operate the Site, acting as our processors under contractual confidentiality and data-handling obligations. These currently are: Cloudflare, Inc. (website hosting, content delivery, security, bot management, and the Turnstile CAPTCHA on our contact form) and Resend (delivery of the email notifications generated when you submit the contact form). We may also use customer-relationship management systems to log and respond to inquiries.
  • Affiliates - within the Neblex corporate group, where applicable, under consistent privacy practices.
  • Legal and safety - to comply with applicable law, lawful government requests, court orders, or to protect the rights, property, or safety of Neblex, our customers, or others.
  • Business transitions - in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

6. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal, accounting, or reporting obligations, and to resolve disputes. Inquiry submissions are typically retained for the duration of any active commercial discussion plus a commercially reasonable period thereafter (generally up to 36 months) unless you ask us to delete sooner. Aggregate or de-identified analytics data may be retained indefinitely.

7. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. While we work hard to protect personal information, no system can be guaranteed to be 100% secure, and we cannot warrant the absolute security of any information transmitted to or from the Site.

8. Children's Privacy

The Site is intended for business users and is not directed at children. We do not knowingly collect personal information from individuals under the age of 13 (or under the age of 16 in jurisdictions where that is the applicable threshold). If you believe a child has submitted personal information through the Site, please contact us so we can remove it.

9. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with specific rights regarding your personal information:

  • Right to know - you may request that we disclose what personal information we have collected about you, the sources, the purposes for collection, and the categories of recipients.
  • Right to delete - you may request that we delete personal information we have collected about you, subject to certain exceptions.
  • Right to correct - you may request that we correct inaccurate personal information we hold about you.
  • Right to opt out of sale or sharing - we do not sell personal information and we do not share personal information for cross-context behavioral advertising.
  • Right to non-discrimination - we will not deny you services, charge you a different price, or provide a different level of service because you exercised your privacy rights.

To exercise any of these rights, contact us using the information in the Contact section below. We may need to verify your identity before processing your request.

10. Other U.S. State Privacy Rights

Residents of other U.S. states with applicable comprehensive privacy laws (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana) may have similar rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of certain processing activities. To exercise these rights, contact us using the information in the Contact section below. We will respond consistent with the requirements of the applicable law.

If you are located in Canada, you may request access to, or correction of, your personal information as provided by the Personal Information Protection and Electronic Documents Act (PIPEDA), using the Contact section below.

11. International Data Transfers

Neblex is located in the United States and the Site is operated from the United States, so personal information collected through the Site is processed in the United States, a country whose data protection laws may differ from those of your country of residence. Where we transfer personal information from the EEA, the UK, or Switzerland, we rely on appropriate safeguards: our service providers participate in the EU-U.S. Data Privacy Framework (including its UK Extension and the Swiss-U.S. Data Privacy Framework) and/or enter into the European Commission's Standard Contractual Clauses, and we apply supplementary measures where appropriate. You may request more information about these safeguards using the Contact section below.

Your Rights in the EEA, UK, and Switzerland

If you are located in the EEA, the UK, or Switzerland, you have the following rights regarding personal information we hold about you, subject to the conditions and exceptions of applicable law:

  • Access - obtain confirmation of whether we process your personal information and receive a copy of it.
  • Rectification - have inaccurate personal information corrected and incomplete information completed.
  • Erasure - have your personal information deleted where there is no overriding reason to retain it.
  • Restriction - have processing of your personal information restricted in certain circumstances.
  • Data portability - receive personal information you provided to us in a structured, commonly used, machine-readable format.
  • Objection - object to processing based on our legitimate interests, and to any direct marketing at any time.
  • Withdraw consent - withdraw any consent you have given, at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us using the information in the Contact section below; we respond within the timeframes required by applicable law and may need to verify your identity first. You also have the right to lodge a complaint with your local data protection supervisory authority, or with the UK Information Commissioner's Office (ICO) if you are in the UK. We would, however, appreciate the chance to address your concerns directly first.

12. Your Choices

You can manage your preferences in the following ways:

  • Email communications - every marketing email we send contains an unsubscribe link. You can opt out of marketing communications at any time. Transactional or service-related communications (such as a response to a demo request) will continue.
  • Cookies - manage cookies through your browser settings.
  • Information requests - exercise your access, deletion, or correction rights using the Contact information below.

13. Policy Updates

We may revise this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through the Site and, where appropriate, through other reasonable means.

14. Contact

For privacy questions, requests, or concerns, please use our Contact page and select the privacy-related subject area, or write to:

Neblex LLC, Attn: Privacy
(postal address available on request through the Contact page)