Privacy Policy

1. Introduction

Native Security, Inc. ("we," "our," or "us") operates the website natives-security.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to information we collect through the Service and through direct communications with you.

We are based at 1875 Explorer Street, Reston, VA 20190 and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, email, phone) when you fill out a form, request a demo, or subscribe to updates;
• Company information you choose to share (employer, role, project context);
• The content of any messages you send us.

2.2 Information Collected Automatically

When you visit natives-security.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.3 We Do Not Knowingly Collect Children's Data

natives-security.com is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Respond to inquiries and provide requested information;
• Operate, maintain, and improve the Service;
• Send service updates and (with your consent where required) marketing communications;
• Detect, investigate, and prevent fraud or abuse;
• Comply with legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (e.g., hosting, email delivery, analytics) under contractual confidentiality terms;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described, to comply with legal or accounting obligations, and to resolve disputes. Inactive marketing-list contacts are purged after 24 months. Server access logs are retained 90 days, then aggregated.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. Virginia Residents (VCDPA)

Under the Virginia Consumer Data Protection Act ("VCDPA"), Virginia residents have rights with respect to personal data we control or process. This section supplements the rest of the Policy.

9.1 Your VCDPA Rights

• Right to Confirm and Access: confirm whether we are processing your personal data and access that data.
• Right to Correct: correct inaccuracies in your personal data, taking into account the nature of the data and our processing purposes.
• Right to Delete: request deletion of personal data provided by, or obtained about, you.
• Right to Data Portability: obtain a copy of your personal data in a portable, readily usable format, where technically feasible.
• Right to Opt Out: opt out of (a) targeted advertising, (b) the sale of personal data, and (c) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in (a), (b), or (c).

9.2 How to Exercise

Submit a request by emailing [email protected]. We respond within 45 days; an additional 45-day extension is available if reasonably necessary, with notice to you.

9.3 Appeal

If we deny your request, you may appeal by replying to our response email. We will respond to the appeal within 60 days. If the appeal is denied, you may contact the Virginia Attorney General at oag.state.va.us to submit a complaint.

9.4 Authorized Agents

You may use an authorized agent for opt-out requests, subject to our verifying the agent's authority.

9.X California Visitors

If you are a California resident visiting from another state, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: