Privacy Policy

N-ABLE LLC ("N-ABLE," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our Clinic Portal (collectively, the "Services"). Please read this Privacy Policy carefully. By using our Services, you consent to the practices described in this policy.

References to "N-ABLE," "we," "us," or "our" include N-ABLE LLC and its current and future subsidiaries, divisions, and affiliated brands — including but not limited to N-Able Health (healthcare management services). This Privacy Policy applies to all services operated by N-ABLE LLC and its subsidiaries under the nablist.org domain. N-ABLE LLC is not affiliated with N-able Technologies Ltd. (n-able.com) or any other similarly named entity.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Contact information: name, email address, phone number, ZIP code
• Business information: business name, specialty, practice type, number of providers, current EMR system
• Account credentials: username and password for Portal access
• Service request details: information submitted through bid requests, free analysis requests, and other service inquiry forms (such as ZIP code, provider count, pain points, timeline, and budget range)
• Job application information: if you apply for a position through our careers pages, we collect your name, email address, phone number, LinkedIn profile URL (if provided), cover letter, and resume/CV file, along with any information contained in those materials
• Communications: any additional information you provide in contact forms, emails, or other communications with us

1.2 Information Collected Automatically

When you access our Services, we automatically collect certain information, including:

• IP address: collected for security purposes, fraud prevention, and to help diagnose technical issues
• Session cookies: used to maintain your connection between the frontend and backend of our Services
• Browser type and version
• Device information
• Pages visited and features used within our Services
• Server logs: our hosting providers maintain standard web server request logs (including IP address, timestamp, and requested page), which are retained for a limited period for security and diagnostics

1.3 Protected Health Information

Our Website and Portal are not designed to collect Protected Health Information (PHI). Please do not submit PHI through contact forms, support requests, the Portal, or any other communication channel unless specifically instructed under a separate written agreement. If PHI is inadvertently submitted, we may delete it without notice and are not responsible for maintaining, securing, or returning such information.

Our on-premises clinical documentation systems (MLE) process patient data locally at clinic locations. This data does not traverse our cloud services or the systems described in this Privacy Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our Services
• To process and manage your account registration
• To respond to your inquiries and provide customer support
• To evaluate job applications and communicate with applicants about employment opportunities
• To send you information about our services, updates, and promotional materials (with your consent where required)
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations
• To enforce our Terms of Service

3. Cookies and Tracking Technologies

3.1 Essential Cookies

We use essential cookies that are necessary for the operation of our Services. These cookies enable core functionality such as session management and security features.

3.2 Advertising and Analytics Technologies

We use Google Tag Manager (GTM) to manage and deploy tracking scripts on our Website. GTM itself does not collect personal information, but it facilitates the loading of other tags and pixels described below. GTM may record anonymized page-load data for diagnostics.

We use the Meta Pixel(Facebook Pixel) on our Website to measure the effectiveness of our advertising, understand how visitors interact with our Website, and deliver relevant advertising on Meta platforms (Facebook, Instagram). The Meta Pixel collects information such as your IP address, browser type, pages visited, and actions taken on our Website. This data is shared with Meta Platforms, Inc. and is subject to Meta's Data Policy.

You may opt out of interest-based advertising from Meta by adjusting your ad preferences at facebook.com/adpreferences or by using the Digital Advertising Alliance's opt-out tool at optout.aboutads.info.

3.3 Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC)signal. If your browser or a browser extension sends a GPC signal, we treat it as a request to opt out of the "sharing" of your personal information for cross-context behavioral advertising, and the Meta Pixel will not load or track your visit.

Some browsers also offer an older "Do Not Track" (DNT) signal. There is no industry standard for how companies should respond to DNT signals, and our Website does not respond to DNT. If you want to opt out of advertising tracking automatically, we recommend enabling GPC, which is supported in browsers such as Firefox and Brave and via extensions for other browsers.

3.4 Cookie Management

Most web browsers allow you to control cookies through their settings. Disabling essential cookies may prevent you from using our Services. Disabling third-party cookies or using browser-based ad blockers will prevent Google Tag Manager and the Meta Pixel from tracking your activity.

4. Third-Party Services

We use the following third-party services to operate our Services. These vendors process the personal information described in Section 1 (such as account information, contact details, and billing data). We do not send Protected Health Information to these providers.

4.1 Hosting Providers

• Vercel: Hosts our main website. Subject to Vercel's Privacy Policy.
• Cloudflare: Provides hosting and security services for the Portal. Subject to Cloudflare's Privacy Policy.

4.2 Email Services

• Resend: Processes transactional and notification emails on our behalf. When you submit a contact form, bid request, free analysis request, or job application, the information you provide (including resume attachments for job applications) is transmitted through Resend to deliver it to our team and to send you a confirmation email. Subject to Resend's Privacy Policy.

4.3 Tag Management

• Google (Google Tag Manager): We use Google Tag Manager to manage tracking scripts on our Website. GTM may process anonymized page-load diagnostics. Subject to Google's Privacy Policy.

4.4 Advertising and Analytics

• Meta Platforms (Facebook): We use the Meta Pixel for advertising measurement and optimization. Meta receives data about your Website visits, including pages viewed and actions taken. Subject to Meta's Data Policy.

4.5 Payment Processing

• Stripe: Processes payments for paid services. We do not store complete credit card information. Subject to Stripe's Privacy Policy.

We encourage you to review the privacy policies of these third-party services to understand how they handle your information.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With service providers: We share information with third-party vendors who perform services on our behalf, subject to confidentiality obligations
• For legal compliance: We may disclose information if required by law, court order, or government request
• To protect rights: We may disclose information to protect the rights, property, or safety of N-ABLE, our users, or others
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Secure authentication mechanisms
• Regular security assessments
• Access controls limiting who can view personal information
• IP address logging for security monitoring

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6.1 Security Incident Notification

In the event of a security incident affecting your personal information, we will notify affected users as required by applicable law.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we will securely delete or anonymize it.

• Form submissions and inquiries: Information submitted through contact forms, bid requests, and free analysis requests is delivered to and retained in our business email and record-keeping systems for as long as needed to respond to your inquiry, evaluate a potential engagement, and maintain business records.
• Job applications: Application materials, including resumes and cover letters, are retained for as long as needed to evaluate your application and, unless you request deletion, to consider you for future opportunities.
• Server and security logs: Retained for a limited period consistent with our hosting providers' standard practices.

You may request deletion of any of this information at any time by emailing privacy@nablist.org.

8. Your Rights and Choices

8.1 Access and Correction

You may access and update your account information at any time by logging into the Portal. For information not accessible through your account, you may contact us to request access or correction.

8.2 Data Deletion Requests

You may request deletion of your personal information — including your account, form submissions, job application materials, and any other data we hold about you — by emailing privacy@nablist.org from the email address associated with your data (or providing sufficient information for us to verify your identity). We will acknowledge your request and complete verified deletion requests within 30 days, except where retention is required for legal compliance, dispute resolution, or other legitimate business purposes — in which case we will tell you what we retained and why.

8.3 Marketing Communications

You may opt out of receiving promotional emails by following the unsubscribe instructions in those emails. Even after opting out, you may still receive transactional or account-related communications.

9. Healthcare Data and HIPAA

9.1 Website and Portal Are Not HIPAA Services

The Website and Portal are not offered as HIPAA-covered services and are not intended for the collection, storage, or transmission of Protected Health Information (PHI). Do not submit PHI through these channels.

9.2 Business Associate Agreements

Business Associate Agreements (BAAs) are available only for N-ABLE's on-premises clinical documentation systems (MLE) installed at clinic locations. These systems process PHI locally and are governed by separate service agreements. If you require a BAA, please contact us to discuss appropriate arrangements.

9.3 Local Processing Architecture

Our clinical documentation systems are designed with a local-first architecture. Patient data is processed on-premises at clinic locations and does not traverse our cloud services. This design supports compliance with HIPAA's minimum necessary standard and helps protect patient privacy.

9.4 Demonstration Data

All data displayed in N-ABLE demonstration environments is entirely fabricated and synthetic. No real patient information is used in demonstrations. Any resemblance to real individuals is purely coincidental.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. State Privacy Rights

Depending on your state of residence, you may have additional privacy rights under applicable law.

11.1 California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with the right to know what personal information we collect, the right to correct or delete your personal information, and the right to opt out of the "sale" or "sharing" of your personal information. We do not sell personal information for money. However, our use of the Meta Pixel for advertising measurement and targeting (described in Section 3.2) may constitute "sharing" of personal information for cross-context behavioral advertising under California law.

To opt out of this sharing, you may: (a) enable the Global Privacy Control (GPC) signal in your browser, which we honor automatically as described in Section 3.3; (b) email us at privacy@nablist.org; (c) use browser settings or extensions that block third-party tracking scripts; or (d) adjust your ad preferences directly with Meta using the links in Section 3.2. We will not discriminate against you for exercising any of your privacy rights.

11.2 Other States

Residents of other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and Utah) may have similar rights, including rights to access, correct, delete, and port their personal information. We honor valid requests from residents of all states with applicable privacy laws.

11.3 Exercising Your Rights

To exercise any of your privacy rights, email us at privacy@nablist.org or use the contact information below. We may need to verify your identity before processing your request, and we will respond within the timeframe required by applicable law (generally 45 days or less).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our Website and updating the "Effective Date" above. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: