1. Definitions

When we say “we,” “us,” and “our” we are referring to NFA Tools. We provide online platforms that you may use to create ATF NFA forms for your customers. When we say “Member,” we are referring to you the person or entity that is registered with us to use the Services. When we say “you,” we are referring either to a Member or to some other person who visits any of our Websites. A “transferee” is member customer information you provide us through our Services, or a person who you have business with". In other words, a Transferee is any customer or whom you have given us information. “Personal Information” means information that can be used to identify you or a Transferee, including, but not limited to, first and last name, email address, or other demographic information.

2. Changes

NFA Tools may change this Privacy Policy at any time. All updates and amendments are effective immediately by posting a revised version of this Privacy Policy or other notice on the Website. Continued use of the Website signifies your continuing consent to be bound by this Privacy Policy.

3. Scope

This Privacy Policy is effective with respect to any data that we have collected, or collect, about and/or from you, according to our Terms and Conditions.

4. Information We Collect

We may collect the following information that you voluntarily provide to us:

• Your licensee and contact information
• Your billing information
• Your customer’s information (transferee)
• Your inventory data

Information you voluntarily provide to us: When you sign up for and use the Services, consult with our customer service team, send us an email, or communicate with us in any way, you are voluntarily giving us information that we collect. That information may include either your or your Transferees’ name, physical address, email address, IP address, phone number, credit card information, as well as details including purchase history, and other demographic information. By giving us this information, you consent to this information being collected, used, disclosed, transferred to the United States and stored by us, as described in our Terms of Use and in this Privacy Policy.

(b) Information we collect automatically: When you use the Services or browse one of our Websites, we may collect information about your visit to our Websites, your usage of the Services, and your web browsing. That information may include your IP address, your operating system, your browser ID, your browsing activity, and other information about how you interacted with our Websites or other websites. We may collect this information as a part of log files as well as through the use of cookies or other tracking technologies.

(c) Information from your use of the Service: We may receive information about how and when you use the Services, store it in log files or other types of files associated with your account, and link it to other information we collect about you. This information may include, for example, your IP address, time, date, browser used, and actions you have taken within the application. This type of information helps us to improve our Services for both you and for all of our users.

5. Use and Disclosure of Personal Information

We may use and disclose Personal Information only for the following purposes:

(a) To promote use of our services to you. For example, if you leave your Personal Information when you visit our Website and do not sign up for any of the Services, we may send you an email inviting you to sign up. If you use any of our Services and we think you might benefit from using another Service we offer, we may send you an email about that. You can stop receiving our promotional emails by following the unsubscribe instructions included in every email we send. In addition, we may use information we collect in order to advertise our Services to you or suggest additional features of our Services that you might consider using.

(b) To bill and collect money owed to us by our Members. This includes sending you emails, invoices, receipts, notices of delinquency, and alerting you if we need a different credit card number. We use third parties for secure credit card transaction processing, and we send billing information to those third parties to process your orders and credit card payments.

(c) To send you System Alert messages. For example, we may inform you of temporary or permanent changes to our Services, such as planned outages, new features, version updates, releases, abuse warnings, and changes to our Privacy Policy.

(d) To communicate with our Members about their account and provide customer support.

(e) To meet legal requirements, including complying with court orders, valid discovery requests, valid subpoenas, and other appropriate legal mechanisms.

(f) To provide information to representatives and advisors, including attorneys and accountants, to help us comply with legal, accounting, or security requirements.

(g) To prosecute and defend a court, arbitration, or similar legal proceeding.

(h) To provide, support, and improve the Services we offer. This includes our use of the data that our Members provide us in order to enable our Members to use the Services to benefit their Transferees.

6. Data Collected for and by our Users

As you use our Services, you may import into our system Personal Information you have collected from your Transferees or other individuals. We have no direct relationship with your Transferees or any person other than you, and for that reason, you are responsible for making sure you have the appropriate permission for us to collect and process information about those individuals or entities. We will not transfer or disclose Personal Information of you or your Transferees to 3rd parties unless said party provides support for our Services or the services of our Members (“Service Providers”). All Service Providers enter into a contract with us that protects Personal Information and restricts their use of any Personal Information consistent with this policy.

7. Third Parties

We may disclose Personal Information to the following types of third parties for the purposes described in this policy: (a) Service providers. Sometimes, we need to use third party Service Providers in order to provide and support the features of our Services. For example, if you elect to use electronic signatures through DocuSign, then we may share your Personal Information with a Service Provider for that purpose. We will tell you we are working with a Service Provider whenever reasonably possible, and you may request at any time the names of our Service Providers. Just like with the other third parties we work with, these third party Service Providers enter into a contract that requires them to use your Personal Information in a manner that is consistent with this policy.

8. Your Transferee Information

Your Transferee information is stored on a secure server. We do not, under any circumstances, contact, sell or market to your Transferees. If a Transferee complains, requires support or contacts us, we might then contact that person. Only authorized employees have access to view your Transferees.

9. Notice of Breach of Security

If a security breach causes an unauthorized intrusion into our system that materially affects you or your Transferees, then NFA Tools will notify you as soon as possible.

10. Safeguarding Your Information

We take reasonable and appropriate measures to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the Personal Information. Our credit card processing vendor uses security measures to protect your information both during the transaction and after it is complete. We also perform annual audits and monthly 3rd party scanning.

11. We Operate in the United States

Our servers and offices are located in the United States, so your information may be transferred to, stored, or processed in the United States. By using our Websites, you understand and consent to the collection, storage, processing, and transfer of your information to our facilities in the United States and those third parties with whom we share it as described in this policy.

12. Accuracy of Data, Transparency, and Choice

We do our best to keep your data accurate and up to date, to the extent that you provide us with the information we need to do so. If your data changes then you are responsible for notifying us of those changes. We will retain your information for as long as your account is active or as long as needed to provide you with our Services. We may also retain and use your information in order to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our Agreements.

If you have any questions or concerns, please contact [email protected].