Skip to content
PUBLIC VIEW // select an audience
Back to Home

Privacy Policy

Last updated: February 26, 2026

1. Overview

Namauu Technological & Industrial, LLC (“NTI,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, and share information when you use our web platform and services.

As a federal government contractor specializing in cybersecurity and IT services, we hold ourselves to the highest standards of data protection, the same standards we apply when handling sensitive government information.

2. Information We Collect

Information You Provide

We collect information you voluntarily provide when you:

  • Create an account: name, email address (work and/or personal), position/title, and password.
  • Complete your profile: professional information, communication preferences, and government email status.
  • Contact us: any information you include in messages, inquiries, or support requests.

Information Collected Automatically

When you access the platform, we may automatically collect certain technical information:

  • Browser type and version, operating system, and device type.
  • IP address and approximate geographic location.
  • Pages visited, time spent, and navigation patterns.
  • Referring URLs and search terms used to find our platform.

Information from Third-Party Sources

If you are an existing NTI employee, contractor, or contact in our internal systems, we may associate your account with your existing records to pre-fill profile information and streamline your onboarding experience.

When you apply for a role or manage your applicant profile, this website and Ekahi exchange only the information needed to pre-fill your profile, process your application, and support your account. This may include your name and contact details, address, education, security clearance, professional experience, and application details.

NTI controls how long applicant information is retained in Ekahi under its legal and business recordkeeping obligations. Contact us at contact@namauu.com to request access, correction, or deletion of your applicant information, subject to applicable legal requirements.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the platform: including account creation, authentication, and access management.
  • Verify your identity: through one-time passcode (OTP) email verification during account registration.
  • Communicate with you: send transactional emails (verification codes, account notifications) and, with your consent, marketing communications and product updates.
  • Improve the platform: analyze usage patterns to enhance features, performance, and user experience.
  • Ensure security: detect and prevent fraud, unauthorized access, and other malicious activity.
  • Comply with legal obligations: respond to lawful requests and meet applicable regulatory requirements.

4. Data Storage & Security

We take the security of your data seriously. Our platform implements multiple layers of protection:

  • Encryption in transit: all data transmitted between your browser and our servers is encrypted using TLS 1.3.
  • Encryption at rest: stored data is encrypted using AES-256 encryption.
  • Secure authentication: we use cryptographically signed session tokens (JWS HS256), one-time passcode verification, and enforce strong password requirements.
  • Session security: onboarding session data is stored in encrypted, short-lived cookies (1-hour TTL) rather than in server-side databases, minimizing data exposure.
  • Access controls: role-based access controls and row-level security policies restrict data access to authorized users and personnel.
  • Infrastructure: our platform runs on enterprise-grade cloud infrastructure with SOC 2 Type II certified providers.

While we implement these measures to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use trusted third-party services to operate the platform. These providers have access to your data only as necessary to perform their functions and are obligated to maintain its confidentiality:

  • Authentication & database: we use Supabase for secure user authentication and data storage, hosted on SOC 2 Type II certified infrastructure.
  • Email delivery: verification codes and transactional emails are sent through Resend, which processes your email address solely for delivery purposes.
  • Analytics: we use privacy-respecting analytics tools to understand aggregate usage patterns. We do not sell analytics data to third parties.

We do not sell, trade, or rent your personal information to third parties. We do not share your data with data brokers or advertising networks.

6. Government Data Handling

As a federal contractor supporting government agencies, NTI understands the elevated requirements for handling government-related data:

  • Our security practices are aligned with NIST SP 800-171 requirements for protecting Controlled Unclassified Information (CUI).
  • We maintain compliance with CMMC Level 2 requirements where applicable to our government contracts.
  • Government email addresses (ending in .gov or .mil) are automatically identified during registration for appropriate data handling classification.
  • Data associated with government users is subject to additional access controls and audit logging as required by applicable regulations.

7. Your Rights

You have the following rights regarding your personal information:

  • Access: you can request a copy of the personal information we hold about you.
  • Correction: you can request that we correct inaccurate or incomplete personal information.
  • Deletion: you can request that we delete your personal information, subject to legal retention requirements.
  • Portability: you can request your data in a structured, commonly used, machine-readable format.
  • Opt-out: you can opt out of marketing communications at any time through your account preferences or by following the unsubscribe link in any marketing email.
  • Withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us using the information provided in the Contact Information section below.

8. Cookies & Local Storage

We use cookies and similar technologies for essential platform functionality:

  • Authentication cookies: maintain your login session and store encrypted session data securely.
  • Onboarding session cookies: temporarily store your registration progress in a cryptographically signed, encrypted cookie (automatically expires after 1 hour).
  • Preference cookies: remember your display preferences such as dark/light mode selection.

We do not use tracking cookies, advertising cookies, or cross-site tracking technologies. Our cookies are strictly functional and necessary for the operation of the platform.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

  • Account data: retained for the duration of your account and for a reasonable period afterward for legal compliance.
  • Onboarding data: temporarily stored in encrypted cookies during registration and not persisted after account creation.
  • Communication preferences: retained and modifiable for as long as your account is active.
  • Usage logs: retained for a limited period for security monitoring and then deleted or anonymized.

10. Children's Privacy

The platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as soon as possible.

11. International Users

The platform is operated from the United States. If you access the platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using the platform, you consent to the transfer of your information to the United States and agree that your information will be subject to the laws of the United States, which may differ from the data protection laws of your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date above.

We encourage you to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

For information about how we handle your account and platform access, please also review our Terms of Service.

publicglobal online ready