LEGAL
Privacy policy
How National Merchants Corp collects, uses and protects personal data on unifyint.com and the Unify Int platform, and the choices you have.
Last updated 2026-11-01
Template — pending counsel review
Draft for legal review. This text is a working template prepared by Unify Int and has not yet been reviewed by counsel. It will be replaced by the reviewed version before launch.
Who we are
Unify Int is a product of National Merchants Corp ("we", "us"). This policy covers the website at unifyint.com and the Unify Int platform. For platform data that our customers process through Unify Int about their own end users, we act as a processor under our customer agreement and data processing addendum, and the customer's own privacy policy applies to those end users.
Contact for privacy questions: privacy@unifyint.com (to be confirmed).
What we collect
- Information you give us. When you fill in a form (book a demo, request sandbox access, contact us, request a platform, apply as a partner, request security documents or send a careers note) we collect what you enter: typically your name, work email, company, role and message.
- Account and platform data. If you use the Unify Int platform, we process account details, API keys, connection metadata, OAuth tokens and the business data your end users authorize, according to the storage mode you choose per object (sync-and-store or pass-through).
- Usage data. We use Plausible Analytics, which is cookieless and does not collect personal identifiers, to count page views and referrers in aggregate. Our servers keep standard request logs (IP address, user agent, time) for security and debugging.
How we use it
- To reply to your request and provide the service you asked for.
- To operate, secure and improve the website and the platform.
- To send service and security notices. We send marketing email only if you ask for it, and every message has an unsubscribe link.
- To meet legal obligations.
We do not sell personal data, and we do not use customer data to train AI models.
Legal bases
Where data protection law requires a legal basis, we rely on: performing a contract or taking steps at your request before one; our legitimate interests in running and securing our business, balanced against your rights; your consent, where we ask for it; and compliance with legal obligations.
Who we share it with
We share personal data only with service providers that help us run Unify Int, under contracts that limit their use of it. The current list is the sub-processor table in our Trust center (for example, Resend for transactional email and Plausible for cookieless analytics). We may disclose data if the law requires it, or as part of a merger or acquisition with notice to you.
International transfers
Where personal data moves between countries, we use recognized transfer mechanisms such as standard contractual clauses. Hosting regions are listed in the Trust center once confirmed.
Retention
We keep form submissions for as long as we need them to respond and follow up, and no longer than 24 months without further contact (to be confirmed). Platform data is kept according to your plan and settings, and deleted on request or at the end of the contract as set out in the customer agreement.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email privacy@unifyint.com (to be confirmed). You may also complain to your local data protection authority.
Security
We protect personal data with encryption in transit and at rest, access controls and audit logging. See the Trust center for details.
Children
Unify Int is a business service and is not directed at children. We do not knowingly collect personal data from children.
Changes to this policy
We will post any changes here and update the date at the top. If a change is material, we will tell customers by email before it takes effect.