Request access

Privacy Notice

Last updated: September 18, 2026

notiphi is operated by Elliott Business Solutions, LLC (“notiphi,” “we,” “us”). This notice covers our public website at www.notiphi-app.com and notiphi-app.com, private-beta access requests, and related correspondence.

It also covers the website’s acquisition cookie when it is read on app.notiphi-app.com. It does not replace the separate privacy information for organizer accounts, event attendees, payments, uploaded itineraries, AI features, or event text messages. Those notices will be provided before the relevant product features collect your information.

Questions or privacy requests? Email hello@notiphi-app.com.

What we collect

  • Information you send us. When you submit an access request, we collect your name, email address, organization, role, event types, and any optional expected attendance, timeline, or message you include. Please don’t send attendee lists, health information, passwords, payment-card details, or other sensitive information through the website.
  • Basic visit information. Your IP address, browser and device information, pages visited, referring page or campaign, timestamps, and interactions such as clicking a button or submitting a form. We use IP- and email-based controls to limit spam and abusive requests (temporary in-memory throttles on our servers).
  • Cookie and browser-storage information. Identifiers and settings stored in cookies and, for analytics, browser local storage that help us understand how people find and use the site and, where feature flags are enabled, which version of a page they see.
  • Technical records. Server logs, error reports, request details, and diagnostic information that help us keep the site working and investigate problems.

We do not collect attendee phone numbers through the website’s access-request form. The site’s scripted product and AI demonstrations are illustrations, not live event operations or live AI conversations.

How we use it

We use this information to respond to requests, assess interest in private-beta access, communicate about your request, operate and improve the website, understand which outreach brings people to notiphi, diagnose errors, prevent abuse, and meet legal obligations.

An access request lets us reply about that request. It does not enroll you in event texts or automatically subscribe you to a promotional email list. If you separately subscribe to promotional email, you can unsubscribe using the instructions in those messages.

Cookies, analytics, and diagnostics

Acquisition tracking. Our first-party np_acq cookie lasts up to 90 days. It records an acquisition identifier and referral or campaign information so we can connect a website visit with a later access request or product signup. On notiphi-app.com hosts it is set for the shared registrable domain so it can be read across www.notiphi-app.com and app.notiphi-app.com. The cookie’s expiry does not itself delete related records already received by us.

Website analytics. We use PostHog to understand page visits and interactions. Analytics may use cookies and local storage, including identifiers that can recognize the same browser across visits; that does not make the data anonymous. We do not include names, email addresses, or access-request message contents in analytics events. Where feature flags are enabled, PostHog may use browser settings or identifiers to show and evaluate different page versions. We do not use session replay on this website.

Diagnostics and security. We use Sentry for error reports and Vercel for hosting and server logs. Technical requests can include IP addresses and browser or request information. We configure diagnostics to avoid sending form field contents where we can; infrastructure logs may still include IP addresses and similar technical data needed to operate the site.

You can block or delete cookies through your browser settings. This may affect remembered settings and measurement; it does not remove information already collected. Browser “Do Not Track” signals are not treated as an opt-out on this website today. If we become subject to a legal requirement to honor Global Privacy Control or a similar recognized opt-out signal, we will implement that requirement and update this notice. We do not currently present a separate cookie-consent banner; if applicable law requires consent before nonessential tracking, we will obtain it before relying on that tracking.

Who receives information

We use service providers to run the website and handle requests, including:

  • Vercel: hosting, request processing, logs, and website delivery.
  • Resend: delivering access-request and related emails, including their contents, recipient addresses, and delivery records.
  • PostHog: website analytics and, where enabled, feature flags.
  • Sentry: error reporting and diagnostics.

Our authorized personnel also handle incoming requests and correspondence through our business email. Providers receive information needed for their services under the applicable service arrangements. Access-request information is retained in email and related delivery records, even though the website does not keep a separate request database.

If we link to a third-party scheduling tool (for example, from the contact page), that tool’s own privacy notice applies to information you give it directly.

We may also disclose information when reasonably necessary to comply with law or valid legal process; protect people, rights, or systems; investigate abuse; or obtain professional advice. If our business is involved in a merger, acquisition, financing, or asset transfer, information may be reviewed or transferred subject to appropriate confidentiality and privacy protections. A transaction does not erase the commitments in this notice.

We do not sell personal information or share it for cross-context behavioral advertising. We do not give third parties your information for their own promotional campaigns.

When event messaging is available: mobile numbers and text-message opt-in or consent records collected for that program will not be sold or disclosed for anyone else’s marketing or promotional use. Necessary processing by messaging vendors and carriers, and disclosures required by law, are different from marketing use. The separate event-message privacy notice will explain that processing before enrollment. A business transfer will not authorize a new marketing use of SMS consent.

How long we keep it

We keep access requests and correspondence while we evaluate and respond to them and for a reasonable period needed for follow-up, dispute handling, and legal records. We keep analytics and technical records for the periods needed to understand website use, investigate faults or abuse, and meet legal obligations, taking account of the data’s sensitivity and our providers’ retention settings.

We delete or de-identify information when it is no longer needed for those purposes. Limited information may remain in backups until their normal expiry or be retained longer for a specific legal obligation or dispute. The np_acq cookie has the separate 90-day limit described above.

Your choices and rights

Email hello@notiphi-app.com to ask about, correct, or request deletion of your information. Depending on where you live and the law that applies, you may also have rights to access or receive a copy, restrict or object to processing, withdraw consent, appeal a denied request, or complain to a privacy regulator.

We may need proportionate information to verify your identity or an authorized agent’s permission. We will explain any lawful reason we cannot fulfill a request and, where applicable, how to appeal by replying to our response. We will not unlawfully discriminate against you for exercising privacy rights. Some records must be retained even after a deletion request.

Security, location, and children

We use reasonable safeguards suited to the information we handle. No website, email service, or storage system is completely secure.

notiphi is based in the United States. We and our providers may process information in the United States and other countries where we or they operate, whose privacy laws may differ from yours. We use legally required protections for international transfers where they apply. Visiting the site is not a waiver of your privacy rights.

The website’s access-request flow is intended for adults who can enter into an agreement about private-beta access for their organizations or events. It is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can address it. Event attendees (including students who may be under 18) are not enrolled through this website; attendee age and SMS rules belong in the separate product notices provided before enrollment.

Updates

We may update this notice as the website or our practices change. We will change the date above and provide additional notice or obtain consent when required. A revised notice does not retroactively authorize a materially different use where consent is required.

See also our Website Terms and SMS Information.