Privacy policy

Who we are

This website, ninjaworkspace.com, and our free assessment tools are operated by Nynja Technologies Inc. (doing business as NINJAworkspace and TotalControl). This policy covers the website and assessments. Your branded app has its own data terms in your operator agreement. Questions: jr@ninjaworkspace.com, or write to Nynja Technologies Inc., 1889 Lakewood Road, Unit 4, Toms River, NJ 08755.

The short version

We never sell personal information and never use it for third-party advertising. We use a small number of service providers to run the site, bound by contract to use your data only on our behalf. Your customer list belongs to you: we process it only to run your branded app, you can export it any time, and we delete it on request when you leave.

What we collect on this website

• What you type in. Name, company, trade, email, phone, customer count and message when you fill in a form, book a call, or ask us to email you a report.
• Assessment answers and results. When you use a free Revenue Leak Assessment, we save your answers and the results it calculates (for example estimated leak, contract economics and the price quote) as you go, even if you never give us your email. We use this to see how operators use the tool, improve the model and understand our market. "No email required" means exactly that: you get the full report without giving us contact details. Answers saved without an email are not linked to your name unless you later give us one.
• Usage and device information. Pages you view, time on page, how far you scroll, buttons and links you click, the site or ad that sent you (referring address and campaign tags such as utm_source), screen size, browser language and time zone.
• Product analytics. PostHog records the pages you view, clicks, the page that referred you, campaign tags, device and browser type, and an approximate location derived from your IP address. We send PostHog summary assessment events (for example "completed", the estimated total and time taken) but not your individual assessment answers. When you submit a contact, demo or report form, we also send PostHog the name, email address and company you gave us, so that your analytics history is linked to your enquiry. We do not do this if your browser sends a Global Privacy Control signal or, in the EU/UK, unless you have accepted analytics.
• IP address and approximate location. Our server records the IP address your request comes from and derives an approximate city, region and country from it. We do not use GPS or precise location.

Cookies and your choices

We set a first-party cookie (__session) and store a random identifier in your browser's local storage so we can recognise a returning browser and group page views into visits. The assessments also save your in-progress answers in local storage for up to 7 days so you can resume. Our product analytics provider, PostHog, stores its own random identifier in a first-party cookie and local storage (for up to 12 months) to count visits and see how pages and assessments are used. When you follow a link between our websites (for example from ninjaworkspace.com to our assessment tools), we add these random identifiers to the link so both sites recognise the same browser; they are removed from the address bar as the page loads. The embedded Calendly scheduler sets cookies when it loads. We do not use advertising or cross-site tracking cookies.

Visitors in the EU, EEA, UK and Switzerland are asked first. If your browser or connection indicates you are in one of those places, we show a choice with equal Accept and Reject buttons. Until you choose, we send no analytics, set no analytics cookie or identifier, and do not record your session; the site and the assessments work normally either way. If you accept, analytics and session recordings run as described in this policy. If you reject, they stay off for that browser. We store your choice (and when you made it) in your browser's local storage so we do not ask on every page, and we ask again after 12 months or when this policy changes.

You can change your choice at any time with the Privacy choices link in the footer of every page and assessment. Rejecting does not affect the forms or the assessments: you can still get your report, ask us to email it, book a demo or contact us. When you send a form, it reaches us as a request you made, without the analytics identifiers. You can also clear or block cookies and site data in your browser. The site still works, but a returning visit will look like a new one.

Session recordings

To find and fix confusing parts of our site and assessments, we record how pages are used: mouse movement, clicks, scrolling and what appears on screen. Everything typed into form fields is masked in the browser before anything is sent, and the dollar figures the assessments calculate from your answers are masked too. Recordings are not used for advertising, are viewable only by our team, and are deleted after 30 days. Browsers that send a Global Privacy Control signal are never recorded, and visitors in the EU/UK are recorded only after accepting.

How we use it, and our legal basis

To run and secure the site, answer enquiries and send reports you ask for, measure which pages and assessments are useful, and understand where visitors come from. For visitors in the EU/UK, we use analytics cookies, similar identifiers and session recordings only with your consent; we rely on our legitimate interest in running and securing our website, and on steps you ask us to take (such as sending a report or booking a demo), for everything else.

Internal AI analysis

Our team uses an internal AI assistant, powered by Anthropic's API, to answer questions about site traffic and assessment trends and to write a daily summary. To do this, relevant analytics records, which can include approximate location, assessment answers and enquiries you submitted, are sent to Anthropic to process for us. Anthropic acts as our service provider and does not use this data to train its models under its commercial terms.

Service providers

Google Cloud / Firebase (hosting, database, sign-in) · PostHog (product analytics and session recordings, including the name, email and company from forms you submit, as described above; processes data in the United States) · Anthropic (internal AI analysis) · Web3Forms (delivers form submissions to our inbox) · Calendly (demo scheduling) · Google Fonts and YouTube (no-cookie mode) for fonts and embedded video. These providers are based in or process data in the United States.

How long we keep it

• Detailed page-view, click and scroll events: 90 days, then deleted automatically.
• IP addresses in our own analytics records: removed after 90 days.
• Visit and device summaries and assessment results not linked to an email: up to 24 months, then deleted.
• Product analytics events held by PostHog: up to 12 months. Session recordings: 30 days.
• Leads, report requests and enquiries you submit, and assessment results linked to them: as long as we have a business relationship or until you ask us to delete them, and no longer than 3 years after last contact.
• Anonymous aggregate statistics (for example "visits per day"): may be kept indefinitely.

Your choices and rights

You can ask us to tell you what we hold about you, correct it, delete it, or stop using it for analytics. Email jr@ninjaworkspace.com with the email address you gave us. If you never gave an email, include the approximate date and time of your visit and the page or assessment you used so we can find the records. App account holders can also follow Delete your account. We respond within 30 days (45 days where California law allows), do not charge, and will not treat you differently for making a request. Deletion requests cover data held by PostHog on our behalf. California residents: we do not sell or "share" personal information for cross-context behavioural advertising. We honour Global Privacy Control signals: when your browser sends one, we do not set our visitor cookie or store a lasting browser identifier, we do not keep your IP address or city, and we do not load our product-analytics tool (PostHog), so no session is recorded and we do not send PostHog your name, email or company. EU/UK residents may also complain to their local data protection authority.

Children

This site is for businesses and is not directed at children under 16. We do not knowingly collect their data.

User content and acceptable use

You are responsible for the accuracy of information you submit and for holding the rights to content you upload. Unlawful conduct, attempts at unauthorized access, spam, malware, and harvesting data about others are prohibited.

Changes and contact

We will update the date above when this policy changes. Questions: jr@ninjaworkspace.com, 917-309-9917. Nynja Technologies Inc., governed by the laws of the State of Nevada, USA.