Scope and who we are
This Privacy Policy explains how Neppalli Financial Services LLC, a New Jersey limited liability company doing business as Neppalli (“Neppalli,” “we,” “us,” or “our”), handles personal information collected through this website and its inquiry form. Except for the “Optional financial-account connections” section below, it does not govern information handled under a separate client engagement agreement or other service-specific notice.
Sources of information
We receive information directly from you through the inquiry form and any email or other communication you send us. We also receive limited device, browser, network, and site-usage information automatically when you visit the site, and may receive information from service providers that help us operate, secure, and measure the site.
Optional financial-account connections
Bank-account linking is not currently offered through this public website. If offered through our client services, Stripe Financial Connections would allow you to authorize access to financial-account data for bookkeeping and tax analysis. The connection flow will disclose the specific information requested, such as account identifiers and transaction history, and any balance or ownership information needed for that purpose. We will limit access and use to the disclosed purpose and obtain any additional consent required for new permissions or uses.
Stripe facilitates the connection under its Privacy Policy and Linked Financial Account Terms. Permission to share financial data is not authorization to debit your account.
Before collection begins, the applicable service notice will explain how linked-account information is stored and shared, including access by authorized personnel and service providers supporting your bookkeeping and tax services. Retention will be limited to what is necessary for those services and applicable legal or professional recordkeeping obligations; the inquiry-retention period elsewhere in this policy does not apply to these client records.
To request disconnection, deletion, or both, email ask@neppallico.com with the subject “Financial Connections Privacy Request.” Do not include credentials or sensitive financial records. You may also use Stripe’s linked-account support process. Disconnection stops new data sharing but does not automatically delete previously received information from Neppalli or Stripe. Deletion is a separate request; we will coordinate with Stripe as required and delete information as required by law or explain the legal basis for retaining it.
Information we collect
We may collect the following categories of personal information:
- Contact and identity information: name, work email, optional phone number, company, role, and company website.
- Inquiry information: service interests, revenue range, decision timeframe, and the situation or decision you describe.
- Device and activity information: IP address or a one-way hashed derivative, browser and device information, pages or sections viewed, referring pages, timestamps, and interactions with the site.
- Cookie preferences and similar technology data: choices about optional analytics and information required to remember those choices.
- Security information: bot-verification results, submission timing, and limited data used to prevent spam, abuse, and excessive requests.
Do not submit Social Security numbers, taxpayer identification numbers, account credentials, payment-card data, tax returns, or other sensitive financial records through the website form.
How we use information
- Evaluate and respond to prospective-client inquiries.
- Route inquiries, maintain business records, and manage prospective relationships.
- Operate, secure, troubleshoot, and improve the website.
- Measure site usage when optional analytics are permitted by your preferences.
- Detect spam, fraud, abuse, and other security threats.
- Comply with law, professional obligations, and valid legal process.
Submitting an inquiry does not create an accountant-client, adviser-client, fiduciary, or other professional relationship.
Cookies and similar technologies
We use essential browser storage to remember your analytics choice and technologies needed for security and site operation. With your permission, we may load HubSpot analytics, which can set cookies and record page visits and site interactions. HubSpot analytics and our custom analytics events remain off unless you choose to allow them. You can change your choice at any time through “Cookie preferences.”
We do not use the site for interest-based advertising, sell personal information, or share it for cross-context behavioral advertising. Because those practices are not enabled, there is currently no sale/share opt-out to exercise. The Replit publishing platform may separately collect aggregate traffic information under its own platform practices; the Neppalli cookie control does not govern that collection.
Service providers and disclosures
We may disclose personal information to vendors that process it for us under appropriate restrictions, including:
- HubSpot: customer-relationship management and storage of qualified inquiry information.
- Cloudflare Turnstile: bot detection and form-security verification; Cloudflare may receive device and network information needed to provide that service.
- Replit and related infrastructure providers: website hosting, delivery, operational logging, and—when permitted—privacy-oriented analytics.
We may also disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, obtain professional advice, or complete a merger, financing, reorganization, or transfer of relevant business assets. We do not permit service providers to use inquiry information for their own targeted advertising.
Retention
We retain each category only as long as reasonably necessary for the purpose described here, unless a longer period is required or permitted by law. We generally retain unsuccessful prospective-client inquiry records for up to 24 months after the last meaningful interaction. Information connected to an active or former client relationship may be retained longer as required by the engagement, professional standards, legal obligations, dispute-resolution needs, or applicable recordkeeping requirements. Cookie-choice data remains on your device until you change or clear it. Analytics data is retained according to the applicable provider configuration and our need to understand site performance. Short-lived security records used to limit repeated form submissions expire on a substantially shorter schedule.
Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information handled through this site. These include transport encryption, restricted access, bot protection, input limits, and one-way hashing for rate-limit identifiers. No website, transmission, or storage system can be guaranteed completely secure. Use established client channels—not the public inquiry form—to exchange tax documents or sensitive financial information.
Your U.S. privacy rights
Depending on where you live, whether a law applies to us, and subject to legal exceptions, you may have rights to access or know about personal information; request correction, deletion, or portability; learn about categories of information collected, sources, purposes, and recipients; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive personal information; and appeal a denied request. Neppalli does not sell personal information, use it for targeted advertising, or use inquiry information for profiling that produces legal or similarly significant effects.
Submit a request by emailing ask@neppallico.com with the subject “Privacy Request.” Include the state where you reside and enough information for us to understand and verify the request. Do not use the public inquiry form for a privacy request or include sensitive information in the request. We may need to verify your identity and authority before acting, and we will respond within the time required by applicable law. You will not be discriminated against for exercising an applicable privacy right. An authorized agent may submit a request where permitted by law, subject to verification.
If we deny a request that is subject to an appeal right, email ask@neppallico.com with the subject “Privacy Appeal.” We will review the appeal and provide the response required by applicable law.
Notice at collection and California disclosures
This section provides notice at or before collection for California residents and describes the categories relevant to this website. We may collect identifiers and professional or employment-related information (such as name, email, phone, company, and role); commercial information (such as service interest, business-size range, and decision timeframe); internet or electronic activity information (such as pages viewed, browser information, and interactions); and inferences used to review and route an inquiry. We do not intentionally request sensitive personal information through the form and instruct you not to submit Social Security numbers, financial-account information, health information, credentials, or similar records.
Sources are you, your browser or device, and service providers acting on our instructions. Business purposes include responding to inquiries, maintaining prospective-client records, securing and operating the website, preventing abuse, measuring permitted site usage, and complying with law. Categories of recipients include hosting and infrastructure providers, HubSpot for CRM and inquiry storage, and Cloudflare for bot verification. We do not sell these categories or share them for cross-context behavioral advertising. Retention periods and criteria are described in “Retention” above.
California residents may use the request and appeal methods in “Your U.S. privacy rights.” Because we do not sell or share personal information for cross-context behavioral advertising, a “Do Not Sell or Share My Personal Information” link is not currently applicable to our practices. We will update this policy and provide any additional notice or choice required if those practices change.
Health, financial, and professional information
This public website and inquiry form are not a secure client portal and are not intended to receive protected health information, tax records, taxpayer identifiers, payment-card data, account credentials, or other sensitive financial records. Whether a particular engagement is subject to HIPAA or another professional privacy rule depends on the parties, services, and information involved; any such engagement is governed by separate agreements and established secure channels. If you send sensitive information by mistake, contact us so we can review the appropriate response.
Email and communications
We use the email address you provide to respond to your inquiry and manage a prospective or professional relationship. We do not add inquiry submissions to a general marketing list. If we send a commercial email in the future, we will identify the sender, include the disclosures and opt-out method required by applicable law, and honor valid unsubscribe requests.
Children
This website and Neppalli’s services are intended for adults and businesses and are not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child submitted information, contact us so we can review and delete it as appropriate.
Changes and contact
We may update this policy as our practices or legal obligations change. The effective date will be revised when material updates are published. For privacy questions or requests, email ask@neppallico.com. The public inquiry form is for prospective-client conversations and is not the channel for privacy requests or sensitive records.