Effective: May 11, 2026
Numeral Two, Inc. (“Numeral,” “we,” “our,” and/or “us”) values the privacy of individuals who use our websites, including https://www.numeral.com, or otherwise interact with us through our public-facing websites, marketing activities, events, communications, or other online interactions that link to this Privacy Policy.
This privacy policy, the “Privacy Policy,” explains how we collect, use, and disclose personal information, “Personal Data,” from website visitors, prospective customers, marketing contacts, event participants, and other individuals who interact with us outside of the Numeral platform, collectively, “You.”
This Privacy Policy does not apply to Personal Data that Numeral processes on behalf of its business customers in connection with Numeral’s tax compliance platform, APIs, software, or related services, collectively, the “Platform Services.” That processing is governed by the applicable agreement between Numeral and the relevant business customer, including any applicable data processing addendum or similar agreement. If You have questions about how a Numeral customer collects, uses, or shares Your Personal Data, You should direct those questions to that customer.
1. Personal Data Collection
We may collect a variety of Personal Data from or about You or Your devices from various sources, as described below. If You do not provide Your Personal Data when requested, some features of our websites or communications may not work as intended, or we may not be able to respond to Your request.
A. Personal Data You Provide
Communications. If You contact us directly, we may receive additional Personal Data about You. For example, when You contact us for a demo, submit a form, request information, register for an event, or otherwise communicate with us, we may ask for Your name, company name, phone number, email address, job title, Your request, and other information You choose to communicate to us. If You subscribe to our newsletter or other marketing communications, we may ask for Your name and contact information, such as Your email address.
Marketing and Event Interactions. If You attend an event, webinar, conference, or other program that we host, sponsor, or participate in, we may collect Personal Data such as Your name, company name, job title, contact information, registration details, and other information You provide in connection with the event.
B. Personal Data We Collect Automatically
Location Information. When You use our websites, we may infer Your general location information. For example, Your IP address may indicate Your general geographic region.
Device Information. We receive information about the device and software You use to access our websites, including internet protocol, “IP,” address, web browser type, operating system version, and device identifiers.
Usage Information. To help us understand how You use our websites and to help us improve them, we automatically receive information about Your interactions with our websites, such as date and time of Your sessions, the pages You view, links to/from any page, and time spent in a session.
Information from Cookies. Cookies are small files of letters and numbers that we store on Your browser or the hard drive of Your computer. They contain information that is transferred to Your computer’s hard drive. We use cookies, beacons, invisible tags, pixel tags, web beacons, and similar technologies, collectively “Cookies,” to collect information about Your browsing activities and to distinguish You from other website visitors. Where required by applicable law, we obtain Your consent to use Cookies.
C. Personal Data We Receive from Others or Infer
From Partners. We may receive additional Personal Data about You from third parties, such as marketing partners, event co-sponsors, referral partners, advertising partners, data enrichment providers, and publicly available sources, and combine it with other information we have about You.
Inferences. We may infer information about Your company, role, interests, or potential interest in Numeral based on Your interactions with our websites, communications, marketing materials, or events.
2. Personal Data Uses
We use the Personal Data we collect:
- To provide, maintain, debug, improve, and enhance our websites and public-facing services;
- To respond to Your inquiries, requests, comments, or questions;
- To provide demos, information, or other materials that You request;
- To understand and analyze how You use our websites, and develop new products, services, features, and functionalities;
- To understand and analyze usage patterns of our websites and marketing communications;
- To advertise to You, including targeted advertising, and to measure Your engagement with those ads;
- To send You marketing and other communications via email, SMS messages, or other means, with the ability to opt out of marketing communications as provided in the Your Choices section below;
- To manage events, webinars, sponsorships, and other marketing programs;
- To find and prevent fraud, and respond to trust and safety issues that may arise in connection with our websites or communications;
- For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
- For other purposes for which we provide specific notice at the time the Personal Data is collected.
3. Sharing Personal Data
We do not share or otherwise disclose Personal Data we collect from You except as described below or otherwise disclosed to You at the time of collection.
Vendors and Service Providers. We may share any Personal Data we receive with vendors and service providers retained in connection with the operation of our websites, marketing activities, communications, events, analytics, advertising, security, and other business purposes.
Analytics Partners. We use analytics services, such as Google Analytics, to collect and process certain analytics data.
Advertising and Marketing Partners. We do not rent or sell Personal Data about You to non-affiliated companies for their direct marketing purposes unless we have Your permission. We may work with third-party advertising and marketing partners to show ads that we think may interest You and to measure the effectiveness of our advertising and marketing. Depending on applicable law, some of these activities may be considered “sharing” or “selling” Personal Data, or processing Personal Data for targeted advertising. See the Your Choices and Your Privacy Rights Granted by Law sections below for details on how to opt out or set Your preferences regarding advertising and marketing.
Event Partners. If You register for or attend an event, webinar, conference, or other program that we host, sponsor, or participate in, we may share Your Personal Data with event organizers, co-sponsors, or other partners where disclosed to You or where reasonably necessary to administer the event.
As Required by Law and Similar Disclosures. We may access, preserve, and disclose Your Personal Data if we believe doing so is required or appropriate to: (i) comply with law enforcement requests and legal process, such as a court order or subpoena; (ii) respond to Your requests; or (iii) protect Your, our, or others’ rights, property, or safety.
Affiliates. We may share Your Personal Data with our affiliates for any of the purposes described in this Privacy Policy and for our affiliates to offer website visitors and prospective customers their services, including, depending on Your settings, for related advertising and marketing communications.
Merger, Sale, or Other Asset Transfers. We may disclose and transfer Your Personal Data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company, or we sell, liquidate, or transfer all or a portion of our business or assets.
Consent. We may also disclose Personal Data with Your separate permission.
4. Personal Data Handling Practices
A. Retention
We take measures to delete Your Personal Data or keep it in a form that does not permit identifying You when such information is no longer reasonably necessary for the purposes for which we process it, unless we are required by law to keep such information for a longer period. When determining the specific retention period, we take into account various criteria, such as the nature and length of our relationship with You, the type of interaction we have with You, the purposes for which we process the information, mandatory retention periods provided by law, and applicable statutes of limitations.
B. Security
We make reasonable efforts to protect Your Personal Data by using physical and electronic safeguards designed to secure the Personal Data we maintain. However, because no electronic transmission or storage of Personal Data can be entirely secure, we can make no guarantees as to the security or privacy of Your Personal Data.
C. Location
Our websites are hosted in the United States (“US”) and are intended for individuals located within the US or otherwise interested in Numeral’s products and services. Personal Data may be stored and processed in the US or any other country where we or our service providers do business. These countries may have data protection rules that are different from Your country. When transferring data across borders, we take measures to comply with applicable data protection laws related to such transfer.
If You are located in the European Economic Area, “EEA,” the UK, or Switzerland, we comply with applicable laws to provide an adequate level of data protection for the transfer of Your Personal Data to the US. Where applicable law requires a legal mechanism for data transfers, we use one or more of the following: EU Standard Contractual Clauses, the UK International Data Transfer Addendum, the UK International Data Transfer Agreement, verification that the recipient has implemented Binding Corporate Rules, or another legal method available to us under applicable law.
D. Children’s Privacy
We do not knowingly collect, maintain, or use Personal Data from children under 16 years of age, and no parts of our websites are directed to children. If You learn that a child has provided us with Personal Data, please alert us as provided in the Contact Information section below.
5. Your Choices
If You choose not to provide us with the Personal Data we collect, some features of our websites or communications may not work as intended.
A. Marketing Communications
You can unsubscribe from our promotional emails and SMS messages by following the directions in the messages You receive. Even if You opt out of receiving promotional messages from us, we may continue to send You non-promotional communications, such as responses to Your inquiries, transactional communications, or notices regarding our business relationship with You.
B. Cookies and Advertising Choices
We use tracking technologies such as Cookies. You may be able to control Cookies through Your browser settings or other tools. In addition, some of our advertising partners may allow You to opt out of certain targeted advertising activities through industry opt-out mechanisms or other tools they provide.
Where required by applicable law, we will provide a mechanism for You to exercise choices regarding Cookies, targeted advertising, or the sale or sharing of Personal Data. Please note that disabling Cookies may affect the functionality of our websites.
C. Do Not Track and Opt-Out Preference Signals
Some browsers have incorporated “Do Not Track,” “DNT,” features that can send a signal to the websites You visit indicating You do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our websites do not currently respond to browser DNT signals.
Certain jurisdictions require businesses to recognize universal opt-out mechanisms or opt-out preference signals, such as Global Privacy Control, where applicable. Where required by applicable law, we will treat such signals as valid requests to opt out of the sale or sharing of Personal Data or targeted advertising. California guidance recognizes the right to opt out of sale or sharing, including through user-enabled opt-out preference signals.
6. Your Privacy Rights Granted by Law
When it comes to privacy, we comply with applicable laws, including where those laws grant You rights with respect to Your Personal Data.
A. European Privacy Rights and Notices
If You are located in the EEA, UK, or Switzerland, the following applies to You.
1. Data Subject Rights
Where we have relied on consent as a legal basis, You can withdraw Your consent any time for future processing, free of charge;
You can request access to, and rectification or deletion of, personal data;
You can request to transfer or receive a copy of the personal data in a usable and portable format;
You can object to, or obtain a restriction of, the processing of personal data under certain circumstances.
You may exercise these rights by contacting us as provided in the Contact Information section below. You have the right to lodge a complaint with a supervisory authority, but we encourage You to first contact us with any questions or concerns. Before fulfilling Your request, we may ask You to provide reasonable information to verify Your identity.
Please note that there are exceptions and limitations to each of these rights, and that while any changes You make will be promptly reflected in active databases or within a reasonable period of time, we may retain Your Personal Data for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.
2. Legal Bases for Processing
We only process Your Personal Data when we have a valid legal basis, including when:
- Consent. You have consented to the use of Your Personal Data. For example, we may process Your Personal Data to send You marketing communications or to use Cookies where You have consented to such processing.
- Contractual Necessity. We need Your Personal Data to provide a service or respond to Your request. For example, we may process Your Personal Data where necessary to respond to Your inquiries, provide information You request, or register You for an event.
- Compliance with a Legal Obligation. We have a legal obligation to use Your Personal Data. For example, we may process Your Personal Data to comply with applicable legal, tax, accounting, or regulatory obligations.
- Legitimate Interests. We have a legitimate interest in processing Your Personal Data. Specifically, we have a legitimate interest in processing Your Personal Data for website operation, product development, internal analytics, marketing, fraud prevention, security, and otherwise to improve the safety, security, and performance of our websites and business. We only rely on our or a third party’s legitimate interests to process Your Personal Data when these interests are not overridden by Your rights and interests.
B. California Residents
If You are a California resident, see below for information about Your privacy rights and choices under California law.
Scope of Notice. This California Privacy Notice, the “California Notice,” supplements the information contained in our Privacy Policy and applies solely to individual residents of the State of California, “California consumers.” This California Notice describes how we collect, use, disclose, and otherwise process personal information of California consumers, either online or offline, within the scope of the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CPRA”).
Unless otherwise expressly stated, all terms in this California Notice have the same meaning as defined in our Privacy Policy or as otherwise defined in the CPRA. This California Notice does not apply to personal information we process on behalf of our business customers in connection with the Platform Services.
For the purposes of this California Notice, Personal Data does not include: publicly available information from government records; deidentified, aggregated, or anonymized information that is maintained in a form that is not capable of being associated with or linked to a California consumer; or information relating to job applicants, employees, contractors, and other personnel of Numeral or our affiliates.
Please see Sections 1, 2, and 3 of our Privacy Policy to learn more about:
- Collection and use of Personal Data;
- Sources of Personal Data;
- Purposes of collecting Personal Data;
- Disclosure of Personal Data; and
- Recipients of Personal Data.
1. Categories of Personal Data We Collect
Depending on how You interact with us, we may collect the following categories of Personal Data:
- Identifiers, such as name, email address, phone number, company name, IP address, and online identifiers;
- Commercial information, such as records of products or services You considered, requested, or expressed interest in;
- Internet or other electronic network activity information, such as browsing history, search history, pages viewed, links clicked, and interactions with our websites, emails, or advertisements;
- Geolocation data, such as approximate location inferred from IP address;
- Professional or employment-related information, such as company name, job title, and business contact details;
- Inferences, such as information reflecting Your potential interests, preferences, or characteristics based on Your interactions with our websites or marketing communications; and
- Sensitive personal information, if any, only to the extent included in information You choose to provide or as otherwise described at the time of collection.
2. Your California Privacy Rights
As a California resident, You may be able to exercise the following rights under the CPRA in relation to Your Personal Data, subject to certain limitations at law:
- The Right to Access or Know. You have the right to request that we disclose to You the personal information we have collected about You. You also have a right to request additional information about our collection, use, disclosure, sale, or sharing of such personal information.
- The Right to Request Correction. You have the right to request that we correct inaccurate personal information that we maintain about You.
- The Right to Request Deletion. You have the right to request the deletion of personal information we have collected from You, subject to certain exceptions.
- The Right to Opt Out of Personal Information Sales or Sharing. You have the right to direct us not to sell or share personal information we have collected about You to third parties in the future. For purposes of the CPRA, “sharing” includes certain disclosures of personal information for cross-context behavioral advertising. The California Attorney General describes “sharing” as sharing for cross-context behavioral advertising, meaning targeted advertising based on a consumer’s personal information obtained from activity across numerous websites.
- The Right to Limit the Use and Disclosure of Sensitive Personal Information. You may have the right to limit certain uses and disclosures of sensitive personal information. We do not use or disclose sensitive personal information for purposes that would require us to offer this right unless we provide You with notice and a right to limit as required by law.
- The Right to Non-Discrimination. You have the right not to receive discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information, we may no longer be able to respond to Your requests, provide certain information, or engage with You in the same manner.
3. Sale or Sharing of Personal Data
We do not sell Personal Data in exchange for money. However, some of our online advertising or analytics activities may be considered a “sale” or “sharing” of Personal Data under the CPRA. You may opt out of such sale or sharing contacting us as described in the Contact Information section below.
Where required by applicable law, we will also process opt-out preference signals, such as Global Privacy Control, as requests to opt out of sale or sharing. California guidance states that businesses cannot sell or share personal information after receiving a valid opt-out request unless the consumer later authorizes it.
4. Shine the Light
California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law, Civil Code § 1798.83. We do not share Personal Data about You with non-affiliated companies for their direct marketing purposes unless we have Your permission.
5. Exercising Your California Privacy Rights
To exercise Your California privacy rights, please contact us as described in the Contact Information section below or use any privacy request mechanism made available on our website. When exercising Your rights, we may need to verify Your identity before responding to Your request, such as by verifying that the email address from which You send the request matches Your email address that we have on file. Authentication based on a government-issued and valid identification document may be required in some circumstances.
If You designate an authorized agent to make requests on Your behalf to exercise Your rights under the CPRA, we may require the agent to provide proof that You authorized it to act on Your behalf, and we may need You to verify Your identity directly with us.
C. Other U.S. State Privacy Rights
Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws, which may include rights to access, correct, delete, or obtain a copy of Personal Data, or to opt out of certain processing activities, such as targeted advertising, sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
You may exercise any rights available to You under applicable law by contacting us as described in the Contact Information section below. We will respond to Your request as required by applicable law.
7. Numeral Customer Data
Numeral provides tax compliance software and related services to business customers. In providing those services, Numeral may process Personal Data and other data on behalf of its customers, including data submitted to or processed through the Platform Services (“Customer Data”). Numeral processes Customer Data pursuant to its agreements with its customers, including any applicable data processing addendum or similar agreement, and not pursuant to this Privacy Policy.
If You have questions about how one of Numeral’s customers collects, uses, or shares Your Personal Data, or if You would like to exercise privacy rights with respect to Personal Data processed by Numeral on behalf of one of its customers, please contact that customer directly.
8. End User Data
Customer Data may include Personal Data relating to individuals who interact with our business customers, such as their customers, users, or end users (“End Users”). Numeral processes such Personal Data solely on behalf of its business customers and does not control how those customers collect, use, or disclose that data.
This Privacy Policy does not apply to Personal Data relating to End Users processed by Numeral on behalf of its business customers.
If You are an End User and have questions about how Your Personal Data is collected, used, or shared, or if You would like to exercise any privacy rights with respect to Your Personal Data, please contact the business customer with whom You have a relationship directly.
9. Changes to This Privacy Policy
We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share Personal Data previously collected from You through our websites or other interactions covered by this Privacy Policy, we will provide notice or obtain consent regarding such changes as may be required by law.
10. Contact Information
If You have any questions, comments, or concerns about our processing activities, or if You would like to exercise Your privacy rights, please email us at privacy@numeralhq.com.
Please remember that if Your Personal Data is processed by Numeral on behalf of one of our business customers, the relevant customer’s privacy policy or agreement should explain how that customer collects, uses, and shares Your Personal Data. If You have questions about that customer’s Personal Data practices, then You should direct those questions to that customer.
Version 3/1/23