Privacy Policy

This policy (“Privacy Policy”) describes how Nand AI collects, receives, processes, uses, discloses, or shares your information. When you use our sites, products, or services, or otherwise form a relationship with us, we may obtain data from you and the devices you are using to do so.

This policy is designed to provide transparency into our privacy practices and principles in a format you can navigate, read, and understand. We commit to treating your personal information with care and respect and encourage you to contact us using the methods provided should you have any questions or concerns about the use of your information.

The Scope of this Policy

This policy describes the processing of information provided or collected on our sites, applications, products, or services. In some instances, we may provide additional data privacy notices specific to certain products, practices, or regions. Those terms should be read in conjunction with this policy.

We acknowledge our obligations to all recipients of our products and services, including visitors to our website, our registered users and administrators of our products and services on behalf of our customers to collect, manage, process, and use their personal information (“Personal Data”) in accordance with the laws and regulations of each of the countries in which we operate.

This policy also applies to individuals who access Nand AI’s services through a free trial, product demonstration, evaluation, or proof of concept. Any personal information collected during such access will be handled in accordance with this Privacy Policy.

Information Collected or Processed

In the preceding 12 months, Nand AI may have collected or processed the categories of personal information identified below. We generally collect this information to secure, improve, and provide our services:

• Identifiers: Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, or other similar identifiers.

• Third-Party Service Data: Information accessed through third-party application programming interfaces (APIs), such as Google User Data, where you have provided explicit authorization.

• Network Activity: Browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.

• Geolocation Data: Physical location or movements.

• Professional/Employment Information: Current or past job history or performance evaluations.

• Education Information: Records that are not publicly available personally identifiable information.

• Inferences: Profiles drawn from the above information reflecting preferences, characteristics, and behaviors.

Google API Disclosure (Limited Use)

Nand AI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• No Human Review: Our staff will not read your Google User Data unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or for the App’s internal operations (and even then, only when the data have been aggregated and anonymized).

• Prohibited Uses: We do not use Google User Data for serving advertisements, including retargeting, personalized, or interest-based advertising.

• Transfer Restrictions: We do not transfer Google User Data to third parties other than those necessary to provide or improve the App’s functionality (e.g., service providers) or as required by law. We do not sell your Google User Data to any third party.

Sources of Information

The sources from which personal information may have been collected or processed include: information provided directly by you, online tracking technologies, automatic data collection technologies, social media platforms, and business partners. Purposes include: providing products/services, communicating with you, marketing (including targeted advertising), security and fraud prevention, and legal obligations.

Data Protection and Security Mechanisms

We take the security of your data seriously. Nand AI implements industry-standard technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, use, or modification.

• Encryption: We use encryption protocols (such as SSL/TLS) to protect sensitive data during transmission and employ encryption at rest for data stored on our systems.

• Access Controls: We limit access to sensitive data to only those employees, agents, and contractors who have a legitimate business need to know.

• Monitoring: We regularly review our security procedures to consider appropriate new technology and methods.

Data Retention and Deletion

We retain personal information, including data received from third-party services (such as Google User Data), only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this policy.

• Retention Criteria: We retain your information for the duration of your active relationship with Nand AI or as long as needed to provide you with our services.

• Legal Obligations: We may retain certain data for longer periods if required by law, tax, or regulatory requirements.

• Deletion: You may request the deletion of your data at any time. Upon a verified request to privacy@nand.ai, we will securely delete or anonymize your personal information from our active databases and ensure it is removed from our systems in accordance with our standard data destruction protocols.

Your Privacy Rights

If you are a resident of certain states or countries, you may have the right to know, access, correct, transfer, restrict processing, and delete your personal information. You may also opt-out of certain types of processing (e.g., targeted advertising or the sale of personal data). We will not discriminate against you for exercising these rights.

To exercise your rights, contact us at privacy@nand.ai. We will review and authenticate your identity before processing the request. If you use an authorized agent, we may require proof of signed permission.

How We Disclose Information

We may disclose your information to our subsidiaries, affiliates, service providers, and third parties to provide services to you. We may also disclose information to:

• Comply with laws, regulations, or court orders.

• Investigate or prevent illegal activities or fraud.

• Facilitate business transfers or acquisitions.

• Public forums: Information posted to our online forums is public; we refer you to those third-party sites for their specific privacy practices.

Our Commitment to Protecting Children

Our services are not intended for children. We do not knowingly collect information from children. If you believe a minor has provided us with personal information without consent, please alert us at privacy@nand.ai and we will promptly delete such information.

Cookies and Global Privacy Control

Cookies allow us to recognize your device and improve your experience. You may limit cookies through your browser settings, though some features may stop functioning. We recognize Global Privacy Control (GPC) signals from supported browsers as a valid request to opt-out of certain tracking technologies.

Our Global Data Transfer Practices

We store and process personal information on servers located within the United States by default. By using our services, you agree to the global transfer, processing, and storage of your information.

Contacting Supervisory Authorities

If you wish to lodge a complaint, you may contact your local privacy regulator. If you need assistance locating one, please contact us at privacy@nand.ai.

How to Contact Us

If you have any questions about how we process your information, you can contact us at privacy@nand.ai.