← Back to NexThink AI

Privacy Policy

Effective Date: December 19, 2024

NexThink AI, Inc. ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our NexThink AI platform and services (the "Services").

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, password;
• Profile information: username, profile picture, preferences;
• Payment information: billing address, payment method details (processed by third-party payment processors);
• Content you submit: text prompts, images, documents, and other inputs for AI processing;
• Communications: messages you send to us, feedback, and support requests.

1.2 Information Collected Automatically

• Device information: IP address, browser type, operating system, device identifiers;
• Usage data: pages visited, features used, time spent, click patterns;
• Log data: access times, error logs, referring URLs;
• Cookies and tracking technologies (see our Cookie Policy).

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services;
• Process your AI requests and generate outputs;
• Process payments and manage your account;
• Send you technical notices, updates, and support messages;
• Respond to your inquiries and provide customer support;
• Monitor and analyze usage patterns and trends;
• Detect, prevent, and address fraud and security issues;
• Comply with legal obligations.

3. AI Data Processing Disclosure

3.1 Third-Party AI Providers

We use AI models and services from third-party providers, including but not limited to Google (Gemini, Imagen, Vertex AI), Anthropic (Claude), and others. Your inputs may be processed by these providers in accordance with their respective privacy policies and terms of service.

3.2 Data Retention for AI Processing

Inputs submitted for AI processing are temporarily stored for the duration necessary to generate outputs. We do not use your personal inputs to train AI models. However, third-party AI providers may have their own data practices.

3.3 Automated Decision-Making

Our Services use automated AI processing to generate content, analyze documents, and provide recommendations. These automated processes do not make decisions that have significant legal or similar effects on you without human review.

4. How We Share Your Information

We may share your information with:

• Service providers: third-party vendors who perform services on our behalf (hosting, payment processing, analytics);
• AI providers: for processing your AI requests (as described above);
• Legal compliance: when required by law, regulation, or legal process;
• Business transfers: in connection with a merger, acquisition, or sale of assets;
• With your consent: when you direct us to share information.

5. Your Privacy Rights

5.1 All Users

• Access: request a copy of your personal information;
• Correction: request correction of inaccurate information;
• Deletion: request deletion of your personal information;
• Data portability: receive your data in a portable format.

5.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to know what personal information is collected, used, and shared;
• Right to opt-out of the sale or sharing of personal information;
• Right to non-discrimination for exercising your privacy rights;
• Right to limit use of sensitive personal information.

5.3 European Users (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to object to processing and to lodge a complaint with a supervisory authority.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (TLS/SSL) and at rest;
• Access controls and authentication mechanisms;
• Regular security assessments and monitoring;
• SOC2 compliance framework.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is retained while your account is active and for a reasonable period thereafter.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.

9. Children's Privacy

Our Services are not intended for children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date."

11. Contact Us