Privacy Policy

Last updated: 10/15/2024

At NAIXT (“we,” “us,” or “our”), we are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our services, in accordance with applicable data protection laws in the United Kingdom (UK) and the United States (US).

1. Data Controller and Contact Information

NAIXT is responsible for your personal information. If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy (at) naixt.net
• Postal Address: 900 Foulk Road (suite 201) – 19803 Wilmington – DE – USA

2. Information We Collect

We collect personal information about you when you use our services. The types of personal data we may collect include:

a. Information You Provide Directly

• Contact Information: Your first name, last name, email address, postal address, and telephone number.
• Account Information: Usernames, passwords, and other authentication details.
• Content: Any content you upload to our services, including documents for storage or for training personalized chatbots.

b. Information We Collect Automatically

• Usage Data: Information about how you use our services, including pages or features accessed, time spent on pages, and other statistical data.
• Device Information: Details about the device you use, such as IP address, browser type, operating system, and browser signature.
• Cookies and Similar Technologies: We use cookies and similar technologies to collect information about your interaction with our services.

c. Payment Information

• For transactions and subscriptions, we use secure third-party payment processors such as Stripe or PayPal. These services handle your payment information directly. NAIXT does not store or have access to your full payment card details.

3. Legal Basis for Processing

For Users in the United Kingdom

We process your personal information based on the following legal grounds under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:

• Performance of a Contract: To provide the services you have requested.
• Consent: Where you have given explicit consent for specific processing activities.
• Legitimate Interests: For our legitimate interests, such as improving our services, provided that these interests are not overridden by your rights.
• Compliance with Legal Obligations: To comply with legal and regulatory requirements.

For Users in the United States

Our processing is based on:

• Consent: Where you have provided consent.
• Legitimate Business Interests: To operate and improve our services.
• Compliance with Legal Obligations: To comply with applicable federal and state laws, such as the California Consumer Privacy Act (CCPA) and other state privacy laws, if applicable.

4. How We Use Your Information

We use your personal information for the following purposes:

• To Provide and Maintain Our Services: Including account creation, authentication, and processing transactions.
• To Personalize Your Experience: Customize content and recommendations based on your preferences.
• To Communicate with You: Respond to inquiries, provide customer support, and send administrative information.
• To Improve Our Services: Analyze usage and trends to enhance functionality and user experience.
• To Ensure Security: Monitor and prevent fraudulent activities and unauthorized access.
• To Comply with Legal Obligations: Fulfill legal and regulatory requirements.

5. Information Sharing and Disclosure

We may share your personal information in the following circumstances:

a. With Service Providers

We share information with third-party vendors and service providers who perform services on our behalf, such as:

• Payment Processing: Stripe, PayPal.
• Data Analysis: Analytical tools to understand usage patterns.
• Email Delivery: Services that send emails on our behalf.
• Hosting Services: Cloud service providers.
• Customer Support: Support platforms.
• Artificial Intelligence Services: We use services provided by OpenAI, Stability.ai, and Google Cloud API to power certain functionalities within our platform. (See Sections 6, 7, and 8.)

b. Legal Compliance and Protection

We may disclose your information to:

• Comply with Legal Obligations: Respond to legal requests and processes.
• Protect Rights and Safety: Enforce our terms and policies, and protect the rights, property, and safety of NAIXT, our users, and others.

c. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction.

Note: We do not sell or rent your personal information to third parties for their marketing purposes.

6. Use of OpenAI Services

NAIXT utilizes services provided by OpenAI to power certain AI functionalities within our platform. When you interact with these features:

• Data Transmitted: Your queries and relevant data are transmitted to OpenAI to generate responses.
• Purpose: To provide AI-powered services and improve user experience.
• Privacy Policy: OpenAI processes this data in accordance with their privacy policy, available at OpenAI Privacy Policy.

7. Use of Stability.ai Services

For image and video generation functionalities, we use services provided by Stability.ai:

• Data Transmitted: Your requests and necessary data are sent to Stability.ai to process and generate the content.
• Purpose: To fulfill your requests for image and video generation.
• Privacy Policy: Stability.ai processes this data in accordance with their privacy policy, available at Stability.ai Privacy Policy.

8. Use of Google Cloud API Services

NAIXT employs Google’s text-to-speech services for voiceover features:

• Data Transmitted: Your text input is sent to Google to generate audio output.
• Purpose: To provide voiceover functionalities within our services.
• Privacy Policy: Google processes this data according to their privacy policy, available at Google Cloud Privacy Policy.

9. User-Uploaded Documents for Personalized Chatbots

When you upload documents to train a personalized chatbot:

• Purpose: Exclusively to improve and personalize your own GPT model.
• Storage: Stored securely and only accessible to you and your personalized chatbot.
• Privacy: Not used by or accessible to other users or third parties.
• Data Retention: Retained as long as you maintain them in your account. You can delete them at any time.

10. Storage and Deletion of Documents

• Storage: Documents saved in the “project” section or uploaded for personalized chatbots are stored securely in our database.
• User Control: You have full control and can access, export, or delete them at any time using tools in your account settings.
• Deletion: When you delete a document, it is permanently removed from our systems and cannot be recovered.

11. Data Retention

We retain your personal information only for as long as necessary for the purposes outlined in this Privacy Policy, and to comply with legal obligations, resolve disputes, and enforce our agreements.

12. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We take steps to ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

For Users in the United Kingdom

• Standard Contractual Clauses: We use standard contractual clauses approved by the UK Information Commissioner’s Office (ICO) to transfer data outside the UK.

13. Your Rights

For Users in the United Kingdom

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of Access: Obtain confirmation of whether your data is being processed and access it.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data under certain circumstances.
• Right to Restrict Processing: Request restriction of processing under certain conditions.
• Right to Data Portability: Receive your data in a structured, commonly used format and transmit it to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Rights Related to Automated Decision-Making: Not to be subject to decisions based solely on automated processing, including profiling.

For Users in the United States

Depending on your state of residence, such as California, you may have the following rights under state laws like the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: Opt-out of the sale or sharing of your personal information.
• Right to Limit Use of Sensitive Personal Information: Limit the use of sensitive personal information.
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights.

To exercise your rights, please contact us at privacy (at) naixt.net. We will respond to your request within the timeframes required by applicable law.

14. Withdrawal of Consent

If processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

15. Lodging a Complaint

For Users in the United Kingdom

If you believe our processing infringes the UK GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk/
• Telephone: +44 303 123 1113

For Users in the United States

If you have concerns about our privacy practices, please contact us directly at [Insert Email Address]. If your issue is not resolved, you may have the right to contact your state attorney general’s office.

16. Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption: Protecting data during transmission (using SSL/TLS protocols) and at rest.
• Access Controls: Restricting access to personal data to authorized personnel only.
• Regular Security Assessments: Conducting vulnerability assessments and penetration testing.
• Incident Response Plan: Maintaining a plan to respond to data breaches, including notification procedures.

17. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect data from children under 16. If we become aware of such data, we will take steps to delete it promptly.

18. Cookies and Similar Technologies

We use cookies and similar technologies to collect information about your use of our services. You can control cookies through your browser settings.

19. Changes to Our Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. In some cases, we may provide additional notice (such as adding a statement to our homepage or sending you an email notification).

20. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy (at) naixt.net
• Postal Address: 900 Foulk Road (suite 201) – 19803 Wilmington – DE – United-States

By using our services, you acknowledge that you have read and understand this Privacy Policy, and agree to the collection and use of your personal information as described herein.

Additional Information for California Residents

If you are a California resident, the following provisions apply in addition to the rest of the Privacy Policy:

Categories of Personal Information Collected

We collect the following categories of personal information as defined in the CCPA and CPRA:

• Identifiers: Name, email address, IP address, account name, or other similar identifiers.
• Commercial Information: Records of products or services purchased or considered.
• Internet or Other Electronic Network Activity Information: Browsing history, search history, and interactions with our website.
• Geolocation Data: Approximate location based on IP address.
• Professional or Employment-Related Information: If provided by you.
• Inferences: Drawn from the above to create a profile reflecting your preferences.

Use of Personal Information

We use the personal information we collect for the purposes described in Section 4 of this Privacy Policy.

Sharing of Personal Information

We may share your personal information with third parties as described in Section 5. We do not sell your personal information. We may share your information for cross-context behavioral advertising as defined under California law.

Your Rights Under California Law

• Right to Know
• Right to Delete
• Right to Correct
• Right to Opt-Out of Sale or Sharing
• Right to Limit Use of Sensitive Personal Information
• Right to Non-Discrimination

To exercise these rights, please contact us at privacy (at) naixt.net or use the designated methods provided in this Privacy Policy.

Shine the Light Law

California’s “Shine the Light” law permits users who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes without your consent.

Additional Information for Users in Virginia, Colorado, Connecticut, and Utah

Residents of these states may have similar rights to those of California residents under their respective state laws. Please contact us to exercise your rights under applicable state laws.

International Users

By accessing or using our services, you consent to the transfer and processing of your personal information in countries outside of your country of residence, including the United States and the United Kingdom, where data protection laws may differ.

Third-Party Links

Our services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing them with your personal information.

Accessibility

We are committed to ensuring that our communications are accessible to individuals with disabilities. To make accessibility-related requests, please contact us at privacy (at) naixt.net.

Consent to Processing

By providing personal information to us, you consent to the processing of your personal information in accordance with this Privacy Policy and as permitted or required by law.

Thank you for trusting NAIXT with your personal information. We are committed to safeguarding your data and providing you with transparent information about how it is used.