1. Introduction
Nodalum ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI chat platform.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Password (encrypted)
- Account preferences and settings
2.2 Conversation Data
We store your conversations to provide the Service:
- Messages you send and receive
- AI model responses
- File attachments you upload
- Conversation metadata (timestamps, model used)
2.3 Usage Data
We automatically collect:
- Browser type and version
- Device information
- IP address
- Pages visited and features used
- Session duration and interaction patterns
3. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process your conversations with AI models
- Improve and personalize your experience
- Communicate with you about the Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Third-Party AI Providers
Important: Your conversations are processed by third-party AI providers based on the model you select. Each provider has their own privacy practices:
- OpenAI (GPT) - Data may be used to improve their services. OpenAI Privacy Policy
- Anthropic (Claude) - Committed to responsible AI practices. Anthropic Privacy Policy
- Google (Gemini) - Subject to Google's data practices. Google Privacy Policy
- xAI (Grok) - See xAI's privacy documentation
- Mistral AI - European AI company with GDPR compliance
- Perplexity AI - See Perplexity's privacy policy
5. Data Retention
We retain your data as follows:
- Account data: Until you delete your account
- Conversations: Until you delete them or your account
- Usage logs: Up to 90 days for security purposes
- Analytics data: Aggregated and anonymized indefinitely
6. Your Rights (GDPR/CCPA)
Depending on your location, you have the following rights:
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Export your data in a machine-readable format
- Objection: Object to certain data processing
- Restriction: Request limited processing of your data
To exercise these rights, visit your account settings or contact us at contact@nodalum.com
7. Data Security
We implement appropriate security measures including:
- Encryption in transit (TLS/HTTPS)
- Encryption at rest for sensitive data
- Regular security audits
- Access controls and authentication
- Rate limiting and abuse prevention
8. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies: Required for the Service to function
- Authentication: To keep you logged in
- Analytics: To understand how the Service is used (Vercel Analytics)
- Preferences: To remember your settings
You can manage cookie preferences in your browser settings.
9. Children's Privacy
The Service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.
10. International Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The "Last updated" date at the top indicates when this policy was last revised.