Privacy Policy

1. Information we collect

We collect information you provide directly and limited technical data generated by your use of the site:

• Contact details you submit through forms (name, email, company, phone)
• Business information you share during scoping and demos
• Usage data: pages visited, approximate location (country/region), device and browser type
• Communication records: emails, call notes, and support conversations

2. How we use your information

We use personal information to respond to your inquiries, provide and improve our services, send communications you've requested (like our newsletter), and meet legal obligations. We do not sell personal information, and we do not use client business data to train AI models.

3. Client service data

When we operate AI agents for clients, we process business data (such as customer conversations and documents) strictly as a processor under our service agreements. That data is governed by the client's instructions, our data processing agreements, and enterprise API terms with our model providers that exclude training on client data.

4. Sharing and disclosure

We share personal information only with service providers who help us operate (hosting, analytics, email delivery) under contractual confidentiality obligations; when required by law; or in connection with a corporate transaction with notice to you. We never share your information with third parties for their own marketing.

5. Data retention

We retain personal information only as long as needed for the purposes described here: inquiry records for up to 24 months after our last interaction, newsletter subscriptions until you unsubscribe, and client service data per contract terms. You may request deletion at any time.

6. Security

We protect data with encryption in transit and at rest, role-based access controls, audit logging, and vendor security review. No system is perfectly secure; if a breach affects your data, we will notify you promptly as required by applicable law.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise any right, email us — we respond to all privacy requests within 30 days.

8. International transfers

We are headquartered in the United States. Where data is transferred across borders, we use recognized safeguards such as standard contractual clauses, and we support EU data residency for client deployments that require it.

9. Contact

Questions or requests: hello@nembrix.com, or write to Nembrix Technologies Inc., 600 Mission Street, Suite 400, San Francisco, CA 94105, US.