Privacy Policy for NiaKai, Inc.

Welcome to NiaKai, Inc. ("NiaKai," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit niakai.ai and use our artificial-intelligence services, websites, apps, APIs, and related features (collectively, the "Services"). By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

Information you provide: identifiers and contact information; professional data; payment and billing details processed by third-party payment processors; communications with us; user content (prompts, inputs, and files you submit); and recruiting data if you apply for a role.

Information collected automatically: device and technical data; usage data; and cookies and similar technologies used for essential operations, analytics, personalization, and, where applicable, advertising.

AI training and product improvement: we may use aggregated and de-identified data to operate, secure, and improve the Services. Where required by law or contract, we will not use Customer Data to train models in a way that targets you or recreates your data. Enterprise customers can disable model-improvement use via contract or settings; consumer users may opt out as described in Section 11.

Information from third parties: we may receive information from service providers and other third parties that support the Services (for example, sign-on, analytics, security, and payment providers) and from publicly available sources.

We use information to provide and maintain the Services; improve and develop the Services (including safety and quality); protect security and prevent abuse; communicate with you (service notices, updates, security alerts, and, where permitted, marketing); and comply with legal and contractual obligations and enforce our agreements.

We process personal data based on contract necessity, legitimate interests (for example, security and service improvement), legal obligation, and consent, which you may withdraw at any time.

We do not sell personal information. We share information with service providers and processors acting on our behalf under confidentiality and instruction-only terms; with technology partners in de-identified or aggregated form for service improvement; as part of a business transfer such as a merger or acquisition; where required for legal or safety reasons; and at your direction or with your consent.

California (CPRA): we do not sell or "share" personal information for cross-context behavioral advertising, and we honor Global Privacy Control (GPC) signals. If this changes, we will update this Policy and provide opt-out mechanisms.

We retain personal information only as long as needed for the purposes described in this Policy, then delete or de-identify it, taking into account data type and sensitivity, purpose, and legal requirements. For enterprise customers, contracted retention terms (for example, in a DPA or SOW) control.

We use essential, analytics/performance, functional, and, where applicable, advertising cookies. You can manage cookies via your browser settings and our on-site preferences tool. Where consent is required (for example, in the EEA/UK), we obtain it via our cookie banner.

The Services may contain links to third-party sites and services that are governed by their own privacy policies. We are not responsible for the practices of third parties.

We employ administrative, technical, and organizational safeguards, including encryption in transit and at rest (where appropriate), access controls, multi-factor authentication for privileged access, monitoring, and regular security assessments and training. No method of transmission or storage is 100% secure.

We operate in the United States and may transfer data to countries where we and our processors operate. For transfers from the EEA/UK/Switzerland, we use Standard Contractual Clauses, adequacy decisions, or other lawful mechanisms, with additional safeguards where appropriate.

Depending on your jurisdiction, your rights may include access, correction, deletion, restriction, objection, portability, withdrawal of consent, and (in some U.S. states) the right to appeal.

California (CCPA/CPRA): the rights to access/know, correct, delete, and limit use of sensitive personal information, and the right to non-discrimination. We do not sell or share personal information, and we honor GPC signals.

EEA/UK/Switzerland (GDPR): the rights above and the right to lodge a complaint with a supervisory authority.

Other U.S. states (for example, CO/CT/VA/UT): additional rights, including opt-outs for targeted advertising and profiling, and appeal rights.

How to exercise your rights: email privacy@niakai.ai. We may verify your identity (and an agent's authority). Enterprise customers may manage data and model-improvement controls via contract or admin settings.

The Services are not directed to children under 13 (or under 16 in the EEA/UK/Switzerland). We do not knowingly collect such data. Contact us to request deletion if you believe data was collected in error.

California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. Email privacy@niakai.ai with "Shine the Light" in the subject line.

We may update this Policy from time to time. We will post updates here, revise the Last Updated date, and, where required, provide additional notice (for example, by email or banner). Continued use after the effective date constitutes acceptance.

NiaKai, Inc. • Attn: Privacy • 548 Market Street PMB 298862 • San Francisco, CA 94104-5401 • Email: privacy@niakai.ai • Phone: 510-906-6588 • Web: www.niakai.ai. Data Protection Officer: not appointed at this time. EU/UK Representative: not appointed at this time; will be designated if required.

Please contact privacy@niakai.ai first. EEA/UK/Switzerland users may contact their supervisory authority. For U.S. users, disputes may be subject to the arbitration and venue terms in our Terms of Service.