Privacy Policy

Nodiq is built on a simple principle: your data is yours. We collect only what we need to run the service, we do not sell it, and we do not use it to train AI models.

Who We Are

Nodiq ("we", "us", "our") is an AI Expert Intelligence Platform operated by Nodiq Ltd. We provide strategic consulting through AI-powered expert analysis at nodiq.ai.

For privacy matters, contact us at: hello@nodiq.ai

Information We Collect

Account information: When you register, we collect your name, email address, and password (hashed — we never store plaintext passwords). If you sign in via Google or Apple, we receive your name and email from those providers.

Usage data: We collect the questions you submit to our AI experts, the responses generated, and metadata about your sessions (timestamps, expert matched, response time). This is necessary to provide the service.

Payment information: Billing is handled by Stripe. We do not store your credit card details — only a Stripe customer ID linked to your account.

Technical data: IP address (for abuse prevention at signup), browser type, and device information collected automatically when you use the service.

Communications: If you contact us via email or our support form, we retain those communications.

How We Use Your Information

We use your information to:

• Provide, operate, and improve the Nodiq platform
• Match your questions to the most appropriate AI expert
• Maintain your consultation history and expert memory
• Process payments and manage your subscription
• Send transactional emails (receipts, account alerts)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not use your consultation content to train AI models. We do not send marketing emails without your consent.

AI Model Providers

Nodiq routes your queries through multiple AI model providers to deliver expert responses. These providers process your query content as part of delivering the service:

• Anthropic (Claude) — primary expert reasoning
• OpenAI (GPT-4o) — deep research and benchmarking
• Google (Gemini) — tertiary research and translation
• Perplexity — real-time web research

Each provider processes data under their own privacy policies and enterprise data agreements. None of these providers use your data submitted through Nodiq to train their models under our enterprise agreements.

Data Sharing & Third Parties

We do not sell your personal data. We share data only in the following circumstances:

• AI providers — query content is shared to generate responses (see Section 04)
• Stripe — payment processing
• Supabase — database and authentication infrastructure
• Resend — transactional email delivery
• Vercel — hosting and edge infrastructure
• PostHog — anonymous usage analytics (no personal content)
• Legal requirements — if required by law, court order, or to protect our rights

Data Retention

We retain your account data and consultation history for as long as your account is active. If you delete your account:

• Your account is deactivated immediately
• Your personal data and consultation history are permanently deleted within 30 days
• Stripe retains billing records as required by financial regulations
• Anonymised, aggregated usage statistics may be retained indefinitely

Cookies & Tracking

We use cookies and similar technologies for:

• Authentication — session cookies to keep you logged in (essential)
• CSRF protection — security tokens to prevent cross-site attacks (essential)
• Analytics — PostHog collects anonymous page view and feature usage data to help us improve the product

We do not use advertising cookies or sell data to ad networks. PostHog analytics can be blocked by browser privacy settings without affecting your use of Nodiq.

Security

We implement industry-standard security measures including:

• TLS encryption for all data in transit
• Supabase Row-Level Security (RLS) — your data is isolated from other users at the database level
• Bcrypt password hashing
• CSRF protection on all authenticated API routes
• Rate limiting and abuse prevention
• No plaintext storage of passwords or payment details

For security disclosures, contact: hello@nodiq.ai

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and data (available directly in Settings → Account)
• Portability — request your consultation history in a portable format
• Objection — object to certain processing of your data

To exercise any of these rights, email hello@nodiq.ai. We will respond within 30 days.

International Transfers

Nodiq operates globally. Your data may be processed in countries where our service providers operate, including the United States, European Union, and Australia. We ensure appropriate safeguards are in place for international data transfers in accordance with applicable law.

Children's Privacy

Nodiq is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at hello@nodiq.ai and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the Nodiq platform at least 30 days before the change takes effect. Your continued use of Nodiq after the effective date constitutes acceptance of the updated policy.

Contact Us

For any privacy-related questions, requests, or concerns: