Privacy Policy

Effective Date: November 1, 2026 · Last Updated: November 2, 2026

This Privacy Policy explains how nnaru ("nnaru", "we", "us", or "our") collects, uses, processes, and safeguards information when you visit nnaru.com or use our autonomous AI workflow and enterprise automation services (the "Services").

1. Information We Collect

Account & Waitlist Information: When you join our waitlist, request a demo, or register for an enterprise workspace, we collect your name, work email address, company name, job title, and stated use case.
Customer Workflow Data: When using our platform, we process documents, API payloads, and database records strictly as instructed by your organization ("Customer Data").
Technical & Usage Telemetry: We collect system logs, IP addresses, browser type, workflow execution latency, token usage metrics, and error diagnostics to maintain service reliability and security.

2. Enterprise AI & Zero Model Training Policy

We treat Customer Data with strict confidentiality:

No Foundation Model Training: Customer Data and prompts processed through nnaru pipelines (including via Google Cloud Vertex AI and Microsoft Azure OpenAI enterprise endpoints) are never used to train or fine-tune public foundation models.
PII Redaction & Minimization: Where configured, sensitive personally identifiable information (PII) is masked or redacted prior to inference.
Isolated Vector Storage: Customer embeddings stored in PostgreSQL / pgvector are logically and cryptographically isolated per tenant workspace.

3. How We Use Your Information

To provision, operate, monitor, and maintain the Services;
To communicate product updates, onboarding instructions, and security notices;
To detect, prevent, and investigate security incidents, fraud, or abuse;
To comply with applicable legal obligations.

4. Data Sharing & Subprocessors

We do not sell your personal information. We only share data with vetted cloud infrastructure subprocessors necessary to deliver the Services—specifically Google Cloud Platform (GCP) and Microsoft Azure—under strict Data Processing Agreements (DPAs).

5. Data Security & Retention

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. We retain Customer Data only for the duration specified in your enterprise agreement or until you request deletion.

6. Your Privacy Rights (CCPA / CPRA / GDPR)

Depending on your jurisdiction (including California residents under the CCPA/CPRA and EEA/UK residents under GDPR), you have the right to access, correct, export, or request deletion of your personal data, or opt out of certain processing. To exercise these rights, please contact our Privacy Team at contact@nnaru.com.

7. Contact Information

If you have questions about this Privacy Policy or our data protection practices, please contact us at:
Legal Entity: nnaru
Jurisdiction: State of New Jersey, United States
Email: contact@nnaru.com