Privacy Policy

1. Your Rights as a Data Subject

Subject to applicable law, you have the following rights regarding your personal data:

• Right to be informed — you have a right to be informed about the manner in which your personal data is collected or used, which we endeavour to do through this Policy.
• Right of access — you have a right to access the personal data you have provided by requesting a copy from us.
• Right to rectification — you have a right to request us to amend or update your personal data if it is inaccurate or incomplete.
• Right to erasure — you have a right to request us to delete your personal data.
• Right to restrict — you have a right to request us to temporarily or permanently stop processing all or some of your personal data.
• Right to object — you have a right to object to our processing of your personal data under certain circumstances, including an absolute right to object to processing for direct marketing purposes.
• Right to data portability — you have a right to request us to provide you with a copy of your personal data in electronic format so that you can transmit it for use with another service.
• Right not to be subject to automated decision-making — you have a right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects.

To exercise any of these rights, contact our Grievance Officer (see the contact section below). We will respond within 30 days.

2. Your Rights Under the California Consumer Privacy Act (CCPA)

Name.ai complies with the CCPA by providing California consumers the following rights:

• The right to know about the personal information a business collects about them and how it is used and shared.
• The right to delete personal information collected from them. Name.ai will action requests to delete your personal data upon verification.
• The right to opt-out of the sale of their personal information. Name.ai does not sell any data of any of its users, customers, or leads.
• The right to non-discrimination for exercising their CCPA rights. Name.ai will not discriminate against you for exercising any CCPA right.

Name.ai will not ask for a waiver of privacy rights from California consumers. Contact our Grievance Officer to exercise any of these rights.

3. Your Rights Under the IT (SPDI) Rules 2011

Name.ai adheres to the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"). Your rights under the SPDI Rules include:

• The right to be informed and give consent — before Name.ai collects any personal data, we will clearly explain what information we need, why we need it, and how we will use it. We will only collect your personal data with your explicit consent.
• The right to access your data — you have the right to request access to the personal information Name.ai holds about you, including the ability to review and verify its accuracy.
• The right to correct mistakes — if you find errors or missing information in your data held by Name.ai, you have the right to request corrections.
• The right to withdraw consent — you can withdraw your consent for Name.ai to process your sensitive personal data at any time by contacting [email protected].

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Contract performance (Art. 6(1)(b)) — processing necessary to fulfil marketplace transactions and provide the Services.
• Legitimate interests (Art. 6(1)(f)) — fraud prevention, security monitoring, and platform improvement.
• Consent (Art. 6(1)(a)) — analytics cookies and marketing communications.
• Legal obligation (Art. 6(1)(c)) — financial record-keeping and tax compliance.

5. AI Processing

Name.ai uses artificial intelligence to enhance the services we provide, ensuring that customer data is processed accurately, efficiently, and securely. All AI-driven data processing is performed with a strong commitment to safeguarding your privacy. We implement strict access controls, encryption, and regular audits to prevent unauthorised access to or misuse of your information. Our AI models are trained only on data necessary to deliver our services, and we adhere to industry best practices to anonymise and aggregate data wherever possible.

We do not use customer data to train external models or for any purpose beyond the agreed-upon scope of our services. Any personal data processed by our AI systems is handled in compliance with applicable data protection laws, including GDPR and CCPA where relevant.

6. Data Retention

We will store any personal data we collect from you for as long as necessary to facilitate your use of the Services and for ancillary legitimate business purposes. We may retain personal data even after account deletion if required to comply with our legal obligations, resolve disputes, or enforce our agreements.

• Account data: retained while your account is active and for up to 90 days after deletion
• Financial records: retained for up to 10 years as required by applicable law
• API and usage logs: 30 days full retention, then anonymised for up to 90 additional days
• Analytics data: up to 12 months

7. Tools Used by Our Customers

If you are a Customer, you may use proprietary or third-party technologies and integrations with the Name.ai platform. If you do, you agree and acknowledge that it is your sole obligation to inform your stakeholders about any data you collect using such technologies and the policies governing that collection.

8. Transfer of Information

In order to facilitate our operations, we may transfer and store the data we collect to our database servers, which may be located in a third country, for disaster recovery purposes. Your rights and protections will not be diluted by this transfer. In the ordinary course of business, we may engage other companies and people to assist us in providing certain components of our Services in compliance with this Policy. Where such transfers involve entities not situated in countries deemed adequate by the European Commission, we will enter into appropriate Data Protection Addendums that comprehensively protect your data, and implement industry-standard technical and organisational measures.

9. Compelled Disclosure

In addition to the purposes described in this Policy, we may disclose any data we collected or processed from you if required:

• Under applicable law, or to respond to a legal process such as a search warrant, court order, or subpoena
• To protect the safety of Name.ai, you, or others, or in the legitimate interest of any party in the context of national security, law enforcement, or criminal investigation
• In connection with legal proceedings brought against Name.ai, its officers, employees, affiliates, customers, or vendors
• To establish, exercise, protect, defend, and enforce our legal rights

10. Security

We implement industry-standard technical and organisational measures to help protect your data from unauthorised access, use, loss, destruction, or disclosure. When we collect particularly sensitive data it is encrypted using industry-standard cryptographic techniques. Our security measures include:

• AES-256 encryption of data at rest; TLS 1.2+ encryption of data in transit
• Multi-factor authentication for administrative access
• Role-based access controls and principle of least privilege
• Regular security audits, penetration testing, and vulnerability management
• Incident management and breach notification procedures
• ISO/IEC 27001:2022-aligned Information Security Management System
• Regular employee training on security and privacy practices
• Third-party sub-processor compliance with equivalent security standards

11. Grievance Officer

Our Grievance Officer / Data Protection Officer is Data Protection Officer. Contact: [email protected].

Name AI LLC, 30 N Gould St, Sheridan, WY 82801, USA.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via email or an in-app notice. If you do not agree with the updated Policy, we would advise you not to continue using the Name.ai platform.