Privacy Policy

1. Who we are

Nikhil AI Labs (“Nikhil AI Labs,” “we,” “us,” or “our”) provides AI copilots for operational excellence, quality, and continuous improvement — including the Investigation Intelligence Workbench, A3 Coach, Kaizen Event Copilot, Flow Intelligence, DMAIC Intelligence, and Standard Work & TWI Intelligence (together, the “Services”). This policy explains what personal and business information we handle when you visit our website or use the Services, and the choices you have. By using our website or Services, you agree to this policy.

2. Information we collect

Information you provide

• Account information — your name and email address, provided when you sign in through our authentication provider.
• Billing information — your name, billing address, and the payment card you use to subscribe. Card details are entered directly with our payment processor; we do not receive or store full card numbers. We retain a subscription record, the last four digits, and invoice history.
• Content you enter into the Services — the process, investigation, and improvement data you create (e.g., process steps, cycle times, key points, reasons, notes, uploaded documents and photos, and other inputs). This may include information about your organization and its operations.
• Communications — messages you send us (for example, by email).

Information collected automatically

• Usage & device data — pages viewed, actions taken, approximate location, browser and device type, and similar analytics data.
• Cookies & similar technologies — used for authentication (keeping you signed in) and website analytics. See “Cookies & analytics” below.

3. How we use your information

• Provide, operate, secure, and maintain the website and Services.
• Authenticate you and control access to the copilots you are entitled to use.
• Process subscriptions, payments, trials, and billing, and prevent fraud.
• Generate the AI-assisted analysis you request — which requires sending the relevant content you submit to our AI provider for processing (see “AI processing”).
• Provide support and respond to your requests.
• Understand usage, diagnose problems, and improve the Services.
• Send you service-related communications (e.g., account, billing, or security notices).
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use the content you enter into the Services to train third-party AI models.

4. Parties we disclose information to, and how

We share information only as needed to run the Services, and only with the categories of recipients below. Disclosure to these service providers (“sub-processors”) happens electronically over encrypted connections (HTTPS/TLS), through their secure APIs, and only to the extent needed to perform their function on our behalf. They are contractually bound to protect the information and use it only to provide their services to us.

Recipient	Purpose	Method of disclosure
Clerk	Sign-in and identity/authentication	Encrypted API (HTTPS/TLS)
Stripe	Subscription and payment processing	Card entered directly with Stripe; encrypted API + webhooks
Anthropic (Claude)	AI processing of the content you submit for analysis	Encrypted API (HTTPS/TLS)
Vercel & Railway	Application hosting and databases for the Services	Encrypted transmission and at-rest storage
Netlify	Hosting of this website	Encrypted transmission (HTTPS/TLS)
Cloudflare R2	Secure storage of files/photos you upload	Encrypted API; private, access-controlled storage
Google Analytics	Website usage analytics	Cookies / measurement scripts
YouTube (Google)	Hosting/playback of embedded videos	Embedded player loaded only when you click play; may set cookies on playback

We may also disclose information: (a) to comply with applicable law, regulation, legal process, or a lawful government request; (b) to protect the rights, property, or safety of Nikhil AI Labs, our users, or others; and (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy.

5. AI processing

Our copilots use a third-party large-language-model provider (Anthropic) to generate suggestions, classifications, drafts, and analyses. When you request an AI feature, the relevant content you submit is transmitted securely to that provider solely to return the result to you. AI outputs are advisory and human-confirmed; you remain responsible for reviewing and approving them. We do not permit the content you submit to be used to train the provider’s models.

6. Cookies & analytics

We use strictly necessary cookies to keep you signed in and secure your session, and analytics cookies (Google Analytics) to understand how the website is used. You can control cookies through your browser settings; disabling necessary cookies may prevent you from signing in.

7. How we safeguard your information (security)

We take reasonable and appropriate technical and organizational measures to protect your information, including:

• Encryption in transit — all traffic to our website and Services uses HTTPS/TLS; data exchanged with our sub-processors is encrypted.
• Access controls & isolation — your project data is scoped to your account; access is authenticated and authorization is enforced on every request. Uploaded files are kept in private, access-controlled storage (not publicly accessible) and served only to the authorized owner.
• Reputable infrastructure — we rely on established providers (listed above) that maintain their own security programs and encryption at rest.
• Least-privilege & secret management — credentials and API keys are stored as protected environment secrets, not in code, and access is limited to what each service needs.
• Payment data minimization — full card numbers are handled by our PCI-compliant payment processor; we never store them.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

8. Data retention

We retain account and content data for as long as your account is active or as needed to provide the Services, and thereafter as required to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. You can request deletion of your account and associated data as described below.

9. Your rights & choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information, object to or restrict certain processing, and withdraw consent. You can update much of your information in-product, or contact us to exercise these rights. We will respond consistent with applicable law. You can also cancel your subscription at any time from your account’s billing portal.

10. International transfers

We and our sub-processors may process and store information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

11. Children

Our website and Services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children.

12. Third-party links

Our website may link to third-party sites (for example, LinkedIn). We are not responsible for their privacy practices; please review their policies.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the website or Services after an update constitutes acceptance of the revised policy.

14. Contact us

Questions about this policy or your information? Contact us at palnikhil06@gmail.com.