Privacy Policy

1. Information we collect

Account and profile information

We collect information such as your name, email address, account identifier, authentication status, plan, organization or school relationship, and account preferences.

Content you provide

We process prompts, conversations, notes, uploaded documents, screenshots, images, code, workspace context, generated outputs, support messages, and feedback. Uploaded content may contain personal information about you or others.

Usage and technical information

We collect model and provider selections, token use, request counts, cost and credit records, feature interactions, error and security logs, IP address, browser and device information, and timestamps. We may use cookies or local storage for authentication, preferences, continuity, security, and essential site operation.

Payment information

Stripe processes payment-card details. Nodedistro AI receives transaction identifiers, billing status, plan, amounts, and limited customer information but does not store complete payment-card numbers.

2. How we use information

• Provide AI chat, code, file generation, image handling, web search, accounts, billing, support, and related functions.
• Route prompts and relevant context to the model provider you select.
• Authenticate users, remember settings, synchronize conversations, and restore work.
• Measure usage, enforce plan limits, process payments, and prevent fraud or abuse.
• Diagnose errors, secure the service, respond to support requests, and improve reliability.
• Comply with legal obligations and enforce our Terms.

We do not use customer prompts or uploads to train our own foundation models. Third-party model providers process content under their own contracts and policies; their training and retention practices may vary by provider and account type.

3. When information is shared

We share information only as needed with service providers and in the circumstances described below:

• AI providers: OpenAI, Anthropic, Google Gemini, locally configured models, or another provider you select receive prompts, relevant conversation history, and attached images or documents needed to answer.
• Infrastructure: Supabase supports authentication and data storage. Hosting, database, monitoring, and security providers process technical data needed to operate the service.
• Payments and email: Stripe processes purchases and billing. Brevo processes transactional emails and account notices.
• Search and media: Search services may receive search queries. Wikimedia Commons may receive slide-specific image searches when PowerPoint generation requests sourced imagery.
• Legal and safety: We may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate fraud or security incidents, or complete a corporate transaction subject to appropriate safeguards.

We do not sell personal information.

4. International processing

Our providers may process information in Canada, the United States, Europe, or other countries. Information processed outside your province or country may be subject to local laws and lawful access by authorities. We use contractual, technical, and organizational safeguards appropriate to the service and information.

5. Retention

We retain account information while your account remains active and as needed for the purposes described above. Conversations, files, and support records remain until you delete them, close your account, or they are removed under our retention practices, subject to backups and legal requirements. Billing, fraud-prevention, security, and transaction records may be retained longer where required for tax, accounting, dispute, or legal purposes. We delete or de-identify information when it is no longer reasonably needed.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted network transport, credential protection, and operational monitoring. No online service can guarantee absolute security. Protect your password and API keys, and contact Support promptly if you suspect unauthorized activity.

7. Your choices and rights

Depending on where you live, you may request access to or correction of personal information, withdraw consent where processing relies on consent, object to certain processing, request deletion or portability, or complain to a privacy regulator. Some information may need to be retained for legal, security, billing, or fraud-prevention reasons.

You can delete individual conversations within the service, manage provider keys and preferences, and unsubscribe from optional commercial messages. Transactional and security messages may still be sent. To exercise a privacy right or close an account, contact Nodedistro AI Support. We may verify your identity before completing a request.

8. Children and schools

The general service is not directed to children under 13. School-managed use may involve students and is governed by the school’s authorization, applicable agreements, and law. Schools and guardians should avoid placing unnecessary student information in prompts and should contact us before using the service for sensitive educational records.

9. AI-specific privacy

AI systems may infer information from prompts and may reproduce personal information included in submitted content. Use de-identified information where practical. Do not ask the service to identify anonymous people, make high-impact decisions about individuals, or process sensitive personal information without a lawful purpose and appropriate authorization. AI-generated statements about people may be inaccurate and must be independently verified.

10. Changes and contact

We may update this Policy as the service, providers, or legal requirements change. We will post the revised effective date and provide additional notice for material changes where appropriate. Questions, complaints, and privacy requests can be submitted through Nodedistro AI Support.