Legal
Privacy Policy
Effective Date: October 30, 2026·Last Updated: October 30, 2026
1. Introduction
Welcome to Nektur AI.
Nektur AI, LLC ("Nektur AI," "Nektur," "we," "us," or "our") is a privacy technology company providing an artificial intelligence-powered platform designed to help organizations discover data collection activities, manage consent, administer privacy requests, generate privacy documentation, and monitor evolving privacy legislation.
We believe privacy management should be transparent, accessible, and intelligently automated. Protecting personal information and respecting individual privacy rights are fundamental principles guiding the development and operation of our platform.
This Privacy Policy describes how Nektur AI, LLC collects, uses, processes, discloses, retains, and protects personal information when individuals interact with our websites, applications, products, and services (collectively, the "Services").
Our Services include:
- Data Source Tracking and Website Scanning
- Consent Management Platform
- Data Subject Access Management
- Privacy Policy Generation
- Legislative Intelligence and Regulatory Tracking
- Nek AI Assistant
- Customer Account and Subscription Management
This Privacy Policy applies to visitors to our websites, prospective customers, registered users, authorized customer representatives, and individuals who communicate directly with Nektur AI.
Our Role in Processing Personal Information
Depending on the circumstances, Nektur AI may act as either a data controller/business or a data processor/service provider.
As a Data Controller or Business. Nektur AI determines the purposes and means of processing personal information collected directly through its websites, account registration processes, billing activities, marketing communications, and business operations.
As a Data Processor or Service Provider. When customers use Nektur AI to manage personal information relating to their own website visitors, customers, employees, or other individuals, Nektur AI generally processes that information on behalf of the customer.
In these circumstances, the customer determines the purposes and means of processing, and Nektur AI processes information according to applicable contractual agreements, customer instructions, and data protection requirements.
Such processing may be governed by a Data Processing Agreement ("DPA") between Nektur AI and the customer.
Individuals seeking to exercise privacy rights relating to information controlled by a Nektur AI customer should generally contact that organization directly.
2. Information We Collect
The categories of personal information we collect depend on how individuals interact with Nektur AI and which Services they use.
2.1 Account and Registration Information
When individuals register for or use our Services, we may collect:
- First and last name
- Email address
- Organization or business name
- Business contact information
- Account identifiers
- Authentication information
- Account preferences
- User roles and permissions
- Subscription information
- Account activity and status
We use this information to create accounts, authenticate users, administer subscriptions, provide access to Services, and communicate with customers.
2.2 Billing and Payment Information
When customers purchase subscriptions or additional services, we may collect or receive:
- Billing name
- Billing address
- Organization information
- Subscription details
- Payment status
- Transaction identifiers
- Invoice history
- Limited payment method information
Nektur AI uses Stripe to support payment processing and subscription billing.
Stripe may collect and process additional payment information directly in accordance with its own privacy policy and applicable contractual obligations.
Where payments are processed through Stripe's hosted payment services, Nektur AI does not directly collect or store complete payment card numbers.
2.3 Website and Technical Information
When individuals access our websites or applications, we may automatically collect:
- Internet Protocol (IP) addresses
- Browser types and versions
- Device information
- Operating system information
- Referring URLs
- Pages visited
- Dates and times of access
- Session identifiers
- Application interactions
- Error and diagnostic information
- Authentication activity
- Security-related events
We use this information to operate and maintain our Services, troubleshoot technical problems, monitor performance, prevent unauthorized access, and improve platform reliability.
2.4 Customer-Provided Information
Customers may submit information through the Nektur AI platform, including:
- Website URLs and domains
- Website scanning configurations
- Data collection inventories
- Cookie and tracking technology information
- Consent management settings
- Privacy requests
- Organizational privacy documentation
- Regulatory tracking preferences
- Support requests
- AI prompts and related inputs
- Other information necessary to operate the Services
Customers are responsible for ensuring they have the appropriate authority and legal basis to submit information for processing.
2.5 Communications and Support Information
When individuals contact Nektur AI, we may collect:
- Name
- Email address
- Organization information
- Communication content
- Support ticket information
- Technical troubleshooting details
- Feedback
- Feature requests
We use this information to respond to inquiries, resolve technical issues, provide customer support, and improve our Services.
3. How We Use Personal Information
Nektur AI processes personal information for the following purposes.
3.1 Service Delivery
To provide, operate, maintain, and administer our Services.
3.2 Account Management
To register users, authenticate access, manage permissions, maintain subscriptions, and administer customer accounts.
3.3 Security and Fraud Prevention
To detect suspicious activity, prevent unauthorized access, investigate potential security incidents, and protect our systems and customers.
3.4 Customer Support
To respond to inquiries, troubleshoot technical issues, and provide assistance.
3.5 Billing and Subscription Management
To process payments, maintain subscription records, administer invoices, and fulfill financial obligations.
3.6 Artificial Intelligence Functionality
To process authorized inputs and generate AI-assisted analyses, recommendations, summaries, classifications, documents, and contextual responses.
3.7 Product Improvement
To analyze service performance, identify technical problems, improve functionality, and enhance user experience.
3.8 Legal and Regulatory Compliance
To comply with applicable laws, respond to lawful requests, enforce contractual obligations, and protect our legal rights.
3.9 Communications
To provide service announcements, security notifications, administrative information, and, where permitted by law, marketing communications.
Individuals may unsubscribe from nonessential marketing communications through the mechanisms provided in applicable messages.
4. Artificial Intelligence and OpenAI API Processing
Artificial intelligence is an integral component of the Nektur AI platform.
Nektur AI, LLC uses the OpenAI Application Programming Interface (API) to provide AI-powered capabilities across supported features.
These capabilities may include:
- Website scanning analysis
- Data source identification and categorization
- Consent management recommendations
- Privacy request interpretation
- Privacy policy generation
- Legislative and regulatory analysis
- Nek AI Assistant
4.1 Information Processed by AI
When customers use AI-powered functionality, relevant information may be transmitted to OpenAI's API infrastructure to generate the requested results.
Depending on the feature, information may include:
- Website scanning findings
- Cookie and tracking technology information
- Privacy configuration details
- Data subject request information
- Organizational privacy documentation
- Legislative information
- User-submitted questions and prompts
- Relevant contextual information
The information processed depends on the requested functionality and available platform integrations.
4.2 AI Model Training and Customer Data
OpenAI does not use inputs or outputs submitted through its API to train or improve its models by default, unless the API customer explicitly opts into data sharing for model improvement.
Nektur AI uses the OpenAI API to deliver AI-powered platform functionality.
The use of OpenAI's API does not, by itself, authorize customer information to be used for general-purpose AI model training.
Nektur AI's own handling of customer information remains subject to its applicable agreements, privacy commitments, and operational configurations.
4.3 Data Retention by OpenAI
OpenAI may temporarily retain API inputs, outputs, and associated information for abuse monitoring, security, and operational purposes.
Under OpenAI's standard API data retention practices, abuse monitoring information is generally retained for up to 30 days, subject to applicable exceptions.
Certain API capabilities, application configurations, or storage features may have different retention characteristics.
Nektur AI's use of the OpenAI API is subject to the applicable provider terms, data processing arrangements, and configured retention controls.
OpenAI's retention practices are separate from Nektur AI's own retention of customer information within its platform.
4.4 Data Minimization
Nektur AI seeks to limit personal information transmitted to AI services to the information reasonably necessary to provide the requested functionality.
Customers should avoid submitting unnecessary sensitive personal information, confidential information, or regulated data into AI-enabled functionality unless the applicable service configuration and contractual arrangements expressly support such processing.
4.5 AI-Generated Content
Artificial intelligence-generated results may include:
- Technical findings
- Privacy risk indicators
- Regulatory summaries
- Recommendations
- Draft privacy documentation
- Request classifications
- Contextual explanations
AI-generated information may be incomplete, inaccurate, or outdated.
Customers are responsible for appropriately reviewing AI-generated outputs before using them for legal, regulatory, operational, or other consequential decisions.
Nektur AI does not provide legal advice through its AI functionality and does not guarantee that AI-generated outputs establish compliance with any specific law or regulation.
4.6 Automated Decision-Making
Nektur AI's AI-powered features are designed to support human analysis, understanding, and decision-making.
The platform is not intended to independently make legally significant decisions about individuals solely through automated processing without appropriate authorization and safeguards.
Where applicable law provides rights relating to automated decision-making, individuals may exercise those rights as described in this Privacy Policy.
5. Customer Data and Data Processing Responsibilities
Nektur AI provides tools that enable organizations to manage their privacy operations.
Customers may use the Services to process personal information relating to their own website visitors, customers, employees, or other individuals.
When acting as a processor or service provider, Nektur AI processes customer-controlled information for the purposes of delivering the contracted Services.
In these circumstances:
- Customers generally determine the purposes and means of processing.
- Customers are responsible for establishing appropriate legal bases.
- Customers are responsible for providing required privacy notices.
- Customers are responsible for obtaining applicable consent.
- Customers are responsible for responding to privacy rights requests.
- Nektur AI processes customer-controlled information according to applicable agreements and authorized instructions.
Nektur AI may provide technical functionality that assists customers in meeting privacy-related obligations.
However, use of the platform does not automatically establish legal or regulatory compliance.
Customer-controlled information remains subject to applicable contractual restrictions, data protection requirements, and customer-defined processing instructions.
6. Data Source Tracking and Website Scanning
Nektur AI provides website scanning and data source discovery capabilities.
When customers submit websites for authorized analysis, our scanning technology may collect and analyze:
- Website URLs
- Publicly accessible website content
- Cookies
- Browser storage information
- Tracking pixels
- Third-party scripts
- Network requests
- Website metadata
- Tracking technology classifications
- Privacy-related configurations
- Security-related technical observations
Nektur AI may use automated browser technology, including Browserless, to inspect website behavior.
Information collected through scanning is used to provide customers with visibility into technologies operating on their websites and potential privacy considerations.
Website scans may incidentally encounter personal information exposed through website content, scripts, browser storage, or technical responses.
Customers must ensure that they are authorized to submit websites for scanning.
Nektur AI processes scanning information according to applicable customer agreements and service configurations.
7. Consent Management Platform
Nektur AI provides consent management functionality that allows customers to configure and administer consent experiences on their websites.
Depending on the customer's configuration, the platform may process:
- Consent preferences
- Consent categories
- Consent status
- Consent timestamps
- Consent-related identifiers
- Browser and device information
- Applicable geographic or jurisdictional information
- Consent configuration details
This information may be used to record and apply consent preferences, support customer-configured consent experiences, and assist with consent management workflows.
Customers are responsible for determining the appropriate consent requirements applicable to their websites and digital services.
When Nektur AI consent technology operates on a customer's website, the customer's own privacy policy should disclose the relevant collection and processing of personal information.
8. Data Subject Access Management
Nektur AI provides functionality that assists customers with receiving, organizing, tracking, and managing privacy rights requests.
Depending on the request and customer configuration, information may include:
- Requester name
- Contact information
- Request type
- Information submitted with a request
- Identity verification information
- Request status
- Supporting documentation
- Request history
- Communications relating to the request
Customers are responsible for determining the validity of requests, performing appropriate identity verification, and fulfilling applicable legal obligations.
Nektur AI processes this information to provide customer-directed request management functionality.
Nektur AI may also provide AI-assisted tools to help users interpret request information and understand potential next steps.
AI-assisted functionality does not replace customer responsibility for reviewing and responding to privacy rights requests.
9. Privacy Policy Generation
Nektur AI provides AI-assisted privacy documentation capabilities.
Customers may use these features to generate or refine privacy policies and related documentation using information such as:
- Organizational information
- Website technologies
- Data collection practices
- Consent configurations
- Regulatory considerations
- Customer-provided documentation
Information submitted through these features may be processed through the OpenAI API to generate requested content.
Generated documentation is intended to assist customers in preparing privacy-related materials.
Customers remain responsible for ensuring that generated documentation accurately reflects their actual practices and satisfies applicable legal requirements.
Nektur AI does not guarantee that generated documents are legally sufficient or appropriate for every organization or jurisdiction.
10. Legislative Intelligence and Regulatory Tracking
Nektur AI provides tools designed to help customers monitor and understand privacy-related legislative and regulatory developments.
The platform may collect and process publicly available information from governmental and authorized legislative information sources.
This information may include:
- Proposed legislation
- Pending legislation
- Enacted laws
- Legislative amendments
- Regulatory developments
- Jurisdictional information
- Legislative status information
- Public legislative documents
Nektur AI may use AI-assisted analysis to summarize legislative developments, interpret regulatory language, and identify potential considerations for organizations.
Legislative intelligence is provided for informational purposes.
Customers are responsible for independently assessing the legal requirements applicable to their organizations.
Nektur AI does not guarantee that legislative information is exhaustive, current in every jurisdiction, or a substitute for professional legal advice.
11. Nek AI Assistant
Nek AI Assistant is an AI-powered feature designed to help users understand information and functionality available through the Nektur AI platform.
Depending on supported functionality, Nek may assist with:
- Explaining website scan findings
- Understanding consent management concepts
- Interpreting privacy request information
- Reviewing privacy documentation
- Explaining legislative developments
- Providing contextual platform guidance
When users interact with Nek AI Assistant, submitted prompts and relevant contextual information may be processed through the OpenAI API.
Users should avoid submitting personal information that is unnecessary for the requested assistance.
Nek AI Assistant may generate inaccurate or incomplete responses.
Users should review recommendations before taking consequential actions.
Nek AI Assistant is not a substitute for professional legal advice or independent compliance assessments.
14. Data Security
Nektur AI recognizes the importance of maintaining the confidentiality, integrity, and availability of information entrusted to the platform.
We implement administrative, technical, and organizational safeguards designed to reduce the risk of unauthorized access, disclosure, modification, loss, or destruction of information.
Depending on the applicable systems and configurations, security measures may include:
- Authentication and access controls
- Role-based permissions
- Encryption of information in transit
- Encryption of stored information
- Security logging and monitoring
- Vulnerability management
- Security testing
- Secure application development practices
- Incident response procedures
- Vendor security assessments
- Access restrictions
- Account security controls
No method of electronic transmission or storage is completely secure.
Although Nektur AI takes reasonable steps to safeguard information, we cannot guarantee that unauthorized access, disclosure, or other security incidents will never occur.
Customers are responsible for protecting their account credentials and appropriately managing access to their organizations' accounts.
15. Data Retention
Nektur AI retains personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, and enforce agreements.
Retention periods depend on the type of information, the purpose of processing, applicable customer agreements, service configurations, and legal requirements.
Account Information
Generally retained while an account remains active and for an appropriate period following account closure.
Billing Information
Retained as necessary to satisfy applicable accounting, tax, financial, and legal obligations.
Customer-Controlled Information
Retained according to applicable service configurations, customer agreements, and documented deletion procedures.
Website Scan Information
Retained as necessary to provide scan results, historical comparisons, reporting, and related customer functionality.
AI Processing Information
Information submitted to the OpenAI API may be subject to OpenAI's applicable data retention policies and API configurations.
OpenAI's standard API abuse monitoring retention is generally up to 30 days, subject to applicable exceptions.
Information retained within Nektur AI's own systems is governed by Nektur AI's applicable retention practices.
Security and Technical Logs
Retained for periods reasonably necessary to support monitoring, troubleshooting, investigations, and legal obligations.
Support Communications
Retained as necessary for customer support, operational continuity, and legitimate business purposes.
When information is no longer required, Nektur AI takes appropriate steps to delete, anonymize, or otherwise dispose of it.
Certain information may remain in backups for a limited period until removed through established backup retention processes.
16. International Data Transfers
Nektur AI may use service providers and infrastructure that process information in the United States or other jurisdictions.
As a result, personal information may be transferred to or processed outside the jurisdiction where it was originally collected.
When applicable data protection laws require additional safeguards for international transfers, Nektur AI will implement appropriate protections.
These may include recognized contractual mechanisms, applicable adequacy arrangements, or other legally permitted transfer mechanisms.
Privacy and data protection laws may differ among jurisdictions.
17. Your Privacy Rights
Depending on your location and applicable privacy laws, you may have certain rights regarding your personal information.
These rights may include:
Right to Access
Request information about personal information we process and, where applicable, obtain a copy.
Right to Correction
Request correction of inaccurate personal information.
Right to Deletion
Request deletion of personal information, subject to applicable exceptions.
Right to Data Portability
Request certain personal information in a portable format where required by law.
Right to Restrict Processing
Request restrictions on certain processing activities where applicable.
Right to Object
Object to certain processing activities where applicable law provides this right.
Right to Withdraw Consent
Withdraw previously provided consent where processing relies on consent.
Right to Opt Out
Opt out of qualifying sales, sharing, targeted advertising, or other processing activities where applicable law provides this right.
Rights Related to Automated Decision-Making
Exercise applicable rights concerning qualifying automated decision-making activities.
Nektur AI will not unlawfully discriminate against individuals for exercising applicable privacy rights.
Certain requests may be subject to identity verification, statutory exceptions, or other legal limitations.
Exercising Your Rights
To submit a privacy request concerning information controlled by Nektur AI, contact:
Email: privacy@nektur.ai
Website: https://nektur.ai
We may request information reasonably necessary to verify your identity and process your request.
We will respond within applicable legal timeframes.
When information is processed on behalf of a customer, individuals should generally submit requests directly to the organization responsible for that information.
Nektur AI may assist customers with valid privacy requests according to applicable agreements and legal obligations.
18. Additional Information for California Residents
California residents may have additional privacy rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), where applicable.
These rights may include:
- The right to know what categories of personal information are collected.
- The right to request access to specific personal information.
- The right to request deletion.
- The right to request correction.
- The right to know applicable categories of sources, purposes, and recipients.
- The right to opt out of qualifying sales or sharing.
- The right to limit certain uses of sensitive personal information, where applicable.
- The right to non-discriminatory treatment for exercising applicable privacy rights.
Depending on the interaction, categories of personal information collected by Nektur AI may include:
- Identifiers
- Commercial information
- Internet or network activity information
- Professional or employment-related information
- Customer-provided information
- Other information necessary to provide the Services
Sources may include individuals directly, customer organizations, website interactions, and service providers.
The purposes of collection and categories of recipients are described throughout this Privacy Policy.
Retention practices are described in Section 15.
Nektur AI does not knowingly sell personal information belonging to individuals under 16 years of age.
California residents may submit applicable privacy requests through:
Where required, Nektur AI will provide additional California-specific disclosures, notices at collection, and applicable opt-out mechanisms.
19. Additional Information for European Economic Area and United Kingdom Residents
Where the European Union General Data Protection Regulation ("GDPR"), United Kingdom GDPR, or related data protection legislation applies, Nektur AI processes personal information according to an appropriate lawful basis.
Depending on the circumstances, these bases may include:
Performance of a Contract
Processing necessary to provide the Services, administer accounts, and fulfill contractual obligations.
Legitimate Interests
Processing necessary for legitimate business purposes, including maintaining platform security, preventing fraud, improving reliability, and managing business operations, provided those interests are not overridden by applicable individual rights.
Consent
Processing based on an individual's consent where required by applicable law.
Legal Obligations
Processing necessary to comply with applicable legal and regulatory requirements.
Individuals may have additional rights under applicable data protection legislation, including the right to lodge a complaint with a competent supervisory authority.
Where required, Nektur AI will provide additional information concerning applicable data protection representatives, international transfer safeguards, and other jurisdiction-specific disclosures.
20. Children's Privacy
Nektur AI is designed for business customers and professional users.
Our Services are not directed toward children under the age of 16.
We do not knowingly collect personal information directly from children under 16 through our own account registration or marketing activities.
If we become aware that personal information has been collected from a child in violation of applicable law, we will take appropriate steps to address the information.
Information processed on behalf of customers remains subject to applicable customer agreements and processing instructions.
21. Third-Party Websites and Services
Our websites and applications may contain links to third-party websites, services, or resources.
These third parties may operate independently and maintain their own privacy practices.
Nektur AI is not responsible for the privacy practices of third-party websites or services that we do not control.
We encourage users to review the privacy notices of third parties before submitting personal information.
22. Changes to This Privacy Policy
Nektur AI may update this Privacy Policy periodically to reflect changes in our Services, technologies, business operations, data processing activities, or applicable legal requirements.
When changes occur, we will update the "Last Updated" date at the beginning of this Privacy Policy.
Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.
We encourage individuals to review this Privacy Policy periodically.
23. Contact Information
For questions concerning this Privacy Policy, our privacy practices, or the processing of personal information, please contact:
Nektur AI, LLC
Privacy Office
Email: privacy@nektur.ai
Website: https://nektur.ai
Business Mailing Address: [Insert registered business mailing address]
Nektur AI, LLC is committed to addressing legitimate privacy inquiries and requests in accordance with applicable data protection requirements.