Before you may create an account or register for the Services, you must check an unchecked-by-default checkbox confirming: "I have read, understand, and agree to the Nous Sapient Privacy Policy." The registration or subscription button will remain disabled until this checkbox is checked. By checking this box, you acknowledge that you have read this Privacy Policy in its entirety and consent to the data practices described herein.

If payment or subscription activation occurs at a step separate from registration, you will be presented with a second consent checkpoint: "By completing this purchase, I confirm that I have read and agree to the Privacy Policy and Terms of Use." This consent is required before the transaction is processed.

Each consent event is logged in an immutable audit record containing: your user identifier, the timestamp of consent, your IP address, user agent string, the specific version number of this Privacy Policy you accepted, and the type of consent event (registration, checkout, or re-consent). These records are retained for the duration of your relationship with Nous Sapient plus seven (7) years.

When we make material changes to this Privacy Policy, we will:

• Notify you via email at the address associated with your account, with a plain-language summary of the changes.
• Present a consent banner or modal upon your next login requiring you to re-acknowledge the updated policy before continuing to use the Services.
• Provide you the option to delete your account and all associated data if you do not agree to the updated policy.

If you do not agree to this Privacy Policy, you must not register, subscribe, or use the Services. If you previously consented but no longer agree, you may request deletion of your account and personal data at any time by contacting privacy@noussapient.com.

• Account Information: Your name, email address, username or account identifier, password (stored exclusively in cryptographically hashed form), organization affiliation (if applicable), and subscription tier and account preferences.
• Payment Information: Payments are processed exclusively through PCI-DSS-compliant third-party payment processors. Nous Sapient does not store, process, or have access to full payment card numbers. We receive only limited billing details — billing address, last four digits of your payment method, payment status, and transaction identifiers.
• Inputs and Outputs: The Services may allow you to submit prompts, text, annotations, documents, reflections, or other content ("Inputs"). The Services may generate structured responses, analyses, or summaries ("Outputs"). We process Inputs and Outputs solely to provide the Services you have requested.
• Communications and Support: If you contact us via email, web forms, support channels, or community spaces, we collect your contact details and the contents of your messages, including feedback, suggestions, and inquiries.

• Device and Browser Information: Device type, operating system, browser type and version, IP address (which may be truncated or anonymized), ISP, language settings, screen resolution, and related technical identifiers.
• Usage Information: Pages visited, features used, actions taken, session duration, timestamps, referral URLs, click patterns, and general usage analytics.
• Log and Diagnostics: Event logs, crash logs, error reports, performance metrics, and diagnostic data to maintain and improve the reliability and security of the Services.
• Cookies and Similar Technologies: We and our authorized service providers may use cookies, SDKs, pixels, web beacons, and similar tracking technologies for authentication, preferences, performance improvement, and usage analytics. You can manage cookies via your browser settings or our cookie preference center. We honor Global Privacy Control (GPC) signals and Universal Opt-Out Mechanisms (UOOMs) as required by applicable law.

• Payment processors: payment confirmation, transaction metadata, and fraud screening results.
• Security and fraud-prevention services: threat intelligence and risk scoring.
• Analytics providers: aggregated usage and performance data.
• Marketing partners: contact information and campaign attribution data (only where permitted by applicable law and where appropriate consent has been obtained).

• Create and manage your account; authenticate users and maintain secure sessions.
• Deliver subscription benefits and program access.
• Provide customer support and respond to your inquiries.
• Process payments and administer subscriptions.
• Personalize your experience within the Services based on your preferences and usage patterns.

• Debugging, error correction, and performance optimization.
• Feature development and service quality evaluation.
• Research and development to improve our systems, algorithms, and user experience.
• Security testing and vulnerability assessment.

The Services may use automated processing, including AI and algorithmic analysis, to generate Outputs, provide recommendations, and enhance your experience. Nous Sapient is committed to transparency:

• We do not use automated decision-making technology (ADMT) to make decisions that produce legal or similarly significant effects without meaningful human oversight.
• If we implement ADMT for decisions with significant effects in the future, we will provide advance notice before such processing occurs.
• You will have the right to opt out, receive information about the logic involved, and request human review of contested results.
• Where applicable under Minnesota law (MCDPA), you may access data used in profiling decisions, correct inaccuracies, and request reevaluation based on corrected data.

We may use your contact information for administrative and transactional notices, customer support, service updates, subscription and billing notifications, and marketing communications only where you have provided affirmative consent or where permitted by applicable law. You may opt out of marketing communications at any time via the unsubscribe link in every marketing email or by contacting privacy@noussapient.com.

• Prevent fraud, abuse, and unauthorized use of the Services.
• Enforce our Terms of Use and Acceptable Use Policy.
• Protect the Services, our users, and third parties from harm.
• Comply with legal obligations, regulations, and lawful requests.
• Exercise or defend legal claims; conduct privacy risk assessments and DPIAs as required by applicable law.

• Cloud hosting and infrastructure providers (for data storage and application delivery).
• Payment processing services (for transaction processing and billing).
• Customer support and communication tools (for help desk and ticket management).
• Security monitoring and fraud prevention services (for threat detection and access controls).
• Analytics and performance monitoring services (for usage analysis and service optimization).

All service providers are bound by written data processing agreements that restrict their use of personal data solely to providing services to Nous Sapient and prohibit them from selling, sharing, or using your personal data for their own commercial purposes.

If Nous Sapient is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of business assets, personal data may be disclosed as part of that transaction. We will provide notice to affected users and, where required, obtain consent before any such transfer.

We may disclose personal data if we reasonably believe disclosure is necessary to comply with applicable law, regulation, subpoena, or court order; respond to lawful governmental or regulatory requests; investigate or prevent fraud, abuse, or security threats; or protect the rights, property, and safety of Nous Sapient, our users, or the public.

We may disclose personal data when you explicitly direct us to do so or when you provide affirmative consent for a specific disclosure.

Nous Sapient does not currently offer financial incentive programs (such as discounts, rewards, or loyalty points) in exchange for the collection, retention, sale, or sharing of your personal data. If we introduce such programs in the future, we will provide a separate notice describing the material terms, categories of personal data involved, and your right to opt in voluntarily and withdraw at any time without penalty.

• Email: privacy@noussapient.com with the subject line "Privacy Rights Request."
• Account Settings: Use the privacy controls in your account dashboard (where available).
• Mail: Raanan Group, LLC, Dallas, Texas, United States.

We will acknowledge receipt of your request within ten (10) business days. We will provide a substantive response within forty-five (45) calendar days of receiving your verifiable request. If we reasonably require additional time, we will notify you and may extend the response period by one additional forty-five (45) calendar day period, for a maximum total of ninety (90) calendar days.

If we deny your privacy rights request, you may appeal by contacting privacy@noussapient.com with the subject line "Privacy Rights Appeal" within sixty (60) days of receiving our denial. We will respond within forty-five (45) calendar days. If your appeal is denied, our response will include the reason, any further steps available, and your right to contact the Attorney General or applicable regulatory authority in your state to file a complaint.

You may designate an authorized agent to submit a privacy rights request on your behalf. We may require a signed written authorization or valid power of attorney, independent verification of your identity, and verification of the agent's identity and authority. Authorized agents may submit requests to privacy@noussapient.com.

Before fulfilling a rights request, we may ask you to verify your identity through confirming information associated with your account, responding to a verification email, or other reasonable verification methods proportionate to the sensitivity of the data involved. We will not collect more personal information than reasonably necessary to verify your identity.

• Right to know categories and specific pieces of personal information collected in the preceding 12 months, the categories of sources, the business or commercial purposes, and the categories of third parties with whom personal information is shared.
• Right to request deletion, correction, and data portability.
• Right to opt out of the sale or sharing of personal information and to limit use and disclosure of sensitive personal information.
• We do not use or disclose sensitive personal information for purposes beyond those authorized under the CCPA.
• California consumers may submit verifiable consumer requests up to twice per twelve-month period.
• We honor Global Privacy Control (GPC) signals as a valid opt-out of sale/sharing under the CCPA.

Nous Sapient implements server-side detection of Global Privacy Control (GPC) browser signals in compliance with the requirements of California, Colorado, Connecticut, Maryland, Minnesota, and any other jurisdiction that mandates recognition of universal opt-out mechanisms. When a GPC signal is detected, we will automatically suppress any data sharing that could constitute a "sale" or "sharing" under applicable law, disable targeted advertising based on your personal data, and apply these preferences across your account for the duration of your session and any future sessions while the signal remains active.

You have the right to confirm whether we are processing your personal data, access your data, correct inaccuracies, delete your data, and obtain a portable copy. You may opt out of the sale of personal data, targeted advertising, and profiling that produces legal or similarly significant effects. We will respond within 45 days, with one 45-day extension if reasonably necessary.

You have rights to access, correct, delete, and obtain a portable copy of your personal data. You may opt out of targeted advertising, sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. Where required, we will conduct data protection assessments for high-risk processing activities. We will respond to requests within 45 days with one 45-day extension if reasonably necessary.

In addition to standard rights, you have the right to question the results of profiling used for decisions producing legal or similarly significant effects, including the right to: be told the reason such profiling resulted in a specific decision; access the personal data used in the profiling; correct inaccuracies in that data; and request that the profiling decision be reevaluated based on corrected data. Our Chief Privacy Officer is identified in Section 12 of this Privacy Policy, as required by the MCDPA.

We will not process your personal data for targeted advertising if you are under 18 years of age and we know or should know your age. Our data collection practices are limited to what is reasonably necessary and proportionate to the purposes for which the data is processed, as required by the MODPA.

If you reside in any of the following states, you may exercise the rights provided under your state's comprehensive privacy law by contacting privacy@noussapient.com. We will apply the standard most protective of your rights.

Nous Sapient maintains documented privacy policies and procedures designed to reasonably align with the National Institute of Standards and Technology (NIST) Privacy Framework, consistent with the affirmative defense provisions available under Tennessee's Information Protection Act.

The Services are designed exclusively for users aged eighteen (18) and older. We do not knowingly collect, solicit, maintain, or use personal data from anyone under the age of eighteen (18).

The Services are not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from children under 13 as defined by COPPA, as amended by the FTC's Final Rule effective June 23, 2025.

• We do not knowingly collect, use, or disclose personal information from children under 13.
• We do not retain any personal information from children under 13 beyond what is strictly necessary to respond to a one-time request (if applicable) and will promptly delete such information after the purpose is fulfilled.
• If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete all such information and, where appropriate, notify the child's parent or guardian.
• If any personal data from a child under 13 has been used in any automated system, model, or algorithm, we will take commercially reasonable steps to identify and remove or mitigate the use of such data.
• We maintain a written information security program that applies to any personal information of children that may be inadvertently collected, as required by the 2025 COPPA Rule.

We do not knowingly collect personal data from individuals aged 13 to 17. In compliance with applicable state laws (including New Jersey, Maryland, and others): we will not process data of individuals under 18 for targeted advertising, sale of personal data, or profiling for decisions producing legal or similarly significant effects. If we learn that a user is between 13 and 17 years of age, we will promptly delete their account and all associated personal data unless verifiable parental or guardian consent is obtained.

Parents or guardians who believe their child under 18 has provided personal data to Nous Sapient may contact us at privacy@noussapient.com to request review, access, and deletion of such data. We will respond within the timeframes described in Section 5.3.