Privacy Policy

1. Who We Are

Jasnah Inc., d/b/a NEAR AI, a Delaware corporation, and its subsidiaries and affiliates (“NEAR AI,” “we,” “us,” or “our”) respect your privacy and are committed to keeping your information secure.

This Privacy Policy (“Privacy Policy” or “Policy”) explains how Jasnah Inc., d/b/a Near AI collects, uses, shares, and stores Personal Data / Personal Information about individuals (“you”, “User” or “Customer”) who interact with:

• Our websites, including www.near.ai; https://cloud.near.ai/; and https://private.near.ai;
• Our products, materials, and services provided through or on those sites (including NEAR AI Cloud, NEAR AI Private Chat, websites, consoles, APIs, SDKs, model hosting, and related services) (collectively, the “Services”); and
• Our recruitment and business engagement processes (e.g., job applications, sourcing via public profiles).

For consumer Services, Jasnah Inc. is the controller of your personal information. For enterprise tenants, Jasnah acts as a processor under a DPA, processing personal data solely on the customer’s documented instructions. If you have questions about personal data that we process on behalf of an enterprise customer, please contact that customer directly.

We are committed to handling your Personal Data in accordance with applicable privacy and data protection laws in the United States, the EU/EEA, UK, Switzerland, and other relevant jurisdictions.

Near AI may also receive Personal Data from publicly available sources (such as LinkedIn or other social media platforms) where such collection is necessary, relevant to the services or recruitment purpose, and permitted by applicable law.

This Privacy Policy describes:

• The categories of Personal Data we collect;
• The purposes for which we use your Personal Data;
• Our legal bases for processing where applicable;
• How we protect your Personal Data;
• When and how we may disclose Personal Data to third parties;
• Your rights and choices regarding your Personal Data.

We only collect and process Personal Data that is relevant, limited to what is necessary for the purposes described, and handled in accordance with this Policy. Where required by law, we will seek your consent before collecting certain categories of Personal Data.

BY ACCESSING OR USING OUR WEBSITE OR SERVICES, YOU CONSENT TO THE COLLECTION, USE, TRANSFER, DISCLOSURE, AND OTHER FORMS OF PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED IN THIS POLICY. YOU UNDERSTAND THAT PROVIDING YOUR PERSONAL INFORMATION IS VOLUNTARY, AND THAT YOU MAY WITHDRAW YOUR CONSENT AT ANY TIME, SUBJECT TO APPLICABLE LAW.

2. Scope & Audience

This Policy describes how we collect, use, store, and disclose Personal Data from individuals who interact with the Services described in Section 1, including:

• visitors to www.near.ai;
• Users of NEAR AI Private Chat at https://private-chat.near.ai/;
• users of NEAR AI Cloud at https://cloud.near.ai/, including websites, consoles, APIs, SDKs, model hosting, and related services;
• users of other Services accessible through our product interfaces (e.g., private AI chat, RAG/file upload features, billing consoles);
• candidates applying through recruitment channels linked from the Website; and
• individuals whose publicly available data (e.g., LinkedIn or other social media platforms/Google) we review as part of recruitment or business engagement, including job applicants, prospective employees, and independent contractors.

All capitalized terms not otherwise defined in this Privacy Policy have the meanings ascribed to them in our applicable Terms of Service or other agreements.

By using the Services, you accept and agree to be bound by this Privacy Policy and the applicable Terms of Service. If you do not agree, you must not access or use the Services.

The Services may contain links or connections to third-party websites, platforms, products, services, or applications that are independent of our Services. Their information practices and privacy policies may differ from ours; see Section 19 (Third-Party Links and Services) below.

3. Definitions

“Personal Data” (or “personal information”) means any information that can be linked or identified, directly or indirectly, with a natural person. Personal Data may include your name, email address, LinkedIn handle, IP address, device identifiers, or other identifiers.

“Third-Party” means any legal entity or natural person, service provider, public body, agency, or authority other than the User or NEAR AI that is legally entitled to operate with Personal Data.

“Customer Data” refers to content and data (including prompts, outputs, and files) submitted to or generated via the Services by or for a Customer or its end users, in accordance with our Terms and any DPA.

“Content” means prompts, inputs, text, images, files, documents, knowledge bases, data, and model outputs submitted to or generated via the Services by or for a Customer or its end users. Content may include Personal Data depending on what you choose to submit.

4. Information We Collect

Near AI may collect certain Personal Data directly from you, as well as from other available sources, to the extent relevant and permitted by applicable local law, including in the recruitment context and in connection with NEAR AI Cloud and NEAR AI Private Chat. The categories of Personal Data that are typically collected and processed include, but are not limited to, the following:

Our infrastructure providers may process limited network metadata (e.g., IP addresses) to deliver the service.

5. Data we collect automatically

When you use our Website, we may also use cookies or similar technologies to collect extra data, including:

• IP address – a numerical code associated with your device on the Internet (which may be used to identify the country, region, or city where you are based);
• Information on how you interact with our Website and Services;
• Details of your computer, mobile device, tablet, or other devices and browsers used to access our content;
• Device and network data, such as:

1. IP addresses, general location information (e.g., inferred from an IP address);
2. Unique device identifiers, IMEI, TCP/IP address, and other device identifiers;
3. Browser type and language, operating system, mobile device carrier information, and the state or country from which you accessed the Services.

We may also collect your approximate location based on IP address.

Do Not Track: There is no uniform or consistent standard or definition for responding to, processing, or communicating Do Not Track signals. At this time, the Services do not function differently based on a user’s Do Not Track signal. For more information on Do Not Track signals, see All About Do Not Track.

6. Analytics & Online Tracking

As of the effective date of this Policy, we do not permit third-party advertising or cross-context behavioral advertising on the Services.

We use privacy-preserving, cookie-free analytics tools (such as Cloudflare Web Analytics and similar service-provider tools) to help us measure and improve Service performance. These tools may provide aggregated insights into how our Services are used (for example, page load times, basic usage patterns, device or browser types) without using cookies or other identifiers that track users across websites.

Data collected via analytics: Depending on your device and browser settings, these analytics tools may collect limited technical information, such as:

• device and browser type;
  
• operating system;
  
• pages or screens viewed;
  
• timestamps and duration of visits;
  
• referring URLs (when provided by your browser);
  
• approximate location (e.g., country or city) derived from IP address;
  
• performance metrics (e.g., errors, load times).

This information is used solely to maintain, secure and improve the performance and reliability of the Services.

7. How We Use Personal Data We Collect

We use the personal and usage information for various purposes, including the following:

• Account & Authorization –  To provide access to and administer your account; authenticate you; manage access tokens and session information.
• Analytics – To allow us and our analytics partners (e.g., Cloudflare) to understand how users use our Services so we can measure and improve them.
• Billing & administration – To meter token usage, process payments (without storing full card numbers), manage subscriptions, reconcile billing, and provide invoicing.
• Communication – To communicate with you, including Service-related communications (purchases, payment notices, security alerts, technical notices, changes to terms or policies), feature updates and product changes and other content we think may be of interest to you, in accordance with applicable law.
• Legal compliance – To comply with applicable laws, regulations, legal processes, audit and security requirements, and to enforce our Terms and other agreements.
• Security & integrity – To detect fraud or abuse, enforce rate limits, safeguard the Services from being abused from any spam attacks or fraud, and verify Trusted Execution Environment (TEE) integrity via per-request attestation; to ensure network and information security, including preventing unauthorized access to our computer and electronic communications systems and preventing malicious software distribution; to maintain the ongoing confidentiality, integrity, availability, and resilience of the Website and Services.
• Operate and deliver the Services – To authenticate you, route requests, generate responses, (optionally) store your chat history, and otherwise provide and operate the Services you request; to operate, maintain, and improve our Websites and NEAR AI Cloud, including search/RAG and file upload features.
• Support: – To respond to questions, bug reports, or feedback you submit; provide in-product support; and, if relevant, provide feedback regarding job applications.
• Encouraging Legitimate Interests – To pursue our legitimate interests, for example research and development, marketing and promotion of our activities, protection of our legal rights and interests, regulatory or corporate governance requirements, security and service reliability (logging, threat detection, abuse prevention), measuring and improving performance and guardrails (without training foundation models on your content), running light product analytics and defending legal claims.
• Recruitment & Hiring (where applicable) – To identify and evaluate your job application(including assessing skills, qualifications, and interests for positions for which you have applied), verify your information and carry out employment, background, and reference checks (where applicable and permitted by law), communicate with you about the recruitment process and your application, keep records related to our hiring processes (for as long as appropriate) and with your consent, inform you about and consider you for other positions that may be appropriate.
• Verifying your information – verifying your information and carrying out employment, background, and reference checks, where applicable, subject to your consent where required by applicable law.
• Communicating (recruitment) – communicating with you about the recruitment process and your application.
• Keeping records – To keep records related to our hiring processes, for only as long as appropriate under the circumstances. In addition to using your Personal Data for the position for which you have applied, we may retain and use such data to inform you about and consider you for other positions that may be appropriate for you with your consent.
• Marketing purposes – To send you emails and messages about NEAR AI’s progress and development, products and services, events, and similar content, in accordance with applicable law. You can opt out of marketing communications as described in this Policy.
• Other purposes for which we seek your consent.

We will only process your Personal Data for the purposes we collected it for or for compatible purposes. If we need to process your Personal Data for an incompatible purpose, we will provide notice to you and, if required by law, seek your consent. We may process your Personal Data without your knowledge or consent only where required by applicable law or regulation.

We consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of this information, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements when determining the appropriate retention period for personal information.

We may combine the information we collect from other sources (such as your interactions with us on social media) with the other information we collect from and about you and use such combined information in accordance with this Policy. We may also de-identify information we collect so the information cannot reasonably identify you or your device, or we may collect information that is already in de-identified form. Our use and disclosure of de-identified information is not subject to any restrictions under this Privacy Policy, and we may use and disclose it to others for any purpose, without limitation.

8. Legal Bases for Collecting and Processing Personal Data 

We collect and process your Personal Data only where we have a lawful / legal basis to do so. The specific legal grounds depend on the nature of your interaction with our Website and Services, and may include the following:

• Contractual necessity / Performance of an agreement (Art. 6(1)(b)): When  it is required for the performance of an agreement to which you are a party or to take steps at your request prior to entering into such an agreement, including to set up and run your account, provide the chat service (including search/RAG and file uploads), support you, apply your settings and fulfill other contractual obligations. If you do not provide the data we need for these functions, some features may not work.
• Legal obligation (Art. 6(1)(c)): Where processing is necessary to comply with legal obligations to which we are subject, such as security and audit requirements, keeping certain records, responding to lawful requests, fulfilling data-rights requests, and other regulatory or corporate governance requirements.
• Legitimate interest (Art. 6(1)(f)): Where processing serves our legitimate interests, such as research and development, marketing and promotion of our activities, protection of our legal rights and interests, keeping the service secure and reliable (logging, threat detection, abuse prevention), measuring and improving performance and guardrails (without training foundation models on your content), running light product analytics, and defending legal claims. We balance these interests against your rights and freedoms and minimize data where possible. You can object to processing based on legitimate interests at any time (see Your Rights).
• Consent (Art. 6(1)(a)): You give us permission to collect and use your Personal Data for a specific reason. This may include optional features or communications, such as saved chat history beyond the default, personalised suggestions, voice input/transcription, or marketing emails. You can withdraw consent at any time in settings (where available) or by contacting us. Withdrawal does not affect processing that has already occurred; we will stop the relevant processing going forward.
• Special categories (Art. 9): The Services are not intended for special-category or criminal-convictions data. Please do not input such data unless it is necessary and permitted by law. If special-category data is processed, we will rely on a valid Art. 9(2) condition (e.g., explicit consent or legal claims) or delete it.

The Personal Data that we collect, use, share, and store may be mandatory in connection with our recruiting activities. Failure to provide or allow us to process mandatory Personal Data may affect our ability to accomplish the purposes stated in this Privacy Policy.

9. Processing Model (Confidential Computing).

NEAR AI Private Chat and NEAR AI Cloud: We use a confidential-computing–first design for our core model processing. Chat Content, including prompts and outputs are encrypted in transit and at rest. During inference, they are decrypted only inside an attested hardware enclave (e.g., Intel® TDX) designed to prevent access by our personnel and cloud operators. We may retain Operational Metadata (e.g., timestamps, usage volumes, IP address/user agent) for billing, abuse prevention, and compliance. We do not retain plaintext Content outside the enclave.

10. Data Retention

The following Data Retention guidelines apply however, it should be understood that Chat Content and Customer Data are encrypted and are not accessible to us outside of an attested hardware enclave.

• General Retention

We retain personal information only for as long as needed to provide and secure the Services, or as required to comply with law. When data is no longer necessary for these purposes, we delete, de-identify, or aggregate in accordance with our retention procedures, unless a particular retention period is required by law or a valid legal hold applies.

If you have an account with us, we retain your information while the account is active and as needed to perform our contractual obligations, deliver the Services, comply with legal obligations, resolve disputes, preserve legal rights, and enforce our agreements. Once no longer necessary, we will delete, de-identify, or aggregate the information to the extent possible.

• Enclave processing (Chat Content)

By default, prompts and outputs (“Chat Content”) and/or Customer Data processed inside an attested hardware enclave are not retained in plaintext outside the enclave. If you or your organization enable storage (e.g., saved chat history or RAG indexing), encrypted copies of Chat Content or Customer Data and derived artifacts may be retained according to the settings below.

• Customer controls. 

Depending on your Services plan, you may configure retention for end-user information and apply different settings to messages, files, or other types of Customer Data. Customer deletions and retention changes may result in the deletion and/or de-identification of related personal information.

• Legal holds & exceptions. 

We may preserve limited records where necessary to comply with law, legal process, or enforce our rights. Preservation lasts only as long as required and is logged.

• Retention of data that is collected automatically. 

We will only store your Personal Data on our systems for the period necessary to serve the outlined purposes or obligations by the applicable law (for example for bookkeeping or mandatory archiving purposes). The Personal Data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected and the storage period prescribed by the applicable law expires.

• Retention of Data Provided by You

In connection with recruitment, job applications, and candidate evaluation, Personal Data that you provide to us directly (for example through applications, CVs, cover letters, or interviews) will be deleted:

• up to two (2) years after collection, or sooner if the data is no longer needed to fulfill any legitimate business or legal purpose; or
• if you request the deletion of your Personal Data, subject to any legal or contractual obligations that require us to retain certain information.

Under some circumstances, we may anonymize your Personal Data so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

If you are offered and accept employment through Near AI or a partner organization, the Personal Data collected during the recruitment process may become part of your employment record and be handled in accordance with that organization’s employee data policies.

If you are not hired, or once the recruitment process concludes, we retain your Personal Data only as long as necessary for legal, administrative, or business purposes, after which it is securely deleted or anonymized in accordance with applicable laws.

11. How We Disclose / Share Personal Data We Collect via our Website

Due to our confidential-computing-first design (as detailed in Section 9), Chat Content and Customer Data are encrypted and are not retained in plaintext outside the attested hardware enclave. Therefore, Chat Content and Customer Data are not disclosed or shared with any third parties under the circumstances listed below.

For users of our Website, we may disclose your information to the following entities, in accordance with applicable legal requirements and our contracts with you or your organization:

• Affiliates – We may disclose information among our group companies or affiliates for the business purposes described in this Privacy Policy.
• Vendors / Service providers – We engage vendors / service providers to perform business purposes, as described above, on our behalf and may disclose information to them to enable them to assist us with such business purposes, including analytics, hosting, transaction and payment processing, fraud prevention and security, customer support tools , email and communications services, recruiting software and applicant tracking systems, database and archival services and other services. Service providers may use such information for their operational purposes in order to provide their services to us and to help us analyze how you and other users perform Services in order to improve the Website’s functionality. We may employ Third-Party companies and individuals to facilitate the Services and assist us in analyzing how our Website is used.
• Database services – We may share information with database providers to properly and securely retain your Personal Data.
• Analytics – As described above, we may disclose or make available some of your information to analytics partners to provide analytics services.
• Auditors, Accountants and lawyers – We may transfer your Personal Data to auditors, accountants, and lawyers in order to complete financial, technical, and legal audits, as well as for other legal requirements.
• Recruitment service providers – We may engage Third-Party service providers, such as recruitment agencies/search firms and providers of recruiting software and applicant tracking systems, with whom we contract as part of our normal business operations to carry out recruitment-related functions. We diligently select such service providers and enters into written agreements with them ensuring that such providers (i) have adopted adequate data protection and security measures to safeguard your Personal Data; (ii) only use your data as instructed by Near AI and for no other purposes; and (iii) store your Personal Data only within the terms of the agreement.
• Law Enforcement, Regulators, Anti-fraud Coalitions, Attorneys and similar organizations / Supervisory authorities – We disclose the information we collect, as appropriate, to these third parties when we have a good faith belief that such disclosure is necessary to protect and enforce the legal rights, privacy, and safety of ourselves and our users; protect against possible fraud, misuse or misappropriation of our Services, or illegal activity; respond to requests from government and other authorities; protect our intellectual property rights and the integrity of our Services, and otherwise comply with legal process. Near AI may be required to share your Personal Data with supervisory authorities, law enforcement agencies, or government officials. We will only do this if we are required to do so by law or a formal request, if it is necessary to prevent physical injury or financial loss, or if we are required to report illegal activity. For Chat Content and/or Customer Data, due to our confidential-computing-first design, we are unable to provide plaintext data to law enforcement, and can only provide metadata or encrypted artifacts.
• Business transactions – In the event that we or any affiliate is involved in a merger, acquisition, or transfer of control, bankruptcy, reorganization or sale of some or all assets, we may sell or transfer the information described in this Policy as part of that transaction or diligence associated with or in contemplation of such matters. In these circumstances, we will limit data sharing to what is absolutely necessary, and we will anonymize the data where possible.
• Other cases of sharing your data / Others with your consent – We may also disclose your Personal Data for the following additional purposes where permitted or required by applicable law:
  

1. 1. To comply with legal obligations or valid legal processes such as search warrants, subpoenas, or court orders. When we disclose your Personal Data to comply with a legal obligation or legal process, we will take reasonable steps to ensure that we only disclose the minimum Personal Data necessary for the specific purpose and circumstances;
   2. To protect the rights and property of Near AI in any claims and courts;
   3. During emergency situations or where necessary to protect the safety of persons;
   4. Where the Personal Data is publicly available;
   5. If a business transfer or change in ownership occurs, as described above;
   6. For additional purposes with your consent where such consent is required by law;
   7. We may disclose your information when we have your consent to do so.

12. Securing Your Personal Data

We implement technical and organisational measures with a confidential-computing–first design. Chat Content and Customer Data is encrypted in transit and at rest and decrypted only within an attested hardware enclave (e.g., Intel® TDX) verified via remote attestation; by default, plaintext Chat Content and Customer Data is not retained outside the enclave. We maintain layered controls for data confidentiality, integrity, and availability (e.g., modern encryption in transit and at rest, strong identity and access management with SSO/MFA/RBAC, network and application hardening, continuous monitoring and audit logging, least-privilege/time-bound access, and tested incident-response and business-continuity procedures). We strive to practise data minimisation and configurable retention, and we take steps to assess our controls through independent reviews and penetration testing. Where we use third-party service providers or model APIs, they operate under written data-processing terms (including no-training commitments where applicable) and are subject to appropriate security and privacy due diligence.

Near AI implements a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. Near AI uses appropriate physical, technical, and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure, and modification of personal information. Near AI provides security such as data encryption and physical access controls to its servers.

However, Near AI will not be liable for disclosures of your Personal Data due to errors in transmission or unauthorized acts of Third-Parties. We have undertaken commercially reasonable efforts to prevent unauthorized Internet access to visitor data retained in our servers. However, due to the inherently open nature of the Internet, Near AI cannot ensure or warrant the security of any information you provide us, and you do so at your own risk. Users must accept all risks associated with any data transmission, including the risk that their Personal Data may be intercepted in transit.

Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure.

13. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your data, and to object or restrict certain processing. 

Your local laws (including applicable laws in the EU, UK, Switzerland, and United States (California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia, and others) may permit you to request that we:

• provide access to and/or a copy of certain information we hold about you;
• update information which is out of date or incorrect;
• delete certain information that we are holding about you;
• restrict the way that we process and disclose certain of your information;
• prevent the processing of your information for direct-marketing purposes (including any direct marketing processing based on profiling);
• opt out of the processing of your information for automated processing that results in legal or similarly significant effects (if relevant).

Your local laws may also permit you to revoke your consent to the processing of your information for certain purposes.

Oregon and Minnesota residents can request a list of the specific third parties, other than natural persons, to which we have disclosed information.

As provided by applicable law, you also have the right to not be discriminated against for exercising your rights.

We may need to retain certain information in order to provide the Services to you or comply with legal obligations. Some information may be exempt from such requests under applicable law. We will take reasonable steps to verify your identity before fulfilling your request.

You may be able to designate an authorized agent to make requests on your behalf. For an authorized agent to be verified, you must provide them with signed written permission or a power of attorney. We may also follow up with you to verify your identity before processing an agent’s request, as permitted by law.

If you are a resident of Virginia, Minnesota, Montana, Oregon, Tennessee, Texas, Iowa, Indiana, Kentucky, Maryland, Nebraska, New Hampshire, New Jersey, Rhode Island, Delaware, Colorado, or Connecticut, and we deny your information request, you have the right to appeal our denial. You can exercise this right by contacting us at the contact information provided below. Your description must include your full name and the email address used for your account with us, along with a copy of the denial notice you received from us.

If you are using the Services as a customer’s end-user, please contact that customer to exercise your rights.

Exercising Your Rights

You may exercise your rights through in-product settings where available, or by emailing us at [email protected], [email protected], or (for certain operations or recruitment matters) [email protected].

Notice of Right to Opt Out of Sales and Targeted Advertising

Depending on your jurisdiction (including residents of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia), you may have the right to opt out of:

• “Sales” of your personal information; and/or
• “Sharing” or processing of your personal information for targeted advertising (also called cross-context behavioral advertising).

As of the effective date of this Policy:

• We do not “sell” or “share” your personal information in exchange for money or in ways that enable recipients of your data to use it for their own independent purposes.
• Our analytics providers (e.g., Cloudflare Web Analytics or similar service providers) are configured to use data only on our behalf, not for their independent advertising purposes.
• We do not knowingly sell or share the personal information of minors under 16 years of age without legally required affirmative authorization.

If you have a legally recognized browser-based opt-out preference signal (such as Global Privacy Control) enabled via your device or browser, we will recognize such preferences in accordance with applicable law.

Marketing Communications

We may contact you with Services announcements, promotions, and information about events in accordance with applicable law. To opt out of marketing:

• Follow the unsubscribe instructions in the marketing communication; or
• Email us using the contact information below.

Please note:

• It may take a short time to process your request in accordance with applicable law;
• Your opt-out will apply to the specific entity that sent you the marketing communication;
• We may still send you non-marketing communications (e.g., service announcements, security notices, transactional emails).

Additional rights for Users in the EEA, UK, and other applicable Jurisdictions

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or another jurisdiction that grants similar privacy rights, you may have certain additional rights under applicable data protection laws, including the General Data Protection Regulation (GDPR). These may include:

• Right to withdraw Consent – You have the right to withdraw your permission if you have consented to the processing of your Personal Data. Please keep in mind that even if you choose to withdraw your consent, we may be allowed to continue processing your Personal Data to the extent required or permitted by law.
• Right to object – You have the right to object to the processing of your Personal Data if the processing is carried out on a legal basis other than consent. You may object to such processing by providing a ground related to your particular situation to justify the objection.
• Right of access – You have the opportunity to learn whether your Personal Data is processed, to receive disclosure about specific aspects of the processing, and to seek a copy of the data being processed.
• Right to verify and seek rectification – You have the right to verify the accuracy of your Personal Data and ask for it to be updated or corrected.
• Right to have your personal data deleted or otherwise removed. You have the right, under certain circumstances, to obtain the erasure of your Personal Data, unless the processing is justified by our legitimate interests, necessary to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
• Right to data portability – To receive certain Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
• Right to make a formal complaint. Users have the right to file a complaint with their competent data protection authority (depending on their residence and the applicable data protection legislation).

To exercise these rights, contact us using the information in the Contact Information section below.

14. International Transfers of Personal Data

Your personal data may be transferred outside your home country, including outside the European Economic Area (EEA), Switzerland, United States and the United Kingdom, for purposes described in this Policy. Whenever we transfer your personal data out of the European Economic Area (EEA), Switzerland or the United Kingdom we will endeavour to ensure a similar degree of protection by implementing at least one of the following safeguards:

• Adequacy Decisions – We may transfer your Personal Data to countries that have been deemed to provide an adequate level of protection by the European Commission (or UK authorities).
• Standard Contractual Clauses (SCCs) – Where we use certain vendors or partners, we may rely on European Commission–approved standard contractual clauses, UK International Data Transfer Addenda, or similar instruments that give Personal Data the same protection it has in Europe.
• Vendor-Specific Compliance Mechanisms – We may rely on vendor-specific data protection addenda or frameworks (e.g., Greenhouse’s DPA) that incorporate SCCs or equivalent safeguards.

BY SUBMITTING YOUR PERSONAL INFORMATION THROUGH OUR WEBSITES, SERVICES, OR SOCIAL MEDIA, YOU ACKNOWLEDGE AND CONSENT TO SUCH TRANSFER, STORING, AND/OR PROCESSING OF PERSONAL INFORMATION, SUBJECT TO APPLICABLE LAW.

Please contact us if you want further information on the specific mechanism used when transferring your personal data outside your jurisdiction.

15. Minors

Infrastructure Services (NEAR AI Cloud, CloudAPI)

Our infrastructure services are provided to businesses and developers who deploy their own applications and models. To register for and use these Services, you must be at least 18 years of age and have the legal capacity to enter into binding agreements.

If you use our infrastructure services to deploy applications or models that are accessible to third-party end users, you are solely responsible for: (a) establishing and enforcing appropriate age restrictions and content policies for your deployments; (b) ensuring compliance with all applicable laws regarding minors’ access to your applications, including age verification where required; and (c) obtaining any necessary parental or guardian consent for end users who are minors.

Consumer Services (NEAR AI Private Chat)

NEAR AI Private Chat is intended solely for individuals aged 18 or older. By accessing or using Private Chat, you represent and warrant that you are at least 18 years of age. We do not permit use of Private Chat by anyone under 18, regardless of parental consent.

General Provisions

We do not knowingly collect Personal Data from individuals under 18 in connection with our Services. If we become aware that we have inadvertently collected such data, we will take reasonable steps to delete it promptly. We may adjust eligibility thresholds where required by applicable law.

16. California Privacy Rights Notice

This section describes how we collect, use, and share Personal Information of California residents in our capacity as a “Business” under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), and the rights of such residents with respect to that Personal Information.

For purposes of this section, the terms “Personal Information,” “Sensitive Personal Information,” and “Business” have the respective meanings given in the CCPA, but do not include information exempted from the CCPA’s scope (e.g., certain employment or B2B data where exemptions apply). In some cases, we may provide a different privacy notice to certain categories of California residents (e.g., job applicants, employees), in which case that notice will apply instead of this section.

Throughout this Privacy Policy, we discuss in detail:

• the specific pieces of personal information and sensitive personal information we collect;
• the sources of that information;
• how we disclose it.

Under the CCPA, we must also provide you with:

1. The categories of personal information and sensitive personal information we collect and disclose for business or commercial purposes;
2. The categories of other parties to whom we:
   • disclose such information for a business purpose,
   • “share” information for “cross-context behavioral advertising,” and/or
   • “sell” such information.

As of the effective date of this Policy:

• We do not “sell” or “share” Personal Information as those terms are defined in the CCPA;
• Our analytics providers (e.g., Cloudflare Web Analytics or similar service-provider tools) are configured to use data only on our behalf; and
• We do not knowingly sell the Personal Information of minors under 16 years of age without legally required affirmative authorization.

Please see the following chart for the rest of this information, which is also described throughout this Privacy Policy:

The CCPA sets forth certain obligations for businesses that “sell” personal information or “share” personal information for cross-context behavioral advertising purposes. Under the CCPA, “sale” and “sharing” are defined such that they may include allowing third parties to receive certain information for advertising purposes. Please review the “Notice of Right to Opt Out of Sales of Personal Information and Processing/Sharing of Personal Information for Targeted Advertising Purposes” for information on opting out of “sales” or “sharing” of your personal information. We do not knowingly sell or share the personal information of minors under 16 years of age.

As a California resident, you have the following rights, subject to certain limitations:

• Right to Know – You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete – You may request that we delete personal information we have collected, subject to exceptions.
• Right to Correct – You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing – We do not sell or share your personal information, but if that changes, you will be given the opportunity to opt out.
• Right to Limit Use of Sensitive Personal Information – We do not use or disclose sensitive personal information in a way that requires this right, but if we begin doing so, we will honor any applicable limitation requests.
• Right to Non-Discrimination – You have the right not to receive discriminatory treatment for exercising any of your privacy rights.

Submitting a Request: You can submit a request for information, access, or deletion to  [email protected] or [email protected].

Identity Verification: The CCPA requires us to collect and verify the identity of any individual submitting a request to access or delete personal information before providing a substantive response. We may ask for information such as your email address, details about your use of the Services, or other information we reasonably need to verify your identity.

Authorized Agents: California residents can designate an “authorized agent” to submit requests on their behalf. We will require proof of authorization (e.g., signed written permission or a power of attorney), and may ask you to verify your identity directly with us, as permitted by law.

California residents may make certain requests about their personal information under the CCPA as set forth in the Your Rights section above.

If we ever offer any financial incentives in exchange for your personal information, we will provide you with appropriate information about such incentives.

We collect a username and password that enables access to your account. This information is considered sensitive personal information under the CCPA. We do not process such information for a purpose that would require us to provide a “right to limit” under the CCPA..

Shine the Light: California law permits customers who are California residents to request certain information once per year regarding our disclosure of “personal information” to third parties for their direct marketing purposes. To request such information, please contact us at [email protected]. 

Please see the Data Retention section above for information about how long we maintain your personal information.

17. Colorado Residents

The Colorado Privacy Act requires us to provide additional information on how we process “personal data,” as that term is defined by the Colorado Privacy Act. Please see the chart and descriptions above for those additional details. The descriptions of categories of Personal Data, purposes, and disclosures in this Policy, including the tables above, apply to Colorado residents as well.

18. Nevada Residents

If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to unaffiliated parties. We do not sell your information as sales are defined under the Nevada law.

19. Third-Party Links and Services

The Website may contain links to third-party websites or services that are not operated or controlled by Near AI. We are not responsible for the privacy practices, content, or policies of any third-party sites.

This Privacy Policy does not apply to your use of any third-party websites. We encourage you to review the privacy policies of any such third parties before providing them with your Personal Data.

20. Candidate Privacy Policy Disclaimer (Recruitment Context)

If you are accessing this Privacy Policy in the context of a recruitment process, please note the following:

All personal data submitted by you as part of a job application, whether through our Website or any third-party source, will be processed exclusively for recruitment and selection purposes. By submitting such data, you acknowledge and consent to its use for assessing your qualifications, contacting you regarding relevant opportunities, and maintaining a candidate profile for potential future openings.

For more detailed information about how your data is processed in the context of recruitment, including your rights under applicable data protection laws, please refer to our Candidate Privacy Policy or contact us at [email protected].

21. Unenforceable Provisions

If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal, or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected.

If you believe we have handled a request related to your personal information improperly, you have the right to make a complaint to the appropriate privacy commission or regulator.

22. Read This Privacy Policy Carefully

Before using our Website and performing any Services, Near AI recommends reading this Privacy Policy carefully and completely in addition to our Terms and Conditions, available on the Website. If you do not agree with this Privacy Policy, then you should refrain from performing or using any Services.

23. Changes to This Privacy Policy / Updates

This Privacy Policy may change from time to time. It is our policy to post any changes made to the privacy policy on this page. When changes are made, we will post a revised version on our Website with the last updated and effective date posted on the top of this page.

Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the privacy policy periodically for updates.

24. Contact Information 

To ask questions or comment about this Privacy Policy and our privacy practices, please contact us at:

• [email protected]

• [email protected]