Privacy Notice

1. Who we are

Nate AI is provided by Nate AI. For your account details we decide how they are used. For the data you upload for your engagements ("Customer Data"), you or your organisation decide how it is used, and we process it on your behalf, as set out in the Terms of Use.

2. What we collect

• Account details: your name, email address, organisation, website and sector.
• Customer Data: the files, documents and field work you upload or record. It may include personal data about other people.
• Usage and cost records: which AI steps ran for each engagement and what they cost.
• Payment records: the phone number and M-Pesa reference of each top-up.
• Technical records: sign-in events and server logs used to keep the service secure and working.

3. Why we use it

• To provide Nate AI: analysing Customer Data, running your engagements and producing your reports.
• To manage your account, your balance and your payments.
• To keep the service secure, fix problems and support you.
• To improve Nate AI for your organisation: an outcome you approve may be kept as a hint for your own future engagements. It is never shared with other organisations.

4. Who processes it for us

• Anthropic, PBC (United States): the AI models that analyse Customer Data. Under its commercial terms, Anthropic does not use data sent through its API to train its models.
• Supabase: database and sign-in.
• Our server host: runs the Nate AI application.
• Safaricom: M-Pesa payments.

These providers may process data outside Kenya. We use providers that commit by contract to protect it. We do not sell personal data.

5. How long we keep it

Account details are kept while your account is open. Customer Data is kept until you delete the engagement or your account closes; it is then deleted within 30 days, except where the law requires us to keep it. Payment records are kept as tax law requires.

6. Your rights

Under the Data Protection Act, 2019 you may ask to access, correct or delete your personal data, or object to its use. Requests about Customer Data concerning other people are handled with the account holder who uploaded it. You may also complain to the Office of the Data Protection Commissioner.

7. Security

Data travels over encrypted connections, access is limited to your account, and we keep regular backups. No system is completely secure; we will tell you without undue delay about a breach affecting your data.