1. Introduction
Welcome to Nullset. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI-powered learning platform.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Profile picture (optional)
- Authentication credentials (managed securely by Clerk)
2.2 Learning Content
To provide our services, we process:
- Documents and files you upload (PDFs, Word documents, presentations, images)
- YouTube links and other learning materials you provide
- Notes, annotations, and course content you create
- Chat conversations with our AI tutor
2.3 Usage Data
We automatically collect:
- Learning progress and completion statistics
- Feature usage and interaction data
- Device information and browser type
- IP address and geographic location (approximate)
2.4 Payment Information
Payment processing is handled securely by Stripe. We do not store your credit card details. Stripe may share transaction information with us for billing and subscription management purposes.
3. How We Use Your Information
We use your data to:
- Provide and improve our AI-powered learning services
- Generate personalized courses, videos, and quizzes
- Track your learning progress and provide analytics
- Process payments and manage subscriptions
- Send important updates about your account and our services
- Respond to your support requests
- Improve our AI models and platform features
- Detect and prevent fraud or abuse
4. Data Storage and Security
We take data security seriously:
- All uploaded files are encrypted in transit and at rest
- Files are stored securely on Cloudflare R2 infrastructure
- Database connections use industry-standard encryption (PostgreSQL with SSL)
- Access to your data is restricted to authorized personnel only
- We regularly audit our security practices and update them as needed
5. AI and Third-Party Services
Nullset uses third-party AI services to power our platform:
- OpenAI (GPT models), Anthropic (Claude), Google (Gemini), and other AI providers
- Your learning content may be processed by these services to generate courses, videos, and responses
- We use enterprise-grade API agreements that prohibit AI providers from training on your data
- Authentication is managed by Clerk (SOC 2 Type II certified)
- Payments are processed by Stripe (PCI DSS Level 1 certified)
6. Data Sharing and Disclosure
We do not sell your personal data. We may share information only in these circumstances:
- Service Providers: With trusted partners who help operate our platform (cloud storage, AI services, payment processing)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with advance notice to you)
- With Your Consent: When you explicitly authorize us to share data
7. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete information
- Deletion: Delete your account and associated data at any time
- Export: Download your learning materials and data
- Opt-out: Unsubscribe from marketing emails (account-related emails will continue)
- Object: Object to certain data processing activities
To exercise these rights, visit your account settings or contact us at privacy@nullset.app.
8. Data Retention
We retain your data as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we must retain it for legal compliance. Uploaded files marked for deletion are permanently removed after 30 days.
9. Children’s Privacy
Nullset is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal data, please contact us immediately.
10. International Users
Nullset is operated from the United States. If you are accessing our services from outside the US, your data may be transferred to and processed in the US or other countries where our service providers operate. By using our services, you consent to such transfers.
11. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Analyze platform usage and performance
- Provide personalized learning experiences
You can control cookies through your browser settings, though some features may not work properly without them.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of Nullset after changes take effect constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
- Email: privacy@nullset.app
- Support: support@nullset.app
