Privacy Policy

1. Introduction

NistAgent ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the NistAgent platform, website, and related services (collectively, the "Service").

2. Our Core Principle

Your data is yours. Period.

We do not sell, rent, share, or otherwise monetize any customer data. Any information you upload, generate, or store within NistAgent remains your exclusive property. We will never provide your data to third parties for advertising, analytics, or any other commercial purpose.

3. Information We Collect

3.1 Account Information

When you create an account or join our beta program, we collect your name, email address, company name, and role. This information is used solely to provide and administer your access to the Service.

3.2 Your Content

Any compliance data, documents, configurations, or other materials you upload or create within the Service ("Your Content") belong entirely to you. We access Your Content only as necessary to operate the Service on your behalf.

3.3 Anonymized Usage Data

We automatically collect anonymized, aggregated data about how the Service is used — for example, which features are accessed, page load times, and error rates. This data cannot be used to identify any individual user or organization. We use it solely to improve the reliability, performance, and usability of the Service.

4. Optional AI Training Data Sharing

Participants may choose to share their anonymized usage data with us to help improve NistAgent's AI models. This is entirely optional and opt-in. If you choose to participate:

• All shared data is fully anonymized before it is used for training — no personally identifiable information, company names, or proprietary content is ever included.
• You may opt out of data sharing at any time through your account settings, with no impact to your access or experience.
• Shared data is used exclusively to improve NistAgent's models and is never sold or provided to third parties.

5. How We Use Information

We use the information described above to:

• Provide, maintain, and improve the Service.
• Communicate with you about your account, updates, and support.
• Detect, prevent, and address technical issues and security threats.
• Generate anonymized, aggregated insights to improve the platform (never at the individual or company level).

6. Data Sharing & Disclosure

We do not share your personal information or Your Content with any third party, except in the following limited circumstances:

• With your consent: If you explicitly authorize us to share specific information.
• Legal obligations: If required by law, regulation, or valid legal process (e.g., a court order or subpoena).
• Service providers: We may use trusted infrastructure providers (hosting, email delivery) that process data on our behalf under strict contractual obligations prohibiting independent use of your data.

7. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments. While no system is perfectly secure, we are committed to safeguarding your information to the highest practical standard.

8. Data Retention & Deletion

We retain your account information and Your Content for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at privacy@nistagent.com. Upon account deletion, we will remove your data from our active systems within 30 days and from backups within 90 days.

9. Cookies & Tracking

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies or cross-site tracking technologies.

10. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@nistagent.com.