Privacy Policy

NECTY ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our AI-powered opportunity intelligence platform (the "Service").

This policy applies to all users of the Service, including visitors to our website and customers with active subscriptions. By using NECTY, you consent to the practices described in this Privacy Policy.

We collect information in the following categories:

Account and Profile Information

• Name, email address, and password (hashed)
• Business name, industry, and location(s)
• Profile photo (optional)
• Onboarding preferences and configuration

Billing and Payment Information

• Subscription plan and billing history (processed securely via Stripe)
• We do not store full credit card numbers — all payment data is handled by Stripe in accordance with PCI DSS standards

Usage Data

• Features accessed and actions taken within the Service
• Opportunity interactions (viewed, saved, outreach sent, dismissed)
• Session data, timestamps, and device/browser information
• IP address and approximate geographic location

Communications

• Messages sent to our support team
• Feedback and survey responses
• Email notifications preferences

To provide the core Service, NECTY scans and indexes publicly available content from third-party platforms, including:

• Reddit (public posts and comments)
• Facebook (public posts and group discussions)
• Instagram (public posts and comments)
• TikTok (public video captions and comments)
• Google Maps (public business reviews)
• Other publicly accessible social and review platforms

We only access content that is publicly visible without authentication. We do not access private messages, direct messages, or any content behind platform login walls. All public data is processed in accordance with each platform's terms of service and applicable privacy laws.

The public content we surface through the Service is retained temporarily for opportunity delivery and is not used for purposes beyond providing the Service to you.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process subscriptions and manage your account and workspace
• Personalize the opportunity feed and AI suggestions based on your business profile and settings
• Send transactional emails (account verification, password reset, billing receipts)
• Send product updates, feature announcements, and newsletters (you may opt out at any time)
• Respond to support requests and communicate with you about your account
• Monitor usage to detect fraud, abuse, or violations of our Terms of Service
• Conduct analytics and research to understand how the Service is used and how to improve it
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your personal data to train AI models without your explicit consent.

We share your information only in the following limited circumstances:

Service Providers

We share data with trusted third-party providers who help us operate the Service:

• Supabase — Database hosting and authentication
• Stripe — Payment processing and subscription management
• Resend — Transactional and marketing email delivery
• Vercel / cloud infrastructure providers — Hosting and content delivery
• AI model providers — For generating opportunity summaries and outreach drafts (data is processed per our data processing agreements)

All service providers are contractually required to handle your data securely and only for the purposes of providing their services to us.

Legal Requirements

We may disclose your information if required by law, subpoena, court order, or other government or law enforcement authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you before your information becomes subject to a different privacy policy.

Workspace Members

Within your workspace, other authorized team members may see your name, profile, and activity within the shared workspace. Workspace administrators have access to team usage data.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained while your account is active and for up to 90 days after deletion to allow account recovery and comply with legal obligations
• Billing records are retained for 7 years as required for tax and financial compliance
• Usage logs are retained for up to 12 months for security, debugging, and analytics purposes
• Public social contentsurfaced as opportunities is retained for the duration of the opportunity's relevance window and removed when it is no longer actionable

You can request deletion of your account and personal data at any time by contacting us at support@necty.ai.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest
• Row-level security (RLS) policies to ensure users can only access their own data
• Secure authentication with email verification
• Regular security reviews and dependency audits

While we take reasonable steps to protect your information, no security measure is 100% impenetrable. If you discover a security vulnerability, please report it responsibly to support@necty.ai.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention obligations)
• Portability: Request a machine-readable export of your data
• Objection: Object to or restrict certain processing of your data
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise these rights, contact us at support@necty.ai. We will respond within 30 days (or as required by applicable law). We may ask you to verify your identity before processing your request.

Marketing Opt-Out

You can unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email, or by updating your notification preferences in your account settings.

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication, session management, and core Service functionality (e.g., active workspace tracking)
• Analytics cookies: Help us understand how the Service is used so we can improve it (aggregated, not linked to individuals where possible)
• Preference cookies: Remember your settings and personalization choices

You can control cookies through your browser settings. Disabling essential cookies may prevent you from accessing parts of the Service.

The Service may contain links to third-party websites or integrations with third-party services. This Privacy Policy does not apply to those external services. We encourage you to review the privacy policies of any third-party services you use in connection with NECTY.

NECTY is not responsible for the privacy practices or content of third-party platforms whose public data we surface as part of the Service.

NECTY is operated from the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate safeguards for cross-border transfers, including Standard Contractual Clauses (SCCs) where required.

The Service is not directed to or intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at support@necty.ai and we will promptly delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email or by displaying a notice within the Service at least 14 days before the changes take effect.

The "Last updated" date at the top of this page reflects when the policy was most recently revised. Continued use of the Service after the effective date constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy inquiries: support@necty.ai
• General support: support@necty.ai
• Security reports: support@necty.ai

We are committed to resolving privacy concerns promptly and working with you to reach a satisfactory resolution.