Privacy Policy

• Account data: name, email, phone, business details, login information.
• Billing data: plan and transaction records. Card details are handled by our payment processor, Cashfree, and are not stored by us.
• Data you put in: your leads, clients, contacts, notes, and uploaded content.
• Call data: transcripts of calls you choose to record, and links to the recordings. Recordings are created and held by our recording provider, Fathom; the portal does not store the call audio itself.
• WhatsApp and messaging data: if you use our WhatsApp features, the messages sent to and from your connected WhatsApp Business number, including names, phone numbers, message content, and delivery metadata such as timestamps and status. See section 13.
• Booking data: appointment and booking details, such as requested times, attendee names, phone numbers, and email addresses.
• Usage data: how you use the Service, device and log information.
• Integration data: data from tools you connect, used only to provide the features you turn on.

To provide and run your workspace; to power your AI co-pilot and make it sharper for your business; to process payments; to support you; to keep the Service secure; and to meet legal obligations. We do not sell your personal data, and we do not use your private data to train a public AI model. How the co-pilot handles your data is set out in section 3.

In practice this includes lead management, appointment booking and scheduling, and AI call grading. If you or the business you are messaging use our WhatsApp features, WhatsApp message content is processed to provide the Service, as set out in section 13. We do not use WhatsApp message content for advertising, and we do not use it to train AI models.

• B1. The AI co-pilot. The Service includes an AI sales co-pilot ("Tintu") that analyses data in your account, including pipeline and lead records, call Transcripts, and related sales data, to generate summaries, scores, suggestions, and other outputs intended to assist your sales activity. Tintu is a feature of the Service; it is not a person and does not provide professional advice.
• B2. Data processed by the AI. To produce these outputs, the Service processes the data you and your authorised users submit or generate, and data contained in your Transcripts. Only the data reasonably necessary to generate the requested output is processed for that purpose.
• B3. AI sub-processors. AI processing is performed using third-party AI model providers acting as the Company's Sub-processors: Anthropic (Claude) and Google (Gemini). Relevant inputs are transmitted to the applicable provider solely to generate outputs for you, and are subject to that provider's contractual confidentiality and security commitments. The current list of Sub-processors is published at the sub-processor section of our Privacy Policy.
• B4. No training on your data. Your account data, Transcripts, and the inputs and outputs of the AI co-pilot are not used to train, fine-tune, or improve any AI model, whether the Company's or any third party's. Your data is used only to provide the Service to you. The Company uses these providers on terms that do not permit your data to be used for model training.
• B5. Cross-border processing. You acknowledge and consent that data processed by the AI co-pilot may be processed outside India by the AI providers named above for the purpose of generating outputs for you. Such processing is subject to appropriate safeguards and applicable law.
• B6. Data minimisation and security. The Company limits the data sent for AI processing to what is necessary for the requested output and applies reasonable technical and organisational measures to protect it, including encryption in transit, encryption at rest, role-based access controls, multi-factor authentication on Company team accounts, and edge protection, and automated daily database backups with restore points covering the most recent 7 days. No method of transmission or storage is completely secure.
• B7. Retention. AI inputs and outputs are retained in line with the retention periods in the Privacy Policy and are deleted on the same basis as the underlying account data, including deletion within 30 days of account termination or non-payment.
• B8. Human-review obligation. The AI co-pilot is decision-support only. You will independently review every AI output before relying on or acting on it, and you remain responsible for all sales communications, decisions, and actions taken in your business. You will not treat any AI output as a final decision, professional advice, or a substitute for your own judgement.
• B9. Outputs are advisory only. All AI co-pilot outputs, including scores, suggestions, summaries, and recommendations, are informational and advisory only. They are not professional, legal, financial, medical, or business advice and are not guarantees of any outcome, result, or revenue. You are solely responsible for any decision or action you take, and any decision or action you do not take, in connection with these outputs.
• B10. No professional advice. Nothing produced by the AI co-pilot constitutes professional advice of any kind, and no professional or advisory relationship is created between you and the Company through your use of it.
• B11. Accuracy, errors, and limitations. AI-generated outputs may be incomplete, inaccurate, outdated, biased, or wrong, and may not suit your specific circumstances. The technology can produce plausible-sounding but incorrect content. You acknowledge these limitations and will verify any output before relying on it. To the maximum extent permitted by law, the Company disclaims liability for any reliance on, or consequence arising from, AI co-pilot outputs.
• B12. Your lawful basis and consent. You are responsible for ensuring you have a lawful basis to submit the data you provide to the AI co-pilot, including Participant data from Transcripts, and for any required consents and notices. You will not submit data to the AI co-pilot that you are not permitted to process.
• B13. Sensitive data. Transcripts and account data may contain sensitive or special-category personal data. You are responsible for determining whether such data may lawfully be processed by the AI co-pilot and for obtaining any heightened consent required.
• B14. Liability. To the maximum extent permitted by law, the Company's aggregate liability arising out of or relating to the AI co-pilot is subject to the limitation-of-liability cap in the Terms of Service, namely the fees paid by you in the 3 months preceding the claim. The AI co-pilot is provided "as is" and "as available".

We process data to provide the Service you signed up for, with your consent where required, and to meet legal duties. You can withdraw consent where processing relies on it, subject to the effect on the Service.

We share data only with: service providers who help us run the Service, under confidentiality; authorities where the law requires; and a successor in a business transfer. Our sub-processors are:

• Cloudflare (hosting and content delivery)
• Supabase (database)
• Anthropic / Claude (AI)
• Google / Gemini (AI)
• Cashfree (payments)
• Meta / WhatsApp (WhatsApp Business Platform, for the WhatsApp messaging features)
• Resend (transactional email delivery)
• Fathom (call recording and transcription)
• Meta (advertising pixel, subject to your cookie consent)

We do not sell your personal data.

Data is hosted on Cloudflare and Supabase. We protect it with reasonable technical and organisational measures, including: encryption in transit (TLS); encryption at rest on Cloudflare and Supabase; role-based access control (Cloudflare Access); Cloudflare edge protection; multi-factor authentication on our team accounts; and automated daily database backups with restore points covering the most recent 7 days (Supabase), alongside replicated edge storage for availability (Cloudflare). No method of transmission or storage is completely secure, and we do not warrant absolute security.

We keep personal data, including call transcripts and recording links, for as long as your account is active and as needed for the purposes above and legal requirements. On account termination, cancellation, or non-payment, we delete or anonymise your data, including transcripts and recording links, within 30 days, subject to any legal obligation to retain it. The recordings themselves are held by Fathom and governed by your settings there.

Subject to law, you can access, correct, update, or delete your data, and raise a grievance. To exercise these, contact us at support@projectscaleup.in. For step-by-step deletion instructions, see our Data Deletion page.

We use cookies as described in the Cookie Policy.

The Service is not for anyone under 18.

We may update this policy and will post the new version with a date.

In line with Indian law, you can raise a grievance with our grievance officer at grievance@projectscaleup.in. We aim to acknowledge grievances within 7 days and resolve them within 30 days.

Some businesses on NextDoor AI use the WhatsApp Business Platform, provided by Meta, to message their leads and clients. If you message a business that uses our WhatsApp features, or you connect your own WhatsApp Business number, we process the WhatsApp messages sent and received, together with names, phone numbers, and delivery metadata, solely to provide the Service: receiving and storing conversations, showing them to the business you are messaging, supporting appointment booking, and preparing replies that the business has asked the Service to prepare.

WhatsApp message content is shared with Meta, as the operator of the WhatsApp Business Platform, to send and receive messages, and may be processed by the AI providers named in section 3 to generate outputs for the business you are messaging. We do not sell WhatsApp message content, we do not use it for third-party advertising, and we do not use it to train AI models.

WhatsApp messages are retained on the same basis as the rest of the account data they belong to (section 7), including deletion within 30 days of account termination. To request deletion of your WhatsApp conversation data, see our Data Deletion page or write to support@projectscaleup.in.

If you connect your Google Calendar, NextDoor AI reads your calendar availability, including event times and titles, so that prospects are shown only genuinely open slots. It also creates and manages booking events on your calendar, with intake answers attached. We read this data only to provide these scheduling features.

We do not sell this data, use it for advertising, or use it to train any AI model. It is deleted within 30 days of account termination, like other account data.

NextDoor AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.