Privacy Policy

Information We Collect

• Account info: name, work email, company, phone
• Usage data: API calls, logins, feature interaction
• Customer Data: data you submit to the Services
• Technical data: IP address, browser type, device information
• AI assistant connection data: when you connect an AI assistant such as ChatGPT or Claude: the assistant's name, the workspace and permissions you approved, when the connection was created, used and ended, encrypted connection tokens, and records of the requests the assistant made

AI Assistant Connections

You can connect an AI assistant, such as ChatGPT or Claude, to your Nesika account so it can answer questions about your workspace and, if you allow it, make changes on your behalf.

• You sign in with Nesika and approve one workspace and the permissions the assistant receives. The assistant never receives your Nesika password.
• When the assistant asks Nesika for information, we send it only the data needed to answer from the workspace you approved, for example products, prices, competitors, scan results and pricing insights. The assistant provider (for example OpenAI for ChatGPT or Anthropic for Claude) handles that data under its own terms and privacy policy.
• Nesika does not receive your conversation with the assistant. It receives only the requests the assistant sends to Nesika.
• We keep security and operational records of those requests (for example the assistant, workspace, action, outcome and time) to protect your account, investigate problems and provide support.
• A connection expires after 30 days without use, or 90 days after you approved it, whichever comes first. You can disconnect an assistant at any time in Nesika under Settings → Connected assistants; access ends within about a minute. Disconnecting does not delete your workspace data.

How We Use It

We use your information to:

• Provide and improve the Services
• Process payments
• Communicate about your account
• Deliver support
• Send product updates
• Comply with legal obligations

✓ We do not sell personal information.

Disclosure

We share information with sub-processors (listed at /sub-processors), payment providers, professional advisers under confidentiality, and authorities where legally required. When you connect an AI assistant, we also share with that assistant's provider the workspace data the assistant requests on your behalf, as described above.

International Transfers

Customer Data is primarily stored in Australia. Some sub-processors operate in the EU and US under standard contractual clauses.

Your Rights

• Access your personal information
• Request correction of inaccurate data
• Request deletion
• Disconnect AI assistants at any time under Settings → Connected assistants
• Lodge a complaint with the OAIC (oaic.gov.au)
• EU residents have additional GDPR rights including portability and objection

Security

Pursuing SOC 2 Type II certification · Encryption in transit and at rest · Role-based access control · Continuous security monitoring.

Retention

We retain your information only as long as necessary to provide the Services or comply with legal obligations. In particular:

• Account information and Customer Data are kept while your account is active. You can ask us to delete them at any time.
• AI assistant connection records and tokens are deleted automatically within about 100 days after you approve the connection, after it has expired or been disconnected.
• Operational and security logs, including records of AI assistant requests, are kept for up to 90 days.

Cookies

Essential cookies for authentication are required. Optional analytics cookies — manage via your browser settings.