Privacy Policy

1. Introduction

Northside Intelligence ("NI," "we," "us," or "our"), a product of Northside Ventures Group LLC, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data when you use:

• The northsideintelligence.com website and NI Portal
• Intelligence Tools
• The Smart Store
• Intelligence Services
• Any related products, apps, or communications

By using our Services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Services.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration:

• Full name
• Email address
• Password (stored in hashed form — we never store plaintext passwords)
• Optional profile details

Payments and Billing:

• Payment card information is handled exclusively by Stripe and is not stored on NI servers. We receive only a tokenized payment reference and the last four digits of your card.
• Billing address

Smart Store Orders:

• Shipping name and address
• Order details and purchase history
• Payment card token and customer reference from Stripe (for checkout, post-fulfillment shipping adjustments, and refunds)

Intelligence Services:

• Business or organization name
• Contact information
• Project scope, goals, and workflow information you share during engagements
• Communications, documents, and files you provide

Tool Inputs (User Content):

• Text, data, prompts, files, or other content you submit to Intelligence Tools for processing (e.g., customer messages submitted to ReplyFlow, grant ideas submitted to GrantBot, market signals submitted to Signal Desk)

Communications:

• Support requests, feedback submissions, bug reports, and ideas submitted through in-platform forms
• Email correspondence with NI

2.2 Information We Collect Automatically

When you use the Services, we automatically collect:

Usage and Analytics Data:

• Pages visited, features used, tools opened, time spent
• Tool usage counts (for free tier limit tracking)
• Click paths and navigation behavior

Technical Data:

• IP address
• Browser type, version, and language
• Device type and operating system
• Referral URL

Cookies and Tracking Technologies:

• Session cookies (required for login state)
• Functional cookies (remembering your preferences, e.g., monthly vs. annual pricing toggle)
• Analytics cookies (measuring aggregate usage — see Section 6)

We do not use advertising cookies or sell data to advertisers.

2.3 Information From Third Parties

We may receive limited information from:

• Stripe — payment confirmation and dispute status
• Third-party suppliers (Smart Store) — order fulfillment and shipping status updates
• Authentication providers — if you sign in via Google or another OAuth provider (email and profile basics only)

3. How We Use Your Information

We use your information for the following purposes:

3.1 To Provide and Operate the Services

• Authenticate and manage your NI Portal account
• Track free tier usage limits and enforce subscription entitlements
• Process payments and manage subscriptions through Stripe
• Fulfill Smart Store orders and communicate shipping status
• Deliver Intelligence Services engagements
• Process tool inputs through AI models and return outputs to you

3.2 To Improve the Services

• Analyze aggregate usage patterns to identify popular features, bottlenecks, and improvement opportunities
• Monitor system performance and uptime
• Debug errors and investigate support tickets

3.3 To Communicate With You

• Send transactional emails: account confirmations, order receipts, subscription renewals, payment failures
• Send service announcements: new tools, feature updates, policy changes (you cannot opt out of transactional and policy emails)
• Send optional marketing emails: NI newsletters, product launches, promotions (you may opt out at any time via the unsubscribe link)

3.4 For Security and Fraud Prevention

• Detect and prevent unauthorized access, fraudulent transactions, and abuse of free tier limits
• Monitor for violations of our Acceptable Use Policy

3.5 Legal Compliance

• Comply with applicable laws, regulations, and legal process
• Enforce our Terms of Service
• Respond to lawful requests from government authorities

4. How Your Tool Inputs Are Handled

When you submit content to Intelligence Tools (e.g., a customer email to ReplyFlow, a grant description to GrantBot, market signals to Signal Desk):

• Your input is transmitted to our AI infrastructure — currently powered by Anthropic's Claude API — for processing.
• AI outputs are returned to you — the result is displayed in your browser and may be temporarily stored to support session continuity.
• We do not train AI models on your User Content without your explicit, separate consent.
• Anthropic's data handling for API calls is governed by Anthropic's own API data usage policies. NI does not control how Anthropic processes data at the API level. You should review Anthropic's privacy practices at anthropic.com.
• Retention: Tool inputs and outputs are retained for a limited period (up to 90 days) for debugging and session recovery, then deleted unless you have saved them to your account.

5. Information Sharing and Disclosure

We do not sell your personal information. We share your data only in the following limited circumstances:

5.1 Service Providers (Processors)

We share data with trusted third-party vendors who process data on our behalf:

All service providers are contractually required to protect your data and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or lawful government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of NI, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets involving Northside Ventures Group LLC, your information may be transferred to the successor entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information in other circumstances with your explicit consent.

6. Cookies and Tracking

6.1 What We Use

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling session cookies will prevent you from logging in. Disabling analytics cookies has no effect on Service functionality.

We honor Do Not Track (DNT) browser signals for analytics tracking. We do not serve behavioral advertising cookies.

7. Data Retention

After the applicable retention period, data is securely deleted or anonymized. Account deletion requests are processed within 30 days, subject to legal retention obligations.

8. Security

We implement commercially reasonable technical and organizational security measures to protect your data, including:

• Encryption in transit: All data transmitted between your browser and our servers uses TLS/HTTPS.
• Encryption at rest: Database contents are encrypted at rest via Supabase's infrastructure.
• Password hashing: Passwords are hashed using industry-standard algorithms; we never store plaintext passwords.
• Access controls: Internal access to personal data is restricted to authorized personnel with a legitimate business need.
• Payment security: All payment data is handled by Stripe (PCI-DSS Level 1 certified). NI does not store raw card numbers.

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

9. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at info@northsideintelligence.com and we will promptly delete it.

Users between 13 and 17 may use the Services only with verified parental or guardian consent.

10. Your Privacy Rights

10.1 All Users

Regardless of location, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and associated personal data (subject to legal retention requirements)
• Data portability — request your data in a common machine-readable format
• Withdraw consent — opt out of optional processing (e.g., marketing emails) at any time

To exercise these rights, email info@northsideintelligence.com with your request. We will respond within 30 days.

10.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you, the sources of that information, and the purposes for collection.
• Right to Delete: Request deletion of your personal information, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We do not process sensitive personal information beyond what is necessary to provide the Services.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at info@northsideintelligence.com or use our in-app data request feature. We will respond within 45 days (extendable by 45 days with notice).

Authorized Agent: You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent's authority.

Categories of Personal Information Collected (CCPA):

• Identifiers (name, email, IP address)
• Commercial information (purchase records, subscription history)
• Internet or electronic network activity (usage logs, browser data)
• Inferences drawn from the above (usage preferences for personalized Smart Store recommendations, if enabled)

10.3 EEA, UK, and Swiss Residents (GDPR/UK GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or applicable national equivalent:

Lawful Basis: We process your data under the following bases:

• Contract: Processing necessary to provide Services you have requested
• Legitimate interests: Security, fraud prevention, service improvement (always balanced against your rights)
• Consent: Marketing emails and optional analytics (you may withdraw consent at any time)
• Legal obligation: Compliance with applicable law

Additional Rights:

• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local supervisory authority

Data Transfers: Your data is processed and stored on servers in the United States. We use standard contractual clauses (SCCs) and other appropriate safeguards for international data transfers where required.

To exercise GDPR rights, contact info@northsideintelligence.com. We will respond within 30 days.

11. Smart Store and Personalized Recommendations

If you choose to enable personalized Smart Store recommendations, we use your browsing and purchase history within the platform to surface relevant products. This processing is based on your consent and can be disabled at any time in your account settings.

We do not share your Smart Store browsing data with third-party advertisers. Product recommendations are generated internally.

11.1 Shipping Stipend and Post-Fulfillment Adjustments

Smart Store checkout collects a shipping & handling stipend sized above expected carrier costs. After your order ships, we compare actual postage and handling (including payment processing costs) against the stipend collected at checkout.

• If the stipend exceeds actual costs, we refund the unused amount to your original payment method.
• If actual costs exceed the stipend, we may charge the payment card on file for the difference and email you with the amount charged.
• If a required payment cannot be completed, we email you with instructions. Orders that are not resolved within 72 hours may be cancelled.

By placing a Smart Store order, you consent to these post-fulfillment adjustments. See our Terms of Service Section 7 for full details.

12. Links to Third-Party Sites and Ecosystem Products

The Services contain links to third-party websites and NI Ecosystem products (e.g., Match Fit at match-fit.net, thenilabs.com). This Privacy Policy applies only to northsideintelligence.com and our directly operated Services. Third-party sites and ecosystem products have their own privacy policies; we encourage you to review them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send an email notice to registered users
• Display a prominent notice on the platform for at least 30 days

Continued use of the Services after the effective date of changes constitutes acceptance of the updated policy. If you do not agree to material changes, you may delete your account before the effective date.

14. Contact Us

For privacy questions, data requests, or to exercise your rights:

Mailing Address:

We aim to respond to all privacy requests within 30 days of receipt.