Privacy Policy

1. Introduction

Northside Intelligence ("NI," "we," "us," or "our"), a product of Northside Ventures Group LLC, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data when you use:

• The northsideintelligence.com website and NI Portal
• Intelligence Tools
• The Smart Store
• Intelligence Services
• Any related products, apps, or communications

This policy also covers NI Portal marketing and preview pages we host on Northside Ventures Group domains (for example, northsideventuresgroup.vercel.app/ni-outreach and /ni-content), which share the same analytics and tracking described in Section 6.

By using our Services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Services.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration:

• Full name
• Email address
• Password (stored in hashed form — we never store plaintext passwords)
• Optional profile details

Payments and Billing:

• Payment card information is handled exclusively by Stripe and is not stored on NI servers. We receive only a tokenized payment reference and the last four digits of your card.
• Billing address

Smart Store Orders:

• Shipping name and address
• Order details and purchase history
• Payment card token and customer reference from Stripe (for checkout, post-fulfillment shipping adjustments, and refunds)

Intelligence Services:

• Business or organization name
• Contact information
• Project scope, goals, and workflow information you share during engagements
• Communications, documents, and files you provide

Tool Inputs (User Content):

• Text, data, prompts, files, or other content you submit to Intelligence Tools for processing (e.g., customer messages submitted to ReplyFlow, grant ideas submitted to GrantBot, market signals submitted to Signal Desk)

Lead Capture / Activity Tracking:

• If you submit your email address through a lead-capture form, waitlist, demo request, quote request, newsletter signup, feedback form, or store order-tracking lookup on our sites, we collect that email address to follow up with you about the relevant tool or Service.
• For each capture we store: your email address, a one-way cryptographic hash of it (used only for de-duplication), the page and entry point where it was submitted, and the capture timestamp. Nothing else is stored.
• Captured emails are retained for 72 hours from submission and are then permanently deleted by an automated hourly cleanup job, unless you create an NI account, start a trial, or otherwise consent to ongoing communications — in which case the email is handled under the retention rules in Section 7.

Communications:

• Support requests, feedback submissions, bug reports, and ideas submitted through in-platform forms
• Email correspondence with NI

2.2 Information We Collect Automatically

When you use the Services, we automatically collect:

Usage and Analytics Data:

• Pages visited, features used, tools opened, time spent
• Tool usage counts (for free tier limit tracking)
• Click paths and navigation behavior

Technical Data:

• IP address
• Browser type, version, and language
• Device type and operating system
• Referral URL

Cookies and Tracking Technologies:

• Session cookies (required for login state)
• Functional cookies (remembering your preferences, e.g., monthly vs. annual pricing toggle)
• Analytics cookies (measuring aggregate usage — see Section 6)
• Meta pixel cookies (_fbp, _fbc) — set by the Meta pixel for advertising measurement and conversion tracking (see Section 6)

We use the Meta pixel (Meta Platforms, Inc.) for advertising measurement and conversion tracking. The pixel transmits page views and standard events (e.g., signups, checkouts, purchases) to Meta, where they are governed by Meta's Privacy Policy. See Section 6 for details and opt-out options. We do not sell your personal information for monetary consideration.

2.3 Information From Third Parties

We may receive limited information from:

• Stripe — payment confirmation and dispute status
• Third-party suppliers (Smart Store) — order fulfillment and shipping status updates
• Authentication providers — if you sign in via Google or another OAuth provider (email and profile basics only)

3. How We Use Your Information

We use your information for the following purposes:

3.1 To Provide and Operate the Services

• Authenticate and manage your NI Portal account
• Track free tier usage limits and enforce subscription entitlements
• Process payments and manage subscriptions through Stripe
• Fulfill Smart Store orders and communicate shipping status
• Deliver Intelligence Services engagements
• Process tool inputs through AI models and return outputs to you

3.2 To Improve the Services

• Analyze aggregate usage patterns to identify popular features, bottlenecks, and improvement opportunities
• Monitor system performance and uptime
• Debug errors and investigate support tickets

3.3 To Communicate With You

• Send transactional emails: account confirmations, order receipts, subscription renewals, payment failures
• Send service announcements: new tools, feature updates, policy changes (you cannot opt out of transactional and policy emails)
• Send optional marketing emails: NI newsletters, product launches, promotions (you may opt out at any time via the unsubscribe link)
• Follow up on lead-capture submissions: contact you about the tool or Service you expressed interest in (captured emails are deleted 72 hours after submission unless you create an account or consent to further contact — see Section 2.1)

3.4 For Security and Fraud Prevention

• Detect and prevent unauthorized access, fraudulent transactions, and abuse of free tier limits
• Monitor for violations of our Acceptable Use Policy

3.5 Legal Compliance

• Comply with applicable laws, regulations, and legal process
• Enforce our Terms of Service
• Respond to lawful requests from government authorities

4. How Your Tool Inputs Are Handled

When you submit content to Intelligence Tools (e.g., a customer email to ReplyFlow, a grant description to GrantBot, market signals to Signal Desk):

• Your input is transmitted to our AI infrastructure — currently powered by Anthropic's Claude API — for processing.
• AI outputs are returned to you — the result is displayed in your browser and may be temporarily stored to support session continuity.
• We do not train AI models on your User Content. We maintain an absolute zero-training policy for all user inputs, prompts, headless agent payloads, and generated tool results. We never sell or license your content to third parties for model training or RLHF.
• Agentic Headless & FastMCP Execution: When utilizing the Agentic Service Tier via dedicated Agent API Keys (ni_agt_...) or FastMCP connectors, inputs are authenticated securely, processed through ephemeral stateless execution containers, and scrubbed for sensitive system credentials prior to execution.
• Bring Your Own Key (BYOK) Data Routing: If you supply your personal third-party API key (such as OpenAI, Anthropic, or Google Gemini), generation requests route directly from our execution environment to your provider's commercial API endpoints. Your interactions are governed exclusively by your direct customer agreement and privacy terms with that provider.
• Third-Party LLM Infrastructure: When using standard NI compute, workloads are processed via commercial enterprise API agreements (including Anthropic Claude and Google Gemini) which guarantee zero training on API customer data.
• Retention: Tool inputs and outputs are retained for a limited period (up to 90 days) for debugging and session recovery, then deleted unless you have saved them to your account.

5. Information Sharing and Disclosure

We do not sell your personal information. We share your data only in the following limited circumstances:

5.1 Service Providers (Processors)

We share data with trusted third-party vendors who process data on our behalf:

Our service providers process data under contract and may use it only for the purposes we specify. Data sent to Meta via the pixel is additionally governed by Meta's Business Tools Terms and Meta's Privacy Policy.

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or lawful government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of NI, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets involving Northside Ventures Group LLC, your information may be transferred to the successor entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information in other circumstances with your explicit consent.

6. Cookies and Tracking

6.1 What We Use

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling session cookies will prevent you from logging in. Disabling analytics cookies has no effect on Service functionality.

We honor Do Not Track (DNT) browser signals for our first-party analytics. The Meta pixel sets advertising-measurement cookies, and Meta's handling of that data is governed by Meta's own policies. To limit Meta's use of your data, adjust your Meta ad settings, block third-party cookies in your browser, or use a browser extension that blocks trackers.

7. Data Retention

After the applicable retention period, data is securely deleted or anonymized. Account deletion requests are processed within 30 days, subject to legal retention obligations.

8. Security

We implement commercially reasonable technical and organizational security measures to protect your data, including:

• Encryption in transit: All data transmitted between your browser and our servers uses TLS/HTTPS.
• Encryption at rest: Database contents are encrypted at rest via Supabase's infrastructure.
• Password hashing: Passwords are hashed using industry-standard algorithms; we never store plaintext passwords.
• Access controls: Internal access to personal data is restricted to authorized personnel with a legitimate business need.
• Payment security: All payment data is handled by Stripe (PCI-DSS Level 1 certified). NI does not store raw card numbers.

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

9. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at info@northsideintelligence.com and we will promptly delete it.

Users between 13 and 17 may use the Services only with verified parental or guardian consent.

10. Your Privacy Rights

10.1 All Users

Regardless of location, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and associated personal data (subject to legal retention requirements)
• Data portability — request your data in a common machine-readable format
• Withdraw consent — opt out of optional processing (e.g., marketing emails) at any time

To exercise these rights, email info@northsideintelligence.com with your request. We will respond within 30 days.

10.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you, the sources of that information, and the purposes for collection.
• Right to Delete: Request deletion of your personal information, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell your personal information for monetary consideration. We do share limited event data (page views, signup, checkout, and purchase events) with Meta via the Meta pixel for advertising measurement, which may qualify as "sharing" under the CCPA. To opt out of this sharing, email info@northsideintelligence.com with the subject "Opt Out of Sharing," block third-party cookies in your browser, or adjust your Meta ad settings.
• Right to Limit Use of Sensitive Personal Information: We do not process sensitive personal information beyond what is necessary to provide the Services.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at info@northsideintelligence.com or use our in-app data request feature. We will respond within 45 days (extendable by 45 days with notice).

Authorized Agent: You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent's authority.

Categories of Personal Information Collected (CCPA):

• Identifiers (name, email, IP address)
• Commercial information (purchase records, subscription history)
• Internet or electronic network activity (usage logs, browser data)
• Inferences drawn from the above (usage preferences for personalized Smart Store recommendations, if enabled)

10.3 EEA, UK, and Swiss Residents (GDPR/UK GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or applicable national equivalent:

Lawful Basis: We process your data under the following bases:

• Contract: Processing necessary to provide Services you have requested
• Legitimate interests: Security, fraud prevention, service improvement (always balanced against your rights)
• Consent: Marketing emails (you may withdraw consent at any time via the unsubscribe link)
• Legal obligation: Compliance with applicable law

Additional Rights:

• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local supervisory authority

Data Transfers: Your data is processed and stored on servers in the United States. We use standard contractual clauses (SCCs) and other appropriate safeguards for international data transfers where required.

To exercise GDPR rights, contact info@northsideintelligence.com. We will respond within 30 days.

11. Smart Store and Personalized Recommendations

If you choose to enable personalized Smart Store recommendations, we use your browsing and purchase history within the platform to surface relevant products. This processing is based on your consent and can be disabled at any time in your account settings.

We do not share your Smart Store browsing data with third-party advertisers. Product recommendations are generated internally.

11.1 Shipping Stipend and Post-Fulfillment Adjustments

Smart Store checkout collects a shipping & handling stipend sized above expected carrier costs. After your order ships, we compare actual postage and handling (including payment processing costs) against the stipend collected at checkout.

• If the stipend exceeds actual costs, we refund the unused amount to your original payment method.
• If actual costs exceed the stipend, we may charge the payment card on file for the difference and email you with the amount charged.
• If a required payment cannot be completed, we email you with instructions. Orders that are not resolved within 72 hours may be cancelled.

By placing a Smart Store order, you consent to these post-fulfillment adjustments. See our Terms of Service Section 7 for full details.

12. Links to Third-Party Sites and Ecosystem Products

The Services contain links to third-party websites and NI Ecosystem products (e.g., Match Fit at match-fit.net, thenilabs.com). This Privacy Policy applies only to northsideintelligence.com and our directly operated Services. Third-party sites and ecosystem products have their own privacy policies; we encourage you to review them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send an email notice to registered users
• Display a prominent notice on the platform for at least 30 days

Continued use of the Services after the effective date of changes constitutes acceptance of the updated policy. If you do not agree to material changes, you may delete your account before the effective date.

14. Contact Us

For privacy questions, data requests, or to exercise your rights:

Mailing Address:

We aim to respond to all privacy requests within 30 days of receipt.