Privacy Policy — Nodalist AI

Logos Fortuna İnşaat Danışmanlık Sanayi ve Ticaret Limited Şirketi ("we", "us", "our") operates the Nodalist AI platform at nodalist.ai. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information: When you sign up via Google or GitHub, we receive your name, email address, and profile photo from the authentication provider. We do not receive or store your password.

Usage Data: We log AI generation requests (model used, token counts, timestamps) to calculate credit usage. We do not log the content of your prompts or AI responses on our servers.

Workspace Data: When you save a workspace to the cloud, its content (nodes, edges, labels) is stored in our database. Workspaces are private to your account.

Files: Files you upload are stored securely on Cloudflare R2. File content used for AI context is processed server-side and indexed for search.

Payment Data: Payments are processed by Paddle (our Merchant of Record). We do not collect or store credit card numbers, bank details, or other financial information. Paddle handles all payment data under their own privacy policy.

2. How We Use Your Information

To provide and maintain the Nodalist AI service
To track credit usage and enforce subscription limits
To communicate with you about your account or service updates
To detect and prevent abuse or unauthorized access

3. Data Storage and Security

Your data is stored on Cloudflare's infrastructure (D1 database, R2 storage, Pages). All data is encrypted in transit via HTTPS. We use Firebase Authentication for secure identity management.

Workspace data and usage logs are stored in Cloudflare D1 (serverless SQLite) in the ENAM region. We do not sell or share your data with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services:

Firebase Authentication (Google) — user login
Cloudflare — hosting, database, file storage, CDN
Paddle — payment processing (Merchant of Record)
AI Model Providers (Google, OpenAI, Anthropic, xAI, Moonshot, DeepSeek) — AI generation when you use the service
Mistral AI — OCR document scanning when you trigger text extraction on uploaded files

Each provider processes data under their own privacy policies. AI prompts are sent to the selected provider when you initiate an AI action; we do not send data to AI providers without your explicit action.

5. Cookies

We use essential cookies and localStorage for authentication tokens, theme preference, and language settings. We do not use tracking cookies or third-party advertising cookies.

6. Your Rights

You may:

Access your data by viewing your workspaces and usage history in the app
Delete your workspaces at any time through the app
Request account deletion by contacting [email protected]
Export your workspace data as JSON files from the app

7. Data Retention

We retain your account data for as long as your account is active. Usage logs are retained for 12 months. If you delete your account, your data will be removed within 30 days.

8. Children's Privacy

Nodalist AI is not intended for children under 16. We do not knowingly collect information from children under 16.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the email associated with your account.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

Logos Fortuna İnşaat Danışmanlık Sanayi ve Ticaret Limited Şirketi
Next Level Loft Ofis No:4/72, Çankaya/Ankara, Turkey
Email: [email protected]