Privacy.

Who is responsible

Hossein Yousefi, trading as NopsAI in the Netherlands at Emmakade 10, 2411 JA Bodegraven, is the controller for the personal data described here.

NopsAI is not yet registered with the Dutch Chamber of Commerce. Until it is, the operator named above is personally responsible, and this notice will be updated with the registered company details once registration completes.

For any privacy question, or to exercise the rights below, email [email protected]. We will give you a postal address on request.

What this website collects

Only what you type into the demo request form: your name, work email, company, team and the workflow description you choose to provide. There is no other form on the site.

We use it for one purpose — to reply to you and prepare that conversation. The legal basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries. We do not sell it, share it for advertising, or use it to build a profile.

What this website does not collect

No cookies, no analytics, no tracking pixels, no advertising or social media scripts, and no third-party embeds. The site sets nothing in your browser storage, which is also why you are not being asked to dismiss a cookie banner.

Fonts are served from our own domain rather than a font CDN, so no font provider learns which pages you read. Your IP address does reach the content delivery network in front of this site, named below, because that is unavoidable for any request that has to be routed to us.

Server logs

Our web server records standard access logs — IP address, timestamp, requested URL, referrer and user agent — which we use to operate and secure the site. The legal basis is our legitimate interest in keeping it available and free of abuse.

Who else sees it

There is no third-party form service. The demo form posts to our own endpoint, running on our own server, and the submission is stored there and emailed to us.

That leaves the providers we cannot operate without, named here rather than described as a category. Cloudflare provides DNS and sits in front of this site as a reverse proxy, so it routes every request and can see your IP address and what you submitted. Our hosting provider runs the server the site and the form endpoint execute on. Brevo relays the notification email the form sends us. Spacemail hosts the mailbox it arrives in.

Each one processes the data on our behalf under a data processing agreement and uses it for nothing else. Where a provider processes data outside the European Economic Area, that transfer relies on the European Commission's standard contractual clauses.

Every provider named here is ours, not yours. They exist to serve this website and our own business email. None of them sits anywhere near a NopsAI deployment: your installation talks only to the providers you configured it with, on your own accounts.

How long we keep it

We delete your demo request as soon as the demo process ends without an engagement. If it leads to a commercial agreement, retention follows that agreement instead.

Server logs are rotated on our hosting provider's standard schedule.

What the product collects

Nothing. NopsAI runs inside your infrastructure. Workflow definitions, credentials, run logs, approvals, knowledge documents and generated outputs stay in the environment you operate. We have no access to them, we cannot retrieve them, and they never reach us.

This is a property of the architecture, not a policy commitment we could quietly change.

When you ask us for support

Because NopsAI runs in your environment, we cannot look at a problem — you have to show it to us. Support runs over email or a scheduled call, and anything you attach along the way, such as log excerpts, configuration, screenshots or what is visible during a screen share, reaches us only because you sent it.

That material can contain personal data: a name in a commit, an approver's email address, an IP address in a log line. For it we act as your processor rather than as controller. We use it only to answer the request you raised, we do not copy it into any other system, and we delete it once the request is closed. The confidentiality and data-processing terms of your commercial agreement set out the detail.

The most effective control here is on your side: send the smallest excerpt that reproduces the problem, and redact what the answer does not need.

Your rights

You can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. Email us and we will action it without undue delay, and within one month at the latest.

If you believe we have handled your data improperly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the supervisory authority where you live or work.

Changes

If this notice changes materially we will update the date at the top of this page. Material changes affecting people who have already contacted us will be sent by email.