Privacy Policy

1. Overview & Commitment

At LibNester, we believe that privacy is a fundamental right. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered platform, website, and related services (collectively, the "Service"). We are committed to transparency and responsible data handling.

LibNester operates as a data controller for personal information collected directly from you and as a data processor for content you generate or process through our AI tools. This policy applies to all users, including individual professionals, enterprise clients, and visitors to our website.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, organization name, and any other information you voluntarily provide. For enterprise clients, we may collect billing information and authorized user details.

Usage Data: We automatically collect certain information about your interaction with our Service, including IP addresses, browser type, device identifiers, access times, pages viewed, features used, and AI query logs. This helps us improve performance and security.

Content You Process: Any text, documents, images, or data you upload to LibNester for AI processing — including prompts, drafts, summaries, analyses, and generated outputs — is stored and processed according to your instructions and our security protocols.

Communication Data: When you contact our support team, participate in surveys, or communicate with us via email or phone, we retain those communications to assist you and improve our Service.

3. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

• Provide and maintain the Service: Process your AI requests, generate outputs, automate workflows, and deliver personalized assistance.
• Improve and optimize: Train and refine our AI models, analyze usage patterns, fix bugs, and enhance platform performance. Training uses aggregated and anonymized data whenever possible.
• Security and fraud prevention: Detect and prevent malicious activity, unauthorized access, and policy violations.
• Customer support: Respond to inquiries, troubleshoot issues, and provide technical assistance.
• Legal compliance: Comply with applicable laws, regulations, and enforceable government requests.

We do not sell your personal information to third parties. We do not use your private data for advertising purposes without explicit consent.

4. Legal Basis for Processing (GDPR Compliance)

For users located in the European Economic Area (EEA) or United Kingdom, we process your personal information based on the following legal grounds:

• Contractual necessity: Processing necessary to provide the Service you requested under our Terms of Use.
• Legitimate interests: Improving our platform, ensuring security, and preventing fraud.
• Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications).
• Legal obligation: Compliance with applicable laws and regulations.

5. Data Sharing & Disclosure

We do not share your personal information except in the following limited circumstances:

• Service providers: We engage trusted third-party vendors for cloud hosting, infrastructure, security monitoring, and customer support. These providers are bound by strict data protection agreements and may only process data for specified purposes.
• Legal requirements: We may disclose information if required by law, court order, or government regulation, or to protect the rights, property, or safety of LibNester, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: We may share information for other purposes with your explicit permission.

6. Data Retention

We retain your personal information and processed content for as long as your account is active or as needed to provide you with the Service. After account termination, we will delete or anonymize your data within 90 days, unless retention is required for legal compliance, fraud prevention, or dispute resolution.

You may request deletion of your account and associated data at any time by contacting our support team. Some aggregated, anonymized data may be retained indefinitely for analytical and model improvement purposes.

7. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Limit how we use your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain processing activities, including direct marketing.
• Withdraw consent: For processing based on consent, you may withdraw at any time.

To exercise any of these rights, please contact us at info@libnester.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, regular security audits, and continuous monitoring for vulnerabilities. However, no system is 100% secure. You are responsible for maintaining the security of your account credentials and for any content you choose to share.

9. International Data Transfers

LibNester operates globally. Your information may be transferred to and processed in countries outside your residence, including the United Kingdom and the European Economic Area. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data during such transfers.

10. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us immediately, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. Material changes will be notified via email or prominent notice on our platform. The "Last updated" date at the top of this policy indicates when changes were made. Your continued use of the Service after changes constitutes acceptance of the revised policy.