Privacy Policy

Yavi® AI Platform Privacy Notice

We, Nimbusnext Inc. ("we", "us", "our", "Company", "Nimbusnext") have developed a proprietary platform called ‘Yavi®’ The platform is also showcased on the website for yavi.ai (the platform and the website are hereinafter, collectively referred to as the "Platform"/ "Software"/ "Yavi®"). Yavi® is a no-code platform designed to help enterprises and AI professionals rapidly build RAG-based Generative AI applications. It simplifies data ingestion, preprocessing, and fine-tuning for over 50 data sources, enabling seamless integration with leading LLMs and databases. With built-in intelligence and step-by-step guidance, Yavi® empowers data scientists and engineers to accelerate development, improve precision, and deploy AI applications faster. Our Platform offers out-of-the-box business solutions, customizable templates, and AI widgets, helping businesses unlock the value of their data while driving innovation. Scalable, secure, and powered by Microsoft Azure, Yavi® is the ultimate tool for scaling AI adoption with ease. The Company offers this Software to its Customers on a "software as a service" ("SaaS") basis or the Software can also be deployed on-premises and cloud platforms of customer choice. (collectively referred to as "Services").

We respect data privacy and are committed to protecting personal data processed on this Platform. This Privacy Notice (“Privacy Notice”) sets forth how we collect, use and protect the personal data collected on this Platform.

Unless otherwise set out below, each capitalized term in this Privacy Notice shall have the meaning as set out in the terms specifically accepted for use of the Platform. In order to use the Services, it shall be your responsibility to comply with both this Privacy Notice and any agreements. If the Privacy Notice is inconsistent with any provision contained in the specific agreements, the Company shall determine, in its sole and absolute discretion, which of the provisions shall control any such inconsistency or conflict.

PLEASE READ THIS PRIVACY NOTICE CAREFULLY. BY CLICKING ON THE CONSENT CHECK BOX, AND BY PROVIDING US WITH PERSONAL DATA, YOU CONSENT TO OUR USE OF YOUR PERSONAL DATA IN ACCORDANCE WITH THE TERMS OF THIS PRIVACY NOTICE. IF YOU DO NOT AGREE TO THIS PRIVACY NOTICE, YOU MAY WITHDRAW YOUR CONSENT OR ALTERNATIVELY CHOOSE NOT TO PROVIDE YOUR PERSONAL DATA ON THE PLATFORM.

IF YOU ARE ACCESSING THE PLATFORM ON BEHALF OF A THIRD PARTY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH THIRD PARTY TO THE TERMS AND CONDITIONS OF THIS PRIVACY NOTICE AND, IN SUCH AN EVENT YOUR USE OF THE PLATFORM SHALL REFER TO USE BY SUCH THIRD PARTY. IF YOU DO NOT HAVE SUCH AUTHORITY (TO PROVIDE ANY PERSONAL DATA OF A THIRD PARTY) OR DO NOT AGREE TO THE TERMS OF THIS PRIVACY NOTICE, THEN YOU SHOULD REFRAIN FROM USING THE PLATFORM.

This Privacy Notice is an electronic record in the form of an electronic document construed in accordance with data protection laws of the applicable jurisdictions.

1. Definitions

“User(s)” “you”, “your” shall mean individuals that visit/use/access the Platform.
“Customer” shall mean a business entity that has availed or subscribed to the Platform and/or the Services.
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.
“Processor” means a natural or legal person, public authority, agency or other body that processes Personal Data on behalf of the Controller.
“Processing” in relation to Personal Data, means a wholly or partly automated operation or set of operations performed on Personal Data and includes operations such as collection, recording, organization, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.
“Personal Data” means any data about an individual who is identifiable by or in relation to such data. (E.g. the user’s first name, last name, mobile number, residential address, email address, company email, company name and designation.)
“Customer Data” means and includes any data or information uploaded/ ingested by the Customer onto the Platform/ Software and may include Personal Data. The Customer is entirely responsible for uploading data on the Platform and Nimbusnext has no control over such data. Customer Data is the data uploaded by the Customer on the Platform for availing Services and various features related to data pre-processing chunking, embedding, or in general for building AI applications and may include Personal Data as a subset.

2. What Personal Data is Collected by Us?

We may receive your Personal Data in the following ways:

Website Data: When you visit our website and enquire about the Platform, we may collect Personal Data including but not limited to name, company name, job title and email addresses (or other contact details that you may provide) when you contact us or request us for a demo of the Platform.
User Accounts on the Platform: When you create a user account to use our Platform, avail the Services, and use the Platform workspace, we may receive your Personal Data including but not limited to your name, email address, phone number, company name, and designation.
Online Identifiers and Log Data: When you use or access the Platform, we may collect your IP address, operating system, browser type, web log data, referring and exit pages, platform type, number of clicks, domain names, landing pages, pages and content viewed and the order of those pages, the date and time you used our Services, the frequency of your use of our Services, error logs, etc.
Payment Information: You may elect to pay for the Services through our Platform, we may collect certain information such as name, phone number, billing address, tax information and email address to process your request. You will be required to provide certain payment information directly to our payment processing partners, including but not limited to your name, credit/debit card information or other payment-related details. We do not access, store or collect your credit/debit card information.
Communications: When you communicate with us through email, messages, chatbot or any other means, we may receive your Personal Data, including but not limited to your name, email address, number and any other information conveyed during communication.

We may receive your Personal Data or Customer Data from our Customer/s, in which case, we will act as a Processor and the Customer is the Controller. We process Personal Data only in accordance with the instructions of the Customer.

For Personal Data collected on behalf of the Customer please refer to Clause 3 of this Privacy Notice.

What Personal Data do we Process on Behalf of the Customer?

This section concerns the Personal Data of the User collected by the Customer, and such collection may be facilitated by us.

The Company as a Data Processor: The Customer sets the purpose and means of processing Personal Data or Customer Data. We process such Personal Data or Subscriber Data only on behalf of and on the instructions of the Customer and for the purpose of rendering our Services to the Customer.
Customer Privacy Notice: If you are a User of the Platform and your Personal Data was shared with us by the Customer, the Privacy Notice of the Customer, on whose behalf we collect and process the Personal Data, will apply. This means that any enquiry, request, objection or complaint that you as a User may have in connection with the collection and/or processing of Personal Data that forms part of your Platform usage should be addressed to and resolved by the Customer.
Customer Data: The Platform provides the Customer with various features related to data processing (e.g. configurations and controls for quality, cleaning, filtering, vectorization, etc.) of Customer Data uploaded by the Customer on the Platform. The Customer is entirely responsible for the decision-making around the configurations, selection of parameters and controls for data processing activities. The Company has no access or visibility of the Customer Data uploaded by the Customer. Therefore, the Customer is solely responsible for determining the purpose, means and legality of processing Customer Data.
Sources of Customer Data: The Platform provides the Customer with the functionality to upload Customer Data through various sources including but not limited to:
- URL of their owned website or third-party website that may contain Personal Data.
- Connectors for Customer’s Customer Relationship Management (CRM) or Enterprise Resource Planning (ERP) systems.
- Connectors to Customer’s ticketing or customer support systems.
All the above examples may contain the Personal Data of various individuals, the Customer is solely responsible for determining the legality of processing such Customer Data.
Personal Data and Customer Responsibility: In the event that Customer Data contains any Personal Data, the Customer is a Controller, and the Company is a Processor with respect to Customer Data uploaded by the Customer. The Customer has complete control over the Personal Data and the Company processes the Personal Data on the Customer’s behalf. Further, the Personal Data collected on behalf of the Customer may vary based on the specific requirements, and the Customer is responsible for providing adequate privacy notices and data protection compliance, as applicable.

3. Cookies/ Cookie Policy

We use cookies and/or similar in-house and third-party tracking tools to track user traffic patterns. Tracking tools are also used are beacons, tags and scripts to collect and track information and to improve and analyze our Platform. You may choose to disable cookies through your browser settings. We also provide a cookie consent banner detailing the options and cookies on our Platform.

We may use the Personal Data received through cookies to make your interaction with us faster and more secure.

They may be used for the following purposes:

Preferences: Cookies allow the website to remember information that changes the way the site behaves or looks, such as your preferred language or the region you are in. Remembering your preferences enables us to personalize and display advertisements and other content for you.
Security/Optimization: Cookies allow us to maintain security by authenticating users, preventing fraudulent use of login credentials and protecting user data from unauthorized parties. We may use certain types of cookies to allow us to block many types of attacks, such as attempts to steal content from the forms present on the Website.
Processing: Cookies enable the website to work efficiently. Basis such cookies, we are able to deliver services that a website visitor expects, like navigating around web pages or accessing secure areas of the Website.
Advertising: We use cookies to make advertising more engaging to our users. Some common applications of cookies are made to select advertising based on what’s relevant to you, to improve reporting on campaign performance and to avoid showing ads you would have already seen. Cookies capture information about how you interact with the website, which includes the pages that you visit most.
Communication: We may use information collected via cookies to communicate with you, send newsletters, seek your opinion/feedback; provide you with services and promotional materials.
Analytics and Research: We may use cookies to better understand how people use our products/services so that we can improve them.

4. Children’s Privacy

We do not collect Personal Data from children under the age of 18 years without the prior, verifiable consent of his or her legal representative. If the legal representative of the child discovers that the child has provided us with Personal Data, we request the legal representative of the child to contact us at privacy@nimbusnext.com to have the Personal Data deleted.

Accuracy and Legality of Personal Data and Customer Data

The User undertakes that they shall be solely responsible for the accuracy, correctness, or truthfulness of the Personal Data shared with us whether of its own or any third party. In the event the User is sharing any Personal Data on behalf of a third person, the User represents and warrants that they have the necessary authority to upload such Personal Data on the Platform and has obtained written consent from such third party; and the Company shall not be responsible for verifying the same. The User understands and acknowledges that such Personal Data shall be subject to the terms and conditions of this Privacy Notice.

The User undertakes and warrants that any Personal Data contained in the Customer Data is processed in compliance with applicable data protection laws.

5. How do We Use Personal Data?

We use the Personal Data for the following purposes:

To inform you about our Services and to respond to your requests.
for the creation or development of business intelligence or data analytics in relation to the services provided by us (for this purpose we may share Personal Data with certain software or tools available online).
To provide you with a better experience when you access our Platform and to improve the Services.
To maintain and manage our Platform.
To manage our relationship with you.
Inform you about new product updates, releases or licensing and pricing plans periodically.
To provide service and transactional updates.
For internal record keeping.
To comply with legal or statutory obligations.

(Disclaimer: The Company will have access to User Personal Data strictly required for the provision of Services. The Company will not have access to Customer Data and such data will be used by the Customer solely for its own purposes.)

6. Disclosures

We do not sell, rent, share, distribute, lease or otherwise provide your Personal Data to third parties, without your prior consent. In some scenarios, we may disclose your Personal Data in the following cases:

Affiliates: We may provide your Personal Data to our affiliates and subsidiaries to enable them to improve the Services, provide feedback and respond to their queries.
Service Providers: We may share your Personal Data with the service providers who work with us in connection with operating the Platform and/or providing the Services. All such service providers are subject to stringent confidentiality restrictions consistent with this Privacy Notice.
Platform Integrations: The Platform offers various third-party integrations with Large Language Models (LLMs), Small Language Models (SLMs), vector databases, graph databases, etc. The Customer has the option and visibility to choose the type of Platform integrations, and such integrations may take place in third-party environments depending on customer preferences. The Company may share additional details of such third-party integrations and data location on request from the Customer.
Merger or Acquisition: We may transfer your Personal Data if we are acquired by another entity, or if we merge with another company or transfer a part of our business, including the Platform, to a third party. Any such third party or resultant entity that receives your Personal Data shall have the right to continue to use your Personal Data in line with the purposes set out herein.
Safety, Legal and Regulatory Authorities: We may disclose your Personal Data if we believe that we are required to do so: (a) by law; (b) to comply with legal process or governmental requests; (c) to enforce our agreements; (d) to protect our operations; (d) to protect the rights, privacy, safety or property of the Company, you or others; (e) to protect our reputation and (f) to permit us to pursue available remedies or limit the damages that we may sustain.

7. Data Retention

We will retain the User’s Personal Data as long as it is required to be retained for the purpose of provision of Services on our Platform. We may also retain and use the User’s Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

The Customer is responsible for determining the retention timelines for Customer Data. The Company ceases to retain all Customer Data upon termination of its Services.

8. How We Secure Your Personal Data?

We are committed to maintaining information security and protecting the Platform from potential breaches. Although we provide appropriate firewalls and protection, we cannot warrant the security of Personal Data transmitted as these systems are not hackproof. Data pilferage due to unauthorized hacking, virus attacks, and technical issues is possible, and we will take necessary measures to mitigate such events.

The User shall be solely responsible for maintaining the confidentiality and security of their account credentials, including passwords. Any activity performed through the User’s account shall be deemed to have been authorized by the User. The Company shall not be liable for any loss or damage arising from the User’s failure to secure their password or account credentials. The User agrees to notify the Company immediately of any unauthorized access or use of their account.

You agree to immediately notify the Company in writing by email to privacy@nimbusnext.com of any unauthorized use of your account or any other breach of security.

9. Your Privacy Rights

You have the right to access Personal Data in our possession, right to have us rectify or modify any such Personal Data, right to have us erase/delete your Personal Data, right to restrict us from processing such Personal Data, right to object to our use of Personal Data, withdraw consent at any time where we are relying on consent to process Personal Data.

Depending on the nature of the request, we may ask you to complete a Personal Data request form or seek certain details to verify the request. All requests for Personal Data will be handled within a reasonable period. If you would like to exercise ANY of these rights, please contact us at privacy@nimbusnext.com.

You have the right to approach the relevant data protection authority after you have exhausted your right to approach the Company to have your grievance/ concern addressed.

10. Information For EU And UK Visitors

Residents of the European Union (“EU”) and United Kingdom (“UK”) should note that this Privacy Notice has been updated in accordance with the requirements of the EU General Data Protection Regulation (“GDPR”) and the UK GDPR, the United Kingdom Data Protection Act 2018, the Privacy and Electronic Communications Regulations, and any regulation superseding any of the foregoing (“UK Privacy Laws”). As per the provisions of the GDPR and UK Privacy Laws, we shall be considered the Processors of the Personal Data and Customer Data processed as a result of your use/ access of the Services.

Legal Basis (for EU residents and UK residents): We will not process your Personal Data without a lawful basis to do so. We will process your Personal Data only on the legal basis of consent, contract, or on the basis of our legitimate interests, provided that such interests are not overridden by your privacy rights and interests.

Transfer of your Personal Data across borders (for EU Residents): The Personal Data we collect (of EU and UK residents) is stored on servers located globally. Personal Data might be processed outside the EU/UK. We collect and transfer Personal Data outside the EU and UK per the provisions of the GDPR and UK Privacy Laws. If you have questions, please contact privacy@nimbusnext.com.

Your Rights (For EU and UK Residents):

You have the right to request us:

to let you know what Personal Data belonging to you, we hold in our possession,
withdraw consent at any time where we are relying on consent to process your Personal Data,
right to have us rectify or modify your Personal Data,
right to have us erase/delete your Personal Data,
right to restrict us from processing your Personal Data,
right to object to our use of your Personal Data,
right not to be subject to a decision based solely on automated processing, including profiling, and
you also have the right to lodge a complaint with a data protection authority/supervisory authority.

UK residents have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance. We may need to request specific information from you to help us confirm your identity or also contact you for further information in relation to your request. If you would like to exercise ANY of these rights, please contact privacy@nimbusnext.com.

Governing Laws: For any EU and UK residents, this Privacy Notice shall be governed respectively by the provisions of the GDPR and UK Privacy Laws.

11. California Privacy Rights

In addition to disclosures made elsewhere in this Privacy Notice, certain states in the United States of America require us to disclose information related to our privacy practices. This section of our Privacy Notice (“California Privacy Notice”) serves to comply with the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”) (collectively, “CCPA”), and any capitalized terms defined in the CCPA have the same meaning when used in this Section.

The CCPA provides consumers with specific rights regarding their Personal Information. This section describes those state-specific rights and explains how to exercise those rights. The section will not apply if we do not collect Personal Information about you or if all of the information, we collect is exempt from the law.

For clarity, “Personal Information” shall mean information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information and Personal Data shall have the same meaning for the purpose of this Privacy Notice.

The California rights set forth below apply to all visitors, users, and others regardless of place of residence.

Right to Know and Data Portability/Right of Access
Consumers have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months (the “Right to Know”).
Right to Delete
Consumers have the right to request that we delete any of the Personal Information that you have provided or that we have collected or obtained about you, subject to certain exceptions. Once we receive your request and confirm your identity, we will review your request to check if any exception allows/requires us to retain the information that applies. We will delete from our records or deidentify Personal Information not subject to a lawful exception and will direct our service providers to take similar action.
Right to Correct Inaccurate Information
Consumers have the right to request correction of any inaccurate Personal Information that we maintain about you, taking into account the nature of the Personal Information and the purposes of the Personal Information processing. We will use commercially reasonable efforts to correct this information.
Right to Limit
Consumers have the right to request to limit our use of sensitive Personal Information unless our use of sensitive Personal Information falls into one of limited business purposes. We do not collect or process sensitive Personal Information for the purpose of inferring characteristics about a consumer.
Right to Opt-Out of Sale or Sharing
Consumers have the right to opt-out of certain sales or sharing or the right to opt-in to sales or sharing if the Consumer is a minor or if the information at issue is Sensitive Personal Information.
This includes the right to opt out of Personal Information processing for targeted advertising, personal data sales, or advertising for cross-context behavioral advertising purposes. It also includes the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We only engage in cross-context behavioral or targeted advertising through cookies.
We do not otherwise sell or share Personal Information for advertising purposes. We also do not engage in profiling in the furtherance of decisions that produce legal or similarly significant effects. To opt out of sharing, we will rely on you to set your preferences regarding cookies and other tracking technology. To set your ‘Cookie Preferences’, click on the cookie settings link in your browser. To exercise the right to opt out, you (or your authorized representative) may also submit a request to us.
Once you make an opt-out request, we will wait at least 12 months before asking you to reauthorize Personal Information sharing.
You do not need to create an account with us to exercise your opt-out rights. We will only use the Personal Information provided in an opt-out request to review and comply with the request.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your state law privacy rights.

12. Choice and Opt-Out

We may send you communications including but not limited to (a) notices about your use of our Platform/Services, including those concerning violations of use, (b) updates, (c) promotional information regarding our services, and (d) newsletters. You may opt out of receiving promotional emails and newsletters from us by following the unsubscribe instructions provided in those emails. Alternatively, you can opt out, at any time, by emailing us at privacy@nimbusnext.com with your specific request.

13. Links to other websites/ platforms

Our Platform may contain links to other websites/platforms/applications of your interest. Please note that we do not have any control over such other websites/platforms/applications, and you will be accessing these websites/ platforms/applications at your own risk. Therefore, we cannot be responsible for the protection and privacy of any information that you provide whilst visiting such websites/platforms/applications and those are not governed by this Privacy Notice. You should exercise caution and look at the privacy notice applicable to such websites/ platforms/ applications.

14. Governing laws

This Privacy Notice shall in all respects be governed by and construed and enforced in accordance with the laws of the State of Delaware, USA.

15. Changes to this Privacy Notice

Please revisit this page periodically to remain aware of any changes to this Privacy Notice, which we may update from time to time. If we modify this Privacy Notice, we will make it available through the Platform and indicate the date of the latest revision. If such modifications materially alter your rights or obligations hereunder, we will make reasonable efforts to notify you of the change via email or through our Platform.

16. Contact us

If you have any questions/concerns/grievances regarding this Privacy Notice or wish to withdraw your consent in relation to the processing of your Personal Data you can reach out to our appointed grievance redressal officer at privacy@nimbusnext.com.

Details of Grievance redressal Officer: Mr. Swarraj Kulkarni
Address and Contact Details:
- US: 3495 US Highway 1, Ste. 34 #1187, Princeton, New Jersey 08540
- India: Unit No. 5C, The Pentagon, Near Satara Road Telephone Exchange, Shahu College Road, Parvati, Pune, Maharashtra – 411009