Last updated: September 29, 2026
Account data (when you sign up):
Technical usage data:
❌ We do not store the text of agent_input, user_input or any other dialogue field sent in validation calls.
❌ We do not log the content of your end-users' conversations.
❌ We do not use submitted data to train models or improve services beyond immediate call processing.
Dialogues sent to the API are processed in memory and discarded immediately after the response is returned.
NaLU AI uses third-party language model providers for semantic processing. All providers are contracted with data retention disabled — data sent is not stored, used for training, or shared by the provider.
Data sent to these providers is exclusively the dialogue content required for validation. No identifying information about your end users is transmitted.
Payments are processed by Stripe, PCI DSS Level 1 certified. NaLU AI does not store, process or transmit credit card data. When subscribing, you are redirected to Stripe's secure environment.
Login via Google, GitHub or Microsoft provides only your name and email. We do not request additional permissions such as access to emails, calendar or other account data.
Account data is retained while the account is active. To request deletion:
After the request, all account data is removed within 30 days. Anonymized technical logs may be retained for up to 90 days for security requirements.
We do not sell or share your data with third parties for commercial purposes. Data is shared only with the service providers described in this policy (Stripe, AI providers) strictly for service execution.