Node Labs
Menu
The suiteAI-ops auditSample reportPricingAboutSecurityGet the audit

Node Labs Privacy Policy

Effective date: October 13, 2026

This Privacy Policy explains what information Node Labs Ai LLC, doing business as Node Labs ("Company," "we," "us," or "our"), 2810 N Church St STE 90785, Wilmington, DE 19802, collects, how we use and share it, and the choices you have. Questions? Email legal@node-labs.ai.

This policy covers the "Services" as defined in our Terms of Service, including node-labs.ai and related sites, the AI-Ops Audit, Monthly Retainers, reports and other deliverables, software and automated tools (including AI agents), and any other products or services we offer under the Node Labs name or any other brand of Company or its Corporate Affiliates that links to this policy. "Corporate Affiliates" means entities that, now or in the future, directly or indirectly control, are controlled by, or are under common control with Company, including parent, subsidiary, and sibling companies. Capitalized terms not defined here have the meanings in our Terms of Service.

1. Our Core Commitments

  • You connect your own tools. Where the Services work with your accounts or software, you connect them yourself through Client-Owned Connections that you control and can revoke (see Section 4). We do not ask for, receive, or store your passwords or login credentials, and our personnel do not sign in to your accounts.
  • No training on your data. We do not use your Client Data, including in de-identified form, to train or fine-tune AI models, and we choose AI provider settings or plans that do not allow providers to train on it, unless we tell you otherwise in writing and you agree.
  • We do not sell your personal information or share it for cross-context behavioral advertising.
  • Feedback from your workspace is opt-in. We receive anonymized feedback derived from your use of the Services only if you opt in and approve it (see Section 5).

2. What We Collect

Information you give us

  • Contact and account details: name, email, company name, role, and billing address.
  • Intake and project information: your answers to our intake form, plus any documents, data, process descriptions, or tool lists you share with us.
  • Communications: emails and messages you send us, including audit Q&A.
  • Affiliate Partner information: if you join our affiliate program, your payout details and tax information as needed.

Information from Client-Owned Connections

  • If you connect a tool, the Services may retrieve data from it only within the permissions you grant (for example, read access to a workspace or a list of records), to perform the Services you request.

"Client Data" means the information in your intake submissions and project materials and the data made available through Client-Owned Connections.

Information collected automatically

  • Usage data: pages visited, links clicked, referring site, approximate location (from IP address), device and browser type, and how you interact with the Services.
  • Cookies and similar tools: see Section 9.

Payment information

Payments are handled by our payment processors (Whop). We do not store full card numbers. We receive limited details such as your name, email, purchase history, and the last four digits of your card.

3. How We Use Information

We use information to:

  • Provide, operate, and support the Services, including preparing your audit report and performing retainer work.
  • Process payments, refunds, chargebacks, and Affiliate Partner commissions.
  • Communicate with you about orders, deliverables, support, and changes to our terms or policies.
  • Secure the Services, prevent fraud and abuse, and debug and fix problems.
  • Maintain and improve the Services and develop new products and features, using information other than Client Data, or using Client Data only in the aggregated or de-identified forms described in Section 6 or through opt-in feedback under Section 5.
  • Send marketing emails if you opt in or where the law allows. You can unsubscribe at any time.
  • Comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims, including enforcing our Terms.

4. Client-Owned Connections and AI Processing

  • How connections work. You authorize each connection yourself, using methods you control (such as OAuth or API keys that you create and scope). You choose the permissions, and you can revoke a connection at any time in the connected tool or by contacting us. When you revoke it, the Services stop retrieving new data through it.
  • No operator access. Our personnel do not request, receive, or store your passwords or login credentials, and do not sign in to your accounts. Any access by our automated tools takes place only through connections you establish and only within the permissions you grant. Authorization tokens issued to the Services are stored using encryption and used only to perform the Services you request.
  • AI processing. We use third-party AI tools to help analyze Client Data and draft deliverables. A person on our team reviews every audit report before it is delivered.
  • Confidential use. We treat Client Data as confidential. We use it only to provide, secure, and support the Services for you, and we share it only as described in Section 7.
  • Google user data. If the Services access Google user data through Google APIs, our use and transfer of that data complies with the Google API Services User Data Policy, including the Limited Use requirements.
  • Sensitive data. Please do not send or connect sources containing sensitive personal data (such as health information, financial account numbers, or government ID numbers) unless we specifically agree in writing on how to handle it.

5. Opt-In Anonymized Feedback

The Services may offer an option to share anonymized feedback derived from your use, such as which workflows were helpful or where a recommendation fell short. This feedback is off by default. We receive it only if (a) the account owner opts in, and (b) the account owner reviews and approves each feedback item (or category of items, if you choose that setting) before it is shared with us. Before we receive it, feedback is stripped of names, contact details, credentials, and other information that identifies you, your company, or any individual. You can withdraw your opt-in at any time, and withdrawal stops future sharing. We use approved feedback to improve the Services and develop new features, subject to the no-training commitment in Section 1.

6. De-identified and Aggregated Data

We may create de-identified or aggregated information from the information we collect, such as statistics about website traffic, feature usage, or industry trends (for example, "most clients use 6–10 SaaS tools"). De-identified or aggregated information does not reasonably identify you, your company, or any individual. When we create or use it, we (a) take reasonable measures to ensure it cannot be associated with an individual or business, (b) publicly commit, through this policy, to maintain and use it only in de-identified form and not to attempt to re-identify it, and (c) contractually require any recipient to do the same. We may use and disclose de-identified or aggregated information for any lawful purpose, including improving the Services, developing new products, benchmarking, research, and publishing industry insights, except that we do not use Client Data, including in de-identified form, to train or fine-tune AI models.

7. How We Share Information

We share information only as follows:

  • Corporate Affiliates. With our Corporate Affiliates, to help provide, operate, secure, and support the Services, for internal administration, and for the other purposes in this policy. Corporate Affiliates must handle the information consistently with this policy.
  • Service providers (subprocessors). With vendors that process information on our behalf, under contracts that limit their use of it to providing services to us:
    • AI model providers for analysis and drafting, on settings that do not allow training on Client Data.
    • Payment processing and checkout: Whop.
    • Email and documents: Google (Google Workspace).
    • Website hosting: Vercel. DNS and network: Cloudflare.
    • Independent contractors who help us deliver the Services, under confidentiality obligations.
  • Affiliate Partners who referred you. Limited information needed to credit the referral (for example, that a purchase occurred). We do not share Client Data with Affiliate Partners. "Affiliate Partners" are independent participants in our referral program and are not Corporate Affiliates.
  • Corporate transactions. With actual or prospective acquirers, investors, lenders, successors, or their advisers in connection with any merger, acquisition, financing, reorganization, sale of all or part of our business or assets, bankruptcy, or similar transaction, including during due diligence, subject to confidentiality obligations. If a transaction occurs, the successor may continue to use the information as described in this policy, and we will notify you of any material change in how it is handled.
  • Legal and safety. When we believe in good faith that disclosure is required by law or legal process, or necessary to protect the rights, property, or safety of you, the Company, its Corporate Affiliates, our users, or the public, including to detect and prevent fraud or security issues and to enforce our Terms.
  • With your direction or consent. When you ask us to, or otherwise with your consent.
  • De-identified or aggregated information as described in Section 6.

A current list of subprocessors is available on request at legal@node-labs.ai.

8. How Long We Keep Information

  • Client Data: kept for the length of your engagement and for 90 days after final delivery, then deleted or de-identified, unless you ask us to delete it sooner or we must keep it by law. Revoking a Client-Owned Connection stops new retrieval; data already retrieved follows this schedule.
  • Billing and tax records: kept as long as required by law (typically up to 7 years).
  • Other information: kept as long as needed for the purposes in this policy, including resolving disputes and enforcing our agreements.
  • De-identified or aggregated information may be kept indefinitely.

9. Cookies and Analytics

We use cookies and similar technologies to keep the site working, remember preferences, measure traffic, and track affiliate referrals. You can block or delete cookies in your browser settings. Some features (such as affiliate tracking) may not work without them. Where required by law, we will ask for your consent first. We honor Global Privacy Control (GPC) signals as an opt-out where required.

10. Your Privacy Rights

Depending on where you live (for example, California, Virginia, Colorado, Connecticut, Texas, Florida, and other US states), you may have the right to:

  • Know and access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your information.
  • Get a copy in a portable format.
  • Opt out of sale, sharing for targeted advertising, or profiling. We do not sell or share personal information this way.
  • Not be discriminated against for using these rights.

To make a request, email legal@node-labs.ai. We will verify your identity before responding and will reply within the time the law requires (usually 45 days). You may use an authorized agent. If we deny your request, you can appeal by replying to our decision.

California residents: In the past 12 months we collected the categories in Section 2 (identifiers, commercial information, internet or other electronic network activity, and professional or employment-related information) for the purposes in Section 3, and disclosed them for business purposes to the categories of recipients in Section 7. We have not sold or shared personal information, and we do not knowingly collect information from anyone under 16.

11. Security

We use reasonable safeguards, including encryption in transit, encrypted storage of authorization tokens, access controls, and limiting access to people who need it. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

12. Children

Our Services are for businesses and are not directed to children under 16. We do not knowingly collect their information.

13. International Users

We are based in the United States, and your information is processed in the US. By using the Services, you understand your information will be transferred to and processed in the US.

14. Changes to This Policy

We may update this policy. We will post the new version here with a new effective date and notify you by email of material changes before they take effect. We will not make a material change to how we use personal information already collected without providing notice and, where required by law, obtaining your consent.

15. Contact

Node Labs Ai LLC
2810 N Church St STE 90785, Wilmington, DE 19802
legal@node-labs.ai