Privacy Policy.

1. Who we are

Nalo is a readiness-intelligence product operated by DarkoLab AI Inc., a company incorporated in Canada. For any privacy question, contact us at hello@asknalo.com.

2. Information we collect

• Account information. When you create an account, our authentication provider collects your name, email address, and login credentials. We do not store your password.
• Content you provide. The materials you submit for analysis — job descriptions, résumés, cover letters, interview notes, recruiter emails, and similar — and any files you upload.
• Outcome information. If you choose to report results (for example, whether you got an interview, completed a take-home, or received an offer), we collect what you tell us. This is optional.
• Payment information. Payments are processed by our payment provider. We receive confirmation of your purchase and limited billing details, but we never receive or store your full card number.
• Usage information. Basic technical and analytics data such as pages viewed, features used, device and browser type, and approximate location derived from your IP address.

3. How we use your information

We use your information to: provide and operate the Service; generate your readiness analyses and reports; process payments and manage your subscription or credits; calibrate and improve the accuracy of our scoring (using aggregated and de-identified outcome data); communicate with you about your account and the Service; provide support; detect and prevent fraud and abuse; and comply with legal obligations.

4. How your content is processed by AI

To generate your readiness analysis, the content you submit is sent to third-party AI model providers (currently Anthropic and OpenAI) that process it on our behalf to produce your results. These providers act as our service providers and are contractually restricted from using your content to train their models other than as permitted under their enterprise/API terms. We send only what is needed to produce your analysis.

5. Subprocessors and service providers

We rely on a small set of trusted providers to run Nalo, including: an authentication provider (Clerk), a payment processor (Stripe), cloud hosting and database providers (Vercel and Railway), file storage (Cloudflare R2), AI model providers (Anthropic and OpenAI), email delivery (Resend), and product analytics and error monitoring (PostHog and Sentry). Each processes data only as needed to provide its service to us.

6. How we share information

We do not sell your personal information. We share information only with the service providers listed above, where required by law or to protect our legal rights, and in connection with a business transfer (such as a merger or acquisition), subject to this policy. Aggregated or de-identified data that cannot reasonably identify you may be used to improve and describe the Service.

7. Data retention

We keep your account and content for as long as your account is active. You can delete individual reports or your entire account at any time from your account settings; when you delete your account, we delete or de-identify your personal content within a reasonable period, except where we must retain certain records (for example, transaction records) to meet legal or accounting obligations.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in your account settings, or by emailing hello@asknalo.com. We will respond within the timeframe required by applicable law. Canadian users have rights under PIPEDA; users in the EEA/UK and California have rights under the GDPR/UK GDPR and the CCPA/CPRA respectively.

9. Security

We use industry-standard measures to protect your information, including encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to protect your data and to notify you and the relevant authorities of any breach as required by law.

10. Children

Nalo is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a minor has provided us information, contact hello@asknalo.com and we will delete it.

11. International transfers

We are based in Canada and use providers that may process data in Canada, the United States, and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date; significant changes will be communicated to you.

13. Contact

Questions or requests: hello@asknalo.com, DarkoLab AI Inc., Canada.