nondual

Privacy Policy

Last updated: July 2026

This policy describes what data Nondual Agents Pty Ltd collects, why, and what we do with it.

What we collect

  • Account data. Your email address and GitHub username when you sign in with GitHub OAuth.
  • API usage data. Timestamps, resolve counts, and which identifiers (email addresses) you resolve.
  • Interaction records. Summaries of interactions you record via the API — agent name, channel, timestamp, message summary, and next step.
  • Contact profiles. Data assembled about third-party contacts you resolve: name, role, employer, LinkedIn URL, and other profile fields from licensed providers and public sources.

Data sources for contact profiles

We use licensed data providers (business contact databases) and public web sources to enrich profiles. Every data field stores a source category label (e.g. “licensed”, “public”, “inferred”) and a confidence score. We do not scrape personal social media without a lawful basis.

How we use your data

  • To provide the Service: resolve contacts, store interaction history, and return context to your agents.
  • To operate and improve the Service: usage analytics, error monitoring, rate limiting.
  • We do not sell your data. We do not use your data to train AI models.

Data retention

Contact profiles are cached and refreshed periodically. Interaction records are stored until you delete your account or request deletion. Account data is deleted within 30 days of account closure.

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account and associated data by emailing hello@nondual.cloud. We will respond within 30 days.

Third parties

We share data with:

  • AWS. Hosting, storage and compute (us-west-2).
  • Licensed data providers. We send email addresses to resolve contact profiles. These providers have their own privacy policies.
  • We do not share data with advertisers or analytics platforms.

Security

Data is encrypted in transit (TLS) and at rest. API keys are stored hashed. We do not log request bodies containing personal data beyond what is needed for error diagnosis.

Children

The Service is not directed at children under 16. We do not knowingly collect data from children.

Changes

We will notify users of material changes by email or by posting a notice at nondual.cloud. Continued use after notice constitutes acceptance.

Contact

hello@nondual.cloud