DrNathX AI (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, how we share it, and your rights under applicable data protection laws — including the Nigeria Data Protection Act (NDPA) 2023 and, where applicable, the EU General Data Protection Regulation (GDPR).
By using DrNathX AI (the “Service”), you consent to the practices described below.
1. Who We Are
DrNathX AI is operated from Benin City, Nigeria.
For privacy inquiries: nathaniel.ethe@descoem.edu.ng
2. Information We Collect
a) Information you provide:
- Name, email address, password (hashed)
- Payment details (processed by our payment providers; we do not store card numbers)
- Content you upload, prompts, and AI-generated outputs
- Profile information, preferences, and settings
- Communications you send us (support requests, feedback)
b) Information collected automatically:
- IP address, device type, browser, operating system
- Usage data (features used, time spent, actions taken)
- Cookies and similar tracking technologies
- Log files and error diagnostics
c) Information from third parties:
- Data from OAuth providers (e.g., Google) when you sign in
- Analytics providers
3. How We Use Your Information
We use your data to:
- Provide, operate, and maintain the Service
- Process transactions and manage subscriptions
- Send transactional emails (verification, receipts, password resets)
- Send marketing emails (only with consent — you can opt out anytime)
- Improve the Service and develop new features
- Train, evaluate, and improve our AI models using anonymized and aggregated data
- Detect fraud, abuse, and security incidents
- Comply with legal obligations
4. AI Training and Your Content
You retain ownership of content you create using DrNathX AI.
We use anonymized and aggregated inputs and outputs to train, evaluate, and improve our AI systems. This means:
- We may use excerpts of your prompts and generated content to make our AI better.
- Anonymization removes direct identifiers (name, email, account ID) before use in training.
- We do not sell your identifiable personal data or content to third parties.
- Where applicable law requires, you may request to opt out of AI training use by emailing us.
5. Legal Bases for Processing (for GDPR-covered users)
We process personal data based on:
- Contract — to provide the Service you signed up for
- Consent — for marketing communications and certain optional features
- Legitimate interests — improving the Service, security, fraud prevention
- Legal obligation — compliance with applicable laws
6. Sharing Your Information
We share personal data only with:
- Service providers who help us operate (hosting, email delivery, payment processing, analytics, AI infrastructure). These providers are contractually bound to protect your data.
- Payment processors (e.g., Stripe, Paystack) to complete transactions
- Legal authorities if required by law or to protect rights and safety
- Successors in the event of a merger, acquisition, or asset sale (with notice to you)
We do not sell your personal data.
7. International Data Transfers
Your data may be processed in countries outside Nigeria, including the United States and the European Union. Where required, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
8. Data Retention
- Account data is retained while your account is active and for a reasonable period after closure for legal and operational purposes.
- Anonymized data used for AI improvement may be retained indefinitely.
- Payment records are retained as required by tax and financial law.
9. Your Rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability (receive your data in machine-readable form)
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority (e.g., the Nigeria Data Protection Commission)
To exercise any of these rights, email nathaniel.ethe@descoem.edu.ng. We will respond within 30 days.
10. Security
We use industry-standard security measures including:
- Encryption in transit (HTTPS/TLS) and at rest
- Row-level security on our database
- Hashed passwords
- Role-based access controls
- Audit logging
No system is 100% secure. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by law.
11. Cookies
We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze usage
- Deliver relevant content
You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.
12. Children’s Privacy
DrNathX AI is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we learn we have collected data from a minor, we will delete it promptly.
13. Third-Party Links
The Service may contain links to third-party sites. We are not responsible for their privacy practices. Please review their policies before providing any personal data.
14. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice.
15. Contact Us
For any privacy-related questions, requests, or complaints:
DrNathX AI
Benin City, Nigeria
Email: nathaniel.ethe@descoem.edu.ng