Privacy Policy

Effective Date: March 16, 2026

NO HUMAN NEARBY ("we," "us," or "our") operates the COVENANT portfolio covenant monitoring platform. This Privacy Policy explains how we collect, use, and protect information when you use our Service.

1. Information We Collect

1.1 Account Information

When you sign up, we collect:

• Email address (via Google OAuth)
• Name (as provided by Google)
• Profile picture (optional, from Google)

1.2 Documents You Upload

When you use our Service, you may upload financial statements, loan agreements, covenant configurations, portfolio company data, and financial metrics for covenant monitoring and compliance analysis. We process these documents solely to provide our analysis service.

1.3 Analysis Metadata

We store metadata about your analyses, including:

• Filename (not the full document content)
• Covenant compliance scores and breach indicators
• Timestamps of when analyses were performed

1.4 Usage Information

We collect standard usage data including IP address, browser type, pages visited, and time spent on the Service.

2. How We Use Your Information

We use your information to:

• Provide and improve our covenant monitoring and compliance analysis service
• Authenticate your account and maintain security
• Track your usage against your plan limits
• Communicate important service updates
• Respond to support requests

3. Legal Basis for Processing (GDPR Article 6)

We process your data under the following legal bases:

• Contract Performance: Processing necessary to provide the service you signed up for
• Legitimate Interest: Security, fraud prevention, and service improvement
• Consent: Where required by applicable law

4. Document Processing & Security

Security measures include:

• TLS encryption in transit
• Secure server infrastructure
• Row-level database security
• Access limited to authenticated users only

5. Data Retention

We retain your data as follows:

• Uploaded Documents: Deleted within 24 hours after analysis is complete
• Analysis Results: Retained for your account history until you request deletion
• Account Information: Retained while your account is active

6. Data Deletion Rights (GDPR Article 17)

You have the right to request deletion of all your personal data and analysis results.

Use the "Delete My Data" option in your account settings, or contact us at privacy@nohumannearby.com.

Upon deletion request, all analysis history, playbooks, and associated data will be permanently removed within 30 days.

Source documents uploaded for analysis are automatically deleted within 24 hours of processing.

7. Data Portability (GDPR Article 20)

You have the right to receive your data in a structured, commonly used, machine-readable format.

Use the "Export My Data" option to download all your data as JSON.

8. Your Rights (GDPR/CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of processing
• Opt-Out of Sale: We do NOT sell your personal data

We will respond to data rights requests within 30 days. To exercise any of these rights, contact us at privacy@nohumannearby.com.

9. Subprocessors

We use the following third-party subprocessors:

• Stripe (payment processing — USA)
• Neon (database hosting — USA)
• Cloudflare (CDN/tunnel — USA)
• Google (OAuth authentication — USA)

No AI processing subprocessors — all AI analysis is performed locally on our dedicated hardware.

10. Do Not Track

We respect Do Not Track (DNT) browser signals. When DNT is enabled, we limit our data collection to what is strictly necessary for the Service to function.

11. Children's Privacy

Our Service is not directed at individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

12. International Data Transfers

Your data is processed in the United States. By using our Service, you consent to the transfer and processing of your data in the United States.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.