Legal

Privacy Policy

Effective date: May 1, 2026  ·  Last updated: September 4, 2026

This Privacy Policy ("Policy") explains how Nell AI Labs LLC ("Nell AI Labs," "we," "us," or "our") collects, uses, discloses, and protects information when you visit https://trynellbuilder.com (the "Website"), interact with our products and services, communicate with us, or otherwise engage with Nell AI Labs LLC (collectively, the "Services"). This Policy applies to information about visitors, subscribers, applicants, partners, customers, and other individuals who interact with the Services.

Please read this Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the terms of this Policy, you should not use the Services.

1. Scope

This Policy applies to personal information processed by Nell AI Labs LLC in connection with the Services. It does not apply to information processed by third parties whose websites, products, or services we link to or integrate with, except as expressly stated herein.

2. Information We Collect

2.1 Information You Provide Directly

• Identity and contact data: name, email address, telephone number, organization, role or title, and similar information you submit through forms, applications, newsletter sign-ups, or correspondence.
• Application data: information you provide when applying for a role, partnership, or program, including resume, professional background, and links to external profiles.
• Communications: the contents of messages, attachments, and metadata associated with your communications with us.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, language preference, and time-zone setting.
• Usage data: pages and resources viewed, referring and exit pages, session duration, navigation paths, click events, and similar engagement metrics.
• Log data: server logs that record access to the Services, including timestamps and request metadata.

2.3 Information from Third Parties

We may receive information about you from third parties such as analytics providers, professional networks (e.g., LinkedIn) when you authenticate or engage with us through such platforms, and partners that introduce you to the Services. We use this information consistent with this Policy.

3. Cookies, Analytics, and Session Replay

We and our service providers use cookies, pixels, and similar technologies to operate the Services, remember your preferences, measure aggregate engagement, and improve performance. The categories include:

• Strictly necessary: required for core functionality and security.
• Performance and analytics: help us understand how the Services are used.
• Functional: remember your preferences and settings.

Most browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of the Services.

3.1 The tools we use

• Google Analytics 4 (Google LLC) - aggregate traffic and engagement measurement. We use Google Consent Mode, so no analytics or advertising storage is used before you have consented where consent is required.
• PostHog (PostHog, Inc., US cloud) - product analytics and session replay, used to understand which parts of the product people use and where they get stuck.
• rrweb - the open-source library that records a session replay in your browser. We load a pinned version with a subresource-integrity hash, so the browser refuses the file if its contents change.

3.2 What session replay does and does not capture

A session replay is a reconstruction of the pages you saw and the actions you took. It is not a video and it is not a recording of your screen or camera.

Everything you type is masked before it is recorded.

• Input masking is applied to every field type - startup ideas and descriptions, email addresses, profile details, survey answers, and payment-related fields. Their contents are replaced before the recording is created, so the text you typed is never transmitted.
• Payment card details are entered inside our payment provider’s own hosted fields. They are never accessible to our page and are additionally excluded from recording.
• Elements marked as private in our code, including areas that display content derived from your submissions, have their text masked in recordings.
• URLs that contain a survey, playbook, or completion token, or a submission identifier, are stripped of those values before any analytics event is sent.

3.3 Where this data goes, and for how long

Google and PostHog process this information as our service providers, under contract and for the purposes described above only. Both operate in the United States, so analytics and session-replay data about visitors outside the US is transferred there - see Section 9, International Data Transfers, for the safeguards that apply. Retention follows Section 7: we keep this information only as long as it is useful for the purpose it was collected for, and session recordings are retained on the shorter schedules those providers apply by default.

3.4 Your choices

If you are in the European Economic Area, the United Kingdom, Switzerland, or Brazil, analytics and session replay do not run until you accept them. A banner asks on your first visit and nothing is measured until you answer.

Elsewhere, analytics and session replay run by default and you can opt out at any time. Your choice is stored in your browser and takes effect immediately; opting out stops an in-progress recording.

Change your analytics choice - this reopens the consent banner.

4. How We Use Information

We use information for the following purposes:

• To operate, maintain, and secure the Services.
• To respond to inquiries and fulfill requests you make.
• To send newsletters and updates you have subscribed to (you may unsubscribe at any time).
• To evaluate role applications, partnership proposals, and engagement opportunities.
• To analyze usage trends and improve the Services.
• To prevent, detect, and respond to fraud, abuse, and security incidents.
• To comply with applicable law, regulations, and legal process.
• To enforce our terms, policies, and agreements.

5. Legal Bases for Processing

For individuals in the European Economic Area, the United Kingdom, and Switzerland, we process personal information on the following legal bases: (a) your consent; (b) performance of a contract with you; (c) compliance with our legal obligations; and (d) our legitimate interests, balanced against your rights and freedoms.

6. How We Share Information

We do not sell your personal information. We may share information in the following circumstances:

• Service providers: vendors that process information on our behalf to provide hosting, analytics, email delivery, customer support, and similar services, under contractual confidentiality and security obligations.
• Affiliates and portfolio companies: entities under common ownership or control with Nell AI Labs LLC, where appropriate to operate the Services.
• Legal and regulatory disclosures: where required to comply with law, legal process, or enforceable governmental request.
• Protection of rights: to protect the safety, rights, property, or security of Nell AI Labs LLC, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
• With your consent: for any other purpose disclosed at the time of collection or pursuant to your direction.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the nature and sensitivity of the information.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. No system, however, is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Nell AI Labs LLC is headquartered in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States and other jurisdictions where our service providers operate. Where required, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses.

10. Your Rights

Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you; (b) correct inaccurate information; (c) delete your information; (d) restrict or object to certain processing; (e) port your information to another controller; and (f) withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at vision@nellailabs.ai. We may need to verify your identity before responding. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction.

11. Region-Specific Disclosures

11.1 California (CCPA / CPRA)

California residents have rights to know, delete, correct, and limit the use of certain personal information, and to be free from discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law. To exercise California rights, contact us at the address below.

11.2 EEA, United Kingdom, and Switzerland

Individuals located in these jurisdictions have the rights described in Section 10 and may contact their local data protection authority. Nell AI Labs LLC acts as a data controller in respect of personal information collected through the Services unless otherwise specified.

12. Children's Privacy

The Services are not directed to children under 13 (or the equivalent minimum age in relevant jurisdictions), and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can delete it.

13. Do Not Track

Some browsers transmit "do not track" signals. Because there is no industry-standard interpretation of these signals, we do not currently respond to them. We will update this Policy if our practices change.

14. Third-Party Links

The Services may contain links to third-party websites, products, or services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing information.

15. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top of this Policy reflects the most recent revision. Material changes will be communicated through the Services or by other appropriate means. Your continued use of the Services after such notice constitutes acceptance of the updated Policy.

16. Contact Us

If you have questions or concerns about this Policy or our privacy practices, contact:

© 2026 Nell AI Labs LLC. All rights reserved.