nilGPT - Private LLM Chat

nilGPT is a dApp that allows you to interact with various large language models (LLMs) stored in a trusted execution environment (TEE) through a unified interface. This Privacy Policy explains how we collect, use, and when we may disclose your personal data when you use our website, applications, and other places where nilGPT acts as a data controller.

1. Collection of Personal Data

We may collect the following categories of personal data depending on how you use our Services:

1.1. Personal data you provide to us directly

Account Information: When you use our Services, nilGPT collects identifiers, including your name and email address, and may also collect or generate identifiers (e.g., User123).
Payment Information: We (via our third-party partners, such as Stripe) collect your payment information if you purchase our Services.
Inputs and Outputs: Our Services allow you to insert prompts or inputs (including text, images, and audio) ("Input"), which can generate a corresponding response or output ("Output").
Communication Information: If you communicate with us or interact with our social media pages, we collect information, including your contact information and the contents of your messages or posts. We also collect your feedback on our Services.

1.2 Personal data we receive from your use of our Services

When you use our Services, we also receive certain technical information, including:

Device Information: Depending on your device or browser permissions, your device or browser automatically sends us information about when and how you access or use our Services, such as your device type, operating system information, browser information, internet service provider (ISP), and IP address.
Usage Information: We collect information about your use of our Services, such as the dates and times of access, pages you view, and about how you use our Services.
Log Information: We collect information about how our Services are performing when you use them, including log files and information about any error.
Cookies: We and our service providers use cookies and similar technologies to manage our Services and to improve your experience.

2. Use of Personal Data

We use your personal data for the following purposes:

2.1. To provide our Services, including to administer your account, to process your requested payments, and to provide customer support.

2.2. To communicate with you, including to send you information about our Services.

2.3. To assess your eligibility for and promote our Services, including through interest-based advertising where allowed by law.

2.4. To prevent fraud, illegal activity, and misuse of our Services, and to protect the safety, security, and integrity of our systems and Services.

2.5. To comply with legal obligations and to protect the rights, privacy, or safety of our users, nilGPT, or third parties.

We do not process sensitive personal data to infer characteristics about a consumer.

We do not use your personal data or inputs or outputs to train any AI model.

We rely on the following Legal Bases to process your data:

Purpose	Type of Data	Legal Basis
To provide our Services, including to administer your account, to process your requested payments, and to provide customer support	• Account information • Payment information • Communication information • Device, usage, log, and cookies data	Where necessary to perform a contract with you, such as provide an Output in response to your Input. Where necessary for the legitimate interest of our users and nilGPT to address customer queries. We may have a legal obligation to address customer complaints.
To improve and develop our Services and conduct research, including to develop new product features but not to train any AI Model	• Account information • Payment information • Communication information • Device, usage, log, and cookies data	Where necessary for the legitimate interests of third parties and nilGPT, such as when we develop and improve our Services.
To communicate with you, including to send you information about our Services	• Account information • Communication information • Device, usage, log, and cookies data	Where necessary to perform a contract with you, such as using your contact information to send you a notification about our Services. Your consent to process your personal data where required, such as for certain marketing communications.
To assess your eligibility for, and offer you or promote our services, including through interest-based advertising where allowed by law	• Account information • Communication information • Device, usage, log, and cookies data	Where allowed by law (including, where required, with your consent), so that we may market our services to you. Where necessary for the legitimate interests of nilGPT and our users to understand how our Services are being used and to explore ways to develop our business.
To prevent fraud, illegal activity, and misuse of our Services, and to protect the security of our systems and Services	• Account information • Payment information • Communication information • Device, usage, log, and cookies data	Where necessary to comply with a legal obligation. Where necessary for the legitimate interests of nilGPT and third parties (such as to protect against security threats to our Services). In limited cases where the processing is necessary to protect individuals, vital interests.
To comply with legal obligations and to protect the rights, privacy, or safety of our users, nilGPT, or third parties	• Account information • Payment information • Inputs and Outputs • Communication information • Device, usage, log, and cookies data	Where necessary to comply with a legal obligation, such as to comply with payments related record-keeping legal obligations. Where necessary for the legitimate interests of third parties and nilGPT (such to address a violation of our Terms of Service) In limited cases where the processing is necessary to protect individuals, vital interests.

3. Disclosure of Personal Data

nilGPT will disclose the above categories of personal data to the following third parties and for the purposes explained in this Privacy Policy:

Affiliates & corporate partners: nilGPT discloses personal data between and among its affiliates and related entities.
Service providers & trusted partners: nilGPT may disclose personal data with service providers and trusted partners for various business purposes, including cloud services, and safety and security services.
A significant corporate event: If nilGPT is involved in a merger, corporate transaction, bankruptcy, or a transfer of business assets, nilGPT will disclose your personal data as part of these corporate transactions.
Third-Party Websites and Services: Our Services may involve integrations with, or may direct you to, third-party websites, apps, and services. By interacting with these third parties, you are providing information directly to that third party. As such, you should review the third party's privacy policy.
Third-Party Partners: We may provide the personal data of individuals who visit our website to third-party partners, such as advertising partners, analytics providers, and social networks, who may assist us in advertising our Services to you. See our Cookie Policy. Where legally required, we provide you with the option to opt out of targeted advertising on our site and honor Global Privacy Controls (GPC).
Regulatory or legal requirements, safety and security, rights of others, or to enforce our rights: We may disclose personal data to governmental regulatory authorities as required by law, in response to their requests for information or to assist in investigations. We may also disclose personal data to third parties in connection with disputes or litigation, or if we determine its disclosure is necessary to protect the health and safety of any person, to prevent fraud, credit risk, or illegal activity, to enforce our or others' legal rights, or as otherwise required or permitted by applicable law.
With an individual's consent: nilGPT will disclose personal data when an individual gives us permission or directs us to disclose this information.

4. Your Rights and Choices

Depending on where you live and the laws that apply in your country of residence, you may have certain rights regarding your personal data. To exercise your rights, you or an authorized agent may submit a request by emailing us at legal@nillion.org. When we receive your request, we may ask for additional information to confirm your identity. nilGPT will not discriminate based on the exercising of privacy rights you may have. You may also have the right to appeal requests that we deny by emailing legal@nillion.org. Below is a summary of the rights which you may have, subject to certain conditions and exceptions and depending on the laws that apply in your country of residence.

Right to know: The right to know what personal data nilGPT processes about you and the categories of third parties to whom we disclose it.
Access & data portability: The right to request a copy of the personal data nilGPT processes about you and also the right to port your information to a third party.
Deletion: The right to request that we delete your personal data.
Correction: While we cannot guarantee the factual accuracy of any outputs due to the technical complexity of our models, you have the right to request that we correct your personal data when it is inaccurate, subject to certain exceptions.
Objection: You have the right to object to how we process your personal data. If we use your information for marketing, you can opt out of future marketing messages using the unsubscribe link in those messages.
Restriction: You have the right to restrict our processing of your personal data in certain circumstances.
Withdrawal of consent: Where nilGPT's processing of your personal data is based on consent, you have the right to withdraw your consent.
Right to complain to a regulatory authority: Under many countries' laws, you have the right to file a complaint with the supervisory authority in the place in which you live or work.
Sale & targeted advertising: We do not sell or share your personal data with third parties in exchange for payment. However, we may provide the personal data of individuals who visit our website to third-party partners, such as advertising partners, analytics providers, and social networks, who may assist us in advertising our Services to you. This may be considered a data "sale" or "sharing" as those terms are defined under the California Consumer Privacy Act ("CCPA") and other applicable US privacy laws. Where legally required, we provide you with the option to opt out of targeted advertising on our site and honor Global Privacy Controls (GPC).

5. Data Transfers

nilGPT processes your personal data on servers located outside of the European Economic Area ("EEA"), Switzerland, and the UK, including processing your personal data in our servers in the US. Where information is transferred outside the EEA, Switzerland, or the UK, we rely on:

Adequacy decisions: We rely on the European Commission adequacy decisions under Article 45 GDPR where they recognise that a country outside of the EEA offers an adequate level of data protection; or
Standard contractual clauses ("SCCs"): We rely on the SCCs as approved by the European Commission under Article 46 GDPR (and their approved equivalent for the UK and Switzerland) that allows companies in the EEA to transfer data outside the EEA.

6. Data Retention and Security Controls

nilGPT retains your personal data for as long as reasonably necessary for the purposes outlined in this Privacy Policy, depending on factors such as the terms of your agreement, our purposes for processing the data (including whether the data is needed to resolve disputes and to enforce our agreements), and any legal requirements that we are subject to.

The security of your personal data is important to us. We implement appropriate technical and organizational security measures designed to protect personal data from loss, misuse, and unauthorized access or disclosure. Our security measures are designed to provide the level of security appropriate to the underlying level of risk associated with the data processing.

7. Children

Our Services are not directed towards, and we do not knowingly collect personal data from children under the age of 18. If you are the parent or guardian of a child under the age of 18 who you have reason to believe has provided any personal data to us, please email us at legal@nillion.org.

8. Contact Information and Data Controller

If you live in the European Economic Area (EEA), UK, or Switzerland (the "European Region"), the data controller responsible for your personal data is Nillion Labs Limited. If you live outside the European Region, the data controller responsible for your personal data is nilGPT.

If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can email us at legal@nillion.org.

9. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes to this Privacy Policy, and update the Effective Date at the top of this page.