Privacy Policy

Introduction

Node-Zero Labs ("Node-Zero," "Company," "our," "we," or "us") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy forms part of our Terms of Use.

Node-Zero is an AI infrastructure studio based in Bengaluru, India. We build the data, environments and human-feedback systems that help AI labs and AI infrastructure companies train and evaluate models for real-world work, including reinforcement-learning ("RL") environments, training data, agentic tasks, evaluations, expert workflows and applied AI research.

This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website at node-zero.in and its sub-pages (the "Website"), access our product demos (the "Demos"), or engage us to deliver environments, data or evaluation work (the "Services"). It also describes our practices for collecting, using, protecting and disclosing that information.

This Privacy Policy does not apply to information collected by any third party, including through any application, tool or content that may link to or be accessible from the Website. Where we deliver Services under a signed master services agreement, statement of work ("SOW"), data processing agreement or non-disclosure agreement, the confidentiality and data-handling terms of that agreement will govern the client materials covered by it, and will prevail over this Privacy Policy if the two conflict.

Please read this policy carefully. By using the Website, accessing the Demos or engaging the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, please do not use the Website, the Demos or the Services.

Key Privacy Commitments

Confidentiality is core to how we work with AI labs and AI infrastructure partners. When you work with us:

We do not train models on your data. Requirements, workflows, specifications and other materials you share with us are used only to scope and deliver your engagement.
We do not share your data with other clients. Each engagement is kept separate. Nothing you share with us is reused in work for another client.
You keep your customer. When a partner brings us its client's requirements, the partner remains the client of record. We do not contact the end client unless the partner asks us to in writing.
Our environments are built on synthetic data. The seed data, personas, records and histories inside the environments we deliver are synthetic. We do not need real personal data to build them, and we ask that you do not send us any unless an SOW specifically requires it.
We do not share your data with foundation model companies for their own purposes.
We do not sell your personal information.

More information on how we protect your data appears throughout this Privacy Policy.

Information We Collect and How We Collect It

Personal Information

We collect information to respond to inquiries, scope and deliver Services, provide support, invoice for our work, communicate with partners and meet our contractual and legal obligations. We aim to collect only what we need. Depending on how you interact with us, this may include:

Contact and demo requests. When you book a demo or get in touch, your first and last name, company name, designation, business email address, city, country, how you heard about us, whether your company works in the RL business, and what you would like to discuss on the call.
Demo access. The fact that you requested or used access to our password-protected product demos, and the time and pages of that access.
Engagement information. Names, business email addresses, phone numbers and roles of the people we work with at your organization, plus information about the organization itself, such as legal name, address, tax registration details (for example, GSTIN or a tax ID) and billing contacts.
Client materials. Requirements, workflow descriptions, specifications, rubrics, sample data, feedback on deliverables and other material you choose to share with us so we can scope and build your environment, tasks, data or evaluations. This material may contain personal information only if you include it.
Expert and contributor information. If you work with us as a domain expert, annotator or contributor, your name, contact details, qualifications, payment details, and the demonstrations, rankings, verifications or feedback you produce for us.
Communications. Emails, messages, call notes and other correspondence you send us, including support requests about delivered environments.
Technical and usage information. Information about your internet connection, the device and browser you use to access the Website or Demos, IP address, pages viewed, referring pages and the date and time of visits.

We collect this information in two ways:

Directly from you, for example when you fill in the "Book a demo" form, email us at hello@node-zero.in, reply to our outreach, sign an SOW or share requirements for an engagement.
Automatically as you navigate the Website or Demos, for example usage details, IP addresses and browser information collected through server logs, cookies and similar technologies. We do not use this information to build profiles of individuals, but some of it, such as IP addresses, may be unique to you.

We may also receive limited business contact information from public professional sources (such as company websites and professional networking profiles) or from mutual introductions when we reach out to companies that may benefit from our Services.

Your Organization's Confidential Information

When you scope or engage the Services, you may share information about your organization, your customers, your models, your training objectives or your workflows. We treat this as your organization's "Confidential Information," meaning any confidential or proprietary information about or related to your organization (or, for partners, your end client) that you share with us or that we receive in connection with an engagement. We use Confidential Information only to scope, build, test, deliver and support your engagement, and we protect it as described in this Privacy Policy and in any agreement we have signed with you.

How We Use Your Information

We use the information we collect about you or that you provide to us, including any personal information:

To respond to your inquiries, schedule demos and calls, and give you access to our Demos.
To scope engagements and prepare quotes, delivery plans and lists of deliverables.
To design, build, quality-check, deliver and support environments, task suites, training data, evaluation harnesses, rubrics and documentation for you, including resolving reported bugs and performance issues during any support period.
To manage our relationship with you, including SOWs, invoicing, milestone payments and collections.
To work with domain experts and contributors, and to pay them for their work.
To develop and improve our Website, Demos, internal tools and delivery methods. This does not include training models on your data or reusing your Confidential Information in work for anyone else.
To send you information about our Services that we think may interest you, where permitted by law. You can opt out at any time.
For internal and external marketing, provided that such use does not directly or indirectly identify you, your organization, your end clients or any Confidential Information. We will not name you as a client without your permission.
To keep our Website, Demos and systems secure, and to detect and prevent fraud, abuse and unauthorized access.
To carry out our obligations and enforce our rights under any contract between you and us.
To comply with applicable law, regulation, legal process or government requests.
In any other way we describe when you provide the information, or with your consent.

You can withdraw your consent at any time by contacting us at hello@node-zero.in. Withdrawing consent will not affect processing we carried out before you withdrew it.

We may disclose aggregated or de-identified information that does not identify any individual or organization and does not reveal any Confidential Information, without restriction.

We may also disclose information that we collect or that you provide:

Within your engagement. To the people at your organization who are part of the engagement. When a partner brings us its client's requirements, deliverables and invoices go to the partner, and we do not share information with the end client unless the partner asks us to in writing.
To our team. To our founders, employees, contractors and domain experts who need it to deliver your engagement and who are bound by confidentiality obligations.
To service providers. To vendors that help us run our business, such as cloud hosting and infrastructure, email and productivity tools, scheduling, website analytics, and payment and accounting services. These providers may use your information only to perform services for us and are expected to keep it confidential and secure. We do not share your data with foundation model companies for their own purposes.
For business transfers. To a buyer or other successor in the event of a merger, acquisition, restructuring, reorganization, dissolution or sale of some or all of our assets, in which information we hold is among the assets transferred. Any successor will be required to honor this Privacy Policy for the information transferred.
For legal reasons. To comply with any court order, law or legal process, including responding to government or regulatory requests, or if we believe disclosure is necessary or appropriate to protect the rights, property or safety of Node-Zero, our clients or others.
With your consent or for any other purpose we disclose when you provide the information.

Data Retention

We retain personal information only for as long as we have an ongoing legitimate business need, for example to respond to an inquiry, deliver and support an engagement (including any post-handover support period), or comply with legal, tax or accounting requirements.

At the end of an engagement, client materials and Confidential Information are returned or deleted as agreed in the relevant SOW or agreement. If no such terms apply, we delete or anonymize them once we no longer need them to support the deliverables or meet our legal obligations.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it. If this is not immediately possible (for example, because the information is stored in backup archives), we will securely store it and isolate it from any further processing until deletion is possible.

Accessing and Correcting Your Information

You may email us at hello@node-zero.in to request access to, correction of, or deletion of personal information you have provided to us. We may decline a request if we believe the change would violate any law or legal requirement, cause the information to be incorrect, or conflict with our obligations under an active agreement.

Cookies and Similar Technologies

Cookies

Our Website may use cookies, which are small text files placed on your device. We use cookies and similar technologies to keep the Website and Demos working (for example, to remember that you have entered a valid demo password), to remember your preferences, and to understand how visitors use the Website so we can improve it. You can stop cookies from being stored on your device by changing your browser settings, but some features of the Website or Demos may not work properly if you do.

Analytics

We may use third-party analytics services to understand how visitors find and use the Website, such as pages visited, time on page and referring sites. These services may set their own cookies and may process your IP address. We configure them to give us aggregated reports rather than to identify individual visitors, and we do not allow them to use our visitors' data for their own advertising.

Do Not Track

Some browsers offer a "Do Not Track" ("DNT") setting. Because there is no common standard for how to respond to DNT signals, the Website does not currently respond to them.

Linked Websites

The Website may link to third-party sites, such as our profiles on LinkedIn and X, or to scheduling and form tools. Those sites may use their own cookies, and we cannot control them. If you have questions about how they use cookies or your information, please contact them directly.

Children

The Website, Demos and Services are intended for businesses and professionals. They are not intended for anyone under 18 years of age, and you may not use them or provide information to us if you are under 18. If we learn that we have collected personal information from someone under 18 without verifiable parental consent, we will delete it promptly. If you believe we may have such information, please contact us at hello@node-zero.in.

Transferring Your Information

Node-Zero is based in India and works with AI labs and AI infrastructure companies around the world. Your information may be processed and stored in India and in other countries where we or our service providers operate, including the United States. Data protection laws in those countries may differ from those in your country. Where required, we take appropriate measures to protect information transferred across borders, such as contractual safeguards with our service providers, including the European Commission's Standard Contractual Clauses for transfers of personal data out of the European Economic Area ("EEA"), the United Kingdom or Switzerland. We will not transfer personal information to any country or territory where such transfers are restricted under Indian law.

Data Security

We have implemented measures designed to protect your personal information and Confidential Information from accidental loss and unauthorized access, use, alteration and disclosure. These include:

Encryption of data in transit (TLS) and, where supported by our providers, at rest.
Access controls that limit client materials to the people working on that engagement.
Password protection on our product Demos.
Keeping each client's materials separate from every other client's.
Confidentiality obligations for our team, contractors and domain experts.
Delivering environments built on synthetic data, so that real personal data is not needed to build them.

Unfortunately, no transmission of information over the internet or method of storage is completely secure. Although we do our best to protect your information, we cannot guarantee the security of information transmitted to us. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

Your Rights

Depending on where you live, you may have some or all of the following rights. To exercise any of them, email us at hello@node-zero.in. We may need to verify your identity before acting on your request, and we will respond within the time required by applicable law (typically within 30 days).

Access. Ask for a summary of the personal information we process about you and the processing activities involved.
Correction and completion. Ask us to correct inaccurate or incomplete information, or to update it.
Erasure. Ask us to delete your personal information, unless we need to keep it to comply with law or to perform a contract with you.
Portability. Ask for a copy of your personal information in a structured, commonly used, machine-readable format.
Withdraw consent. Withdraw your consent at any time where we rely on consent, including unsubscribing from marketing emails using the link in the email or by contacting us. This will not affect processing carried out before withdrawal.
Objection and restriction. Object to, or ask us to restrict, certain processing, including processing for direct marketing.
Nominate. If you are in India, nominate another person to exercise your rights in the event of your death or incapacity.
Grievance redressal and complaints. Raise a grievance with our Grievance Officer (see below), and lodge a complaint with the relevant data protection authority, such as the Data Protection Board of India or your local supervisory authority in the EEA or United Kingdom.

Users in India

We process digital personal data in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the rules made under them. Where we rely on your consent, we will ask for it clearly and you may withdraw it as easily as you gave it. Please first contact our Grievance Officer with any grievance; if it is not resolved satisfactorily, you may approach the Data Protection Board of India.

Users in the EEA, United Kingdom and Switzerland

Our legal basis for collecting and using your personal information depends on the information concerned and the context in which we collect it. We normally process personal information only:

where we need it to perform a contract with you or the organization you represent, or to take steps at your request before entering into a contract, such as preparing a quote;
where the processing is in our legitimate interests (for example, responding to inquiries, contacting businesses that may benefit from our Services, improving our Website, and keeping our systems secure) and those interests are not overridden by your rights; or
where we have your consent.

In some cases, we may also have a legal obligation to process your personal information. If we ask you to provide personal information to comply with a legal requirement or to perform a contract, we will make this clear at the time and tell you whether providing it is mandatory and what happens if you do not.

Users in California

We do not sell or share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act, as amended. California residents may request information about the categories of personal information we have collected about them, the purposes for which it was used, and the categories of third parties with whom it was disclosed, and may exercise the rights described above. We will not discriminate against you for exercising your privacy rights.

Third-Party Links

The Website may contain links to other websites. We are not responsible for the privacy practices, content or activities of those websites, and we encourage you to read their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last modified" date above. If we make material changes, we will also notify active clients and partners by email at the most recent address you have provided to us.

Contact and Grievance Officer

The Website, Demos and Services are operated by Node-Zero Labs, Bengaluru, Karnataka, India. For questions about this Privacy Policy, to exercise your rights, or to raise a grievance, please contact:

Grievance Officer

Kushal, Founder, Node-Zero Labs

Email: hello@node-zero.in

Bengaluru, Karnataka, India

We will acknowledge grievances promptly and aim to resolve them within 30 days.