This policy explains how Nimtelligence AB ("Nimt", "we") handles personal data when you visit nimt.ai, use the Nimt service at app.nimt.ai, or are in contact with us.
In short
- Nimt is built for businesses. Our databases and file storage are in the EU. Some providers process data elsewhere, including in the USA.
- For account, billing, website and sales data, we decide how the data is used. For the content customers add to Nimt, the customer decides, and we process it for them under our Data Processing Agreement.
- We don't sell personal data. Apart from the public AI services we query to track your brand, the AI providers we use may not train their models on your content.
- Tracked prompts are sent to public AI services without your account details.
Who we are
Nimtelligence AB
Org. no. 559401-7476
Redaregatan 48, c/o Hetch, 252 36 Helsingborg, Sweden
privacy@nimt.ai
Our role
We are the controller for the personal data we use for our own purposes: user accounts, billing, support, security, our website, sales and marketing, and training Nimt's own AI models.
Customers decide what they put into Nimt: projects, prompts, instructions to Nimt's AI features, files and data from apps they connect. For that content, the customer is the controller and Nimt is the processor. Our Data Processing Agreement applies, and questions about that data are best sent to the customer first.
What we collect
- Account details: name, email address, company, role and how you sign in.
- Billing details: billing contact, address, VAT number and payment details. Stripe handles card details; we don't store card numbers.
- Content you add: projects, brands, prompts, instructions to Nimt's AI features, files and data from connected apps.
- Usage and device data: IP address, browser and device type, the pages and features you use, how you interact with the service, and technical logs.
- Support conversations: messages you send us by chat or email.
- Job applications: what you send us when you apply for a job.
- Website and marketing data: cookies and similar technologies (see Cookies), demo bookings and forms you fill in.
- From others: your name and email address from Google or Microsoft when you sign in with them, which ad brought you to us, and public company and professional information, such as job title and company size, from data enrichment services.
Most of what Nimt tracks, such as prompts, AI answers, brands and sources, is information about companies, not people. It can include names of people, or links to their pages, when AI answers mention them.
We need your email address to give you an account, and billing details to run a paid subscription. Without them, we can't provide the service.
Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the service, run your account and send account emails | Our legitimate interest in providing the service to your organisation (art. 6.1 f), or our contract with you if you are the customer yourself (art. 6.1 b) |
| Billing and accounting | Legal obligations such as bookkeeping (art. 6.1 c), and our legitimate interest in administering payments (art. 6.1 f) |
| Help you when you contact support | Our legitimate interest in answering questions (art. 6.1 f) |
| Keep the service secure and prevent misuse | Our legitimate interest in protecting the service and its users (art. 6.1 f) |
| Understand how the service is used and improve it, including training Nimt's own AI models | Our legitimate interest in developing our products (art. 6.1 f) |
| Newsletters, product news and sales follow-up, including our CRM and data enrichment | Our legitimate interest in business-to-business marketing (art. 6.1 f) |
| Measure our ads and show relevant ads on Google, Meta and LinkedIn | Our legitimate interest in measuring our marketing (art. 6.1 f) |
| Handle job applications | Taking steps before a possible employment contract (art. 6.1 b) and our legitimate interest in recruiting (art. 6.1 f) |
| Comply with the law and handle legal claims | Legal obligations (art. 6.1 c) and our legitimate interest in defending our rights (art. 6.1 f) |
You can object to marketing at any time, and we will stop. Every marketing email has an unsubscribe link.
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
AI and your content
- Content you add to Nimt is processed by AI models. Apart from the public AI services described below, we use only providers whose terms don't allow them to train on it.
- We may use your work with Nimt's AI features (instructions, results and feedback) to improve Nimt's AI, including to train models that only power Nimt. We remove names, email addresses and other direct identifiers first, never share them with third parties for their own training, and never use files or data from connected apps for training. You can opt out at any time by emailing privacy@nimt.ai.
- To track your brand, we send your tracked prompts to public AI services such as ChatGPT, Gemini, Copilot, Perplexity and Google AI Mode. We send the prompt text without your name, email address or company details, and those services handle it under their own terms. Anything written in the prompt itself is sent, so please don't put personal data in tracked prompts.
- We may create de-identified, aggregated statistics from use of the service, for example to improve it or to build benchmarks. They never identify you, your company or anyone else.
Who we share it with
We use service providers that process data on our behalf, under data processing agreements, and a few services that receive data for the purposes above. We also share data with professional advisers such as accountants, with authorities when the law requires it, and with a buyer or successor if Nimt is merged or sold.
Running the service
| Provider | What they do | Personal data | Location |
|---|---|---|---|
| Amazon Web ServicesAmazon Web Services EMEA SARL | Hosting, databases, file storage, backups and AI models | All personal data stored in the service | Ireland. AI requests may be processed in other regions, including the USA.Safeguard: EU standard contractual clauses |
| ClickHouseClickHouse, Inc. | Database for tracking results and analytics | Names of people, or links to their pages, that appear in tracked AI answers. No account details. | IrelandSafeguard: EU standard contractual clauses |
| VercelVercel Inc. | Hosting parts of the service and the nimt.ai website. Routing requests to AI models from Anthropic, OpenAI, Google, Microsoft and Amazon, which Vercel engages under its own agreements without training on the data. | Any personal data in content processed by the service or sent to AI models | Global, including the USASafeguard: EU standard contractual clauses |
| MastraKepler Software Inc. | Tracing and debugging the AI agent | User IDs, and any personal data in work with AI features | EUSafeguard: EU standard contractual clauses |
| Grafana LabsRaintank, Inc. (Grafana Labs) | Monitoring, dashboards and alerts | User IDs and account data used in monitoring and dashboards | EUSafeguard: EU standard contractual clauses |
| SentryFunctional Software, Inc. | Error monitoring | User IDs and technical data about errors | GermanySafeguard: EU standard contractual clauses |
| PostHogPostHog, Inc. | Product analytics | Account details and how you interact with the service | GermanySafeguard: EU standard contractual clauses |
| Customer.ioPeaberry Software, Inc. | Sign-in codes, account emails and newsletters | Names, email addresses and account activity | EUSafeguard: EU standard contractual clauses |
| IntercomIntercom R&D Unlimited Company | Support chat | Names, email addresses and support conversations | USASafeguard: EU standard contractual clauses |
| PipedreamPipedream, LLC | Connecting the apps a customer chooses to connect | Account credentials for connected apps, and any personal data passing to and from them | USASafeguard: EU standard contractual clauses |
| Google WorkspaceGoogle Cloud EMEA Limited | Email and documents, including support and sales correspondence | Names, email addresses and correspondence | EU and USASafeguard: EU standard contractual clauses |
Billing, sales and marketing
| Provider | What they do | Personal data | Location |
|---|---|---|---|
| StripeStripe Payments Europe, Limited | Payments, invoices and subscriptions | Billing contact details and payment information | EU and USASafeguard: EU standard contractual clauses |
| PipedrivePipedrive OÜ | Managing customer relationships and sales follow-up | Names, email addresses, company, plan and billing information | EU |
| Google Analytics and Google AdsGoogle Ireland Limited | Measuring use of the app and ad conversions | Device and browser data, IP address and pages visited | EU and USASafeguard: EU standard contractual clauses |
| MetaMeta Platforms Ireland Limited | Measuring ad conversions and showing relevant ads | Hashed email address, IP address, browser data and ad identifiers | EU and USASafeguard: EU standard contractual clauses |
| LinkedInLinkedIn Ireland Unlimited Company | Measuring ad conversions and showing relevant ads | Hashed email address, IP address, browser data and ad identifiers | EU and USASafeguard: EU standard contractual clauses |
| LeadfeederDealfront Group GmbH | Identifying which companies visit nimt.ai | IP address, pages visited and cookie identifiers | EU |
| CookieYesCookieYes Limited | Recording cookie consent choices | Consent choices and IP address | United KingdomSafeguard: EU adequacy decision for the United Kingdom |
| Cal.comCal.com, Inc. | Booking demo meetings | Names, email addresses and meeting details | USASafeguard: EU standard contractual clauses |
We also use data enrichment services that add public company and professional information to our sales contacts.
Services you choose to connect
| Provider | What they do | Personal data | Location |
|---|---|---|---|
| Google and Microsoft sign-inGoogle Ireland Limited, Microsoft Ireland Operations Limited | Signing in with an existing Google or Microsoft account | Name, email address and account identifier | EU and USA |
| SlackSlack Technologies Limited | Using Nimt from a Slack workspace | Messages sent to Nimt in Slack, and Slack user details | Depends on the Slack workspace |
| Apps connected through PipedreamThe provider of each app, for example WordPress or HubSpot | Letting Nimt read from and act in apps the customer connects | Any personal data the customer lets Nimt read or change | Depends on the app |
Customers with a Data Processing Agreement can follow changes on our list of sub-processors.
We never sell your personal data.
Transfers outside the EU/EEA
Some providers process data outside the EU/EEA, mainly in the USA. We protect those transfers with the EU Commission's standard contractual clauses, the EU-US Data Privacy Framework where the provider is certified, or an EU adequacy decision, such as for the United Kingdom. Email privacy@nimt.ai for a copy of the safeguards that apply.
How long we keep it
| Data | How long |
|---|---|
| Account details and content you add | While the workspace exists, including after a trial or plan ends, so it can be reactivated. You can ask us to delete it at any time. Deleted within 30 days after you ask, and from backups within a further 35 days. |
| Billing records | As long as Swedish bookkeeping law requires, currently 7 years after the end of the financial year |
| Security and technical logs | Up to 180 days |
| Product analytics and usage data | As long as it helps us understand and improve the service, then deleted or anonymised |
| Work with Nimt's AI features used for training, with identifiers removed | As long as needed to train and evaluate our models |
| Cookies | The lifetimes shown in the cookie settings |
| Support conversations | As long as needed to help you and answer follow-up questions |
| Sales and marketing contacts | As long as they are relevant for our sales and marketing. Sooner if you object or ask us to delete them. |
| Job applications | For the recruitment, and as long as needed to handle possible legal claims afterwards |
| Unsubscribe and objection records | As long as needed to make sure we don't contact you again |
Your rights
You have the right to:
- get a copy of your personal data
- have incorrect data corrected
- have your data deleted
- restrict how we use your data
- object to how we use your data, including for marketing and for training Nimt's AI
- withdraw consent you have given, at any time. This doesn't affect processing that took place before you withdrew it.
- receive the data you gave us in a machine-readable format
Email privacy@nimt.ai to use your rights. We reply within one month. If your request is about content a customer added to Nimt, we will pass it on to that customer.
If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se. We'd appreciate the chance to fix it first.
Cookies
nimt.ai and app.nimt.ai use cookies and similar technologies:
- Necessary: signing in, security and remembering your cookie choices.
- Analytics: understanding how the site and service are used (PostHog, Google Analytics).
- Marketing: measuring ads and showing relevant ads (Google, Meta, LinkedIn), and identifying which companies visit nimt.ai (Leadfeeder).
Google, Meta and LinkedIn may combine data about your visit with data they already hold about you. For that part they act as joint controllers with us: we are responsible for informing you and for the tracking on our sites, they are responsible for their own use of the data, and their own privacy policies apply. You can use your rights with us or with them. You can change your choices at any time through the cookie settings link on our sites.
Security
We protect data with measures such as encryption in transit and at rest, access controls and logging of access to production systems. To report a security issue, see Reporting security issues.
Children
Nimt is a service for businesses and is not meant for children.
Changes
We may update this policy. The date at the top shows the latest version. If we make significant changes, we will tell customers by email or in the service.
Contact
Questions about this policy or your data: privacy@nimt.ai.