Privacy Policy

Introduction

This Privacy Policy explains how Ninelayer (“we,” “us,” or “our”) collects, uses, and protects information when you use our website, API, and related services (collectively, the “Services”). By accessing the Services you consent to the practices described here.

Core commitments

• You own and control your data.
• We never sell personal data to third parties.
• Your data is never used to train or fine-tune generalized AI models.
• We collect only what is necessary to operate the Services.

Information we collect

Account information

When you create an account we collect your name, email address, and authentication credentials via OAuth. Payment information is processed by a third-party provider (RazorPay) and is not stored on our servers.

Usage and query data

We log the search queries you submit through the API and playground so we can return results, measure quality, and improve the service. Queries are associated with your account and are retained for 90 days unless you request earlier deletion.

Project content

If you use Ninelayer Projects, the documents and notes you upload are stored and indexed to serve search results. You can delete individual items or an entire project at any time from your dashboard.

Technical and analytics data

We collect standard server logs including IP address, browser type, pages visited, and error reports. We use privacy-preserving analytics (no cross-site tracking) to understand aggregate product usage.

How we use your information

We use collected data to:

• Operate and deliver the Services, including returning search results.
• Authenticate your account and enforce rate limits.
• Communicate with you about your subscription, billing, and important updates.
• Detect and prevent abuse, fraud, and security incidents.
• Improve search quality and relevance over time.
• Comply with legal obligations.

We do not use your data for advertising or third-party profiling.

Third-party service providers

We share data only with the service providers necessary to operate Ninelayer, including infrastructure providers (hosting, CDN), payment processors (RazorPay), and analytics services. We require all providers to protect your data and prohibit them from using it for their own purposes.

Data security

We use TLS 1.3 for data in transit, AES-256 encryption at rest, role-based access controls, and conduct periodic security reviews.

Data retention and deletion

Account and project data is retained while your account is active. Query logs are purged after 90 days. You may delete individual project items, revoke API keys, or request full account deletion at any time by emailing support@ninelayer.in. Full deletion is completed within 30 days of a verified request.

Your rights

Depending on your jurisdiction you may request access to, correction of, deletion of, or a portable export of your personal data. You may also restrict or object to certain processing. Submit requests to support@ninelayer.in. We respond within 30 days.

Children’s privacy

The Services are intended for individuals aged 18 and older. We do not knowingly collect data from minors. If we discover a minor has created an account we will delete it promptly.

Changes to this policy

We will notify you of material changes via email or a prominent notice in the product before changes take effect. Continued use after the effective date constitutes acceptance.

Contact

Questions or requests regarding this policy should be sent to support@ninelayer.in.