Privacy Notice

Nous is operated by VERT X Single Member P.C. (VERT X Μονοπρόσωπη Ι.Κ.Ε.), a private company incorporated under the laws of Greece, with its registered office in Thessaloniki, Greece, and registered with the General Commercial Registry (G.E.MI.) under number 179761606000 ("Nous", "we", "us"). We are the data controller for the personal data described under "Data we handle as controller" below.

When you use Nous, we act as the data controller for the data we need to run the Service and our business: account and authentication details, billing information, usage and performance metrics, and the content of your support and marketing communications with us.

For the documents, files, queries, and other content you upload to the Service — and any personal data they contain — you are the data controller and we act as your processor. We process that content only to provide the Service to you and on your instructions, as set out in our Terms of Service.

As controller, we process your personal data to provide and maintain the Service, manage your account and billing, provide support, keep the platform secure and prevent fraud, improve the Service, meet legal obligations, and — where relevant — tell you about our Service. Depending on the purpose, our legal basis under the GDPR is performance of our contract with you, our legitimate interests (such as security, fraud prevention, and improving the Service), compliance with a legal obligation (such as tax and accounting), or your consent (such as marketing to prospects and optional features).

We share personal data only with third-party providers that help us run the Service — such as cloud hosting and storage, payment processing, communications, and AI model providers — and only under appropriate data-protection agreements. Neither we nor these providers use your data to train AI models. We never sell, rent, or trade your personal data.

If you sign in with Google or Microsoft, or connect their services, we access: your basic profile (name and email address) to create and secure your account; Google Drive or OneDrive files you choose to import, which we ingest into your knowledge base to provide answers — this access is read-only, and we never modify or store anything in your drive; and, if you connect Gmail or Outlook, your messages — to read them where you use that feature and to send email on your behalf when you ask Nous to. We use this data only to provide these features to you. It is stored within your tenant, never used for advertising, never sold, and never used to train AI models. You can disconnect access at any time from your Google or Microsoft account security settings or by contacting us, and we will delete the associated data as described under Data retention.

Nous' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We work with service providers that may process personal data outside the European Economic Area. Where any such transfer takes place, we rely on appropriate safeguards, such as European Commission adequacy decisions or Standard Contractual Clauses, to protect your data.

We keep account and billing data for as long as your account is active and afterwards only as long as needed for the purposes above or to meet legal obligations (for example, financial records we are required to keep). Content you upload is retained while your subscription is active and deleted from our active systems within a reasonable period after termination or on your request, subject to any legal retention requirements; backup copies may persist briefly before being automatically deleted.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, per-tenant isolation, access controls, and audit logging of privileged actions.

Under the GDPR you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to receive a portable copy of it. To exercise these rights for data we hold as controller, contact us at support@thenous.ai; we will respond within one month. For content you upload, you are the controller — we act on your instructions as processor.

We use only the essential cookies needed to keep you signed in and the Service secure. We do not use advertising or third-party tracking cookies. You can manage cookies through your browser settings.

Nous is intended for use by organisations and their authorised users. Where an organisation — such as a school — gives access to individuals under 16, that organisation is responsible for obtaining any consents required by law. We do not knowingly collect personal data directly from children, and if you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Notice from time to time. When we make material changes we will update the date at the top of this page and, where appropriate, notify you. The updated notice applies from the date it is published.

If you have any questions or concerns about how we handle your data, please contact us first at support@thenous.ai. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr), the supervisory authority in Greece.