Privacy Policy

Effective Date: July 16th, 2026

1. Introduction

Welcome to NForce AI, a product of NSpark, Inc. We are committed to protecting your privacy and ensuring your personal information is handled safely and responsibly.

This policy explains how we handle personal information. For the purposes of the EU General Data Protection Regulation ("GDPR") and the UK GDPR, the data controller is NSpark, Inc., 8 The Green #19869, Dover, DE 19901, United States. You can reach us at contact@nforce.ai.

2. Our Role: Controller and Processor

Our role depends on the data in question:

  • We are the controller of personal information we collect directly — for example when you visit our website, complete a form, or correspond with us. This policy governs that data.
  • We are a processor of personal data that our customers submit to, or process through, the NForce platform. In that case the customer is the controller, that data is processed on the customer's instructions, and our Data Processing Agreement governs it rather than this policy. The sub-processors we engage are listed at nforce.ai/subprocessors.

3. Information We Collect

  • Personal Information: Name, company/organization, email address, phone number, and any messages you send us through our lead capture form.
  • Usage Data: Information about how you interact with our website, such as your IP address, browser type, and pages visited.
  • Service Data: Information you provide when connecting your cloud services for AI assistance, including:
    • OAuth tokens and refresh tokens for connected services
    • Selected files and folders from cloud storage services
    • Calendar events and scheduling information
    • Data you explicitly submit for AI processing

4. How We Use Your Information

  • To Provide Services: To respond to your inquiries, provide information about our AI-driven solutions, and process data through connected cloud services.
  • To Improve Our Website: To analyze usage patterns and improve our website's functionality and user experience.
  • Marketing: To send you promotional materials and updates about our services, if you have opted in to receive such communications.

5. Legal Bases for Processing (EEA, UK and Switzerland)

Where the GDPR (or the UK GDPR or Swiss FADP) applies, we rely on the following legal bases:

  • Contract (Art. 6(1)(b)) — to provide the services you have requested and to administer your account.
  • Legitimate interests (Art. 6(1)(f)) — to operate, secure and improve our website and services, to respond to your enquiries, and to prevent fraud and abuse. We balance these interests against your rights.
  • Consent (Art. 6(1)(a)) — for marketing communications and non-essential cookies. You may withdraw consent at any time, without affecting processing carried out before withdrawal.
  • Legal obligation (Art. 6(1)(c)) — where we must process data to comply with the law.

We do not process special categories of personal data (Article 9 GDPR), and we do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

6. Sharing Your Information

We do not sell, rent, or trade your personal information. We only share your information in the following limited circumstances:

  • Service Providers: Trusted third parties that perform services on our behalf under strict confidentiality agreements:
    • Cloud hosting providers (for data storage)
    • Email service providers (for communications)
    • Analytics providers (for usage analysis)
  • AI Processing: When you explicitly request AI assistance:
    • OpenAI (ChatGPT) — for natural language processing
    • Anthropic (Claude) — for AI assistance
    • Google (Gemini) — for AI processing

    Data shared with AI providers is subject to their respective privacy policies and is only shared for the specific task you requested.

  • With Your Consent: We may share information with third parties when you explicitly authorize us to do so.
  • Legal Requirements: If required by law, court order, or to protect the rights, property, or safety of NSpark, Inc., NForce AI, our users, or others.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

A full list of the sub-processors we engage when processing customer data is available at nforce.ai/subprocessors.

Important: We never share Google user data with third parties except as necessary to provide the specific service you requested and in compliance with Google's Limited Use requirements.

7. International Data Transfers

We are established in the United States and host data in the United States (Amazon Web Services, region us-east-1). Some of the service providers and sub-processors we engage are also located in the United States and elsewhere. This means personal data from the European Economic Area, the United Kingdom and Switzerland is transferred outside those territories.

Where we make such a restricted transfer, we rely on the European Commission's Standard Contractual Clauses (and, for the UK, the ICO's International Data Transfer Addendum; for Switzerland, the equivalent FADP adaptations) as the transfer mechanism, together with supplementary measures including encryption in transit and at rest and access controls. For customer data processed through the platform, these clauses are incorporated into our Data Processing Agreement. You may contact us at contact@nforce.ai for further information.

8. Data Security

We implement robust security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

Security Measures Include:

  • Encryption of data in transit using TLS/SSL protocols
  • Encryption of sensitive data at rest
  • Regular security assessments and audits
  • Access controls limiting data access to authorized personnel only
  • Secure authentication including OAuth 2.0 for third-party services
  • Regular security training for our team

For applications accessing sensitive Google OAuth scopes, we undergo annual security assessments as required by Google's policies. However, no security measures are completely infallible, and we cannot guarantee absolute security.

9. User Responsibilities

Users are responsible for configuring their agents appropriately and ensuring that they have the necessary rights to share any data submitted to our service.

10. Your Rights and Choices

  • Opt-Out: You can opt out of receiving marketing communications from us at any time by following the unsubscribe link in our emails.
  • Access and Correction: You have the right to access and correct your personal information held by us.

If you are in the EEA, the UK or Switzerland, you also have the right to:

  • Access your personal data and obtain a copy of it
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing, including processing based on legitimate interests and processing for direct marketing
  • Data portability — receive your data in a structured, commonly used, machine-readable format
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with your local supervisory authority

To exercise any of these rights, contact us at contact@nforce.ai. We will respond within the time limits required by applicable law (generally one month under the GDPR). If your personal data was submitted to the platform by one of our customers, we act as a processor — please direct your request to that customer, and we will assist them in responding.

11. Cookies and Tracking

We use cookies and similar technologies to collect information about your browsing activities. You can control the use of cookies through your browser settings. For more details, see our Cookie Policy.

12. Google User Data and Limited Use

Limited Use Compliance: NForce AI's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Scope of Access: When you connect your Google account, we request access to:

  • Google Drive: To access and process files you explicitly select for AI assistance
  • Google Calendar: To read calendar events for scheduling and automation purposes
  • Basic profile information: Email address for account identification

How We Use Google Data:

  • We only access data from files and calendars you explicitly authorize
  • Data is used solely to provide the AI services you request
  • We do not use Google user data for advertising, marketing, or selling to third parties
  • We do not use Google user data to develop, improve, or train generalized AI/ML models
  • We do not transfer Google user data to third parties except as necessary to provide the service you requested

Data Retention and Deletion: Google user data is retained only as long as necessary to provide the requested service. You can disconnect your Google account at any time from your account settings, which will revoke our access and trigger deletion of associated Google data from our systems within 30 days.

13. Data Retention and Deletion

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

Retention Periods:

  • Account data: Retained while your account is active
  • Google user data: Retained only while Google account is connected
  • Usage logs: Retained for 90 days for security and debugging purposes
  • Deleted data: Permanently removed within 30 days of deletion request

Your Rights: You have the right to:

  • Request deletion of your personal data
  • Export your data in a portable format
  • Revoke access to connected services at any time
  • Request information about what data we store about you

To exercise these rights, please contact us at contact@nforce.ai.

14. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on our website and updating the effective date.

15. Contact Us

If you have any questions or concerns about this privacy policy, please contact us at:

  • Email: contact@nforce.ai
  • Address: NSpark, Inc., 8 The Green #19869, Dover, DE 19901, United States

By using our website, you consent to the terms of this privacy policy.