Nehraq Privacy Policy

Privacy Policy

Effective date: June 23, 2026

This Privacy Policy explains how Nehraq collects, uses, stores, shares, and protects information when visitors, BETA applicants, account owners, workspace users, and authorized reviewers interact with Nehraq websites, onboarding pages, BETA access flows, and the Nehraq Liability OS.

Nehraq is designed to help organizations create defensible evidence records around high-risk AI agent activity. During BETA, access may be limited, reviewed, or denied based on eligibility, workspace risk, company-domain verification, and operational readiness.

1. Information we collect

Depending on how you use Nehraq, we may collect the following categories of information:

Identity and account information: name, work email, company name, role, workspace identity, access status, and onboarding progress.
Company and workspace information: company domain, workspace configuration, authorized reviewers, team roles, agent registry metadata, and selected risk areas.
BETA request information: use case, risk area, message submitted with a BETA request, access intent, and review status.
Security and access information: confirmation status, login challenge status, session state, device/browser metadata, timestamps, and access events.
Product usage information: pages viewed, setup steps completed, modules opened, actions taken inside the Liability OS, and support interactions.
Evidence and governance metadata: agent names, action labels, authority boundaries, approval status, incident status, claim packet status, timestamps, and proof-readiness signals.

2. How we use information

We use information to operate, secure, improve, and support Nehraq, including to:

review BETA requests and determine workspace eligibility;
create and maintain account and workspace onboarding records;
verify work email ownership and company-domain eligibility;
provide access to the Liability OS and related onboarding paths;
generate, display, and organize governance records, evidence receipts, approval trails, and incident-defense materials;
monitor platform health, abuse prevention, security events, and operational integrity;
respond to support, legal, security, or administrative requests;
improve user experience, product design, reliability, and onboarding quality.

3. AI agent and evidence data

Nehraq is intended to record governance and evidence metadata around AI agent activity. Customers are responsible for configuring what agents, actions, systems, reviewers, and evidence records are connected to their workspace. Nehraq should not be used to intentionally submit unnecessary secrets, passwords, payment credentials, health records, or highly sensitive personal information unless an appropriate enterprise agreement, security review, and data-handling configuration are in place.

4. How we share information

We do not sell personal information. We may share information in limited situations, including:

with authorized users inside your workspace;
with service providers that help us operate hosting, security, analytics, communications, or support systems;
with legal, security, insurance, or compliance reviewers when authorized by the workspace owner or required by law;
to protect Nehraq, customers, users, or the public from fraud, abuse, unauthorized access, or security threats;
as part of a merger, financing, acquisition, corporate restructuring, or similar business transaction.

5. Data retention

We retain information for as long as necessary to provide Nehraq, comply with legal obligations, maintain security, resolve disputes, support auditability, and preserve evidence records. Because Nehraq is built around defensible records, certain logs, receipts, incident records, approvals, and governance metadata may be retained longer than ordinary account data when needed for legal, compliance, audit, claim-readiness, or security reasons.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. No system is perfectly secure. Customers are responsible for managing their own users, agent connections, credentials, permissions, internal policies, and workspace configurations.

7. Your choices and rights

Depending on your location and relationship with Nehraq, you may have rights to access, correct, delete, export, or restrict certain personal information. Some requests may be limited where retention is required for security, compliance, audit, contractual, or legal-defense purposes.

8. Cookies and tracking

Nehraq may use cookies and similar technologies to operate the site, remember preferences, support login flows, measure product usage, and improve reliability. See our Cookie Policy for more information.

9. International access

Nehraq may be accessed by users in different regions. Information may be processed in locations where Nehraq, its infrastructure, or service providers operate. Customers are responsible for ensuring that their use of Nehraq complies with laws applicable to their organization and users.

10. Changes to this policy

We may update this Privacy Policy as Nehraq evolves, including as BETA features become generally available, new integrations are added, or legal requirements change. Material updates may be communicated through the website, workspace notices, or other appropriate channels.

11. Contact

For privacy questions, contact Nehraq through the official support or legal contact channel provided in your access correspondence, workspace, or customer agreement.