Privacy Policy

Effective and last updated: September 4, 2026

This Privacy Policy explains how Ncarnate Inc., a Nevada corporation (“Ncarnate,” “we,” “us,” or “our”), collects, uses, discloses, and retains personal information in connection with its websites, software, applications, APIs, integrations, documentation, and related services (collectively, the “Services”).

The Services are in private alpha and change frequently. Features, integrations, providers, and data flows may change as Ncarnate tests and develops the Services. The information processed depends on how the Services are configured and used. This Policy describes the categories of information Ncarnate may process and the purposes for which it may process that information.

1. Scope and roles

This Policy applies to personal information Ncarnate processes in connection with the Services.

“Customer Content” means information and other content that a user or organization submits, connects, or directs the Services to process, together with output generated specifically from that content. Customer Content may include information about users or other people. Depending on the context, Ncarnate may process personal information for its own purposes or on behalf of a user or organization. If another user or organization submitted your information, direct privacy requests to that user or organization. Ncarnate may refer requests concerning Customer Content to the relevant user or organization.

This Policy does not govern third-party websites, models, applications, or services, even when they connect to the Services. Those third parties have their own terms and privacy practices.

2. Information Ncarnate may collect

Account and relationship information

Ncarnate may collect names, email addresses, organization names, roles, account settings, membership and permission information, authentication and credential records, communications, billing and transaction information, and other information provided in connection with an account, evaluation, or relationship with Ncarnate. Payment providers may process payment-card and related billing information.

Customer Content

Depending on how the Services are used, Customer Content may include:

• prompts, instructions, agent configurations, workflows, and tool parameters;
• messages, emails, calendar information, communication metadata, transcripts, call or voice data, and generated responses;
• documents, files, attachments, images, and extracted content;
• contact details, notes, relationships, tasks, schedules, and business records;
• device, channel, integration, and connected-account information; and
• outputs, action records, approvals, and related metadata.

Customer Content may contain personal information about users or other people. Do not provide Customer Content unless you are authorized to do so. The Terms of Service prohibit specified regulated and high-risk data unless Ncarnate authorizes it in writing.

Connected services and other sources

Ncarnate may receive information from services that a user or organization connects, including AI model, speech, transcription, email, calendar, messaging, file-storage, CRM, accounting, communications, automation, and device providers. This may include content, account information, permissions, access tokens, and other credentials needed to maintain a connection or perform a requested action.

Ncarnate may also receive information from an organization, another user, a referral source, service providers, integrations, forms, scheduling tools, and other lawful sources.

Ncarnate may derive or infer information from the information described above.

Usage, device, and diagnostic information

Ncarnate may collect information about access to and use of the Services, including IP address, browser and device information, operating system, approximate location, session identifiers, pages and features used, timestamps, request and response information, selected models and integrations, usage counts, action status, errors, crashes, diagnostics, and security events. Logs and diagnostic records may contain Customer Content and other information associated with a request or action.

Communications, research, and feedback

Ncarnate may collect information submitted through demonstrations, waitlists, support requests, interviews, surveys, research, and other communications, including contact information, messages, responses, scheduling information, and feedback.

3. How Ncarnate may use information

Ncarnate may use personal information to:

1. provide, operate, authenticate, administer, and maintain the Services;
2. process Customer Content, generate output, route requests, and perform requested actions through connected services;
3. test, evaluate, monitor, analyze, troubleshoot, secure, develop, and improve the Services and related technologies;
4. create and manage accounts, organizations, permissions, sessions, credentials, integrations, usage, and billing;
5. provide support and communicate about the Services, evaluations, security, transactions, and legal terms;
6. detect, investigate, and prevent errors, fraud, abuse, security incidents, prohibited activity, and violations of Ncarnate's terms;
7. comply with law, respond to legal process, establish or defend claims, and protect Ncarnate, its users, and others;
8. operate Ncarnate's business, including research, demonstrations, reporting, vendor management, financing, and corporate transactions; and
9. market and advertise the Services, including measuring ad performance and creating, matching, or retargeting audiences, using account, relationship, usage, and device information.

These activities may involve automated processing and human review by Ncarnate personnel, contractors, and service providers.

Customer Content may be transmitted to model, speech, transcription, search, and other providers involved in a requested feature or action. Those providers may process information under the terms, settings, and arrangements applicable to the relevant service and configuration.

Ncarnate may create, retain, and use aggregated or de-identified information for any lawful purpose. Ncarnate does not attempt to re-identify information it maintains as de-identified except to test its de-identification or as permitted by law.

Google Workspace data

Ncarnate uses information received from Google Workspace APIs, and information derived from it, only to provide or improve user-facing features requested or authorized by users. It does not use that information for advertising or to develop or train generalized AI models.

Ncarnate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How Ncarnate may disclose information

Ncarnate may disclose personal information as follows:

• Personnel, affiliates, and providers. Ncarnate may disclose information to personnel, affiliates, contractors, and providers that support infrastructure, hosting, AI models, speech, transcription, search, authentication, security, logging, monitoring, analytics, advertising, marketing, support, communications, file storage, automation, billing, and other product or business operations.
• Connected services and requested actions. Ncarnate may disclose information to a service, account, recipient, channel, or device when a user or organization connects it, configures the Services to use it, or requests an interaction with it. Once information reaches a third party, that party's practices apply.
• Organizations and users. Account owners, administrators, and other authorized users may access and manage account information, Customer Content, integrations, activity, and settings according to their permissions. An organization may control an account created with its email domain or credentials.
• Advisers and business participants. Ncarnate may disclose information to advisers, auditors, insurers, financing sources, investors, and actual or prospective parties to a financing, reorganization, merger, acquisition, asset sale, bankruptcy, or similar transaction.
• Legal and protection purposes. Ncarnate may disclose information to comply with law or legal process; enforce agreements; investigate suspected violations, fraud, abuse, or security issues; exercise or defend legal claims; or protect Ncarnate, its users, or others.
• At a user's direction. Ncarnate may disclose information as directed or authorized by a user or organization or for another disclosed purpose.

5. Cookies, advertising, and tracking

Ncarnate may use cookies, pixels, tags, and similar technologies for authentication, security, preferences, functionality, analytics, advertising, and measurement.

Ncarnate may use and disclose account, relationship, usage, and device information to advertising and analytics partners to advertise the Services, measure ad performance, and create, match, or retarget audiences. These partners may collect or receive information over time and across websites, applications, and online services.

These activities may be considered targeted advertising or the sale or sharing of personal information under applicable law. The Services do not currently respond to browser “Do Not Track” signals. Ncarnate handles opt-out preference signals where required by applicable law.

6. Legal bases

Where applicable law requires a legal basis, Ncarnate may process personal information to perform a contract or take requested steps; for its legitimate interests in operating, securing, developing, and improving the Services and its business; to comply with law; or with consent.

7. Retention

Ncarnate may retain personal information for as long as it determines reasonably necessary for the purposes described in this Policy, including operating an account or evaluation, testing and developing the Services, maintaining security and business records, resolving disputes, enforcing agreements, and complying with law.

Retention varies based on the nature and context of the information, how the Services are configured and used, operational and legal needs, third-party systems, and backup cycles. Ncarnate may delete or de-identify information at any time, subject to applicable law.

The Services are experimental and are not a records-retention or archival service. Maintain independent copies of information you need.

8. Security

Ncarnate uses safeguards designed to protect personal information in light of the nature of the Services and the information processed. No system, transmission, or storage method is completely secure. Ncarnate does not guarantee the security, confidentiality, integrity, availability, or preservation of information.

You are responsible for securing your devices, accounts, credentials, API keys, connected services, and copies of Customer Content and for configuring permissions appropriately. If you believe an account or credential has been compromised, revoke or rotate the affected access and contact legal@ncarnate.ai.

9. Choices and privacy rights

Depending on where you live and subject to applicable law and exceptions, you may have rights concerning personal information, including rights to request access, correction, deletion, or portability; object to or restrict certain processing; withdraw consent; appeal a denied request; or opt out of certain sale, advertising, or profiling practices. Applicable law may also provide a right not to receive discriminatory treatment for exercising a privacy right.

Account settings may allow users to update information, disconnect integrations, or revoke credentials. To submit a privacy request, email legal@ncarnate.ai. Ncarnate may request information needed to verify identity, authority, account, or organization; refer a request to the relevant user or organization; or limit or deny a request as permitted by law.

You may opt out of promotional emails through the link in the message or by contacting Ncarnate. Ncarnate may continue sending non-promotional communications about accounts, security, transactions, legal terms, or the Services.

10. International processing

Ncarnate is based in the United States. Ncarnate and its providers may process information in the United States and other countries whose laws may differ from those where a user is located.

The Services are intended for authorized evaluation and testing. Do not use them where doing so would require data-residency, localization, or international-transfer commitments that Ncarnate has not accepted in writing.

11. Children

The Services are not directed to children, and users must be at least 18. Do not provide personal information about children through the Services. If you believe a child has provided personal information to Ncarnate, contact legal@ncarnate.ai.

12. Changes to this Policy

Ncarnate may update this Policy at any time in its discretion. Unless Ncarnate states otherwise, updates take effect when posted.

13. Contact

Privacy questions and requests may be sent to:

Ncarnate Inc.
732 S 6th St #7252
Las Vegas, NV 89101, USA
Email: legal@ncarnate.ai