Privacy Policy

1Introduction & Overview

Welcome to nRaft ("we," "our," or "us"). We are a premier digital engineering studio providing custom Next.js web application development, React Native mobile app development, free and premium landing page builds, and enterprise AI automation solutions.

This Privacy Policy describes how we collect, use, process, and safeguard your personal and business data when you visit our website (nraft.com), submit a project inquiry, or engage our development and engineering services.

2Information We Collect

We collect information necessary to evaluate project inquiries, deliver custom software solutions, and provide post-launch support:

• Contact & Inquiry Information: Full name, business email address, company name, phone number, and project specifications submitted via our contact forms.
• Project Assets & Credentials: Branding assets, wireframes, repository access (GitHub/GitLab), API keys, and deployment credentials (such as Hostinger, AWS, or Supabase) provided voluntarily for project execution under strict confidentiality.
• Usage & Analytical Data: IP address, browser type, device information, operating system, and anonymous page navigation patterns collected to optimize our website performance.

3How We Use Your Data

We use your information strictly for legitimate commercial and technical purposes, including:

• Providing customized quotes, project timelines, and technical architecture proposals.
• Developing, testing, and deploying Next.js web applications, React Native mobile apps, landing pages, and AI pipelines.
• Configuring client hosting environments (Hostinger, Cloudflare, Vercel, Supabase, or AWS).
• Providing 30-day post-launch technical warranty and maintenance support.
• Responding promptly to customer inquiries, technical requests, and support calls.
• Fulfilling legal obligations and enforcing client contracts.

4AI Workflows & Model Privacy

For clients engaging our AI & Automation services:

• Zero Model Training on Client Data: We configure commercial AI APIs (OpenAI, Anthropic, Google Gemini, or self-hosted LLMs) with enterprise privacy settings. Your proprietary business data, prompts, and training datasets are never used to train public foundation models.
• Vector Storage Security: Embeddings and retrieved enterprise knowledge bases are stored in secured, isolated vector databases with encryption at rest and in transit.

5Information Sharing & Third Parties

We never sell, rent, or trade your personal or business data. We share data only with trusted third-party providers essential to running our infrastructure and client projects:

• Hosting & Cloud Providers: Hostinger, Cloudflare, Vercel, or AWS for site delivery.
• Database & Authentication: Supabase, PostgreSQL, or Firebase for application backends.
• Communication & Form Handling: Secure transactional email servers for delivering inquiries to our engineering team.

6Data Security & Retention

We implement industry-standard administrative, technical, and physical safeguards. All web communication occurs over encrypted HTTPS/TLS channels. We retain personal and inquiry data only for as long as necessary to complete client projects, fulfill legal requirements, and provide ongoing warranty services.

Upon project completion and milestone sign-off, clients may request the complete deletion of staging environments, access credentials, and temporary assets from our local machines.

7Your Privacy Rights

Under applicable data protection laws (including the Digital Personal Data Protection Act and GDPR principles), you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request permanent erasure of your personal data from our contact databases.
• Opt out of marketing newsletters at any time via the unsubscribe link or email.

8Contact Us

If you have questions, feedback, or data requests regarding this Privacy Policy, please reach out to our team: