Privacy Policy

Effective Date: April 7th, 2026

This Privacy Policy describes how Nearly Extraterrestrial Technology, Inc. ("NET," "we", "us" or "our") handles personal information that we collect through our websites and mobile applications that link to it (collectively, the “Service”), as well as through our marketing and other activities described in this Privacy Policy.

State Law Privacy Rights: See the State law privacy rights section below for important information about rights you may have under applicable U.S. state privacy laws.

If you have any questions or concerns about this Privacy Policy, please contact us.

Index

You should read this Privacy Policy in its entirety but you can click on the links in the index below to jump to specific topics.

Personal information we collect

How we use your personal information

Notice to Google users

How we share your personal information

Your choices

Other sites and services

Security and retention

International data transfers

Children

Changes to this Privacy Policy

How to contact us

State law privacy rights

Personal information we collect

The personal information we collect from you, either directly or indirectly, will depend on how you interact with us and with our Service. In general, we collect personal information about you from the following sources:

Information you provide to us. Personal information you may provide to us includes:

Contact data. Your full name, email address, mailing address, phone number, professional title, company, social media handle, and other contact details.
Account data. The data you use to establish or access your Service account, such as your full name, email address, a password issued for your Service account, your account settings, and any other information you choose to add to your account.
Email account data. Authentication tokens for the email account you connect to the Service (e.g., Gmail) as well as data accessible within it, including the account and profile details (e.g., photo, language preference), the contents of email bodies, subject lines and headers (e.g., to, from, cc, bcc, date and time sent/received); email attachments; and metadata about the emails you send and receive through our email client (e.g., timestamps and information about engagement, such as whether an email is read or archived).
Contact book data. The “contact book” associated with the email account you connect to the Service, which contains any available contact details or other biographical information about the people you’ve sent email to or received email from in the Service. We access this data only to the extent it is available in your connected email account and only when you grant us access to it. We do not market to the individuals in your Contact book data but may offer features that allow you to send them invitations to use the Service.
Calendar account data. Authentication tokens for any calendar account you connect to the Service as well as data accessible within it, including event names, times, locations, videoconference details, descriptions, invitees, and attendance data.
Voice data. Any voice recordings you provide to the Service, such as when you use the Service to record an email response or to ask the Service a question about your emails, as well as any transcripts created from such recordings. When you record these responses, ask these questions or otherwise grant the Service access to your device’s microphone, we and our service providers monitor and record the communications to provide the Service and for the other purposes described in the How we use your personal information section below. Be sure only to capture your own voice when you record your email responses or ask the Service questions about your emails.
Payment data. Any payment card data or other data provided to pay for the Service, and information about your payment transactions and subscriptions to the Service.
Communications data. Information in your communications with us, including when you provide feedback, submit requests, report a bug, register a complaint, ask a question, complete a survey or otherwise communicate with us through the Service, email, social media, our events, or otherwise. This includes both the content of these communications and the contact details and metadata associated with it, such as social media handles, profile photos that you use with your social and email accounts, and the date/time of the communication.
Referral data. Contact details of contacts that you refer to us or that refer you, such as when you invite them or are invited by them to use the Service. You should not share your contacts’ information with us unless you have permission to do so.

If we collect personal information not specifically listed above, we will use it consistent with this Privacy Policy or as otherwise explained at the time of collection.

Automatic collection. As you navigate the Service, our communications, and other online services, we and our service providers may automatically collect identifiable information about you, your computer or device, and your browsing actions and use patterns, such as:

Device data. Information about your computer or mobile device, such as operating system type and version, manufacturer and model, browser type, screen resolution/size, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique device identification numbers or other identifiers, language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state, or geographic area.
Usage data. Page or screen views, details about videos and other content you viewed/accessed on a page or screen and how you interacted with it, search terms, log-in information, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages and screens, information about your activity on a page or screen, access times and duration of access, whether you have opened emails from us or clicked links within them, and other functional information on Service performance (like diagnostics and crash logs).
Web Technologies. We and our service providers use the following technologies to facilitate some of the automatic collection described above, including to enable Service functionality and analytics:
Cookies. Cookies are text files that websites store on a visitor's device to uniquely identify the visitor's browser or to store information or settings in the browser for the purpose of tracking user activity and patterns, helping the visitor navigate between pages efficiently, remembering preferences and whether a visitor is logged in, and improving the visitor's browsing experience. Some cookies store information only during a user session, others persist in your browser and collect data from multiple sessions. You can learn more about cookies and how to control them at www.allaboutcookies.org.
Pixels. Pixels (also known as web beacons or clear GIFs) are embedded in code and/or invisible as image files within webpages or HTML formatted emails to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked, at a specific date and time using a particular device.
Browser web storage (including HTML5) and native device storage. Browser web storage (also known as locally stored objects) functions like cookies but enables the storage of a larger amount of data. Native device storage is essentially the equivalent of web storage but for native applications.
Software development kits (SDKs). SDKs incorporate third party computer code into our mobile app and website that allows our third party service providers to collect data directly from our app and website to enable mobile app and website development/deployment, analytics, and error logging.
Embedded scripts. These scripts are software code temporarily downloaded to your device to collect information about your interactions with the Service such as the links you click.

Third party sources. We combine personal information we receive from you or collect automatically when you use the Service with personal information we obtain from other sources, such as:

Public sources. Such as publicly-accessible social media platforms and websites.
Authentication services you can use to log into the Service, such as those provided by Google, which may share information about you to facilitate the authentication described in the service’s settings or privacy policy.

How we use your personal information

We use your personal information for the following purposes or as otherwise described in this Privacy Policy or at the time of collection:

Service delivery. We use your personal information to provide the Service, process your payments, and to communicate with you about our Service (including via support and administrative messages).
Business operations. We use your personal information to administer and maintain our Service and our IT systems (including monitoring, troubleshooting, data analysis, testing, system maintenance, repair, and support, reporting and hosting of data) and to operate our business.
Research and development. We use your personal information for research and development purposes, including to analyze and improve the Service and our business in an informed way, subject to the applicable restrictions in our Terms of Service or other agreement with you, as applicable. As part of these activities, we may create aggregated, deidentified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze, improve and promote the Service and our business.
Marketing. We may send you marketing emails as permitted by law. You may opt-out of our marketing communications as described in the opt-out of marketing section below.
Compliance and protection. We use your personal information to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities. We also use your personal information to protect our, your or others’ rights, privacy, safety, or property (including by making and defending legal claims), including by conducting internal audits against our policies; enforcing the terms and conditions that govern the Service; and taking steps to prevent, investigate and deter fraud, cyberattacks or other unauthorized, unethical, or illegal activity.

Notice to Google users

The Service’s use and transfer to any other app of information received from Google APIs, including email account data from a Google account connected to the Service, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not transfer, sell, or use user data obtained through the Google Workspace API to create, train, or improve a machine learning or artificial intelligence model beyond that specific user’s personalized model for the appropriate use case or user-facing feature.

We may share your personal information with the following categories of recipients, at your direction, and as otherwise described in this Privacy Notice or at the time of collection.

Your email and calendar account providers. Any communications and information sent through or uploaded to our email client is accessible to the provider of your connected email and/or calendar accounts (e.g., Google) as if you sent it through or uploaded it to your provider account directly.
Service providers. Third parties that provide services on our behalf or help us operate the Service or our business such as business applications, cloud hosting and infrastructure, content delivery network, information technology, cybersecurity, customer support, billing, customer relationship management, telecommunications, email delivery, marketing, payment processing, SDK package management, customer research, analytics, and artificial intelligence (AI) tools (as further described in the AI service providers section immediately below).
AI service providers. To deliver AI-powered features of the Service (such as email prioritization, drafting, and summarization), we share your email account data — including the contents of email bodies, subject lines, headers (e.g., to, from, cc, bcc), and attachments and voice data with third-party AI service providers, specifically Amazon Web Services, Inc., Anthropic, PBC, Deepgram, Inc., Google LLC, Microsoft Corporation (Azure), and OpenAI Group PBC. These providers process your personal information solely to provide the Service's AI-powered functionality on our behalf. We do not allow these providers to use your personal information to train or improve their AI or machine learning models, and they are contractually required to protect your personal information to a standard that is the same as or equivalent to the protections described in this Privacy Policy.
Payment processors. Third party payment processors that collect your payment card data and other transaction data to process your payments for the Service. For example, we may accept payment card payments through Stripe and in-app purchase/subscriptions through Apple. You can read Stripe’s privacy policy at https://stripe.com/privacy and Apple’s privacy policy at https://www.apple.com/legal/privacy.
Authentication services. When you log into the Service by using your credentials on a third party service such as Google, the service will collect contact data, device data and usage data (as described above) from you to facilitate the authentication as described in the service’s relevant settings or privacy policy. Your use of the Sign-in with Google feature is subject to its Terms of Service and Privacy Policy.
CAPTCHA services. To enhance the security of our Service, we use captcha features that require users to complete a task to authenticate to the Service. Third party providers of these CAPTCHA services collect device data and usage data (as described above) to enable the CAPTCHA features and as described in their privacy policies. For example, we use the Google reCAPTCHA service. Your use of the Google reCAPTCHA feature is subject to its Terms of Service and Privacy Policy.
Affiliates. Our corporate affiliates that we control, are controlled by, or with which we are under common control, for purposes consistent with this Privacy Policy.
Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.
Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
Business transferees. Parties (and their advisors) to transactions or proposed transactions involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, NET or our affiliates (including, in connection with a bankruptcy or similar proceedings).

Your choices

Your choices regarding the personal information we hold about you include the following:

Privacy rights. Residents of certain states can exercise privacy rights with respect to the personal information we hold, as described in the State law privacy rights section below.
Disconnect your email account. You can disconnect your email account (e.g., your Gmail account) from our email client at any time in the email account provider’s account settings.
Access or update your information. You may review and update certain Service account information in your Service account settings.
Opt-out of marketing communications. You may opt-out of our marketing emails by following the opt-out instructions in the email or by contacting us. Please note that if you optout of marketing emails, you may continue to receive service-related and other non-marketing emails.
Request account deletion. You may request deletion of your Service account and associated information by contacting us with your request.
Authentication services. You may be able to limit the information shared with us by third party services that you use to sign in to the Service, such as Google. See your settings and the privacy policy for that service for details.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Limit collection by cookies and other web technologies. Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, certain features of the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.

Other sites and services

The Service contains links to or integrations with online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or other online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites and online services you use.

Security and retention

We use various technical and organizational measures designed to protect the personal information we process. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information. We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for the compliance and protection purposes described above.

International data transfers

We are headquartered in the United States and may use service providers that operate in the United States and other countries. These countries may have data protection laws that are not as protective as the laws where you live.

Children

The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledgment that the modified Privacy Policy applies to your interactions with the Service and our business.

How to contact us

If you have questions or concerns about this Privacy Policy or our practices, please contact us at legal@avec.ai.

State law privacy rights

Scope. This section applies to residents of certain U.S. states with privacy laws applicable to us that grant their residents the rights described below or require the disclosures made below (such laws, “Applicable State Privacy Laws”). If you are not a resident of the state in which these rights are granted under Applicable State Privacy Laws, you may not be able to exercise these rights.

For purposes of this section, “personal information” has the meaning given to “personal data” or similar terms under the Applicable State Privacy Laws, but does not include information exempted from such laws.

Privacy Rights. You may have the rights listed below. The rights described in this State law privacy rights section are not absolute, and, in certain cases, we may decline your request as permitted by law or where the laws in your state do not afford you these rights.

Confirmation. To confirm whether we are processing your personal information and, in certain cases, information about the categories of personal information we have collected, the categories of personal information we have shared with or sold to third parties, and the categories of third parties with whom we share or sell personal information. The specific information that may be requested varies depending on your state of residence.
Access. To request a copy of certain personal information that we process about you in a portable format that can be transmitted to another entity.
Correction. To correct inaccurate personal information that we have collected about you.
Deletion. To ask us to delete personal information we maintain about you.
Opt out of
- Processing personal information for targeted advertising. To opt out of processing of personal information for targeted advertising purposes.
- Sales of personal information. To opt-out of “sales” of your personal information as defined by Applicable State Privacy Laws.
- Profiling. To opt-out of solely automated processing of personal information for the purposes of certain “profiling” that will have a legal or similarly significant effect on you.
  
  We do not engage in processing personal information for targeted advertising, sales or profiling purposes described above.
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by Applicable State Privacy Laws.

How to exercise your rights.

Submitting requests to confirm, access, correct, or delete your personal information. You can submit requests to exercise the rights described above by submitting a request to legal@avec.ai. You can also request to delete your personal information by tapping your avatar in the app and accessing the "Settings" menu. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.
Identity verification. We may need to verify your identity to process requests to exercise your rights to confirm, access, correct, or delete, and we reserve the right to confirm your residency. To verify your identity, we may require you to log into your Service account if you have one, provide information we can match against information we may have collected from you previously, confirm your request using the email address we have on file, provide government identification, or provide a declaration under penalty of perjury, where permitted by law.
Authorized agents. Your authorized agent may make a request on your behalf through the same channels described above. We may ask you and/or your agent to take steps permitted by law based on the nature of your request to verify your agent’s authority.
Appeals. You can ask to appeal any denial of your request in the same manner that you may submit the request. You must submit your appeal within 45 days of the denial of our request or within any longer timeframe provided by the Applicable State Privacy Law in the state where you live. When sending your appeal, please include your name, contact information, details of the original request, the date of our response, and the reasons you believe the denial should be reconsidered. We will review your appeal and respond in writing within the timeframe required by the Applicable State Privacy Law. If we deny your appeal, we will explain why.

Revoke consent. When we request your consent to process your personal information, you can contact us to revoke your consent.

Sensitive data. With the exception of your payment details described in this Privacy Policy, we do not require you to provide us with data considered “sensitive” under Applicable State Privacy Laws. However, some users may voluntarily provide sensitive data to us, such as if the email account data we collect when a user connects an email account to the Service contains sensitive data. Do not provide us with sensitive data if you do not consent to our handling of it as described in this Privacy Policy. By providing sensitive data to us you affirmatively confirm that you freely give your informed, unambiguous agreement to our use and disclosure of it for the purposes explained or apparent at the time of collection or otherwise as described in this Privacy Policy. You can contact us to revoke this consent at any time but we will not be able to provide services or grant requests that require it.

Additional information for Connecticut and Rhode Island residents. Depending on your state of residence, you can request a list of third parties to which we have sold or may sell your personal information. We do not currently sell personal information as defined by the privacy laws in these states.