Privacy Policy

Last Updated: May 1st, 2025

1. Introduction

This Privacy Policy describes how NQONQI MEDIA PTY LTD ("we," "us," or "our") collects, uses, and protects your personal information when you use our RAG-based knowledge management service and chat widget platform (the "Service").

We are committed to protecting your privacy in accordance with the Protection of Personal Information Act (POPIA) of South Africa and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you create an account:

  • Email address (for registration and account communication)
  • Name (for profile identification)
  • Company name (for profile and billing purposes)
  • Domain name (for RAG implementation and widget configuration)

2.2 Document Data

  • Publicly accessible documents or documents containing publicly accessible information that you upload
  • Metadata associated with uploaded documents
  • Processed vector representations of your documents

2.3 Usage Data

  • Anonymous chat widget conversations and interactions
  • Analytics data (aggregated and anonymized)
  • System performance and usage metrics
  • IP addresses (for security and fraud prevention only)

2.4 Automatically Masked Data

Any personally identifiable information (PII) shared through the chat widget is automatically detected, masked, and never stored in identifiable form.

3. How We Use Your Information

We use your information to:

  • Provide and maintain our Service
  • Process your documents for RAG functionality
  • Enable chat widget functionality on your domain
  • Provide customer support
  • Send important Service-related communications
  • Generate anonymized analytics and insights
  • Improve our Service quality and performance
  • Ensure security and prevent fraudulent activity

4. Data Storage and Security

4.1 Storage Location

  • All data is stored in secure data centers located in the New York region, United States
  • This includes Kubernetes clusters, databases, vector databases, authentication data, and knowledge base documents

4.2 Security Measures

  • Industry-standard encryption in transit and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication protocols
  • Automated PII masking for chat conversations

5. Third-Party Services

5.1 Large Language Model Providers

We integrate with the following LLM services:

  • OpenRouter
  • OpenAI
  • Google Gemini

These providers process query data to generate responses. We do not share personally identifiable information with these providers, and conversations are anonymous.

5.2 Data Sharing

  • We do not sell, trade, or transfer your personal information to third parties
  • We may share anonymized, aggregated data for research or improvement purposes
  • We will disclose information only when required by law or to protect our rights

6. Data Retention

6.1 Account Data

Personal account information is retained as long as your account remains active or as needed to provide services.

6.2 Document Data

Uploaded documents and their vector representations are retained until you delete them or terminate your account.

6.3 Chat Data

Anonymous chat conversations are retained for analytics purposes for a maximum of 2 years.

6.4 Deletion Requests

You may request deletion of your data at any time by contacting us.

7. Your Rights

Under POPIA and other applicable laws, you have the right to:

  • Access your personal information
  • Correct or update your information
  • Delete your personal information
  • Object to processing
  • Data portability
  • Lodge a complaint with the Information Regulator

To exercise these rights, contact us at legal@agnosai.com.

8. International Compliance

8.1 GDPR Compliance

For EU residents, we comply with General Data Protection Regulation (GDPR) requirements.

8.2 CCPA Compliance

For California residents, we comply with California Consumer Privacy Act (CCPA) requirements.

9. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children.

10. AI Training

We do not use your data, documents, or conversations for AI training or model improvement.

11. Contact Information

For privacy-related questions or concerns, contact us at:

  • Email: legal@agnosai.com
  • Address: B1871 White City, Nyanga, 7750 (South Africa)

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.


*This Privacy Policy is governed by South African law and is compliant with POPIA, GDPR, and CCPA where applicable.*