Nayla logoNayla
Join Community

Privacy Policy

Last Updated: February 5th, 2025

1. Introduction

This Privacy Policy explains how Nayla Inc. ("Nayla," "we," "us," or "our") collects, uses, shares, and protects your information when you use our AI-native web browser (the "Service"). By using Nayla, you agree to the collection and use of information in accordance with this policy.

Important Notice:

Nayla is an experimental AI-native browser that collects and processes user data to enable and improve its AI capabilities. Please read this policy carefully to understand our data practices.

Notice for All Users:

  • Nayla is an experimental product that uses advanced AI technology
  • We collect and process data to train our AI systems
  • Your data will be transferred to and processed in the United States
  • By using our Service, you explicitly consent to our data practices

Please review our practices carefully before using our Service.

2. Information We Collect

2.1 Browsing Data

  • Websites visited
  • Search queries
  • URLs accessed
  • Time spent on websites
  • Navigation patterns
  • Browser interaction data

2.2 AI Interaction Data

  • Chat queries and conversations
  • AI feature usage patterns
  • AI-generated content
  • User feedback on AI responses

2.3 Technical Data

  • IP address
  • Device information
  • Operating system
  • Browser settings
  • Performance metrics

The above data collection is essential for the functionality of our AI-native browser and cannot be opted out of while using the Service.

3. Google Data Collection and Use

When you connect your Google account to Nayla, we request specific permissions for the following purposes:

3.1 Data Collected from Google

Google Calendar (Read-Only):

  • We request read-only access to your Google Calendar to provide a preview of your upcoming events.
  • Calendar data is fetched directly from Google servers when you view your calendar and is not stored on our servers.

Google Profile Information:

  • We collect your email address, profile picture, and unique Google ID.
  • This data is used to identify you, create or manage your account, and personalize your experience.
  • This information is stored securely on our servers.

3.2 Data Sharing, Transfers, and Disclosures

  • We do not sell or transfer your Google user data to any third parties for any purposes other than providing or improving the Service.
  • Any transfer of data (e.g., for processing or authentication) is done in accordance with our data protection measures and is strictly limited to fulfilling Service functionality.

3.3 Data Protection Measures for Google Data

  • Google Calendar data is never stored on our servers, ensuring it remains secure and only visible during your session.
  • Profile data is stored with industry-standard security protocols to protect your sensitive information.
  • We implement reasonable administrative, technical, and physical safeguards to prevent unauthorized access to your data.

3.4 Data Retention and Deletion

  • Google Calendar Data: Retrieved on-demand and not retained on our servers.
  • Google Profile Data: Retained only as long as necessary for account management and personalization.
  • You may request deletion of your account. However, note that data already used for AI training or processing in real-time cannot be retroactively removed from our AI models.

4. How We Use Your Information

4.1 Service Operation

  • Providing and maintaining the Service
  • Personalizing your browsing experience
  • Improving browser performance
  • Debugging and troubleshooting

4.2 AI Training and Development

  • Training AI models
  • Improving AI response accuracy
  • Developing new AI features
  • Enhancing prediction capabilities

Your data will be used to train our AI models and may be retained indefinitely for this purpose, even after account termination.

5. Information Sharing

5.1 Third-Party Services

We share data with the following services:

  • OpenAI - For AI processing
  • Anthropic - For AI processing
  • Bing Web Services - For search functionality
  • Railway - For infrastructure services

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests from public authorities.

6. Data Security

While we implement reasonable security measures, Nayla is an experimental product and cannot guarantee the security of your data. We do not maintain backups of user data.

7. Your Rights

You have the right to:

  • Access your personal data
  • Request deletion of your account
  • Terminate your use of the Service

Note: Data already used for AI training cannot be removed from our AI models.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. By using the Service, you consent to these transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Data Retention

  • Account data: Retained while account is active
  • Usage data: Retained indefinitely for AI training
  • Technical logs: 30 days

12. Contact Us

For privacy-related inquiries, contact us at:

Nayla Inc.
2261 Market Street
STE 10969
San Francisco, CA 94114

13. Regional Privacy Rights

13.1 European Economic Area

For users in the European Economic Area:

  • Legal Basis: We process data based on:
    • Your explicit consent
    • Legitimate interests in developing AI technology
    • Contractual necessity to provide our Service
  • International Transfers:
    • Data is processed in the United States
    • We implement appropriate safeguards including Standard Contractual Clauses.
  • Your Rights: You may request:
    • Access to your personal data
    • Correction of your personal data
    • Deletion of your personal data
    • Data portability
    • Restriction of processing

13.2 California Privacy Rights (CCPA)

California residents have additional rights regarding their personal information under the California Consumer Privacy Act (CCPA). However, as an experimental AI product, some CCPA rights may be limited by our AI training requirements.

14. Consent and Data Processing

By using Nayla, you consent to:

  • The collection and processing of your data for AI development
  • Transfer of your data to the United States
  • Use of your data to improve our Services
  • Our evolving privacy practices as our product develops
  • Periodic updates to this policy as our Service grows