Privacy Notice.
This Privacy Notice explains what we collect when you use nucleus.education, why we collect it, how long we keep it, who we share it with, and how you can ask us to delete it. We wrote this to be readable. Where we used legal language, it is because that language is load-bearing.
1. Who we are
The data controller is Nucleus Learning, Inc., a Delaware C-Corporation ("Nucleus," "we," "us," "our"). For any privacy question, email gio@nucleus.education.
2. What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Your email address | To rate-limit the demo (one session per email), to record your agreement to these Terms, and (only if you opt in) to send you product updates. | Legitimate interest (rate-limiting, record-keeping). Consent (marketing email, only if you opt in). |
| Messages you send to the Mentor and the Mentor's responses | To run the conversation. To review the Mentor's behavior during this beta for safety and quality. To improve the Mentor's prompts over time. | Legitimate interest (safety review, product improvement). |
| Your user-agent string and approximate IP address, both stored as one-way hashes | To maintain a record that consent was given (a proof-of-consent trail that does not store the raw values). | Legitimate interest (record-keeping for legal compliance). |
| Which stage you picked and how many tokens you used | To enforce the per-email budget and understand demo usage patterns. | Legitimate interest. |
We do not knowingly collect information from children under 13 in the United States, or under 16 in the European Economic Area. The demo is framed for parents. If we learn that we have inadvertently collected information from a child under these thresholds without proper parental consent, we will delete it on request.
3. What we do not collect
We do not ask for your child's name, age, location, school, or photograph. We do not ask for your address or phone number. We do not collect payment information on this site. We do not use advertising cookies. We do not fingerprint you. We do not sell anyone's data.
4. Who we share it with
We use a small number of vetted service providers ("processors") to operate the Service. Each of them processes data on our behalf and only for purposes we have instructed:
- Vercel, Inc. — hosts the website and runs the serverless function behind the Mentor demo.
- Upstash, Inc. — stores the email rate-limit counters, the demo conversation logs, and the consent records.
- Anthropic, PBC. — provides the underlying AI model the Mentor is built on. Your conversation text is sent to Anthropic as part of each model request. Anthropic's API terms state that they do not train on API traffic.
- Google LLC — provides Google Workspace for our email (gio@nucleus.education) and provides Google Analytics on the public marketing pages of the site. The demo page itself does not load Google Analytics.
We do not share your data with anyone else for their own marketing, analytics, or training purposes. We do not sell data.
5. International transfers
If you are in the European Economic Area, the United Kingdom, or Switzerland, please note that the processors listed above are based in the United States and your data will be transferred there. We rely on the processors' standard contractual clauses and on their certifications under applicable frameworks for this transfer.
6. How long we keep things
- Email + rate-limit counter: kept as long as the demo is live, or until you request deletion. After the demo closes, we will retain this for up to six months to process residual support and legal requests, then delete it.
- Demo conversation logs: the log is capped at 5,000 most recent turns, which rolls over naturally. Safety-flagged turns are kept longer (up to 1,000 most recent) for ongoing review.
- Consent records: we keep the proof-of-consent entry for as long as we hold any of your personal data, so that we can demonstrate how and when consent was given.
- Marketing opt-in list: kept until you unsubscribe. Every marketing email we send will contain an unsubscribe link.
7. Your rights
Depending on where you live, you may have the following rights regarding your personal data:
- Access. Ask us what we hold about you and receive a copy.
- Correction. Ask us to fix inaccurate data.
- Deletion. Ask us to delete your data. We will honor deletion requests unless we are required to retain the data for a specific legal reason.
- Portability. Ask us to give you your data in a machine-readable format.
- Withdraw consent. For anything we do on the basis of your consent (such as marketing email), you can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing that happened before withdrawal.
- Object. Object to any processing we do on the basis of legitimate interest, including asking us to stop.
- Complaint. You can lodge a complaint with a data protection authority in your country.
To exercise any of these rights, email gio@nucleus.education with the subject line "Privacy request" and tell us what you want done. We will respond within thirty days, and usually much sooner.
8. Security
We use industry-standard encryption in transit (HTTPS) and at rest (our processors' managed encryption). We do not store passwords or payment information on this site. No system is perfectly secure. If you believe your data has been compromised, tell us immediately.
9. Cookies
The demo page does not set any tracking cookies. The public marketing pages of nucleus.education load Google Analytics, which sets standard analytics cookies to measure site traffic. You can block or delete these cookies in your browser settings without affecting the demo.
10. Changes to this notice
We may update this Privacy Notice as our practices change. If the change is material, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or on the Service.
11. Contact
For any question or request, email gio@nucleus.education. If you are writing to exercise a data right, include "Privacy request" in the subject line so we can route it correctly.