Privacy Policy | NATARAJA

1. Grounds for Processing Your Information

NATARAJA, Pte. Ltd. (“the Company”) is committed to protecting your personal information (“Your Information”) and your right to privacy.

This Privacy Policy (“the Privacy Policy”) explains how the Company collects, uses, discloses, and safeguards your information when you visit our website, application, platform, or use any email or other type of communication between you and the Company, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the “Services”).

In the Privacy Policy, “you” refers both to you as an individual and to the entity you represent.

Under the Privacy Policy, and by law if you are resident in Singapore, the Company will process Your Information according to Singapore’s Personal Data Protection Act (“PDPA”).

Under this Privacy Policy, and by law if you reside within the EU, the Company will process your information according to the EU’s General Data Protection Regulation (“GDPR”).

The Company has the right to process your Your Information under the following scenarios:

Consent: You have provided your explicit consent for us to process Your Information for specific reason(s).
Contractual Obligations: The processing of Your Information is required to fulfil an agreement with you or to meet pre-contractual obligations.
Legal Obligations: The Company needs to process Your Information to comply with the legal obligations to which the Company is bound.
Vital Interests: The processing of Your Information is critical for protecting your vital interests or those of another individual.
Public Interests: The processing of Your Information is connected to a task carried out for public interest or in the execution of an official authority vested in the Company.
Legitimate Interests: The Company needs to process Personal Data for the sake of legitimate interests pursued by the Company.

2. Information The Company Collects and Processes

You give your consent for the Company to collect and processes:

Personal Data: Identifiable information such as your name, email address, telephone number, and demographic information that you voluntarily give to us when choosing to participate in various activities related to the Services.
Derivative Data: Information our servers automatically collect when you access the Services, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Services.
Payment Data: When you purchase Decision Credits, payment is handled by our third-party payment processor on its own hosted page. The Company does not collect or store your payment card details. The Company receives from the processor only a confirmation of payment and limited transaction metadata, such as the amount, the currency, and a processor reference, needed to credit your account and keep its records.

3. Use of Your Information

The Company uses the information the Company collects or receives:

To facilitate account creation and logon process.
To send administrative information to you.
To fulfill and manage purchases, orders, payments, and other transactions related to the Services.
To identify your data and your applications in the Services in order to deliver the Services.
To deliver targeted advertising, newsletters, and other information regarding promotions and the Services to you.
To request feedback and to contact you about your use of the Services.
To enforce our terms, conditions, and policies.
To respond to legal requests and prevent harm.

4. Disclosure and Non-Disclosure of Your Information

The Company may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights: If the Company believes release of information about you is necessary to respond to legal processes or protect the rights, property, and safety of others.
Third-Party Service Providers: The Company may share your information with third parties that perform services for us or on our behalf. Each Third-Party Service Provider may have their own privacy policy. The list is available on Schedule A: Third-Party Service Providers.
Marketing Communications: With your consent, the Company may share your information with third parties for marketing purposes.

You have the right to request that the Company does not disclose Your Information. Once the Company receives and confirms a verifiable request from you, the Company will cease to disclose Your Information. To exercise your right to non-disclosure, please notify the Company.

5. Tracking Technologies

Cookies and Web Beacons: The Company may use cookies, web beacons, tracking pixels, and other tracking technologies on the Services to help customize the Services and improve your experience.
Google Analytics: The Company uses Google Analytics, a web analytics service provided by Google, to track and report website and application traffic. Google uses the data collected to track and monitor the use of our Service, sharing this data with other Google services. You can opt-out of having your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page.
Google Sign-In: Signing in to the Portal uses your Google account. The Company receives your name, email address, and Google account identifier. Firebase Authentication, also provided by Google, is used only for sign-in to the Company’s internal content administration and not for the Portal. See Google’s Privacy Policy.

6. Third-Party Websites

The Services may contain links to third-party websites and applications of interest. The Company does not control these third-party websites and are not responsible for their content or privacy practices.

7. Security of Your Information

The Company uses administrative, technical, and physical security measures to protect your personal information. While the Company has taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable.

8. Policy for Minors

The Company does not knowingly solicit information from or market to minors under the age of 13.

If you become aware of any data the Company has collected from minors under the applicable age, please notify us.

9. Rights and Options Regarding Your Information

Access, Correction, and Erasure: You can request access to, update, or delete the information the Company has about you. If possible, you can access, update, or request deletion of Your Information directly within your Account Information. If you cannot perform these actions yourself, please notify the Company for assistance.
Objection: You can object to the processing of Your Information when the Company is relying on a legitimate interest and there is something about your particular situation that makes you want to object to the processing.
Emails and Communications: You can opt-out from any direct marketing communications from the beginning of the Terms. If you no longer wish to receive correspondence, emails, or other communications from us, you may opt-out.
Account Information: You may at any time review or change the information in your account or terminate your account.
Copy of Your Information: You can request to receive a copy of Your Information the Company has about you.
Consent Withdrawal: You have the right to withdraw your consent for using your Personal Data. If you withdraw your consent, the Company may not be able to provide you with the partial or whole of the Services subjected to the technicalities.

10. Exercising Rights and Options

You can exercise your rights to access, correction, erasure, and objection by notifying the Company. The Company may ask you to verify your identity before processing such requests.

Upon receiving a valid request, the Company will endeavour to respond as soon as reasonably practicable, in compliance with the PDPA or GDPR. Please note that the Company may charge a reasonable fee for the processing of any data access request.

For PDPA, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore.

For GDPR, you have the right to lodge a complaint with a Data Protection Authority about our collection and use of your Personal Data. For more information, if you are within the European Economic Area (EEA), please get in touch with your local data protection authority in the EEA.

11. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from PDPA or GDPR.

12. Updates to This Policy

The Company may update this Privacy Policy from time to time. The Company will notify you of any changes by updating the “Last Updated” date of the Privacy Policy.

The Company updates Schedule A: Third-Party Service Providers in the event of addition, removal, or modification of Third-Party Provider(s). After such an event, the Company will notify you by updating the “Last Updated” date of the Schedule.

13. Limitation of Liability

Except as prohibited by law, the Company is not liable for any indirect, punitive, special, incidental, or consequential damage that may arise from the use of the Services.

14. Governing Law and Dispute Resolution

The Privacy Policy and any disputes or claims arising out of or in connection with it shall be governed by and construed in accordance with the laws of the Republic of Singapore.

15. Notices

You will provide your Contact Email to the Company. If you do not provide a separate email address, the registered email address for sign-in will be your Contact Email. All notices to you must be sent to your Contact Email.

All Notices from the Company will be treated as received when the email is sent. You are responsible for keeping its Contact Email current throughout the Term.

All notices to the Company, for example requests, inquiries, or feedback pertaining to the Privacy Policy, must be sent to email at v-legal {at} NATARAJA.io.

16. Your Acknowledgment

By using the Services, you acknowledge that you have read the Terms and Conditions together with the Privacy Policy and agree to both terms.

Schedule A: List of Third-Party Services

Last updated on August 9, 2026

Provider	Purpose	Data processed
Google (Google Cloud Platform)	Hosting, databases, and infrastructure on which the Services run	All Service data, at rest and in transit
Google (Google Sign-In)	Signing in to the Portal	Name, email address, Google account identifier
Google (Firebase Authentication)	Signing in to the Company’s internal content administration only	Administrator account identifiers
Google (Google Analytics)	Website analytics	The usage information described above as Derivative Data
Stripe	Processing payments for Decision Credit purchases	Payment and card details, collected by Stripe directly on its own hosted page; the Company receives only payment confirmation and transaction metadata
NVIDIA (NVIDIA Build)	Large language model processing. This is the default model provider for Choreography and for methods authored in the Services	The content submitted to a model-backed step, and the output produced
Google (Gemini API)	Large language model processing, where a Gemini model is selected for a step	The content submitted to a model-backed step, and the output produced
Amazon Web Services (Simple Email Service)	Delivery of transactional notices, such as telling you that a step is waiting for your judgement	Recipient email address, the protocol and step names, a shortened run reference, and a link to the Portal. The content under review is never included

Where you use a Service through your own AI assistant supplying its own model, the content of that step is not sent to a model provider engaged by the Company.

Each provider processes data under its own privacy policy. The Company updates this Schedule when a provider is added, removed, or changed, and refreshes the “Last updated” date above.