Privacy policy

Who we are

Nested is the product this website describes. For questions about this policy or this website, write to [email protected].

If you run Nested in your own environment, you (or your organization) operate that deployment. For product data on that cluster, you are the operator those requests should go to unless a written support agreement says otherwise.

What this policy covers

This policy covers the Nested software, this marketing website, and related support email. Third-party services you connect (GitHub, Google, Slack, and others) publish their own policies.

Deployment model

All Nested services — the control plane, agent hosts (cloud-agent), and bundled platform dependencies such as the database, queue, object store, and notification service — are deployed on Kubernetes that you host and administer.

Nested does not operate a multi-tenant production cloud that stores your prompts, source, task history, knowledge, or connector credentials.

Where data lives

Customer content is stored in datastores you provision in that cluster, or that Nested installs into that cluster under your control. We do not receive a copy of that content by default.

You choose the region, backups, and retention for those stores.

This website

The marketing site is static. It does not require an account and does not set advertising or analytics cookies.

The host that serves this site may keep ordinary web-server logs (for example IP address, user agent, and requested path) for security and operations. Those logs are not used to build advertising profiles.

Accounts and authentication

If you run Nested, accounts exist on your deployment. We are not the data controller for those accounts unless a separate written agreement says we are.

Connectors

OAuth tokens and MCP credentials are stored in secrets on your cluster. Nested only brokers the connectors you configure. Each third-party service remains responsible for data you send it.

Children

Nested and this website are not directed at children under 16 (or under 13 where that is the local floor). We do not knowingly collect personal information from children.

Retention

You control retention of cluster data through your configuration, backups, and policies. We do not retain customer content from your cluster.

Support email you send us is kept only as long as needed to resolve the request, and for a limited period afterward if the law requires it.

Subprocessors for this website

Hosting, DNS, and TLS for this marketing site may be provided by the infrastructure that serves the landing app. Those providers process website traffic only. They are not subprocessors of data that lives in your cluster.

International transfers

Customer cluster data does not leave the region you choose. Website logs may be processed where this site is hosted.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or object to processing of personal information.

For product data on a Nested deployment, exercise those rights with the operator of that cluster. For this website and support email we receive, write to [email protected].

Security

You harden the cluster. Nested ships TLS-in-cluster patterns, secret mounts, and does not expose a public API by default. Operator documentation describes the recommended boundary.

No method of transmission or storage is perfectly secure. Report suspected issues to [email protected].

Changes

We may update this policy. The new effective date will appear at the top of this page.

Contact

Write to [email protected].

If you have a written agreement that specifies governing law, that agreement controls.