Privacy Policy

• Contact form: your name, email address, company, phone number, the type of enquiry, subject and message.
• Account and seller requests: your name, email address, company, and what you tell us about your intended use or your business.
• Customer accounts: your email address, a display name, and a password. We store the password only as a salted one-way hash (scrypt), never in readable form.
• Enquiries and orders: the items in your cart and, if you provide them, your email address and a note. Card payments are not currently taken on this site; when they are, checkout also collects your name, email and shipping address, and your card details are entered into a form provided by our payment processor, Stripe, and are sent to Stripe directly, not to our servers.
• Supplier onboarding: business contact details (phone, website) and payout details (bank account name, routing number and the last four digits of the account number).
• Builds you publish: the author name you choose to show with a public build.
• Searches with no results: the words you searched for, so we know what to stock. These are not linked to you, your account or your address.

Some information stays on your own device, in your browser’s local storage, and is not sent to us until you submit a form: your cart, a random buyer identifier, the name, email and shipping address you enter at checkout (so you need not retype them), builds you save in the System Builder, and your display theme. Clearing your browser’s site data removes them.

We use these cookies:

• Essential: sign-in session cookies (customers, 30 days; staff, 1 hour), short-lived cookies used during sign-in, and a cookie recording your cookie choices.
• Analytics, only if you accept them: Google Analytics cookies, and our own cookies holding a session identifier and your recent searches, viewed products and categories.
• Functional, only if you accept them: a cookie holding your AI assistant settings and up to 50 recent messages, so a conversation survives a page reload. API keys you enter are never stored in it.

Analytics and functional cookies are off until you choose otherwise, and you can change your choice at any time with the Cookie settings control at the bottom of every page.

If you accept analytics cookies, we use Google Analytics to understand how the site is used, such as which pages are visited and how visitors arrive. Google receives information about your visit, including your IP address and browser details, under Google’s privacy policy. If you decline, or later withdraw consent, Google Analytics is not loaded or is disabled.

By default the assistant answers from our own catalogue search on our servers. If you choose a third-party AI provider and enter your own API key, your messages, together with catalogue information relevant to them, are sent to that provider and handled under its terms. We do not store assistant conversations on our servers or write their text to our logs.

Product photographs are loaded directly from the suppliers’ own websites, and some product pages show a thumbnail for a product video loaded from YouTube (Google). As with any web request, those sites receive your IP address and browser information when your browser loads the image. Video players themselves (YouTube’s privacy-enhanced mode, or Vimeo) load only when you press play.

• To answer your enquiries and requests, and to manage your account.
• To confirm, fulfil and support orders, including order-status and receipt emails.
• To decide what to stock, from searches that found nothing.
• To keep the site secure: we limit how often one address can submit forms or sign in, and we record the network address involved when sign-in attempts are blocked or a staff session is used from an unexpected address.
• With your consent, to measure how the site is used.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with:

• Amazon Web Services, which hosts this site and its database in the United States and delivers our email.
• Google, for analytics, only if you accept analytics cookies.
• Stripe, to process payments, when card payment is enabled.
• The supplier that ships an item you order, which needs your name and shipping address to deliver it.
• An AI provider you select yourself in the assistant, as described above.
• Authorities, when the law requires it, or to protect our rights and the safety of others.

We keep information for as long as we need it for the purposes above, including our legal, tax and export-compliance obligations. We do not yet delete records automatically on a fixed schedule; if you ask, we will delete your information unless we are required to keep it.

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing contact@nervosys.ai. We will verify the request and respond within the time the law allows. Depending on where you live, including California, you may have further rights under local law; we will not treat you differently for exercising them.

This site is intended for businesses and adults. It is not directed to children under 16, and we do not knowingly collect their personal information.

If we change this policy we will update it here and change the effective date above. If a change is significant, we will say so on the site.