Effective Date: 01.06.2026
NanoScan is operated by XTRA Capital Advisory Inc., 142 W 57th Street, Suite 1029, New York, NY 10019 (EIN: 41-3744502). This Privacy Policy explains how we collect, use, and protect your data when you use NanoScan and its AI-powered contract analysis services.
1. What We Collect
When you use NanoScan, we may collect:
- Account information (name, email address, company name)
- Documents you upload for analysis (property contracts, legal files)
- Usage data (scan history, report interactions, session activity)
- Payment information (processed via Stripe — we do not store card data)
- Device and browser metadata (IP address, browser type, operating system)
2. How We Use Your Data
We use your data to:
- Deliver contract analysis reports via Jak, our AI analyst
- Authenticate your identity via Google OAuth
- Send transactional emails (via Resend) — scan completions, reports, account alerts
- Improve model performance and platform reliability
- Comply with applicable legal obligations
We do not sell your data. We do not use your uploaded documents to train third-party AI models without your explicit consent.
3. Document Handling
Documents you upload are processed for analysis purposes only. Files are stored securely on AWS infrastructure with encryption at rest and in transit. You may request deletion of your documents at any time by contacting us at privacy@nanoscan.ai.
4. Third-Party Services
NanoScan integrates with the following services:
- AWS — cloud infrastructure and document storage
- Supabase — database and authentication
- Anthropic — AI analysis engine
- Voyage AI — document embeddings
- Stripe — payment processing
- Resend — transactional email delivery
- Google OAuth — authentication
Each provider operates under their own privacy policy and data processing agreements.
5. Data Retention
We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Document files are removed within 7 days of deletion request.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Withdraw consent for data processing
- Lodge a complaint with a relevant data protection authority
To exercise any of these rights, contact: privacy@nanoscan.ai
7. Security
NanoScan uses industry-standard security measures including TLS encryption, access control, and infrastructure monitoring via AWS CloudWatch and Sentry. No system is completely secure. We will notify you promptly in the event of a breach affecting your data.
8. Cookies
We use essential cookies for authentication and session management. No advertising or tracking cookies are used on NanoScan.
9. Changes to This Policy
We may update this policy. When we do, we will update the effective date at the top of this page and notify active users by email for material changes.
10. Contact
XTRA Capital Advisory Inc. 142 W 57th Street, Suite 1029 New York, NY 10019 privacy@nanoscan.ai