NORTHSTAR.AI

← Back to landing page

Privacy Policy

CloudGuardRails (UEN: 53516530K)

Effective: September 2026

1. Who We Are

CloudGuardRails (UEN: 53516530K), registered at 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051, operates NORTHSTAR.AI. We are a data intermediary under Singapore's Personal Data Protection Act 2012 (PDPA). Your organisation (the business customer) is the data controller for its employees' personal data.

2. What Personal Data We Collect

  • Identity data: full name, email address, phone number, job title
  • Company data: company name, industry, country, team size, address, website, company logo
  • Workplace content: meeting notes and transcripts, task titles and descriptions, comments, file attachments, AI conversation history, task concerns
  • Technical data: IP address, browser and device information, session timestamps, audit log entries
  • Integration data: Telegram chat ID and username (only if Telegram integration is enabled)

3. How We Use Personal Data

  • To provide and operate the NORTHSTAR.AI platform
  • To authenticate users and manage access
  • To enable AI-powered features including meeting extraction, risk assessment, and the AI assistant
  • To send in-app notifications about tasks, meetings, and workspace activity
  • To deliver Telegram notifications (if integration is enabled)
  • To maintain security and audit trails
  • To send product updates and announcements (only if you opted in at registration)
  • To respond to support requests

4. AI Data Processing

Important: AI Data Processing Disclosure

NORTHSTAR.AI uses the following AI providers to power platform features:

  • Google (Gemini) — used for all background AI features including meeting extraction, risk assessment, and task suggestions, using NORTHSTAR.AI's platform API key
  • Anthropic (Claude) — available for the AI Assistant using your organisation's API key (Bring Your Own Key)
  • OpenAI (GPT) — available for the AI Assistant using your organisation's API key (Bring Your Own Key)

When you use AI features, your data including meeting content, tasks, and conversations is sent to these providers and processed on servers outside Singapore, primarily in the United States.

Even when your organisation provides its own API keys (BYOK), your data passes through NORTHSTAR.AI's application servers before being forwarded to your chosen AI provider.

5. Where Your Data Is Stored

  • Database: Supabase infrastructure, ap-southeast-2 (Sydney, Australia)
  • File storage: Supabase Storage, ap-southeast-2 (Sydney, Australia)
  • Application hosting: Vercel, us-east-1 (Washington DC, United States)
  • AI processing: Google, Anthropic, OpenAI servers in the United States
  • Telegram notifications: Telegram's global infrastructure

6. Data Retention

We retain personal data for the following periods:

  • Account and identity data: for the duration of your active subscription
  • Meeting content and transcripts: 12 months from date of upload
  • AI conversation history: 12 months from date of conversation
  • Task and project data: for the duration of your active subscription
  • Audit logs: 24 months
  • Telegram connection data: deleted immediately upon disconnection
  • Trial account data: 30 days after the trial period ends

After these periods, data is permanently deleted from our systems. Upon subscription termination, account data is retained for 30 days to allow data export, then permanently deleted.

7. Third-Party Data Sharing

We do not sell your personal data. We share data only with:

  • AI providers (Google, Anthropic, OpenAI) as described in Section 4
  • Supabase — database and file storage infrastructure
  • Vercel — application hosting
  • Telegram — notification content only, if integration is enabled
  • Law enforcement or regulatory authorities when legally required

8. Your Data Rights Under PDPA

You have the right to:

  • Access — request a copy of your personal data held by us
  • Correction — request correction of inaccurate personal data
  • Deletion — request deletion of your personal data
  • Withdrawal of consent — withdraw consent to data processing at any time
  • Data portability — request your data in a portable format

To exercise any of these rights, email our Data Protection Officer at dpo@nshub.app with the subject line: "Data Rights Request — [your email address]"

We will respond to all requests within 30 days.

9. Data Protection Officer

CloudGuardRails has appointed a Data Protection Officer responsible for overseeing data protection matters.

Contact our DPO:

Email: dpo@nshub.app

Address: CloudGuardRails
60 Paya Lebar Road, #06-28
Paya Lebar Square
Singapore 409051

10. Security Measures

We implement the following technical and organisational security measures:

  • Row-level security on all database tables
  • Multi-tenant data isolation
  • TLS/HTTPS encryption for all data in transit
  • Role-based access control with four permission levels
  • Session management with IP address logging
  • Comprehensive audit logging of all significant actions
  • Rate limiting on authentication endpoints
  • HTTP security headers (frame protection, content type enforcement, referrer policy)

11. Business Customers

NORTHSTAR.AI acts as a data intermediary under PDPA. Your organisation, as the business customer, is the data controller for your employees' personal data processed through our platform.

A Data Processing Agreement (DPA) is available to business customers upon request. Contact dpo@nshub.app to obtain a copy.

12. Changes to This Policy

We will notify you of any material changes to this Privacy Policy via email and in-app notification at least 14 days before the changes take effect.

Continued use of NORTHSTAR.AI after changes take effect constitutes your acceptance of the updated policy.

13. Contact Us

For any questions about this Privacy Policy or our data practices:

CloudGuardRails
UEN: 53516530K
60 Paya Lebar Road, #06-28
Paya Lebar Square, Singapore 409051

Data Protection Officer: dpo@nshub.app
General enquiries: hello@nshub.app