Privacy Policy

Last updated: July 6, 2026

nqzai is operated by Immortal Reality PA LLC ("nqzai", "Immortal Reality PA LLC", "we", "us"). It is an AI-powered marketing assistant for outbound cold email, SEO, and AI-search visibility. This policy explains what we collect, how we use it, and the choices you have. By using nqzai you agree to this policy.

1. Information we collect

Account data — your email address and authentication credentials (managed by our auth provider).
Product & campaign data — your website URL, product brief, personas, email signature, sending settings, standing instructions, and SEO site URL that you provide.
Contacts you create or upload — names, email addresses, companies, titles, and enrichment data for the leads you research or import.
Usage data — chat messages to the assistant, tool actions, and token/API consumption used to meter your plan.
Connected-service data — when you connect a third-party account (e.g. Google, Slack), the data described in Section 3.
Product analytics — if you consent, Mixpanel receives product-usage analytics events to help us understand feature usage and improve the service without using that data for advertising.

2. How we use information

To operate the service — find and verify leads, draft and send emails, run sequences, and produce SEO research.
To meter usage and bill tokens against your plan.
To maintain security, debug errors, understand product usage patterns, and improve the product.

We do not sell your personal data, and we do not use your contacts or connected-account data for advertising.

Mixpanel analytics. Mixpanel is used only for product analytics and measurement. We use it to understand feature usage, funnels, and product quality while respecting user privacy. We do not use Mixpanel data for ad targeting, data brokerage, or cross-customer remarketing.

3. Google user data (Search Console & Analytics)

If you connect Google, you grant nqzai read-only access to your Google Search Console and Google Analytics (GA4) data via OAuth, using these scopes:

webmasters.readonly — read search performance (clicks, impressions, positions, queries).
analytics.readonly — read traffic metrics (sessions, users, channels, conversions).
tagmanager.readonly — read your Tag Manager container configuration to audit tag/trigger setup (read-only; never modified).

We use this data solely to display your search and traffic performance back to you inside nqzai and to enrich your SEO audits. We store only an encrypted OAuth refresh token (AES-GCM at rest); access tokens are short-lived and never persisted. You can revoke access anytime from the Connectors panel or at myaccount.google.com/permissions.

Limited Use disclosure. nqzai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or use Google user data for serving ads, and we do not allow humans to read it except as needed for security, to comply with law, or with your explicit consent.

3a. Google Ads API (roadmap and connected-account handling)

nqzai's current keyword research and SEO recommendations are powered primarily by DataForSEO and related SEO data providers, not by your Google Ads account. Google Ads account workflows for campaign measurement and management are planned roadmap capabilities.

If you connect a Google Ads account now or in the future, nqzai operates only on the account you authorize via OAuth and never on a third party's account without that owner's grant.
Any future Google Ads campaign creation or management flows will be performed only at your direction.
Today, keyword planning metrics shown inside nqzai come from SEO data vendors rather than Google Ads account data.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google data to serve advertising. See our About page for more on current capabilities and roadmap status.

4. Service providers (sub-processors)

We share data only with vendors that help us run the service, under their own terms:

Cloudflare — application hosting.
Nhost / Hasura — database & authentication.
OpenRouter — large-language-model inference for drafting and research.
Lead & verification providers (e.g. Apify, api.market, MillionVerifier) — finding and verifying contacts.
SEO data providers (e.g. SearchApi, Apify, Common Crawl) — search and backlink data.
Email delivery — your own connected sending provider (BYOK) and/or Mailtrap for transactional mail.
Mixpanel — privacy-respecting product analytics.
Sentry — error monitoring.

5. Email sending

nqzai sends email through your own connected provider (bring-your-own-keys). You are responsible for the content of messages you send and for complying with anti-spam laws (see our Terms).

6. Data retention & deletion

We retain your data for as long as your account is active. You can delete contacts and disconnect integrations at any time in-app. To delete your account and associated data, email us at palash@nqz.ai.

7. Security

Connector secrets and OAuth tokens are encrypted at rest with AES-GCM. Access is restricted to your account. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise them.

9. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy or your data? Email palash@nqz.ai.