Privacy Policy

Last updated: 6 July 2026

This Privacy Policy explains how NEMS LLC ("Nikol.ai Academy", "we", "us") collects, uses, and protects personal data when you use nikolai.academy and our Services. We respect your privacy and process personal data in line with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP) where they apply.

1. Controller

The data controller is NEMS LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Contact: privacy@nikolai.academy.

2. What we collect

Contact data you provide: name, email address, and anything you enter in the needs-analysis or request-access forms.
Payment data: processed by Stripe. We receive confirmation and limited billing details; we do not store your full card number.
Account & learning data: your membership level, progress, session attendance, and communications with us.
Chat assistant: if you use the chat window on this site, the text you type and the reply are sent to Anthropic PBC, which generates the answer on our behalf. Please do not enter passwords, payment details or health information there.
Usage data: basic technical information (e.g. device, browser, pages viewed) collected to operate and secure the site.

3. Why we use it (purposes & legal bases)

To provide the Services and fulfil our contract with you (Art. 6(1)(b) GDPR).
To process payments and prevent fraud (contract; legitimate interests, Art. 6(1)(f)).
To respond to enquiries and send service-related messages (contract; legitimate interests).
To send marketing only with your consent, which you can withdraw at any time (Art. 6(1)(a)).
To comply with legal and accounting obligations (Art. 6(1)(c)).

4. Who we share it with (processors)

We share data only with service providers that help us run the academy, under appropriate agreements, including: Stripe (payments), Vercel (website hosting), Supabase (database), Anthropic PBC (the chat assistant on this site), Google (Google Analytics, only with your consent), Meta Platforms (advertising measurement, only with your consent), our email provider, and the video platforms used for live sessions. We do not sell your personal data.

5. International transfers

We are based in the USA, and some providers process data in the USA and elsewhere. Where personal data of EU/Swiss users is transferred outside the EEA/Switzerland, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

We keep personal data only as long as needed for the purposes above, to provide the Services, and to meet legal, tax, and accounting obligations, after which it is deleted or anonymized.

7. Your rights

Subject to applicable law, you may request access to, correction or deletion of your data, restriction of or objection to processing, and data portability, and you may withdraw consent at any time. To exercise these rights, email privacy@nikolai.academy. EU/Swiss users may also lodge a complaint with their local data-protection authority.

8. Cookies

Cookies that are strictly necessary to operate the site are always active. Analytics and advertising cookies, namely Google Analytics and the Meta pixel, are denied by default and only start if you press Accept in the cookie banner. If you press Reject they are never loaded. To change your choice, clear this site's data in your browser and the banner returns. You can also control cookies through your browser settings.

9. Security

We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is fully secure, but we work to safeguard your information.

10. Children

The Services are intended for adults (18+). We do not knowingly collect data from children.

11. Changes

We may update this Policy; the "last updated" date will change accordingly. Material changes will be highlighted on this page.

12. Contact

Privacy questions: privacy@nikolai.academy.