Privacy & Usage Policy

Last updated: 19 August 2026 (19/08/2026)

Nevertheless AI Ltd

Registered in England & Wales

Company Number: 16726552

1. Introduction

Nevertheless AI Ltd, hereinafter referred to as the "Data Controller," "We," "Us," or "Our," is committed to protecting and respecting your privacy and personal data. This Privacy Policy provides information on what personal data we collect when you visit and use our website (https://www.neverthelessai.io), how we use, store, and protect such data, and the rights you have in relation to your personal information.

Data processing is carried out strictly in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and other applicable UK data protection legislation.

This Privacy & Usage Policy (“Privacy Policy”) explains how we collect, process, store, use and share information gathered about users of our Jasper application, product and services, including our virtual conversational agents and AI models (collectively, the “Service(s)”).

We have designed this Privacy Policy to identify how we collect, use, store and share your Personal Information.

By using the Services, you acknowledge our collection, storage, use and disclosure of your information as described in this Privacy Policy.

i. Scope of Privacy Policy

We obtain and process Personal Information in different capacities. When we collect or process Personal Information for our own purposes, meaning that we determine how and what Personal Information is processed, we are the data controller. This Privacy Policy applies to our collection, use, disclosure, and protection of Personal Information where we are the data controller.

ii.What is Personal Information?

For purposes of this Privacy Policy, “Personal Information” means information that alone or in combination identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

iii. Categories of Personal Information We Collect

We collect certain categories of Personal Information. The information we collect and process about you depends on how you use and interact with our Services. For example, the information collected will differ based on the content you choose to provide to our Services. A summary of the categories and a description of the types of data collected in each category are as follows:

  • Examples of Personal Information Collected in Category

  • A real name, unique personal identifier, online identifier, cookies, Internet Protocol (IP) address, email address, or other similar identifiers.

  • Name, telephone number, or email address and other similar information.

  • Voice recordings and text transcripts of your use of the service (Inputs).

  • Information about your use of the Services, such as dates and times of access, conversational activity, search information, and other information about how you use the Services.

  • Feedback you may give to Sesame, including ideas, suggestions or recommendations regarding the Services or any of Sesame’s products, services, or business.

  • Information on your interaction with our Services.

  • Imprecise location information, like the city, county and post code associated with your IP address or device.

  • Personal Information present in user “Content”, as defined in the Terms, which includes inputs supplied by the user or collected from enabled third-party services and applications, like the contents of emails or calendar entries with which you have enabled Sesame to interact, as well as the resulting outputs.

  • Personal Information in information collected from enabled third-party services and applications, like the contents of emails or calendar entries with which you have enabled Sesame to interact.

2. Details of the Data Controller

Company Name: Nevertheless AI Ltd

Company Number: 16726552

Registered Office: First Floor, 690 Great West Road, Osterley Village, Isleworth, Middlesex, United Kingdom, TW7 4PU

Website: https://www.neverthelessai.io

Data Protection Contact: privacy@neverthelessai.io

Data Protection Officer (DPO): No statutory Data Protection Officer has been appointed, but data privacy inquiries can be directed to the contact details provided above.

3. Interpretation and Definitions

Personal Data: Any information relating to an identified or identifiable natural person.

Data Processing: Any operation performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, combination, restriction, erasure, or destruction.

Data Controller: The business named in this policy, which determines the purposes and means of data processing.

Data Processor: A natural or legal person that processes personal data on behalf of the Data Controller.

Data Subject: Any identified or identifiable natural person whose personal data we process (you).

Cookies: Small data files placed and stored on your device by your web browser.

Consent: The voluntary, specific, informed, and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of personal data relating to them.

Data Breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

4. Personal Data Collected

4.1. Data Provided Directly by You

We collect the following data when you actively provide it to us, for example, through contact forms, account registration, or direct correspondence:

Identification Data: Full name, username.

Contact Details: E-mail address, phone number, postal address.

Account Data: Username and password (stored in encrypted form).

Communication Data: Correspondence with us, inquiries, support requests, and complaints.

4.2. Automatically Collected Data

When you visit our website, we automatically record certain technical data to ensure the platform operates smoothly and securely:

Technical Data: IP address, approximate location (e.g., country/city level), browser type and version, operating system.

Usage Data: Pages visited, links clicked, time spent on pages, and referring URLs.

Tracking Data: Cookie identifiers and session IDs.

5. Purposes and Legal Bases of Data Processing

All processing of personal data by us has a lawful basis under Article 6 of the UK GDPR.

5.1. Performance of a Contract — Article 6(1)(b) UK GDPR

Creating and managing user accounts and providing service access.

Fulfilling our contractual obligations to you and providing customer support.

5.2. Legitimate Interest — Article 6(1)(f) UK GDPR

Maintaining website security, preventing fraud, and protecting our IT infrastructure.

Preparing aggregated statistics and analyses for service optimisation and development.

Establishing, exercising, or defending legal claims.

5.3. Consent — Article 6(1)(a) UK GDPR

Placing non-essential cookies, such as for marketing, user tracking, or advanced analytics.

Sending direct promotional emails (where you have explicitly opted in).

5.4. Compliance with a Legal Obligation — Article 6(1)(c) UK GDPR

Fulfilling statutory tax, accounting, and financial reporting obligations.

Complying with lawful requests from law enforcement or regulatory authorities.

6. Data Retention Periods

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

Contact messages and inquiries: Retained for 1 year from the last point of contact.

Account and Profile Data: Retained for the duration of your active account, and securely deleted within an appropriate timeframe following account closure.

Marketing/Newsletter data: Retained until you withdraw consent or unsubscribe.

Web server logs: Retained for a maximum of 90 days, unless required longer for investigating a specific security incident.

Financial/Transactional Data: Retained for 6 years to comply with UK HMRC tax and accounting requirements.

7. Data Security

To protect your data, we implement robust technical and organisational security measures that comply with industry standards, including:

Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption for data transmission (HTTPS).

Hashing and one-way encryption for password storage.

Strict access controls, ensuring only authorised personnel can access personal data on a "need-to-know" basis.

Regular system backups, vulnerability scanning, and software patching.

In the event of a high-risk data breach, compliance with the UK GDPR's 72-hour notification obligation to the Information Commissioner's Office (ICO).

8. Cookies and Tracking Technologies

Our website uses cookies to improve the user experience and ensure the proper functioning of the site.

8.1. Necessary Cookies

Essential for the basic operation of the website (e.g., security, session management). Legal basis: Legitimate interest / Performance of a contract. These cannot be disabled.

8.2. Analytics Cookies

Collect anonymous statistical data about website usage to help us improve performance. Legal basis: Consent. Prior consent is required before these are deployed.

8.3. Marketing Cookies

Used to track visitors across websites to display relevant and targeted advertisements. Legal basis: Consent. Prior consent is required before these are deployed.

8.4. Managing Cookie Settings

You may withdraw or modify your consent to cookies at any time through our website's cookie management banner or via your browser settings. Please note that disabling necessary cookies may impact website functionality.

9. Data Sharing and Third Parties

We only share your personal data with third parties under the following circumstances:

Data Processors: Trusted service partners (e.g., cloud hosting, email delivery, analytics providers). We ensure binding Data Processing Agreements (DPAs) are in place.

Authorities: With competent regulatory or law enforcement authorities upon a lawful request or legal obligation.

Business Transfers: In the event of a merger, acquisition, or sale of company assets, data may be transferred to the successor organisation. You will be informed prior to any such transfer.

With Your Consent: In any other circumstance, data is only shared with your explicit prior consent.

10. International Data Transfers

Some of our third-party service providers may operate outside the United Kingdom (UK) or the European Economic Area (EEA). If we transfer your data outside the UK/EEA, we ensure it receives a similar degree of protection by ensuring at least one of the following safeguards is implemented:

Transferring data to countries deemed to provide an adequate level of protection by the UK Government.

Utilising specific contracts approved for use in the UK (such as the International Data Transfer Agreement or Addendum to the EU SCCs) which give personal data the same protection it has in the UK.

11. Your Data Protection Rights

Under the UK GDPR, you possess the following rights regarding your personal data:

11.1. Right of Access: You can request a copy of the personal data we hold about you.

11.2. Right to Rectification: You can request that we correct any inaccurate or incomplete data.

11.3. Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data where there is no compelling reason for its continued processing.

11.4. Right to Restriction of Processing: You can request the suspension of processing of your personal data under certain scenarios (e.g., if you want us to establish its accuracy).

11.5. Right to Data Portability: You can request the transfer of your automated personal data to you or a third party in a structured, commonly used, machine-readable format.

11.6. Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.

11.7. Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or significant effects.

11.8. Right to Withdraw Consent: Where we are relying on consent to process your data, you can withdraw this at any time without affecting the lawfulness of processing carried out before the withdrawal.

12. How to Exercise Your Rights

To exercise any of the rights listed above, please email us at: privacy@neverthelessai.io

We will respond to all legitimate requests within one calendar month (pursuant to UK GDPR Article 12). Occasionally it could take us longer (up to two additional months) if your request is particularly complex or you have made a number of requests. Accessing your personal data is generally free of charge, though we may charge a reasonable fee for unfounded, repetitive, or excessive requests.

13. Complaints and Legal Remedies

If you have any concerns about our use of your personal data, we kindly ask that you contact us first so we can try to resolve the issue.

However, if you believe our processing violates data protection laws, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113

Website: www.ico.org.uk

You also have the right to seek a judicial remedy against the Data Controller if you believe your rights have been infringed.

14. Protection of Minors' Data

Our website and AI services are not intended for or directed at children under the age of 16. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a child under 16 without parental consent, we will take immediate steps to delete the information securely.

15. Third-Party Links

Our website may contain links to third-party websites, plug-ins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

16. Amendments to this Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices or legal obligations. Any updates will be published on this page, and the "Last Updated" date will be amended accordingly. We may also notify you via email of significant changes. Please review this policy regularly.

17. Contact Us

If you have any questions, requests, or comments regarding this Privacy Policy, please contact us at:

Nevertheless AI Ltd

Email: privacy@neverthelessai.io (Please ensure this is active)

Registered Address: First Floor, 690 Great West Road, Osterley Village, Isleworth, Middlesex, United Kingdom, TW7 4PU

Website: https://www.neverthelessai.io