Legal
Privacy policy
Effective date: May 16, 2026 · Last updated: May 16, 2026
Newmen AI, Inc. (“Newmen,” “we,” “us,” or “our”) provides this Privacy Policy to explain how we collect, use, disclose, and protect personal information when you use our website at newmen.ai, the Atlas API, and the Newmen Console (collectively, the “Services”). This Policy applies to all users of our Services. By using the Services, you acknowledge the practices described here.
If you are a resident of the European Economic Area, the United Kingdom, or Switzerland, please see the section titled “International Transfers and EEA/UK Residents” for additional information relevant to your jurisdiction.
1. Personal Information We Collect
1.1 Information You Provide Directly
- Account information: name, work email address, organization name, job title, and password when you register for an account.
- Payment information: billing address and payment method details collected by our payment processor, Stripe. We do not store raw card numbers.
- Communications: content of emails, support requests, or other messages you send to us.
- User content: API inputs, outputs, feedback tags, dataset items, and evaluator configurations you submit through the Services.
1.2 Information Collected Automatically
- Log data: IP address, browser type and version, operating system, referring URLs, pages viewed, and timestamps when you access our website or API.
- Usage data: API call metadata including endpoint, model, token counts, latency, and error codes. We retain request and response payloads for the period specified in your subscription plan.
- Cookies and similar technologies: session cookies for authentication, preference cookies for Console settings, and analytics cookies as described in Section 3.3.
- Device identifiers: browser fingerprint data used for security and fraud prevention.
1.3 Information from Third Parties
- OAuth providers: if you sign in with GitHub, we receive your GitHub username, email address, and profile picture as authorized by you.
- Business partners: we may receive contact or company information from partners who refer customers to us, subject to those partners’ privacy policies.
2. How We Use Personal Information
2.1 To Provide and Operate the Services
- Create and manage your account and organization;
- Process API requests and return model outputs;
- Maintain the Newmen Console, call logs, and reliability-loop features;
- Process payments and send invoices;
- Provide customer support and respond to inquiries;
- Send transactional communications, including email magic links and billing notices.
2.2 To Improve the Services
- Analyze aggregated, de-identified usage patterns to identify product improvements and prioritize features;
- Monitor the performance, reliability, and security of our infrastructure;
- Debug errors and investigate technical issues.
We do not use your API inputs or outputs to train or fine-tune shared base models available to other customers without your explicit written consent.
2.3 For Safety and Compliance
- Detect and prevent fraud, abuse, and violations of our Terms of Service;
- Enforce our Acceptable Use Policy;
- Comply with applicable legal obligations and respond to lawful requests;
- Protect the rights, property, and safety of Newmen, our users, and the public.
2.4 For Marketing and Communications
With your consent where required by law, we may send you newsletters, product announcements, and information about new features. You can opt out of marketing emails at any time by clicking “unsubscribe” or by emailing privacy@newmen.ai.
3. How We Disclose Personal Information
3.1 Service Providers (Sub-processors)
We share personal information with vendors who help us operate the Services, under contracts that require them to protect the information and use it only as directed:
- Hosting and infrastructure: Vercel, Neon (database);
- Payment processing: Stripe;
- Transactional email: Resend;
- Model inference: OpenRouter (API request proxying);
- Analytics: privacy-preserving analytics tooling that does not fingerprint individual users across sites.
A current, complete list of sub-processors is available on request at privacy@newmen.ai. We will notify you of new sub-processors at least thirty (30) days before they begin processing your data.
3.2 Business Transfers
If Newmen is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a materially different privacy policy.
3.3 Legal Requirements
We may disclose personal information when required by applicable law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Newmen, our users, or others. Where permitted, we will notify you of such requests.
3.4 With Your Consent
We may share personal information with third parties when you have given us your explicit consent to do so.
4. Data Retention
We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.
- Account data: retained for the life of your account plus ninety (90) days after account closure to allow for dispute resolution, then deleted.
- API payloads: retained for the period specified in your subscription plan (typically 30 or 90 days), then automatically deleted.
- Billing records: retained for seven (7) years as required by applicable financial regulations.
- Security and audit logs: retained for twelve (12) months.
You may request earlier deletion of your personal information as described in Section 6.
5. Security
We implement technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256);
- API key hashing using SHA-256 with per-key salts;
- Access controls and least-privilege principles for our personnel;
- Regular security reviews and penetration testing;
- Incident response procedures with customer notification obligations.
No security measure is perfect. If you discover a security vulnerability, please disclose it responsibly to security@newmen.ai. We commit to acknowledging reports within 24 hours and to providing a resolution timeline.
6. Your Privacy Rights and Choices
6.1 Access and Portability
You may request a copy of the personal information we hold about you and your organization at any time by contacting privacy@newmen.ai. We will provide the information in a structured, machine-readable format where technically feasible.
6.2 Correction
You may update most account information directly in the Console settings. For corrections that cannot be made self-service, contact privacy@newmen.ai.
6.3 Deletion
You may request deletion of your personal information by contacting privacy@newmen.ai or by deleting your account through the Console. We will complete deletion within thirty (30) days, except for data we are legally required to retain or that is necessary to resolve outstanding disputes.
6.4 Objection and Restriction
Where we process your personal information based on legitimate interests, you have the right to object to that processing. You may also request that we restrict processing while a dispute about accuracy is resolved. Contact privacy@newmen.ai with such requests.
6.5 Cookies
You may control cookies through your browser settings. Disabling authentication cookies will prevent you from using the Console. We do not respond to browser “Do Not Track” signals at this time.
6.6 Marketing Opt-Out
You may opt out of marketing emails at any time using the unsubscribe link in any email or by contacting privacy@newmen.ai. Transactional communications (invoices, security notices) cannot be opted out of while your account is active.
7. International Transfers and EEA/UK Residents
Newmen is based in the United States. If you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, your personal information will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.
We rely on the following legal bases for processing your personal information:
- Contractual necessity: to perform the Services you have requested;
- Legitimate interests: to improve and secure the Services, where these interests are not overridden by your rights;
- Consent: for marketing communications and optional processing you have opted into;
- Legal obligation: to comply with applicable laws.
For transfers of personal data out of the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner’s Office, as applicable. To request a copy of the applicable transfer mechanism, contact privacy@newmen.ai.
If you are an EEA or UK resident, you have the right to lodge a complaint with your local supervisory authority.
8. Children’s Privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a child, please contact privacy@newmen.ai and we will promptly delete it.
9. Third-Party Links
The Services may contain links to third-party websites and services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting a notice in the Console or by sending email to the address on your account at least thirty (30) days before the changes take effect. Your continued use of the Services after that date constitutes acceptance of the updated Policy.
11. How to Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
- Email: privacy@newmen.ai
- Security disclosures: security@newmen.ai
- Postal mail: Newmen AI, Inc., Attn: Privacy, 548 Market St PMB 12345, San Francisco, CA 94104
We will respond to all requests within thirty (30) days, or within the timeframe required by applicable law.