number6
Book a training consultation

Privacy Policy

Last updated: February 22, 2026

This Privacy Policy explains how nlsio LLC, a Texas limited liability company operating as number6.ai ("Company," "we," "us," or "our"), collects, uses, stores, and protects your personal information when you visit our website at number6.ai ("Site") or engage our AI consulting services ("Services").

We believe in radical transparency. It's one of our brand pillars. This policy is written in plain language because we think you deserve to actually understand how your data is handled.

1. Who We Are

  • Legal entity: nlsio LLC
  • Trade name: number6.ai
  • Jurisdiction: State of Texas, United States
  • Email: [email protected]
  • Phone: +1 650 660 6612

nlsio LLC is the data controller for personal information collected through the Site and in connection with our Services.

2. Information We Collect

2.1 Information You Provide Directly

  • Contact information: Name, email address, phone number, company name, and job title, provided when you fill out a contact form, book a discovery call, or sign up for our newsletter.
  • Engagement information: Business details, workflow descriptions, organizational data, and other information you share with us during workshops, assessments, audits, and consulting engagements.
  • Communications: Emails, messages, and other correspondence between you and our team.
  • Payment information: Billing details necessary to process invoices. We do not store credit card numbers directly. Payment processing is handled by third-party providers (see Section 5).

2.2 Information Collected Automatically

When you visit the Site, we may automatically collect:

  • Device and browser information: Browser type and version, operating system, device type, and screen resolution.
  • Usage data: Pages visited, time spent on pages, referring URL, and navigation paths.
  • IP address: Used to approximate geographic location (country/region level) and for security purposes.
  • Cookies and similar technologies: See our Cookie Policy for full details.

2.3 Information From Third Parties

We may receive information about you from:

  • Analytics providers: Aggregated and anonymized website usage data.
  • Business partners or referrals: Your name and contact details if someone refers you to us (with your knowledge).
  • Publicly available sources: Professional information from your company website or LinkedIn profile to prepare for engagements.

3. How We Use Your Information

We use your information for the following purposes:

Purpose Legal Basis
Responding to inquiries and scheduling discovery calls Legitimate interest / your consent
Delivering consulting services under a Statement of Work Performance of a contract
Sending invoices and processing payments Performance of a contract
Sending our newsletter or AI insights (only with your opt-in) Your consent
Improving the Site and understanding how visitors use it Legitimate interest
Protecting the Site against fraud and abuse Legitimate interest
Complying with legal obligations Legal obligation
Communicating service updates or changes that affect you Legitimate interest / performance of a contract

We do not:

  • Sell your personal information to third parties. Ever.
  • Rent or share your data for third-party marketing purposes.
  • Use your engagement data to train AI models (see Section 6).
  • Make automated decisions that have legal or significant effects on you without human oversight.

4. How We Share Your Information

We share personal information only in the following limited circumstances:

4.1 Service Providers

We use trusted third-party service providers to help run our business. These providers process your data on our behalf and under our instructions:

  • Website hosting and infrastructure (e.g., Vercel, Cloudflare)
  • Email and communication tools (e.g., Google Workspace)
  • Analytics (e.g., Google Analytics, Plausible; see Cookie Policy)
  • Payment processing (e.g., Stripe)
  • Scheduling tools (e.g., Calendly)
  • CRM and project management tools

We require all service providers to maintain appropriate security measures and to process your data only as instructed by us.

4.2 AI Platforms and Tools

During the course of delivering Services, we may use third-party AI platforms (e.g., OpenAI, Anthropic, Google). We will always inform you which platforms are used in your engagement. Important notes:

  • We minimize the personal data submitted to AI platforms.
  • Where possible, we use enterprise or API tiers that do not use your data for model training.
  • Data submitted to these platforms is subject to their respective privacy policies, which we will share with you upon request.
  • We never submit your Confidential Information to AI platforms without your explicit knowledge and consent.

4.3 Legal Requirements

We may disclose your information if required by law, regulation, subpoena, court order, or government request. Where permitted, we will notify you before making such disclosures.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your information.

5. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy:

Data Type Retention Period
Contact form submissions 2 years from last interaction, or until you request deletion
Client engagement data Duration of engagement + 3 years (aligned with confidentiality obligations)
Invoices and payment records 7 years (as required by US tax law)
Website analytics data 26 months (anonymized/aggregated)
Newsletter subscriber data Until you unsubscribe
Cookies See Cookie Policy

After the retention period, data is securely deleted or anonymized.

6. Client Engagement Data and AI

This section is important and specific to our business as an AI consultancy:

  • Your engagement data is yours. We process it only to deliver the services you've engaged us for.
  • We do not use your data to train AI models. Not ours, not anyone else's.
  • We do not use one client's data for another client's engagement. Each engagement is treated independently.
  • General knowledge stays with us. We retain general skills, techniques, methodologies, and industry knowledge gained during engagements, but never your specific data, trade secrets, or Confidential Information. (This is standard across all professional services.)
  • You can request deletion. At the end of an engagement, you may request that we delete all Client data in our possession, subject to legal retention requirements.

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

  • Encryption in transit (TLS/HTTPS) and at rest where applicable.
  • Access controls limiting data access to authorized personnel only.
  • Secure password management and multi-factor authentication on business systems.
  • Regular review of security practices.

No system is 100% secure. While we take data security seriously, we cannot guarantee absolute security and are not liable for breaches resulting from circumstances beyond our reasonable control.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 All Users

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any email, or by contacting us directly.

8.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information we collect, use, and disclose.
  • Right to delete your personal information.
  • Right to opt out of sale: we do not sell personal information, so this right is automatically satisfied.
  • Right to non-discrimination: we will not discriminate against you for exercising your rights.

8.3 European / UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or United Kingdom, you have additional rights:

  • Right to restriction of processing.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object to processing based on legitimate interest.
  • Right to withdraw consent at any time (without affecting the lawfulness of prior processing).
  • Right to lodge a complaint with your local data protection authority.

8.4 Texas Residents (TDPSA)

If you are a Texas resident, you have rights under the Texas Data Privacy and Security Act, including the right to access, correct, delete, and obtain a copy of your personal data, and the right to opt out of targeted advertising and profiling.

8.5 Exercising Your Rights

To exercise any of these rights, contact us at:

We will respond to verified requests within 30 days (or sooner where required by law). We may need to verify your identity before processing your request.

9. International Data Transfers

We are based in the United States with operations in the UK. Your data may be transferred to and processed in either country. When transferring data internationally, we rely on:

  • Standard Contractual Clauses (for EU/UK transfers)
  • Contractual protections with service providers
  • Your explicit consent where applicable

10. Children's Privacy

Our Site and Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page.
  • Post a notice on the Site for significant changes.
  • Notify existing clients by email for changes that affect engagement data handling.

Your continued use of the Site or Services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

  • Email: [email protected]
  • Phone: +1 650 660 6612
  • Entity: nlsio LLC, Texas, United States
Back to top