Who we are
Nabla-X builds AI systems for regulated environments — healthcare, finance and research. This website is operated by Nabla-X, and the founder, Govind Tiwari, is the person responsible for how it handles your data. Reach us at ask@nablax.in.
What we collect, and why
When you send us a message or an application
The contact form asks for your name, email address, company, role, an optional budget band, a description of your problem (or, for applicants, a note about yourself), and an optional preferred call time. We also record which page you were on, the page that referred you, and your browser's user-agent string, so we can tell which parts of the site are generating conversations.
We use this to reply to you. Nothing else. It is stored in our database and a copy is sent to the founder by email and, when configured, by WhatsApp, so a real person sees it quickly.
Please do not paste patient records, account numbers or other regulated data into the contact form. It is a sales and recruiting inbox, not a secure channel for protected data. If you need to share something sensitive, ask us first and we will set up an appropriate route.
When you join the newsletter
Your email address, and nothing else. It is held by our email provider and used to send occasional product and research updates. Every email carries an unsubscribe link, and you can also ask us to remove you directly.
When you use the Sentinel platform
Sentinel is the signed-in product behind Query Intelligence, Data Reliability, Decision Intelligence and EdgeMind. Using it involves:
- Your account — name, email, and organisation membership, managed by our authentication provider. We hold a mirror of your user id, email and role so the product can enforce who may see what.
- Your connected data sources — connection details you supply so the product can reach your database. Credentials are encrypted at rest with a key that is not stored alongside them, and are decrypted only for the moment a connection is made.
- Metadata about your data — table and column names, types, statistical baselines, and detected anomalies. The product works from metadata and aggregates; it is designed not to copy your row-level data into our systems.
- What you ask it — natural-language questions, the SQL generated for them, and the results returned, kept as a history so you can review and audit what ran.
- An audit log — who did what, when, in your organisation. This exists for your benefit and is visible to your organisation's administrators.
Every record in Sentinel is scoped to your organisation. Database-level row security is enforced so that one organisation's data is not readable from another's context, and we test this with two separate organisations, not one.
Website analytics
We use Vercel Web Analytics, which counts page views and the custom events named in our code (for example, a contact form being submitted or a demo being started). It does not use cookies and does not build a profile of you across sites. We see aggregate numbers, not individuals.
Preferences stored in your browser
Your light/dark theme choice is kept in your browser's local storage so the site remembers it. It never leaves your device. Signing in to Sentinel sets the session cookies our authentication provider needs to keep you signed in.
Where it goes
We do not sell data and we do not share it with advertisers. The services that process it on our behalf are:
| Provider | What it handles |
|---|---|
| Vercel | Hosts the website and application; web analytics. |
| Supabase (PostgreSQL) | Stores contact enquiries, applications, and all Sentinel product data. |
| Clerk | Sentinel sign-in, accounts and organisations. |
| Resend | Sends transactional email — enquiry notifications to us, newsletter and invite emails to you — and holds the newsletter list. |
| Meta (WhatsApp Business) / Twilio | Delivers a WhatsApp alert to the founder when an enquiry arrives. The alert contains the enquiry's fields. |
| AI model providers | When Query Intelligence or Decision Intelligence generates SQL or an explanation, the question and relevant schema metadata are sent to the model your organisation has configured — Anthropic, OpenAI, or via Vercel AI Gateway. Organisations that choose EdgeMind run a local model instead, and nothing leaves their network. |
Each of these providers is bound by its own agreement with us to use the data only to provide the service.
How long we keep it
- Contact enquiries and applications: until the conversation is closed and for up to 24 months after, so we can follow up.
- Newsletter addresses: until you unsubscribe.
- Sentinel data: for as long as your organisation has an account, and deleted within 30 days of the account being closed.
- Analytics: aggregated; not tied to you.
Your rights
Wherever you are, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. Under India's Digital Personal Data Protection Act and, for visitors in the EU and UK, the GDPR, these are rights and not favours. Email ask@nablax.in and we will respond within 30 days. If you are a Sentinel user, your organisation's administrator can also remove your account directly.
Security
Connections to the site and platform are encrypted in transit. Stored credentials are encrypted at rest. Access to production systems is limited to the people who operate them. No system is perfectly secure; if we ever learn of a breach affecting your data, we will tell you what happened and what we are doing about it, promptly.
Children
The site and platform are for businesses and professionals. We do not knowingly collect data from anyone under 18.
Changes
When this policy changes, the date at the top changes with it. Material changes to how we handle Sentinel data will also be announced to organisation administrators by email.
Contact
Questions about this document, or about your data: ask@nablax.in. You can also use the contact form.