Legal

1. Overview

This Privacy Policy explains what personal information AVONAO INC. (“Nuicorn,” “we” or “us”) collects when you visit our website www.nuicorn.com, contact us, subscribe to our newsletter or sign up for notifications about changes to our legal documents, how we use and disclose it, and which rights you have. It also covers our profiles on LinkedIn, X and GitHub (section 10). Our products and platforms run their own websites with their own privacy notices.

In short:

• We use cookies and analytics only with your consent: Google Analytics if you allow statistics in the cookie banner. We do not use advertising services.
• We collect personal information only as far as needed to run the website or as you give it to us yourself: through the contact form, by email, or when you sign up for the newsletter or the notifications.
• We do not sell or share your personal information, do not use it for targeted advertising, and honor Global Privacy Control.

2. Who we are

AVONAO INC.
254 Chapman Rd, Ste 208 #21918
Newark, Delaware 19702
USA
Email: compliance@nuicorn.com

3. Notice at collection

We collect the following categories of personal information. We collect it from you and, for technical data, from your browser. We keep it only as long as stated in the sections below.

• Identifiers: your name and email address when you give them to us; your IP address; with your consent, the Google Analytics ID of your browser. Used to answer you, send the newsletter and notifications, handle privacy requests, protect the website and, with your consent, for statistics.
• Professional information: your company and your website or LinkedIn profile, if you give them in the contact form. Used to answer your inquiry.
• Internet or other electronic network activity: pages you view, the website you came from, browser, operating system and language; with your consent, whether you open our newsletter and which links you click. Used to deliver and protect the website and, with your consent, for statistics.
• Approximate location: country and region, derived from your IP address, only if you allow statistics. We do not collect precise geolocation.
• The content of your messages and requests. Used to answer and handle them.

We do not collect sensitive personal information, and we do not sell or share personal information or use it for targeted advertising. We disclose it only to the service providers named below, for the purposes named here.

4. Hosting and delivery of the website

Our website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare provides the servers, a worldwide content delivery network, the name resolution of our domain and protection against attacks.

Whenever you visit the website, Cloudflare processes the data your browser sends for technical reasons:

• IP address,
• date and time of the request,
• page or file requested and amount of data transferred,
• the website you came from (referrer),
• browser, operating system and language setting.

We need this data to show you the website and to keep it stable and secure, in particular to detect and prevent attacks and abuse. To protect our forms from abuse, we limit the number of requests one IP address can send within a minute; the IP address is processed only briefly for this and not stored. Error and activity logs of our application at Cloudflare are deleted automatically after seven days at the latest.

We also protect our forms (contact, newsletter, notifications about changes and privacy requests) from automated submissions with Cloudflare Turnstile. When a form comes into view or you select one of its fields, your browser loads a script from Cloudflare (challenges.cloudflare.com). It checks in the background whether a person is using the page and processes your IP address, technical characteristics of your browser and your connection, such as the user agent and the TLS fingerprint, and the website the form is on. Cloudflare does not receive what you enter in the form. Usually you will not notice the check; only in doubtful cases does Turnstile ask you to tick a box. Turnstile sets no cookies, but it stores an entry for challenges.cloudflare.com in your browser's local storage (“cf.turnstile.u”), which Cloudflare uses for the check and which stays there until you delete it. The result of the check is a code that is valid for five minutes and is sent to our server with your submission. Our server has Cloudflare confirm it once, with your IP address, and does not store it. Cloudflare processes this data for us and, to improve Turnstile's bot detection, also for its own purposes. More in Cloudflare's Turnstile Privacy Addendum and Cloudflare's Privacy Policy.

All background videos on this website are delivered through Cloudflare Stream. Your browser loads them from Cloudflare's servers and sends your IP address and the technical data above; no cookies are set. Fonts, icons and images are delivered with the website itself; there are no connections to external font services such as Google Fonts.

5. Contact form and email

When you write to us through the contact form, we process your name, your email address and your message, your company and your website if you give them, the page you sent the inquiry from and the time of the inquiry. A hidden check field helps us detect automated spam; we collect no further data for it.

The website does not store your information. It is sent to us directly as an email through Cloudflare's email service. Our mailbox is run by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA, as part of Microsoft 365; emails you write to us directly are stored there too. More in Microsoft's Privacy Statement.

We use your information to answer your inquiry and delete it once the inquiry is closed, unless the law requires us to keep it longer, for example tax law.

6. Newsletter

Our newsletter informs you about Nuicorn, our products and platforms, and articles and developments around artificial intelligence. All we need to sign you up is your email address.

We use double opt-in: after signing up, you receive an email with a confirmation link, and only once you click it do we add you to the mailing list. To be able to prove your consent, we store the time of the sign-up and of the confirmation and the IP address used.

We send and manage the newsletter with Mailchimp, a service of The Rocket Science Group LLC, 405 N Angier Ave. NE, Atlanta, GA 30308, USA (“Mailchimp”), part of Intuit. Your email address and sign-up data are stored on Mailchimp's servers in the US. More in Intuit's Privacy Statement.

Our newsletters contain an invisible tracking pixel and personalized links. They show us whether and when a newsletter was opened and which links were clicked. We use this to improve our content and do not build advertising profiles from it. If you do not want it, please unsubscribe; it cannot be turned off separately.

Every newsletter shows our postal address and an unsubscribe link, as the CAN-SPAM Act requires. You can unsubscribe at any time with that link or by email to unsubscribe-newsletter@nuicorn.com. We honor your opt-out within 10 business days at the latest. After you unsubscribe, we keep your email address on a suppression list so that you receive no further newsletters, and we keep the record of your consent for as long as claims can be made, usually three years.

7. Notifications about changes to our legal documents

On this page you can sign up to receive an email whenever we change one of our legal documents. All we need is your email address. The sign-up works like the newsletter, with double opt-in through Mailchimp (section 6), and Mailchimp marks your address as a recipient of these notifications. They come from legal-updates@nuicorn.com. We do not track whether you open them or click their links.

You can unsubscribe at any time with the link in every notification or by email to legal-updates@nuicorn.com. The newsletter and the notifications share one mailing list at Mailchimp: if you subscribed to both, the unsubscribe link ends both. If you only want to end one of them, write to us at its address. After you unsubscribe, the same applies as for the newsletter (section 6).

8. Privacy requests

When you send us a privacy request, through the form or by email, we use your information to handle it and to be able to show that we did. The form sends your request type, name, email address, state of residence if you give it, whether you act for yourself or as an agent, your details, on request the Google Analytics ID of your browser, and the time, through Cloudflare's email service to our mailbox (section 5); the website itself stores nothing. We keep the record of a request for at least 24 months, as the California regulations require.

9. Cookies, consent and Google Analytics

On your first visit, a cookie banner asks which kinds of cookies you allow. Necessary storage is always on; statistics and marketing stay off until you allow them. We store your choice only in your browser's local storage, not on our servers. We deliver the banner (Silktide Consent Manager) ourselves; no data goes to third parties for it.

If your browser sends the Global Privacy Control signal (GPC), we treat it as a valid request to opt out and as the choice “Only necessary”: the banner does not open by itself, statistics and marketing stay off, and an earlier consent counts as withdrawn as soon as your browser sends the signal. You can still turn them on on purpose with the cookie icon at the bottom left.

If you allow statistics, we use Google Analytics 4, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics shows us how visitors use our website, for example which pages they view, how long they stay and which website they come from. For this, Google sets cookies (section 3 of our Cookie Policy (opens in a new tab)) and processes usage data such as pages viewed, referrer, browser, operating system and your approximate location (country and region). Google uses your IP address only to determine the approximate location and does not store it. We load Google Analytics only after you consent; before that, no data goes to Google. The data is deleted after 14 months at the latest. More in Google's Privacy Policy.

You can withdraw your consent at any time with the cookie icon at the bottom left of every page or with “Your Privacy Choices” at the bottom of the page. We then delete the Google Analytics cookies from your browser. We do not currently use advertising services (the marketing category); if that changes, we will update this Privacy Policy and ask you again.

Do Not Track: browsers can also send a “Do Not Track” signal, for which there is no agreed standard. Our website does not respond to it; it does honor Global Privacy Control as described above. Third parties cannot collect information about your online activities over time and across websites through our website, except Google Analytics if you allow statistics.

10. Links, share buttons and our social media profiles

We link to our profiles on LinkedIn, X and GitHub and to sources and other websites. Below our articles you can share them on Facebook, X and LinkedIn. These are simple links, not embedded plugins: as long as you do not click them, no data goes to these providers. After the click, their privacy policies apply.

On our profiles, when you follow us, mention, comment on or share our posts or send us a message, we see the information in your public profile, such as your name, profile picture and position, and your content and messages. In our GitHub repositories, we also see your contributions such as issues, pull requests and comments, which are public there. The platforms give us aggregated statistics, for example how often our profiles and posts were viewed; we cannot identify individuals from them. We do not copy data from our profiles into our own systems; if we continue a conversation by email, section 5 applies. Messages stay on the platforms as long as we need them to talk with you.

The platforms are responsible for their own processing, such as their cookies, their advertising and the profiles they build about their users. More in the privacy policies of LinkedIn, X and GitHub.

11. How we disclose personal information

We disclose personal information only to our service providers Cloudflare, Microsoft and Mailchimp and, if you allow statistics, Google, and only as far as needed for the purposes above. They may use it only to provide their services to us, under contracts that restrict its use. We disclose personal information to authorities only when the law requires it, and it may pass to a successor if our business is merged or sold.

We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act, and have not done so in the past 12 months. We do not use it for targeted advertising or for profiling that has legal or similarly significant effects, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

12. Your privacy rights

Depending on your state, for example California, Colorado, Connecticut, Delaware, Virginia and the other states with comprehensive privacy laws, you have the right to

• know and access the personal information we have about you, including the specific pieces,
• delete it,
• correct inaccurate personal information,
• receive it in a portable format,
• opt out of its sale or sharing, of targeted advertising and of profiling (we do none of these),
• not be discriminated against for exercising these rights.

We honor these rights for every visitor, wherever you live. To make a request, use the privacy request form below these documents (opens in a new tab) or write to compliance@nuicorn.com. We verify your request by replying to the email address you give and ask for more information only if we have reasonable doubts about your identity. An authorized agent can make a request for you; we will ask for your signed permission and may ask you to confirm your identity with us directly.

We confirm receipt within 10 business days and answer within 45 days. If we need more time, up to 45 more days, we tell you why within the first 45 days. An opt-out takes effect within 15 business days. Requests are free of charge. If we deny your request, we tell you why, and you can appeal by replying to our answer or by writing to compliance@nuicorn.com with “Appeal” in the subject. We decide on your appeal within 45 days. If we deny it, you can contact your state's Attorney General.

California residents: we do not disclose personal information to third parties for their direct marketing purposes (California's “Shine the Light” law), and we do not offer financial incentives for personal information.

13. Children

Our website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, please write to compliance@nuicorn.com, and we will delete it.

14. Visitors from the European Union and the United Kingdom

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) or the UK GDPR applies to our processing, and AVONAO INC. is the controller. Our legal bases are your consent for statistics, the newsletter and the notifications (Art. 6(1)(a) GDPR); taking steps toward a contract or our legitimate interest in answering inquiries for the contact form (Art. 6(1)(b) and (f) GDPR); our legitimate interest in a secure and reliable website for hosting, Turnstile and the background videos (Art. 6(1)(f) GDPR); and our legal obligations for privacy requests (Art. 6(1)(c) GDPR).

You have the right to access, rectification, erasure, restriction of processing and data portability, to withdraw your consent at any time with effect for the future, and to lodge a complaint with a supervisory authority, in particular in your country of residence. You can object at any time to processing based on our legitimate interest, on grounds relating to your particular situation (Art. 21 GDPR).

We are based in the United States, so your personal information is processed there. Our service providers Cloudflare, Microsoft, Mailchimp (Intuit) and Google are certified under the EU-U.S. Data Privacy Framework and its UK Extension, and standard contractual clauses are agreed with them. Our German website nuicorn.de has its own legal documents.

15. Data security

The website is transmitted encrypted over HTTPS (TLS), including what you enter in our forms. We take reasonable technical and organizational measures to protect your personal information from loss, misuse and unauthorized access.

16. Changes

We update this Privacy Policy when our website, the services we use or the law change. The version published on this page applies; the date of its last update is shown below. If you like, we notify you of every change by email (section 7). If we ever want to use your personal information in a materially different way, we will ask for your consent first.

17. Contact

Questions about this Privacy Policy or your personal information: compliance@nuicorn.com. You can also reach us by mail at the address in section 2.

Last updated on October 5, 2026

1. About this Cookie Policy

This Cookie Policy explains which cookies and similar technologies we use on www.nuicorn.com, what they do, how long they stay in your browser and how you can control them. It supplements our Privacy Policy (opens in a new tab), which describes all processing of personal information in detail.

Cookies are small text files that a website stores in your browser. Similar technologies are, for example, the browser's local storage and session storage, or tracking pixels in emails. In this policy, “cookies” covers all of them.

2. Necessary storage

Necessary storage is always on, because the website cannot work properly or securely without it. It is not used to track you.

• Your cookie choices: on your first visit, a cookie banner asks which kinds of cookies you allow. We store your choice in your browser's local storage (“stcm.v1.hasConsented” and one “stcm.v1.consent.…” entry per category, plus “stcm.v1.gpc” while your browser sends Global Privacy Control). It stays there until you delete it.
• A closed banner: if you close the banner without choosing, we remember that in your browser's session storage (“stcm-dismissed-v1”) until the end of the session, so the banner does not reappear on every page.
• Security cookies: to protect the website from automated attacks, our hosting provider Cloudflare may set cookies in individual cases, for example “__cf_bm” to detect bots (30 minutes) or “cf_clearance” after your browser passed a security check.
• Form protection: Cloudflare Turnstile protects our forms from automated submissions. When a form comes into view, it stores an entry for challenges.cloudflare.com in your browser's local storage (“cf.turnstile.u”), which stays there until you delete it. Turnstile sets no cookies.

Your browser also keeps files of our website, such as images, fonts and videos, in its cache so that pages load faster. That is a feature of your browser, which you control in its settings.

3. Statistics

Only if you allow statistics, we use Google Analytics 4, a service of Google LLC. Google then sets the cookies “_ga” and “_ga_” followed by the ID of our Google Analytics property, which tell visits apart and stay in your browser for up to two years. They show us which pages are popular and how visitors move around the website, so that we can improve it. Before you consent, we do not load Google Analytics, and no cookies are set for it. More in section 9 of our Privacy Policy (opens in a new tab).

4. Marketing

We do not currently use advertising services, so no marketing cookies are set, even if you allow the marketing category. We do not sell or share your personal information, and we do not use it for targeted advertising. If that ever changes, we will update this Cookie Policy and ask you again.

5. Tracking pixels in emails

We use tracking pixels only in our newsletter emails, which you receive only after you sign up and confirm. More in section 6 of our Privacy Policy (opens in a new tab). The notifications about changes to our legal documents contain no tracking pixels.

6. Your choices

• Cookie settings: you can change or withdraw your choice at any time with the cookie icon at the bottom left of every page or with “Your Privacy Choices” at the bottom of the page. If you withdraw your consent to statistics, we delete the Google Analytics cookies from your browser.
• Global Privacy Control: if your browser sends this signal, we treat it as a request to opt out. Statistics and marketing stay off, and an earlier consent counts as withdrawn. You can still turn them on on purpose with the cookie icon.
• Browser settings: you can view, delete and block cookies and local storage in your browser's settings at any time. Our website generally works even if you block cookies; only your cookie choice cannot be remembered then.

We do not embed content from social networks, so they cannot set cookies through our website. Links and share buttons only take you to them when you click.

7. Changes and contact

We update this Cookie Policy when the cookies we use change; the date of its last update is shown below. If our services behind a category change, we ask for your consent again. Questions about this Cookie Policy: compliance@nuicorn.com.

Last updated on October 5, 2026

1. Our commitment

We want everyone to be able to use www.nuicorn.com, including people with disabilities. We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA and keep improving the website toward that goal.

2. What we do

• Structure: every page has one main heading, a clear heading order and landmarks for the header, navigation and main content, so that screen readers can move through it.
• Keyboard: links, buttons, forms, the accordions and the dialogs work with the keyboard, and the element in focus is clearly marked. The cookie settings and the region selection open as dialogs that keep the focus inside and return it when they close.
• Forms: every field has a visible label, required fields are marked, and errors are named next to the field and announced to screen readers.
• Motion: if your device asks for reduced motion, the background videos do not play and the animations are turned off. The background videos have no sound.
• Images: informative images have a text alternative; purely decorative images are hidden from screen readers.
• Zoom: the pages adapt to narrow screens and can be zoomed without losing content.

3. Known limitations

The pages do not yet have a link to skip straight to the main content. On very small screens, the header shows only the logo; the contact section is on the home page, and the footer links to our German website. We are working on these points.

4. Content from other providers

Websites we link to, such as our profiles on LinkedIn, X and GitHub, and the emails our providers send for us are outside our control. Their accessibility is the responsibility of their providers.

5. Feedback and help

If something on this website is hard to use for you, or you need content in another format, please write to hello@nuicorn.com or compliance@nuicorn.com. Tell us the page and what got in your way. We answer within five business days and try to find a solution with you.

Last updated on October 5, 2026

Operator of this website

AVONAO INC.
254 Chapman Rd, Ste 208 #21918
Newark, Delaware 19702
USA

A corporation formed in the State of Delaware
Delaware entity file number: 10121895

Contact

Email: info@nuicorn.com
Website: www.nuicorn.com

Responsible for the content

AVONAO INC., at the address above. NUICORN is a branch and brand of AVONAO INC..

Scope

This Legal Information applies to the website www.nuicorn.com and to our profiles on LinkedIn, X and GitHub. Our products and platforms have their own websites with their own legal information. Our German website nuicorn.de has its own legal information.

Last updated on October 5, 2026