NXTG.AI Privacy Policy

Last Updated: May 3, 2026

The Short Version

NXTG.AI builds developer tools that run on your machine. Most of our products collect nothing at all. One product — Faultline Pro — offers opt-in, anonymized usage telemetry that you must explicitly enable. No personally identifiable information is ever collected by any NXTG.AI product.

This website (nxtg.ai) uses Vercel Analytics for anonymous page-view counts. That is the extent of data collection on this domain.

1. Who We Are

NXTG.AI ("we," "our," or "us") builds AI-powered developer tools and data intelligence products. We are a solo-founder company based in the United States.

Contact: [email protected]

2. Our Principles

These principles apply across all NXTG.AI products:

Local-first. Our tools run on your machine. Your data stays on your disk.
Opt-in only. We never collect telemetry by default. Any data collection requires your explicit action — an environment variable you set, a toggle you enable, or a form you fill out.
No accounts required. Our developer tools do not require registration, login, or authentication to use core features.
Open source. Our tools are source-available under OSI-approved licenses so you can audit every claim in this policy.
No advertising. We do not serve ads, sell data, or engage in ad-tech.
No PII. We do not collect personally identifiable information through our developer tools — no names, no email addresses, no IP addresses, no API keys, no file paths, no source code content.

3. Product-Specific Privacy Details

3.1 Forge — Claude Code Plugin

Forge is an open-source (MIT-licensed) plugin for Anthropic's Claude Code. It provides AI-powered development governance through commands, agents, skills, hooks, and a local MCP server.

What Forge collects: Nothing.

No telemetry, no analytics, no usage tracking
No cloud processing — all governance checks, health scores, and security scans run locally
No data transmission — Forge reads and writes files in your project directory (primarily .claude/governance.json), and that data stays on your disk
The only external network request is loading Tailwind CSS from cdn.tailwindcss.com when you open the HTML dashboard in your browser. This is a static stylesheet fetch — no user data is transmitted.

Your interactions with Claude Code itself (the AI model) are governed by Anthropic's Privacy Policy, not ours. We have no access to your Claude Code conversations, API usage, or model inputs/outputs.

Source code: github.com/nxtg-ai/forge-plugin

3.2 Forge Orchestrator — Multi-Agent Task Engine

The Forge Orchestrator is an optional Rust binary companion to Forge that provides multi-agent task orchestration and knowledge capture.

What Forge Orchestrator collects: Nothing. It runs entirely on your machine with no network calls, no telemetry, and no data collection.

3.3 Faultline Pro — AI Claim Forensics CLI

Faultline Pro is an Apache-2.0 licensed CLI tool for forensic verification of AI-generated claims. It runs locally on your machine.

What Faultline Pro collects by default: Nothing. With default settings, Faultline Pro makes no telemetry requests.

Opt-in telemetry: Faultline Pro offers optional, anonymized usage telemetry to help us improve reliability and prioritize development. Telemetry is disabled by default and is never sent unless you explicitly enable it by setting the environment variable:

export FAULTLINE_TELEMETRY=1

When telemetry is enabled, the following fields — and only these fields — are collected:

Field	Description
`install_id`	Anonymous UUID generated once per device (`~/.faultline/install-id`)
`run_id`	UUID generated per CLI invocation
`version`	CLI version string (e.g., `0.5.4`)
`provider`	AI provider name used for the scan (`gemini`, `openai`, `claude`, `perplexity`, `mock`)
`exit_status`	Exit code — `0` (success) or `1` (error)
`eval_count`	Number of claims scanned in the run
`error_code`	Enumerated error code from a fixed set (e.g., `TIMEOUT`, `NETWORK_ERROR`) — never the raw error message
`os_platform`	Operating system (`linux`, `darwin`, or `win32`)

A timestamp (ISO-8601) is attached to each event for time-series aggregation.

What Faultline Pro never collects — regardless of telemetry setting:

API keys or provider credentials
Evaluation content (the text you scan)
File paths, hostnames, or directory structures
IP addresses
Email addresses or any personally identifiable information
Raw error messages (only enumerated error codes from a fixed allowlist)

Both the CLI client and the server-side worker enforce this whitelist. Any field not in the table above is rejected by the server.

Data processor and storage: Telemetry events are transmitted to a Cloudflare Worker and stored in Cloudflare D1 (region: WNAM — Western North America). Cloudflare, Inc. acts as the data processor. No telemetry data is shared with, sold to, or accessible by any other third party.

Source code: The telemetry module (packages/cli/cli/telemetry.ts) and the Cloudflare Worker (infra/telemetry-worker/) are both Apache-2.0 licensed and source-available for audit.

How to disable: Remove or unset the FAULTLINE_TELEMETRY environment variable. No data is sent when the variable is absent or set to any value other than 1.

3.4 Faultline Pro — Web Application

The Faultline Pro web application (faultline-web) provides a browser-based interface for AI claim verification. Its privacy details are documented on the Faultline Web application itself.

3.5 Additional Products

As we launch new products, their privacy details will be added here. Each product section will clearly state what data (if any) is collected, how it is used, and whether it makes network requests.

4. This Website (nxtg.ai)

The nxtg.ai website uses:

Vercel Analytics — anonymous, aggregate page-view statistics. No cookies. No personally identifiable information. Compliant with GDPR, CCPA, and PECR without consent banners. See Vercel's Privacy Policy.
Vercel Speed Insights — anonymous page-load performance metrics. No cookies. No personal data.
Vercel Hosting — standard web hosting infrastructure. Vercel processes server logs (IP addresses, request timestamps) per their own privacy policy. We do not access or store these logs.

We do not use cookies, tracking pixels, fingerprinting, or third-party advertising services on this website.

5. Information We Do NOT Collect

Across all our products and this website, we do not collect:

Your name, email, or contact information (unless you email us directly or submit a contact form)
Your source code, project files, or repository data
AI evaluation content (the text you submit to our tools for analysis)
API keys, provider credentials, or authentication tokens
Device identifiers, browser fingerprints, or hardware information beyond the operating system name (and only when telemetry is explicitly enabled)
Location data or IP addresses
Behavioral data, session recordings, or usage patterns beyond the anonymous aggregate metrics described in §3.3 and §4

6. When You Contact Us

If you email us at [email protected], submit a contact form, open a GitHub issue, or otherwise reach out, we receive whatever information you voluntarily provide. We use this solely to respond to your inquiry. We do not add you to marketing lists or share your contact information with third parties.

7. Open Source and Transparency

Our developer tools are open source under OSI-approved licenses (MIT and Apache-2.0). You can audit the source code to verify every claim in this policy. The telemetry whitelist is enforced in code — both on the client side and on the server side — and both codebases are publicly available for inspection.

8. Third-Party Services

Our products may integrate with third-party platforms (e.g., Anthropic's Claude Code, Google AI Studio, OpenAI). Your use of those platforms is governed by their respective terms and privacy policies. We do not intercept, store, or process your interactions with third-party services.

Faultline Pro's opt-in telemetry uses Cloudflare Workers and Cloudflare D1 for data processing and storage. Cloudflare's privacy practices are governed by Cloudflare's Privacy Policy.

9. EU AI Act Readiness

Faultline Pro provides AI output verification and EU AI Act risk classification capabilities. The tool maps AI-generated claims to applicable EU AI Act risk tiers and can generate compliance reports referencing Articles 6, 9, 13, 14, and 15.

These capabilities are tools to assist your compliance workflow — they do not constitute legal advice, certification, or guarantee of regulatory compliance. You are responsible for your own AI Act compliance obligations.

Our data handling practices — minimal collection, opt-in only, no PII, transparent processing, auditable source code — are designed to align with the principles of data minimization and transparency reflected in EU AI Act requirements for AI system operators.

10. Children's Privacy

Our products are developer tools and data intelligence software. They are not directed at children under 13, and we do not knowingly collect information from children.

11. Data Security

For products that collect no data (Forge, Forge Orchestrator, and Faultline Pro with default settings), there is no user database to breach. Data generated by these tools lives in your project directories on your machine, protected by your own security measures.

For Faultline Pro opt-in telemetry, the anonymized data is stored in Cloudflare D1, which provides encryption at rest and in transit. The data contains no personally identifiable information. Access to the telemetry dashboard is restricted to NXTG.AI operators.

12. International Users

We are based in the United States. For products that collect no personal data, there are no international data transfers to address.

Faultline Pro's opt-in telemetry is processed and stored by Cloudflare in the WNAM (Western North America) region. Since the telemetry contains no personally identifiable information, no special international transfer mechanisms (e.g., SCCs, BCRs) are required. However, we will add appropriate data transfer safeguards if our data handling practices change in the future.

The nxtg.ai website is hosted on Vercel's global CDN — see Vercel's privacy policy for their infrastructure practices.

13. Your Rights

Under GDPR, CCPA, and similar regulations, you have the right to access, correct, delete, and port your personal data. Since we do not collect personal data through most of our tools, these rights are satisfied by design for those products.

For Faultline Pro telemetry: the data is anonymous (keyed by a locally-generated UUID, not tied to any identity). If you wish to stop contributing telemetry data, unset the FAULTLINE_TELEMETRY environment variable. If you have questions about data associated with your install ID, contact [email protected].

If you have contacted us via email or contact form and want your correspondence deleted, email [email protected] and we will comply promptly.

14. Changes to This Policy

We will update this Privacy Policy as we release new products or change data handling practices. Material changes will be posted on this page with an updated date. Since our tools are open source, you can also monitor our repositories for any changes that might affect data handling.

15. Contact

Questions about this Privacy Policy:

Email: [email protected]
GitHub: github.com/nxtg-ai

This Privacy Policy is effective as of May 3, 2026.