Privacy Policy
Draft, not yet in force. Before publication the operator must replace every highlighted item with genuine details, confirm the provider list against the live deployment, and remove this notice and the noindex tag.
Who we are
NOD is operated by [legal name of the operator], [registered address]. Privacy questions and requests: [privacy contact email].
What we process
| Data | Why |
|---|---|
| Account details: email, name, optional phone number and whether it is verified | Sign-in, account security, workspace membership, WhatsApp commands you send from a verified number |
| Content from sources you connect: WhatsApp groups linked to NOD, selected Gmail folders, Slack channels, Jira, Google Calendar and Drive files, documents you upload | Extracting work, building your dashboard, briefs, reports and reminders, and the integrations you turn on |
| Billing records: plan, price, billing country, payment and invoice references, accepted billing terms | Charging for paid plans, receipts, disputes and tax records. Card and bank details are entered with Razorpay; NOD never receives them. |
| Security records: IP address, request IDs, sign-in attempts, session records | Preventing abuse and account takeover, rate limits, investigating faults |
| Product analytics, only if you accept analytics cookies | Understanding which features are used. Session recording, advertising pixels and cross-site tracking are not used. |
AI processing
Where you use AI features, the relevant content is sent to NOD's AI providers only to produce the result you asked for: NVIDIA AI endpoints for text, and Deepgram for speech. NOD does not use your content to train or fine-tune AI models, and does not ask you for permission to do so. Each provider's own retention of API requests is set by its terms: [confirm the current retention period and no-training setting for each provider account]. AI output can be wrong; check important results.
Google data
If you connect a Google account, NOD requests access to Gmail, Google Calendar and Google Drive only to provide the features you turn on, and stops using that access when you disconnect. NOD does not sell Google user data, use it for advertising, or use it to train AI models.
Who we share data with
Only service providers that run NOD for us, under contract: Supabase (database and sign-in), Render (application servers), Vercel (website), Razorpay (payments), Resend (service email), Cloudflare Turnstile (bot checks), Firebase Cloud Messaging (push notifications you enable), Sentry (error reports, if enabled), PostHog (analytics, only with consent), Qdrant (search index, if hosted externally), and the AI providers above. Integrations you connect, such as Slack, Jira or WhatsApp, receive what you ask NOD to send them. We do not sell personal data. [confirm hosting regions and any international transfer safeguards]
Retention
| Record | How long |
|---|---|
| Account, workspace content and connected-source records | While your account or workspace exists; erased within 30 days of a completed deletion request |
| Chat and message content | Under the workspace's message retention settings, then deleted |
| Security and sign-in records | [confirm period], longer only while investigating abuse |
| Billing, invoice and accepted-terms records | For the period tax and accounting law requires [confirm period, e.g. 8 years in India], even after account deletion |
| Backups | Overwritten on the provider's backup cycle [confirm] |
Your controls
In NOD, under Settings → Privacy & data, you can download your data, correct your profile, disconnect Google and other integrations, choose which optional alerts you receive, and request deletion of your account. Security, verification, billing and invitation emails you asked for are always sent, because your account depends on them. You may also contact us at the address above. You can complain to your local data protection authority.
Changes
We version this policy. When a change affects how your data is used, we tell you in NOD before it applies.