Legal

NUDGEO Privacy Policy

NUDGEO privacy practices: data collection, processing, and retention. Data residency, AES-256 encryption at rest, TLS 1.3 in transit, retention periods, third-party sharing, sub-processors, user rights, cookies, and security controls.

Effective 2026-05-19

NUDGEO (the “Company”) is committed to protecting your personal data in compliance with applicable privacy laws and regulations. This Privacy Policy explains how we collect, use, retain, and protect information about users of the Service.

1. Data We Collect

We collect the following categories of information:

  • Required: Email address, company name, AWS Account ID.
  • Optional: Full name, job title, industry category.
  • Automatically collected: IP address, browser and OS information, page visit logs, cookies.
  • Service usage data: Tracked queries, entity information, API call records.

2. Purposes of Collection

  • Service delivery (dashboard access, measurement, content generation, automated publishing).
  • Account management (authentication, permissions, billing).
  • Service improvement (product usage analytics, A/B testing).
  • Customer support (responding to inquiries, debugging issues).
  • Legal obligations (tax reporting, dispute resolution).

3. Retention Periods

We retain personal data only for as long as necessary to fulfill the stated purpose or as required by law.

  • Account information: Until account deletion.
  • Payment records: 5 years (per applicable e-commerce regulations).
  • Access logs: 3 months (per applicable communications privacy regulations).
  • Measurement raw data: For the duration of an active account. Permanently deleted within 30 days of a deletion request.

4. Data Residency and Encryption

All personal data is stored exclusively in AWS ap-northeast-2 (Seoul region). No cross-border transfer of raw personal data occurs. Data is encrypted at rest with AES-256 and in transit with TLS 1.3.

5. Third-Party Disclosure

We do not share personal data with third parties except in the following circumstances:

  • With your explicit consent.
  • When required by law (e.g., valid legal process).
  • With subprocessors necessary to deliver the Service (see Section 6).

6. Subprocessors

We engage the following subprocessors:

  • AWS: Infrastructure hosting and payment processing.
  • OpenAI · Anthropic · Google · other AI providers: Transmission of tracked queries during measurement (limited to brand name and industry category).
  • Resend: Transactional email delivery.
  • Microsoft Clarity · Google Analytics: Website usage analytics and session analysis (heatmaps, anonymized recordings), limited to aggregate usage statistics.
  • Meta Platforms: Ad performance measurement and personalized advertising, on both the marketing site (nudgeo.com) and the signed-in product (app.nudgeo.com), limited to users who consent via the cookie banner.

7. Your Rights

You have the right to:

  • Access, correct, or delete your personal data.
  • Request restriction of processing.
  • Withdraw consent (by canceling your account).
  • Lodge a complaint with the relevant data protection authority.

Submit requests to privacy@nudgeo.com. We will respond within 7 business days.

8. Cookies

We use the following categories of cookies:

  • Authentication: Maintains your login session (required).
  • Preferences: Stores language, theme, and other user settings (optional).
  • Analytics: Anonymized usage statistics via Microsoft Clarity (_clck, _clsk) and Google Analytics (_ga) (optional).
  • Advertising: Ad performance measurement and personalized advertising via the Meta pixel (_fbp, _fbc) (optional). Used on both nudgeo.com and app.nudgeo.com, because sign-up and payment complete on the product.

Analytics and advertising cookies are non-essential and are set only if you accept them in the cookie banner shown on your first visit. You can withdraw consent at any time, and you can also refuse them via your browser settings or each provider's opt-out tools.

9. Behavioral Data for Advertising

We collect and use behavioral data for personalized advertising as set out below, on both the marketing site (nudgeo.com) and the signed-in product (app.nudgeo.com), and only where you have accepted in the cookie banner.

  • What we collect: Pages visited, time on page, clicks and other site usage, and advertising identifiers.
  • How we collect it: Automatically, via the Meta advertising pixel installed on the site, and only where you have accepted in the cookie banner.
  • Why we collect it: To measure ad performance and to serve advertising based on your interests.
  • Retention and disposal: We do not store behavioral data on our own servers. Meta Platforms retains and deletes it under its own data policy, and you can stop collection at any time using the controls below.
  • Your controls: Decline in the cookie banner, or withdraw consent later. You can also block cookies in your browser or opt out via Meta ad preferences.

We do not serve personalized advertising to children under 14, and we do not use sensitive data such as beliefs, political opinions, health, or sexual life for personalized advertising.

10. Security Measures

  • Annual SOC 2 Type II audit (report available to Enterprise plan customers).
  • AWS Foundational Technical Review: all items passed (verified April 2026).
  • Role-Based Access Control (RBAC) with audit logs retained for 90 days.
  • SSO/SAML integration for Enterprise customers (Okta, Google Workspace, Azure AD).

11. Data Protection Officer

To obtain the name, title, and contact details of our Data Protection Officer, email privacy@nudgeo.com.

12. Policy Updates

We will provide at least 7 days' advance notice of changes to this Policy (30 days for material changes).

To request a DPA, security checklist, or audit report, contact security@nudgeo.com.