Last updated: [PLACEHOLDER - date]
This is an AI-drafted template. Fields marked [PLACEHOLDER] must be completed by the operator, and this policy should be reviewed by a qualified data-protection lawyer before it is relied upon.
The controller responsible for the processing of personal data through nod. (usenod.io) is:
Mesper SH.P.K.
[PLACEHOLDER — street address]
[PLACEHOLDER — postal code, city], Kosovo
hello@usenod.io
Data protection contact: [PLACEHOLDER - DPO or responsible contact; we have not appointed a statutory DPO]. You can reach us about any privacy matter at hello@usenod.io.
We do not sell your personal data.
Paid plans are sold and processed by Paddle.com Market Ltd as our Merchant of Record. Card and payment details are entered with and handled by Paddle, nod. never sees or stores your card data. Paddle processes the personal data needed to take payment, invoice you, and calculate and remit tax/VAT, under its own privacy policy. We receive only limited billing metadata (e.g. plan, status, country, and a transaction reference) to manage your subscription.
We use the following processors to operate the Service. Each is bound to process personal data only on our instructions and in accordance with the GDPR. Some are used only when you choose to enable the relevant feature.
| Processor | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication & file storage | [PLACEHOLDER — likely EU] |
| Vercel | Application hosting & CDN | Global / EU edge |
| Paddle (Paddle.com Market Ltd) | Payments & Merchant of Record | UK / EU |
| Google (Gemini API) | AI features - processes briefs & prompts you submit | EU / USA |
| Resend | Transactional email & notification delivery | EU / USA |
| Meta | Only when you connect Meta Ads to publish creatives | EU / USA |
| Slack / Microsoft Teams / Google Chat | Only if you connect them for notifications | Varies by provider |
Some processors may process data outside the EU/EEA (e.g. in the USA). Where this happens, the transfer is safeguarded by appropriate mechanisms such as the EU Standard Contractual Clauses and/or an adequacy decision (e.g. the EU-US Data Privacy Framework where the recipient is certified). You may request more detail on the safeguards in place at hello@usenod.io.
We retain account and usage data for as long as your account is active. On account deletion, associated personal data is removed within [PLACEHOLDER — e.g. 30] days, except where we must retain limited records to meet legal obligations (e.g. billing/tax records held via our Merchant of Record). You can request deletion at any time (see section 9).
You have the right to:
To exercise any of these rights, contact hello@usenod.io. You also have the right to lodge a complaint with your local data-protection supervisory authority.
nod. uses essential cookies required for authentication and session management, which cannot be disabled. Any non-essential cookies (e.g. analytics or marketing) are loaded only with your consent, which you give or decline through our cookie banner and can change at any time. For details and to manage your choices, use the cookie banner on the site.
Questions about this policy, or to exercise your rights? Contact hello@usenod.io.
We may update this policy from time to time. Material changes will be communicated with reasonable notice, and the "Last updated" date above will reflect the latest version.