Privacy policy

Who we are

Nod helps freelancers send a deal their client can read, sign, and pay. In v1, Nod stores customer data in the United States (AWS us-east-1). EU data hosting is not available yet. People who need it can say so when they sign up, and we record that request.

What we collect

Account data (name, email, workspace), client contact details you enter, deal terms, signature evidence (name, email, phone, IP address, user agent, and a hash of the signed text), payment identifiers (not card or UPI numbers), WhatsApp message content you send through Nod, and product analytics if you have not opted out of the optional analytics key.

Transfers from the EEA and UK

v1 hosts data in the US. Transfers rely on the vendor's EU-US Data Privacy Framework certification where that vendor has one, and otherwise on the Standard Contractual Clauses (Module 2 or 3) and the UK Addendum in the data processing agreement. A transfer impact assessment is part of this draft and is not finished.

India (DPDP Act 2023)

Transfers to the US are not restricted under the Digital Personal Data Protection Act, 2023 and its Rules. Nod acts as a processor for the freelancer, who decides why the client's data is collected. Nod's duties in this draft are reasonable security, breach notification, and deletion when the freelancer asks. Nod does not store card or UPI data; payment providers do. Payment-system data localisation rules apply to those providers.

Retention

• Voice notes: 30 days.
• Transcripts: 12 months.
• One-time passcode rows: 90 days.
• Signed contracts and payment records: kept while the workspace is active, then deleted on a verified request.

Your rights

Workspace owners can export their data from Settings → Security. Deletion requests cover the workspace and the client records in it. The public deal page uses essential cookies only. Optional product analytics are off unless a PostHog key is configured for the deployment.