Privacy Policy
Effective October 24, 2026
This policy explains how Nudge Act ("we", "us"), the company behind NudgeAct, collects, uses and protects information when you use NudgeAct at nudgeact.com and our app (the "Service"). NudgeAct is an AI marketing assistant that researches a business, plans and drafts marketing content, designs images and videos, and, with the owner's permission, publishes approved content to connected accounts.
Information we collect
- Account information: your name, email address and password (stored as a secure hash), or your Google profile if you sign in with Google.
- Business information: your website address, the public content of that website that we research, your answers to our questions, and the business details you confirm or edit.
- Files you upload: your logo, photos, colours and font choices (your "Brand Kit").
- Content: drafts, designs, videos, calendar items, approvals and edits created in the Service.
- Connected accounts: if you connect a social media account (for example a Facebook Page or Instagram professional account), we receive an access token and basic account details (such as the Page or account name and ID) so we can publish the content you approve and show you how it performed. We receive only the permissions you grant.
- Payment information: handled by our payment processor (Stripe). We do not store full card numbers.
- Usage information: pages viewed and actions taken in the app, features used, device and browser type, IP address, and logs needed to run, improve and secure the Service.
How we use information
- To provide the Service: researching your business, recommending opportunities, drafting and designing content, and publishing content you approve.
- To send account and service emails, such as password resets and posting-day reminders.
- To keep the Service secure, prevent abuse, and fix problems.
- To understand how the product is used and improve it.
- To bill for subscriptions and enforce plan limits.
We do not sell your personal information. We do not use your business data or connected-account data to advertise to you or to anyone else.
Data from Facebook and Instagram
If you connect a Facebook Page or Instagram account, we use the data Meta provides only to publish the content you approve to that account, to show you the results of those posts, and to keep the connection working. We do not share this data with other parties except the service providers listed below that help us run the Service, and we do not use it for any other purpose. You can disconnect an account at any time in the app, or remove NudgeAct from your Facebook settings under Apps and Websites. To delete your data, see our Data Deletion page.
AI processing
NudgeAct uses AI services to research, write, design and check content. Your business information, drafts and uploaded images are sent to these providers only to produce your content. Our agreements with these providers do not allow them to use your data to train their models.
Service providers
We share information with companies that help us run the Service, only as needed for their part of the work:
- Render (hosting and database)
- Cloudflare (file storage)
- Anthropic (AI writing, research and review)
- OpenAI and Higgsfield (AI image and video creation)
- Resend (email delivery)
- PostHog (product analytics)
- Stripe (payments)
- Google and Meta (sign-in and connected accounts, when you choose to use them)
We may also disclose information if required by law, or to protect the rights and safety of our users or the public.
Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used. We do not use advertising cookies. You can block cookies in your browser, but you won't be able to sign in without them.
How long we keep information
We keep your information while your account is active. If you delete your account or ask us to delete your data, we delete it within 30 days, except where we must keep certain records (such as billing records) by law. Backups are overwritten on a rolling schedule.
Security
We encrypt data in transit, store passwords as secure hashes, keep access tokens on our servers only, and limit who can access production systems. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you.
Your choices and rights
- You can view and edit your business information in the app at any time.
- You can disconnect connected accounts at any time.
- You can ask for a copy of your data, a correction, or deletion by emailing info@nudgeact.com.
- Depending on where you live, you may have additional rights under local law; contact us and we will honour them.
Children
The Service is for businesses and is not intended for anyone under 18.
Changes
If we change this policy, we will update the date above and, for significant changes, notify account owners by email.
Contact
Nudge Act
PO Box 14076, St. Petersburg, FL 33733
info@nudgeact.com