Last updated: May 2026

Privacy Policy

This Privacy Policy describes how Nurdd Solutions Private Limited (“Nurdd”, “we”, “our”, “us”), the company operating Noma at noma.nurdd.club, collects, uses, stores, and shares your personal information. By using Noma you agree to the practices described below.

1. Who We Are

Nurdd Solutions Private Limited is a company incorporated in India. Our registered address and data controller contact is:

Nurdd Solutions Private Limited
Email: privacy@nurdd.club

2. Information We Collect

We collect the following categories of personal data:

a) Account & Profile Data

• Full name and email address (provided at sign-up)
• Password (stored as a bcrypt hash via Supabase Auth — we never see your plaintext password)
• Google account details if you sign in via Google OAuth
• Brand name, website domain, industry category, and country (entered during onboarding)

b) Content & Usage Data

• Tracking prompts and questions you add to your account
• Competitor names and domains you track
• AI-generated content drafts created through Noma
• Google Search Console data if you connect your Google account (fetched on your behalf, stored per your project)

c) Automatically Collected Data

• IP address, browser type, operating system, and referring URL
• Pages visited, time spent, and feature interactions
• Session recordings and heatmaps (Microsoft Clarity)
• Device type and country

d) Payment Data

• Billing name and email (processed by Razorpay or Stripe — we do not store card numbers)
• Subscription plan and transaction history

3. How We Use Your Information

• Provide the Service — run AI prompt checks, generate content, compute visibility scores, and display competitor analytics
• Account Management — authenticate you, manage your subscription, send transactional emails (e.g. receipts, password resets)
• Product Improvement — analyse aggregated usage patterns to improve Noma features
• Security & Fraud Prevention — detect abuse, rate-limit API calls, and enforce plan limits
• Legal Compliance — meet obligations under applicable law and respond to lawful requests

We do not use your data for advertising profiling or sell it to third parties.

4. Third-Party Services & Data Sharing

We share your data only with the service providers necessary to operate Noma. Each is bound by its own privacy policy and data processing terms.

We may also disclose your data if required by law, court order, or government authority, or to protect the rights and safety of Nurdd, our users, or the public. In the event of a merger or acquisition, your data may be transferred to the successor entity.

5. Analytics & Tracking

Noma uses multiple analytics tools to understand how users interact with the product. These tools collect pseudonymous data (device identifiers, session IDs) and do not link to your name or email unless you are a logged-in user. Microsoft Clarity may record your session interactions (clicks, scrolls) to help us identify UX issues. Sensitive fields such as passwords are masked by default.

You may opt out of analytics by using a browser extension that blocks tracking scripts, or by contacting us at privacy@nurdd.club.

6. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it longer for legal, regulatory, or fraud-prevention purposes. Aggregated, anonymised analytics data may be retained indefinitely.

7. Data Security

We implement industry-standard security measures including:

• Encrypted data transmission (TLS 1.2+)
• Passwords stored as bcrypt hashes
• Row-level security (RLS) policies on our database
• API keys hashed before storage
• Tenant isolation — users can only access their own organisation's data

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify affected users in the event of a data breach as required by law.

8. International Data Transfers

Nurdd Solutions Private Limited is incorporated in India. Our service providers (Supabase, Vercel, Stripe, etc.) may process your data in the United States, European Union, or other jurisdictions. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for transfers outside India and the EEA.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and personal data
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email privacy@nurdd.club. We will respond within 30 days. Indian users may also refer to their rights under the Digital Personal Data Protection Act, 2023 (DPDPA). EU/EEA users may lodge a complaint with their local supervisory authority.

10. Children's Privacy

Noma is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Noma dashboard at least 7 days before taking effect. Continued use of Noma after changes take effect constitutes your acceptance of the revised policy.

12. Contact Us

For any privacy-related questions, requests, or complaints:

Nurdd Solutions Private Limited
Email: privacy@nurdd.club
Website: noma.nurdd.club