Legal

Privacy Policy

Effective: May 2, 2026 · Operated by Chest Card Inc, Canada

Your data is never used to train AI models.

Your call notes and deal information belong to you.

1. Who We Are

Nudgr is a deal progress assistant for freelancers, agency owners, and consultants. It is operated by Chest Card Inc, a company incorporated in Canada. We are the data controller for all personal data you provide through usenudgr.com.

2. What Data We Collect

We collect data you provide directly: your email address, sales call notes, client names, deal details, concerns, objections, next steps, and call transcripts if uploaded. We also collect usage data automatically: pages visited, features used, IP address, browser type, and session data. If you connect Google, we receive your email, name, and profile picture from Google.

3. How We Use Your Data

We use your data to provide the Nudgr service — processing call notes, generating follow-up emails, and managing your deal pipeline. We also use it to send 48h nudge reminders, authenticate you, process payments via Stripe, send transactional emails via Resend, and measure internal usage to improve the product. We do NOT use your call notes or deal data to train AI models.

4. How AI Processing Works

Nudgr uses Anthropic's Claude API to process your input and generate follow-up emails. Your notes are sent to Anthropic's API over an encrypted connection. Claude processes your input and returns a structured response. Anthropic processes this data under their API Terms of Service. Anthropic's API terms state that data submitted via the API is not used to train their models by default. You can review Anthropic's privacy policy at anthropic.com/privacy.

5. Data Storage and Retention

Your data is stored in a PostgreSQL database hosted on Railway, located in their cloud infrastructure. Active account data is retained as long as your account is active. After account deletion, all personal data is deleted within 30 days. Stripe payment records are retained as required by Canadian tax law (7 years). Server logs are retained for 90 days.

6. Third-Party Services

We share your data with: Anthropic (Claude API — AI processing), Google (Gmail OAuth — authentication), Railway (hosting), Resend (email delivery), and Stripe (payment processing). We do not sell, rent, or trade your personal data to any third party for marketing purposes.

7. Your Rights

You have the right to access, correct, delete, and export your personal data at any time. You can delete your account from Settings → Account at any time. For data requests, contact saveandinvest@chestcard.ca. EU/UK users have additional rights under GDPR. Canadian users have rights under PIPEDA. We respond to all privacy requests within 30 days.

8. Security

All data is encrypted in transit using HTTPS/TLS. Database connections are encrypted. Authentication tokens are cryptographically signed. We do not store payment card details — Stripe handles all card data. Rate limiting is applied to all API endpoints to prevent abuse.

9. International Data Transfers

Chest Card Inc is based in Canada. Our infrastructure providers may process your data in the United States. Canada has been recognised by the European Commission as providing adequate data protection. By using Nudgr, you acknowledge that your data may be processed outside your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 14 days before the change takes effect. The current version is always available at usenudgr.com/privacy.

11. Contact Us

Chest Card Inc · saveandinvest@chestcard.ca · usenudgr.com · Canada