your data,plainlyexplained.

who operates nudgt

nudgt is a product of TACTECH LLC ("TACTECH LLC", "we", "us"), registered at 7901 4th St N, STE 300, St. Petersburg, FL, United States. For the purposes of this policy, TACTECH LLC is the data controller for Account Data and, per "our role: processor, not owner" below, the data processor for Invitee Data.

who this policy covers

This policy covers two kinds of people: visitors and customers of the nudgt website and product ("you", "customer"), and the "invitees" — the people a customer sends calendar invites and nudges to through the product. If you're a customer, this policy explains what we collect about you directly. If you're an invitee, see "if you're an invitee, not a customer" below — the short version is that your data was uploaded by the organization that invited you, and we process it strictly on their behalf.

Throughout this policy, "Account Data" means information tied to a customer's nudgt account (name, email, billing details, connected-service credentials), and "Invitee Data" means the names, emails, and phone numbers a customer uploads to run a campaign.

the data we collect

We collect only what the product needs to run — nothing more.

• Account data: your name, email address, password (stored as a salted hash, never in plain text), and billing information, which is handled directly by our payment processor — we never see or store full card numbers.
• Connected-service credentials: the SMTP credentials and SMS provider API keys you connect so campaigns can send through your own accounts. These live in an isolated secrets vault, encrypted separately from the rest of your data.
• Invitee data: the names, emails, phone numbers, and any custom fields you upload to build a campaign, plus the templates and send schedules you create.
• Usage and device data: IP address, browser type, and basic product-usage logs (e.g. login times, features used), collected for security, debugging, and abuse prevention.
• Support communications: anything you send us through the contact form or by email, including the content of your message and the address you left it from.

why we process it

We use the data above only for the following purposes:

• To provide the service — authenticate your account, send your campaigns through your connected SMTP/SMS accounts, and render your dashboard and reports.
• To bill you — calculate subscription and credit charges and process payment through our payment processor.
• To secure the service — detect abuse, fraud, and unauthorized access, and enforce our terms of service.
• To support you — respond to questions sent through the contact form or by email.
• To improve the product — understood in aggregate and de-identified form wherever possible; we do not build advertising profiles from your data.
• To comply with the law — where we are legally required to retain or disclose information.

our role: processor, not owner

For Account Data, TACTECH LLC is the data controller — we decide why and how that data is processed, as described in this policy.

For Invitee Data, the customer who uploaded it is the data controller, and TACTECH LLC acts only as a data processor (or "service provider" under US state privacy law), processing that data solely to run the campaigns the customer configures. We don't decide who gets messaged, and we don't independently market to invitees.

That also means the customer — not us — is responsible for having a lawful basis to contact their invitees, including obtaining any consent required for SMS messaging (for example, under the US TCPA), honoring opt-outs, and complying with email laws such as CAN-SPAM, CASL, or GDPR/PECR where applicable. Our terms of service require customers to meet these obligations before sending a campaign.

how it’s protected

Your data lives in an encrypted, access-controlled database behind the same authentication that protects your account. SMTP and SMS-provider credentials get an extra layer on top of that: they’re held in an isolated secrets vault, decrypted only in memory for the moment a batch actually sends — they never touch a plain database column, and no one, including us, can export them in plaintext.

Invites and nudges are sent through the SMTP and SMS-provider connections you supply. We are never a shared sending pool — your domain and your SMS number carry the reputation, not ours.

Access to production data is limited to the team members who need it to operate the service, and is logged.

who we share it with

We do not sell Account Data or Invitee Data, and we never share Invitee Data with anyone outside of running the campaign it was uploaded for. We share data only with the following categories of sub-processors, each bound by their own confidentiality and data-protection obligations:

• Cloud hosting and database infrastructure, to store and serve the product.
• Our payment processor, to handle billing and process payments.
• The SMTP and SMS providers you connect yourself — these aren’t sub-processors we choose; they’re your own accounts, and your agreement with them governs how they handle the data that passes through.
• Law enforcement or regulators, only where legally compelled — and only to the extent required.

international transfers

If your data is transferred internationally to run the service (for example, to reach cloud infrastructure located in a different country), we take steps appropriate to that transfer, such as relying on standard contractual clauses or equivalent safeguards recognized under applicable data-protection law.

how long we keep it

We keep Account Data and Invitee Data for as long as your account is active. We don’t keep an indefinite shadow copy of invitee lists or send history after you’ve stopped using them.

If you cancel, your stored data — invitee lists, templates, and connected-service credentials — is deleted within a defined retention window rather than held onto indefinitely. Backups that include deleted data are purged on a rolling schedule after that window closes.

We may retain limited billing records for longer where required by tax or accounting law.

your rights

Depending on where you live, you may have some or all of the following rights over your Account Data. To exercise any of them, contact us using the details below.

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to delete your data, subject to any legal retention obligations.
• Portability — request your data in a portable format; you can also export your invitee lists and templates yourself, any time, from your account.
• Restriction or objection — ask us to limit or stop certain processing.
• Non-discrimination — we won’t penalize you for exercising any of these rights.
• California and other US state residents may also have the right to know what categories of personal information are collected and to opt out of the sale or sharing of personal information — as noted above, we don’t sell personal information, so there is nothing to opt out of today.

if you’re an invitee, not a customer

If you received a calendar invite, email, or text from a business using nudgt, your information was uploaded by that business, not by you directly. To update or remove your data, the fastest path is usually to contact that business directly. You can also reach us — we will forward your request to the relevant customer and assist where we're able to, consistent with our role as their processor.

cookies & tracking

We don’t currently use third-party analytics or advertising trackers on this website. We use only essential, first-party session cookies needed to keep you logged in. If that changes, we’ll update this section before it does.

children’s privacy

nudgt is a business tool and is not directed at, or knowingly used to collect data from, children under 16. If you believe a child has provided us with personal data, contact us and we’ll delete it.

changes to this policy

We’ll update this page as the product and our practices change, and post a new "last updated" date whenever we do. Material changes will be communicated to active customers by email.

questions

Reach us at info@nudgt.com, or use the contact form, with any question about this policy or your data.