This Privacy Policy describes how NerdJoy ("we," "us," or "our") collects, uses, and protects information when you use MarketingIQ ("the Service"). By using the Service, you agree to the practices described here.

1. Information We Collect

Account information. When you sign up, we collect your name, email address, and billing information (processed by Stripe — we do not store card numbers).

Workspace and connector data. To power the Service, you authorize MarketingIQ to connect to third-party platforms you choose — such as Klaviyo, Shopify, Google Analytics 4, BigCommerce, Meta Ads, Google Ads, Gorgias, and Yotpo. We use the API credentials you provide to retrieve data from these platforms on your behalf.

Usage data. We collect information about how you use the Service, including chat messages, queries submitted, features accessed, and session activity. This helps us improve the product and diagnose issues.

Device and technical data. We collect IP addresses, browser type, and other standard technical information when you access the Service.

2. How We Use Your Information

• To operate and deliver the Service — answering your queries, generating health reports, and providing AI-powered analysis
• To process payments and manage your subscription
• To send transactional emails (account activity, nightly digests, billing notices)
• To improve the product through aggregate usage analysis
• To respond to support requests and communicate about the Service

We do not sell your personal data or use it to train AI models available to third parties.

3. Connector Data

When you connect a third-party platform, MarketingIQ makes live API calls to retrieve your data at the time of your request. We do not persistently store raw connector response data beyond your active session. API credentials (keys, tokens) are encrypted at rest using AES-256-GCM.

Each workspace is fully isolated — data from one workspace is never accessible to users of another workspace.

4. Data Sharing

We share data only as necessary to operate the Service:

• Anthropic — AI responses are generated via the Claude API. Your queries and connector data summaries are sent to Anthropic's API to generate answers. Anthropic's privacy policy governs their handling of this data.
• Stripe — payment processing. We share only what Stripe needs to process your subscription.
• Infrastructure providers — we use cloud hosting and database services. These providers process data on our behalf under appropriate data processing agreements.
• Legal compliance — we may disclose information if required by law or to protect the rights, property, or safety of NerdJoy or others.

We do not share your data with advertisers or data brokers.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Chat history and health reports are retained to enable the Service features you've enabled (e.g., nightly digests). You can request deletion of your account and associated data at any time by emailing heather@nerdjoy.tech.

6. Security

We use industry-standard security practices including:

• AES-256-GCM encryption for stored credentials
• TLS for all data in transit
• Workspace isolation enforced at the data layer
• Access controls limiting which team members can view which workspace data

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at heather@nerdjoy.tech.

7. Your Rights

Depending on where you're located, you may have rights including:

• Access to the personal data we hold about you
• Correction of inaccurate data
• Deletion of your data
• Portability of your data
• Objection to certain processing

To exercise any of these rights, email heather@nerdjoy.tech and we'll respond within 30 days.

8. Cookies

We use session cookies to keep you logged in and functional cookies necessary for the Service to operate. We also use PostHog for product analytics, which may set cookies to track usage patterns. We do not use advertising cookies.

9. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently done so, contact us and we will delete it.

10. Changes to This Policy

We may update this policy as the Service evolves. We'll note the updated date at the top and, for material changes, notify you by email. Continued use of the Service after changes constitutes acceptance.

11. Contact

Questions about this policy? Email us at heather@nerdjoy.tech.

NerdJoy
heather@nerdjoy.tech