Privacy Policy

1. Scope of this notice

This draft describes the current public website, synthetic demo, authentication, and pilot-application flow. It is not the privacy notice for a live WhatsApp pilot. A separate reviewed notice and data-processing agreement are required before real customer conversations are connected.

2. Data the current site may collect

If you create an account, the configured authentication service processes your email, password credential, and session data. If you complete onboarding, NODO may store the business name, owner name, business phone number, services, prices, hours, location, and booking instructions you submit. Security and operational logs may record limited technical metadata needed to diagnose failures and protect the service.

3. Synthetic demo data

The public demo uses generated examples and does not require real customer names, phone numbers, or conversation exports. Do not enter sensitive, confidential, medical, financial, or real customer information into the demo.

4. Current uses

Current account and onboarding data is used to authenticate the account, preserve submitted pilot details, generate owner-approved sample facts, evaluate pilot fit, maintain security, and troubleshoot the application. The current site does not collect card details or automatically enroll an account in paid billing.

5. Providers and production boundaries

Authentication and database functions may use the configured Supabase and hosting infrastructure. Twilio, Meta, or another WhatsApp provider is involved only after a separately authorized connection. The final live-pilot notice must name the actual operating entity, processors, hosting locations, credential owners, and cross-provider responsibilities before production use.

6. Access, correction, and deletion

A final retention schedule has not been approved for live pilot data. Until that review is complete, you may ask what pilot-application data is associated with your account and request correction or deletion. Some information may need to be retained temporarily for security, legal, or audit reasons, which must be explained in the final approved notice.

7. Contact

Privacy questions and account-data requests can be sent to privacy@nodolabs.ai.