Privacy Policy

INTRODUCTION

At NerdyTags, we respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

Your data belongs to you. We never sell or rent your personal information. We only share it with the service providers we need to run NerdyTags and with the services that you, or an organization you belong to, choose to connect, as described in this policy. Most personal information we collect is based on what you choose to provide for the sole purpose of displaying on your profile.

This policy covers both personal NerdyTags accounts and NerdyTags for Business, our workspace for companies and teams (the "business portal"). The section Business Accounts and Organizations explains what is different when you use NerdyTags as part of an organization.

Please read this privacy policy carefully to understand our policies and practices regarding your personal data and how we will treat it.

USER CONTROL OVER DATA

We believe in giving you complete control over your data:

Full control: You have full control over what information is displayed on your profile.
Edit anytime: You can edit or remove your information at any time through your dashboard.
Account deletion: You can delete your account at any time through your account settings in your dashboard. All information related to your account will be completely deleted immediately with no delay, and no data is retained.
No selling of data: We do not sell or rent your personal information, and we only share it as described in the Service Providers and Data Sharing section below.

INFORMATION WE COLLECT

We collect and process the following categories of personal data:

Profile information: Information you voluntarily provide to display on your profile, including but not limited to:
- Name or username
- Biography or personal description
- Social media links and handles
- Contact details (email, phone number, if provided)
- Profile pictures or images
- Any other information you choose to add to your profile
Account information: Data required for account creation and management, including:
- Email address (used for account identification and communication)
- Password (securely hashed and encrypted, never stored in plain text)
- Account creation date and timestamp
- Account status and subscription information (if applicable)
Usage data: Information about how you interact with our service, including:
- Login history and timestamps
- Device type and browser information
- Pages visited and features used
- Time spent on the platform
- Actions performed on the website
Technical data: Automatically collected technical information, including:
- IP addresses (used for security and fraud prevention)
- Cookies and similar tracking technologies
- Browser type and version
- Operating system information
- Screen resolution and device capabilities
Payment information (if applicable): For users with paid subscriptions:
- Billing address
- Payment method information (processed securely through third-party payment processors)
- Transaction history and subscription details
- Note: We do not store complete credit card numbers or sensitive payment details on our servers

All profile information is provided by you and is entirely optional. You decide what to share on your public profile. We only collect data that is necessary to provide our services and improve your experience.

HOW WE USE YOUR INFORMATION

We process your personal data for the following specific purposes:

Service Provision: To provide and maintain our service by displaying the information you choose to share on your profile, enabling profile creation and management, and facilitating user interactions on our platform.
Account Management: To create, manage, and maintain your user account, including authentication, account verification, and subscription management (if applicable).
Security and Fraud Prevention: To secure your account and protect it from unauthorized access, detect and prevent security incidents, fraudulent activity, abuse, or other harmful activities, and ensure the safety and integrity of our platform.
Communication: To communicate with you about your account, respond to your inquiries, send important service updates, security notifications, and administrative messages related to your use of our service.
Service Improvement: To analyze usage patterns, improve our website functionality, enhance user experience, develop new features, and optimize our service performance.
Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests, and to enforce our Terms of Service and other policies.
Payment Processing: To process payments, manage subscriptions, handle billing inquiries, and prevent fraudulent transactions (for users with paid subscriptions).
Technical Operation: To maintain and improve the technical infrastructure of our service, ensure proper functionality, troubleshoot issues, and perform system maintenance.

We do not use your data for marketing purposes or sell your information to advertisers. All data processing is done solely for the purposes listed above and in accordance with this privacy policy.

SERVICE PROVIDERS AND DATA SHARING

We share personal data only in the following cases:

Service providers: Companies that help us run NerdyTags and may only use your data to provide their service to us. These include our payment processor (Stripe), our cloud storage provider for uploaded images, and Cloudflare for custom domains and security.
Integrations you connect: When you or an administrator of your organization connects a third-party service (for example Mailchimp, Google Sheets, HighLevel, Asana, HubSpot, Pipedrive, Klaviyo, Shopify, a Slack, Microsoft Teams, or Discord channel, or a webhook to Zapier, Make, or n8n), we send that service the data needed for the integration, such as email subscribers and contact form submissions. The third party's own privacy policy governs how it handles that data.
Your organization: If you join an organization in the business portal, or link a profile to one, the organization's team can access the data described in the Business Accounts and Organizations section.
Legal reasons: When required by law, to respond to valid legal process, or to protect the safety of our users and the public, including the child safety reporting described below.

BUSINESS ACCOUNTS AND ORGANIZATIONS

NerdyTags for Business lets a company (an "organization") create a workspace, invite team members, and manage profiles together. When you use the business portal, the following applies in addition to the rest of this policy.

Who is responsible for the data

The organization decides what data is collected through its workspace and profiles, such as its leads, form submissions, and customer conversations, and who on its team can see it. For that data, the organization is responsible for having a lawful basis to collect and use it, and NerdyTags processes it on the organization's behalf and according to its instructions. NerdyTags remains responsible for the account data we need to run the service, such as your login, security, and billing records.

Information we collect for organizations

Organization details: Organization name, URL name, logo, branding settings, billing email, number of seats, subscription status, and company-wide profile defaults (such as analytics tags your organization adds to its profiles).
Team member information: The email address of each member and invited person, their role, the groups they belong to, which profiles they can access, who invited them, and how they joined (invitation, single sign-on, or as the owner).
Single sign-on (SSO): If your organization signs in through its own identity provider (SAML or OIDC), we store the connection settings, the email domains the organization has verified, and the email address the identity provider sends us when you sign in. Identity provider secrets are stored encrypted. If your organization turns on automatic account creation, an account and membership are created for you the first time you sign in with a verified company email.
Audit log: A record of actions taken in the workspace (for example inviting or removing members, changing roles, editing, transferring, or deleting profiles, and changing integrations), including who performed the action, when, the IP address, and the browser used. Administrators with the right permission can view this log.
Profile analytics: Views, link clicks, contact card downloads, shares, and QR code and NFC scans for the organization's profiles, including the approximate location (country, region, and city) of visitors.
Leads: Names, email addresses, and phone numbers of people who subscribe through an organization profile, and the contents of contact forms submitted to it. Team members with permission can view, search, and export this information.
Team inbox: Messages sent to and from profiles owned by the organization. Team members with permission to manage a profile's messages can read and reply to them as that profile.

Who in an organization can see your data

Members: The organization's owner and administrators can see each member's email address, role, groups, and activity in the audit log. Other members see only what their role and groups allow.
Organization-owned profiles: Profiles created in the business portal belong to the organization. Team members can access them according to their permissions, and the organization can edit, transfer, or delete them.
Profiles you link to an organization: If you use a join code to let an organization manage your personal profile, the organization only receives the permissions you approve, such as editing, appearance, links, analytics, or email subscribers and integrations. Messages sent to your personal profile always stay private to you and are never shared with the organization. You can unlink your profile at any time, and the organization loses access immediately.
Visitors and leads: If you subscribe to, message, or submit a form on an organization's profile, that organization and its authorized team members receive your information. Please contact the organization directly about how it uses that information.

Integrations and webhooks

Organization administrators can connect company-wide integrations (Mailchimp, Google Sheets, HighLevel, Asana, HubSpot, Pipedrive, and Klaviyo), chat alerts to Slack, Microsoft Teams, or Discord channels, and webhooks that send events to addresses they choose. When connected, new email subscribers (name, email address, and phone number) and contact form submissions from the organization's profiles are sent automatically to those services. Credentials for these connections are stored securely and are only used to deliver this data. We keep a record of each webhook delivery, including its contents, for 30 days so administrators can troubleshoot and retry failed deliveries.

Custom domains

If an organization connects its own domain to the business portal, Cloudflare provisions and serves it, and SSL certificates are issued for that domain. Requests to that domain are processed by Cloudflare as one of our service providers.

Billing for organizations

Business subscriptions are billed per seat through Stripe. We store the organization's billing email, seat count, and subscription status. Stripe processes payment details, and we do not store complete card numbers on our servers.

Retention and deletion for organizations

Invitations expire after 7 days if they are not accepted.
Webhook delivery records are deleted after 30 days.
Audit log entries are kept for as long as the organization exists so the organization has a reliable history of changes to its workspace.
Removing a member: When a member is removed or leaves, their access ends immediately. Audit log entries describing their past actions remain with the organization.
Deleting an organization: Only the owner can delete an organization, after deleting or transferring the profiles the organization owns. Deletion cancels the subscription, returns linked personal profiles to their owners, removes custom domains, and permanently deletes the organization's members, roles, groups, invitations, join codes, single sign-on settings, integrations, webhooks, and audit log.
Deleting your personal account: If you own an organization, you must transfer ownership or delete the organization first. Deleting your account ends all of your memberships. Audit log entries that recorded your actions stay with the organization, but are no longer linked to your account.

Your rights for data held by an organization

If you want to access, correct, or delete information that an organization collected about you, such as a lead, form submission, or message, please contact that organization first, as it controls that data. If you cannot reach the organization, or have questions about data held in the business portal, contact us at [email protected] and we will help.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

We use the following types of cookies:

Session cookies: These are temporary cookies that expire when you close your browser. They enable our website to recognize you as you navigate between pages.
Authentication cookies: These cookies help us identify you when you're logged in to our service so we can provide personalized features and services.
Preference cookies: These cookies allow our website to remember choices you make (such as your preferred language or the region you are in) and provide enhanced, more personal features.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

DATA SECURITY

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. These measures include:

Encrypting sensitive data using industry-standard encryption technologies.
Implementing secure authentication mechanisms to protect user accounts.
Regularly monitoring our systems for possible vulnerabilities and attacks.
Limiting access to your personal data to those employees who have a business need to know.

DATA RETENTION

We will only retain your personal data for as long as necessary to provide you with our services. If you delete your account, all your personal data will be immediately and permanently removed from our systems with no delay. No data related to your account is retained after deletion, except records that belong to an organization you were a member of, such as its audit log, as described in Business Accounts and Organizations.

YOUR DATA PROTECTION RIGHTS

You have complete control over your data and can exercise the following rights at any time:

Right to access: You can access all your data through your account dashboard.
Right to rectification: You can edit any of your information directly through your account settings.
Right to erasure: You can delete specific information or your entire account at any time.
Right to restrict processing: You can choose what information is displayed on your profile.

If you need assistance with any of these rights, please contact us at [email protected].

HOW TO REQUEST DATA DELETION

You have the right to request deletion of your personal data at any time. You can delete your information through your account settings in your account dashboard:

Account Deletion via Settings: Delete all your account information through your account dashboard:
- Log in to your account
- Navigate to your account settings
- Select the option to delete your account
- Confirm the deletion request
- All your personal data will be immediately and permanently deleted with no delay
Partial Data Deletion: You can delete specific information without deleting your entire account:
- Log in to your account
- Navigate to your account settings
- Edit your profile or account information
- Remove or delete the specific information you no longer want to be processed
- Changes take effect immediately
Email Request: You can also request data deletion by sending an email to our support team:
- Send an email to [email protected]
- Include your account email address and clearly state your request for data deletion
- For security purposes, we may need to verify your identity before processing the request
- Once verified, all your data will be immediately and permanently deleted

What happens when you request deletion:

All information related to your account, including profile information, account data, usage data, and any other personal data, will be completely and permanently deleted immediately with no delay
Your account will be deactivated and you will no longer be able to access our service
No data related to your account is retained - all information is completely removed from our systems, except organization audit log entries, which stay with the organization and are no longer linked to your account
If you have an active paid subscription, please cancel it before requesting account deletion, or contact us for assistance
If you own an organization in the business portal, you must transfer ownership or delete the organization before you can delete your account

If you have any questions about the data deletion process or need assistance, please contact us at [email protected].

THIRD-PARTY LINKS

Our service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Clicking a link on a profile does not share your NerdyTags account information with the website you visit.

CHILDREN'S PRIVACY

Our service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

CHILD SAFETY STANDARDS (CSAE)

NerdyTags has zero tolerance for child sexual abuse and exploitation (CSAE) and child sexual abuse material (CSAM). These standards apply to all users of the NerdyTags platform.

We explicitly prohibit any content, behavior, communication, or account activity that sexualizes, exploits, endangers, or harms minors.
We explicitly prohibit uploading, sharing, requesting, storing, or distributing CSAM in any form.
We explicitly prohibit grooming, trafficking, sextortion, or any attempt to exploit children through our app or related services.
Confirmed violations may result in immediate content removal, account suspension or permanent termination, and reporting to relevant authorities where required by applicable law.

In-app reporting and user feedback: Users can report profiles or content through in-app reporting and feedback tools. Reports related to child safety are prioritized for review and action.

Child safety point of contact: For child safety concerns, reports, or legal inquiries, contact us at [email protected] with the subject line "Child Safety".

NerdyTags is committed to complying with applicable child safety laws and regulations, including laws related to prevention, detection, and reporting of child exploitation.

PAYMENTS AND SUBSCRIPTIONS

The following terms apply to all paid subscriptions on our platform:

Money-back guarantee: We offer a 30-day money-back guarantee for all new subscriptions. If you're not satisfied with our service, you can request a refund within 30 days of your initial purchase.
Terms of Service violations: Refunds will not be issued if your account has been suspended due to violations of our Terms of Service.
Subscription management: You are responsible for managing your own subscription through the account dashboard. We provide self-service tools that allow you to view, modify, or cancel your subscription at any time.
Payment information: We use secure third-party payment processors to handle all transactions. We do not store your complete payment information on our servers.

Business subscriptions are billed per seat and managed from the billing page of the business portal by the organization's owner or members the owner has given billing permission.

For any billing-related questions or assistance with subscription management, please contact our support team at [email protected].

CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

CONTACT US

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].

Last updated: October 5, 2026

Return to Home