Privacy
This notice describes how NudgePal (https://nudgepal.app) handles personal information. NudgePal is operated by Ana Isabel Rodriguez Morelos, a sole proprietor based in Makati City, Metro Manila, Philippines.
Who is responsible
The controller is Ana Isabel Rodriguez Morelos, a sole proprietor in Makati City, Metro Manila, Philippines. Privacy questions go to hello@nudgepal.app.
What you give us
- Account details: your email, a password hash if you set a password, and your name if you add one.
- Business profile: business name, type, country, currency, timezone, review link, language, tone, and follow-up schedule.
- Customer records you type or import: name, phone, email, what the job was, status, amount, and dates.
- What you mark: sent, won, lost, reviewed, snoozed, or cold.
Each message is one-to-one. It leaves from your own phone through WhatsApp, SMS, or email. NudgePal does not send those messages and does not receive the replies.
Why
We use this information to run your account, build the daily list, and show weekly stats. A daily reminder email is sent only if you leave that on. Under the Philippine Data Privacy Act of 2012, we process this for the purpose you gave it to us: providing the follow-up list you asked for. Where the GDPR or UK GDPR applies, the basis is the contract to provide your account, and legitimate interests for keeping the service secure and for a reminder you can switch off.
Cookies and sign-in
A single httpOnly cookie named np_session keeps you signed in. Magic-link tokens are stored as a hash and expire after 30 minutes. Unsubscribe links are signed tokens. We do not use advertising cookies.
Payments
Creem is the merchant of record. Creem handles the card payment, the invoice, and tax. We store your plan and the fact of a subscription. We do not store card numbers.
Reminder and sign-in emails are sent only after an email provider is connected. Until then, those emails are not delivered. You can turn daily reminders off from the email, once it is sending, or from settings.
How long
Account and customer data is kept while the account is active. After you delete the account, we delete that data within 90 days. The demo account’s sample customers are replaced when that account is reset.
Processors
We share data with these processors so the service can run. We do not sell personal information.
- Vercel — hosting.
- Prisma Postgres — the database.
- Creem — payment, billing, tax, invoices, and customer service for payments and returns.
- An email provider, once one is added — reminder and sign-in emails. None is connected yet.
Your rights
Philippine law: the Data Privacy Act of 2012 (Republic Act No. 10173). You may ask for access, correction, or deletion of your personal information. The regulator is the National Privacy Commission.
GDPR and UK GDPR: you can ask for access, correction, deletion, restriction, and a copy of your data to take elsewhere. You can object to processing based on legitimate interests, and you can complain to your local supervisory authority or the UK Information Commissioner’s Office.
CCPA: if you are a California resident, you can ask what personal information we hold, ask us to delete it, and opt out of the sale of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
To use any of these rights, email hello@nudgepal.app. We may need to confirm it is your account.
Your customers
You are responsible for having a lawful reason to store their contact details and to message them one at a time. Rules differ by country. NudgePal does not decide that for you.
Contact
Ana Isabel Rodriguez Morelos, Makati City, Metro Manila, Philippines. Email hello@nudgepal.app, or use the contact page. We aim to reply within 1–2 business days.