Privacy Policy

We never receive or store your full card number. Stripe handles payment details.

We process data to perform our contract with you (running your account), for our legitimate interests (security, fraud prevention, improving the Service), to meet legal obligations (tax and accounting records), and with your consent where we ask for it.

We share data only with providers that help us run the Service, under contracts that limit their use to serving us:

We may also disclose data if required by law, to protect our rights or users’ safety, or to a buyer or successor in a merger, acquisition, or asset sale (we’ll notify you, and this policy will continue to apply).

We do not sell or share personal data for cross-context behavioral advertising, and we have not done so in the past 12 months.

Third-party agents. Agents you connect (Claude Code, Cursor, and others) receive your project data from us at your direction. What they do with it is governed by their own privacy policies, not ours.

We use only essential cookies, to keep you signed in and to secure the sign-in flow. Our app may store data on your device (a service worker cache of static files) so it loads faster and works as a mobile app. We don’t use advertising or cross-site tracking cookies. If that changes, we’ll update this policy first and ask for consent where required.

We keep your account data while your account is open. If you ask us to delete your account, we delete your personal data and projects within 30 days, except that backups roll off within a further 35 days and we keep billing records as long as tax law requires (generally up to 7 years). We may delete free accounts inactive for 24 months after emailing a warning at least 30 days in advance.

Depending on where you live (including the EEA, UK, and US states such as California), you may have the right to access, correct, export, or delete your personal data, object to or restrict some processing, and withdraw consent. To use these rights, email support@nodeon.app from your account email. We’ll verify your request and respond within 30 days (45 days where state law allows). We won’t treat you differently for using them.

In the EEA or UK, you can also complain to your local data protection authority.

We’re based in the United States and our providers process data in the US and other countries. Where required, we rely on safeguards such as the European Commission’s Standard Contractual Clauses offered by our providers.

We use reasonable technical and organizational measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, and we can’t guarantee absolute security. If a breach affects your personal data, we’ll notify you and regulators as the law requires.

The Service is for adults and isn’t directed to children under 13 (16 in the EEA/UK). We don’t knowingly collect their data. If we learn we have, we delete it. Contact us if you think a child has given us data.

We’ll post updates here with a new effective date. For material changes, we’ll email active users before they take effect.

Nodeon is the controller of the personal data described here. Nodeon · support@nodeon.app