Privacy &
your data.

What you share with us

When you create an account, we store your name, email address and the business details you provide. A new assessment uses the website address you enter. We collect public website content and derive the business description, published offers, audiences, market statements and buyer questions from captured pages. Those questions are sent to the configured AI search methods. We save returned answers, source citations, report findings, proposed corrections, any completion checklist and the review decisions and notes you choose to save. Saving a review decision does not rerun AI research. Earlier manual review flows may also retain the business details and questions supplied for those runs.

Use public business information. Do not enter passwords, API keys, private customer records, medical information or financial account details into the review forms.

How we use it

We use this information to sign you in, prepare your review, connect a payment to the correct report, save your progress and resolve service problems. Administrators can review account and usage records and report information when operating, supporting and evaluating this pilot.

Our application records model usage, estimated costs and job status. The free preview also uses your IP address for an hourly request limit. Hosting and service providers may process request and security logs under their own policies.

Services involved in a review

• Cloudflare hosts the website, API, account records and reports.
• Resend receives your email address and sign-in message to deliver secure login links. If you opt in when making a new purchase, it also receives your email address and a report-ready message containing a link that requires sign-in. That optional report-ready message contains no authentication token or report findings.
• Stripe hosts checkout and processes payments. We send your email and purchase identifiers to connect the payment to your account. Our application stores payment references and status; the NimbusMesh server does not collect card numbers or card security codes.
• AI and search providers receive the business context and public research needed for their part of the review. The current discovery plan uses OpenAI Astra with native web search, Anthropic Claude with native web search and Perplexity with integrated search. OpenAI Astra also receives the retained evidence to prepare the report. Earlier review methods also used Google Gemini, xAI and Brave Search. The saved report identifies its methods and coverage; availability varies.
• Interface icons may load from cdnjs, which receives the browser requests needed to deliver those files. The interface typography uses fonts already available on your device.

Business details you submit can become part of provider prompts. Public website content may itself contain personal information. These services have their own data handling and retention policies; the report retention periods below describe NimbusMesh application storage.

How long information stays

Reports, review notes and checklists

The review record expires 90 days after it is created at checkout. The same expiration applies to unpaid purchase records.

Account profile

Stored with a one-year expiration that renews when the profile is saved, including at sign-in and some account or report updates.

Sign-in access

Email links and the business details carried with them expire after 15 minutes. Server-side sign-in tokens expire after 30 days.

Operational usage records

Kept for up to two years after the record is last written. These include your email, business website, usage and payment-method information. Deleting a report does not automatically delete this record.

Preview cache and request limit

Expire after one hour.

After a report is deleted or expires, its email, report identifier and deletion or expiry status remain to prevent the same purchase from being fulfilled again. These minimal records do not currently expire automatically; contact us about removal. Payment-provider and hosting records follow those providers' retention settings.

Storage in your browser

The app stores a sign-in token and basic account display information in browser storage so you can stay signed in. It also remembers the website or report you are opening during your current session. In the earlier manual flow, business details being edited are kept in tab session storage for up to 15 minutes so they can be reviewed after signing in. The current website-only flow does not require that editing step. Logging out removes the stored sign-in details from that browser. Clearing site data removes locally saved information, but does not delete server-side reports or account records.

Your options

You can update your profile in the dashboard, print or save a report as a PDF, and delete eligible reports from your saved reviews. Pending purchases and running reports cannot be deleted while work or payment confirmation is in progress.

For data questions, account-removal requests or help with a report, email jh@nimbusmesh.com from your account email address. Account removal is handled manually; there is no automatic account-deletion button in this pilot.