Privacy &
your data.

What you share with us

When you create an account, we store your name, email address and the business details you provide. A review also uses your website address, business description, target customers, delivery model and the in-person or remote markets you confirm. We collect public website content, send the confirmed buyer questions to the configured AI search methods, and save returned answers, source citations, report findings and any completion checklist.

Use public business information. Do not enter passwords, API keys, private customer records, medical information or financial account details into the review forms.

How we use it

We use this information to sign you in, prepare your review, connect a payment to the correct report, save your progress and resolve service problems. Administrators can review account and usage records and report information when operating, supporting and evaluating this pilot.

Our application records model usage, estimated costs and job status. The free preview also uses your IP address for an hourly request limit. Hosting and service providers may process request and security logs under their own policies.

Services involved in a review

• Cloudflare hosts the website, API, account records and reports.
• Resend receives your email address and sign-in message to deliver secure login links. If you opt in when making a new purchase, it also receives your email address and a report-ready message containing a link that requires sign-in. That optional report-ready message contains no authentication token or report findings.
• Stripe hosts checkout and processes payments. We send your email and purchase identifiers to connect the payment to your account. Our application stores payment references and status; the NimbusMesh server does not collect card numbers or card security codes.
• AI and search providers receive the business context and public research needed for their part of the review. The current discovery plan uses OpenAI Astra with native web search, Anthropic Claude with native web search and Perplexity with integrated search. OpenAI Astra also receives the retained evidence to prepare the report. Earlier review methods also used Google Gemini, xAI and Brave Search. The saved report identifies its methods and coverage; availability varies.
• Interface icons may load from cdnjs, which receives the browser requests needed to deliver those files. The interface typography uses fonts already available on your device.

Business details you submit can become part of provider prompts. Public website content may itself contain personal information. These services have their own data handling and retention policies; the report retention periods below describe NimbusMesh application storage.

How long information stays

Reports and checklists

The review record expires 90 days after it is created at checkout. The same expiration applies to unpaid purchase records.

Account profile

Stored with a one-year expiration that renews when the profile is saved, including at sign-in and some account or report updates.

Sign-in access

Email links and the business details carried with them expire after 15 minutes. Server-side sign-in tokens expire after 30 days.

Operational usage records

Kept for up to two years after the record is last written. These include your email, business website, usage and payment-method information. Deleting a report does not automatically delete this record.

Preview cache and request limit

Expire after one hour.

After a report is deleted or expires, its email, report identifier and deletion or expiry status remain to prevent the same purchase from being fulfilled again. These minimal records do not currently expire automatically; contact us about removal. Payment-provider and hosting records follow those providers' retention settings.

Storage in your browser

The app stores a sign-in token and basic account display information in browser storage so you can stay signed in. It also remembers the website or report you are opening during your current session. Business details you are editing are kept in tab session storage and are used for up to 15 minutes so you can review them after signing in. Logging out removes the stored sign-in details from that browser. Clearing site data removes locally saved information, but does not delete server-side reports or account records.

Your options

You can update your profile in the dashboard, print or save a report as a PDF, and delete eligible reports from your saved reviews. Pending purchases and running reports cannot be deleted while work or payment confirmation is in progress.

For data questions, account-removal requests or help with a report, email jh@nimbusmesh.com from your account email address. Account removal is handled manually; there is no automatic account-deletion button in this pilot.