Privacy Policy

NERD ("NERD," "we," "us," or "our") is an AI advisory tool operated by an independent sole proprietor based in North Carolina, United States. We operate nerdpilled.com and chat.nerdpilled.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. By using the Service, you agree to this Privacy Policy.

Account information. We sign you in with a passwordless email link (a "magic link"), so we collect your email address and basic account details. We do not create or store a password for you.

Profile and business data ("My Brain"). Information you add about yourself and your business, such as roles, skills, company details, and other data points you provide during onboarding or in My Brain, which we store to personalize your experience.

Information from sources you connect. When you provide a LinkedIn profile or company URL, a website, or other source, we use third-party providers to retrieve publicly available information about you, your company, and its technology, and store it as part of your brain. This material can include information about other people (for example, colleagues or other individuals named on those pages). See "Information about other people" below.

Chat content and memory. We store your messages, advisor and playbook sessions, and a persistent memory derived from your conversations and brain so that NERD can continue where you left off and give more relevant responses.

Payment information. If you subscribe, payments are processed by our payment provider, Lemon Squeezy, which acts as the merchant of record. We receive subscription status and limited billing metadata (such as plan, renewal date, and the brand or last digits of your card). We do not receive or store full payment card numbers.

Technical and usage data. We collect standard logs such as IP address, browser and device type, and error and diagnostic data to operate, secure, and debug the Service. On our production site we use Sentry for error monitoring.

NERD is built to research people and companies, so the information you submit (or that we retrieve from sources you connect) may include personal data about individuals other than you. You are responsible for ensuring you have the right to provide that information and to have us process it on your behalf, and for using NERD's outputs about other people lawfully and respectfully. If you are an individual whose information appears in NERD and you have a question or request, contact us using the details below and we will route it to the relevant account where appropriate.

We use your information to:

• Provide, operate, maintain, and secure the Service
• Authenticate you and manage your account
• Personalize advisor conversations, playbooks, and your brain
• Generate AI responses (see "AI processing")
• Process your subscription and send service and account messages
• Monitor for and prevent fraud, abuse, security incidents, and technical problems
• Analyze usage to fix issues and improve and develop features
• Comply with legal obligations and enforce our Terms

Where the law requires a legal basis (for example in the EEA and UK), we rely on: performance of our contract with you; our legitimate interests in operating, securing, and improving the Service; your consent where we request it; and compliance with legal obligations.

To generate responses, we send relevant context, which can include your prompts, your brain data, chat history, and connected source material, to third-party AI providers. We route requests through OpenRouter to underlying model providers, and use a memory provider (Supermemory) to maintain context across sessions. We aim to send only what is needed for a request. We do not sell your personal information and we do not use your private content to train our own models. Third-party AI providers process your content under their own terms, which we do not control, so do not submit anything you would not want processed by AI systems.

We use only the storage needed to run the Service. This includes your sign-in session token (set by our authentication provider) and a few preference flags stored in your browser (for example, to remember that you have seen the intro). We do not use advertising cookies or third-party analytics or tracking pixels. Our production site uses Sentry to capture errors.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information with:

• Service providers (sub-processors) that help us run NERD, under contracts that limit their use of your data, including: hosting and infrastructure (Amazon Web Services); database, authentication, and storage (Supabase); AI inference (OpenRouter and the underlying model providers) and memory (Supermemory); payments (Lemon Squeezy, our merchant of record); data enrichment and scraping (providers that retrieve LinkedIn, website, and technology information); voice synthesis (ElevenLabs); error monitoring (Sentry); and optional integrations you choose to connect (such as Google Calendar via Composio).
• Legal and safety recipients, when we believe disclosure is reasonably necessary to comply with law or legal process, enforce our agreements, or protect the rights, safety, and security of our users, the public, or NERD.
• A successor, in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.

We are based in the United States and process information there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States and other countries where our providers operate, which may have different data protection laws than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

We keep your information for as long as your account is active or as needed to provide the Service, and afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete data or close your account, we delete or de-identify it within a reasonable period, although copies may remain in backups for a limited time.

You can access, update, or delete much of your brain and account data directly in the app, and you can stop using the Service at any time. Depending on where you live, you may have additional rights, including the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To make a request, email us using the details below. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

EEA and UK (GDPR). You have the rights described above and the right to lodge a complaint with your local data protection authority. Our legal bases are described under "How we use information."

California (CCPA/CPRA). We do not sell or share your personal information. You may request access to, deletion of, or correction of your personal information, and you may authorize an agent to act for you.

We use reasonable administrative, technical, and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

NERD is a business tool and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date below. Material changes may be communicated through the Service.

Questions or requests about this Privacy Policy or your data? Email us at nerd@nerdpilled.com.