This Privacy Policy describes how Nab Ventures LLC ("nab.it", "we", "us") collects, uses, and discloses information when you use nab.it and related services (the "Service"). By using the Service, you agree to this policy.
What data we collect
- Account data: email address and display name when you register or sign in.
- Product content: nabs, notes, attachments, tags, reminders, and other information you create or store in the app.
- Usage data: product analytics and usage events (for example feature usage and performance) to operate and improve the Service. Where we use analytics tools, we aim to minimize personal data and use aggregated or pseudonymous information where possible.
How we store and protect data
We host application data on Google Cloud Platform (Firebase / Firestore). Data is protected with encryption in transit (TLS) and encryption at rest as provided by our infrastructure. Previous versions of the Service used Supabase; all data has been migrated. Access is limited to authorized personnel and systems for operations, security, and support.
Third-party services
- Stripe — payment processing and subscription billing when you purchase a paid plan. Stripe receives billing-related information as needed to process payments.
- Anthropic — optional AI-powered features (for example Reflect) when you choose to use them; your prompts and related content may be sent to Anthropic to generate responses.
- Google Cloud / Vertex AI — certain AI features may use Google's Vertex AI (Gemini) for processing; the same data handling principles apply as with Anthropic.
- Google — sign-in with Google, Firebase Authentication, Firebase Hosting, Firestore database, and related services. Google's privacy policy also applies to information processed by Google.
- Resend — transactional email delivery (for example magic link sign-in, notifications).
Google user data
When you sign in with Google, nab.it accesses your name, email address, and profile picture for account creation, authentication, and display in the app. nab.it does not access, store, or share other Google user data (such as contacts, calendar, Drive files, or email) unless you explicitly connect an integration that requires those scopes. nab.it does not transfer Google user data to third parties or use it for AI model training.
Cookies and similar technologies
We use cookies and similar technologies for essential purposes, including: session and authentication security; preferences (for example theme and language); and, where enabled, analytics to understand how the Service is used. We do not use third-party advertising cookies to sell your personal data.
Your rights
Depending on your location, you may have the right to access your personal data, request deletion, and export data where the product provides export tools. You may contact us using the email below to exercise these rights. We will respond within a reasonable period as required by applicable law.
Data retention
While your account is active, we retain the product data you store in nab.it so the Service can function. When you delete your account, we delete or irreversibly anonymize personal data within 30 days, except where a longer retention period is required by law or for legitimate security or fraud-prevention purposes. Security-related audit logs may be kept for up to 90 days where needed for compliance and abuse prevention, then removed. Database backups follow your hosting provider's retention policy (see Google Cloud / Firebase documentation).
On public marketing pages, Google Analytics loads only if you choose "Accept all" in the cookie banner; essential cookies still support basic site operation.
GDPR (EEA/UK)
If the GDPR applies, you may have rights including access, rectification, erasure ("right to be forgotten"), restriction of processing, objection, and data portability. You may lodge a complaint with your local supervisory authority. Our lawful bases may include contract, legitimate interests (for example security and product improvement), and consent where required.
Children
The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.
Changes
We may update this Privacy Policy from time to time. We will post the updated policy on this page and, where appropriate, notify you by email or in-product notice.
Contact
Nab Ventures LLC — Privacy inquiries: info@nab.it.com