Privacy Policy

Introduction

This Privacy Notice for Nesty ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services").

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at contact@nestyhq.com.

1. What Information Do We Collect?

2. How Do We Process Your Information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

3. Legal Bases for Processing

We only process your personal information when we have a valid legal reason to do so under applicable law.

4. Information Sharing

We may share your information in specific situations and with specific third parties, including:

• Service providers under written contract
• In connection with business transfers or acquisitions
• When required by law or legal process
• To protect our rights or prevent harm

We have not sold or shared any personal information to third parties for a business purpose in the preceding twelve months, and we will not sell or share personal information in the future.

5. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. These help us maintain the security of our Services, prevent crashes, save your preferences, and assist with basic site functions.

For detailed information about our use of cookies, please see our Cookie Notice.

6. Third-Party Integrations

Our Services connect with third-party services via OAuth to provide you with unified access to your data. When you connect an integration, we receive certain information from your account with these providers:

• Google: Used for authentication and accessing your Google Calendar events (read-only).
• GitHub: Used for accessing your pull requests, issues, and notifications (read-only).
• Notion: Used for accessing your tasks and database items (read-only).

We only request the minimum permissions necessary to provide our Services. We recommend that you review each provider's privacy notice to understand how they collect, use, and share your personal information.

7. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

8. Data Security

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

9. Children's Privacy

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 years of age or that you are the parent or guardian of such a minor.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to request access to your personal information
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to obtain a copy of your data
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise these rights, you can contact us by submitting a request.

11. Do-Not-Track Features

Most web browsers include a Do-Not-Track ("DNT") feature. At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.

12. US State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific privacy rights. Please contact us for more information about these rights.

13. Policy Updates

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

14. Contact Us

If you have questions or comments about this notice, you may:

15. Review, Update, or Delete Your Data

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information.

To request to review, update, or delete your personal information, please contact us.