Privacy Policy

1. Introduction

Welcome to Nollie Flip ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content repurposing platform.

By using Nollie Flip, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Content Data: Text, URLs, and other content you submit for conversion and repurposing
• Brand Voice Data: Information you provide to create brand voice profiles
• Payment Information: Payment details processed securely through Stripe (we do not store full credit card information)
• Communication Data: Messages, feedback, and support inquiries you send to us

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, conversion history, and interaction patterns
• Device Information: Browser type, operating system, IP address, and device identifiers
• Analytics Data: Performance metrics, error logs, and service usage statistics via Vercel Analytics
• Cookies: Session cookies and authentication tokens to maintain your login state

2.3 OAuth and Third-Party Login

When you sign in using Google OAuth, we receive basic profile information (name, email, profile picture) as permitted by your Google account settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To process your content, generate AI-powered outputs, and provide core platform functionality
• Account Management: To create and manage your account, authenticate access, and maintain your subscription
• Payment Processing: To process transactions, manage subscriptions, and handle billing through Stripe
• Service Improvement: To analyze usage patterns, improve AI models, and enhance user experience
• Communication: To send service updates, respond to inquiries, and provide customer support
• Security: To monitor for fraudulent activity, enforce terms of service, and protect user accounts
• Legal Compliance: To comply with legal obligations and respond to lawful requests
• Marketing: To send promotional content about new features (you can opt out anytime)

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third-party services that help us operate our platform:
  • Supabase (database and authentication)
  • Google Gemini AI (content processing)
  • Stripe (payment processing)
  • Vercel (hosting and analytics)
  • Jina Reader API (URL content extraction)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, accounting, or security purposes.

6. Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data transmission (HTTPS/TLS)
• Secure authentication with hashed passwords (bcrypt)
• Row-level security policies in our database
• Regular security audits and vulnerability assessments
• Secure payment processing through PCI-compliant Stripe
• Limited employee access to personal data on a need-to-know basis

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (right to be forgotten)
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
• Object: Object to certain types of data processing

To exercise these rights, please contact us at privacy@nollie.net. We will respond within 30 days.

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your preferences
• Analyze site usage and performance
• Prevent fraud and enhance security

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our platform.

9. Children's Privacy

Nollie Flip is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately. If you believe we have inadvertently collected such information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Nollie Flip, you consent to the transfer of your information to the United States and other countries where we operate. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your CCPA rights

13. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: performance of contract, legitimate interests, and consent.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of Nollie Flip after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Data Processing Agreement

For enterprise customers who require a Data Processing Agreement (DPA) or Business Associate Agreement (BAA), please contact us at legal@nollie.net.