Privacy Policy

1. Introduction

Nodify Systems, Inc. (“Nodify,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use the Nodify Account, Nodify Calendar application, our websites, and related services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that your information may be processed as described in this Privacy Policy.

Please read this Privacy Policy and Terms of Use before using Services operated by Nodify Systems, Inc.

If you do not agree with any part of this Privacy Policy or Terms of Use, please do not access or use our Services.

The Services include (i) the Nodify Calendar desktop application for Windows, macOS, and Linux; (ii) Nodify Account, our account and service-management platform; (iii) Nodify Cloud, which provides cloud storage, synchronization, and cloud-based schedule autocompletion for Cloud Vaults; and (iv) our websites and related services.

Nodify Calendar may be used locally without creating a Nodify Account. A Nodify Account is required to use Nodify Cloud, including access to Cloud Vaults, synchronization between authorized devices, and other paid Cloud functionality.

Nodify Calendar uses a vault-based storage model. You can create vaults that remain entirely local on your device or use Cloud Vaults that are stored and synchronized through Nodify Cloud. Events, tasks, reminders, and other items are synchronized according to the vault in which they are created.

This Privacy Policy is incorporated into and forms part of the Terms of Use. The entire agreement and severability provisions of the Terms of Use apply to this Privacy Policy.

2. Information We Collect

The information Nodify receives depends on how you use the Services. If you use Nodify Calendar only with Local Vaults and without a Nodify Account, Nodify does not receive the contents of those Local Vaults. If you create an Account, sign in a device, or use Nodify Cloud, additional information described below is processed.

Account Information

When you create a Nodify Account, we may collect information such as your email address, password hash or other authentication credentials, username or profile information, account sessions, verification and password-reset information, and newsletter preferences.

Account Information is used to authenticate you, manage your Account, provide Nodify Cloud functionality, communicate with you, and protect the security of the Services.

When you sign in to a Nodify Account, we may process session and security information including IP address, browser or user-agent details, session identifiers, timestamps, and related authentication information. Security emails, such as password-change notifications, may include a shortened IP address and a browser summary.

When you create or reset a password, Nodify may check whether the password appears in a known data-breach database by sending a short prefix derived from a cryptographic hash of the password to a third-party breach-checking service. Nodify does not send the password itself.

Local Vault Content

Local Vaults are stored on your device. Their contents, including calendar events, tasks, lists, schedules, reminders, settings, notes, and other information stored within the vault, are not transmitted to Nodify as part of normal Local Vault operation.

Schedule autocompletion and other processing for Local Vaults are performed locally on the user's device. Nodify does not receive Local Vault content merely because the Nodify Calendar application is installed or used.

Creating a Nodify Account or signing a device into an Account does not by itself convert a Local Vault into a Cloud Vault or upload its contents to Nodify Cloud.

Cloud Vault Content

When you choose to use a vault as a Cloud Vault, the contents of that vault are transmitted over the Internet and stored on infrastructure operated by third-party service providers on behalf of Nodify.

Cloud Vault content may include calendar events, tasks, lists, schedules, reminders, settings, and other content stored within the vault, together with synchronization information and records of changes required to keep the vault synchronized across devices.

Cloud Vault content is processed by Nodify's systems to provide cloud storage, synchronization between authorized devices, cloud-based schedule autocompletion, conflict resolution, service reliability, and related Cloud functionality.

Cloud Vaults are not end-to-end encrypted. Cloud Vault content must be readable by Nodify's systems in order to provide functionality such as synchronization and cloud-based schedule autocompletion. Data is protected using appropriate safeguards during transmission and storage, but Nodify cannot represent that Cloud Vault content is technically inaccessible to Nodify.

Nodify may access Cloud Vault content when reasonably necessary to provide customer support, troubleshoot technical problems, investigate security incidents or abuse, maintain or restore the Services, or comply with applicable legal obligations.

Device and Activation Information

When you sign a device into your Nodify Account, we may collect information relating to that device, including the device name, operating system information, device or activation identifiers, a device public key, authentication and activation timestamps, last-seen information, IP address, approximate location derived from the IP address, and related technical information.

Private device keys used by the Nodify Calendar application are intended to remain on the user's device and are not transmitted to Nodify.

We use Device and Activation Information to authenticate devices, enforce applicable device limits, synchronize Cloud Vaults, prevent unauthorized access or fraud, maintain account security, and operate the Services.

Update Checks. When the application checks for Updates, it may transmit information such as a persistent per-install identifier, the installed application version, operating system and architecture, and update channel. Nodify logs update checks for operational and diagnostic purposes. Update checks do not require Nodify to receive Local Vault content.

Commercial, Subscription, and License Information

We may maintain records relating to your eligibility to use paid Cloud functionality, including whether you have an active subscription or lifetime license, subscription status and history, trial eligibility or prior trial use, device entitlements, transaction references, relevant dates, fraud or payment-reversal status, and identifiers used to associate our records with our payment provider.

Paid subscriptions and lifetime licenses may be stored separately from your Account under a pseudonymous identifier. This allows Nodify to preserve valid paid rights even if the Account originally associated with them is later deleted.

Payment Information

Payments are handled through a third-party payment provider, which may act as merchant of record or otherwise process purchases, subscriptions, taxes, receipts, refunds, disputes, and related payment activity.

Nodify does not receive or store full payment card numbers or other complete payment credentials.

Nodify may receive and retain limited payment and transaction metadata necessary to recognize a purchase, determine entitlement status, administer subscriptions or licenses, handle support requests, prevent fraud, and reconcile payment events. This may include transaction or invoice identifiers, invoice amounts, partial payment-method details, purchase status, relevant dates, billing contact information, and related order metadata. Nodify may also provide your email address to the payment provider to create or associate a customer record.

The payment provider may process additional personal information under its own privacy policy and legal obligations. For more information about the third-party providers used by Nodify, please refer to our List of Subprocessors.

Nodify may receive and temporarily retain payment-event data from the payment provider. This data may include billing, contact, transaction, and related payment information needed to process and reconcile payment events, investigate failures, prevent fraud, handle disputes, and debug payment-related issues.

Contact and Communications Information

When you contact us through our contact form or otherwise communicate with Nodify, we may collect your name, email address, optional company name, message content, and other information you choose to provide.

We use this information to respond to your inquiry, provide support, and maintain appropriate records of our correspondence.

Contact-form submissions may be transmitted through a third-party communications provider to a Nodify business email mailbox. Messages may be retained as reasonably necessary to respond to inquiries, maintain appropriate business records, comply with legal obligations, and resolve disputes. Contact-form information is not used for marketing unless you separately consent or otherwise request marketing communications.

Waitlists and Product Interest Forms

When you join a product waitlist or submit a product-interest form, including the Intra waitlist, we may collect your email address, the page or path from which the form was submitted, campaign parameters such as UTM tags, referrer information, the applicable consent or disclosure version, and related submission metadata.

We may use this information to manage the waitlist, understand how users reached the form, send requested welcome or product-interest communications, and maintain delivery records. Our communications providers may also return delivery, bounce, and complaint information relating to these messages.

Product Analytics, Diagnostics, and Crash Reporting

Product usage analytics or telemetry may be optional where such controls are offered. Error and crash reporting, however, may be enabled by default in the desktop application and may also operate in the web portal without a separate consent step. Where controls are available, users can disable desktop error reporting through the applicable settings.

Where enabled, Nodify may collect information regarding how the Services and their features are used in order to understand product performance, improve functionality and user experience, diagnose errors, and develop the Services.

If you use the “Send error logs” function on the recovery screen, diagnostic logs may be transmitted to Nodify even if the application's general analytics or error-reporting preference has not yet been configured.

Text you submit through in-app feedback functionality may be sent to a third-party analytics or feedback provider independently of your optional product analytics setting.

Optional analytics are not intended to include the contents of Local Vaults or Cloud Vault user-generated content unless such collection is expressly disclosed and appropriately authorized.

Server-side operational logs, security events, and diagnostic information necessary to operate Nodify Cloud may be collected separately from optional client-side analytics.

Website Information

When you use our websites, we may process browser, device, network, and security information necessary to operate and protect the sites. We currently use only essential cookies or similar technologies, such as technologies used to remember interface preferences and to provide bot protection. We do not currently use advertising cookies or cookies for cross-site behavioral tracking. Sign-up and certain forms may use a third-party bot-protection service that processes technical and network information to help detect automated abuse.

3. How We Use Information

We may use personal information to provide, maintain, secure, and improve the Services; administer Accounts; authenticate users and devices; provide customer support; respond to inquiries; process and recognize purchases; prevent fraud and abuse; comply with legal obligations; and send necessary administrative communications.

For users of Nodify Cloud, we also process information to store and synchronize Cloud Vaults, provide cloud-based schedule autocompletion, maintain Cloud Vault state across authorized devices, manage Cloud entitlements, restore service following technical failures where possible, and operate related Cloud functionality.

Cloud Vault content is processed only as reasonably necessary to provide, secure, maintain, troubleshoot, support, and comply with legal obligations relating to Nodify Cloud.

When a Nodify Account is created, the product-newsletter preference may be enabled by default. The newsletter may contain information about product updates, new features, and changes to the Service and is not used to advertise third-party products or services. You may disable the newsletter preference at any time through Account settings.

Legal Bases for Processing (EEA and UK Users)

Where the General Data Protection Regulation (“GDPR”), the UK GDPR, or similar laws apply, Nodify processes personal information on one or more of the following legal bases:

• Performance of a contract, including operating Nodify Accounts, providing Nodify Cloud, storing and synchronizing Cloud Vaults, providing cloud-based schedule autocompletion, administering subscriptions and lifetime licenses, authenticating devices, and providing customer support;
• Legitimate interests, including maintaining security, preventing fraud, improving and protecting the Services, responding to inquiries, maintaining operational reliability, and protecting the rights and interests of Nodify and its users;
• Consent, where users voluntarily enable optional telemetry, product analytics, crash reporting, marketing communications where consent is required, or other optional functionality that relies on consent;
• Compliance with legal obligations, including accounting, taxation, regulatory compliance, lawful government requests, and legal proceedings.

4. Sharing of Information

We may disclose personal information to service providers that assist us in operating the Services, to legal or regulatory authorities where required by law, to parties involved in an authorized corporate transaction, and in other circumstances where you provide consent or disclosure is otherwise permitted by law.

Service providers may include cloud infrastructure and hosting providers, database providers, payment providers, communications and business-email providers, analytics and feedback providers, bot-protection and security providers, password-breach checking providers, diagnostic and error-monitoring providers, and other vendors necessary to operate the Services.

Cloud Vault content may be stored and processed using third-party infrastructure providers acting on behalf of Nodify.

Nodify does not sell personal information.

An up-to-date list of third-party subprocessors used in connection with the Services is maintained separately in our List of Subprocessors.

5. International Data Transfers

Nodify is headquartered in the United States. Personal information may be processed, stored, or transferred in the United States and other countries where Nodify or its service providers operate.

Where required by applicable data protection law, Nodify will use appropriate safeguards for international transfers of personal information.

Information relating to Cloud Vaults may therefore be processed in locations where our applicable cloud infrastructure and other service providers operate, as identified or described in our List of Subprocessors.

6. Your Choices and Controls

Nodify Calendar is designed to give you control over whether calendar data remains local or is used with Nodify Cloud.

You may:

• use Nodify Calendar with Local Vaults without creating a Nodify Account;
• choose which vaults remain entirely local and which vaults are used as Cloud Vaults;
• convert or detach a Cloud Vault so that you can continue using a local copy without ongoing Cloud synchronization;
• delete a Cloud Vault from Nodify Cloud using available deletion functionality;
• update Account information through available Account settings;
• delete your Nodify Account;
• manage authorized devices;
• manage optional telemetry and diagnostic settings where available;
• choose whether to submit optional crash reports; and
• opt out of the Nodify product newsletter through the unsubscribe mechanism provided in marketing emails.

Detaching a Cloud Vault and deleting a Cloud Vault are different actions. Detaching stops the relevant local copy from participating in Cloud synchronization but does not by itself constitute a request to delete the server-side Cloud Vault. Deletion must be requested separately through the applicable deletion functionality or through a valid privacy request.

Deleting your Nodify Account does not automatically delete Local Vaults stored on your devices, does not automatically surrender a valid lifetime entitlement, and does not by itself constitute a request to delete Cloud Vault content. See Section 8 for additional information about retention following Account deletion.

7. Your Privacy Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including rights to access, correct, update, delete, restrict, or object to certain processing and, where applicable, receive a portable copy of personal information.

Users in the EEA, UK, and other jurisdictions providing similar rights may also have the right to withdraw consent and to lodge a complaint with an appropriate supervisory authority.

You may exercise applicable privacy rights through available Account or product controls or by contacting Nodify.

We may need to request additional information to verify your identity before completing a request.

Where a deletion request relates specifically to Cloud Vault content, Nodify may require sufficient information to identify the relevant Account, rights-holder record, device, or Cloud Vault and to verify that the requester is authorized to request deletion.

Certain rights may be limited where applicable law permits or requires Nodify to retain information for legal compliance, security, fraud prevention, accounting, contractual obligations, dispute resolution, or preservation of valid commercial rights.

8. Data Retention

Nodify retains personal information for as long as reasonably necessary to provide the Services, maintain Accounts, administer subscriptions and licenses, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and protect the integrity of the Services.

Different categories of information may have different retention periods because they serve different purposes.

Account, Session, and Device Records

Session IP and browser details may be retained for approximately 30 days, while hashed IP information may be retained separately in security or audit records.

Raw device IP addresses may be shortened after 30 days without device activity and cleared after 90 days. Approximate location information derived from IP addresses may be retained for longer as part of device or security records.

Payment Event Records

Raw payment-event payloads are generally cleared after 180 days. Failed or unresolved payment-event records are not currently subject to the same routine deletion schedule and may be retained for longer where reasonably necessary for investigation, reconciliation, fraud prevention, dispute handling, or debugging.

Local Vaults

Nodify does not control the retention of Local Vault content stored only on your device. Local Vaults remain on your device until you modify or delete them using the application or your device's storage controls.

Active Cloud Vaults

Cloud Vault content is retained while it is required to provide Nodify Cloud and while the applicable Cloud entitlement remains active, unless you choose to delete the Cloud Vault earlier or retention is otherwise required or permitted by law.

Retention Following the End of Cloud Entitlement

When a Cloud entitlement ends or lapses, Nodify may retain the server-side copy of affected Cloud Vaults for up to 90 days. This period is intended to allow restoration of Cloud functionality if the user renews or restores an eligible entitlement and to provide a reasonable opportunity to move data back to local-only use.

When a Cloud entitlement ends or lapses, the affected Cloud Vault remains available on the user's device, but Cloud synchronization and other paid Cloud functionality are suspended. The user may continue using the local copy, detach the vault from Nodify Cloud, or restore Cloud functionality by renewing or restoring an eligible entitlement before the cloud copy is deleted.

During this period, locally retained copies of Cloud Vaults remain available on the user's devices.

After the 90-day retention period expires, Nodify may permanently delete the server-side copy of the affected Cloud Vault and associated synchronization data, subject to limited retention in backups and any retention required by applicable law.

Deleting a server-side Cloud Vault does not delete copies that remain on a user's own devices.

Retention after Account Deletion

When you delete your Nodify Account, Nodify will delete or anonymize the Account identity information that is no longer required, including sign-in credentials, active sessions, authentication and reset information, and Account profile information, subject to information that must be retained under applicable law or for legitimate purposes described below.

Deleting an Account removes the association between the Account identity and the applicable pseudonymous rights-holder record.

Commercial rights, including an existing lifetime entitlement, may continue to be retained under a pseudonymous rights-holder identifier after Account deletion. This allows Nodify to preserve evidence of valid paid rights and, where appropriate, support restoration of those rights to a replacement Account.

Cloud Vaults associated with the relevant rights-holder record are not automatically deleted solely because the Account is deleted. This allows existing service data and paid rights to remain capable of recovery where technically available. Nodify does not guarantee that particular Cloud Vault data will always remain recoverable following Account deletion.

If you want Cloud Vault content to be permanently deleted, you may use the applicable Cloud Vault deletion functionality before deleting your Account or submit a deletion request to Nodify.

Deleting an Account does not delete Local Vaults stored on your devices.

Commercial and Legal Records

Nodify may retain pseudonymous entitlement records, transaction references, security information, audit records, fraud-prevention records, and other limited information where reasonably necessary to document licenses or subscriptions, comply with legal and accounting obligations, resolve disputes, prevent fraud, enforce agreements, or preserve valid commercial rights.

Backups

Nodify maintains backup and recovery mechanisms intended to improve the reliability and resilience of Nodify Cloud. Information deleted from primary systems may remain for a limited period in encrypted or otherwise protected backups and replicated infrastructure until those copies are overwritten or expire according to applicable backup-retention cycles.

Deletion from backup systems may therefore occur later than deletion from active production systems. Backup copies are not used for ordinary service operation except where restoration is necessary.

9. Security

Nodify implements reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Security measures may include access controls, encryption, authentication mechanisms, secure development practices, monitoring, infrastructure protections, backup and recovery mechanisms, and other safeguards appropriate to the nature of the information processed.

No electronic transmission, storage system, cloud infrastructure, or backup system can be guaranteed to be completely secure or error-free.

Although Nodify uses backup and recovery measures, we cannot guarantee that Cloud Vault content will always be recoverable following data corruption, infrastructure failure, software defects, security incidents, or other unexpected technical events. Users should therefore not treat Nodify Cloud as the sole backup location for irreplaceable information.

10. Third-Party Services and Subprocessors

The Services may rely upon third-party providers, including hosting and cloud infrastructure providers, database providers, payment providers, analytics providers, communication providers, security providers, and diagnostic or error-monitoring services.

These providers may process personal information on Nodify's behalf where necessary to provide their respective services. In some cases, such as payment processing, a third party may process information as an independent controller or under its own legal obligations.

Nodify maintains a separate List of Subprocessors identifying relevant third-party providers and the purposes for which they are used. Because providers and infrastructure may change over time, specific provider names are maintained in that list rather than in this Privacy Policy.

Nodify does not control the independent privacy practices of third-party services that process information under their own terms and privacy policies.

Server-side operational and diagnostic information generated by Nodify infrastructure may be processed where reasonably necessary to maintain Cloud reliability and security and is separate from optional client-side analytics or crash reporting.

11. Children's Privacy

The Services are not directed to children under the age of 16, and Nodify does not knowingly collect personal information from children under 16.

If Nodify becomes aware that personal information has been collected from a child under 16 without appropriate authorization where required, Nodify will take reasonable steps to delete it in accordance with applicable law.

Parents or legal guardians who believe that a child has provided personal information to Nodify may contact us using the information below.

12. Updates to This Policy

We may update this Privacy Policy occasionally. Any changes that lead to increased use or sharing of your personally identifiable information will be communicated to you through email. We may also make minor updates to this Privacy Policy that do not significantly impact how we handle your personal information, for which we won't send an email notification. We suggest reviewing this page from time to time to stay informed about any updates. If you find any minor updates unacceptable, please contact us immediately and stop using the Nodify Service until the matter is addressed. Continuing to use the Nodify Service after minor updates are posted means you accept those changes.

13. Contact Us

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or Nodify's privacy practices, please contact us:

Email: contact@nodify.io