Privacy Policy

Last updated: 5 April 2026

1. Who We Are

This Privacy Policy applies to Nudge, operated by TLK Intelligence Pty Ltd (ABN 16 525 180 164), New South Wales, Australia ("we", "us", "our").

2. Data We Collect

We collect the following personal information:

Account data: name, email address, date of birth (encrypted at rest)
Authentication data: hashed passwords, Google OAuth identifiers
Profile data: bio, avatar, links, and other content you add to your page
Usage data: page views, link clicks, chat interactions, IP addresses
Payment data: processed by Stripe — we do not store card numbers

3. How We Use Your Data

To create and display your personal page
To provide the Alex AI chat and lead capture features
To process payments and manage subscriptions
To send transactional emails (welcome, lead alerts, weekly summaries)
To detect and prevent abuse, fraud, and policy violations

4. Data Storage and Infrastructure

Your data is stored on Cloudflare infrastructure with servers distributed globally, including the United States. Cloudflare D1 (database) and R2 (file storage) are used to store your account and content data. All data is encrypted in transit via HTTPS.

5. Third-Party Services

We share data with the following third-party providers as necessary to operate the Service:

Stripe — payment processing (name, email, payment details)
Resend — transactional email delivery (name, email)
Google — OAuth sign-in (email, name, Google ID)
Cloudflare — infrastructure, CDN, security (IP addresses, request data)
Anthropic — AI chat via Claude API (chat messages, no personal identifiers)

6. Cookies

We use minimal cookies:

Authentication token: stored in localStorage (not a cookie), used to maintain your session
Age gate cookie: session cookie (nudge_age_confirmed) set when you confirm you are 18+ before viewing adult content pages

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Australian Privacy Act 1988

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You have the right to access, correct, and request deletion of your personal information. We will respond to access requests within 30 days.

8. GDPR (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to restrict processing, and the right to erasure. Our lawful basis for processing is consent (account creation) and legitimate interest (service operation and abuse prevention).

9. Your Rights

You may at any time:

Access your personal data via the dashboard
Correct your personal data by editing your profile
Request deletion of your account and all associated data
Withdraw consent by closing your account

10. Data Retention

Your data is retained for as long as your account is active. Upon account deletion, all personal data (profile, links, leads, chat history, images) will be permanently purged within 30 days. We may retain anonymised, aggregated data for analytics purposes.

11. Data Breach Notification

In the event of a data breach that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) within 72 hours as required by the Notifiable Data Breaches scheme.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 14 days before taking effect.

13. Contact

For privacy requests or questions, contact us at [email protected].