Privacy Policy
Last updated: May 19, 2026
1. Who We Are
The Service is operated by NominationPro("NominationPro", "we", "us"). We act as the data controller for personal data processed through the Service. This policy explains what information we collect, the legal basis for processing, how we use it, who we share it with, and your rights.
2. Information We Collect
Account information: Name, email, organization, and password (hashed).
Nomination data: Nominee details, supporting attachments, reviewer scores, and notes you or your users submit.
Usage data: Log data such as IP address, browser type, pages viewed, and timestamps.
Cookies: Essential cookies for authentication and session management.
3. How We Use Information & Legal Basis
- To provide, maintain, and improve the Service — performance of contract
- To process payments and manage subscriptions (via Paddle) — performance of contract
- To send transactional emails (account, security, billing) — performance of contract
- To respond to support requests — legitimate interests
- To detect and prevent fraud or abuse — legitimate interests / legal obligation
- To comply with tax, accounting, and other legal obligations — legal obligation
4. Data Sharing
We do not sell your data. We share information only with the following categories of recipients, under confidentiality obligations:
- Paddle.com Market Ltd. — our Merchant of Record and payment processor. Paddle handles checkout, billing, subscription management, tax compliance, invoicing, and refund processing on our behalf. See Paddle's Privacy Policy.
- Hosting and infrastructure providers (Supabase, cloud hosting in the Americas region)
- Email delivery providers (transactional email infrastructure)
- Professional advisers (legal, accounting) where required
- Authorities when required by law
- Successors in the event of a merger or acquisition
5. Data Security
Data is encrypted in transit (TLS) and at rest. Access is governed by role-based permissions and row-level security. While we use industry-standard safeguards, no system is 100% secure.
6. Data Retention
We retain your data while your account is active and for up to 30 days after cancellation to allow data export. Backups may persist for an additional 90 days.
7. Your Rights
Depending on your location (e.g., EU/UK GDPR, California CCPA), you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. Contact us to exercise these rights.
8. International Transfers
Our infrastructure is hosted in the Americas region. By using the Service, you consent to data being transferred to and processed in the United States.
9. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this policy from time to time. We'll notify you of material changes via email or in-app notice.
11. Contact
Privacy questions or requests? Email privacy@nominationpro.com.