Privacy policy

Last updated: July 9, 2026

1. What we collect

We collect the following categories of information:

• Account data — such as your email address, display name, and authentication details you provide when you register.
• Content data — the prompts, files, and uploads you submit; the images, video, audio, text, and other generations you create; and the posts you publish to Nodal.
• Usage data — logs of your activity, device and browser information, IP address, approximate location derived from your IP, and diagnostic and performance data.
• Payment data — records of your credit purchases and balances. Card and payment-instrument details are handled by Paddle as merchant of record; Nodal does not store your full card data.

2. How we use it

We use the information above to:

• provide, operate, maintain, and improve the Service and its features;
• process purchases, manage your credit balance, and handle earnings and referrals;
• detect, prevent, and respond to abuse, fraud, security incidents, and violations of our terms;
• provide customer support and respond to your requests; and
• comply with legal obligations and enforce our agreements.

3. AI processing and third-party providers

When you use generation features, your prompts and any referenced media are sent to the AI model provider you select or that is assigned to fulfill your request. Those providers process the data to generate Outputs and handle it under their own terms and privacy policies. Because prompts leave our systems to reach these providers, you should not submit sensitive personal data — such as government identifiers, financial account numbers, or health information — in your prompts or uploads.

4. How we share information

We share personal data only as needed to run Nodal, and never for sale. Specifically:

• Model providers — to fulfill your generation and API requests, as described above.
• Paddle — our merchant of record, to process payments and taxes.
• Infrastructure vendors — hosting, storage, analytics, and communications providers that support the Service under confidentiality obligations.
• Legal and safety — to comply with valid legal process, enforce our terms, or protect the rights, safety, and security of users, the public, or Nodal.

We do not sell your personal data. Content you choose to publish to Nodal is shared publicly with other users by design.

5. Cookies and local storage

We use cookies and browser local storage for essential functions such as keeping you signed in (session authentication) and remembering your preferences and settings. We do not use third-party advertising cookies. Blocking essential cookies may prevent parts of the Service from working.

6. Data retention

We retain account data for as long as your account is active. Content and generation logs are retained as needed to provide the Service and for reasonable billing, security, and abuse-prevention windows, and to meet legal requirements. You can delete your account at any time through profile settings (the Danger Zone) or by contacting support; after deletion, residual copies may persist for a limited period in backups and logs, and we may retain certain records where the law requires.

7. Security

We use technical and organizational measures to protect your data, including encryption in transit and access controls that limit who can reach it. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can exercise many of these directly in the app, and you may contact support to make a request. We will respond as required by applicable law and may need to verify your identity first.

9. Children

Nodal is not directed to children under 13, and we do not knowingly collect personal data from them. If we learn that we have collected data from a child under 13 (or the applicable minimum age of digital consent in your region) without appropriate consent, we will delete it. If you believe a child has provided us data, contact support.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and provide notice through the Service or by other reasonable means. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions or requests about your privacy may be sent to the support email published in the app and in the site footer, or to support@asknodal.com.