Privacy Policy

• Account information — your name, email, password (hashed), company details, and role.
• CRM data you provide — the contacts, companies, deals, messages, notes, and other content you add to your workspace.
• Usage & device data — how you interact with the Service, plus basic log and device information for security and reliability.
• Payment information — handled by Paddle, our Merchant of Record; we do not receive or store full card numbers.

• To provide, maintain, and improve the Service.
• To power features you request, including AI summaries, scoring, and drafts.
• To process payments and manage subscriptions.
• To provide support and send important service communications.
• To keep the Service secure and comply with legal obligations.

To power AI features, relevant content (such as a lead's message or a contact's details) may be sent to our AI model providers to generate a summary, score, or draft. We use reputable providers and do not permit your data to be used to train their public models where that option is available. If AI is unavailable or your allowance is exceeded, Nula falls back to non-AI processing.

For your account information, Nula CRM acts as the data controller. For the CRM data you load about your own customers and contacts, you are the controller and Nula acts as your processor — handling that data on your behalf to provide the Service.

We do not sell your personal information. We share it only with:

• Service providers (subprocessors) that help us operate — cloud hosting, our payment provider and Merchant of Record (Paddle), email delivery (Resend), and AI model providers — under confidentiality obligations.
• Authorities when required by law, or to protect rights, safety, and the integrity of the Service.
• A successor in the event of a merger, acquisition, or sale of assets, subject to this Policy.

We use essential cookies to keep you signed in and to operate the Service, and limited analytics to understand usage and improve reliability. You can control cookies through your browser settings.

We retain your information for as long as your account is active or as needed to provide the Service. You can delete data or close your account, after which we delete or anonymize your information within a reasonable period, except where we must retain it for legal, security, or backup purposes.

We protect your data with encryption in transit, access controls, and reputable infrastructure. No method of transmission or storage is 100% secure, but we work hard to safeguard your information.

Depending on where you live (for example, under GDPR or CCPA/CPRA), you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can export your data anytime from the app, or contact us to make a request. We will not discriminate against you for exercising these rights.

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children.

We may update this Policy from time to time. If we make material changes, we'll notify you (for example, by email or in-app). The “Last updated” date above reflects the latest revision.

Questions or privacy requests? Email us at privacy@nulacrm.ai.