Privacy Policy

Last updated: October 2, 2026

Nodd is a done-for-you marketing crew. This policy explains what we collect when you use our website and studio, why, and the choices you have. We wrote it in plain English.

The short version. We use your information to run your studio and make your content. We don't sell it, we don't use it for advertising, and we don't run ad or analytics trackers. If you sign in with Google, we only use your name, email address and profile picture to create and identify your account. You can ask us to delete your data at any time.

Who we are

Nodd is run by EBG Media, an East Bridge Global company ("we", "us"). This policy covers nodd.ebgofficial.com, the Nodd studio for clients and crew, and the emails we send about your account and your requests. EBG Media is the controller of the personal information described here.

What we collect

Information you give us

Account details: your name, email address and, if you choose, a profile picture. If you sign up with email and a password, your password is handled by our sign-in provider (Google Firebase Authentication). We never see or store it.
Business details: your business name, website or social handle, what you do, how you want to sound, your customers, colours, channels, and anything you tell your crew to always keep in mind.
Requests and content: the briefs you send, your messages to your crew, your chats with the Nodd assistant, voice notes (the audio and a written transcript), and the photos, videos, logos and documents you upload.
Reviews: your decisions on each take (nod, notes or pass) and the notes you pin to moments in a video.
From our website: if you leave your email address or a request on our landing page, we keep it so we can reply and set up your studio.

Information created as you use Nodd

Content we make for you: the takes (videos, images, documents and links) your crew delivers, and the production briefs we prepare from your requests.
Activity: when requests are sent, picked up, delivered or approved, and which updates you have already seen, so the studio can show what's new.
Technical information: our hosting and security systems record basic request data such as IP address, browser type and the time of each request. We use it to keep the service secure and working.

Stored in your browser

Our sign-in provider stores a session in your browser so you stay signed in. The studio also keeps a few preferences there, such as your theme, alert sound and unsent drafts. We don't use advertising cookies, and we don't run third-party analytics or ad trackers.

Google user data

If you choose Continue with Google, Google shares your name, email address and profile picture with us (the basic openid, email and profile permissions). We don't ask for access to your Gmail, Google Drive, Calendar, contacts or any other Google data.

We use this information only to create your account, sign you in, show your name and picture in your studio, and send you emails about your account and requests.
We don't sell it, use it for advertising, or use it to build profiles for anyone else.
We share it only with the service providers who help us run Nodd (listed below), when you ask us to, or when the law requires it.
Nodd's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Nodd's access at any time from your Google Account (Security, then Third-party apps and services). That stops future Google sign-ins; to delete your Nodd account and data, contact us.

How we use your information

To provide the service: set up your studio, make and deliver your content, let you review it, schedule what goes live, and keep your crew informed.
To communicate with you: emails when a take is ready, when your crew replies, and about your account. We don't send marketing emails without your permission.
To keep Nodd secure: verify sign-ins, check that each person only sees their own studio, limit abuse, and fix problems.
To improve Nodd: understand which parts of the studio help and where people get stuck.
To meet legal obligations and enforce our Terms.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running and securing the service, your consent where we ask for it, and our legal obligations.

Automated features

Some parts of Nodd use automated processing by our service providers: answering your questions in the studio chat, turning voice notes into text, and preparing production briefs for the crew from your requests. When a question needs current information (for example local events or trends), Nodd may send a short search query based on your question to a web search provider. We don't send your files or account details with those searches. Automated answers can be wrong, so please check anything important. People on our crew make and review every piece of content we deliver.

We don't sell your personal information. We share it only as needed to run Nodd, with providers who process it on our behalf and under our instructions:

Vercel: hosting for our website, studio and servers.
Neon: our database.
Google Firebase Authentication: sign-in.
Cloudflare R2: storage for the files you upload and the content we deliver.
Resend: delivery of our emails.
Providers of automated text, speech and web search processing: the features described above.
Brand details: when you give us your website, we read its public pages (directly and through our web search provider) to fill in your brand details, such as your colours, fonts and how you describe your business, using the automated processing above. Your logo is shown from a logo provider, which receives your website address when the logo loads. While you type your business name during sign-up, your browser sends what you've typed to that provider to suggest matching brands; nothing is saved by us until you continue.

We may also share information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business (in which case this policy will continue to apply to your information). We only show the work we make for you publicly, for example as an example on our website, with your permission.

How long we keep it

We keep your information for as long as your account is active, so your studio, requests and library stay available. If you ask us to delete your account, we delete your personal information and content within 30 days, except where we must keep some records for legal, tax or security reasons. Copies in backups are removed when those backups expire. Website enquiries are kept for up to 24 months unless you become a client.

Security

Everything is sent over encrypted connections (HTTPS). Every request to our servers is checked against your verified sign-in before any data is read or changed, clients can only ever see their own studio, upload links expire after 15 minutes, and access to our systems is limited to the people who need it to serve you. No system is perfectly secure, but we work hard to protect your information and will tell you promptly if a breach affects you.

Your choices and rights

You can update your business and brand details at any time in your studio.
You can ask us for a copy of your information, to correct it, to delete it, or to stop or restrict some processing. Depending on where you live (for example the EU, the UK or California) you may have these as legal rights, and you can also complain to your local data protection authority.
You can switch off alert sounds and desktop notifications in your studio, and unsubscribe from any non-essential email.

To make a request, email us at the address below. We may need to confirm your identity first, and we'll reply within 30 days.

International transfers

Our service providers may process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses for these transfers.

Children

Nodd is a service for businesses. It isn't directed at children, and we don't knowingly collect information from anyone under 16. If you think a child has given us information, contact us and we'll delete it.

Changes to this policy

We'll update this page when our practices change and change the date at the top. If a change is significant, we'll tell you by email or in your studio before it takes effect.

Contact

Questions or requests about your privacy: crew@ebgofficial.com. EBG Media, an East Bridge Global company. ebgofficial.com