Privacy Policy

1. Who We Are

Nabad (nabad.live) is a real-time audience polling platform. References to "we", "us", or "our" mean the Nabad team. For privacy questions, contact us at info@nabad.live.

2. What We Collect

We collect the following categories of data:

• Account data: your email address and hashed password when you register.
• Poll content: questions, answer options, and participant responses you create or submit.
• Usage data: pages visited, features used, session timestamps, and browser/device type — collected via server logs.
• Billing data: subscription status and payment history. Card details are handled entirely by Stripe and never stored on our servers.
• Communications: emails you send us, including support requests.

Participant responses (votes) are collected without requiring a login. We associate responses with a session ID, not a personal identity.

3. How We Use Your Data

We use the data we collect to:

• Provide and operate the Nabad service
• Manage your account and subscription
• Send transactional emails (account confirmation, billing receipts)
• Diagnose bugs and improve the platform
• Respond to your support requests
• Comply with legal obligations

We do not send marketing emails unless you explicitly opt in.

4. Data Sharing

We do not sell your personal data. We share data only with the following service providers, strictly for operating Nabad:

• Stripe — payment processing
• Neon — managed Postgres database hosting
• Upstash — managed Redis (real-time session state)
• DigitalOcean — server infrastructure

We may also disclose data if required by law, court order, or to protect the rights and safety of our users.

5. Data Retention

We retain your account data for as long as your account is active. Poll sessions and responses are retained for 90 days after the session ends, then deleted.

If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

6. Cookies and Local Storage

We use browser local storage to remember your language preference and login session. We do not use third-party tracking cookies or advertising pixels.

Stripe may set cookies on payment pages as part of their fraud-prevention systems.

7. Security

We use HTTPS (TLS) for all data in transit. Passwords are stored as bcrypt hashes. Access to production systems is restricted to the core team.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at info@nabad.live.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict how we process your data
• Request a portable copy of your data

To exercise any of these rights, email us at info@nabad.live. We will respond within 30 days.

9. Children's Privacy

Nabad is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have done so inadvertently, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. The "effective date" at the top of this page shows when it was last updated.

11. Contact

Privacy questions or requests? Email us at info@nabad.live.