Privacy Policy

1. Who We Are

Nabad (nabad.live) is a real-time audience polling platform. References to "we", "us", or "our" mean the Nabad team. For privacy questions, contact us at info@nabad.live.

2. What We Collect

We collect the following categories of data:

• Account data: your email address and hashed password when you register.
• Poll content: questions, answer options, and participant responses you create or submit.
• Usage data: pages visited, features used, session timestamps, and browser/device type — collected via server logs.
• Billing data: subscription status and payment history. Card details are handled entirely by Stripe and never stored on our servers.
• Communications: emails you send us, including support requests.

Participant responses (votes) are collected without requiring a login or an account. Responses are associated with a session and a temporary device identifier, not with a Nabad identity. Hosts can also switch on name collection for a session — it is on by default — in which case a response also carries the display name the participant typed.

3. How We Use Your Data

We use the data we collect to:

• Provide and operate the Nabad service
• Manage your account and subscription
• Send transactional emails (account confirmation, billing receipts)
• Diagnose bugs and improve the platform
• Respond to your support requests
• Comply with legal obligations

We do not send marketing emails unless you explicitly opt in.

4. Data Sharing

We do not sell your personal data. We share data only with the following service providers, strictly for operating Nabad:

• Stripe — payment processing
• Neon — managed Postgres database hosting
• Upstash — managed Redis (real-time session state)
• DigitalOcean — server infrastructure
• Google (Gemini API) — AI room insights and session recaps, and translation of participant answers
• Resend — transactional email to hosts (verification, password reset, session recap)
• Sentry — error monitoring; receives stack traces and request context from server errors, which can include a session identifier

Participant text is sent to Google’s Gemini API in two situations only: automatically in sessions owned by a Pro account, to group answers into themes and write the session recap; and on any plan when a host asks to translate participant answers. Display names are never sent. Full detail, including our data region and retention terms, is on our Data & Security page.

We may also disclose data if required by law, court order, or to protect the rights and safety of our users.

5. Data Retention

We retain your account data for as long as your account is active. Poll sessions and responses are kept until the host deletes them; closing a room does not delete it. We do not run an automatic deletion schedule today. A host can delete any session, and all of its responses, from their dashboard at any time.

If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

6. Cookies and Local Storage

We set two cookies, both our own: one keeps you signed in, the other remembers the language you chose. We use no advertising pixels anywhere. No analytics or tracking script runs on the pages a participant sees, and none runs inside the app once you are signed in: the join page, the voting page, the presenter screen, your dashboard and the editor carry none. Our public pages use Cloudflare Web Analytics, which counts visits without cookies and without identifying anyone.

Stripe may set cookies on payment pages as part of their fraud-prevention systems.

7. Security

We use HTTPS (TLS) for all data in transit. Passwords are stored as bcrypt hashes. Access to production systems is restricted to the core team.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at info@nabad.live.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict how we process your data
• Request a portable copy of your data

To exercise any of these rights, email us at info@nabad.live. We will respond within 30 days.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. The "effective date" at the top of this page shows when it was last updated.

11. Contact

Privacy questions or requests? Email us at info@nabad.live.