Privacy Policy

1. Who this covers

Two kinds of people interact with Nuhdge:

• Account holders: people who create a Nuhdge account and card.
• Visitors: people who view someone else's card and optionally choose to share their own details back.

This policy covers both.

2. What we collect

From account holders, when you create your account and card: name, email, phone number, company, job title, bio, profile photo, cover image, website and social links. You provide all of this directly.

From visitors, only if you choose to share your details after viewing a card: your name, email, and phone number. We only collect this if you explicitly tick the consent box and submit the form. Nothing is stored if you don't submit.

If you order a Nuhdge card: the delivery name, email, phone number and full address you give, what to print on a Personal card, and the referral code if you used one. Payment is handled by Razorpay: your card, UPI or bank details go to them, not to us; we keep the payment ID and the amount. If you use “Use current location”, your location is sent once to OpenStreetMap to look up the address, and is not stored.

If you leave your email in the footer: that email address, so we can write when there is news.

Our hosting sees your IP address, as every website's does, and we use it for a short time to stop abuse such as spam on the share back form. We do not collect location data or device fingerprints.

3. How we use it

• Account holder data powers your public card page and your private dashboard.
• Visitor details you submit are stored in the contact list of the card owner whose form you filled in. Nuhdge does not use them for its own marketing and does not contact you with them.

4. What we don't do

• We do not sell your data, or any visitor's data, to anyone.
• We do not share data with advertisers or data brokers.
• We do not send marketing email using visitor-submitted details.
• We send account email only: confirming your email address, security codes when you change your password, and resetting your password. There are no notifications about new contacts; you see new activity in your dashboard, along with notices when we change something on your orders or account.

5. Who can see it, and where it is stored

Your contact list is visible only to you: the app checks that every request for it comes from your account. To run the service, the Nuhdge operator can see account emails, cards and orders, but not your contact list (only how many contacts you have).

We use these service providers, each only for the job named:

• Supabase: database, sign in and photos (stored in India, Mumbai).
• Vercel: hosting the site (servers in India, Mumbai; pages delivered worldwide).
• Razorpay: payments (India).
• Resend: sending account and order emails (United States).
• Upstash: counters that limit abuse, keyed by IP address and kept for minutes to hours.
• Sentry: reports of errors in the app, with form contents, cookies and personal details removed (United States).
• Cloudflare Turnstile: checking that sign ups and shared details come from a person, not a bot.
• OpenStreetMap: turning your location into an address, only when you choose “Use current location”.
• Google: signing in, only if you choose “Continue with Google”.

Some of these providers are outside India. They process data for us under their own security and privacy terms, and only as needed to provide the service.

6. How long we keep it

• Your account, card and photos: until you delete them. Deleting your card or account takes it offline at once and removes it permanently after 30 days (photos within a day of that), unless you restore it first.
• Contacts in your list, and the consent record of anyone who shared their details: until you delete the contact or your account.
• Orders: 8 years from the order date, because Indian tax and accounting law requires these records. This applies even if you delete your account; after 8 years the order is deleted.
• Details typed into an order form that was never paid for: deleted after 30 days.
• Footer email signups: until you ask us to remove yours.
• IP addresses used to stop abuse: minutes to hours. Server logs: as long as our hosting keeps them, at most 30 days.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• Tell you what personal data we hold about you and how we use it.
• Correct or update it. Account holders can do most of this themselves in the dashboard.
• Delete it. Account holders can delete their account from Settings; anyone can ask us at support@nuhdge.in.
• Nominate someone to exercise these rights for you if you die or cannot act yourself.

Write to support@nuhdge.in. We reply within 30 days. If you shared your details through someone's card, you can also ask that card owner directly.

8. Complaints and grievance officer

Grievance Officer: Shreya Shah, support@nuhdge.in. If we do not resolve your complaint, you can complain to the Data Protection Board of India.

9. If something goes wrong

If personal data we hold is exposed, we will tell the people affected and the Data Protection Board as the law requires, say what happened, and say what to do next.

10. Cookies

We use the cookies needed to keep you logged in, and one more if you arrive through a friend's referral link: it remembers their code for 30 days so the discount applies when you order. We do not use third-party advertising or tracking cookies.

11. Children's privacy

Nuhdge is not directed at children under 16, and we do not knowingly collect data from anyone under that age.

12. Changes to this policy

If this policy changes we'll update the effective date above. For material changes we'll notify account holders directly.

13. Contact

Questions about this policy or your data: support@nuhdge.in.