Privacy Policy
Last Updated: August 31, 2026
§1. Data We Collect & Zero-Knowledge Security
We collect account registration data (name, email, company domain) and operational webhook payload metadata (invoice IDs, customer emails, amounts, failure codes). nodunn operates on a zero-knowledge architecture and NEVER touches, handles, or stores raw credit card numbers or CVV codes.
§2. Payment Processing & Paddle Data Sharing
Subscriber billing is handled through Paddle.com, our certified PCI-DSS Level 1 Merchant of Record. Relevant billing identifiers and tax details are shared with Paddle solely for the purpose of executing subscription transactions and issuing legal tax invoices.
§3. Purposes of Processing
Your data is processed strictly to: (a) authenticate your membership; (b) execute autonomous failed payment email cadences; (c) calculate analytics on your recovery dashboard; and (d) satisfy regulatory accounting obligations.
§4. Data Retention & Cryptography
All communication is encrypted in transit via TLS 1.3 and at rest with AES-256. Webhook and notification records are retained only for as long as your membership is active or as required by statutory record-keeping regulations.
§5. Your Privacy Rights
You possess the right to access, correct, export, or permanently delete your personal information stored on nodunn. You may exercise your rights at any time by contacting our Data Protection Officer.
To exercise your GDPR/KVKK rights or inquire about data practices, please email privacy@nodunn.com or support@nodunn.com.