Privacy Policy

Effective Date: September 4, 2026

This policy explains how NimBuild AI collects, uses, shares, and protects information when you use the website, account tools, AI demonstrations, newsletter, support channels, or purchase flow.

1. Information We Collect

  • Account data: name, email address, password-verification data, profile preferences, locale, and administrative status
  • Google sign-in data, when you use that option: your Google identifier, name, email address, and profile image
  • Purchase data: order status, product identifier, amount, currency, timestamps, and payment metadata returned by Creem; complete payment card details are handled by Creem
  • GitHub delivery data: GitHub username or GitHub-connected email and invitation status
  • AI workflow data: prompts, uploaded media, generation settings, generation history, credit activity, and technical identifiers associated with the request
  • Communications data: contact-form messages, support email, newsletter subscription status, and message metadata
  • Technical data: IP address, browser and device information, request logs, referral URL, and usage events

2. How We Use Information

  • Create and secure your account, authenticate you, and preserve server sessions
  • Process purchases, reconcile webhooks, deliver repository access, and prevent fraud
  • Operate AI workflows, deduct or refund credits, store generation history, and display results
  • Respond to support, contact, newsletter, billing, and account requests
  • Measure traffic, diagnose defects, secure the service, and improve the product
  • Meet legal, accounting, security, and provider obligations

3. Legal Bases

Where a legal-basis framework applies, we process information to perform our contract with you, comply with law, protect vital and legitimate interests, or obtain your consent for activities such as optional analytics and marketing email. You may withdraw consent where consent is the basis and doing so does not affect prior lawful processing.

4. Sharing and Processors

We share information only with service providers and authorities as needed for the purposes above. Current categories include Creem for checkout, GitHub for repository invitations, Google for sign-in or analytics, Volcano Engine for supported AI processing, Resend for email, cloud and storage providers, and security or infrastructure providers.

We do not sell personal information. We may disclose information to respond to law, legal process, emergencies, fraud prevention, intellectual-property claims, or a business transfer, subject to applicable law.

5. Cookies and Tracking

We use necessary cookies and similar technologies for authentication, security, sessions, and locale. Optional analytics or functional cookies are described in our Cookie Policy. You can control cookies through browser settings, subject to necessary service requirements.

6. Retention

We retain account and transaction records while your account is active and for the period needed for accounting, tax, dispute, security, or legal obligations. AI prompts, uploads, and generation history are retained to provide history and investigate abuse unless removal is legally required. Newsletter and contact records are retained until you request deletion or we no longer need them for the purpose.

7. Security

We use HTTPS, access controls, session validation, secrets management, and provider security controls. No internet service can be perfectly secure, so please protect your credentials and report suspected incidents to support@nimbuild.dev.

8. Your Rights

Send requests to support@nimbuild.dev. We may need to verify your identity and can decline a request only where permitted by law, in which case we will explain the reason where possible.

  • Access, correct, export, or delete personal information you provided
  • Object to or restrict certain processing and withdraw consent where applicable
  • Unsubscribe from marketing email or request newsletter deletion
  • Complain to your local data-protection authority where one exists

9. Children and International Transfers

The service is not directed to people under 18. We do not knowingly collect their personal information. Our providers may process data in multiple countries; we use contractual and technical safeguards where transfers are involved.

10. Changes and Contact

We will post changes on this page and update the effective date. Material notices may also be sent by email where required. Contact support@nimbuild.dev or use https://nimbuild.dev/contact.