Privacy Policy

1. Introduction

Nimbus Value ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our sales enablement platform ("Service"). Please read this policy carefully. By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, company name, and website
• Profile information: sales assessment responses and theme preferences
• Business data: customer information, goals, initiatives, KPIs, and business cases you create
• Communications: messages sent through the in-app chat feature
• Documents: files and artifacts you upload to the platform

2.2 Information Collected Automatically

• Usage data: pages visited, features used, and interaction patterns
• Device information: browser type, operating system, and screen resolution
• Log data: IP address, access times, and referring URLs
• Cookies and similar technologies for session management and preferences

2.3 Google User Data

When you connect your Google account to Nimbus Value (for example, by connecting Google Calendar), we may collect the following data from your Google account with your explicit consent:

• Google Calendar events: event titles, start and end times, attendee names and email addresses, event descriptions, locations, meeting URLs, and recurring event status
• Your Google account email address (used to identify your calendar connection)

We access this data using the Google Calendar API with read-only permissions (calendar.readonly scope). We do not access, modify, or delete your Google Calendar events.

How We Use Google User Data

Google user data is used exclusively to:

• Display your upcoming and past calendar meetings within the Nimbus Value platform
• Match meeting attendees to your customer records by email domain to provide sales context
• Allow you to add pre-meeting notes to your calendar events within Nimbus Value

Nimbus Value's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google User Data Sharing

We do not sell, share, transfer, or disclose Google user data to any third parties, except:

• To our cloud infrastructure provider (AWS) for secure storage and processing, under strict data protection agreements
• When required by law, regulation, or legal process

Google user data is never used for advertising, marketing, or any purpose other than providing the calendar integration features described above. We do not use Google user data to train AI models, for targeted advertising, or for any form of data brokering.

Google User Data Retention and Deletion

Google Calendar data is stored in our database for as long as your Google Calendar connection is active. You can disconnect your Google Calendar at any time from the Connected Services page, which will stop new data from being synced. You may request deletion of all stored Google Calendar data by contacting us at privacy@nimbusvalue.com. Upon disconnection or deletion request, your Google Calendar data will be removed within 30 days.

Google User Data Security

Google user data is protected using the same security measures described in Section 6 of this policy, including encryption at rest and in transit, role-based access controls, and secure cloud infrastructure. OAuth tokens used to access your Google account are encrypted using AWS KMS (Key Management Service) and are never stored in plaintext.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process your sales assessments and generate profile insights
• Power AI-driven features including suggestions, analyses, and recommendations
• Facilitate collaboration within your organization
• Respond to your requests and provide customer support
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and security threats

4. AI and Data Processing

Our Service uses artificial intelligence as a core part of the platform to provide features such as customer analysis, goal recommendations, initiative scoring, news aggregation, product analysis, and chat assistance. AI features are integrated throughout the Service and are part of the standard user experience. When AI-powered features are used:

• Your input data may be processed by third-party AI providers (such as OpenAI) to generate responses
• We do not use your individually identifiable data to train AI models
• AI-generated content is based on the data you provide and publicly available information
• Data sent to AI providers is limited to what is necessary for the specific feature being used

4.1 Service Improvement

We may use aggregated, de-identified data — meaning data that has been stripped of any information that could identify you, your organization, or your customers — to analyze usage patterns and improve the quality and relevance of our AI-powered features. This aggregated data cannot be used to identify any individual user or organization. We will never use your identifiable business data, customer information, or content to train AI models. Google user data (as described in Section 2.3) is never used for service improvement or model training in any form.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• With other members of your organization as configured by your organization administrator
• With service providers who assist us in operating the Service (cloud hosting, AI processing, payment processing)
• When required by law, regulation, or legal process
• To protect the rights, property, or safety of Nimbus Value, our users, or the public
• In connection with a merger, acquisition, or sale of assets (with prior notice)

We do not sell your personal information to third parties.

6. Data Security

We implement security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication via AWS Cognito
• Role-based access controls within organizations
• Encryption of sensitive credentials using AWS KMS (Key Management Service)
• Data stored in AWS infrastructure in the US East (N. Virginia) region

While we strive to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or enforcing agreements.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Export your data in a portable format
• Object to or restrict certain processing of your information
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at privacy@nimbusvalue.com.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. You can configure your browser to refuse cookies, but this may affect your ability to use the Service.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Nimbus Value
Email: privacy@nimbusvalue.com