Legal

Privacy Policy

Last updated: May 23, 2026

This Privacy Policy explains how CrowdNod (“we”, “us”) collects, uses, and protects your personal information when you use our testimonial collection platform at crowdnod.com (the “Service”).

1. Information We Collect

We collect the following categories of information:

  • Account data: name, email address, password hash, organization name.
  • Billing data: billing address and payment metadata (card details are handled by Stripe; we never see or store them).
  • Customer-submitted testimonials: text, video, name, email, company, avatar, rating, and any optional fields submitted through your forms.
  • Usage data: IP address, browser type, pages visited, widget impressions and clicks, and other analytics events.
  • Cookies: essential session cookies for authentication and optional preference cookies (e.g., theme). We do not use third-party advertising cookies.

2. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To process payments and manage subscriptions via Stripe.
  • To send transactional emails (account, billing, security).
  • To send product updates if you have opted in.
  • To respond to support requests at support@crowdnod.com.
  • To enforce our Terms of Service and prevent abuse.

3. AI Processing

We do not use AI to rewrite, edit, or otherwise alter the text of a submitted testimonial. AI is used only in limited, opt-in ways that you trigger yourself: (1) suggesting collection questions when you're building a form, (2) parsing a LinkedIn recommendation you paste in to pre-fill name, title, and company fields, and (3) generating separate marketing copy (e.g. a social post or pull-quote) from a testimonial, at your request — this does not change the testimonial itself. In each case, the relevant text is sent to our AI provider (OpenRouter, using OpenAI's gpt-4o-mini) for processing. No personally identifying information beyond what you provide is sent. AI providers process data under their own privacy policies and do not retain the content for training purposes.

4. Data Sharing

We share data only with the following processors:

  • Supabase— database, authentication, and file storage hosting (EU/US regions).
  • Stripe— payment processing.
  • Resend— transactional and campaign email delivery.
  • OpenRouter— AI processing for collection-question suggestions, LinkedIn recommendation parsing, and marketing-asset generation.
  • Vercel— application hosting and CDN.

We do not sell your personal data to third parties. We do not share data with advertising networks.

5. Data Retention

We retain account data for the duration of your subscription. If you delete your account, your data is soft-deleted for 30 days (recovery window) and then permanently deleted from our active systems. Backups are rotated and purged within 90 days.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (right to be forgotten).
  • Export your data in CSV or JSON format from the dashboard.
  • Object to or restrict processing.
  • Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email support@crowdnod.com or use the data export and deletion tools in your dashboard settings. See also our GDPR Statement.

7. Security

We use industry-standard practices including TLS encryption in transit, encrypted storage at rest, row-level security policies, and least-privilege access controls. No system is perfectly secure; if we discover a breach affecting your data, we will notify you within 72 hours.

8. International Transfers

Your data may be processed in the United States and the European Union depending on the region your organization selects. We rely on Standard Contractual Clauses for cross-border transfers where applicable.

9. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced by email to account owners at least 14 days in advance. The latest version will always be available at this URL.

11. Contact

Questions about this Privacy Policy? Email support@crowdnod.com.