Last updated: April 2026
NuDash is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data. By using NuDash, you consent to the practices described in this policy.
We collect information you provide directly (name, email, agency name, password), information generated through your use of the service (campaign data synced from connected ad platforms, report exports, usage logs), and technical information (IP address, browser type, device information for security and performance purposes).
When you connect an ad platform (Meta, Google, TikTok, LinkedIn, DV360), we use OAuth to obtain an access token on your behalf. We store the token encrypted at rest and use it solely to read your campaign data for display in your NuDash dashboard. We never receive or store your ad platform passwords. We do not sell, share, or use your advertising data for any purpose other than providing the NuDash service. You can revoke our access at any time by disconnecting the platform from your NuDash Settings, or by revoking the OAuth authorisation directly from the platform.
We use your data to provide and improve the NuDash service, generate AI-powered insights and reports, send transactional emails (account confirmation, password reset, billing), and for security and fraud prevention. We do not use your data for advertising purposes and we do not sell your data to third parties.
All workspace data is isolated using row-level security at the database level. Members of one workspace cannot access data from another. OAuth tokens are encrypted at rest using industry-standard encryption. All data is transmitted over HTTPS. We conduct regular security reviews.
We retain your account data for as long as your account is active. Campaign data is retained according to your plan (90 days for Free, 12 months for Agency, 24 months for Agency Plus). You may request deletion of your account and all associated data at any time.
NuDash uses the following third-party services: Supabase (database and authentication), Vercel (hosting and infrastructure), Anthropic Claude API (AI insights generation). Each of these services has its own privacy policy and data processing terms.
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies. You may disable cookies in your browser but this may affect your ability to use the service.
You have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your account and data, export your data in a portable format, and opt out of non-essential communications. To exercise any of these rights, contact us at policy@nudash.co.za.
NuDash complies with the Protection of Personal Information Act (POPIA) as applicable to South African users. We process personal information lawfully and transparently, collect only what is necessary for the stated purpose, and implement reasonable security measures to protect personal information.
We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification. The date of the most recent revision appears at the top of this page.
For privacy-related enquiries, please contact us at policy@nudash.co.za.