Privacy Policy

Last updated: May 18, 2026

Nerve is built on a simple promise: your business data is yours. This page explains what we collect, why we collect it, and the controls you have. No legalese — just the plain version.

1. What we collect

Account information. Your name, email, and password when you sign up.

Business data. The information you put into Nerve — leads, deals, goals, financials, documents, and notes about your business.

Usage data. How you use the product: pages visited, features used, and basic device information. This helps us find what is broken and what is working.

AI conversations. The messages you exchange with Nerve, so we can keep context across a conversation and improve our prompts.

2. How we use it

We use your data to run the service, generate insights about your revenue and pipeline, and send you your digest. We use aggregated, anonymized usage data to improve Nerve.

We do not sell your data. We do not share it with advertisers. Ever.

3. Where it is stored

Your data lives in Supabase (hosted on AWS). It is encrypted at rest with AES-256 and encrypted in transit with TLS. Sensitive fields receive an additional layer of application-level encryption.

Every tenant is isolated with row-level security — your data is never visible to another customer, by design and at the database level.

4. How AI handles your data

Nerve uses Anthropic's Claude API to power its intelligence. When you ask Nerve something, the relevant context is sent to Anthropic for processing and the answer is sent back.

Anthropic does not train on data sent through their API, and operates a zero-retention policy for API traffic. Before your data leaves Nerve, we mask personal identifiers — emails, phone numbers, and similar — so the model works on placeholders, not real contact details.

5. Third parties we rely on

We keep our vendor list short and deliberate:

Supabase — database and authentication. Vercel — hosting. Anthropic — AI processing. Stripe — payments. Resend — transactional email.

Each one processes only the minimum data needed to do its job.

6. How long we keep it

While your account is active, we keep your data so the product works. If you delete your account, we permanently remove your data within 30 days. Backups are purged on a rolling cycle after that.

7. Your rights

You can access your data, export it, correct it, or delete it at any time. You can opt out of optional analytics. To exercise any of these, use the controls in your settings or email us at privacy@nervehq.ai.

8. Cookies

We use a small number of cookies to keep you logged in — these are required. With your consent, we also use cookies for basic usage analytics. You can decline analytics cookies and Nerve still works fully.

9. GDPR

For users in the European Economic Area, Nerve is the data controller for your account data. You have the right to access, rectification, erasure, restriction, portability, and objection. We respond to verified requests within 30 days. Reach our data team at privacy@nervehq.ai.

10. Children

Nerve is built for businesses and is not intended for anyone under 18. We do not knowingly collect data from minors.

11. Industry benchmarks & cohort learning

Nerve can show you how you compare to similar companies — your industry, at your stage. To make that real instead of generic, we aggregate anonymized metrics across customers into industry cohorts.

What this means in practice:

• We use business metrics, not personal data — rates and coarse buckets (growth %, churn %, team-size band), never your exact revenue and never anything that identifies you.

• Cohorts are differential-privacy protected: small samples get more statistical noise, so no single company can be reverse-engineered from an aggregate.

• A benchmark is only ever shown across a minimum of 5 companies. Below that, the cohort stays hidden.

• This is on by default but fully optional. You can opt out anytime under Settings → Data & Security → Privacy & Data, and we stop contributing your metrics immediately.

• We do not use your data to train AI models. Anthropic's API does not train on data sent through it.

12. Contact

Questions about privacy? Email privacy@nervehq.ai and a human will reply.