Account and Order Information. When you create an account, subscribe to a plan, or make a purchase, we collect your name, email address, phone number, billing address, and payment information (including the last 4 digits of your credit card number).

Google User Data. When you connect your Google account to Nedzo (for example, to enable Google Calendar integration), we may access and collect the following Google user data with your explicit consent:

• Google Calendar event data (event titles, times, dates, descriptions, attendees, and calendar metadata)

• Basic Google profile information (name and email address) for authentication purposes

We only request the minimum Google API scopes necessary to provide the calendar integration functionality you have chosen to enable. You can revoke Nedzo’s access to your Google data at any time through your Google Account permissions settings at https://myaccount.google.com/permissions.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Nedzo platform and its features, including AI voice agent functionality and calendar integrations

• To process transactions, send order confirmations, and provide invoices

• To communicate with you about your account, respond to support requests, and send service-related notifications

• To screen for potential risk, fraud, and security threats

• To improve and optimize our Service through analytics and usage patterns

• To provide marketing communications in line with your stated preferences

Use of Google User Data. Google user data (including Google Calendar data) is used solely to provide and improve the calendar integration features within Nedzo that you have explicitly enabled. Specifically, we use Google Calendar data to allow your AI voice agents to check availability, schedule appointments, and manage calendar events on your behalf. We do not use Google user data for any other purpose, including but not limited to:

• Serving advertisements or targeted advertising

• Selling data to third parties or data brokers

• Determining creditworthiness or for lending purposes

• Building user profiles for purposes unrelated to the Service

• Training AI models on your personal Google data

3. Data Protection and Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect your personal information, including Google user data, against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS) protocols.

• Encryption at Rest: Sensitive data, including Google user data and authentication tokens, is encrypted at rest using industry-standard encryption algorithms.

• Access Controls: Access to personal data and Google user data is restricted to authorized personnel who require it to operate, develop, or improve our Service. Staff access is governed by role-based access controls and the principle of least privilege.

• Secure Token Storage: OAuth tokens used to access Google API Services are stored securely using encryption and are never exposed in logs, URLs, or client-side code. Tokens are transmitted exclusively over HTTPS.

• Infrastructure Security: Our Service is hosted on Amazon Web Services (AWS), which provides enterprise-grade physical and network security, including firewalls, intrusion detection, and regular security audits.

• Monitoring and Incident Response: We monitor our systems for potential security incidents and have procedures in place to respond to and mitigate data breaches.

• Regular Reviews: We periodically review and update our security practices to address emerging threats and maintain the confidentiality, integrity, and availability of your data.

4. Sharing and Disclosure of Your Information

We do not sell, rent, or trade your personal information or Google user data to third parties. We may share your information only in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating our Service (e.g., payment processors, hosting providers, analytics services such as Google Analytics). These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

• Legal Requirements: We may disclose your information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests, or to respond to a subpoena, search warrant, or other lawful request for information.

• Protection of Rights: We may disclose information to protect the rights, property, or safety of Nedzo, our users, or the public.

We do not transfer, disclose, or share Google user data with third parties for purposes other than providing or improving the Nedzo Service’s user-facing features.

You can learn more about how Google uses your information at https://www.google.com/intl/en/policies/privacy/. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.

5. Google API Services — Limited Use Disclosure

Nedzo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve user-facing features that are prominent in our Service.

• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, it is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

• We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, with your consent, or for security or legal compliance purposes.

• We do not use Google user data for serving advertisements.

6. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide you with our Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

Google user data (including calendar data and OAuth tokens) is retained only for as long as necessary to provide the calendar integration functionality. If you disconnect your Google account from Nedzo, or if you revoke our access through your Google Account settings, we will delete your Google user data from our systems within 30 days.

You may request deletion of your personal data at any time by contacting us at support@nedzo.ai. Upon receiving a verified deletion request, we will delete or anonymize your personal data within 30 days, unless retention is required by law. When the data retention period expires for a given type of data, we will securely delete or destroy it.

7. Do Not Track

Please note that we do not alter our Service’s data collection and use practices when we see a Do Not Track signal from your browser.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: You have the right to request a copy of the personal information we hold about you.

• Correction: You have the right to request that we correct inaccurate or incomplete personal information.

• Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions.

• Data Portability: You have the right to request your data in a structured, commonly used, and machine-readable format.

• Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

• Revoke Google Access: You can revoke Nedzo’s access to your Google account data at any time via https://myaccount.google.com/permissions.

If you are a European resident, your information may be transferred outside of Europe, including to the United States. To exercise any of these rights, please contact us at support@nedzo.ai.

9. Children’s Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. If we make material changes, we will notify you by posting the updated policy on our website with a revised “Last Updated” date. We encourage you to review this policy periodically. Your continued use of our Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy, your personal data, or would like to exercise your rights, please contact us:

Nedzo LLC

Email: support@nedzo.ai

Address: 254 Chapman Rd, Newark, DE 19702, United States