Privacy Policy

NERP Blog ("we", "us") is a blog planning tool operated by NAAX TECHNOLOGIES CORP. This policy explains what we collect, why we collect it, and the choices you have. Questions? Email naaxtech.official@gmail.com.

Information we collect

• Account information — your name and email address when you sign up or are invited to a workspace, so we can identify you and show your name to teammates.
• Content you create — blog ideas, briefs, keywords, comments, documents links, files you upload and workspace settings.
• Data you connect — information returned by services you choose to connect, such as Google Drive, Google Sheets, Google Search Console and Semrush.
• Basic technical data — logs needed to keep the service running and secure.

How we use it

We use your information only to provide NERP Blog: storing your work, showing it to the teammates you invite, sending service emails such as workspace invitations, importing the documents you select, and displaying search metrics you asked us to fetch. We do not sell your data and we do not use it for advertising.

Google user data

If you connect a Google account, we request only the scopes needed for the feature you use: your basic profile and email address to show which account is connected, and read-only access to Google Drive so you can pick the documents and spreadsheets you want to import.

• We read a Drive file only when you explicitly select it in the import picker.
• Imported text is stored in your workspace so you can plan around it. We never modify or delete anything in your Google account.
• Access tokens are held by our authentication provider and the per-user connection key is stored encrypted (AES-256-GCM) on our servers, never in your browser.
• You can disconnect at any time in Settings → Data sources, or revoke access at myaccount.google.com/permissions. Disconnecting deletes the stored connection key immediately.

NERP Blog's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as needed to provide the service, we do not use it for advertising, and no humans read it except where required for security, to comply with law, or with your explicit permission.

Sharing

Your workspace content is visible to the people you invite, with the permissions you assign them. We use trusted infrastructure providers to host the database, run the application and deliver email. They process data on our instructions only.

Your rights under the GDPR and UK GDPR

NAAX TECHNOLOGIES CORP is the data controller for NERP Blog. If you are in the EEA, the UK or Switzerland you have the following rights, and you can use most of them yourself in Settings → Privacy without contacting us:

• Access and portability — download a machine-readable copy of everything linked to you with "Download my data".
• Rectification — correct your name, email and any content directly in the app.
• Erasure — "Delete my account" erases your profile, content, uploads and stored connection keys immediately, and deletes your sign-in account.
• Restriction and objection — ask us to pause processing, or object to processing based on our legitimate interests.
• Withdraw consent — change your cookie answer at any time, and disconnect Google or Semrush in Settings → Data sources.
• Complain — you can lodge a complaint with your local supervisory authority.

We answer rights requests sent to naaxtech.official@gmail.com within 30 days, free of charge.

Why we are allowed to use your data (legal bases)

• Contract — running your workspace, storing your content, sending invitations and service emails.
• Consent — connecting Google or Semrush accounts, and any optional analytics storage. You can withdraw consent at any time.
• Legitimate interests — keeping the service secure, preventing abuse and fixing faults, balanced against your privacy.
• Legal obligation — keeping limited records where the law requires it.

Cookies and local storage

We use strictly necessary storage only: a sign-in session so you stay logged in, and small preference values such as your cookie answer and setup-guide progress. These are required for the app to work and cannot be switched off. Optional usage analytics are off unless you choose "Allow all" in the cookie notice, and you can change that answer any time in Settings → Privacy. We do not use advertising or cross-site tracking cookies.

Where your data is processed

Our hosting, database and email providers may process data outside your country, including in the United States. Where personal data leaves the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard, and our providers act only on our documented instructions as processors.

How long we keep things

• Account and workspace content — while your account is active.
• Deleted account — erased from live systems immediately; encrypted backups roll off within 30 days.
• Connection keys — deleted the moment you disconnect a service.
• Security and email delivery logs — up to 12 months.

Automated decisions

NERP Blog shows scores based on the data you enter and the metrics you connect. These are suggestions to help you prioritise; they have no legal effect and no decision about you is made automatically.

Retention and deletion

We keep your content while your workspace is active. You can delete individual items in the app, export everything from Settings → Backup, and delete your account and all of your data yourself from Settings → Privacy. You can also email us and we will remove your data within 30 days.

Security

Data is encrypted in transit, access is scoped per workspace with row-level security rules, and third-party connection keys are stored encrypted at rest.

Children

NERP Blog is a business tool and is not directed to anyone under 16.

Changes

If we make a material change we will update this page and, where appropriate, notify you by email.