Privacy Policy

1. Who We Are

NudgeBadger ("we", "us", "our") is operated as a UK-based service providing invoice chasing letter templates for freelancers and small businesses. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, NudgeBadger is the data controller for personal data collected through this website.

Contact: hello@nudgebadger.co.uk

2. What Data We Collect

Account data

• Name and email address (when you sign in via Google or email)
• Business name, phone number, address, and website (entered in your profile)
• Profile photo URL (if signing in with Google)

Letter and invoice data

• Invoice details you enter to generate letters (client name, invoice number, amount, dates)
• The letters generated on your behalf
• Chase status and payment outcome if you update your tracker

Payment data

• Subscription status and plan type
• A Stripe customer ID linked to your account (we do not store card numbers; Stripe handles all payment processing)

Usage data

• Pages visited and features used (via Firebase, anonymised)
• Error reports to help us improve the service

We do not collect data about your clients beyond what you choose to enter. Client details you enter are stored solely to enable the letter generator to function and to populate your tracker; they are never used for any other purpose.

2a. Your Responsibility for Debtor Data

This means you are responsible for:

• Ensuring you have a lawful basis to process the debtor's personal data
• Informing debtors that their data may be processed for the purpose of recovering a debt
• Complying with GDPR rights (access, rectification, erasure, portability) if a debtor requests them
• Deleting debtor data when it is no longer needed for debt recovery purposes

NudgeBadger acts as a data processor when handling debtor data on your behalf. We store it solely to generate letters and populate your tracker, and we never use it for any other purpose. You can request deletion of all your data (including debtor data) at any time.

3. Why We Collect It (Legal Basis)

We do not send marketing emails without your explicit consent.

4. How Long We Keep Your Data

• Active accounts: Data is retained for as long as your account is active.
• After account deletion: Personal data is deleted within 30 days of a deletion request. Anonymised aggregate data (e.g. total letters generated) may be retained for service improvement.
• Payment records: We retain billing records for 7 years as required by UK tax law, but these are held by Stripe and contain no letter content.
• Inactive accounts: Free accounts inactive for 24+ months may be deleted after notice.

5. Who We Share Your Data With

We do not sell your data. We share it only with the following processors, strictly to operate the service:

We do not use your data to train AI models. Letter inputs are used only to generate your letter and are not retained by the AI provider beyond that request.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you
• Right to rectification: ask us to correct inaccurate data
• Right to erasure: request deletion of your account and all associated data
• Right to data portability: receive your data in a machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to restriction: ask us to pause processing while a complaint is resolved

To exercise any of these rights, email us at hello@nudgebadger.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Account Deletion

Deleting your account removes: your profile, all generated letters, your tracker history, and your account credentials. It does not automatically cancel a live Stripe subscription; please cancel that first via Account > Manage Billing.

8. Cookies

We use essential cookies required for authentication (Firebase Auth session tokens), and — only with your consent via our cookie banner — Google Analytics 4 to measure aggregate, anonymous site usage. Analytics is loaded in Google Consent Mode and stays off until you opt in. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for full details.

9. Security

Your data is stored in Google Cloud Firestore with access controlled by Firebase security rules. Authentication tokens are managed by Firebase Auth. Payments are handled entirely by Stripe; we never see or store card details. We use HTTPS throughout.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email (if we hold your email) and by updating the date at the top of this page. Continued use of NudgeBadger after a policy update constitutes acceptance of the revised terms.