Privacy Policy

This Privacy Policy explains how Nothing But Software (“we”, “us”, or “our”) collects, uses, shares, and protects personal information when you visit nothingbutsoftware.io or contact us about our services.

The short version: we collect as little as we can, we use it to answer you and to run the site, we do not sell it, and you can ask us to delete it.

Information you give us. When you email us or submit an enquiry, we receive whatever you choose to send — typically your name, email address, company, and a description of your project. If we go on to work together, we may also collect billing details and contract information.

Information collected automatically. Like most websites, our servers and analytics record technical data when you visit: IP address, browser type and version, device type, operating system, referring page, pages viewed, and timestamps. This is used in aggregate to understand traffic and to keep the site secure.

Information from third parties. We may receive limited information from service providers we use for hosting, analytics, bot protection, and email, as described below.

We do not knowingly collect special categories of data (such as health or biometric information), and we ask that you do not send them to us.

We use personal information to:

• respond to enquiries and provide quotes or proposals;
• deliver, support, and invoice for our services;
• operate, secure, and improve the site — including detecting and preventing abuse, fraud, and automated attacks;
• measure aggregate traffic and understand which content is useful;
• send occasional service updates or, where you have opted in, marketing emails you can unsubscribe from at any time;
• comply with legal obligations and enforce our Terms of Service.

We do not use your information to make decisions about you by automated means that produce legal or similarly significant effects.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Contract — to take steps at your request before entering an agreement and to perform our services;
• Legitimate interests — to run and secure our site, understand aggregate usage, and communicate about our business, balanced against your rights;
• Consent — for optional analytics and marketing communications, which you may withdraw at any time;
• Legal obligation — to keep records required by tax and accounting law.

We use a small number of cookies and similar technologies. Strictly necessary cookies keep the site functional and secure and cannot be switched off. Analytics cookies, where used, help us understand aggregate traffic patterns.

You can block or delete cookies through your browser settings. Doing so may affect parts of the site. Where required by law, we ask for consent before setting non-essential cookies.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose it only in these situations:

• Service providers who process data on our behalf under contract — hosting and infrastructure, analytics, bot protection, email delivery, payment processing, and accounting;
• Professional advisers such as lawyers and accountants, where necessary;
• Legal and safety — when required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to protect rights, safety, or property;
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply.

We are based in the United States, and our service providers may process data in the United States and other countries. Where personal information is transferred out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep personal information only as long as we need it for the purposes described in this policy. In practice:

• enquiries that do not become projects are deleted within 24 months;
• client project records are kept for the duration of the engagement and for 7 years afterwards, where required for tax and legal purposes;
• server and analytics logs are retained in identifiable form for up to 12 months.

After those periods, we delete the information or irreversibly anonymise it.

We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access controls on a need-to-know basis, and reputable infrastructure providers.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information and poses a risk to you, we will notify you and the relevant regulator as required by law.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• request deletion of your information;
• object to or restrict certain processing;
• receive your information in a portable, machine-readable format;
• withdraw consent at any time, without affecting past processing;
• opt out of marketing emails using the unsubscribe link in any message;
• avoid discrimination for exercising any of these rights.

To exercise a right, email privacy@nothingbutsoftware.io. We will respond within the timeframe required by applicable law — generally 30 days — and may need to verify your identity first. You may also authorise an agent to make a request on your behalf.

If you are in the EEA or UK and are unhappy with our response, you may lodge a complaint with your local data protection authority.

The site is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with information, contact us and we will delete it.

Our site may link to services we do not control. This policy does not apply to them, and we are not responsible for their practices. We encourage you to read the privacy policy of any site you visit.

We may update this policy to reflect changes in our practices or the law. The version on this page is the one in effect, and the “last updated” date above shows when it last changed. If a change is material, we will take reasonable steps to tell you.

For any privacy question or request, write to privacy@nothingbutsoftware.io.

Nothing But Software
Austin, Texas