NITNI

Privacy Policy

Effective date: October 8, 2026

1. Who we are

NITNI ("we"). Privacy questions and requests: [email protected].

2. What we collect

  • Scan form, step by step: your website first, then your email, then which ad platforms you use, your monthly ad-spend range and your service area. Each step is saved when you press the button, so if you stop after typing your website we keep that website address. We save each step when you press the button, even if you never finish the form. We use what you saved to follow up by email. We do not record what you type before you press a button.
  • Form memory: when you fill in the scan form or confirm your email, this browser keeps your email and your ad-spend answer for 30 days, so the audit form can fill them in for you. It stays on your device and is not a cookie we share with anyone.
  • Audit order and intake: name, email, mobile number, who decides on marketing spend, your monthly ad spend, and what one new customer is worth to you (or that you are not sure). We use the mobile number only as a backup if the video call fails and for one call if you miss your audit call. Payments are handled by our payment provider; we do not see or store your full card number.
  • The audit call: what you say and share on screen. A recording and transcript only if everyone on the call agrees.
  • Emails you send us, and whether you unsubscribe.
  • Public business information about your business: website, reviews, Google Business Profile, ads in public ad libraries.
  • Site usage, cookies and pixels: with your OK, we collect pages viewed, clicks, how far you got in our forms, device and browser details, IP address and approximate location, and the ad that brought you as seen by these tools. We collect this with cookies and similar tools from Google Analytics, PostHog and our advertising partners Meta (Facebook and Instagram), Google Ads and LinkedIn, which also use it to show our ads to past visitors. They start only after you accept in the cookie banner, and you can change your choice any time with "Cookie settings" in the footer. Our hosting provider (Cloudflare) handles technical data such as your IP address to deliver the pages, and fonts load from Google Fonts. See "Who we share it with" below and our Cookie Policy.
  • Campaign label: when you press a button in our form, we save with it the campaign label from the link you clicked (for example "google/campaign-name/video"), so we know which of our ads worked. This happens whether or not you accept cookies. It is not a cookie, it is kept in our own records, and it is not sent to our advertising partners.
  • Session recordings: if you allow analytics, PostHog records how you move through our pages (scrolling, clicks, mouse movement and page changes) so we can see where the site is confusing. Everything you type into our forms is hidden in the recording before it leaves your browser. We keep recordings for 30 days.

3. How we use it

To build and send your scan and audit, run the call, reply to you, send follow-up and marketing emails about our services (including if you started but did not finish the form), process payments and refunds, improve our service, keep records the law requires, and protect against fraud or misuse.

4. AI tools

We use AI services to help prepare reports and, if you agreed to recording, to transcribe and summarise the call. A person reviews every report before it is sent.

5. Who we share it with

Service providers who work for us under contract: Google Workspace (email, Sheets, Meet), Cal.com (call booking: your name, email and the time you pick), Cloudflare (hosting), Google Analytics and PostHog (site analytics and session recordings, only with your consent), our payment provider, and AI providers as above. We may also disclose information when the law requires it or to protect our rights, or to a successor if the business is sold.

Advertising partners. With your consent through our cookie banner, Meta (Facebook and Instagram) places a pixel on our site. It receives information such as the pages you visit, the ad you came from, that a scan request was sent, your IP address and device identifiers. If you allowed advertising and then send our scan form, our server also tells Meta that a scan request was sent, with a coded (hashed) copy of your email address, so Meta can match it to the ad you saw. Meta may combine this with what it already knows about you to measure and target ads. Under some state laws (for example California) this counts as "selling" or "sharing" personal information for targeted advertising. You can opt out at any time on our Your Privacy Choices page (link in every footer), and we honor Global Privacy Control signals as an opt-out. If you reject advertising cookies, opt out or use Global Privacy Control, we send Meta nothing about you and Google Ads measurement stays off. We never send Meta your website address or your form answers. Google Ads. With the same consent, Google Ads measures our ads. Google sets a cookie and uses the click ID from the ad link to learn that a click on one of our ads ended in a sent scan request, along with your IP address and device details. Google Ads gets no email and no form answers from us, and we do not use it to build ad audiences. The same opt-out and Global Privacy Control turn it off.

6. Where it is processed

Our team works from Israel, and our providers may process data in the United States and other countries. We use providers with appropriate safeguards.

7. How long we keep it

  • Partial and full scan requests that do not become customers: 24 months after our last contact, then deleted.
  • Customers: for the relationship plus 7 years for tax and accounting records.
  • Call recordings and transcripts: 90 days after the call, unless you ask us to delete them sooner.
  • Unsubscribe records: kept so we keep honoring them.

8. Your choices and rights

  • Unsubscribe from any follow-up email by replying "unsubscribe" or using the link in it.
  • Access, correct or delete your information, or ask what we hold, by emailing [email protected]. Depending on your state, you may have more rights (for example under California, Colorado, Connecticut, Virginia, Texas and other state laws), including the right to appeal a decision by replying to our answer with "Appeal". We answer within 45 days and do not discriminate against you for using your rights.
  • Targeted advertising: you can opt out of targeted advertising and the "sale" or "sharing" of your information on our Your Privacy Choices page, or by turning on Global Privacy Control in your browser. You can also reject or change cookies at any time with the "Cookie settings" link in our footer.

9. Security

We limit access to the people who need it, use providers with strong security, and never ask for your passwords. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

10. Children

Our services are for businesses in the United States. We do not knowingly collect information from anyone under 16, and our site is not directed to visitors outside the United States.

11. Changes

We will post any change here with a new effective date, and email customers about material changes.

12. Contact

NITNI. [email protected]