Last updated: October 22, 2026

Who we are and scope

This Privacy Policy explains how AURONX L.L.C, a Florida limited liability company("we", "us", or "our"), collects, uses, and shares personal information when you use the Nodusly macOS application (the "Software"), nodusly.com, and related licensing, update, and support services (the "Services"). We are the controller of the personal information described here, except payment information, which Paddle processes as Merchant of Record under its own privacy policy.

This policy should be read together with our Terms of Service.

Data that stays on your Mac

Nodusly is local-first. Clipboard history, workspaces, window layouts, shelf items, screenshots or previews, and settings are stored on your Mac and are not sent to us. The Software does not include analytics, advertising, tracking SDKs, or crash-reporting services. We never receive your clipboard contents, window titles, file contents, or screen contents.

macOS permissions you grant (such as Accessibility or Screen Recording) let the Software work on your device only. They do not give us access to your data.

Information we collect

Account information

When you create an account: username, email address, verification status, a one-way Argon2id hash of your password (we never store your password itself), and if you choose Sign in with Apple or Google, the identifier and email address that provider shares with us. We also keep session records (creation time, last use, and approximate device or browser information) so you can see and revoke sessions.

License and activation information

When you activate or refresh a license, the Software sends an HTTPS request containing:

your license or account credential;
a random device identifier generated by the Software and stored in your Mac Keychain;
a generic or user-chosen device label; and
the Software version and build number.

We store license records, activation history, and device activation metadata so we can enforce the two-Mac limit, let you manage your Macs, and prevent license abuse.

Software update checks

To deliver security and feature updates, the Software checks our update feed at releases.nodusly.com (approximately once per day, and when you check manually) and downloads updates from it. Like any web request, this exposes your IP address, the Software version, and a standard user-agent string to our hosting provider. We do not use these requests to build profiles or track individual usage, and the Software does not send system profiles with update checks.

Purchase information

Purchases are processed by Paddle as Merchant of Record. Paddle collects your payment details, billing address, and tax information. Paddle shares with us the information we need to fulfill and support your order, such as your name, email address, country, order or subscription ID, plan, price, and transaction status. We do not receive or store your full card number.

Early access waitlist

If you joined the early access waitlist before launch, we stored your email address and the plan you selected. The waitlist is closed to new sign-ups, and you can ask us to delete your entry at any time.

Support communications

If you email us, we keep the message, your email address, and any information you choose to include so we can respond and keep a record of the request.

Website and security logs

Our servers and providers automatically record technical information when you visit nodusly.com or call our APIs, such as IP address, request URL, timestamps, browser or app user agent, and error information. We use this for security, abuse prevention (for example rate limiting license activation), and troubleshooting.

Anonymous website counts

To understand how many visitors move from our pages to a purchase, our own servers keep daily totals of a few steps: visits to the home, pricing and download pages, checkouts opened and completed, sign-ups, verified emails, purchases by plan, and Macs activated. Each step is stored only as a number per day. We do not store who took the step, your IP address, a visitor ID, or any cookie for this, and automated visitors are left out.

Google Analytics on our website

Our public website (not the Software, and not sign-in, account or checkout-confirmation pages) uses Google Analytics to measure which pages and ads bring visitors, in Google's consent mode. Until you choose Accept in the cookie banner, Google Analytics stores no cookies and receives only cookieless signals without an identifier, which Google uses for aggregate estimates. If you accept, it sets analytics cookies and Google processes your IP address, device and browser details, and the pages you visit, under Google's terms as our processor. You can decline, or later clear this site's data in your browser to be asked again. Legal basis: your consent.

How we use information and legal bases

We use personal information only for these purposes:

Providing the Services (account creation, sign-in, license activation and refresh, delivering updates, sending license and account emails) — legal basis: performance of our contract with you.
Security and fraud prevention (detecting license sharing, trial or refund abuse, account takeover, and attacks on our systems) — legal basis: our legitimate interests in protecting the Services and our users.
Support and communications (answering requests, sending essential service notices such as changes to these policies, price changes, or security notices) — legal basis: contract and legitimate interests.
Launch and product announcements to people who joined the early access waitlist — legal basis: your consent, which you can withdraw at any time by using the unsubscribe link or emailing us.
Legal compliance (tax and accounting records, responding to lawful requests, enforcing our Terms) — legal basis: legal obligation and legitimate interests.

We do not sell personal information, use it for targeted advertising, or use it to make decisions that produce legal or similarly significant effects based solely on automated processing.

Cookies

nodusly.com uses strictly necessary cookies: a session cookie that keeps you signed in, and short-lived security cookies used during sign-in (for example to protect Apple and Google sign-in against forgery). These are essential for the Services to work, so they do not require consent under EU and UK cookie rules. With your consent only, Google Analytics sets analytics cookies (such as _ga) on our public pages; we do not use advertising cookies, and nothing is stored if you decline. Paddle's checkout may set its own cookies as described in Paddle's policies.

We share personal information only with service providers that help us run the Services, under contracts that limit their use of it to providing services to us, and only as needed:

Paddle.com Market Ltd and affiliates — Merchant of Record: checkout, payment processing, invoicing, sales tax/VAT, refunds, fraud prevention (United Kingdom, United States, and other regions)
Google Cloud (Cloud Run) — Website and API hosting (United States)
Neon — Database hosting for accounts and licenses (United States)
Google Analytics (Google LLC) — Website analytics, only with your consent (United States)
Cloudflare — DNS, CDN, security/firewall, and hosting of app update downloads (R2) (Global network)
Resend — Transactional email (verification, license, and account emails) (United States)
Google — Optional Sign in with Google (United States)
Apple — Optional Sign in with Apple (United States)

We may also disclose information:

if required by law, subpoena, court order, or other legal process;
to protect the rights, property, or safety of AURONX L.L.C, our users, or others, including to investigate fraud or security issues;
in connection with a merger, acquisition, financing, or sale of assets, in which case the recipient must honor this policy; or
with your consent or at your direction.

We do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or similar U.S. state laws, and we have not done so in the past 12 months.

International transfers

We are based in the United States and our main systems are hosted in the United States. If you use the Services from outside the United States, your information will be transferred to and processed in the United States and other countries where our providers operate, which may have different data protection laws. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) offered by our providers.

Data retention

Account and license data: kept while your account is active. When you delete your account, we delete your profile data and sign-in connections. We keep a minimal, de-identified record of used licenses and redeem codes (a "tombstone") so codes cannot be reused and to prevent fraud.
Sessions: deleted when they expire or when you revoke them.
Server and security logs: kept for a limited period (typically up to 90 days) unless needed longer to investigate abuse or security incidents.
Purchase and tax records: kept by Paddle and by us as long as required by tax and accounting laws (generally up to 7 years).
Support emails and waitlist entries: kept as long as needed to handle the request or until you ask us to delete them.

Security

We use industry-standard measures to protect personal information, including HTTPS encryption in transit, password hashing with Argon2id, signed license tokens, restricted administrative access, and rate limiting. No system is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you and authorities as required by law.

Your rights and choices

Depending on where you live, you may have the right to:

access the personal information we hold about you and receive a portable copy;
correct inaccurate information;
delete your information;
object to or restrict certain processing, and withdraw consent at any time;
opt out of the sale, sharing, or targeted-advertising use of personal information (we do none of these); and
not be discriminated against for exercising these rights.

You can export your account data, revoke sessions and Macs, change your email, and delete your account yourself in the account portal. For any other request, email support@nodusly.com from your account email address. We may need to verify your identity before acting. You may use an authorized agent where the law allows. We respond within 30 days (or 45 days where U.S. state law allows, extendable as permitted). If we deny a request, you may appeal by replying to our response.

These rights apply to residents of the EEA, UK, and Switzerland under the GDPR and UK GDPR, and to residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Florida, and other U.S. states with comparable privacy laws, to the extent those laws apply. EEA and UK residents may also lodge a complaint with their local data protection authority.

Children

The Services are not directed to children under 13 (or under 16 in the EEA, UK, and Switzerland), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date. If changes are material, we will notify you by email or on our website before they take effect.

Contact

AURONX L.L.C, a Florida limited liability company, United States. Privacy questions and requests: support@nodusly.com.

Privacy Policy