Privacy Policy

Effective 2026-10-04.

This page describes what MoneyNudge actually collects and does with it. It is written to match how the product works today, not a generic template.

Who operates MoneyNudge

MoneyNudge is operated by Kevin Fan, an individual based in mainland China. You can reach the operator at aitaylorfan@gmail.com for any question about this policy or your data.

What we collect

Account information. Your email address, your name, and your login session. If you sign in with Google or GitHub, we receive the basic profile information those providers share (name, email, avatar).

Workspace data — the information you enter to use the product. Client names and contact email addresses; the quotes and invoices you log, including their document number, amount, currency, and date; any notes you add; the record of which follow-up step each document is on; and the record of what you marked as sent, when, and by what method (copied, opened in your mail app, or downloaded as a file). If you log a payment or a client's claim that they paid, we store that amount, date, and method too.

Usage and error logs. Basic technical logs — request timestamps, error messages, and similar operational data — that help us keep the service running and find bugs. We do not use these logs for advertising.

Public-page analytics, if you consent. Microsoft Clarity measures interactions on our public marketing and legal pages, including clicks, scrolling, heatmaps, and session replays, along with browser and device information. We do not load it on sign-in, sign-up, password, workspace, admin, payment, client-data, or other private pages. We do not send Clarity custom identifiers such as your name, email, client, or invoice details. Clarity is configured with Balanced masking and cookie consent required.

We do not read the content of emails you send from your own email address. MoneyNudge drafts a message for you to review; once you copy it, open it in your mail app, or download it, what happens to it after that happens outside MoneyNudge.

Why we collect it, and on what basis

We collect account and workspace data because the product cannot function without it — this is the data you deliberately enter so MoneyNudge can tell you who to follow up with and draft that follow-up from your template. This is processing necessary to provide the service you signed up for. Usage and error logs are collected under our legitimate interest in keeping the service secure and working correctly. Analytics data (see below) is collected only with your consent.

Who processes your data

We use a small number of infrastructure providers to run MoneyNudge. None of them are permitted to use your data for their own purposes.

• Vercel — hosts the application and handles network delivery.
• Cloudflare — manages the domain's DNS and provides private file storage. Image uploads are currently unavailable.
• Neon (PostgreSQL) — hosts the database where your account and workspace data live.
• Resend — sends transactional email on our behalf: account verification, password resets, and the optional morning digest email. Resend does not send anything to your clients — only to you, the MoneyNudge account holder.
• Google Analytics — used only after you accept the analytics cookie banner. If you decline, or don't respond, Google Analytics is never loaded and no data is sent to Google. See "Cookies" below.
• Microsoft Clarity — used only after you accept analytics cookies, for heatmaps, session replays, and interaction measurement on the public pages described above. If you decline or do not respond, Clarity is not loaded. See Microsoft's privacy statement.

Cookies

MoneyNudge sets the following cookies:

• A session cookie (better-auth.session_token, or a __Secure--prefixed version of the same name in production), set by our sign-in system, to keep you signed in.
• PARAGLIDE_LOCALE — remembers your chosen language (English or Chinese).
• mn_consent — remembers your analytics cookie choice (accepted or declined), valid for 12 months.
• sidebar_state — a first-party, non-tracking cookie set inside the signed-in app when you collapse or expand the sidebar, so it stays the way you left it. It isn't shared with anyone and isn't used for analytics.
• _ga, _ga_* (Google Analytics) — set only after you accept analytics cookies on the banner; measures site usage.
• _clck, _clsk (Microsoft Clarity) — analytics cookies that may be set after you accept analytics cookies; help Clarity connect public-page interactions within and across visits.

You can withdraw analytics consent through Cookie settings in the public-page footer. After a page has requested Clarity, declining writes your choice and reloads the page into a clean document, so Clarity does not continue on that document. This does not delete data already collected while you had consented. We do not use advertising cookies or grant advertising storage to Clarity.

How long we keep data, and deletion

If you delete your account, your workspace data is removed from the live database immediately. We currently use Neon's automatic database recovery history, configured with a six-hour restore window. We have not configured separate Neon snapshots or a snapshot schedule. Historical database states outside this window are no longer available to us through that recovery feature. The six-hour window describes recovery availability, not a guaranteed deadline for physical erasure of every copy held by our infrastructure provider.

Self-serve export and deletion are available from Settings → Your data inside the app. Exporting downloads a copy of your workspace — clients, documents, and payment history — as a single JSON file. Deleting requires typing your account email to confirm, and permanently removes your account and workspace; this can't be undone. If your session is more than a day old, you'll be asked to sign in again first before you can delete.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can exercise most of these rights yourself, at any time, from Settings → Your data. For anything that page doesn't cover — for example correcting an email address on file, or a question about what we hold — contact us at aitaylorfan@gmail.com and we will respond.

Where your data is processed

Kevin Fan operates from mainland China, but the infrastructure providers listed above host and process data outside mainland China. By using MoneyNudge, you understand that your data will be transferred to and processed in other countries, which may have different data protection laws than your own.

Children

MoneyNudge is not directed at, and we do not knowingly collect information from, anyone under 16 years old.

Security

We rely on our infrastructure providers' standard protections — encryption in transit, access controls, and routine security updates — and we limit who can access production data to what's needed to operate the service. No method of transmission or storage is 100% secure, but we take reasonable, industry-standard steps to protect your information.

Changes to this policy

If we make a material change to this policy, we will update the effective date above and, where appropriate, notify you by email.

Contact

Questions about this policy or your data: aitaylorfan@gmail.com.