Privacy Policy

Information We Collect

We collect information you provide directly, such as when you contact us, request services, or subscribe to our newsletter. This includes your name, email address, company information, and project details.

We also automatically collect certain technical information when you visit our website, including your IP address, browser type, and usage patterns through cookies and similar technologies.

How We Use Your Information

We use your information to provide our services, communicate with you about projects, send relevant updates, and improve our offerings. We may also use aggregated data for business analysis and service enhancement.

Your information helps us deliver personalized automation solutions and maintain ongoing project communication.

Data Protection & GDPR Compliance

As an Estonian company, we comply with GDPR and Estonian data protection laws. You have the right to access, correct, delete, or port your personal data. You can also object to processing or request processing restrictions.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Data Sharing & Third Parties

We do not sell your personal information. We may share data with trusted service providers who assist in our operations, such as email services or analytics platforms, under strict confidentiality agreements.

We may also disclose information when required by law or to protect our rights and safety.

Connecting Your Google and Meta Accounts

When you become a client, our app at app.nordspike.com asks you to connect the marketing accounts we will run for you. With Google, you sign in and choose which accounts to share. We request only the access needed to link your Google Ads, Analytics, Tag Manager, Merchant Center and Business Profile to Nordspike's own manager accounts, to read their results, and to do the work you hired us for.

We use this data only to provide the services you signed up for and to show you your own results. We do not sell it, use it for advertising to anyone else, or use it to train general AI models. People at Nordspike see it only to deliver your service, with your consent, for security, or when the law requires it.

Access tokens are encrypted and stored in the European Union. You can remove our access at any time in your Google Account (myaccount.google.com/permissions), in the platform's own settings, or by emailing us. We delete stored tokens within 30 days after you disconnect or your contract ends.

Nordspike's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies & Tracking

Nothing that tracks you loads until you say yes in the cookie banner. Without a yes we use two small cookies of our own: ns_consent remembers your choice (180 days), and ns_exp keeps the same version of the homepage for the length of your visit. Vercel Web Analytics and Speed Insights count visits and page speed without cookies, and when you open a form, Cloudflare Turnstile checks that you are not a bot.

If you say yes, we also load Google Tag Manager with Google Analytics 4 and the Meta pixel (to measure visits and our ads) and Leadsy (which identifies the companies, and where possible the people, who visit our site). We then remember the campaign link you arrived from (ns_utm_v1) so a booking carries its source, and ns_exp stays for 180 days. When you then book a call or request an audit, our server also sends Meta a hashed copy of your email (and phone, if given) so we can tell which ads work.

You can change your mind at any time with Cookie settings at the bottom of every page. A no after a yes deletes the cookies the tags set.

Contact & Data Requests

For privacy-related questions or to exercise your data rights, contact us at info@nordspike.com or write to Nordspike OÜ, Tallinn, Estonia.

We will respond to your requests within 30 days as required by applicable law.