Privacy Policy

Last Updated October 22, 2026

1. Purpose and Scope

Welcome to Nowmade LLC ("Company," "we," "us," or "our"). This Privacy Policy ("Policy") outlines how we collect, use, share, and protect your personal information when you visit our website nowmade.app and any related subpages (the "Website").

This Policy applies when you:

• Visit or browse our Website.
• Engage with any features such as chat, user submissions, or electronic messaging on our Website.
• Opt into email newsletters or marketing communications.
• Purchase services, digital products, courses, or sign up for a subscription via our Website.
• Interact with our ads or marketing content on third-party websites or platforms.
• Are a studio owner who connects a Google Calendar or another calendar to Nowmade, or turns on the Nowmade calendar link.
• Are a studio owner who pays for a Nowmade plan, or a team member a studio owner has added to Nowmade.

This Policy does not cover data collected offline or via third-party websites or platforms, including affiliates or service providers.

This Policy describes our data practices. Where required by applicable law, we will obtain your consent before collecting or processing your personal information. By providing your information through forms, account registration, or purchases on our Website, you consent to the practices described in this Policy. For browsing data and cookies, please see our cookie consent preferences in Section 7.

2. Age Requirements

We do not knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, please do not submit any personal information to us. If we learn that we have inadvertently collected personal information from someone under 16, we will promptly delete it.

If you believe we have collected such information, please contact us at hello@nowmade.app.

3. Legal Bases for Processing

We process your personal information only when we have a valid legal basis to do so. Depending on the circumstances, we rely on one or more of the following:

• Contract Performance. Processing that is necessary to fulfill a contract with you, such as completing a purchase or delivering a digital product.
• Legitimate Interests. Processing that is necessary for our legitimate business interests (such as improving our Website, marketing our services, or preventing fraud), provided those interests are not overridden by your rights.
• Consent. Where you have given us clear, affirmative consent to process your data for a specific purpose, such as subscribing to a newsletter or opting into marketing communications. You may withdraw consent at any time.
• Legal Obligation. Processing that is necessary for us to comply with applicable laws, regulations, or legal processes.

4. Information We Collect

We collect various types of personal information from you, which may include:

• Personal Identifiers. Name, email address, phone number, billing/shipping address, etc.
• Financial Information. Payment details such as credit card or banking information.
• Demographic Information. Age, gender, occupation, etc.
• Internet and Device Activity. Browser type, operating system, browsing behavior on our Website.
• Authentication Data. Social media usernames, passwords, and account security data.
• Media. Photos, videos, or other media you may upload to the Website.
• Digital Product and Course Data. Course progress, completion history, and engagement data collected when you purchase a digital product, join a course, or subscribe to a membership program through our Website.
• Customer Service Records. Records of communications with our customer support team, including chat logs, emails, and phone call records.
• Calendar Data (studio owners only). If a studio owner connects Google Calendar, we receive the email address of the connected Google account, the names and colors of their calendars, and a sign-in token that lets us keep reading those calendars until they disconnect. Event titles, times, and locations are read when a page is viewed and are not stored. If a studio owner links a calendar by its private address instead, we store that address so we can read the calendar.
• Nowmade Calendar Link. If a studio owner turns on the Nowmade calendar link, we store a private web address that identifies it. The link lists the names and times of the to-dos the owner has placed in a time block.
• Billing Records (studio owners). The plan a studio owner chooses, their billing contact, and a history of payments, invoices, and failed payments. Card and bank details are entered on Stripe's secure forms and held by Stripe. We do not see or store full card numbers. We receive only the card brand, the last four digits, and whether a payment went through.
• Team Records. When a studio owner adds people who work events with them, we store each person's name, email, phone number, role, and availability, their pay rate and whether they have been paid, contracts they sign (with the date, time, IP address, and device used to sign), invoices they send, and feedback they leave after an event, including voice notes and their text transcripts.
• AI Coach Conversations (studio owners). The messages a studio owner sends to the coach inside Nowmade, the event form or contract they are working on, and any files they attach. Guest information is never included.
• Connected AI Assistants (studio owners). The name of any AI assistant a studio owner approves to work in their Nowmade account, when they approved it, and a short log of the changes it makes, such as "added a to-do."

This data is collected directly from you when you provide it (e.g., during registration or purchase) or automatically via cookies and other tracking technologies when you browse our Website.

5. Sensitive Personal Information

Some of the information we collect may be classified as "sensitive personal information" under applicable privacy laws, including:

• Financial account information (e.g., credit card or bank account numbers combined with access credentials).
• Account login credentials (usernames combined with passwords or security questions).

We use sensitive personal information only as necessary to provide the services you request, process transactions, ensure security, and comply with legal obligations. We do not use or disclose sensitive personal information for purposes beyond those permitted by applicable law. If you are a California resident, you have the right to limit our use and disclosure of your sensitive personal information. To exercise this right, please see Section 11 (Consumer Rights) below.

6. Sources of Information

Your personal information may be collected from the following sources, including, but not limited to:

• Directly from You. When you fill out forms, subscribe to services, create an account, or make purchases on our Website.
• Third Parties:
  • Payment Processors. When you make a purchase, we collect data via third-party payment gateways (e.g., Stripe, PayPal) to process your transactions.
  • Analytics Providers. Such as Google Analytics, to monitor traffic and understand how users interact with our Website.
  • Social Media Platforms. If you connect or log in using your social media accounts (e.g., Facebook, Google, LinkedIn), or if you interact with our content on social media, those platforms may share your data with us.
  • Email Marketing Platforms. We collect data through email marketing providers (Mailerlite) when you subscribe to our newsletter or download resources.
  • Advertising Networks. When you interact with our ads on third-party platforms (e.g., Google Ads, Facebook Ads), those platforms may share information on your engagement with our advertisements.
  • Fraud Prevention Services. We may receive data from third-party fraud detection and identity verification services to protect against fraudulent transactions.
  • Google Calendar. If a studio owner chooses to connect their Google Calendar, Google shares with us the calendar data described in Section 9A.
• Automated Data Collection. We use cookies, web beacons, and similar technologies to collect data on how you interact with our Website and ads, including your browsing behavior, device information, and IP address. We may also collect data through automated tools such as customer feedback tools or survey responses. For more detail on our use of cookies and tracking technologies, see Section 7 below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (e.g., web beacons, pixels) to enhance your experience and understand how you use our Website. We use the following categories of cookies:

• Strictly Necessary Cookies. Required for the Website to function properly (e.g., session management, security). These cookies cannot be disabled.
• Performance and Analytics Cookies. Help us understand how visitors interact with our Website by collecting usage data. These cookies are used to improve Website functionality.
• Functional Cookies. Allow us to remember your preferences and settings to personalize your experience.
• Advertising and Targeting Cookies. Used by us and third-party advertising partners to deliver ads relevant to your interests, both on our Website and on third-party platforms.

We also allow third-party cookies and tracking technologies on our Website to collect data about your browsing habits for marketing purposes, such as retargeting ads. These third-party services may collect information such as your IP address, device information, and browsing behavior.

The cookies and tracking technologies described in this section apply to browsing activity on nowmade.app. They are not used on the order forms guests complete at an event, and they never collect or transmit a guest's mobile phone number, SMS consent, or order information.

You can manage your cookie preferences through our cookie consent tool on the Website or through your browser settings. For information on opting out of the sale or sharing of your personal information through cookies and tracking technologies, see Section 10 (Data Sharing, Sale, and Sharing).

8. How We Use Your Information

Your personal information may be used for the following purposes:

• To personalize your experience on our Website. We use your data to tailor content, product recommendations, and resources based on your preferences and browsing history.
• To process your transactions, including payments and delivery. Your financial information is used to complete purchases, manage billing, and facilitate any necessary shipping or delivery services.
• To communicate with you about your account, purchases, or customer service inquiries. We may contact you via email or other channels to provide order confirmations, receipts, or updates on product availability or service changes.
• To deliver marketing and promotional content that may interest you. We send you relevant offers, promotions, and updates about new products, services, or events that align with your interests, based on your data.
• To comply with legal obligations and protect our legal rights. We may use your data to comply with applicable laws, regulations, and respond to lawful requests, or to enforce our Terms and Conditions and other agreements.
• To improve Website performance and develop products or services based on analytics. We analyze data on how users interact with our Website to make improvements and develop new features or services.
• To prevent fraud and protect transaction security. We use your data to detect and prevent fraudulent transactions, verify identities, and protect the security of purchases made through our Website.
• To track progress and provide feedback for online courses or membership programs. We collect and use data related to your activity in online courses or membership areas to monitor completion rates, provide feedback, and offer personalized resources or suggestions.
• To manage and administer subscription services. If you subscribe to a membership, newsletter, or service, we use your data to manage billing cycles, renewals, and account status.
• To support customer relationship management (CRM) activities. We may use your data in our CRM system to maintain customer profiles, track interactions, and deliver personalized customer support.
• To administer surveys, quizzes, or feedback forms. Your data may be used to analyze responses from surveys or quizzes you participate in to better understand your preferences and improve our offerings.
• To show a studio owner's calendars next to their own to-dos and event schedule inside Nowmade, if they choose to connect a calendar. See Section 9A.
• To bill studio owners for their Nowmade plan, including sending receipts, renewal notices, and failed-payment reminders.
• To help a studio manage its team: assigning events, sending contracts and invoices for signature, sending event emails and reminders, and collecting feedback after an event. These emails contain event details only, never guest information or contract text.
• To provide the coach inside Nowmade, which suggests changes to an event form or contract draft when a studio owner asks.
• To manage and optimize advertising campaigns. We may use data collected from cookies and analytics tools to create more relevant ad campaigns and optimize ad targeting strategies across social media or search engines.
• To generate testimonials or case studies for marketing purposes. If you have shared positive feedback or testimonials with us, we may use that information (with your consent) to create case studies, testimonials, or other promotional materials.

None of the purposes described in this section are carried out using mobile phone numbers or SMS consent data. That information is used only as described in Section 9 (Text Messages).

9. Text Messages (SMS)

If a guest provides a mobile number and opts in, Nowmade sends text messages about that guest’s order. Mobile phone numbers and SMS consent are never shared, sold, rented, or traded with any third party or affiliate for marketing purposes. Mobile information collected for text messaging is used solely to deliver the messages the guest opted in to receive. It is not passed to any email marketing platform and is not disclosed to any party other than the messaging provider that physically delivers the message. How consent is collected. In person, at a studio’s event table. The guest completes an order form on their own device and separately ticks an optional checkbox agreeing to receive text updates. The box is never pre-ticked, and consent is never required to place an order or make a purchase. We record the date, time, and the exact wording the guest agreed to. What we send. Messages relate only to that guest’s own order — that it is ready for collection, or that there is a short delay. Up to 3 messages per order. We never send marketing messages by text, and studios using Nowmade cannot write, customize, or send their own text messages through the platform. All message content is fixed by Nowmade and sent automatically based on order status. Message and data rates may apply. How to stop. Reply STOP to any message to opt out. Reply HELP for help, or email hello@nowmade.app.

Required messaging disclosures.

• Message frequency: up to 3 messages per order. Messages stop once the order is collected. There is no recurring or ongoing messaging.
• Message and data rates may apply. Nowmade does not charge guests for messages.
• Mobile information is not shared. We do not share, sell, rent, trade, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.
• Opting out: reply STOP to any message. Reply HELP for help, or email hello@nowmade.app.

9A. Google Calendar Connection and Calendar Links

This section applies only to studio owners (businesses that use Nowmade) who choose to connect a calendar. Guests who order at an event are never asked to connect anything, and we collect no Google data from them.

What we ask Google for. If a studio owner chooses Connect Google Calendar, Google asks them to approve read-only access. We request two permissions: to see the list of their Google calendars, and to see the events on those calendars. We also receive the email address of the Google account, so we can show which account is connected. We never create, change, or delete anything in their Google Calendar.

How we use it. We use this information only to show the owner's calendar events next to their own to-dos and event schedule inside Nowmade, for the calendars they choose to show. Event titles, times, and locations are read when a page is viewed and are not stored. We store the calendar names, the email address of the connected account, and a sign-in token that lets us keep reading until the owner disconnects. The token is kept on our server only. It is not visible in the owner's browser and other studios cannot reach it.

What we do not do. We do not use Google data for advertising. We do not sell it. We do not let people read it except as needed to provide this feature or where the law requires. We do not use it to develop, improve, or train generalized AI or machine-learning models. We do not provide Google Calendar data to any AI assistant that a studio owner connects to their Nowmade account.

Disconnecting. An owner can disconnect Google at any time in Nowmade, under Tools and then Integrations, or at myaccount.google.com/permissions. When they disconnect in Nowmade, we revoke our access at Google and delete the stored token.

Google API Services User Data Policy. Nowmade's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Calendars linked by address. A studio owner can instead link any calendar, such as Outlook or Apple, by pasting its private link. We store that link on our server only, use it to read that calendar, and delete it when the owner removes it.

The Nowmade calendar link. A studio owner can turn on a private Nowmade calendar link and add it to Google Calendar or another calendar app. It lists only the names and times of the to-dos the owner has placed in a time block in Plan my day. It does not include notes, client details, or guest information. Anyone who has the link can see those names and times, so owners should keep it private. They can make a new link, which stops the old one working, or turn it off at any time under Tools and then Integrations. Calendar apps check such links on their own schedule, so changes can take several hours to appear.

10. Data Sharing, Sale, and Sharing

We are committed to being transparent about how your personal information is shared or disclosed. Your personal data may be shared with the following parties for the purposes outlined below:

• Service Providers. We may share your information with trusted third-party service providers who assist in the operation of our business, including:
  • Payment Processors. Companies such as Stripe, PayPal, or other financial institutions that handle payments securely on our behalf. Stripe processes subscription payments for Nowmade plans and receives the billing details needed to charge a studio owner.
  • Email Marketing Platforms. Services such as Mailerlite to help us manage email communications and deliver newsletters to people who have subscribed.
  • Messaging Providers. Services such as Twilio, used solely to deliver the order text messages a guest has opted in to receive. Mobile numbers are provided to this processor for delivery only and for no other purpose.
  • Email Delivery. Resend, used to send emails to a studio's team and to studio owners: event details, contracts to sign, reminders, and feedback requests. These emails never contain guest information or contract text.
  • AI and Transcription Providers. Anthropic, which powers the coach inside Nowmade, and OpenAI, which turns voice notes that team members choose to record into text. They receive only what is needed for the request: the studio owner's coach messages, form or contract draft, and attached files, or the voice recording. Guest information is never sent to either.
  • Hosting and IT Support. Web hosting services like Supabase and Cloudflare, or IT vendors responsible for maintaining our Website and ensuring its security.
  • Analytics Providers. Tools such as Google Analytics to help us understand Website performance and user behavior.
  • Fraud Prevention and Identity Verification Services. Third-party services that help us verify customer identities and detect fraudulent transactions.
  • Customer Service Platforms. Tools such as Zendesk, Gorgias, or similar platforms that help us manage customer support inquiries.
  • Reviews and User-Generated Content Platforms. Services such as Yotpo, Judge.me, Trustpilot, or similar platforms that collect and display product reviews on our behalf.
• Advertising Networks and Social Media Platforms. We may share website browsing data, such as device data and pages viewed, with advertising and social media platforms, including ad networks such as Google Ads and Facebook Ads and features such as Facebook or Pinterest Pixels or LinkedIn Insights, to measure and target ads for Nowmade. This category never includes mobile phone numbers, SMS consent data, or any information submitted on an event order form.
• Google Calendar Data. Information we receive from Google Calendar is never sold or shared with anyone else, except with our hosting providers (Supabase and Cloudflare) so that the connection can run, or where the law requires it. It is never used for advertising. See Section 9A.
• AI Assistants You Connect. If a studio owner connects an AI assistant such as Claude or ChatGPT, that assistant can read and change information in their Nowmade account at the owner's direction, for example inquiries, events, to-dos, payments, and the names and roles of team members. It never includes guests, teammates' phone numbers, emails, or addresses, or Google Calendar data. The company that provides the assistant receives what the assistant reads and handles it under its own terms and privacy policy. The owner can take that access away at any time in Nowmade.
• Legal Authorities. We may disclose your personal information when required to do so by law, regulation, or legal process, including:
  • In response to a court order, subpoena, or other governmental request.
  • To protect our legal rights, privacy, safety, or property, or that of our employees, customers, or others.
• Corporate Transactions. In the event of a merger, acquisition, restructuring, or sale of our assets, your personal information may be transferred to a third party as part of the transaction. In such cases, we will notify you of any significant changes regarding the handling of your personal information.
• Non-Personally Identifiable Information. We may share aggregated or de-identified data that cannot reasonably be used to identify you. This type of information may be shared freely with third parties for analytics, research, or marketing purposes.
• Consent-Based Sharing. In any other situation where we need to share your personal information, we will do so only with your explicit consent.

Sale and Sharing of Personal Information

We do not sell your personal information to third parties for direct financial compensation. However, we may allow certain third parties (such as ad networks or affiliate partners) to collect information about your activities on our Website through cookies or other tracking technologies. Under certain privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), this activity may be considered a "sale" or "sharing" of personal information.

"Sharing" under the CCPA/CPRA means disclosing personal information to a third party for cross-context behavioral advertising purposes, whether or not for monetary consideration. Because we use third-party advertising pixels, retargeting tools, and similar technologies, some of our data practices may constitute "sharing" under this definition.

This applies only to website browsing data collected through cookies on nowmade.app. Mobile phone numbers, SMS consent records, and personal information submitted on an event order form are never sold or shared under any definition, and are never used for cross-context behavioral advertising.

How to Opt Out of Sale, Sharing, and Targeted Advertising

You may opt out of the sale and sharing of your personal information and manage your data sharing preferences through any of the following methods:

• Click the "Do Not Sell or Share My Personal Information" link on our Website.
• Enable a Global Privacy Control (GPC) signal in your browser. We honor GPC signals as a valid opt-out request (see Section 12 below).
• Adjust your cookie preferences via our cookie consent tool or your browser settings.
• Opt out of targeted advertising by visiting https://optout.networkadvertising.org/?c=1.
• Opt out of marketing communications via the unsubscribe link in any of our emails.
• Contact us directly at hello@nowmade.app to opt out of specific types of data sharing.

Please note that once your data is shared with a third-party service provider or partner, their privacy practices and policies will apply. We encourage you to review the privacy policies of any third-party websites or services you engage with.

International Data Transfers

If you are located outside the United States, your personal data may be transferred to and processed in the United States or other countries where our third-party service providers operate. We take steps to ensure such transfers comply with applicable data protection laws, such as the GDPR, by implementing standard contractual clauses or similar legal mechanisms.

11. Consumer Rights

You have certain rights regarding your personal data under applicable privacy laws. The specific rights available to you depend on your jurisdiction.

Rights Available to All Users

• Right to Access. Request access to the personal data we hold about you.
• Right to Correction. Request correction of inaccurate or incomplete data.
• Right to Deletion. Request the deletion of your personal data (subject to legal exceptions).
• Right to Opt-Out. Opt out of the sale or sharing of your data or targeted advertising. See Section 10 for available opt-out methods.
• Right to Data Portability. Request transfer of your data to another provider in a commonly used format.

Additional Rights for California Residents (CCPA/CPRA)

• Right to Know. Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data.
• Right to Limit Use of Sensitive Personal Information. Direct us to limit the use and disclosure of your sensitive personal information to purposes necessary to provide the services you request.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
• Right to Opt Out of Sale and Sharing. Opt out of both the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising.

Additional Rights for EU/UK Residents (GDPR/UK GDPR)

• Right to Restrict Processing. Request that we restrict the processing of your personal data in certain circumstances (e.g., while we verify the accuracy of your data).
• Right to Object. Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent. Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing conducted before withdrawal.
• Right to Lodge a Complaint. File a complaint with your local data protection supervisory authority.

How to Exercise Your Rights

To exercise any of these rights, please contact us at hello@nowmade.app or use the contact methods listed in Section 16 (Contact Us) below. We will respond to verifiable requests within the timeframes required by applicable law (generally 45 days for CCPA/CPRA requests and 30 days for GDPR requests, with extensions permitted where necessary).

We may need to verify your identity before processing your request. If you use an authorized agent to submit a request on your behalf, we may require proof of authorization.

Right to Appeal

If we decline to take action on your request, you have the right to appeal our decision. To submit an appeal, contact us at hello@nowmade.app with the subject line "Privacy Rights Appeal." We will respond to appeals within the timeframe required by applicable law. If your appeal is denied, you may contact your state attorney general or applicable data protection authority.

12. Do Not Track and Global Privacy Control (GPC)

Our Website honors Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we will treat it as a valid opt-out request for the sale and sharing of personal information associated with that browser, as required by applicable law.

With respect to Do Not Track (DNT) browser signals, there is currently no industry-wide standard for how websites should respond to DNT signals. We will update this Policy if a uniform standard is adopted.

For more details on GPC, visit https://globalprivacycontrol.org.

13. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. The following general retention guidelines apply:

• Account and transaction data: Retained for the duration of your account or business relationship, plus 7 years to comply with tax, accounting, and legal obligations.
• Marketing data: Retained until you unsubscribe or request deletion.
• Analytics and cookie data: Retained for up to 14 months.
• Mobile phone numbers and SMS consent records: Retained for 3 years from the date of consent, as a record of that consent, and then deleted.
• Calendar connections: A Google sign-in token, a calendar link address, or a Nowmade calendar link is kept until the studio owner disconnects or turns it off, and is then deleted. Calendar events read from Google are not stored.
• AI assistant approvals and change log: Retained until the studio owner takes the access away or closes their account.
• Legal and compliance records: Retained as required by applicable law.

After the applicable retention period, we will securely delete or anonymize your personal data unless retention is required by law. You can request deletion of your data by contacting us, except in cases where retention is required by law.

14. Data Security

We implement appropriate technical and organizational security measures to protect your data from unauthorized access, loss, or misuse, including encryption, access controls, and secure data storage. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee the absolute security of your data. You are responsible for keeping your account credentials secure. We are not liable for any unauthorized access resulting from your failure to safeguard your login information.

15. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. The "Last Updated" date at the top of this page reflects the latest version. If material changes are made, we will notify you via email or post a notice on our Website.

Your continued use of the Website following such changes indicates your acceptance of the updated Policy.

16. Contact Us

If you have any questions, concerns, or would like to exercise your privacy rights, you can reach us using the following contact methods:

• Email: hello@nowmade.app
• Mail: Nowmade LLC, 10827 West 62nd Street, Shawnee, Kansas 66203