Privacy Policy

This Privacy Policy explains how Nadir Tech LLC (“Nadir,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with Comma (the “Service”). It applies to our website, applications, and APIs.

1. Information we collect

We collect the following categories of information:

• Account information. Your name, email address, password hash, and profile details.
• Content. HTML reports, comments, files, and other materials you upload to or create within the Service.
• Usage data. Log data such as IP address, device and browser identifiers, pages viewed, referring URLs, and timestamps.
• Cookies and similar technologies. See our Cookie Policy for details.
• Payment information. Processed by our payment provider; we receive limited details such as last four digits and billing country.
• Communications. Messages you send us through email or support channels.

2. How we use information

• To provide, maintain, secure, and improve the Service.
• To authenticate you and protect against fraud and abuse.
• To process payments and send transactional notices.
• To respond to support requests and communicate with you.
• To analyze usage and develop new features.
• To comply with legal obligations and enforce our Terms.

3. Legal bases (EEA / UK users)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract with you, our legitimate interests (such as securing the Service and improving it), your consent (for example, optional cookies and marketing), and compliance with legal obligations.

4. How we share information

We do not sell your personal information. We share information only:

• With service providers who process data on our behalf (for example, cloud hosting, authentication, payments, analytics, and email delivery), under written confidentiality and data-protection terms.
• With collaborators you choose. Reports, comments, and team membership are shared with the people you invite or with anyone who has the share link you generate.
• For legal reasons when we believe disclosure is required by law or to protect our rights, users, or the public.
• In a business transfer such as a merger, acquisition, or sale of assets, subject to this Privacy Policy.

5. International transfers

We are based in the United States and our service providers may be located in other countries. When we transfer personal data internationally, we use appropriate safeguards (such as Standard Contractual Clauses) where required by law.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can delete your reports and account at any time; some logs and backups may persist for a limited period before automatic deletion.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and isolated rendering of uploaded HTML in opaque-origin sandboxes. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. California residents have additional rights under the CCPA/CPRA. To exercise any right, email info@getnadir.com. We will not discriminate against you for exercising your rights.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Third-party links and content

The Service may render or link to third-party content. We are not responsible for the privacy practices of third parties.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. The “Last updated” date above indicates when this Policy was last revised.

12. Contact us

Nadir Tech LLC · Wyoming, USA · info@getnadir.com