‍ ‍

NURTURESYNC

PRIVACY POLICY‍ ‍

Scope of this policy: This Privacy Policy governs how MPCT Solutions, LLC collects, uses, and protects personal information in connection with the NurtureSync platform (the “Service”). It applies to organization administrators, organization users, and individual subscribers who access the Service. This policy governs only our own data practices. We do not control and are not responsible for how our client organizations handle or protect personal data on their own platforms or through their own operations.

‍ ‍

1. INFORMATION WE COLLECT

1.1 Account Information

When your organization administrator creates an account or you accept an invitation to join, we collect:

•       Name and email address

•       Phone number (if provided)

•       Password (stored as an irreversible cryptographic hash using Argon2id - we never store your actual password)

•       Google account identifier and profile picture, if you sign in with Google Sign-In

•       Organization name, role, and permissions assigned by your administrator

‍ ‍

1.2 Usage Data

We collect internal analytics on how you interact with the Service, including:

•       Categories and resources you view, share, copy, download, or mark as favorites

•       Notes you create on resources

•       Timestamps of your sign-in activity

This usage data is used to generate internal analytics for organization administrators and to improve the Service. It is not sold or shared with third parties for advertising purposes.

‍ ‍

1.3 Uploaded Content

You or your administrator may upload files such as profile pictures, organization logos, and resource attachments. These are stored securely in cloud object storage. You are responsible for ensuring that any content you upload complies with our Terms of Service and does not include protected health information, confidential data, or content you do not have the right to share.

‍ ‍

1.4 Organizational Data

Administrators provide organizational information including organization name, franchise or corporate affiliation where applicable, user roles, and permissions. This information is used solely to operate and configure your organization’s tenant within the Service.

‍ ‍

2. HOW WE USE YOUR INFORMATION

We use the information we collect to:

•       Provide, operate, and maintain the Service

•       Authenticate your identity and manage your session

•       Send transactional emails, including invitations, password resets, and account notifications

•       Generate internal usage analytics accessible to your organization administrators

•       Process data exports requested by administrators

•       Communicate with you about your account, subscription, or changes to our policies

•       Enforce our Terms of Service and protect the security and integrity of the platform ‍

We do not use your information for advertising, behavioral profiling, or any purpose beyond operating and improving the Service.

‍ ‍

3. THIRD-PARTY SERVICES

We use the following third-party services to operate NurtureSync. Each service receives only the data necessary to perform its function. We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

‍ ‍

‍ ‍

‍ ‍

4. COOKIES

We use strictly necessary cookies to maintain your authenticated session. Specifically, we set a single httpOnly, Secure cookie containing an authentication refresh token. This cookie is required for the Service to function and cannot be disabled while using the platform.

We do not use cookies for tracking, advertising, behavioral analytics, or any purpose beyond session authentication.

‍ ‍

5. DATA SECURITY

We implement industry-standard security measures to protect your information, including:

•       Passwords hashed with Argon2id (irreversible — we cannot recover your password)

•       JSON Web Tokens (JWTs) signed with Ed25519 cryptographic keys

•       HTTPS encryption for all data in transit

•       httpOnly and Secure cookie flags to protect session tokens

•       Presigned URLs for secure, time-limited file access

•       Multi-tenant data isolation — your organization’s data is logically separated from all other organizations

Important: This Privacy Policy governs only our own data security practices for the NurtureSync platform. We are not responsible for and do not control how client organizations handle or protect personal data within their own operations, systems, or platforms outside of NurtureSync.

‍ ‍

6. DATA RETENTION

We retain your personal data only as long as necessary for the purpose it was collected or as required by applicable law. Retention periods are determined based on the type and sensitivity of the data involved.

•       Account data: Retained for the duration of your active subscription

•       Internal usage analytics: Retained for up to 90 days

•       Uploaded files: Retained until deleted by an administrator or until account termination

•       Upon cancellation: Active data deleted within 31 days; backup copies deleted within 42 days. See our Cancellation and Refund Policy for full details.

‍ ‍

7. YOUR RIGHTS

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data.

•       Access your personal data by contacting your organization administrator

•       Correct your name, email, and phone number through your profile settings within the platform

•       Request account deletion by contacting your organization administrator. If you cannot reach your administrator or no longer have an active organization, contact us directly at info@nurturesync.io

If you signed in with Google, we will revoke our access to your Google account data upon account deletion.

California residents may request a copy of the personal information we hold about them, or request deletion, by contacting info@nurturesync.io. We do not “sell” personal information as defined under the California Consumer Privacy Act (CCPA).

‍ ‍

8. CHILDREN’S PRIVACY

NurtureSync is a B2B professional platform not directed at children. We do not knowingly collect personal information from individuals under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it promptly.

‍ ‍

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify platform users of material changes by email and by updating the “Last Updated” date above. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

‍ ‍

10. CONTACT US

Questions about this Privacy Policy?

Email: info@nurturesync.io

Mailing address: MPCT Solutions, LLC, Attn: Privacy, 5096 Chaise Dr., Colorado Springs, CO, USA

‍

Document Control

Version: 2.0 Last Updated: April 9, 2026   ·   Effective Date: April 9, 2026   ·   Status: Active

‍ ‍
‍ ‍

‍ ‍