Privacy Policy

Effective Date: March 3, 2026 Last Updated: March 3, 2026

MPCT Solutions, LLC ("we," "us," or "our") operates NurtureSync, accessible at nurturesync.io (the "Service"). This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information

When your organization administrator creates an account for you or you accept an invitation, we collect:

• Name, email address, and phone number

• Password (stored as an irreversible hash)

• Google account identifier and profile picture (if you sign in with Google)

Usage Data

We collect internal analytics on how you interact with the Service, including:

• Categories and resources you view, share, copy, download, or favorite

• Notes you create on resources

• Timestamps of your sign-in activity

Uploaded Content

You or your administrator may upload files such as profile pictures, logos, and resource attachments. These are stored securely in cloud object storage.

Organizational Data

Administrators provide organizational information including corporation and franchise names, roles, and permissions.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service

• Authenticate your identity and manage your session

• Send transactional emails (e.g., invitations, password resets)

• Generate internal usage analytics for administrators

• Process data exports requested by administrators

3. Third-Party Services

We use the following third-party services to operate NurtureSync:

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

3.1 Data Location and International Transfers

All data is hosted in the United States. Where required by law (e.g., GDPR), we rely on Standard Contractual Clauses or other appropriate safeguards for international transfers.

4. Cookies

We use strictly necessary cookies to maintain your authenticated session. Specifically, we set a single httpOnly, secure cookie containing an authentication refresh token. We do not use cookies for tracking, advertising, or analytics.

5. Data Security

We implement industry-standard security measures including:

• Passwords hashed with Argon2

• JWTs signed with Ed25519 cryptographic keys

• HTTPS encryption in transit

• httpOnly and Secure cookie flags

• Presigned URLs for secure file access

6. Data Retention

• Account data is retained for the duration of your account's existence.

• Internal analytics events are retained for up to 90 days.

• Uploaded files are retained until deleted by an administrator.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data by contacting your organization administrator

• Correct your name, email, and phone number through your profile settings

• Delete your account—contact your organization administrator to request deletion

If you signed in with Google, we may revoke our access to your Google account data upon account deletion.

California residents may request a copy of the personal information we hold about them or request deletion by contacting support@nurturesync.io. We do not ‘sell’ personal information as defined under the CCPA.

If you are unable to reach your administrator or no longer have an active organization, you may also contact us directly at support@nurturesync.io.

8. Children's Privacy

NurtureSync is not directed at children under 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last Updated" date above.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@nurturesync.io.