Privacy Policy

This Privacy Policy explains how Nanon.io ("Nanon", "we", "us") collects, uses, and protects information across our products — Hyrables (recruitment), Ruan (marketing), and Alvis (no-code apps) — together, the "Services". Each product runs on its own subdomain of nanon.io. Where a section applies only to a particular product, we say so.

Information we collect

• Account information — your name and email, provided via our authentication provider (Clerk) when you sign up.
• Workspace & product data — the information you add to your workspace so the product can do its job: candidates and jobs in Hyrables; brand, audience, and content in Ruan; the data, pages, and apps you build in Alvis — including any files you upload.
• Connected accounts — when you connect a third-party account (for example a Facebook Page or Instagram account in Ruan), we receive access tokens and basic account details. Access tokens are encrypted at rest and used only to perform the actions you request.
• Content & usage data — the records, posts, schedules, metrics, and product-usage information generated as you use the Services.

How we use information

• Operate and provide the Services you ask for.
• Publish to and read insights from any accounts you connect.
• Provide AI features (parsing, generation, analysis, and app building).
• Billing, support, security, and improving the Services.

Data from Meta platforms

For products that connect to Meta (Facebook and Instagram) — currently Ruan — we access only what you authorize (for example your Pages, the ability to publish content, and post insights). We use this data solely to provide the features you request within the product. We do not sell it, and we do not use it for advertising unrelated to your own campaigns. Our use complies with the Meta Platform Terms and Developer Policies.

Service providers we share data with

• Clerk — authentication.
• MongoDB / our hosting providers — data storage & hosting.
• Meta and other platforms — to publish and read analytics you authorize.
• AI providers (e.g. OpenAI, Anthropic, and others) — to power AI features from your prompts and data.
• Stripe — subscription billing.
• Resend — transactional email.

These providers process data only to perform services for us, under their own terms and safeguards.

Data retention

We keep your data while your account is active. You can delete content, disconnect accounts, or request full deletion at any time — see Data Deletion. Disconnecting a connected account revokes and removes its stored tokens.

Security

Access tokens and secrets are encrypted at rest; all data access is scoped to your workspace and authorized per request. No method of transmission or storage is 100% secure, but we work to protect your information.

Your rights

You may access, correct, export, or delete your data. Contact us to exercise these rights. Depending on your location, additional rights (GDPR/CCPA) may apply.

Children

The Services are not directed to children under 13 (or the minimum age in your region).

Changes

We may update this policy; we'll revise the "Last updated" date above.

Contact

Questions or requests: privacy@nanon.io, Nanon.io.