Privacy Policy

Nerdware Tech Solutions (“we,” “us,” “our”) operates nerdwaretechsolutions.com (“the Site”). This policy explains what information we collect, how we use it, who else sees it, and the choices you have.

We try to use as little of your data as the job requires, store it as briefly as we can, and tell you the truth about who else touches it.

1. Who we are

Nerdware Tech Solutions is a software development studio based in Atlanta, Georgia. We design, build, and maintain websites, mobile apps, and back-office automation for owner-led small businesses, non-profits, and ministries.

• Entity: Nerdware Tech Solutions
• Address: 8735 Dunwoody Place, Ste N, Atlanta, GA 30350
• Contact: [email protected]

2. Information we collect

We only collect what you give us through the Site, plus the minimum needed to run it.

From the contact form

• Your name
• Your email address
• Your selected project type
• Your message
• An hCaptcha verification token (no personal data — just a signal you're human)

From the Backbone Self-Assessment widget (the slide-in dialog on most pages)

• Your email address
• The page path you submitted from (for our internal analytics)
• A timestamp of submission

Automatically, when you visit any page

• Your IP address, browser type, and request path are captured in standard server logs by our CDN (Cloudflare). These logs are retained for a maximum of 7 days for security and abuse monitoring.
• hCaptcha sets cookies on form-bearing pages for spam detection (see Section 6).
• Small flags stored in your browser's localStorage (nw_backbone_widget_dismissed_until, nw_backbone_widget_submitted) remember whether you've interacted with the assessment widget so we don't re-show it. These values never leave your browser.

LinkedIn data (if you connect via LinkedIn)

If you sign in with LinkedIn, authorize a LinkedIn integration we offer, or otherwise grant us access to LinkedIn data via the LinkedIn API, we only access the profile fields and permissions you approve during LinkedIn's OAuth consent screen. We use those fields strictly for the purpose you authorized them for (e.g., identifying you as a lead, posting content on your behalf if you requested it). We do not sell LinkedIn data, share it with advertisers, or use it for any purpose outside what we declared during the LinkedIn API approval process. You can revoke our access at any time from your LinkedIn account at Settings → Data Privacy → Permitted Services.

What we don't collect

• Payment information (handled by separate invoicing tools — Stripe, QuickBooks — covered by their own privacy policies)
• Advertising or behavioral tracking cookies
• Session recordings or heatmaps
• Information from children under 13 (see Section 7)

3. How we use your information

• Reply to your inquiry (for contact-form submissions)
• Send you the Backbone Self-Assessment and any follow-up results (for widget submissions)
• Review aggregate, anonymized usage patterns to improve the Site
• Protect against spam, fraud, and abuse via hCaptcha
• Comply with our legal obligations (e.g., responding to a lawful subpoena)

We do not:

• Sell your data to anyone, ever
• Share your data with marketing networks or data brokers
• Use your data to train AI models
• Use your data for targeted advertising

4. Third parties that process data on our behalf

A small set of vendors help us run the Site. Each receives only the data it needs to do its job.

We do not share your data with any other party except in response to a valid legal request (subpoena, court order), and we will notify you when legally permitted to do so.

5. How long we keep your information

• Contact form submissions: retained in our email inbox indefinitely unless you ask us to delete them. Web3Forms retains submission data per its own policy.
• Backbone Self-Assessment leads: stored in our internal systems for up to 24 months, unless you unsubscribe or ask us to delete sooner.
• Server logs (Cloudflare): maximum 7 days.
• LinkedIn data (if any): retained only as long as needed to fulfill the purpose you consented to, or until you revoke access.

You can ask us to delete your information at any time by emailing [email protected].

6. Cookies and local storage

We use the absolute minimum.

Cookies set by third parties on our pages

• hCaptcha sets cookies on contact-form pages for spam/bot detection. These expire when you close your browser.
• Cloudflare may set a __cf_bm cookie for bot protection. Expires after 30 minutes of inactivity.

Browser localStorage (not cookies)

• nw_backbone_widget_dismissed_until — ISO date string. Set when you dismiss the assessment widget; we re-show after 30 days.
• nw_backbone_widget_submitted — boolean. Set after you successfully submit your email to the widget; prevents re-showing on that device.

These localStorage values never leave your browser. You can clear them anytime in your browser settings.

What we don't use

• Google Analytics or similar behavioral tracking
• Advertising cookies (Meta Pixel, Google Ads, etc.)
• Session-recording tools (Hotjar, FullStory, etc.)

7. Children's privacy

The Site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has submitted information to us, email [email protected] and we will delete it.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Delete your information (subject to our legal obligations)
• Restrict or object to certain processing
• Receive your information in a portable format
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority (e.g., the FTC in the U.S., the ICO in the U.K., or your country's equivalent)

To exercise any of these rights, email [email protected] with the subject line “Privacy Request.” We will respond within 30 days.

California residents: you have rights under the CCPA. We do not sell personal information.

EEA / UK / Switzerland residents: our lawful basis for processing is either (a) your consent (form and widget submissions), or (b) our legitimate interest (server logs for security).

9. International data transfers

Our infrastructure is hosted in the United States (Hostinger VPS, Cloudflare). If you submit information from outside the U.S., it will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country. Cloudflare maintains data-processing addenda compliant with the EU Standard Contractual Clauses.

10. Security

• HTTPS (TLS 1.3) on every page of the Site
• Cloudflare WAF and DDoS protection
• SSH-key authentication for all server access (no password auth)
• Principle of least privilege for third-party integrations

No method of transmission over the internet is 100% secure. If we ever experience a data breach affecting your information, we will notify you within 72 hours of becoming aware of it.

11. Changes to this policy

We may update this policy occasionally. When we do, we'll update the “Last updated” date at the top. Material changes will be announced via a banner on the Site for at least 30 days and, if you've subscribed to anything from us, by email.

12. Contact

Questions, requests, or complaints about this policy:

Nerdware Tech Solutions
8735 Dunwoody Place, Ste N
Atlanta, GA 30350
[email protected]