1. Who we are
nabled is owned and operated by Equilibrium Software Solutions LLC ("we", "us"), which is responsible for the personal information described here. This policy covers nabled.ai, the nabled API, the nabled GitHub App and the nabled MCP server. Using nabled is also subject to our Terms of Service.
2. What we collect
Information you give us
- Account: email address, display name and password. We store passwords only as a one-way hash.
- GitHub link: if you link GitHub, your GitHub username and account ID.
- Content: projects, drafts, proposals and specs, spec review answers, comments, votes, pledges and project support.
- Messages: what you send through the contact page, with your name and email.
Payments and credits
- Stripe processes payments and holds your card details. We receive a Stripe customer reference and, for saved cards, the card brand, last four digits and expiry date, plus the status of each payment.
- We keep a ledger of your credit purchases, spending, refunds and, for maintainers, payout balances.
Collected automatically
- Technical data: IP address, browser type and request logs, used for security, rate limiting and troubleshooting.
- Connected apps: when you connect an AI assistant, its name, when you approved it and when it was last used. Access tokens are stored only as hashes.
- Usage records: records of AI model usage and cost for spec reviews and builds, which we use for billing and accounting.
3. How we use it
- To run nabled: your account, projects, voting, funding, builds, payouts and the credit ledger.
- To process payments, prevent fraud and handle chargebacks.
- To send the emails the service needs, such as email verification, a welcome message, password resets and replies to your messages. We don't send marketing email.
- To keep nabled secure, enforce our terms and comply with the law.
- To understand and improve how nabled works, using our own records. We don't use third-party analytics.
Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running a secure and working service, compliance with legal obligations, and your consent where we ask for it.
4. What's public
Projects, proposals, specs, comments, funding progress, build summaries and logs are public. Your display name appears next to your public activity, such as proposals, comments and project support. Your email address, drafts, payment details and credit balance are never shown to others. On projects with a private repository, code, branches and full build logs are visible only to that project's maintainers.
5. AI processing
nabled uses AI models from Anthropic through Anthropic's API. When you start a spec review, your title, spec and answers are sent to the model to review them and estimate the cost. When a feature builds, its spec and the project's repository are processed by an agent in an isolated environment, and the automated acceptance review sends the resulting changes to the model. Anthropic processes this data on our behalf under its commercial terms for API customers.
If you connect an AI assistant to nabled, the information it reads through the nabled MCP server goes to that assistant's provider, under your agreement with them.
7. Cookies and browser storage
nabled keeps your signed-in session in your browser's local storage, and uses session storage briefly while you link GitHub. We don't use advertising or tracking cookies. Stripe's payment form may set its own cookies to process payments and prevent fraud.
8. How long we keep it
We keep account information while your account is open. When you ask us to delete your account, we delete or anonymize your personal information within a reasonable time, except what we need to keep. That includes payment and ledger records for accounting, tax and legal obligations, and what's needed to resolve disputes, prevent fraud or enforce our terms. Public contributions to projects, such as merged code and comments, may stay on the project, attributed to a deleted user. Security logs are kept for a limited period.
9. Your choices and rights
- You can unlink GitHub from your account at any time. To change your display name or email address, contact us.
- You can disconnect AI assistants at any time from Connected apps.
- You can ask us to access, correct, export or delete your personal information, or to restrict or object to how we use it, through the contact page. We'll verify the request comes from you and reply within the time the law requires.
- Depending on where you live, for example in the EU, UK or California, you may have additional rights, including the right to complain to a data protection authority. We don't sell or share personal information for cross-context behavioral advertising, as those terms are defined in California law.
10. Security
We use HTTPS throughout, store passwords and access tokens only as hashes, limit who can access production systems, and run builds in isolated environments. No system is perfectly secure. If we learn of a breach that affects your information, we'll notify you as the law requires.
11. Children
nabled isn't meant for children. You must be at least 18, or the age of majority where you live, to use it. We don't knowingly collect information from children. If you believe a child has given us information, contact us and we'll delete it.
12. Where data is processed
We're based in the United States, and our service providers process data in the United States and other countries. Where the law requires it, we use appropriate safeguards for international transfers, such as standard contractual clauses.
13. Changes
We may update this policy. If a change is material, we'll give notice on nabled or by email before it takes effect. The effective date at the top shows when it last changed.
14. Contact
Privacy questions and requests: use the contact page, or reach Equilibrium Software Solutions LLC at essolutions.io.