CompanyNerve · Legal information

Privacy policy

Last updated September 11, 2026.

Who is responsible

EXPONENTIAL EDUCATION S.R.L. is the controller of personal data used to operate CompanyNerve. Our registered office is Strada N. Istrati, No. 6, Iași, Iași County, 700460, Romania. See the legal notice for company details. Contact contact@exponentialeducation.ro for privacy questions or requests.

This policy covers our website and hosted application. Products built from the template operate under their own owners, environments, and privacy policies.

Information we use

• Website requests: our hosting provider processes technical request information, such as IP addresses, requested URLs, and browser information, to deliver the site and investigate errors or abuse. The public website has no advertising trackers or client analytics SDK.
• Account access: WorkOS processes your email address and authentication information for email-code or Google sign-in. The application stores your name, email address, and provider user ID. If you choose Google, basic identity information supports sign-in; the application does not read your Gmail or Drive content.
• Workspace activity: Convex stores memberships, roles, projects, invitations, and audit records. Inviting someone adds the email address supplied by the inviter. Members can access workspace content according to their roles; owners and administrators manage membership.
• Support: if you email us, we receive your email address, message, and any information you include. Send only what is needed to address your request.

Why we use it

We use account and workspace information to provide the service you request, on the basis of performing our agreement with you. We use technical records and support correspondence for our legitimate interests in operating and protecting the service and responding to inquiries. Where a law requires records or a response to an authority, processing is based on that legal obligation.

Account information is needed to sign in and use workspaces. You can browse the public website without an account. We do not use workspace data for advertising profiles or make solely automated decisions that produce legal or similarly significant effects on you.

Cookies and preferences

The application uses authentication cookies to maintain your session and protect the sign-in process. Choosing a design recipe stores a preference cookie. Blocking these cookies can prevent sign-in or stop your design preference from being remembered.

Service providers and payments

We use Vercel for hosting, Convex for application data, and WorkOS for authentication and email codes. Google participates when you choose Google sign-in. These services receive information needed for their respective functions. Access to GitHub or other external links is governed by those services' own privacy notices.

CompanyNerve has no live paid subscription offering at this release. Its template includes an optional Stripe billing integration. When that integration is used, the application stores customer and subscription references and billing status, not full card details. Stripe maintains its own transaction records.

Providers may process information outside the European Economic Area. Applicable data protection law requires a valid transfer mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact contact@exponentialeducation.ro for information about the arrangements relevant to your data. We do not claim that all processing stays in Romania or the European Union.

Retention, export, and deletion

Account and workspace records remain available while needed to provide the service. You can export account data and request deletion from Account settings. Workspace owners can export or delete their workspace. If you are its last owner, transfer ownership or delete the workspace before deleting your account.

Account deletion blocks application access while a background job removes the identity and profile. It does not erase content or audit records belonging to a shared workspace. Contact us if deletion does not complete or if a record requires review.

Technical logs, backups, and support correspondence have separate retention periods based on operational needs, security investigations, and any applicable recordkeeping obligations. Deleting an account does not promise immediate removal from every provider backup. Contact us for the retention information applicable to a particular record.

Your rights

Subject to the conditions in data protection law, you can request access, correction, deletion, restriction, or portability of your personal data. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Send requests to contact@exponentialeducation.ro. We may need information to verify your identity. We respond within the periods required by applicable law, normally one month; if an extension is permitted and needed, we will explain it. You can also complain to Romania's data protection authority, ANSPDCP, or to the competent supervisory authority where you live or work.

Changes to this policy

We update this page when the service or its data practices change. The date above identifies the current version. For questions, contact us by email rather than posting personal information in a public issue.