PRIVATE PREVIEW — prepared for legal and accounting review. Purchases and downloads are disabled in this build. Nothing here is a live offer.

Draft — not yet reviewed

This page is a working draft. It has not been reviewed by an attorney, and it is not a binding agreement or a final policy. It is published so that the draft can be read and corrected before launch. If something here matters to a decision you are about to make, ask me directly rather than rely on this text.

Legal · Privacy

Privacy Policy

Last updated: January 2026

NurseRoot.com (“NurseRoot,” “we,” “us,” or “our”) operates nurseroot.com (the “Service”). This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have. We comply with the California Consumer Privacy Act (CCPA), the EU/UK General Data Protection Regulation (GDPR) where applicable, and applicable US state laws.

1. Information we collect

You provide directly

  • Email address and (optional) name when you request a free guide or buy a product.
  • Calculator inputs: role, state, debt balance, interest rate. These are not financial-account credentials.
  • Payment information processed by Stripe. NurseRoot never receives or stores full card numbers.
  • Messages you send us (support, feedback, bug reports).

Collected automatically

  • Standard server logs (IP address, user-agent, request path, timestamp) used for security and rate limiting.
  • A small set of strictly-necessary cookies (see Cookies).

2. How we use your information

  • Deliver your Financial Feasibility Score and any guides you request or purchase.
  • Send transactional emails (free guide, receipts, signed download links) via Resend.
  • Process payments through Stripe.
  • Operate, secure, and improve the Service (rate-limiting, fraud prevention, debugging).
  • Comply with legal obligations.

We do not sell your personal information. We do not use your data to train third-party AI models.

3. Legal bases (GDPR)

  • Contract — to deliver the product you requested.
  • Legitimate interests — to keep the Service secure and reliable.
  • Consent — for any optional analytics or marketing emails you opt into.
  • Legal obligation — tax, accounting, and lawful requests.

4. Sharing

We share data only with the processors required to run the Service:

  • Supabase — database, storage, signed URL delivery.
  • Stripe — payment processing.
  • Resend — transactional email delivery.

Each is bound by its own Data Processing Agreement. We never sell or rent your data.

5. Data retention

  • Lead emails & calculations: retained while your account/email remains active or until you request deletion.
  • Payment records: retained for 7 years for tax and accounting (US IRS standard).
  • Server & rate-limit logs: 30 days, then aggregated or deleted.

6. Cookies

NurseRoot uses only essential cookies required for the site to function (e.g., remembering your cookie-consent choice). We do not place advertising or cross-site tracking cookies. If we add any optional analytics in the future, you will be asked for explicit consent first.

7. Your rights

  • Access, correct, or delete your data.
  • Export your data in a portable format.
  • Object to processing or withdraw consent at any time.
  • Lodge a complaint with your local data-protection authority (EU/UK users).

To exercise any right, email hello@nurseroot.com. We respond within 30 days.

8. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Payments are processed by Stripe (PCI-DSS Level 1). File downloads use short-lived signed URLs (24-hour expiry). Access to admin systems is protected by bcrypt-hashed credentials and JWT bearer tokens.

9. International transfers

Our processors operate from the United States. If you access the Service from the EU/UK, your data is transferred under Standard Contractual Clauses or equivalent safeguards.

10. Children

NurseRoot is not directed to children under 16. We do not knowingly collect their data.

11. Changes

We may update this Policy. Material changes will be announced on this page and (if you opted into emails) by email. The “Last updated” date above always reflects the latest revision.

12. Contact

NurseRoot.com — hello@nurseroot.com

Questions? Email hello@nurseroot.com or return to the homepage.