Privacy Policy

In Short

Ten points that summarize the rest. The detail follows.

1. We do not sell your data to third parties.
2. Your data is encrypted and stored on AWS servers in Ireland under GDPR.
3. Our employees only access account-level details (email, login, last four digits of payment instruments). We do not access the texts you upload.
4. We do not train AI models on your data.
5. There are no backdoors into our servers.
6. Private Mode analysis leaves no trace in our database.
7. We use session cookies to keep you logged in.
8. We use Google Analytics, Facebook Pixel, and Hotjar to track anonymous feature usage.
9. We follow OWASP security standards and screen our employees.
10. We rate-limit access and require complex passwords.

1. Definitions

This Privacy Policy uses the terms defined in the EU General Data Protection Regulation (GDPR), including personal data, data subject, processing, profiling, pseudonymization, controller, processor, recipient, third party, and consent. The definitions used here follow Article 4 of the GDPR.

2. Controller

The data controller for KeywordGraph is Ways Ltd, registered in the United Kingdom (Carrwood Park, Selby Road, Leeds, West Yorkshire, LS15 4LG, Company number 05039341), trading as Nodus Labs.

3. Cookies

We use session cookies so that the system recognizes you across requests and keeps you logged in. You can disable cookies in your browser settings; this may prevent you from using parts of KeywordGraph that require an account.

4. Server Logs

Our servers log browser type, operating system, referrer, IP address, and access timestamp. We use these logs to keep the service running and to investigate abuse.

5. Registration

When you register, we store the personal data you provide (email, username, password hash) for internal use. We also record your IP address, the date, and the time of registration to prevent misuse.

6. Newsletter Subscription

If you sign up for our newsletter, we use double opt-in confirmation. We capture your IP address and registration timestamp. The data is used only to distribute the newsletter and to communicate with subscribers.

7. Newsletter Tracking

Our HTML newsletters include tracking pixels that record open rates and link clicks. We use this aggregate information to improve the newsletter.

8. Contact Forms

When you submit data through a contact form, we store the data you provide for the purpose of processing your inquiry. We do not use it for any other purpose without your consent.

9. Blog Comments

Comments posted on our blog are published with a timestamp and your pseudonym. Your IP address is logged for security purposes only.

10. Comment Subscriptions

If you subscribe to comment notifications, we require double opt-in confirmation before sending notifications.

11. Data Retention

We store personal data only as long as necessary for the stated purposes or as required by applicable law. When retention ends, we delete the data.

12. Your Rights

Under GDPR, you have the right to:

• Confirm whether we process your personal data;
• Access your stored data and the purposes of processing;
• Have inaccurate data corrected;
• Request erasure (the “right to be forgotten”);
• Restrict processing;
• Receive your data in a portable format;
• Object to processing;
• Be protected from automated decision-making;
• Withdraw any consent you have given.

To exercise these rights, email privacy@noduslabs.com or use the contact details in Section 24.

13. Job Applications

If you apply for a job at Ways Ltd through KeywordGraph, we retain your application data for the purpose of evaluating it. We delete the data two months after rejection unless a legal obligation requires longer retention.

14. Facebook Integration

Pages that embed Facebook components transmit information to Facebook when you visit, including (if you are logged in) your Facebook user ID. Facebook’s privacy policy applies: facebook.com/about/privacy.

15. Google Analytics

We use Google Analytics with IP anonymization. Cookies track access time, approximate location, and visit frequency. To opt out, install the Google Analytics opt-out add-on at tools.google.com/dlpage/gaoptout.

16. Google Ads & Remarketing

We use Google Ads conversion cookies (expiring after 30 days) and remarketing cookies to display interest-based ads across the Google network. You can manage your ad preferences at adssettings.google.com.

17. Hotjar Analytics

We use Hotjar (Hotjar Ltd, Malta) to track aggregated user behavior including clicks, scrolling, and mouse movement. Hotjar’s GDPR compliance information is at hotjar.com/legal/compliance/gdpr-commitment.

18. Payment Processing

We use Stripe via Chargebee to process payments. Personal data shared with the payment processor includes name, billing address, email, IP address, and (where required by the card network) telephone number. This data may be shared with credit agencies for identity and creditworthiness verification.

19. Legal Basis

We process personal data under GDPR Article 6(1) lit. a–f: consent, contract performance, legal obligation, vital interests, public task, and legitimate interests.

20. Legitimate Interests

Where we rely on legitimate interests, those interests are the lawful operation of our business and the well-being of our employees and shareholders.

21. Storage Period

We retain personal data for the statutory retention period applicable in each case. Once that period ends we delete the data routinely, unless ongoing contract fulfillment requires continued storage.

22. Data Provision Requirements

Some data is required by law or by contract. If you choose not to provide it, we may be unable to execute the contract.

23. Automated Decision-Making

We do not use automated decision-making or profiling.

24. Contact

For any privacy-related question, write to:

Ways Ltd
Carrwood Park, Selby Road
Leeds, West Yorkshire LS15 4LG
United Kingdom
Company number: 05039341
Email: privacy@noduslabs.com
Support portal: support.noduslabs.com