Privacy Policy

Nerdy Works ("we", "us") operates the Toolkit, a widget management platform at toolkit.nerdyworks.com. This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

• Account information. When you create an account or sign in, we collect your name and email address. Passwords are stored only as one-way encrypted hashes.
• Facebook Login. If you choose to sign in with Facebook, we receive your name, email address, and public profile information from Meta, and use it to create and authenticate your Toolkit account.
• Widget data. Contact forms embedded on client websites collect the name, email address, and message that visitors submit. Instagram widgets store the access tokens needed to display connected feeds.
• Technical data. Our servers keep basic operational logs (such as request times and error diagnostics) to keep the service reliable.

How we use information

• To create and authenticate your account, including via Facebook Login.
• To operate the widgets: delivering contact-form submissions to the site owner's email and displaying connected Instagram feeds.
• To send service and notification emails related to your widgets.
• To maintain, secure, and improve the Toolkit.

How we share information

We do not sell your personal information. We share data only with the service providers needed to operate the Toolkit:

• Meta Platforms, Inc. — when you use Facebook Login or connect an Instagram account, the relevant data is exchanged with Meta under their terms.
• Mailgun. — we use Mailgun to deliver contact-form notification emails on behalf of site owners.

We may also disclose information if required by law.

Data security and retention

Passwords are hashed with bcrypt and never stored in plain text. Access tokens are stored on our own servers and are never exposed in embed codes served to the public. We retain widget and account data for as long as your account is active, and delete it upon verified request.

Your rights and data deletion

You may request access to, correction of, or deletion of your personal information at any time by emailing [email protected]. To delete data associated with Facebook Login, email us from the address on your account and we will remove your Toolkit account and its data within 30 days and confirm by reply.

Children's privacy

The Toolkit is a business tool and is not directed at children under 13. We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent revision.

Contact

Questions about this policy: [email protected].