Privacy Policy

Last updated: March 29, 2026

1. Introduction

nudge.sh ("Service") is operated by Dotsquare Labs ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our SMS notification service.

2. Information We Collect

We collect the following information:

  • Phone number: Required for account creation and SMS delivery. Stored in E.164 format.
  • Email address: Optional. Used for billing receipts and account recovery if provided.
  • Command output: If you pipe output to a nudge, we temporarily store it encrypted at rest. Output is automatically deleted after 7 days, or 30 days for paid accounts.
  • Usage metadata: Timestamps, exit codes, runtime duration, and other metadata you send with nudges.
  • Payment information: Processed by Stripe. We store only your Stripe customer ID, not your card details.

3. How We Use Your Information

  • To deliver SMS notifications when your commands complete
  • To verify your phone number during registration
  • To process credit pack purchases
  • To prevent abuse and enforce rate limits
  • To provide the output viewer feature

4. Third-Party Services

We use the following third-party services:

  • Twilio: SMS delivery and phone number verification
  • Stripe: Payment processing
  • Cloudflare: DDoS protection, Turnstile bot detection
  • Sentry: Error monitoring (no personal data is intentionally sent)

5. Data Retention

  • Phone numbers and account data are retained until you delete your account
  • Command output is encrypted at rest and automatically deleted after 7 days (free) or 30 days (paid)
  • Nudge metadata (timestamps, exit codes) is retained for the lifetime of your account
  • Payment records are retained as required by law

6. Data Security

Command output is encrypted at rest using Laravel's encryption. API tokens are stored as SHA-256 hashes and can never be retrieved. All connections use TLS encryption.

7. Your Rights

You can delete your account and all associated data at any time from the dashboard settings. You can also revoke individual API tokens, which immediately stops them from working.

8. Phone Number Sharing

We never sell, rent, or share your phone number with third parties for marketing purposes. Your phone number is only shared with Twilio for the sole purpose of delivering SMS notifications you have requested.

9. Changes

We may update this policy from time to time. Significant changes will be communicated via SMS to your registered phone number.

10. Contact

For privacy-related questions, contact us at privacy@nudge.sh.