Privacy and GDPR
Set data retention, decide on optional processing such as visitor company identification, and answer access, portability and erasure requests.
Settings › Privacy (titled Privacy & GDPR) gathers what you need to run Nudge in line with data protection rules: consent, retention, optional processing, and requests from the people whose data you hold. Members with the "Edit workspace settings" permission can open it. By default, that is the Admin role.
Who is responsible for what
For the data of your visitors and prospects, your company is the data controller and Nudge processes the data on your behalf. The settings below are yours to decide. Nudge's own commitments are described on the public pages https://www.asknudge.ai/gdpr and https://www.asknudge.ai/privacy.
Consent configuration
The Consent configuration card records, for the workspace:
- Default consent text: your standard consent wording, for example "I agree that my data will be processed…".
- Privacy policy URL: the address of your privacy policy.
All the settings on this page are saved together with Save settings.
Data retention
Retention period (days) decides how long Nudge keeps the traces of visitors who never became a full contact.
Every night, Nudge automatically purges the conversations and partial leads (forms started but not submitted) older than this period. The card shows the period actually applied.
- The period can be set between 7 days and 3,650 days (10 years). A value outside this range is brought back to the closest bound.
- Until you save this setting, conversations and partial leads are kept 90 days.
Purged conversations are deleted for good. If you rely on conversation history (for example for analytics or reviews), choose a period long enough for your needs.
Model training on conversations
Allow Nudge to train a model on chat conversations is off by default. When you tick it, Nudge may use your website agent's conversations to improve its model. Conversations are pseudonymised first: email, phone, first and last name are replaced by markers. No contact data leaves your workspace. You can untick it at any time.
Identify visitors' company
Identify visitors' company is off by default. When it is on, Nudge uses the IP address of visitors to identify the company they come from, for sales purposes.
- The IP address is never stored. Only an irreversible fingerprint is kept, to avoid running the same lookup twice.
- An IP address is personal data. By enabling this option, you become responsible for disclosing it to your visitors.
When you tick the box, Nudge shows a sentence to add to your privacy policy:
We use the IP address of visitors to this site to identify the company they come from, for sales purposes (legitimate interest). The address itself is not retained.
Add it to your privacy policy before you save.
GDPR requests
The GDPR Requests card answers access, portability and erasure requests from a person whose data you hold.
Find the person
Enter the Data subject's email address and click the search button. The search is an exact match on the address: no partial matches are offered. Archived records are included, because archiving is not erasure.
Check the record
Each match shows the name, the contact number, the email and the status. Make sure it is the right person before acting.
Export or delete
- Export downloads everything Nudge holds on the contact as a JSON file (see below).
- Delete permanently erases the contact and their data, after a confirmation.
What the export contains
The JSON file is dated and self-contained. It includes the contact record, their bookings, consents, notes, activity history, chat conversations, partial form submissions, waitlist entries and the follow-up messages planned or sent to them. JSON keeps nested data such as transcripts and form answers readable, which a flat spreadsheet would lose.
Export requires the "Export contacts" permission.
What erasure does
Erasure destroys the contact record, their bookings, consents, conversations and queued messages, in a single operation. Some linked records are anonymised rather than deleted. When it is done, Nudge shows how many records were destroyed or anonymised.
- Erasure is written to the audit log.
- It cannot be undone.
- Only the Admin and Manager roles can erase a contact.
Erasing a contact in Nudge does not erase it from tools you connected, such as your CRM. Handle the request there too.