Privacy Policy
Last Updated: October 10, 2026
nimtin, Inc. ("nimtin") is a Delaware corporation. Trusted collaboration is our product.
- What we do: We use your data to help Vendors, Venue Hosts, and Organizers work together.
- What we don't do: We do not sell your data.
- No sponsorship: Nothing is sponsored or paid for. nimtin earns nothing from any link.
- Your control: You control your data. Update it or delete it any time.
In this policy, "Site" means nimtin.com and our web application. "Service" means the nimtin platform and all features accessible via the Site. "You" means you as a user of the Site or Service. By using the Site or Service, you accept this Privacy Policy and our Terms of Service, and consent to our collection, use, and disclosure of your information as described here.
1. What We Collect
nimtin is designed for businesses and the people who book with them; Organizers may use nimtin as individuals. We do not knowingly collect data from anyone under 16 (you must be 18 to use the Service - see our Terms of Service). If we learn we have collected data from anyone under 16, we will delete it promptly. Contact support@nimtin.com if you believe this has occurred.
Your profile - Name, business name, email, photos, location, product categories, offerings, and social handles.
Venue photos - A Venue Host can add a photo of the person who runs the venue. We show it to vendors looking at the venue, and we leave it off the venue's public pages. When a venue's page shows the photo from its public business listing, we do not store the photo itself: we store the name the photographer published with it, and the link to their public profile, so we can show their credit beside it wherever nimtin shows the photo.
People you add to your venue account - A Venue Host can invite someone to share their venue account by typing that person's email address. We store the address, who invited them and when, and email them a link to sign in. The invite stays until they accept it, until you remove it, or until you close your account. Removing an invite, or the person, deletes the address.
Where your bills go: A Venue Host can give us one or more email addresses for its bills, such as a co-owner's or a bookkeeper's. We send a Vendor's invoices and the payment emails for events you pay for there, and a Vendor who invoices you through their own QuickBooks sends that invoice there too. Only add an address you are allowed to give us. We delete it when you close your account.
Payments and subscriptions - Bank details and Tax IDs are collected through our payment processor to handle deposits, invoices, revenue share, and subscription billing. Venue Hosts complete payout onboarding directly on the processor's platform and accept its applicable account and services terms. When a venue takes your payment on its own payment account, we share your card or bank account with that account through our payment processor so the venue can charge it. The processor is PCI-compliant and stores all card and bank details on its servers. nimtin never receives or stores your full card number, bank account number, or full SSN/EIN. If you give a PO or reference number for an event, we keep it with that event and print it on your receipt.
Business guidance - nimtin's built-in guidance remembers what you share (business facts, goals, preferences) to advise you. You can see what nimtin remembers and ask for anything to be forgotten.
What you type for nimtin to fill in - When you type a message for nimtin to act on, such as a request for caterers to quote, a reply to a request with your price and menu, a change to a night's run sheet, or the description on the New event form, we send your words, and any menu you attach to a reply, to a service that reads text to work out what you mean and fill in a card for you to check. Your words can name other people, such as the businesses you want to ask, or include an email address you paste, and those are read the same way. This includes a message you type on our homepage before you have an account: only your words are sent, never the name or email you give us. We keep nothing from that read. What we keep is what you confirm and send, which is kept like the rest of that request, quote or event, and the description you type on the New event form, which is part of your event. A menu attached to a reply is read and not kept. Screenshots of a conversation you send to write down a deal, from Instagram, WhatsApp or text, are read the same way, including the other person's name and messages in them, to fill in the card. We keep nothing of the screenshots, and none of the conversation is sent on: only the details of the event, which you check on the card before anything is sent.
Apps you connect - If you connect an app of your own to one of your businesses, we keep the name the app gave itself, where it sends you back to, which business it may use, and when it was connected, last used and disconnected. We log each thing it asks for and whether it worked, and keep the drafts it leaves in your thread. Its keys are stored only in a form that cannot be read back. To limit how often apps can sign up, we keep a keyed scramble of the network address one signed up from, never the address itself.
Texting or emailing nimtin - You can text nimtin from Messages, or email nimtin@inbox.nimtin.com, about a business you have on nimtin. We keep the number or email you write from, which business it is connected to, and what you and nimtin have written in the last 7 days, so each answer follows on from the last. If you write from the email you sign in with, it connects on its own. If you write from a phone number on your business profile, it connects on its own and we email you to say so. From any other number or email we keep nothing you wrote, only that you wrote and when, for 7 days, and send back a single-use link to connect it, which we keep only in a form that cannot be read back, beside the number or email it was sent to. We answer an email only when your email provider confirms it came from you. Of the email itself we keep who sent it (their name and address), to whom, when, and the names and sizes of any attachments. Its subject and words are kept only as part of what was written in the last 7 days, never with the email. Your texts also sit in Messages on the computer nimtin texts from.
Documents - Permits, insurance certificates, and business documents you upload to build your credentials. We track expiry dates so we can remind you to renew. Until we have confirmed your business, we also read a license, permit or insurance certificate you keep on file for your business name, the same way we read proof a venue is yours. That document stays on your profile like your other documents.
Proof your venue is yours - If we cannot confirm a venue from your email address, we ask for a document that shows the business at its address, such as a license, a utility bill or a lease. We ask for the same if you tell us a venue someone else holds on nimtin is yours. We read it automatically, with a service that reads text in documents, and compare the business name and address on it with the venue's listing. If it does not clearly match, or if someone else holds the venue, a person at nimtin looks at it. We delete the file 90 days after we decide, and keep a record of what it said and the decision.
Agreement records - When you accept a collaboration, we record the agreement you accepted (its documents and their versions), the name and role of the person accepting, the account, the date and time, and technical details of the acceptance (IP address and device information). This is the record that shows what was agreed. When you tick the box agreeing to our Terms and this policy as you sign up, we record the same: the versions you were shown, the date and time, and your IP address and device information. If you tick it before you have an account, we keep that with the email you gave us, and put a random code in a cookie on the browser you ticked it in. It is kept until it is used, and deleted after 90 days if it is not: when you sign in with that email in the same browser, it becomes your account's record and you are not asked again; anywhere else, you are asked to agree again.
Orders - If you use order forms or pre-order menus, we collect customer names, emails, and order details on your behalf.
Meetings - If you use the meeting scheduler, we store your availability and booking details.
Event inquiries - If someone sends an inquiry through a Venue Host's public event page, we collect contact details and event details (date, headcount, occasion) so the Venue Host can respond. Your email may be shared with the Venue Host for follow-up communication about your reservation, and the Venue Host may save it for future event announcements. Inquirers can request deletion via support@nimtin.com.
Venues nimtin asks for you - If you ask nimtin to find a venue for your event, we send your request to up to three Venue Hosts within about 15 miles that take private events and have room for your guests. Each receives your name, your email, the date and hours, the number of guests, your budget and what you told us about the event. We do not send your phone number or your address. Each can reply with a quote, and keeps its copy of your request, including your email, to follow up on it. When you book one, or file the same event at your own place, we tell the others the request is closed. You can ask from our homepage without an account: we send it with the name and email you give us, at most three venues for each email a day, and the first email about your request, and the one that tells you your quotes are in, each sign you in with that email, opening an account for you if you do not have one, so the request is yours. From then on its links open only for you, signed in. The box you ticked agreeing to our Terms and this policy when you sent it is your agreement, recorded on that account when you first sign in from the same browser.
Asking a business to work with you - If you ask a member to collaborate through their profile, their event ordering page or their nimtin site, we collect your name, your email, what you are asking, the timing you give and, if you are a venue, which place. The member sees your name and your ask, and your email may be shared with them so they can reply to you. A person at nimtin also sees each ask. If you are not signed in, we use your email to open an account for you, so you can follow the ask from your side. If the member says no, they can say why (that they are not free that day, or that it is not a fit), and we tell you.
Businesses that have not signed up - nimtin builds a profile for food, drink and event businesses in the areas we operate in, whether or not they have ever heard of us, so that a venue looking for a vendor is shown real options and a business that later joins arrives at a page already started. That profile is assembled from the business's own public web presence (its site, its socials, its listings), and from what the business tells us when we meet it, and it can include the business name, address, opening hours, photographs and what it sells. We also keep a record of where a business was seen trading and when, including the venue, the street address and the night, read from public community calendars that list them. There is no public page: a profile we built stays closed to the world until the business signs up and claims it, and it is not submitted to search engines before then either. The trading record, and anything still waiting in our review queue, is readable only by nimtin staff. The profile itself is not - a venue looking for a vendor can be shown the business name, what it sells, where it is based and photographs from its own website, which is the reason we build it; it is never shown your trading record. An organizer planning an event can be shown the business name too, marked as not on nimtin yet. We also look businesses up for organizers: when nobody on nimtin fits part of an event, we search public business listings with the organizer's own description of what they want, near the event, and build a profile for the business we find. We do the same for a Venue Host when nobody on nimtin does the kind of thing they want, or when they ask for more: we search for local businesses and independent performers of that kind near their venue, and build a profile for the ones we find, so they are shown real options. A performer who trades under their own name is shown by that name, the same as any business name. When a Venue Host asks one of them to collaborate, we email that business about that ask at once when the address we hold is its own, on its website's domain or published on its own website; otherwise a person at nimtin reviews the first ask to that business before anything is sent, or, with no address on file, our support team finds one. When an organizer, or the Venue Host they are booking through, asks for a business that is not on nimtin, we email that business about that one event, at the address it publishes or one we already hold for it, with a link to claim its profile. If we found that business ourselves, the first such email goes at once only when the address is its own, as above; otherwise a person at nimtin reviews it before it is sent. A Venue Host can also add a business by its Instagram handle alone and send it the ask's page themselves; when we hold no address for that business, it can type one on that page to get its sign-in link, and we keep it as the business's contact. We keep that address as a contact, and every such email has an unsubscribe link: once you use it, we will not write again. If you run a business that is in here and would rather not be, email support@nimtin.com and we will remove the profile and the trading record, and add you to a list that keeps you out of every later read of those calendars. You do not need an account to ask, and we will not ask you to make one.
Claim links - When a member invites a business that is not on nimtin, or we send a business a link to the profile we started for it, the link signs that business in with one tap, with no password. We keep the email address it was sent to, the profile it opens and when it expires (up to 90 days after we make it). The link stops working when it expires, and we keep that record afterwards.
Outbound communications - When nimtin contacts you about the platform (for example, after we've met you, after you've expressed interest, or to follow up on a prior conversation), we keep a record of what we sent and when, along with delivery and engagement events from our email service provider (whether the message was delivered, bounced, opened, or clicked). We use this to know whether our messages reached you and to avoid duplicate follow-ups. You can ask us to delete this record and to stop contacting you at any time via support@nimtin.com; we will honor the request even if you do not have a nimtin account.
Menu uploads - If a Venue Host uploads a menu, we use it to suggest event structures for their venue. Venue Hosts can remove or replace it at any time.
Location - Venue addresses and location data for discovery and matching.
Analytics - Anonymized usage data to improve the platform. No advertising, no behavioral tracking.
Support - Tickets you submit are tracked so we can follow up.
2. How We Use It
- Match Vendors with Venue Hosts and support collaborations.
- Process payments and subscriptions through our payment processor.
- Show you providers other members use.
- Power nimtin's personalized business guidance.
- Send you updates (collaboration progress, payment reminders, document expiry notices, subscription billing).
- Improve the platform using anonymized analytics.
Automated tools: We use automated tools for risk evaluation and business guidance. You can opt out of automated profiling or request a manual review at support@nimtin.com.
3. What We Share
Your business profile - When you collaborate with a Venue Host, they can see your profile information and whether your credentials (insurance coverage, permits, licenses) are current. Across nimtin, Venue Hosts see your credential status (for example, "insured" or "permit verified"). A Venue Host or Organizer you are actively working with on a collaboration can also open the credential documents you have chosen to keep on file, so they can verify them for that collaboration. You upload each document once and it is reused across your collaborations, so you do not have to re-send it each time. Only Venue Hosts and Organizers you are collaborating with can view your documents, and they are never public.
Where your event is, and what your guests need - If you are planning an event at your own home rather than at a venue, we ask for the address and for the practical detail that decides whether the night works - how the day should run, what you are providing yourselves, and how to get into the house, which is where people tell us things like a dietary restriction or that a guest needs a step-free way in. We hand that to a vendor only once you have paid the deposit that books them, and only to the vendors that deposit actually books. A vendor we have merely asked about your event is told the area and its ZIP code, the date, the role, the rate, the price range you gave for what they would bring and any note you wrote for the vendors, and nothing else - never your address and never your notes on how the day should run. If the event is at a venue, we do not give your address to anyone, because the venue's own address is the one that matters.
Public pages - If you publish a profile, website, or partner page, that content is public. Venue pages are also public. If you add other things you run (another nimtin page or a link) or what you are into, your page shows them, and we may use them to suggest people you might work with. You can change or remove them at any time.
Messages on a quote - On a quote for a private event, the Venue Host can write to the person booking and to each vendor on the package, and each can reply. Once a vendor is booked, the person booking can also write to that vendor, and the vendor can reply. Each conversation is between two parties only: the venue never sees what the person booking and a vendor write to each other, the person booking never sees what the venue and a vendor write to each other, and a vendor never sees another vendor's messages. Each message is emailed in full to the person it is for.
A deal you write down with another business - When you write down a deal you have already made with another member, such as what it is, the day, the hours and the money, and send it to them, they see it with your business name and can confirm it, ask for a change or write back. What the two of you write about it is between you only, and each message is emailed in full to the other business. If you pay the venue's space fee through nimtin, it is charged on the venue's own payment account, so the venue sees that payment there as it sees any it takes: the amount, your card's brand, last four digits and expiry, or your bank's name, routing number and last four digits, and the billing details on file, never your full card or account number. If a bank payment is returned, or a card payment is disputed and lost, the deal shows as unpaid again.
An invoice you send another business - When you send a venue an invoice on a deal it pays you on, nimtin writes it from the deal: your business's legal name and name, the venue's name, the event, the amount, what has already been paid, and when it is due. The venue sees it on nimtin and in an email, and can print it or save it as a PDF. Whether it has been paid is read from the deal's own payment record.
An invoice you send by email - You can send an invoice to anyone by giving their name and email address. We keep that name and address with the invoice and email them the invoice, from your business's name, with a link. Anyone with the link can see the invoice, save it as a PDF and pay it, by bank or card, without an account; the payment goes to your own payment account, which sees the payer's details as it sees any payment it takes. We do not connect the address to anyone's nimtin account. We keep the invoice as your payment record.
Endorsements - Shared publicly only after both sides submit, or 14 days after one side submits if the other does not. An Organizer's endorsement has no other side to wait for, so it is shown as soon as it is submitted. You choose whether to participate.
Requests after a night - After a night, the business you worked with can ask you for one specific change. You see what was asked, counted across your most recent eight reviews and never tied to who asked. You see requests whether or not you write a review yourself, and they are never public. You never see how anyone rated you.
How did it go - After a booked night you can answer Great, Fine or Problem. Your answer is not shown to the other side or on any public page. If you answer Problem, a person at nimtin is emailed the names of both businesses, the night and a link to the booking, so they can look into it. Nothing else you wrote goes with it.
Whether a night ran - The morning after a booked night, each business on it can say whether it ran. We keep your answer with the booking, with who gave it and when. It is not shown on any public page. If you say it didn't run, the other business is told first, and a person at nimtin is copied so they can help put it right. We record your answer and use it in the count of nights run or hosted on your record: a night either business says didn't run is not counted, and a night both say ran is counted.
What a business you deal with sees about your record - When you have a deal, or a proposal in progress, with another business on nimtin, that business sees one line about you on the deal: how many nights you have run or hosted on nimtin, how many with them, how many of your payments or payouts arrived on time out of how many, and the month your insurance certificate runs to. If you book as an Organizer, a Venue Host you send a request to sees how many events you have run on nimtin and how many you paid for on time. These are counts, never a rating. The nights you have run or hosted, and how many payments or payouts arrived on time, are also on your public page (see Your track record). How many were with them and your insurance month are not, and an Organizer's events and payments are never public. Your answers to How did it go are never part of them.
Saying no - When you pass on or withdraw from a proposal and pick a reason, that reason is shared with the other side. If you pass in one tap, no reason is sent, and the other side sees only that you passed. A note you add goes only to nimtin staff, by email, and is never shown to the other side. We also count how often a business passes, and why, and email nimtin staff when a pattern repeats, so we can help. A Venue Host can pause new proposals, and vendors then see that the venue is not taking them.
Your track record - Your public profile, and a venue's public page, show how many nights you have run or hosted on nimtin, from your first, how many of your payments or payouts arrived on time out of how many, and the marks you have earned from them and from introductions that led to one. They are counted only from bookings that actually ran, never name the businesses behind them, and you cannot hide them. A "Starting out" mark shows until your third collaboration, and you can hide that one. Apps that read public pages (see Apps you connect) can read your track record too.
Agreement records - The parties to a collaboration can view their agreement, and each other's acceptance details for it, at any time.
Apps you connect - From Connected apps, you can connect an app you use, such as an assistant, to one of your businesses on nimtin. Once you allow it, it can read that business's calendar and what is waiting for you, the same short summary nimtin shows you: who, what and when. It can also find other businesses and read their public pages. It can write drafts into your thread, and nothing it drafts goes anywhere until you send it. It cannot accept terms, pay or send anything. What it reads goes to that app and the company that runs it, under their terms, not ours: whether they keep it, or use it to train their own systems, is set by them and by your settings with them, and nimtin cannot see or change it. A connection lasts 90 days, or until you disconnect it in Connected apps or in the app. Connected apps shows what each app has done.
Texting or emailing nimtin - What you write and nimtin's answers are sent to a service that reads text to work out what you mean and answer you. nimtin can read your calendar and what is waiting for you, find other businesses, and draft asks and replies. A draft goes nowhere until you reply Send; then it is sent from your thread, as if you sent it in nimtin. Accepting terms and paying are never done by text or email: nimtin sends you a link. Texts travel through Apple's iMessage and emails through our email provider. Each thing nimtin does for you is logged, as an app you connect is.
When a business you work with connects an app - A business you deal with on nimtin may connect an app of its own. That app can read what the business sees about you in its calendar and what is waiting for it: your business name, and the short summary of what is between you. It reads it under that app's terms, which nimtin does not control.
Customer data - Order data from your customers is yours. We process it on your behalf and don't use it for our own marketing.
Providers - nimtin shows providers other members use. We share nothing with them.
Service providers - We work with partners to run the platform (payments, subscriptions, email, analytics, storage, search, support, conversation processing, and document reading). All partners are contractually required to protect your data.
Your own QuickBooks - If you connect your own QuickBooks (Intuit), each invoice you send through nimtin also goes to your QuickBooks: the business you invoice, its billing email, the amount, the date and what it was for. QuickBooks emails it to them, and we read back whether it was paid. We keep the keys to your QuickBooks encrypted and use them only for this. Disconnecting deletes them. Intuit handles that information under its own privacy policy.
4. Cookies and Tracking
We use cookies (small text files stored on your device) to operate the platform:
- Essential cookies - Login sessions and authentication, and the code that ties a Terms box you ticked before signing up to the browser you ticked it in (kept up to 90 days). Session cookies expire when you close your browser; authentication tokens may persist longer if you choose "remember me."
- Persistent cookies - Preferences across visits. These remain until you delete them or they expire.
- Analytics cookies - Page views, feature usage, and navigation patterns. We do not track you across other websites.
- No advertising cookies - We do not use cookies for behavioral advertising, retargeting, or ad tracking.
We also collect non-personal information from your browser (device type, browser type, referring URL, general location) to improve the Service. We honor Global Privacy Control (GPC) signals as an opt-out of data sharing.
5. Your Rights
You can access, correct, or delete your data at any time, including what nimtin remembers from your conversations. You can export your data, opt out of automated profiling, and turn off analytics.
Marketing communications: You can opt out of promotional emails via the unsubscribe link or your account settings. You will still receive transactional emails (payment confirmations, collaboration updates, document expiry reminders, subscription billing notices).
We will never treat you differently for exercising these rights. We respond to all requests within 45 days.
6. How Long We Keep It
- Active account: we keep your data for as long as your account is active.
- Closed account: you can close your account yourself from your settings. Your account keeps working for 30 days, and you can change your mind at any point in that window; after that we delete or anonymize your data, except for the records named in the bullets below: signed agreements and acceptance records, payment records, the collaborations themselves, which are kept so the people you worked with keep their own history, the name your business traded under, kept on the two closure records described below, and your email address on the do-not-email list. We show you this same list before you confirm.
- Collaboration agreements and acceptance records: kept for the life of the agreement plus the period during which the law allows contract claims, so your counterparties' records stay intact, even if you close your account earlier. An acceptance record includes the name of the person who accepted and the device and network details captured at the time; it cannot be altered or removed, by us or by you, because it is the evidence of what was agreed.
- Payment, payout, and subscription records: up to 7 years per tax and financial reporting requirements. Our payment processor retains transaction records under its own policies.
- Messages on a quote: kept with the request they were written on. If you are the person who booked and you close your account, your name and email are removed from the request, and the messages you wrote stay on it, because they are part of the other party's record of the event.
- Messages on a deal you wrote down with another business: kept with the deal, because they are both businesses' record of what was agreed.
- Invoices you send another business: kept with the deal, because they are both businesses' record of what was billed.
- Invoices you send by email: kept as payment records, for up to 7 years, with the name and email address they were sent to, because they are your record, and the person you invoiced's, of what was billed and paid. They are kept if you close your account, as other payment records are. Nothing else about the person you invoiced is kept, and their address is never added to a mailing list or matched to an account. They can ask us at support@nimtin.com to remove their name and email from an invoice that was never paid.
- Answers on whether a night ran: kept with the booking and deleted with it. If you close your account, the answer stays without your name, because it is part of the other business's record of the night.
- Customer order data: your customers' names and email addresses are removed when you close your account. The order and payment record itself is kept, without them, because it is also the venue's record of what was sold and settled on their night (export first if you need the detail).
- Apps you connect: a connection ends 90 days after you allow it, or when you disconnect it. Its record and its log are deleted 90 days after it ends. A draft it left stays in your thread until you send or dismiss it, and is deleted 30 days after. Closing the account for that business deletes all of them.
- Texting or emailing nimtin: what you and nimtin write is deleted 7 days after it is written. A link to connect a number or email expires in 30 minutes and is deleted a day after. The connection ends as an app's does: 90 days after it starts, when you disconnect it in Connected apps, or when you no longer hold that business on nimtin. After it ends we keep the number or email and which business it was for, nothing you wrote, so a disconnected number never connects again on its own; closing the account for that business deletes it. Messages on the computer nimtin texts from deletes texts after 30 days. The record of an email to nimtin (who sent it, to whom, when, and its attachments' names and sizes) is kept until you ask us to remove it at support@nimtin.com.
- Insurance records: kept for the policy duration.
- Proof your venue is yours: the file is deleted 90 days after we decide, or 90 days after you sent it if it was never decided. The record of what it said and the decision stays with the venue. When your account closure completes, we delete the file and what it said, and keep only that a document was sent and what was decided.
- Closure records: when you close your account we keep the name your business traded under, in two places and permanently. One is an exclusion list: we build profiles from public listings and community calendars, and without it the next read of those sources would add your business back under its own name within the week. The other is the closure record itself, so we can tell you what happened to your account if you ask afterwards. Neither holds anything else about you, and neither is shown to another member or on any public page.
- Do-not-email list: closing your account also puts your email address on our do-not-email list, and that entry is kept permanently. It is the only copy of your address we keep for contacting you, and it exists so that we cannot mail you again: the list is checked before every message we send, and deleting the entry would forget that you asked us to stop, so the next time your business appeared in a public listing we would write to you as though nothing had happened. The entry holds the address, that you asked us to stop, and when. It is never shown to another member, never on a public page, and never used to send you anything.
- Support tickets: anonymized 12 months after resolution, including the copy held in the tooling we use to work on them.
- A request sent from our homepage without an account: kept with the name and email it was sent with until 90 days after the event date. If nobody has signed in with that email by then, we remove the name, email, phone number, company, address, what the event was for and your notes from the request and from each venue's copy of it, and delete the sign-in links we emailed you. We keep the date, the number of guests, the area, which kinds of help were asked for and any messages on it, with no name or email on them, to count requests. We also keep the record of each email we sent you, which holds the address it went to, so we know what was sent, and any payment record, because the law and refunds need it. If you saved a card, our payment processor keeps it with your name and email, even if you never paid. When a request arrives, a copy of it, with your name, email and what you wrote, is emailed to our team's inbox; the 90-day rule does not clear that copy. You can ask us to remove them sooner at support@nimtin.com. The counts we keep to limit how often an address or an email can ask hold a keyed hash, never the address or email itself, and are deleted after two days.
- Your agreement to our Terms and this policy, ticked before you had an account: kept with the email you gave us until it is used, when you sign in with that email in the browser you ticked it in and it becomes part of your account's acceptance record, and deleted after 90 days if it is not.
- Outbound communication records (sent messages, delivery and engagement events): kept while the business relationship is active; deleted within 30 days of a request to stop contacting you via support@nimtin.com. The messages and the events go; the do-not-email entry described above is what stays, and it is what makes the request stick.
7. Security
- Data encrypted in transit and at rest.
- All payment card details handled and stored by our payment processor, never by nimtin.
- Your files are private to your account. Vendors can't see other Vendors' data.
- If a data breach affects your personal information, we will notify you as required by applicable law.
8. Third-Party Links
The Service links to third-party services (our payment processor, providers other members use, and others). We are not responsible for their privacy practices. This Privacy Policy applies only to information collected by nimtin. Review the privacy policies of any third-party services you access through nimtin.
9. Business Transfers
If nimtin undergoes a merger, acquisition, or asset sale, your personal information may be transferred. Any acquirer must honor this Privacy Policy or notify you of changes before applying different terms to your data. We will notify you via email or prominent notice on the Site of any change in ownership or use of your personal information.
10. State Privacy Rights
California (CCPA/CPRA): We do not sell or share your personal information as defined under California law. nimtin never receives or stores a full SSN or EIN. Our payment processor collects Tax IDs for identity checks, not profiling. We honor GPC signals. You can request the categories of personal information we've collected, their sources, and who we've shared them with over the past 12 months. You can ask us to delete it, and we won't treat you differently for asking.
Delaware (DPDPA): You can get a copy of your data, correct it, delete it, or opt out of targeted advertising (which we don't do). We respond within 45 days.
11. Phone Numbers and Texts
We use your number only for sign-in codes, the messages you agreed to, and to know it is you when you text nimtin. We never share it for marketing. When you agree to texts, we record when you agreed, your IP address, your browser and device details, and which version of the consent wording you saw. We send up to 30 messages a month, and message and data rates may apply. Reply HELP for help. Reply STOP to stop. Texts you send nimtin from Messages are described under Texting or emailing nimtin.
12. Changes
We'll email you or notify you in-app if this policy changes materially. Material changes take effect 30 days after notification. Continued use after that period constitutes acceptance.