Privacy Policy

This Privacy Policy explains how Alpha Four Media, LLC collects, uses, and shares personal information when you use the Service. It applies to nothingheldback.com, the NHB app, and any other product that links to this policy.

Information we collect

Account information: name, email, password (stored hashed), profile photo, plan tier, and the answers you give during onboarding.

Content you create: forum posts, comments, replies, reactions, bookmarks, watch history, files you upload, and messages you exchange with other members or with us.

Billing information: we use a third-party processor (Stripe) for payments. We receive transaction metadata (amount, currency, plan, status) and the last four digits and brand of your card. We do not store full card numbers. For fraud prevention, risk scoring, and regulatory compliance, Stripe also acts as an independent controller of the payment data it collects directly from you — for that purpose, Stripe determines its own uses of that data under its own privacy policy, rather than acting only on our instructions.

Usage information: device type, browser, IP address, pages and videos viewed, timestamps, referrer, and app crash diagnostics. We use this to operate the Service, improve features, and prevent abuse.

Communications: emails, support tickets, and survey responses you send us.

How we use information

• Operate, maintain, and personalize the Service
• Process payments and manage subscriptions
• Send transactional and account-related messages (security alerts, receipts, changes to terms)
• Send product updates, education content, and offers (you can unsubscribe anytime)
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms
• Measure and improve performance, content, and design

How we share information

We share information with vendors that operate the Service on our behalf, including hosting (Vercel, Supabase), email delivery (Resend), payment processing (Stripe), video hosting (Bunny.net), background jobs (Inngest), product analytics (PostHog), error monitoring (Sentry), support chat (Intercom), a feedback widget used on staff-facing surfaces (Userback), infrastructure logging (Axiom), affiliate and referral attribution (Everflow), and, while it remains active, our legacy checkout provider (ThriveCart). These vendors only handle data they need to perform their function and are bound by confidentiality and data-protection obligations.

If you search for a GIF in chat, the text you search for is sent to Giphy to return results. Giphy is a separate service with its own privacy practices.

We share information with other members when you intentionally make it visible (for example, a forum post or your public profile). We may disclose information when required by law, when needed to protect the rights, safety, or property of NHB, our members, or the public, or in connection with a merger, acquisition, or asset sale (with notice where legally required).

We do not sell your personal information.

AI processing

When you use live dictation, audio is streamed to our speech provider to make text. NHB does not store dictation audio.

We use an AI provider (Anthropic) to process certain member content on our behalf and power features like Catch Up, Pulse, and coach briefs. This includes member chat messages and Fast Feedback submissions, which Anthropic processes to generate the summaries those features show you. We do not permit this content to be used to train Anthropic's models.

Cookies and similar technologies

We use cookies and similar technologies for authentication, session management, security, preferences, and analytics. See our Cookie Policy for the categories of cookies we use and how to control them.

Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. You can exercise most of these rights from your account settings, or by emailing us.

To make a privacy request, email privacy@nothingheldback.com. We may need to verify your identity before acting on the request.

Data retention

We keep account information for as long as your account is active and for a reasonable period after, to comply with legal, tax, and accounting obligations and to defend against claims. We delete or anonymize personal information when it is no longer needed for these purposes.

International transfers

We're based in the United States, and our vendors operate from multiple regions. By using the Service, you understand that your information will be processed in countries other than your own, including countries that may not provide the same level of data protection as your home country.

Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us so we can remove it.

Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information. No system is perfectly secure, so we cannot guarantee absolute security. Use a strong, unique password and enable any available account-protection options.

Changes to this policy

We may update this Privacy Policy from time to time. If a change is material, we'll let you know via email or an in-app notice. The "effective date" at the top of this page reflects the latest version.

Contact

Privacy questions or requests: privacy@nothingheldback.com. General contact: support@nothingheldback.com.