Privacy Policy

1. Scope

This policy applies to the hosted NestMarks websites, applications, APIs, and browser capture tools operated by Aman-INC.

2. Information we process

Account information

We process your email address, password hash, verification status, session or device tokens, and account settings. We never need your plaintext password.

Your bookmark library

We store URLs, titles, descriptions, notes, collections, tags, favorites, revisit dates, import data, and other information you add. When enrichment is enabled, NestMarks may retrieve a saved public URL to collect page metadata, favicons, or cover images.

Files and images

Uploaded or retrieved images may be stored locally or with a configured storage provider such as Cloudinary. Standard bookmark exports are generated when you request them.

Optional AI and integrations

If you enable AI-assisted organization, selected bookmark metadata may be sent to the provider identified in your settings, such as a local model, OpenAI, or Anthropic. Proposed changes require review before application. Connected services receive information only for the sync or action you authorize.

Technical information

Servers may process IP address, browser or device details, requested routes, timestamps, and error or security events. Email delivery information is processed when verification or password-reset email is enabled.

3. Why we use information

• Create and secure accounts.
• Save, enrich, organize, search, import, export, and synchronize bookmarks.
• Send requested verification, password-reset, and important service messages.
• Prevent abuse, diagnose failures, and improve reliability.
• Provide optional AI or connected features after you enable them.
• Meet legal obligations and protect users and the service.

4. Providers and sharing

Information is processed by the providers on the subprocessors page: hosting (Oracle Cloud), network and backups (Cloudflare), email (Resend), Google if you sign in with Google, Paddle if you buy Pro, and OpenAI or Anthropic only when you run AI organize. A destination you connect, such as GoalZen, receives only what you send to it. We may disclose information when required by law or during a business reorganization with appropriate safeguards.

We do not sell personal information. We do not use private bookmark URLs, notes, or browsing history for advertising, and we do not use your library to train AI models.

5. Security and retention

Hosted accounts are separated by ownership checks, and passwords are stored as hashes. Extension and device keys are stored as hashes and can be revoked. We retain account and bookmark data while the account remains active.

When you delete your account it is disabled at once and permanently erased 30 days later; signing in during those 30 days offers Restore account. Nightly encrypted backups expire automatically on a rolling schedule, so deleted data leaves backups as they age out. Limited security logs or records required by law may remain for a reasonable period. No online service can guarantee absolute security.

6. Your controls

• Edit and delete individual bookmarks, collections, tags, and notes.
• Import or export a portable browser-compatible bookmark file.
• Disable optional AI and disconnect integrations.
• Delete the hosted account and its associated library from Settings.
• Request access, correction, export, or deletion by contacting support.

See account deletion or email support@nestmarks.com.

7. Children

NestMarks is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Local minimum-age rules may be higher.

8. International processing

Hosted-service providers may process data in countries other than your own. Where required, we rely on appropriate contractual or legal safeguards.

9. Changes and contact

We may revise this policy as NestMarks and its configurable providers change. Material changes will be reflected by the updated date and, when appropriate, an in-product notice.

Privacy questions: support@nestmarks.com
Operator: Aman-INC