Legal
Privacy Policy
Last updated: April 15, 2026
VirtualNest ("we", "our", or "us") is committed to protecting your personal data. This policy explains what we collect, why we collect it, and how we keep it safe.
1. Data We Collect
When you create an account or use VirtualNest, we collect the following categories of data:
Account & Identity Data
- Full name and email address
- Password (stored as a hashed value — never in plain text)
- Account preferences and settings
Usage Data
- Credit balance, credit usage history, and action logs
- Tool usage activity (e.g. email extractions run, articles generated)
- Session data, IP address, browser type, and device information
- Timestamps of logins and key platform actions
Payment Data
Payment processing is handled entirely by our third-party payment provider (Stripe). We do not store your full card number, CVV, or banking details on our servers. We only receive confirmation of successful or failed transactions and a masked payment reference.
Communications Data
- Messages sent to us via contact or support forms
- Email correspondence with our team
2. How We Use Your Data
We use your data only for purposes directly related to providing and improving the VirtualNest platform:
- Service delivery: to create your account, process your credits, and operate the tools you use
- Billing: to manage subscriptions, verify payments, and issue receipts
- Platform improvement: to analyse usage patterns and improve feature performance
- Communication: to send account confirmations, security notifications, and (where opted in) product updates
- Fraud prevention & security: to detect unusual activity and protect your account
- Legal compliance: where required by applicable law
We do not sell your personal data to any third party.
3. Third-Party Services
To deliver VirtualNest's features, we work with the following trusted third-party providers. Each is bound by their own privacy standards:
OpenAI
Used for AI-powered content generation and text processing features. Input text you submit for generation may be processed by OpenAI's API. Refer to OpenAI's Privacy Policy.
DataForSEO
Used to power SEO data features including keyword research and site analysis. Queries may be forwarded to DataForSEO's API infrastructure. Refer to DataForSEO's Privacy Policy.
Stripe
Used to process all subscription and credit payments. Stripe operates under PCI-DSS compliance standards. Refer to Stripe's Privacy Policy.
Hosting & Infrastructure
Our platform runs on secure cloud infrastructure. All servers are located in data centres with appropriate physical and network security controls.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services.
- Account data is held for the duration of your account and for up to 90 days after deletion
- Payment records are retained for 7 years to meet legal and accounting obligations
- Usage and activity logs are retained for up to 12 months
- Anonymised or aggregated analytics data may be kept indefinitely
You may request deletion of your data at any time (see Your Rights below).
5. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request that inaccurate data be corrected
- Deletion: request that your account and associated data be deleted
- Portability: request an export of your data in a machine-readable format
- Restriction: request that we limit how we process your data
- Objection: object to processing based on legitimate interests
To exercise any of these rights, email us at hello@myvirtualnest.com. We will respond within 30 days.
6. Security
We take the security of your data seriously. Our measures include:
- HTTPS encryption across all pages and API endpoints
- Passwords stored using strong one-way hashing (bcrypt)
- Access controls limiting data access to authorised personnel only
- Regular security reviews of our codebase and infrastructure
- No plain-text storage of sensitive credentials
No system is 100% secure. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by applicable law.
7. Cookies
We use cookies to keep you logged in, measure performance, and understand how the platform is used. For full details, see our Cookie Policy.
You can manage your cookie preferences at any time through your browser settings.
8. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
