Privacy Policy

1. Who we are

NomadShield is operated by SwiftAppLab LLC (“we,” “us”). This policy describes how we collect, use, and share information when you use NomadShield (the “Service”). It should be read with our Terms of Service.

2. What we collect

Depending on how you use the Service, we may process:

• Account data — email, password (hashed by our auth provider if configured), legal name, former and target states, filing status, income figures you enter, mailbox details you paste, and plan flags.
• Calculator inputs — stored in your browser (and, if you save a blueprint, associated with an email).
• Workflow data — checklist progress, generated letters, presence calendar days, notes, and files you upload to the evidence vault (receipts, IDs you choose to store, etc.).
• Payment data — processed by Stripe. We receive confirmation of payment, email, plan, and a Stripe customer/session identifier. We do not receive or store full card numbers.
• Technical data — pages visited, approximate location derived from IP (see analytics), browser type, and diagnostic logs from our host.

3. How we use information

• To provide the calculator, playbooks, vault, PDFs, and paid plan access
• To process payments and prevent fraud
• To understand which pages are used (aggregated traffic via GoatCounter and Ahrefs Web Analytics)
• To secure the Service and comply with law
• To contact you about your account or a transaction if you have given us an email

We do not sell your personal information.

4. Processors and third parties

• Stripe — checkout and subscriptions. See Stripe’s privacy policy.
• GoatCounter — privacy-oriented pageview analytics (no advertising cookies). See GoatCounter privacy.
• Ahrefs Web Analytics — privacy-oriented pageview and SEO analytics (no advertising cookies). See Ahrefs Web Analytics.
• Hosting — the Service may run on Render or a similar cloud host in the United States or a region they select.
• Supabase — if configured, authentication, database, and file storage with access limited by account.

If you follow links to DMV, election, mailbox-provider, or other third-party sites, their policies apply.

5. Cookies, local storage, and analytics

We use a session cookie so you stay signed in. Calculator drafts, checklist state, and (in demo mode) almost all app data may live in your browser’s local storage or IndexedDB until you clear it. GoatCounter and Ahrefs Web Analytics count pageviews without a typical advertising cookie; they are designed to avoid identifying you across the web. You can block the scripts with a content blocker. Essential cookies for login cannot be refused if you want an authenticated session.

6. Retention

We keep account and vault data while your account is open. You may export JSON and delete your account in Settings; deletion removes our copy of your rows and stored files where the Service is configured to do so. Browser-only demo data is removed when you delete the account in that browser or clear site data. Stripe and our host may retain records required for tax, dispute, and security purposes.

7. Sharing

We share information only:

• With processors listed above, under contracts that limit their use
• If required by law, legal process, or to protect rights and safety
• In a merger, acquisition, or asset sale of SwiftAppLab LLC, with notice where required
• With your direction (for example, you download a PDF and send it to your CPA)

8. Security

We use HTTPS, hashed passwords when auth is enabled, and Stripe for cards. No method of transmission or storage is 100% secure. Do not upload documents you are not willing to store with a software vendor. Evidence vault files may include sensitive receipts and ID images you choose to add.

9. Your rights

Depending on where you live (including the EEA/UK and certain US states), you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Use Settings to export or delete your account, or contact us via swiftapplab.com. You may also lodge a complaint with a data protection authority.

10. Children

The Service is for adults (18+). We do not knowingly collect data from children.

11. International

If you access NomadShield from outside the United States, you understand that we and our processors may process information in the US or other countries with different data-protection rules.

12. Changes

We may update this policy. The “Last updated” date will change. Continued use after an update means you accept the revised policy.

13. Contact

Privacy questions: SwiftAppLab LLC · swiftapplab.com