Legal

Privacy policy

Last updated: 4 November 2026

This policy explains how Noder ("we", "us") collects, uses and protects personal data when you use noder.ai. Noder is the trading name of NODER, a sole proprietorship registered in Singapore (UEN 53535024D). We follow Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

  • Free audit request: your business name, website, city and country, business email address, main services or products, and anything you tell us you would like to improve.
  • Instant website check: the website address you enter and the results of the check.
  • Contact form: your name and email address, and any company, website and message details you choose to share.
  • Technical data: your IP address and browser details, used by the security check on our forms to block spam. Our hosting provider also keeps short-term technical logs of requests to keep the site running and secure.

Why we use it

  • To prepare and send your audit, including the emails that confirm your details and booking
  • To reply to your enquiry and follow up on it
  • To protect our forms from spam and abuse
  • To understand how the website is used, so we can improve it

We only use your data for these purposes. If we want to use it for something new, we will ask you first. We do not sell your personal data, and we do not add you to a mailing list without your consent.

Your consent

When you submit a form, you agree to us using the details you give for the purpose of that form. You can withdraw your consent at any time by emailing hello@noder.ai. We will then stop using your data and ask our service providers to do the same. If you withdraw consent before we finish your audit or reply, we may not be able to complete it, and we will tell you if so.

Who processes it

  • Cloudflare hosts this website, runs the Turnstile security check on our forms and provides our page statistics.
  • Google Workspace stores form submissions in our business email and in a private spreadsheet that only we can access.

These providers may store or process data outside Singapore. We rely on their data protection terms to keep your data protected to a standard comparable to the PDPA.

How long we keep it

If we do not go on to work together, we delete audit requests and enquiries 12 months after our last contact. Client records are kept while we work together. Afterwards, we keep them only as long as the law requires, for example for tax purposes.

Cookies and analytics

  • We do not use advertising or tracking cookies.
  • Page statistics come from Cloudflare Web Analytics. Cloudflare says it does not use cookies or browser storage for this, does not store visitors' IP addresses and does not fingerprint visitors.
  • Cloudflare Turnstile checks that form submissions come from people, not bots. It uses technical signals such as your IP address and browser details only for this purpose. See the Turnstile Privacy Addendum.
  • Cloudflare may set strictly necessary security cookies to protect the site from bots. They are not used for advertising.
  • Your browser remembers your light or dark theme and, if you choose one, your currency on the pricing page. These settings stay on your device and are not sent to us.

The instant website check

When you run the instant check, an automated check visits public pages of the website you enter, such as the homepage, robots.txt and sitemap, in the same way a search engine would. Please only check websites you own or manage, or have permission to check.

Access, correction and deletion

You can ask to see the personal data we hold about you, how we have used it, or to correct it. You can also ask us to delete it. We will do so unless the law requires us to keep it, and we will tell you if that applies. Email hello@noder.ai. We will respond as soon as reasonably possible, usually within 30 days. If we need longer, we will tell you within that time when to expect our reply.

Client quotes and case studies

If you are a client and agree to share a quote, we publish your name, role and business only after you approve the text. You can withdraw that consent at any time, and we will remove your name.

Children

Our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you think a child has sent us their details, email us and we will delete them.

Data protection officer

Our data protection officer is Kelvin Lin. For any privacy question or complaint, email hello@noder.ai.

Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version.