This Privacy Policy explains how Nymble Digital LLC ("Nymble Digital," "we," "us," or "our") collects, uses, shares, and protects information when you visit our website at nymbleone.com (the "Website") or use the NymbleOne application at app.nymbleone.com (the "App"). Together we call these the "Services."

Who we are
Information we collect on the Website
Information we collect in the App
Google user data (Gmail)
Microsoft Outlook (planned)
How we use information
Text messaging
How we share information
Service providers
Data retention and deletion
How to disconnect Google and revoke access
Security
Cookies
Children's privacy
Where we process data
Your privacy rights
Changes to this policy
Contact us

1. Who we are

NymbleOne is agency management and CRM software for independent insurance agencies. It is operated by Nymble Digital LLC, based in the United States. You can reach us at hello@nymbleone.com.

Agencies and their clients. Insurance agencies ("Agencies") use the App to manage their own clients, prospects, and policies. For that client information, the Agency decides what is collected and how it is used, and Nymble Digital processes it on the Agency's behalf to provide the App. If you are a client of an Agency that uses NymbleOne and you have a question about your information, please contact that Agency first. We will help the Agency respond.

2. Information we collect on the Website

Demo requests. When you ask for a demo, we collect what you enter in the form: your name, agency name, email, phone number, state, number of agents, current agency management system, and any notes. The request is stored in NymbleOne as a sales lead for Nymble Digital so we can follow up with you.
Emails you send us. If you write to hello@nymbleone.com, we keep your message and contact details so we can reply.
Basic technical data. Like most websites, our hosting provider automatically processes standard request information, such as your IP address, browser type, and the page requested, to deliver the site and protect it from abuse. The Website loads its fonts from Google Fonts, which receives your IP address and browser information when the fonts load.

The Website uses DotSpider, our own cookieless analytics, to count page views and demo and waitlist form submissions. It sets no cookies and stores nothing in your browser. The Website does not use advertising pixels or tracking cookies.

3. Information we collect in the App

Account and agency information. Names, work email addresses, phone numbers, roles, and agency details for the people who use the App, plus sign-in and two-factor authentication information.
Client and policy records. Information that Agencies enter or import about their clients, prospects, households, policies, tasks, and notes. This can include sensitive information such as Social Security numbers and driver's license numbers when an Agency needs them for insurance work. Those two fields are encrypted.
Communications. Text messages and calls sent or received through the App (handled by our telephony provider), including message content, call records, and voicemail, as well as emails users send from the App, so the conversation appears on the client's record.
Usage and security records. Activity logs, including an audit log of changes made in the App, and technical information such as IP address, browser, and device, used to keep accounts secure and the App working.

4. Google user data (Gmail)

NymbleOne lets each user connect their own Gmail or Google Workspace account so they can send email to clients from their own address. Connecting is optional.

What we access

When you connect Google, NymbleOne asks for only these permissions:

openid and email: your basic sign-in identity and your email address, so we know which Google account is connected.
gmail.send (https://www.googleapis.com/auth/gmail.send): permission to send email from your Gmail account on your behalf.

NymbleOne does not read, store, or scan your Gmail inbox, and it cannot see your existing messages, contacts, or other Google data. The send permission only lets NymbleOne send new messages.

How we use it

We use Google user data only to:

send the emails you write or choose to send from inside NymbleOne, and
show which Google account is connected to your NymbleOne user.

Emails you send this way are recorded in NymbleOne, on the client's record, like any other message sent from the App.

Separately, if you choose to BCC or forward a copy of an email to your personal NymbleOne logging address, NymbleOne files that copy on the client's record like any other email it receives. That works through ordinary email, not through Google API access.

What we never do with it

We never sell Google user data.
We never use it for advertising, including retargeting or interest-based ads.
We never use it to train artificial intelligence or machine learning models, whether general or our own.
We do not share or transfer it to third parties, except as needed to provide or improve the user-facing email-sending feature, to comply with applicable law, or as part of a merger, acquisition, or sale of assets, with notice to you.
Our staff do not read it unless you give us permission (for example, to help with a support request), it is needed for security purposes such as investigating abuse, or the law requires it.

Your Google access tokens are stored encrypted and are used only to send the messages described above.

NymbleOne's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Microsoft Outlook (planned)

We plan to let users connect Microsoft Outlook or Microsoft 365 in the same way. Before that becomes available, we will update this policy to describe exactly what it accesses. The same limits will apply: we will use that data only to provide the features you turn on, and we will never sell it, use it for advertising, or use it to train AI models.

6. How we use information

To provide, maintain, and support the Services, including the features Agencies and users turn on.
To respond to demo requests and questions, and to contact you about NymbleOne.
To keep the Services secure, prevent fraud and abuse, and troubleshoot problems.
To improve the Services, using App data only in ways consistent with the limits in this policy. Google user data is used only as described in section 4.
To comply with the law and enforce our agreements.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

7. Text messaging

Agencies can text their clients from the App. Texts are sent only to people who have given consent, and anyone can reply STOP to opt out or START to opt back in. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties. This does not stop us from using service providers, such as our telephony provider, that deliver messages for us.

We share personal information only:

with service providers who help us run the Services, under contracts that limit their use of it (see section 9);
within your Agency, according to the roles and permissions your Agency sets;
when you ask us to, or give your permission;
to comply with law, legal process, or a valid government request, or to protect the rights, safety, and security of our users, the public, or Nymble Digital; and
as part of a merger, acquisition, financing, or sale of assets, in which case we will give notice before your information becomes subject to a different privacy policy.

9. Service providers

We use a small number of trusted companies to run the Services. They process information only on our instructions and only to provide their service to us. They fall into these categories:

Cloud hosting and database providers for the App
Email delivery providers
Telephony, SMS, and fax providers
Website hosting and content delivery (CDN) providers, including the font service described in section 2

To find out which providers we currently use, email hello@nymbleone.com.

10. Data retention and deletion

Google tokens. We keep your Google access tokens only while your Google account is connected. When you disconnect Gmail in NymbleOne, the stored connection and its tokens are deleted.
Account and App data. We keep App data for as long as the Agency's account is active. When an Agency closes its account, or when someone with the right to ask requests deletion, we delete or de-identify the relevant data within 30 days, unless the law requires us to keep it longer.
Backups. Copies in our backups are deleted when those backups expire on their normal schedule.
Demo requests. We keep demo requests and related messages as long as needed to follow up and manage our relationship with you. You can ask us to delete them at any time.
Exporting your data. If your Agency asks, we will export its data for you free of charge, including before you close your account. To request an export, email hello@nymbleone.com.

11. How to disconnect Google and revoke access

You can stop NymbleOne's access to your Google account at any time, in either of these ways:

In NymbleOne: go to the Connected email section and click Disconnect. This deletes the stored connection and tokens.
In your Google Account: visit myaccount.google.com/permissions, choose NymbleOne, and remove its access.

To fully remove access, we recommend doing both. You can also email hello@nymbleone.com and we will disconnect it for you.

12. Security

We protect information with safeguards that include:

Encryption in transit (HTTPS) for the Website and App
Two-factor sign-in
Automatic sign-out after 30 minutes of inactivity
Encryption of Social Security numbers, driver's license numbers, and connected email tokens
Role-based access, so each user sees only what their role allows
An audit log of changes made in the App

No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a security incident that affects your personal information, we will notify you as the law requires. Our Security page describes these safeguards in more detail.

13. Cookies

The Website uses no cookies of its own, including for analytics or advertising. The App uses essential session cookies to keep you signed in and to protect your account. Because these cookies are needed for the App to work, they cannot be turned off within the App. You can clear or block cookies in your browser, but you will not be able to sign in without them.

14. Children's privacy

The Services are business tools for insurance professionals. They are not directed to children under 16, and we do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies). If you believe a child has given us personal information, contact us and we will delete it.

15. Where we process data

Nymble Digital is based in the United States, and we process and store information in the United States. If you use the Services from outside the United States, your information will be transferred to and processed in the United States.

16. Your privacy rights

Depending on where you live, you may have the right to:

know what personal information we have about you and get a copy of it;
correct information that is inaccurate;
ask us to delete your information; and
opt out of the sale of personal information or targeted advertising (we do neither).

We honor these requests for everyone, and we will not treat you differently for using your rights. To make a request, email hello@nymbleone.com. We may need to confirm your identity first. If your information is held by an Agency that uses NymbleOne, we may send your request to that Agency, since it controls that data. You may also use an authorized agent where state law allows, and you may appeal our decision by replying to our response.

17. Changes to this policy

We may update this policy from time to time. When we do, we will post the new version on this page and update the effective date at the top. If we make material changes, especially to how we use Google user data, we will give notice by email or in the App before the changes take effect.

18. Contact us

Questions, requests, or concerns about this policy or your information:

Nymble Digital LLC
United States
Email: hello@nymbleone.com

Privacy Policy

Contents