Privacy Policy
Last updated: September 17, 2026
This Privacy Policy explains how Nitro Closing (“Nitro Closing,” “we,” “us”) collects, uses, shares, and protects information when you use our website and services (the “Service”). It applies to our public website and to the authenticated product. By using the Service you agree to the practices described here.
1. Our role: controller and processor
For information about our own visitors, account holders, and website (“Account Data”), Nitro Closing acts as a controller. For the lead, engagement, and contact data you configure the Service to collect and process on your behalf (“Customer Data”), Nitro Closing acts as a processor and you are the controller — you are responsible for the lawful basis and instructions for that processing, as described in our Terms and any data processing addendum.
2. Information we collect
- Account information. Your name, email address, company, and authentication details when you create a workspace.
- Billing information. Payment is processed by our payment provider (Stripe). We do not store full card numbers on our servers; we retain a customer reference, plan, and billing status.
- Configuration you provide. Your ICP criteria, the public LinkedIn profiles, posts, and keywords you choose to monitor, and your integration settings (e.g. Slack, webhooks, outreach tools).
- Lead and engagement data. Publicly available engagement signals (likes, comments, reposts) on the sources you monitor, and associated business contact data we enrich for matching leads (such as name, role, company, work email, and phone).
- Usage and device data. Log data, IP address, browser type, and product usage events used to operate and secure the Service.
3. How we collect engagement and contact data
Nitro Closing works only with information that is publicly visible or available through standard business-data providers. We do not require your LinkedIn password, we do not automate or operate your personal LinkedIn account, and we do not install browser extensions. Contact enrichment is performed through third-party data providers for leads that match your criteria.
Buying-intent signals. Some leads carry an indication of the business topics a professional has recently researched online. We license these signals from a data partner that observes activity across its own network of websites; we do not see the pages a person visited, only the topic, a strength rating and the date. Signals are attached to people in the United States only.
Website visitors. If you add our optional snippet to your own website, our data partner uses cookies, IP address and browser signals to associate a visit with a business professional, and we show you the identified visitors who fit your targeting. Where the partner holds no professional profile for a visitor, we may use the contact details it does hold to find that person’s public professional profile through our professional-data providers; those details are used only for that match. For that data you are the controller and we act on your instructions; you are responsible for describing this in your own privacy policy. Visitors on a connection in the EEA, the UK or Switzerland, and visitors whose browser sends a Global Privacy Control signal, are never identified.
4. AI processing
The Service uses artificial-intelligence models to score leads against the criteria you set, summarize company research, and generate outreach content such as messages and personalized openers. To provide these features, relevant data — including the business and targeting information you provide, and lead information such as names, roles, companies, and their public LinkedIn posts and comments — is processed by third-party AI providers acting as our sub-processors. These currently include OpenAI, Anthropic, and Fireworks AI (US-hosted).
Anthropic and Fireworks AI are bound by agreements that restrict them to processing the data to provide the Service and do not permit them to use it to train their models.
OpenAI. The inputs we send to OpenAI and the outputs we receive may also be used by OpenAI to develop and improve their services, including training their models. For the AI features described above, those inputs can include the business and targeting information you provide and lead information such as names, roles, companies, and public LinkedIn posts and comments.
AI-generated output (scores, summaries, and drafted messages) is probabilistic and may be inaccurate; responsibility for reviewing and using it is described in our Terms of Service. The Service does not use AI to make decisions that produce legal or similarly significant effects about individuals — AI scoring only prioritizes leads for the customer’s own review and outreach.
6. How we use information
- To provide, maintain, secure, and improve the Service.
- To qualify and deliver leads according to the criteria you set.
- To process payments, manage subscriptions, and prevent abuse.
- To send transactional messages and, where permitted, product and marketing emails (you can opt out at any time).
- To comply with legal obligations and enforce our terms.
7. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies to our processing of Account Data, we rely on: contract (to provide the Service you request); legitimate interests (to secure, operate, and market the Service, balanced against your rights); consent (for non-essential cookies and certain marketing, which you may withdraw); and legal obligation (to meet our compliance requirements). For Customer Data, the lawful basis is determined and provided by you as the controller.
8. How we share information
We do not sell your personal information. We share information only with:
- Service providers / sub-processors who process data on our behalf (e.g. hosting, database, email delivery, payment processing, data-enrichment vendors, and the AI providers named in Section 4), bound by confidentiality and data-protection obligations.
- Integrations you enable, such as sending leads to your Slack workspace, outreach tool, or an outbound webhook you configure.
- Legal and safety recipients when required by law or to protect our rights, users, or the public.
- A successor entity in connection with a merger, acquisition, or sale of assets.
A current list of sub-processors is available on request at your account manager at Nitro Closing.
8.1 Service delivery and sub-processors
Nitro Closing delivers this Service using a third-party technology platform that hosts the Service and processes data on Nitro Closing’s instructions as a sub-processor, together with the hosting, data-enrichment and payment providers described in this policy. Nitro Closing remains your point of contact for this Service and for any request relating to your data. The identity of the platform provider and a current list of sub-processors are available on request from Nitro Closing.
9. US state privacy rights
We do not “sell” personal information or “share” it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA, beyond the advertising cookies and the business visitor identification described in Section 5, which you can opt out of by choosing Reject in our cookie notice or under “Cookie settings” at the bottom of our pages. We treat a Global Privacy Control signal from your browser as an opt-out of both: when it is present, those tools do not load unless you choose Accept. If you are a California resident (or in a state with similar laws), you may request access to, correction of, or deletion of your personal information, and you will not be discriminated against for exercising these rights. To make a request, contact us at the address below.
10. Data retention
We retain information for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, subject to longer retention where required to comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements (for example, billing records kept to meet tax and accounting requirements). You may request deletion of your workspace data as described below.
11. Security
We use industry-standard safeguards to protect information, including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Data breach notification
If we become aware of a security incident affecting your personal information, we will notify affected users and, where Nitro Closing acts as a processor, the relevant controller, without undue delay and in accordance with applicable law.
13. Your rights and choices
- Access, correct, or delete your account information.
- Wipe your workspace data from within the Service settings.
- Opt out of marketing emails via the unsubscribe link or settings.
- Request that we remove a specific monitored profile or lead record.
- Withdraw consent for non-essential cookies at any time.
Depending on your location, you may have additional rights under laws such as the GDPR, UK GDPR, or CCPA/CPRA, including the right to object to or restrict processing, to data portability, and to lodge a complaint with your supervisory authority. To exercise any right, contact us at the address below; we will respond within the timeframe required by applicable law and may need to verify your identity first.
14. International transfers
We may process and store information in countries other than where you live, including the United States. Where required for transfers out of the EEA, UK, or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
15. Children
The Service is not directed to individuals under 18, and we do not knowingly collect their personal information. If you believe a minor has provided us information, contact us and we will delete it.
16. Global Privacy Control and Do Not Track
We honour the Global Privacy Control signal: when your browser sends it, the advertising and visitor-identification tools described in Section 5 do not load unless you choose Accept in our cookie notice. Some browsers also offer the older “Do Not Track” signal; because there is no common standard for how to respond to it, we do not act on that one, but you can manage tracking through the cookie and ad-platform controls described above.
17. Changes to this policy
We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, provide additional notice.
18. Contact us
Questions about this policy, a data request, or our data processing addendum? Email us at your account manager at Nitro Closing.