Legal
Nabit privacy policy
What Nabit and the Nabit Save extension collect, why, how long it is kept and the choices you have. Nabit stores only what is needed to run the features you use and does not sell user data.
Updated October 23, 2026
Your product search
Public brand suggestions come from a curated index of publicly available product information. Your own imported products and saved references stay in your private workspace. When you import a website, Nabit reads the link you provide to suggest product details for you to confirm.
Your account
Google sign-in shares your Google account identifier, verified email and display name with Nabit. These identify your account and connect your saved workspace across devices. Nabit does not receive your Google password. Google access tokens are used during sign-in and are not kept for ongoing Google access.
Storage and processing
Nabit stores your saved references, media, brands, analyses and generated videos in your workspace. Nabit Save keeps a revocable session token and your selected product in trusted local extension storage. These are not synced to browser cloud storage. Saving a reference does not trigger AI analysis, clipping or generation. When you request an image or video generation quote or confirm generation, the selected media and instructions are sent to the configured generation supplier and model service. Nabit currently uses Atlas Cloud for this processing. If a deployment has an analysis provider configured, analysis sends the reference information to that provider. Source URLs can be fetched to import your selected video.
Your choices
Guest workspaces are tied to a browser or extension session. Registering a new account from that workspace retains its content. Signing in to an existing account opens that account’s existing workspace. Sign-out revokes the current session. To export or delete your workspace, open Nabit from Nabit Save and use the workspace controls in Brand settings. Records and stored media remain until you delete the workspace; provider retention follows the provider’s policy.
Website usage measurement
Optional website measurement uses a random visit identifier to understand how people find Nabit and use its public pages and product features. It records page paths without query strings or fragments, broad traffic channels, referring hostnames, supported campaign labels, device/browser categories, country and foreground interactions. A visit expires after 30 minutes of inactivity.
When measurement is enabled, the original source can be associated with account creation, verification and the first successful product setup. Administrators can compare these milestones with confirmed payment and refund totals to understand acquisition. This attribution does not copy email addresses, names, raw IP addresses, search terms, product form content, saved media, passwords or authorization tokens.
Raw visits, events and account-source associations are held on our own server for up to 90 days. After that association expires, its acquisition source becomes unknown; necessary billing records are kept separately under their existing terms. We respect Do Not Track and Global Privacy Control browser signals. This website measurement does not monitor other sites or extension browsing.
Optional advertising measurement
If you allow advertising measurement, Nabit uses the Meta Pixel and server-side event delivery to measure supported public-page visits, completed verified registrations, checkout starts and verified subscription trials. Meta receives the event, page URL, referrer and browser/device information, and may set its own cookies to attribute visits to ads and improve campaign delivery. We do not send names, email addresses, Google account data, prompts, product descriptions, saved references or payment details to Meta. Automatic form and button tracking is disabled.
Advertising measurement is off until you allow it. You can decline or change your choice here, and Do Not Track, Global Privacy Control and disabling optional measurement take precedence. Choices are saved for six months in this browser. Meta handles data under its own privacy policy. Permitted browser context and pending delivery data are retained for up to seven days. Delivery receipts without browser payloads are retained for up to 90 days.
Public reference use
Public ad references are provided with source context for study. A reference appearing on Nabit does not verify its performance or grant rights to reuse the publisher’s footage, voice, likeness or claims. Use material and claims you have permission and evidence to use.
See how Nabit reviews references and the current plan and credit rules. For a reference-rights or account question, contact Nabit.
Nabit Assistant conversations
When you use Nabit Assistant, we store the messages and responses, the product or reference you chose as context, random session, conversation and turn identifiers, requested Agent actions, processing status and model-usage metadata. This operational conversation record is required to continue a conversation and is separate from optional website usage measurement. Conversations are kept for up to 90 days. Authorized Nabit operators may review them to diagnose failures and improve recommendation quality. Do not include confidential or sensitive personal information in a prompt. Ordinary questions use the current product workspace and reviewed references; external reference research starts only after you explicitly confirm that action. When the managed AI provider is enabled, the prompt and this bounded context are sent to the configured OpenAI API project for processing.
Limited use
Nabit uses workspace, extension and Google account information only to provide the features you request. It does not sell this data or use it for advertising targeting. Optional advertising measurement is separate and follows the choice described above. Nabit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Data use complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
Public deployments use HTTPS. Session secrets are not embedded in the extension package. Removing the extension removes its local data but does not delete your server workspace.
Third-party policies
Atlas Cloud privacy policy · Google privacy policy · Meta privacy policy
Questions about this policy
Email [email protected] to ask how a specific piece of information is handled or to request an export or deletion of your workspace data.
Related
How public references are selected, what Nabit does not claim and how to reach the team.