Last updated: March 28, 2026
PNMP Innovations, LLC ("we," "us," or "Nerve") operates the Nerve platform at getnerve.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Account Information: When you create an account, we collect your name, email address, and authentication credentials through our identity provider (Clerk).
Google Integration Data: When you connect your Google account, we request the following permissions:
Gmail (read-only): We access email metadata (sender, recipient, subject, date) and message content to identify action items, stale threads, follow-up needs, and relationship patterns for your daily briefings. We never send, delete, or modify your emails without your explicit approval of a specific drafted action.
Google Calendar (read-only): We access your calendar events (titles, times, attendees, descriptions) to detect scheduling conflicts, meeting preparation needs, and focus block protection. We never create, modify, or delete calendar events without your explicit approval.
Slack Integration Data: When you connect Slack, we access messages from channels and direct messages you have access to in order to cross-reference signals with email and calendar data. We never post or send messages on your behalf without your explicit approval.
Microsoft Integration Data: When you connect your Microsoft account, we access Outlook email metadata and content, and Outlook Calendar events, under the same read-only principles described above for Google. We never send, delete, or modify your Outlook emails or calendar events without your explicit approval.
AI Processing & Data Flow: Your integration data is processed by Anthropic's Claude AI via their commercial API. Here is how your data flows: (1) Nerve fetches data from your connected integrations via OAuth over encrypted HTTPS; (2) relevant data is sent to Anthropic's API for analysis; (3) Anthropic processes the data and returns AI-generated summaries; (4) Nerve stores only the AI-generated summaries and extracted metadata — not raw email bodies or full message content — in encrypted Redis storage. Per Anthropic's commercial API terms: Anthropic does not use your inputs or outputs to train their models unless you explicitly opt in (e.g., via their Development Partner Program, which PNMP Innovations has not opted into). Anthropic automatically deletes API prompts and outputs within 30 days of receipt. Your data is not shared with any other third parties for AI training purposes.
Behavioral & Usage Data: We collect behavioral signals such as feature interactions (e.g., which sections you expand, which actions you approve or dismiss, input method preferences) to silently adapt the Nerve interface to your usage patterns. This data is stored in your user-scoped account and is not shared with third parties. We also collect anonymized analytics data including page views, feature usage, and performance metrics via PostHog to improve our service.
Cookies: We use essential cookies for authentication and session management, and optional analytics cookies with your consent.
We use your information to: provide, operate, and maintain the Nerve platform; generate automated briefings and AI-powered recommendations; manage your workstreams and task tracking; process subscription payments; communicate service updates and support; comply with legal obligations.
Your data is stored using industry-standard encryption. Integration tokens are encrypted at rest. All data in transit is encrypted via TLS. We do not sell your personal data to third parties.
Nerve uses the following sub-processors to provide the Service. Each maintains industry-standard security certifications:
Clerk (authentication & identity) — SOC 2 Type II certified. Handles user authentication, session management, and identity verification.
Upstash (data storage) — SOC 2 and GDPR compliant. Provides encrypted Redis storage for user data, briefings, and application state.
Vercel (hosting & CDN) — SOC 2 compliant. Hosts the Nerve application and serves static assets.
Anthropic (AI processing) — Processes integration data via commercial API with zero-training-on-customer-data policy and 30-day automatic deletion of API inputs/outputs.
Stripe (payments) — PCI DSS Level 1 certified. Processes subscription payments. Nerve does not store credit card numbers.
PostHog (analytics) — Processes anonymized usage analytics to improve the Service.
Nerve integrates with third-party services including Google (Calendar, Gmail), Microsoft (Outlook Mail, Outlook Calendar), Slack, and payment processors (Stripe). Each integration is authorized by you and can be revoked at any time from your dashboard settings. These services have their own privacy policies which we encourage you to review.
You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"); object to or restrict processing of your data; data portability — receive your data in a structured, machine-readable format; withdraw consent at any time for consent-based processing.
To exercise any of these rights, contact us at patrick.hillstrom@pnmp-innovations.com or through your account settings.
We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we remove your personal data within 30 days, except where retention is required by law. AI-generated summaries stored in Redis have a rolling 90-day retention window and are automatically purged after that period.
In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with GDPR and applicable state breach notification laws. Notification will include the nature of the breach, the data affected, steps we are taking to address it, and recommended actions for you.
Nerve is hosted in the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to such transfer. For users in the European Economic Area, we rely on Standard Contractual Clauses or other lawful transfer mechanisms as applicable.
Nerve is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
If you have questions about this Privacy Policy, contact us at: patrick.hillstrom@pnmp-innovations.com or PNMP Innovations, LLC, New Rochelle, New York 10801.