NestivePrivacy policy
Last updated October 1, 2026
Nestive builds software for independent RIAs. Your firm's client data belongs to your firm. We use it only to run Nestive for you, we never sell it, and our staff can't browse it.
Who we are
Nestive LLC ("Nestive," "we") operates nestivehq.com (the "Site") and the Nestive application at app.nestivehq.com (the "Service"). Questions about this policy: admin@nestivehq.com.
Two kinds of information
Information about you when you visit the Site, contact us, or use the Service as a user: your name, work email, firm, role, and what you tell us. We decide how this is used, as described below.
Customer Data: the information a firm puts into or connects to the Service, such as households, client contact details, accounts, tasks, notes, and data synced from the firm's CRM or custodian. The firm owns Customer Data and decides how it is used. We process it only on the firm's behalf and under our agreement with the firm, including our Data Processing Agreement. If you are a firm's client, contact that firm about your information.
What we collect
- Contact form: the name, email, firm, role, systems, and message you send us.
- Account information: users' names, work email addresses, roles, optional profile photos, and the firm's name and logo.
- Sign-in and security records: session records (including browser type and IP address) and an audit log of changes, so firms can see who did what.
- Customer Data, as described above. We store only the last four digits of account numbers.
- Billing information, once billing begins, handled by our payment processor. We don't store full card numbers.
How we use it
- To provide, secure, maintain, and support the Service.
- To send sign-in links, invitations, and messages about your account.
- To reply to inquiries you send us.
- To bill firms for their subscription.
- To meet legal obligations and protect the Service and its users.
We do not sell personal information or Customer Data, use it for advertising, or use Customer Data to train artificial-intelligence models.
Who can see Customer Data
Only the people a firm invites. Each firm's data is separated inside the database itself. Nestive staff cannot browse a firm's client records; if support ever requires it, access needs a written reason, expires after 30 minutes, and is recorded in the firm's activity log.
Service providers
We use a small number of providers to run Nestive, under contracts that require them to protect the information:
| Provider | What they do |
|---|---|
| Vercel | Hosts the Site and the Service |
| Neon | Database hosting |
| Resend | Delivers sign-in, invitation, and contact-form emails |
| Stripe | Payment processing (once billing begins) |
Connections a firm chooses to set up, such as its CRM or custodian, exchange data with those systems on the firm's instructions. We may disclose information if required by law or to protect the rights, safety, or security of users or the Service. If Nestive is ever involved in a merger or acquisition, information would transfer under the same protections.
Cookies
The Service uses only the cookies needed to keep you signed in securely. We don't use advertising or third-party tracking cookies.
Security
Data is encrypted in transit. Logins to connected systems are stored encrypted. Access is by invitation, with single-use email sign-in links and sessions that expire after 30 days without use. If we learn of a security incident affecting a firm's Customer Data, we will notify the firm without undue delay and within 72 hours.
Retention and deletion
We keep information while an account is active. When a firm cancels, it can export its data; we delete Customer Data within 30 days of the firm's request or the end of the subscription, except where we must keep records by law. Backups expire on a rolling schedule. Contact-form messages are kept as long as needed to respond and follow up.
Your choices
You can ask us to access, correct, or delete information about you by emailing admin@nestivehq.com. For Customer Data, we'll work with the firm that controls it.
Children
The Service is for businesses and isn't directed to children under 13. We don't knowingly collect their information.
Changes
If we change this policy, we'll update the date above and, for material changes, notify firm administrators by email.