NodebrushBot is the program Nodebrush AB uses to read company websites, to find companies to offer help with their website. On a company's contact, team or about page it can store the name, role and work email address of a person the company publishes there.
Controller
Nodebrush AB, organization number 559440-2827, Bräcke Ödsmål 2, 457 41 Fjällbacka, Sweden, support@nodebrush.com. When a company that uses the Nodebrush app writes, that company is the controller for its own mail and is named in it, and Nodebrush AB processes the data on its behalf.
Purpose
The data is used to write to the company about its website, at an address it publishes for contact. The legal basis is legitimate interest (GDPR article 6.1 f), in offering a company a service at an address it published for that.
Data and Source
A person's name, role and work email address, as the company's own website publishes them on its own domain. That website is publicly accessible. If you reply, your reply is kept as well.
Recipients
The data is stored in the EU, with the companies listed under Infrastructure on our sub-processors page. Your address and any reply you send are also held by the email provider of the company that writes to you. For Nodebrush, that is Microsoft 365. Microsoft Corporation, in the US, is certified under the EU–US Data Privacy Framework, which the European Commission found adequate in decision 2023/1795.
We may use AI tools from Anthropic in the US to help draft the emails we send to your company. Anthropic may then receive your name, role and work email address, and any reply you send. Under our agreement, Anthropic may use these details only for that work, and never to train AI models. Anthropic is not covered by an EU adequacy decision, so your details are protected there by the EU Standard Contractual Clauses (GDPR Article 46(2)(c)), which are part of Anthropic's Data Processing Addendum.
Retention
A name and an address are deleted 30 days after they were found if no mail was sent, and 12 months after the last mail or reply if one was. An address that objected or bounced is kept on a list of addresses we never write to, for as long as we write to companies.
Your Rights
You can ask for access to the data about you, and have it corrected, erased or its use restricted, by writing to support@nodebrush.com. You can also complain to Integritetsskyddsmyndigheten at imy.se.
Right to Object
You can object to this use of your data at any time, by answering the email or by writing to support@nodebrush.com. Your address is then kept only on a list of addresses we never write to, and everything else about you is erased.
Blocking
Add these two lines to your site's robots.txt and NodebrushBot stops reading the site from its next visit.
User-agent: NodebrushBot Disallow: /
