Last updated: 2 November 2026
This policy explains what personal data NodusGo Inc. (“we”) processes when you visit nodusgo.com, request access, subscribe to our updates, or use NodusGO in your browser or in the NodusGO app, and what rights you have.
NodusGo Inc., registered office: 251 Little Falls Drive, Wilmington, DE 19808, United States. Mailing address: P.O. Box 423, Menomonie, WI 54751, United States. For anything about your data, write to stephan@nodusgo.com. More details are in the legal notice.
Our representative in the EU (Art. 27 GDPR): Stephan Hendriksz, Germany, stephan@nodusgo.com.
Our contact in the USA: Richard Andraschko, rich@nodusgo.com.
Letters to either go to our mailing address above.
Each customer has its own NodusGO platform. What is in it (customers and contacts, orders, service reports, timesheets, expenses, documents, employee details) is that customer’s data. We process it only on the customer’s behalf and on its instructions, under our agreement with the customer; the customer decides what is recorded and for how long.
If you work for a company that uses NodusGO, or you are one of its customer contacts, please contact that company about your data first. We will help them answer you. Sections 6 to 8 describe how the platform handles data on their behalf.
Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
When you request access, we receive your name, company and work email, and your phone number and message if you add them. We use them to review your request, set up your platform and contact you about it. Legal basis: steps before a contract, at your request (Art. 6(1)(b) GDPR). If no customer relationship follows, we delete them once they are no longer needed, or sooner if you ask.
If you subscribe, we send a confirmation email first and only add your address once you click its link. We keep your email address, your language and when you subscribed and confirmed, as proof of your consent. Legal basis: your consent (Art. 6(1)(a) GDPR). Every email has an unsubscribe link, and you can withdraw your consent at any time.
Legal basis: the contract with your company (Art. 6(1)(b) GDPR) and our legitimate interest in running a secure platform (Art. 6(1)(f) GDPR). For data we process on a customer’s behalf, see section 2.
Some features need an outside service. They receive data only when the feature is used:
The app uses the same account and data as the platform. For notifications, see section 7.
Clock-in by location is off unless you turn it on. Then the app uses your phone’s location, also in the background, only to notice when you arrive at or leave a work site, your hotel or your home. Your phone watches these places itself; the app does not record where you go in between. What is saved is which place, whether you arrived or left, and when. It is shown with your time entries as a record of the hours worked. If you mark a hotel with “At my hotel”, its location is taken from your phone once. You can turn clock-in by location off at any time, in the app or in your phone’s settings.
NodusGo Inc. is based in the USA; our servers are in Germany. Some of the services above are in the USA, the UK or China. Where the GDPR requires it, these transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework for certified companies, or the UK decision) or on the EU Standard Contractual Clauses.
You can ask us for a copy of your data, and to correct, delete or hand it over to you in a usable format. You can object to processing based on our legitimate interests, ask us to restrict it, and withdraw any consent you gave. Write to stephan@nodusgo.com. You can also complain to a data protection authority, in particular in the EU country where you live or work. Wherever you live, you can make these requests. We do not sell personal data or use it for advertising.
All connections are encrypted (HTTPS). Passwords are stored as secure hashes and secrets encrypted; two-factor sign-in is required for accounts with wide access; uploads are scanned for malware; and access to data is limited to those who need it.
When our services change, we update this policy and the date at the top.
One platform. Every team. Complete clarity.