Privacy Policy

Last updated: September 8, 2026 Effective date: September 8, 2026

This Privacy Policy describes how ECM Consulting, LLC, doing business as nursli ("we," "us," or "our"), collects, uses, discloses, and protects information about you. It applies to the nursli career documentation application at app.nursli.com (the "App"), the nursli website at nursli.com and its subdomains (the "Site"), and our related email and communication services — together, the "Services." Please read it carefully. By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.

1. Scope

This Policy applies to personal information we collect through the Services. You can use the Site without creating an Account; you need an Account to use the App.

This Policy does not apply to third-party websites, services, or products that we do not control, even if they link to or from the Services.

2. Information We Collect

2.1 Information You Provide

  • Account information: name, email address, password, and profile details you choose to add.

  • Email list and waitlist information: if you sign up for updates, a waitlist, or our newsletter through the Site, the email address and any name you provide. You may unsubscribe at any time using the link in any email.

  • Your Content: resumes, portfolios, career documents, credentials, and other materials you create or upload, including content you submit to AI-powered features such as Smart Capture (see Section 7).

  • Payment information: if you purchase paid features, billing details processed by our third-party payment processor (we do not store full payment card numbers).

  • Communications: information you provide when you contact us for support or otherwise.

2.2 Information Collected Automatically

We collect the following automatically when you use either the App or the Site:

  • Usage data: features used, pages or screens viewed, actions taken, referring pages, and dates and times of access.

  • Device and technical data: device type, operating system, browser type, app version, language settings, and unique device or installation identifiers.

  • Log data: IP address, access times, and diagnostic and crash data.

  • Push tokens: if you enable notifications, identifiers used to deliver them.

2.3 Information From Third Parties

We may receive limited information from service providers such as analytics, authentication, AI, or payment providers, consistent with their policies.

2.4 Information We Do Not Collect

We do not intentionally collect protected health information ("PHI"), patient records, or consumer health data, and you must not upload them to the App or submit them to AI Features. The App is a career documentation tool; it is not designed to collect information about your own physical or mental health condition, diagnosis, treatment, or care.

3. Cookies and Similar Technologies

We and our service providers use cookies, SDKs, mobile identifiers, and similar technologies to operate the App, keep you signed in, remember preferences, measure performance, and understand usage. These may include:

  • Essential technologies necessary for the App to function;

  • Analytics technologies that help us understand how the App is used;

  • Preference technologies that remember your settings.

The Site is hosted on a third-party website platform that sets its own essential and analytics cookies to deliver pages, remember your preferences, and measure traffic. Those cookies are set whether or not you have an Account with us.

You can manage cookies through your browser settings and manage mobile tracking through your device settings. Disabling some technologies may affect how the Services work.

4. How We Use Your Information

We use your information to:

  • Provide, operate, maintain, secure, and improve the Services;

  • Create and manage your Account and store Your Content;

  • Provide AI-powered features such as Smart Capture (see Section 7);

  • Process payments and manage subscriptions;

  • Communicate with you about your Account, transactions, and support;

  • Send newsletters and marketing messages you have opted into (you may unsubscribe at any time);

  • Deliver notifications you have enabled;

  • Personalize and develop new features;

  • Detect, investigate, and prevent fraud, abuse, and security incidents;

  • Comply with legal obligations and enforce our Terms.

5. How We Disclose Your Information

We disclose information only as described here:

  • Service providers / processors: vendors who perform services on our behalf, such as hosting, data storage, analytics, AI processing (see Section 7), email delivery, customer support, and payment processing, under contractual obligations to protect your information and use it only for the services they provide to us.

  • Legal and safety: when required by law, subpoena, or legal process, or to protect the rights, property, or safety of us, our Users, or others.

  • Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will require the recipient to honor this Policy or notify you of any material change.

  • With your consent: in other cases with your direction or consent.

Our service providers. The providers we currently rely on include: Supabase (database, authentication, and file storage), Railway (application hosting), Squarespace (website hosting and site analytics), Stripe (payment processing), Kit (email delivery and list management), PostHog (product analytics), Google Workspace (business email), and Anthropic, PBC (AI processing for Smart Capture — see Section 7). We may add or change providers over time and will update this Policy accordingly.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Third-Party Services and SDKs

The Services may use third-party services and software development kits (SDKs) for functions such as analytics, authentication, AI processing, and payments. These providers may collect information about your device and use of the Services under their own privacy policies. We encourage you to review the policies of any third-party services you interact with.

7. AI Features (Smart Capture)

The App includes AI-powered features, such as "Smart Capture," that use automated processing to help you capture, extract, and organize your career information. In connection with these features:

  • Processing by our AI provider. The inputs and Content you submit to AI Features are sent to and processed by Anthropic, PBC, which provides the Claude model that powers Smart Capture, acting as our service provider. Anthropic processes your inputs to return output to you and to operate and secure its services, and may retain inputs and outputs for a limited period for trust, safety, and abuse-monitoring purposes before deletion, in accordance with its commercial terms.

  • Training. We do not use your Content to train our own AI models. Under Anthropic's commercial API terms, your inputs and outputs are not used to train Anthropic's models.

  • No PHI or patient information. Do not enter PHI, patient records, or another person's confidential information into AI Features, because your inputs are processed by a third-party service.

  • Automated processing. AI Features involve automated processing to organize your information. They do not make decisions that produce legal or similarly significant effects concerning you. You are responsible for reviewing AI output before relying on it.

8. Data Retention

We retain personal information for as long as necessary to provide the Services, maintain your Account, and fulfill the purposes described in this Policy, and thereafter as needed to comply with legal, tax, accounting, security, or record-keeping obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. When you delete your Account, we will delete or de-identify your personal information within a reasonable period, subject to these requirements and to backups that are cycled out in the ordinary course.

9. Data Security

Your career history took years to build, and we take protecting it seriously. We maintain reasonable administrative, technical, and physical safeguards designed to protect your information. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for using a strong, unique password, keeping your credentials confidential, and maintaining your own backups of important Content.

10. Your Choices

You are in control of what you share with us and how we contact you. Here is what you can change at any time:

  • Account information: you may access and update your information in the App.

  • Marketing emails: you may unsubscribe using the link in any marketing email.

  • Notifications and tracking: you may manage these through your device or browser settings.

  • Deletion: you may delete your Account in the App or request deletion by contacting us at hello@nursli.com.

  • Do Not Track: because there is no industry-standard response, we do not currently respond to browser "Do Not Track" signals.

11. Your U.S. State Privacy Rights

Your information belongs to you, and we want the process for controlling it to be simple. Depending on where you live, you may have some or all of the following rights under applicable state privacy laws:

  • The right to know and access the personal information we hold about you;

  • The right to correct inaccurate personal information;

  • The right to delete your personal information;

  • The right to obtain a portable copy of your personal information;

  • The right to opt out of the sale of personal information, targeted advertising, or certain profiling (note: we do not sell personal information, use it for targeted advertising, or engage in profiling that produces legal or similarly significant effects);

  • The right to limit the use of sensitive personal information (note: we do not collect sensitive personal information for purposes that require an opt-out); and

  • The right to be free from discrimination or retaliation for exercising these rights.

States covered. These rights are available to residents of states with comprehensive consumer privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Several additional states have passed laws that take effect on a rolling basis. We extend the rights described above to all U.S. residents, regardless of whether your state has enacted a comprehensive privacy law and regardless of whether we are legally required to do so.

Other state-specific rights. Nevada residents may direct us not to sell certain personal information; we do not sell personal information. Washington, Nevada, and Connecticut residents have rights concerning consumer health data under laws such as the Washington My Health My Data Act; as described in Section 2.4, the App is a career documentation tool and we do not collect consumer health data.

How to exercise your rights. Submit a request by emailing hello@nursli.com with the subject line "Privacy Request." We will verify your request using information associated with your Account and respond within the time required by law, generally within 45 days, with one extension where permitted. You may use an authorized agent where permitted by law; we may require the agent to provide proof of authorization and may require you to verify your identity directly.

Appeals. If we decline your request, you may appeal by replying to our response with the word "Appeal." We will review the appeal and inform you in writing of the outcome and our reasoning within the time required by law. If your appeal is denied, you may contact your state attorney general to submit a complaint.

12. California Privacy Disclosures

In addition to the rights above, California residents are entitled to the following disclosures under the California Online Privacy Protection Act (CalOPPA) and, where applicable, the California Consumer Privacy Act (CCPA/CPRA):

  • Categories of personal information collected: identifiers (such as name and email), account and profile information, Content you provide (including inputs to AI Features), commercial and payment information, internet or device activity, and inferences we may draw to operate the Services (see Section 2).

  • Categories of sources: directly from you, automatically from your device, and from our service providers.

  • Business purposes: as described in Section 4.

  • Categories disclosed to service providers: as described in Sections 5 and 7.

  • Retention: as described in Section 8.

  • Sale/sharing: we do not sell personal information or share it for cross-context behavioral advertising, including of consumers under 16.

  • Sensitive personal information: we do not use or disclose sensitive personal information for purposes requiring an opt-out.

California residents may also request information about disclosures to third parties for their direct marketing purposes ("Shine the Light"); we do not make such disclosures.

13. Users Outside the United States

The Services are operated from the United States and are intended for users in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. By using the Services, you consent to this transfer and processing.

14. Children's Privacy

The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact us at hello@nursli.com.

15. Changes to This Policy

We may update this Policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

16. Contact Us

If you have questions about this Policy, want to exercise your privacy rights, or simply want to know more about how your information is handled, we would rather hear from you than have you wonder. Email us at hello@nursli.com and a real person will get back to you.

ECM Consulting, LLC (d/b/a nursli) Illinois, United States Email: hello@nursli.com