Privacy Policy

Last Updated: August 17, 2026

The Heritage Approach, LLC ("Company," "we," "us," or "our"), a California company, operates NameSherpa (the "Service"), available at NameSherpa.ai. This Privacy Policy explains what information we collect, how we use it, and the choices you have. This policy is written with California and other U.S. users in mind.

We do not sell your personal information. Ever.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, password (encrypted), and billing information. Billing information is collected and processed directly by Paddle, our merchant of record — see Section 4.
• Content you submit: inputs you provide to generate product names (e.g., product descriptions, brand tone, competitor names), and any names you save, favorite, or export.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, actions taken within the app.
• Technical/device data: IP address, browser type and version, operating system, device identifiers, and referring URLs.
• Application platform data: The Service is built on Lovable, a third-party application development platform. Lovable's infrastructure — including its hosting layer (built on Supabase) and its AI Gateway, which routes requests to third-party AI providers (which may include OpenAI, Google Gemini, or other models) — processes standard technical and usage data, along with the naming inputs and prompts you submit, in order to operate the Service. These providers process data under their own privacy terms, and we require that our vendors handle it consistently with the commitments in this policy, including never selling it.

1.3 Cookies and Similar Technologies

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may limit some functionality.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process subscription payments and manage billing;
• Improve and develop new features, including refining our AI-based naming suggestions;
• Communicate with you about your account, updates, or support requests;
• Monitor for security issues, fraud, and abuse;
• Comply with legal obligations.

3. How We Do Not Use Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes — under any circumstances. This has been true since our founding and will not change.

4. How We Share Information

We share information only in the following limited circumstances:

• Merchant of record: Paddle.com Market Limited ("Paddle") is our merchant of record for all subscription purchases. Paddle collects and processes your billing and payment information directly as the seller of record for tax and compliance purposes, under its own privacy policy. We receive limited transaction data from Paddle (such as subscription status and purchase history) needed to manage your account.
• Other service providers: vendors who help us operate the Service, including our application platform and hosting provider (Lovable, built on Supabase infrastructure), email delivery provider, and the AI provider(s) accessed through Lovable's AI Gateway (which may include OpenAI, Google Gemini, or other models) used to generate naming suggestions. These providers are contractually and/or technically restricted to using your data only to provide services to us — not to sell it or use it for their own unrelated purposes.
• Legal requirements: if required by law, subpoena, or to protect the rights, safety, or property of the Company or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection under a policy at least as protective as this one.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes (such as billing records).

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you certain rights, including the right to:

• Know what personal information we have collected about you and how it has been used and shared;
• Delete personal information we have collected from you;
• Correct inaccurate personal information;
• Opt out of the "sale" or "sharing" of personal information — note that we do not sell or share personal information as those terms are defined under the CCPA, so there is nothing to opt out of;
• Non-discrimination for exercising any of these rights.

To exercise these rights, contact us at the address below. We will verify your identity before fulfilling your request and will respond within the timeframes required by law.

8. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice. Continued use after changes take effect constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: