Privacy, Data & Security Policy

Last updated September 15, 2026

The short version. We collect what we need to run Nomad Escape Plan: your email if you sign up, your quiz answers, what you buy, and how the site is used.

  • Analytics cookies and ad cookies run only if you allow them. Necessary cookies always run.
  • We don’t sell your personal information for money. With your permission, we share limited data with ad platforms, which some laws call ‘sharing’.
  • We honor Global Privacy Control: if your browser sends it, ad cookies stay off.
  • You can change your choices any time in Cookie settings, and ask us to access, correct or delete your data at info@nomadescapeplan.com.

Who we are

Nomad Escape Plan (nomadescapeplan.com) is owned and operated by AIExperts99.com, LLC, 7901 4th St N STE 300, St. Petersburg, FL 33702, USA. We decide how your personal information is used (in some laws, the “controller” or “business”). Privacy questions and requests: info@nomadescapeplan.com.

What we collect

  • What you give us — your email and name when you sign up or join the newsletter, your quiz and tool answers (origin, budget, preferences), messages you send in the chat widget or by email, and account details if you create an account.
  • Purchases — what you bought, when, and the amount. Card details are handled by our payment processors; we never receive your full card number.
  • How you arrived — the kind of link or site that brought you (search, social, email, a campaign tag, a referral code), kept in our own first-party cookies.
  • Usage and device data — pages visited, clicks and general device and browser details. Detailed analytics (Google Analytics, Microsoft Clarity) only run if you allow analytics cookies.
  • Ad measurement data — cookie ids and events such as a signup or purchase, only if you allow ad cookies.

How we use it

  • to provide the Service, your results and saved plan, and paid access after purchase;
  • to send the emails you asked for, and account and purchase messages;
  • to understand which pages and channels are useful, and improve them;
  • to credit referrals and match a purchase to the signup it came from;
  • with your permission, to measure and improve our ads and show relevant ads;
  • to keep the Service secure and prevent abuse, and to meet legal obligations.

Who we share it with

We share the minimum necessary with service providers that run the Service for us, under their own terms and privacy policies. Ad platforms are listed separately: they run only when we have turned them on and you have allowed ad cookies.

ProviderWhat forData involved
SupabaseDatabase and sign-inAccount, quiz answers, leads, orders
VercelHosting and privacy-friendly page statisticsPages requested, device and browser type, IP address (security logs)
Google Analytics 4Usage analytics — only if you allow analytics cookiesPages, events, device, approximate location
Microsoft ClarityHeatmaps and session replays, text and inputs masked — only if you allow analytics cookiesClicks, scrolls, pages, device
GoHighLevel / LeadConnectorEmail and follow-up, checkout, and the chat widget you can open on the siteEmail, name, quiz answers, chat messages, purchase details
StripePaymentsPayment details (we never see your full card number)
ResendSending account and welcome emailsEmail address, message content
Meta (Facebook / Instagram)Ads and conversion measurement — Only when enabled and you allow ad cookiesPages, events, cookie ids; hashed email for conversions
TikTokAds and conversion measurement — Only when enabled and you allow ad cookiesPages, events, cookie ids; hashed email for conversions
PinterestAds and conversion measurement — Only when enabled and you allow ad cookiesPages, events, cookie ids
Google AdsAds and conversion measurement — Only when enabled and you allow ad cookiesAd click ids, conversions
Microsoft AdsAds and conversion measurement — Only when enabled and you allow ad cookiesAd click ids, conversions
RedditAds and conversion measurement — Only when enabled and you allow ad cookiesPages, events, cookie ids

Server-side sharing. When a signup or purchase happens, we may send the ad platform that brought you a hashed (scrambled, one-way) copy of your email with the event, so the ad can be credited. We do this only if you allowed ad cookies and your browser did not send Global Privacy Control. We record your choice with your signup so this rule can be checked.

Selling and sharing. We don’t sell your personal information for money. With your permission, we share limited data with ad platforms, which some laws call ‘sharing’. We may also disclose information if the law requires it, or as part of a sale or merger of the business.

Cookies and similar technologies

Necessary cookies run the site and count visits in an essential, first-party way; they are always on. Analytics and marketing (ad) cookies are set only if you allow them. Until you choose, Google tags are not loaded at all (Google Consent Mode, basic setup).

Cookie or storage keyTypePurposeLasts
nep_srcNecessaryWhere your first visit came from (search, social, a campaign), counted on our own servers90 days
nep_ltNecessaryWhere your latest tagged or referred visit came from30 days
nep_refNecessaryThe ambassador referral code you arrived with, so they are credited90 days
nep_leadNecessarySecure, unreadable proof that this browser signed up (httpOnly), to confirm a purchase90 days
nep_consentNecessaryRemembers your cookie choices12 months
nep_vidNecessaryA random id for your browser, counted on our own servers, so a returning visit can be told apart from a new one. No personal information.2 years
nep_sidNecessaryA random id for this visit, counted on our own servers, so pages viewed in one sitting can be grouped. No personal information.30 minutes of inactivity
nep-ua-sessionAnalytics (browser storage)A random id grouping one sitting's usage for signed-in members, in the members area onlyUntil the tab closes
nep-ua-offAnalytics (browser storage)Remembers that member usage measurement is off, to avoid repeat requestsUntil the tab closes
nep-consentNecessary (browser storage)A copy of your cookie choices in your browser's local storage, in case cookies are blockedUntil you clear site data; we ask again after 12 months
sb-*NecessaryKeeps you signed in — set only for members who sign inUntil you sign out or the session ends
nep_clickMarketingReserved, not set today. If used, an ad click id kept to match a sale to the ad (only with ad cookies allowed)90 days
_gaAnalyticsGoogle Analytics visitor id2 years
_clckAnalyticsMicrosoft Clarity visitor id1 year
_clskAnalyticsMicrosoft Clarity session1 day
_fbpMarketingMeta ad measurement90 days
_ttpMarketingTikTok ad measurementabout 13 months
_pin_unauthMarketingPinterest ad measurementabout 1 year

Third-party cookie lifetimes are set by each vendor and are listed here per their documentation; they can change. Ad platforms may use further cookies of their own when enabled.

Your choices

  • Cookie settings. Open Cookie settings (also linked in every page footer) to allow or refuse analytics and ad cookies at any time.
  • Withdrawing consent. Turning a category off stops it from that moment: we delete that category’s cookies from our site and reload the page so its tools stop running. It does not undo processing that happened before.
  • Global Privacy Control. We treat GPC as an opt-out of sale/sharing and targeted ads. If your browser sends it, ad cookies stay off and we do not share your data with ad platforms, whatever the banner says.
  • Do Not Sell or Share My Personal Information. To opt out, refuse ad cookies in Cookie settings, turn on GPC in your browser, or email info@nomadescapeplan.com and we will opt out your email too.
  • Email. Every marketing email has an unsubscribe link; account and purchase messages continue while you have an account.
  • Your browser. You can also block or delete cookies in your browser settings; some features may stop working.

How we measure what members use

If you have an account and you allow analytics cookies, we record how you use the members area of this site: when a visit starts, how long the page stays open, which pages and tools you open, and how many AI tokens the AI features use on your behalf. We use this to fix things that confuse people, decide which tools to build or improve, and understand what the AI features cost to run. We do not record what you type into forms or the content of the pages you view.

We do not record any of this if you decline analytics cookies, or if your browser sends a Global Privacy Control or Do Not Track signal. You can change your choice at any time from Cookie settings in the footer. You can ask us to show or delete the usage data tied to your account at info@nomadescapeplan.com. Usage data is deleted with your account and kept for at most 13 months.

We may combine this data into statistics that do not identify any member (for example, the most opened tool this quarter), only for groups of at least five members. We do not sell your personal information for money.

Your rights

United States

Depending on the state you live in (for example California, Colorado, Connecticut, Virginia, Texas and others), you may have the right to know what we collect and how we use it, to access and get a copy, to correct, to delete, and to opt out of the sale or sharing of your personal information and of targeted advertising. You can use an authorized agent. We will not treat you differently for using these rights. If we deny a request, you may appeal by replying to our decision. We do not use personal information to make decisions with legal or similarly significant effects, and we do not knowingly collect sensitive personal information.

Canada

Under PIPEDA and provincial laws, you may access and correct your personal information and withdraw consent, subject to legal and contractual limits. For Quebec residents, our person in charge of the protection of personal information can be reached at info@nomadescapeplan.com; tracking technologies that profile you are off unless you turn them on. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

European Economic Area and United Kingdom

We rely on: contract to provide what you signed up for or bought; consent for analytics and ad cookies and marketing emails (withdraw any time); legitimate interests for first-party visit counting, security and fraud prevention; and legal obligation for tax and accounting records. You may access, correct, delete, restrict or object to processing, and receive a portable copy, and you may complain to your data protection authority. Our providers may process data outside your country, including in the United States, under their own transfer safeguards.

To make any request, email info@nomadescapeplan.com. We may need to verify your identity first, and we aim to reply within 30 days (or the time your law allows).

How long we keep it

  • Signup and lead records: while they are needed for the purposes above, generally no longer than 3 years after your last interaction, and we delete them when you ask.
  • Purchase records: as long as tax and accounting law requires (usually 7 years).
  • Visit counts: kept as channel totals without personal identifiers.
  • Cookies: for the periods in the cookie table above.

Children

The Service is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has given us data, email info@nomadescapeplan.com and we will delete it.

Security

Data is encrypted in transit and stored with access controls (row-level security in our database). We apply reasonable technical and organizational measures, but no online service can guarantee absolute security.

Changes to this policy

This is policy version 2026-10-23, last updated September 15, 2026. If we make a material change — for example a new kind of sharing — we will update this page and ask for your cookie choices again.

See also our Terms & Conditions and Disclaimer.