Privacy Policy

With your consent, nilbash uses Google Analytics 4 to measure visits to public pages. Google may process cookie identifiers, browser and device information, and basic visit information. Our page-view tracking excludes private account screens and individual profiles. We do not send profile details, search terms, URL query strings, or URL fragments in these page views. Advertising storage, Google signals, and advertising personalization are disabled in this integration.

Analytics does not load until you accept. You can reject analytics without affecting essential account features, or change your choice using “Cookie preferences.” We also disable analytics when your browser sends Global Privacy Control or Do Not Track. Withdrawing consent stops future measurement and clears this site’s Google Analytics cookies; it does not delete data already processed by Google. Google Privacy Policy

Welcome to Nilbash. Nilbash LLC ("Nilbash," "we," "us," or "our") operates nilbash.com and related websites, applications, products, and services (the "Platform"). Nilbash is built on the belief that individuals should control their professional information, who can access it, how it is used, and whether they benefit financially from that access.

Unlike traditional data brokerage models, Nilbash is designed around voluntary participation and user-authorized access. Individuals choose to provide professional information, determine how it may be shared, and may receive compensation when approved Platform participants purchase access to that information.

This Privacy Policy explains how we collect, use, disclose, monetize, retain, and protect personal information and describes available choices and rights. By using the Platform, you acknowledge this Policy. Where required, we obtain separate consent for particular activities. This Policy should be read with our Terms of Service and User Agreement.

Voluntary Participation. Individuals voluntarily create accounts and submit professional information. Nilbash does not independently build profiles by buying, scraping, harvesting, or acquiring professional information from external brokers or public websites.

User Control. Individuals can access, update, correct, restrict, or delete information they provide, subject to applicable law and limited retention obligations.

Permission-Based Access. Information is made available only to approved Platform participants authorized under the individual's permissions and Platform rules.

No Unauthorized Third-Party Sales. Nilbash does not sell or disclose information to unauthorized third parties. Monetized access is subject to authorization and applicable law.

No Unauthorized Redistribution. Buyers may not export, resell, redistribute, or store information outside the Platform.

Transparent Monetization. Nilbash may earn revenue from authorized access and share revenue with participating individuals.

Responsible AI. Nilbash may use eligible data to improve its own internal AI systems subject to user controls and law, but does not provide personal information to third-party AI vendors for their independent model training.

Privacy by Design. Nilbash seeks to limit processing to disclosed, legitimate and authorized purposes.

This Policy covers individuals maintaining profiles, authorizing access, receiving messages, buying authorized access, visiting nilbash.com, or contacting Nilbash. The Platform is intended for U.S.-based individuals age 18 or older. Nilbash does not knowingly permit minors to participate and will restrict or delete ineligible accounts as appropriate. The Platform is not currently offered outside the United States.

4.1 Voluntarily provided information. We may collect names, titles, occupations, employers, work history, industry, skills, education, certifications, professional interests, career preferences, email addresses, mobile numbers, preferred contact methods, profile descriptions, account settings, login identifiers, and privacy permissions. For earnings, we may process payout records, payment identifiers, transaction records and tax-reporting information. External payment processors may collect additional financial details under their own policies.

4.2 Automatically collected information. We may collect IP address, device and browser details, operating system, login timestamps, page and feature usage, cookies, security events and access logs for operations, security and improvement. This does not mean we source professional profiles externally.

4.3 Platform-generated records. We may generate records of access permissions, purchases, earnings, messages, delivery status, consent, opt-outs, security events and support interactions.

4.4 Information we do not independently acquire. We do not purchase contact databases, scrape professional networking websites, harvest public contact details, import third-party contact lists, or create marketplace profiles for people who have not enrolled. This does not prevent use of operational service providers.

Individuals retain their rights and interests in information they submit. Providing information does not transfer ownership to Nilbash or buyers. Participating individuals authorize Nilbash to host, display, process, and provide limited access to selected information under their settings and User Agreement. Available controls may include editing fields, profile visibility, permitted access categories, message preferences, withdrawal of optional permissions, AI-training opt-out, field deletion, and account deletion. Withdrawal generally affects future processing and access, subject to lawful retention.

We use information to operate accounts and profiles; provide authorized professional access; deliver permitted messages; calculate and distribute revenue shares; personalize opportunities; develop and improve eligible internal AI systems subject to controls; prevent fraud and misuse; comply with law; and maintain and improve the Platform. We will provide any additional notice or consent required before materially different uses.

7.1 Voluntary authorization. Individuals may separately authorize Nilbash to provide approved users limited access to selected professional information.

7.2 Authorized purchasers. Approved buyers meeting eligibility, account, payment and compliance requirements receive only conditional, limited, revocable on-platform access, not ownership.

7.3 Buyer restrictions. Buyers may not resell, sublicense, export, download, copy into CRMs, build databases, distribute, scrape, train external AI, transfer to brokers, circumvent controls, harass, discriminate, or use information for unauthorized solicitation or other unapproved purposes. Nilbash may suspend access and pursue remedies.

7.4 Regulated sales. Paid on-platform access may qualify as a sale, sharing, or regulated disclosure under state privacy laws, regardless of its characterization as a license. Nilbash will provide required notices, opt-outs, and consent.

7.5 Revenue sharing. Eligible users may receive compensation from qualifying access transactions under the User Agreement. Earnings are not guaranteed; records may include refunds and adjustments.

7.6 Revocation. Users may withdraw sharing permissions and remove data. Nilbash will stop new access as required, while retaining limited transaction and compliance records when lawful.

8.1 Nilbash-controlled messaging. Approved participants may request delivery of professional offers and business communications. Nilbash sends messages through its own infrastructure or authorized service providers; buyers do not receive unrestricted telephone numbers for independent texting.

8.2 Separate consent. Where required, Nilbash obtains separate affirmative SMS consent. Marketing consent is not required to create an account, purchase services, or participate in the marketplace. Disclosures will identify the sender, purposes, applicable sponsors and other legally required details. Accepting general Terms or this Policy does not replace required consent.

8.3 Message types. Messages may include business development, networking requests, products, services, and other authorized professional communications. Some qualify as advertising or telemarketing.

8.4 Preferences and opt-out. Users may change messaging preferences or reply STOP to applicable programs. Nilbash will honor valid revocation requests within required periods. A permitted confirmation or non-marketing message may still be sent. Message frequency varies; message and data rates may apply.

8.5 Records. Nilbash may retain consent language/version, timestamps, preferences, messages, delivery results, opt-outs and suppression records for compliance.

8.6 Providers. Phone numbers, content and delivery details may be provided to SMS service providers solely to deliver the service. Nilbash will not sell mobile opt-in information or SMS consent records for independent third-party marketing.

9.1 Internal AI. Nilbash may use eligible professional profile and Platform data to develop, train, test and improve internally controlled AI for matching, recommendations, security, organization and Platform operations.

9.2 Default and choice. Nilbash intends eligible internal AI training to be enabled by default with an accessible opt-out. Where applicable law requires affirmative consent, Nilbash will obtain it before the processing rather than relying on a default-on setting.

9.3 Third-party AI. Nilbash does not provide personal information to external AI vendors for their independent model training or improvement, or sell it to external AI training companies without express authorization and legal compliance. Any external AI infrastructure must have appropriate contractual safeguards and disclosure; vendors may not independently train on Nilbash user data.

9.4 Opt-out. Following an effective opt-out, Nilbash stops using covered personal information for future training, subject to law. Prior model training may not be technically reversible; deletion, retraining and related requests will be assessed under law and technical feasibility.

9.5 Sensitive information. Nilbash does not intend to train on sensitive personal information without legally required authorization.

9.6 Automated decisions. Applicable notices, choices and review rights will be provided for regulated automated processing. AI outputs are not guaranteed accurate.

Nilbash may use vendors for hosting, payments, authentication, messaging, security, fraud prevention, support, analytics, and legal/accounting services. Providers may receive only reasonably necessary information and must be subject to appropriate contractual and technical restrictions against unauthorized use, independent sales, unrelated marketing and AI training. Operational service-provider disclosures are separate from monetized professional access.

To help prevent automated harvesting of member information, Nilbash uses Cloudflare Turnstile when browsing activity requires a human-verification check. Cloudflare processes technical information, including browser and network signals, to assess that check. Nilbash sends the verification response and requesting IP address to Cloudflare for server-side validation. Nilbash does not include private profile fields in these verification requests.

Browsing protection. After a successful human-verification check, Nilbash sets an essential first-party cookie named profile_browsing_clearance for up to 30 minutes. It contains a signed security clearance, not profile information, and is not used for advertising. Nilbash also keeps short-lived keyed hashes of network/account identifiers and profile-visit identifiers to enforce shared browsing limits. Active counters expire at the end of their minute, ten-minute or daily window; expired counter records are removed in bounded cleanup batches as browsing continues.

11.1 Sign-in and security. Nilbash uses a first-party cookie named session_token to keep you signed in and authenticate requests. It is set when an account is created or you sign in, including after two-factor verification, with a seven-day browser expiry. Signing out clears it; expiry or revocation of the server-side session can end access sooner. In production, this cookie is restricted to HTTPS, is not accessible to JavaScript, and uses SameSite=Strict protection.

11.2 Referral information. If you follow a referral link, Nilbash stores its referral code in your browser's local storage under referral_code so it can attribute your signup to the referrer. This is first-party referral attribution, not an advertising-network cookie. It has no automatic expiry: it remains until successful signup removes it, another referral replaces it, or browser storage is cleared.

11.3 Setup reminders. Nilbash uses first-party session storage with keys beginning setup-wizard: to remember that the introductory setup prompt has been shown. These markers last for the browser tab's session. A browser's session-restore feature may preserve session storage when restoring tabs.

11.4 Third-party services and resources. Payment and identity-verification flows redirect you to pages hosted by Stripe and Didit, respectively. Those services may use cookies or similar technologies on their own pages for service operation and security; their applicable cookies, duration and choices depend on the hosted service. See Stripe's Cookie Policy (https://stripe.com/legal/cookies-policy), Stripe's cookie settings (https://stripe.com/cookie-settings), and Didit's Cookies Policy (https://didit.me/terms/cookies). Nilbash also loads Google Fonts directly from Google. Google states that its Fonts API does not set or log cookies or use the information it collects to create advertising profiles, but font requests transmit your IP address and request headers to Google. Externally hosted profile images also cause your browser to contact the image host.

11.5 Analytics and advertising. The application code reviewed does not load an analytics SDK, advertising pixel, tag manager or session-replay service. This finding does not describe all technologies on third-party hosted pages or settings applied outside the application code. The referral storage described above is used for signup attribution.

11.6 Your choices. You can use your browser settings to block or clear cookies and local or session storage. Blocking the sign-in cookie prevents authenticated use; clearing referral storage can remove signup attribution, and clearing setup markers can cause the introductory prompt to appear again. Nilbash does not currently provide a cookie preference center. Where applicable law requires consent or an opt-out for nonessential technologies, the necessary controls must be in place before those technologies are used.

Nilbash intends to maintain reasonable administrative, technical and organizational safeguards appropriate to the data, potentially including encryption, authentication, role-based permissions, monitoring, access logs, vendor review, incident response, and export/scraping controls. No system is perfectly secure. Nilbash will investigate incidents and provide legally required notifications. Users must safeguard credentials and report suspected compromise.

Information is retained only as reasonably necessary for disclosed purposes or as law permits or requires. Profile information is generally retained while authorized and active; consent records as needed to demonstrate compliance; financial records for accounting and tax obligations; security logs for protection and investigations. Valid deletion requests remove data from active systems within applicable legal timeframes, with backups subject to documented deletion cycles. Limited records may remain for legal obligations, disputes, fraud prevention or enforcement and will not be repurposed merely because retained.

Depending on law, individuals may access, correct, delete, or port information; confirm processing; opt out of regulated sales, targeted advertising or profiling; withdraw consent; appeal denied requests; and exercise rights without unlawful discrimination. Requests may be made through account controls or support@nilbash.com and https://nilbash.com/data-rights. Nilbash may verify identity, honor authorized-agent requests when required, and respond within legal deadlines.

Users may delete individual fields or their entire account. Following a valid request, Nilbash will remove affected information from active marketplace access, revoke future purchaser access, stop future monetization, apply appropriate deletion or suppression to internal systems and providers, retain only lawful exceptions, and address AI training as described in Section 9. Deletion may not reverse lawful prior processing, but buyer rules prohibit independent retention or redistribution. Account closure may end future earning eligibility; unpaid earnings are handled under the User Agreement and law.

Nilbash intends to comply with the Colorado Privacy Act where applicable, including eligible rights to access, correction, deletion, portability, and opt-outs of regulated sales, targeted advertising and qualifying profiling. Nilbash will honor legally required universal opt-out mechanisms, obtain sensitive-data consent where required, and provide required assessments, notices and appeal mechanisms. Nothing here waives Colorado statutory rights.

Other U.S. residents may have rights under California and other state laws, including rights to know, correct, delete, opt out of sales or sharing, limit certain sensitive uses, receive financial incentive notices, and appeal decisions. Revenue-sharing participation does not waive nonwaivable privacy rights. Nilbash will provide jurisdiction-specific notices and consent where required.

Compensation for authorized access may constitute a financial incentive under some state laws. Where required, Nilbash will provide a separate notice describing the program, data categories, calculation, enrollment, withdrawal, and valuation rationale. Participation is voluntary and Nilbash will not unlawfully penalize users for exercising privacy rights. Leaving the marketplace may eliminate future earning opportunities.

Purchasers must follow the Terms of Service, Buyer Data Access and Licensing Agreement, and law. They may not export, download, transfer to CRM systems, resell, redistribute, circumvent messaging, independently retain screenshots or copied records, use external AI training, contact users through unauthorized means, conduct unlawful marketing, or make discriminatory or unlawful decisions. Nilbash may monitor for misuse lawfully and suspend, terminate or pursue remedies.

Nilbash may disclose information when reasonably necessary to comply with law or valid process; protect rights, property and safety; investigate fraud or incidents; enforce agreements; or establish and defend claims. Requests will be evaluated under law, with notice to affected users where appropriate and legally permitted.

In a merger, acquisition, financing, reorganization or asset sale, information may be involved as law permits. Successors must honor applicable privacy obligations and binding restrictions. Nilbash will provide notice or obtain consent when required for material changes. This provision does not authorize unrestricted independent sales of user data.

The Platform may link to independently operated services. Nilbash is not responsible for their independent privacy practices. Users should review those policies. This does not reduce Nilbash's responsibility for its own service providers or regulated disclosures.

Nilbash may update this Policy for changes in law, technology, functionality or operations. Material changes will receive appropriate notice through the Platform, email or other reasonable channels, and additional consent where required. Updated versions will show the effective or revision date. Continued use does not substitute for affirmative consent when legally required.

Nilbash LLC

Colorado, United States

Website: https://nilbash.com

Privacy Email: support@nilbash.com

Mailing Address: 6340 S Gibraltar Cir, Centennial, CO 80016

Privacy Request Page: https://nilbash.com/data-rights

Nilbash will provide additional request and appeal channels where required.

Nilbash was created to challenge traditional professional data collection and monetization. We believe individuals should know when their professional information is shared, control that sharing, and have the opportunity to benefit financially from authorized access. Participation is voluntary; access is permission-based; unauthorized redistribution is prohibited; messaging requires appropriate consent; AI processing is transparent; and individuals can manage and delete information. Your professional information should work for you, not against you.