Privacy.

NervaHous is a one-person shop. Jene runs it. That means when you fill out a form here, or pay for something, the data goes to a small handful of services and to me. This page is the plain-English version of what happens to it. If a section needs to use a legal phrase, I put the plain version first so you can skip the lawyer talk.

What we collect.

Form data.

When you fill out the intake form on the services page, or join the community waitlist on the home page, or write to me at connect@nervahous.com, I keep what you sent. That usually means your name, your email, the business you run, and whatever you told me about what you're working on. If you don't put it in the form, I don't have it.

Analytics data.

Today, NervaHous loads no analytics on this site by default. If that changes — for example, if I add a privacy-respecting analytics tool to see which pages people read or where folks drop off — it will only run after you choose Accept all in the cookie banner at the bottom of the screen. You can change that choice any time from Cookie Settings in the footer. The kind of data such a tool would collect (page views, click events, browser type, rough country/region, time on page) is listed here so you know what an opt-in actually opts you into.

Payment data.

All payments run through Stripe. When you buy a service or a marketplace pack, Stripe collects your card details directly on their side. I never see your full card number. What I do see is the kind of receipt info you'd expect: your name, the amount, the last four digits of your card, and the country your card was issued in. That's what Stripe sends back to me after the charge.

Why we collect it.

Forms exist so I can write you back. If you tell me what you're working on, I can give you a useful first reply instead of a generic one.

Analytics exists so I can tell which pages are helping people and which ones aren't. If nobody reads past the first section of a page, that tells me to rewrite the page, not to add more pages.

Payment data exists because Stripe needs it to charge your card and to send you a receipt. I need a slice of it to keep clean books and to do my taxes.

The legal version of this, if you need it: the lawful basis for processing form data and payment data is your consent and the performance of a contract with you. The basis for analytics is legitimate interest in understanding how the site is used.

How long we keep it.

Form submissions.

Kept as long as we're in a working conversation, then archived. If we decide not to work together, or our work wraps and we lose touch, I clear out the active inbox after a year or so. If you ask me to delete it sooner, I do.

Analytics.

Session replay recordings are kept for 90 days, then they roll off. The aggregate page-view and click data is kept longer because it stops being personal once it's pooled into counts.

Payments.

Kept as long as legally required, which for tax records in the United States is typically seven years. Stripe also keeps its own copy for its own legal reasons.

Who else sees it (subprocessors).

A short, named list of every third party that touches your data. Not a vague "our partners" wave.

• Vercel hosts this website. They see request logs (IP address, user agent, the URL you requested) as part of normal web operation.
• Supabase stores the newsletter subscriber list and, where relevant, related records. They see your email address, your first name if you provided one, and signup metadata.
• Resend delivers newsletter emails. They see your email address and the contents of issues sent to you.
• Stripe processes every payment. They see card info and the buyer's name and email. I never see your full card number.
• Google Calendar handles booking when you schedule a call. They see the booking time and the email address you used to book.
• The email provider that hosts connect@nervahous.com sees the contents of emails you send me, the same way any email provider does.
• Anthropic (only when "Ask NervaHous" is enabled with a live model, which today it is not) would see the messages you send the chat. The chat currently runs in a deterministic guide mode that does not send your message to any third-party model. If that changes, this page changes first.
• An analytics provider (PostHog or similar) — not loaded today. If added, it runs only after you accept in the cookie banner.

That's the whole list. Your data is never sold. It is never handed to an ad network. If that ever changes, this page changes first and the cookie banner re-opens so you can object before it does.

Children & minors.

This website is not directed to children under 16. I do not knowingly collect personal data from anyone under 16. The newsletter signup, the services intake form, and the marketplace checkout all assume you are at least 16 years old, or that a parent or guardian is acting on your behalf with their own consent.

If you believe a minor under 16 has submitted personal data to NervaHous — through a form, the newsletter, a purchase, or the chat — email connect@nervahous.com with the subject line "Minor data" and I will locate the record and delete it. This applies whether the data was collected in the United States (COPPA framework, which applies to under 13) or in jurisdictions where the minor age is 16 (UK and most of the EU under GDPR).

Your rights.

You can ask me what I have on you. You can ask me to correct it if it's wrong. You can ask me to delete it. The easiest way is to email connect@nervahous.com with the subject line "Data request" and I'll handle it within thirty days. If a law (typically tax law) requires me to keep something, I'll tell you which piece and why.

If you live in California, the CCPA gives you these same rights, plus the right to not be discriminated against for using them. If you live in the EU or UK, GDPR gives you the same set, plus the right to lodge a complaint with your local data protection authority. I'd rather you write to me first so I can fix it.

Cookies and tracking.

Today, this site sets one thing in your browser's local storage: nh.consent, which records whether you accepted or declined the cookie banner. That's it. No analytics cookies. No advertising cookies. No third-party trackers. No Facebook Pixel. No Google Ads tag.

If analytics is added in the future, it will load only after you choose Accept all in the cookie banner. You can change that choice any time from Cookie Settings in the footer. The site works fine if you decline.

Some pages embed a video (the landing hero, for example). Video files are served from this site — not from YouTube or another third party — so they do not set tracking cookies.

Changes to this policy.

When this page is updated, the date at the top of the page changes. If the change is a meaningful one — like adding a new third party, turning on analytics, or changing how long data is kept — I'll note it in a recent newsletter or on the home page for a while so it isn't a surprise, and the cookie banner will re-open if the change affects what loads in your browser.

Revision log.

• May 27, 2026. Rewrote the analytics and cookies sections to match what actually loads (nothing, by default). Added a named subprocessor list (Vercel, Supabase, Resend, Stripe, Google Calendar, the email provider, Anthropic when applicable). Added a children & minors section (under 16). Wired a cookie consent banner.
• January 2026. Original publication.

Contact.

Email connect@nervahous.com. I read every message myself.