Nordbase

Privacy policy

Last updated: 22 September 2026

This Privacy Policy explains how Abstract LLC (“Abstract,” “we,” “us,” or “our”), doing business as Nordbase, collects, uses, and shares information when you visit nordbase.co, request a demo, join early access, or use the Nordbase service.

Nordbase is an AI-native operating system for creative studios. It is designed to help studios handle work behind leads, proposals, projects, clients, and payments. You stay in control: nothing reaches a client, and no money moves, without your approval.

1. Who we are

The controller of personal information described in this policy is Abstract LLC, 447 Broadway, 2nd Floor, 1310, New York, NY 10013, United States.

Privacy questions: [email protected]. General questions: [email protected].

2. What this policy covers

This policy covers:

  • the Nordbase website and marketing pages;
  • demo requests, waitlists, and early-access sign-up;
  • accounts and studio data once you use Nordbase as a product, including information you or your team put into the service.

It does not cover third-party sites or tools we link to. Demo and early-access requests on this site are submitted through an embedded Typeform. Typeform processes that information under Typeform’s privacy policy.

3. Information we collect

We collect information in three ways.

You provide it. For example:

  • contact details such as name, studio name, email, role, and messages when you book a demo or ask for early access;
  • account credentials and profile information;
  • studio content you connect or enter in Nordbase, which may include leads, proposals, project records, client communications, invoices, and related files.

Studio content can include personal information about your clients, leads, and team. You are responsible for having a valid basis to share that information with us.

It is collected automatically. Like most websites, our servers may receive technical data such as IP address, browser type, device information, referring pages, and timestamps. We use Plausible Analytics, a privacy-friendly service that does not use cookies and does not collect personal data for advertising. Plausible records aggregated usage such as page views, referrers, and coarse location (country) so we can understand how the site is used. See Plausible’s privacy policy. We do not use advertising or other tracking cookies.

It comes from others. If you connect third-party tools (email, calendar, storage, payments, or similar) we receive the data those integrations make available, according to your settings and their terms.

4. How we use information

We use information to:

  • operate, maintain, and improve Nordbase and our website;
  • understand how the website is used, using privacy-friendly analytics;
  • respond to demo, early-access, and support requests;
  • run the agent on your behalf: drafting quotes, plans, updates, invoices, and similar work, subject to the approvals you set;
  • keep records of drafts, edits, and actions so you can see what was done and why;
  • protect the service, prevent abuse, and comply with law;
  • communicate about the product, including service notices. Marketing email is optional and you can opt out.

We do not sell personal information.

5. AI processing

Nordbase uses machine-learning models to generate drafts and suggested actions from the studio context you provide. Outputs are not guaranteed to be accurate or complete. You decide which functions the agent may run and how much freedom it has. Client-facing messages and payments require your approval unless you later grant more autonomy.

To provide those features we may send relevant snippets of studio content to subprocessors that host models, infrastructure, or related tools. We do not use your studio or client content to train our own foundation models. Where a subprocessor offers a no-training option for customer content, we use it when available.

6. How we share information

We share information only as needed to run Nordbase:

  • Vendors and subprocessors that host the site and product, send email, store files, process payments, provide customer support, supply AI model and infrastructure services, collect demo and early-access requests (Typeform), or provide privacy-friendly website analytics, under contracts that limit their use of the data;
  • People at your studio according to the access you grant;
  • Professional advisers (legal, accounting) under confidentiality;
  • Authorities or counterparties when required by law, to protect rights and safety, or in connection with a merger, financing, or sale of assets, with appropriate safeguards.

7. Cookies

We only use cookies or similar storage that are strictly necessary to run the site or keep you signed in. Website analytics (Plausible) does not set cookies. We do not set advertising cookies. If that changes, we will update this policy and, where required, ask for consent.

8. Retention

We keep information as long as needed for the purposes above: for example, while you have an account, for a reasonable period after you close it so we can resolve disputes and meet legal duties, and for demo or waitlist records until you ask us to delete them or they are no longer useful. Studio content is deleted or returned according to your account settings and our contracts with you, subject to backups and legal holds.

9. Your rights (United States, including California)

Depending on where you live, you may have the right to request access, correction, or deletion of personal information, to know the categories we collect and the categories of parties we share them with, and to opt out of “sale” or “sharing” of personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).

We do not sell personal information or share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA.

To exercise these rights, email [email protected]. We will verify your request and will not discriminate against you for exercising your rights. You may use an authorized agent as allowed by law.

10. Your rights (EEA, UK, and similar jurisdictions)

If European or UK data protection law applies, Abstract LLC is the controller for website, demo, and early-access data. For studio content processed in Nordbase on a customer’s instructions, we typically act as a processor and the studio is the controller.

Where we act as controller, our legal bases include:

  • performing a contract with you, or steps you request before a contract;
  • legitimate interests in operating, securing, and improving Nordbase, in a way that does not override your rights;
  • consent, where we ask for it (for example certain emails);
  • legal obligations.

You may have rights to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with a supervisory authority. Contact [email protected] to make a request. We do not currently have an EU or UK representative; if that becomes required we will appoint one and update this policy.

11. International transfers

Abstract LLC is based in the United States. If you are outside the US, your information will be processed in the United States and may be processed in other countries where our subprocessors operate. Where required, we use appropriate safeguards such as standard contractual clauses.

12. Children

Nordbase is for businesses, not for children. We do not knowingly collect personal information from anyone under 16. If you believe we have, contact us and we will delete it.

13. Changes

We may update this policy from time to time. The “Last updated” date at the top will change. Material changes will be posted on this page or sent to the email on your account.

14. Contact

Abstract LLC
447 Broadway, 2nd Floor, 1310
New York, NY 10013
United States

[email protected]