Cookie Policy

Product Nerve AI Operated by Product Nerve AI Limited, a company incorporated under the laws of the Federal Republic of Nigeria, with its principal business location in Lagos, Nigeria, trading as Product Nerve AI and Product Nerve ("Product Nerve", "PNAI", "we", "us", "our") Effective date: 24 August 2026 · Last updated: 24 August 2026 Contact: [privacy@productnerve.com]

1. What this covers

This policy explains the cookies and similar technologies (local storage, pixels, SDK identifiers) used on productnerve.com, app.productnerve.com, and our mobile applications, and the choices you have. It supplements the Privacy Policy.

When you first visit our marketing pages you will see a consent banner. Essential technologies run without consent because the service cannot function without them. Analytics and marketing technologies run only if you accept them, and declining is one click, as easy as accepting. You can change your choice at any time through the Cookie settings link in the footer. We honor Global Privacy Control browser signals on the marketing pages as an opt out of analytics and marketing tags. Where you are in a jurisdiction that requires opt in consent (including the EU, UK, and Nigeria under NDPA guidance), non essential tags do not fire until you accept.

A deliberate design decision: Google Analytics and Meta Pixel run on the marketing pages only. They never run inside the logged in application, on any page where you work on your ventures, or in the mobile app.

3. The technologies we use

Essential (always on)

| Technology | Provider | Purpose | Duration | |---|---|---|---| | Authentication session (cookies and local storage) | Supabase | Keeps you signed in, session refresh | Session and up to 30 days | | Security and rate limiting identifiers | Product Nerve, Upstash, Cloudflare | Abuse prevention, request routing, edge protection | Short lived, up to 24 hours, longer where needed to investigate a security incident, fraud, or abuse | | Consent record | Product Nerve | Remembers your cookie choice | 24 months | | Billing session | Paystack, Paddle | Completes a checkout you initiate | Session |

Analytics (consent required on marketing pages; product analytics disclosure below)

| Technology | Provider | Purpose | Duration | |---|---|---|---| | PostHog | PostHog | Understanding how the product is used: pages, features, funnels | Up to 12 months | | Google Analytics | Google | Marketing page traffic measurement | Up to 14 months |

Inside the logged in application we use PostHog as a processor to measure feature usage tied to your account, on the legal bases described in the Privacy Policy. You can object at any time via [privacy@productnerve.com], and we configure PostHog without cross site tracking.

Marketing (consent required, marketing pages only)

| Technology | Provider | Purpose | Duration | |---|---|---|---| | Meta Pixel | Meta | Measuring the effectiveness of our advertising | Up to 90 days, subject to the applicable Meta product configuration |

Under California law, the Meta Pixel may constitute "sharing" for cross context behavioral advertising. Declining marketing cookies, using the Your Privacy Choices link, or sending a GPC signal stops it entirely.

Mobile applications

The mobile apps use no advertising trackers. They include PostHog (product analytics, same terms as above), Sentry (crash reporting), RevenueCat (subscription state), and push notification tokens you can disable in your device settings or in app preferences.

4. Third party cookies

Where a technology above is set by a third party, that party's own privacy notice also applies (Google, Meta, PostHog, Paystack, Paddle, Supabase, Cloudflare). We link current notices from the cookie settings screen.

5. Managing cookies in your browser

You can also block or delete cookies in your browser settings. Blocking essential cookies will break sign in and checkout. Instructions for common browsers are linked from the cookie settings screen.

6. Changes

We will update this policy when our technology inventory changes and refresh consent where the change requires it. Material changes are announced in the banner or by email.