Skip to content

privacy policy.

Effective October 13, 2026.

controller and processor

nicebaas is operated by Cofactor, LLC.

Stripe is the payment processor. Each product will have its own Stripe account.

Cofactor, LLC is the controller for account data, billing data, support mail, and use of this website.

Cofactor, LLC is the processor for customer project data. That means the records, files, form submissions, and end-user data a customer stores in a project. The customer decides why that data is stored. Cofactor, LLC handles it to provide nicebaas.

Controller contact: support@cofactor.consulting and 4301 S Flamingo Rd, Ste 106 PMB 610, Davie, FL 33330.

A data protection officer and an EU representative are not named here, because neither is confirmed.

information the service uses

Account data includes the email address used to sign in and the authentication material the account needs. Studio also stores membership in a project.

Billing data includes the plan, renewal status, and invoice records. Card numbers are collected by Stripe during hosted checkout, not typed into this website.

Support mail is whatever you send to support@cofactor.consulting.

The service keeps the logs it needs to run and to secure the account. This policy does not name an analytics or advertising tool, because none is confirmed here.

This policy does not claim collection of precise geolocation, biometrics, or government identifiers.

Stripe

Stripe is the payment processor. Each product will have its own Stripe account. Payments for nicebaas are processed on the nicebaas Stripe account, separate from any other product.

Stripe receives the billing details needed to charge the plan and to provide invoices. How Stripe handles that information is described in the Stripe Privacy Center.

why it is used

Account and project data are used to provide nicebaas. The legal basis is the contract with the customer.

Security logs and abuse prevention serve the operator’s legitimate interest in keeping the service running and the accounts safe.

Billing records are kept where a legal obligation requires books for the charges Stripe processes.

Where the operator asks for consent, the request will say so. This page does not describe a consent banner, because none is confirmed.

California (CCPA)

This section is the notice at collection for California residents.

Categories that may be collected for an account are identifiers (such as an email address and an account id), commercial information (the plan and invoice records), and internet or network activity the service logs to operate. Customer content is the project data the customer stores. For that content, Cofactor, LLC is the processor.

Cofactor, LLC does not sell personal information. Cofactor, LLC does not share personal information for cross-context behavioral advertising.

A California resident may ask to know, delete, or correct personal information the operator holds as a controller, and may opt out of sale or sharing. Write to support@cofactor.consulting. An authorized agent may use the same address. The operator will not discriminate against someone for making a request.

GDPR

Where the GDPR applies, the controller is Cofactor, LLC. The contact details are support@cofactor.consulting and 4301 S Flamingo Rd, Ste 106 PMB 610, Davie, FL 33330.

People whose account data the operator controls may ask for access, correction, erasure, restriction, portability, or to object. They may also complain to a supervisory authority. Send the request to support@cofactor.consulting.

For project data the customer stores, the customer is the controller and Cofactor, LLC is the processor. Requests about that data should go to the customer first.

Stripe and the operator’s hosting providers, including the Cloudflare service that serves this website, may process information outside the country where a person lives. The transfer tool for a given transfer is not confirmed on this page.

Plan ceilings are account rules. This page does not describe a solely automated decision that produces a legal effect.

retention and children

Account information is kept while the account is open. Billing records are kept for as long as the books require. That period is not stated as a number of years here.

Activity shown in Studio is described in the product as kept for 90 days. Other retention periods are not confirmed on this page.

nicebaas is a service for people running a project. It is not directed at children.

changes and contact

When this policy changes, the effective date changes with it. That date is October 13, 2026 until a real date is confirmed.

Privacy requests go to support@cofactor.consulting or by post to 4301 S Flamingo Rd, Ste 106 PMB 610, Davie, FL 33330. The contact page lists the same details. Payments remain with Stripe, on a Stripe account that belongs to this product.