Privacy Policy

1. Introduction

This Privacy Policy applies to the Fullstack Ag website located at fullstackag.com and all related services, content, and applications (collectively, the "Services") operated by Nerd Out Inc., a North Dakota corporation doing business as Fullstack Ag.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

This Privacy Policy should be read together with our Terms of Service, which govern your use of the Services.

2. Information We Collect

We collect information in several ways to provide, improve, and personalize our Services:

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your name, email address, and password. You may also provide a profile photo and additional profile details.
• Profile & Preferences: Information about your farming operation, location, experience level, interests, and preferences that you choose to share to personalize your experience.
• Payment Information: When you make a purchase, our third-party payment processor collects your billing address, credit card number, and other payment details. We do not store complete credit card numbers on our servers.
• Communications: When you contact us for support, respond to surveys, or participate in promotions, we collect the information you provide in those communications.
• Newsletter Subscriptions: When you sign up for our newsletter or download free resources, we collect your email address and any additional information you provide.
• User-Generated Content: Any content you post, such as comments, questions, or notes within our platform.

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain information:

• Usage Data: Pages and content you view, courses you access, features you use, time spent on the platform, and your interactions with our content.
• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Log Data: IP address, access times, referring URLs, and pages visited before and after using our Services.
• Location Data: General geographic location based on your IP address (we do not collect precise GPS location).

2.3 Information from Third Parties

• Authentication Providers: If you sign in using a third-party service (such as Google), we receive basic profile information from that service.
• Payment Processors: We receive transaction confirmations and limited payment information from our payment processors.
• Analytics Providers: We receive aggregated analytics data from third-party services we use to understand how our Services are used.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing Our Services

• Create and manage your account
• Deliver courses, resources, and content you have access to
• Process payments and manage subscriptions
• Provide customer support and respond to your inquiries
• Send transactional emails (account confirmations, password resets, purchase receipts)

3.2 Improving and Personalizing Your Experience

• Personalize content recommendations based on your interests and activity
• Analyze usage patterns to improve our platform and develop new features
• Conduct research and analytics to understand user needs
• Test new features and improvements

3.3 Communications

• Send our newsletter and educational content (with your consent)
• Notify you about updates, new features, and changes to our Services
• Send promotional materials and offers (you can opt out at any time)
• Request feedback and participation in surveys

3.4 Safety and Security

• Detect, prevent, and address fraud, abuse, and security issues
• Enforce our Terms of Service and other policies
• Protect the rights, property, and safety of our users and the public

3.5 Legal Compliance

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from public authorities
• Establish, exercise, or defend legal claims

4. How We Share Your Information

We may share your information in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business, including:

• Payment Processing: Stripe, PayPal, or similar providers to process payments securely
• Email Services: Email service providers to send newsletters and transactional emails
• Hosting & Infrastructure: Cloud hosting providers to store and serve our content
• Analytics: Analytics services to help us understand usage patterns
• Customer Support: Support tools to help us respond to your inquiries

These providers are contractually obligated to use your information only to provide services to us and to protect your information.

4.2 With Your Consent

We may share your information when you explicitly authorize us to do so.

4.3 Business Transfers

If Nerd Out Inc. is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or government regulations. We may also disclose information to protect our rights, property, or safety, or the rights, property, or safety of others.

4.5 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information and improve your experience. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our Services.

Types of Cookies We Use

Managing Your Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking certain cookies may affect the functionality of our Services. You can also opt out of interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info.

Do Not Track

Some browsers offer a "Do Not Track" (DNT) setting. There is currently no industry standard for how to respond to DNT signals. At this time, our Services do not respond to DNT signals, but you can use the cookie management options described above.

6. Data Retention

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account Information: Retained while your account is active and for a reasonable period afterward to allow for reactivation or to comply with legal requirements.
• Transaction Records: Retained for at least 7 years to comply with tax and financial regulations.
• Communications: Support communications are retained for up to 3 years after your last interaction.
• Usage Data: Typically retained in identifiable form for up to 2 years, then aggregated or anonymized.
• Marketing Preferences: Your opt-out preferences are retained indefinitely to honor your choices.

When you delete your account, we will delete or anonymize your personal information within 90 days, except for information we are required to retain for legal, tax, or regulatory purposes.

7. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL. Sensitive data is encrypted at rest.
• Secure Infrastructure: We use reputable cloud hosting providers with enterprise-grade security, including firewalls, intrusion detection, and 24/7 monitoring.
• Access Controls: Access to personal information is limited to employees and contractors who need it to perform their jobs, and they are bound by confidentiality obligations.
• Payment Security: Payment transactions are processed through PCI DSS-compliant payment processors. We do not store complete credit card numbers.
• Regular Assessments: We regularly review and update our security practices and conduct vulnerability assessments.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We honor these rights for all users regardless of location:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to certain exceptions.
• Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or by contacting us.
• Withdraw Consent: Where we rely on your consent to process your information, you may withdraw that consent at any time.

To exercise your rights: Contact us at privacy@fullstackag.com. We will verify your identity and respond to your request within 30 days. In some cases, we may need additional time, in which case we will notify you.

Non-discrimination: We will not discriminate against you for exercising your privacy rights.

9. State-Specific Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You may request deletion of your personal information, with certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information or share it for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond what is necessary to provide our Services.

To submit a request, email us at privacy@fullstackag.com or call us at the number provided in the Contact section. You may also designate an authorized agent to submit requests on your behalf.

Virginia, Colorado, Connecticut, Utah, and Other State Residents

If you reside in Virginia, Colorado, Connecticut, Utah, or other states with comprehensive privacy laws, you may have similar rights to access, correct, delete, and port your personal data, as well as the right to opt out of targeted advertising, profiling, and the sale of personal data. We honor these rights as described above. If you have concerns about how we handle your data, you may also have the right to appeal our decision or lodge a complaint with your state attorney general.

10. International Users

Our Services are operated in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

European Economic Area (EEA) and UK Residents: If you are located in the EEA or UK, you have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data include:

• Contract Performance: Processing necessary to provide our Services and fulfill our agreement with you.
• Consent: Where you have given us explicit consent, such as for marketing emails.
• Legitimate Interests: For purposes such as improving our Services, fraud prevention, and security, where your rights do not override our interests.
• Legal Obligation: To comply with applicable laws and regulations.

You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe our processing of your personal data violates applicable law.

11. Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@fullstackag.com.

12. Third-Party Links

Our Services may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you visit.

We are not responsible for the content, privacy practices, or security of third-party websites or services. Clicking on a third-party link is at your own risk.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you by email (if you have an account) or by posting a prominent notice on our website
• Provide a summary of key changes where appropriate

Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We aim to respond to all privacy inquiries within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

This Privacy Policy is effective as of January 20, 2026.