Privacy Policy

Last updated: 8 September 2026

Your request is for a conversation. Your details are not a public security report.

1. Who handles your information

Drill Me is operated by Nuanu Inc. For privacy, website or service enquiries, contact support@nuanu.ai.

This policy covers Drill Me at drillme.app, www.drillme.app and our drill-me-security.vercel.app landing page. Other Nuanu websites and separately agreed security engagements may have their own notices.

2. Information we receive

• Requests: your email address, submitted website URL, selected service, description, authorization confirmation where requested, and related correspondence.
• Service records: request identifiers, timestamps, session identifiers and delivery status, used to save requests and avoid duplicates.
• Technical information: our hosting and delivery providers receive connection information such as IP address, browser and request metadata. Our form service uses a keyed hash of the IP address for rate limiting.
• Optional measurement: an advertising click identifier if you allow advertising cookies; basic visit and interaction events if Google Analytics is enabled and you separately allow analytics.

Please do not submit passwords, API keys, confidential datasets or personal information about other people. Providing contact and request details is necessary for us to respond; optional tracking is not.

3. Purposes and legal grounds

We use request details to answer you, discuss a proposed service and take steps at your request before a contract. We use technical records to operate and protect the site, prevent abuse and resolve delivery issues, based on legitimate interests where applicable. We rely on your consent for optional advertising and analytics storage, and may retain information where a legal obligation requires it. Sending a request does not subscribe you to a newsletter.

4. Providers and disclosures

• Vercel: website hosting, private request and session storage, and background processing.
• FormSubmit and our email provider: forwarding request details to support@nuanu.ai and handling replies. FormSubmit receives the form content and technical connection data when the browser sends the notification.
• Advertising tracker at aisamuraihub.com: after an attributed request is saved, our server sends the click identifier and the event “reg”. We do not include your email, website URL or message in that postback. The tracker can relay conversions to the advertising platform.
• Google Analytics, when enabled and allowed: basic usage events. Our event integration excludes submitted email addresses, URLs and message text and strips query parameters from the page URL it sends. We do not use it to record form contents or screen sessions.

Access is limited to people and providers who need it for these purposes. Information may also be disclosed where required by law or necessary to protect legal rights. Read the providers’ notices: Vercel, FormSubmit and Google.

5. Location and retention

Our contact location is Indonesia. Providers may process information in other countries, including the United States. Protections and rights can differ by location; contact us for information about the processing relevant to your request and applicable transfer safeguards.

We retain enquiries while responding, discussing or delivering an agreed service and, where necessary, to resolve disputes or meet legal obligations. Retention depends on whether you become a customer, ongoing correspondence and applicable recordkeeping requirements. The landing page does not automatically delete an enquiry after a fixed number of days. Session and attribution validity is 30 days; expiration does not itself delete previously stored requests or provider records. Cookie lifetimes are described in the Cookie Policy. You can request deletion by email.

6. Your choices and rights

Depending on the law that applies, you may request access, correction, deletion, a copy of your data, restriction or object to certain processing. Contact support@nuanu.ai; we may need proportionate information to confirm your identity. You may also complain to the data protection authority in your jurisdiction.

You can withdraw optional advertising permission through “Advertising settings” in the footer. If analytics is enabled, its separate “Analytics settings” control is available there. Withdrawal stops future optional collection on this browser; it does not undo a conversion already sent or make prior processing unlawful. Refusing optional tracking does not prevent requests.

7. Security, children and updates

We use HTTPS and restricted server-side storage for request records. No transmission or storage method is risk-free. This service is intended for adults acting for a business, not children. Contact us if a child has provided personal information. We may update this policy to reflect changes, with the current revision date shown above.