Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The company states it cannot guarantee 100% security for personal data and that any information provided is at your own responsibility (risk_flags-1). Billing and payment information may be retained for ten years (risk_flags-2). Your personal data may be processed by various third-party service providers (data_use-1) and shared within the Nord group for business operations and sales (data_use-2). Partners may act as independent or joint data controllers (data_use-3), and data will be shared with Third Party Service providers if you purchase their services through Nord (data_use-4). Your personal data could also be disclosed during business transfers (data_use-5), for the company's legal rights protection or investigations (data_use-6), or to law enforcement if legally required (data_use-7). Additionally, you may receive marketing communications for up to a year after your subscription ends unless you opt out (cancellation_renewal-1).
95% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Critical issues which may include hard-to-reverse harm, legal limitation, or privacy exposure.
high95% confidence
No guarantee of total security
The company cannot guarantee 100% security for any personal data provided to or received by them, and any information received is provided at your own responsibility.
Why it matters: You bear the responsibility for any information you provide, as the company cannot guarantee its total security.
No company can guarantee the total security of your internet communications because no technology is infallible. By using our Services/Websites, you expressly acknowledge that we cannot guarantee 100% security for any personal data provided to or received by us through the Services/Websites, and that any information received from you through the Services/Websites is provided at your own responsibility.
Data security, paragraph 4 · Citation strength: strong
medium95% confidence
Retention of billing and payment information for 10 years
Billing and payment information is retained for ten (10) years after your last transaction to comply with accounting, tax, and financial regulations.
Why it matters: Your billing and payment information will be stored for a decade after your last transaction, potentially exposing sensitive financial records for an extended period.
**Legal compliance.** We retain billing and payment information for ten (10) years after your last transaction to comply with accounting, tax, and financial regulations.
Information retained until your Account is deleted, paragraph 4 · Citation strength: strong
Data Use
Practices concerning the collection, processing, and sharing of your personal data.
medium90% confidence
Third-party service providers process personal data
Third-party service providers help with operations such as payment processing, email automation, Website and app diagnostics, and analytics, and some of these providers may process personal data.
Why it matters: Your personal data may be processed by various third-party service providers for operational purposes.
**With our Service providers.** We use third-party service providers to help us with various operations, such as payment processing, email automation, Website and app diagnostics, analytics, and others. As a result, some of these service providers may process personal data.
Sharing your personal data, paragraph 2 · Citation strength: strong
medium90% confidence
Data sharing with Nord group companies for business operations and sales
Personal data is shared with other Nord group companies to carry out daily business operations, maintain and provide Nord Services, and for B2B product sales purposes for business customers.
Why it matters: Your personal data, and for business customers, contact information, will be shared across the Nord group of companies for operational and sales activities.
**Within Nord.** We share your personal data with other Nord group companies to carry out our daily business operations and to maintain and provide Nord Services to you. We may also share the contact information of Nord business customers (i.e., customers who want to use our products as a tool for their business) with other Nord group companies for B2B product sales purposes (business customers have the right to object to such transfers at any time).
Sharing your personal data, paragraph 5 · Citation strength: strong
medium90% confidence
Partners may act as independent or joint data controllers
Partners such as distributors, resellers, and app store partners may act as independent data controllers, meaning their procedures and privacy policies will govern your relationship, or as joint controllers, meaning they share responsibility for data processing.
Why it matters: Your personal data may be controlled by third-party partners and governed by their terms, or jointly controlled with the company, impacting how your data is handled.
**With our partners.** Sometimes our partners (such as distributors, resellers, and app store partners) will act as independent data controllers of your personal data. In such cases, your relationship will be governed by the procedures they have established (e.g., their terms of use and privacy policies). In other cases, we may collaborate with partners as joint controllers, meaning that we will jointly define the purpose and means of data processing. Both joint controllers are then responsible for the data processing and its compliance with the applicable privacy laws.
Sharing your personal data, paragraph 6 · Citation strength: strong
medium90% confidence
Personal data shared with Third Party Service providers
When purchasing Third Party Services through Nord, certain information (like email address, Subscription term, payment amount, and Subscription ID) will be shared with the provider of those services for activation, administration, provision, communication, and experience improvement.
Why it matters: Your personal data will be shared with third-party service providers when you purchase their services through Nord, and their own privacy policies will govern the processing of that data.
** When you purchase Third Party Services through Nord (such as Incogni, Saily, or Coveron), you agree that certain information (e.g., your email address, Subscription term, payment amount, and Subscription ID) will be shared with the provider of Third Party Services for the purpose of activating, administering, providing you with, and communicating to you about their services, as well as for improving your experience. When you use Third Party Services, your personal data is processed by the provider of Third Party Services in accordance with their established procedures and privacy policies.
Sharing your personal data, paragraph 7 · Citation strength: strong
medium90% confidence
Personal data may be disclosed for business transfers
Personal data may be shared with relevant third parties when the business is sold, merged, acquired, or undergoes similar corporate events.
Why it matters: Your personal data could be transferred to a new company or entity if there's a business transfer like a sale or merger.
**Business transfers.** We may share your personal data with relevant third parties (and their agents or advisors) when we sell or negotiate to sell our business, or go through a corporate merger, acquisition, consolidation, asset sale, reorganization, liquidation, or similar event. In the course of such proceedings, Nord will take all reasonable measures to ensure the confidentiality of your personal data.
Sharing your personal data, paragraph 9 · Citation strength: strong
medium90% confidence
Personal data may be disclosed for legal rights protection or investigations
The company may need to disclose personal data to establish or exercise legal rights, defend against legal claims, or take action regarding illegal activities, suspected fraud, and violations of their General Terms.
Why it matters: Your personal data may be disclosed if the company deems it necessary to protect its legal rights, defend against claims, or investigate illegal activities.
**Protection of our rights.** We may need to disclose personal data to establish or exercise our legal rights, or to defend ourselves against any legal claims or other complaints. We may also need to share such information if we believe it is necessary in order to investigate, prevent, or take action with respect to illegal activities, suspected fraud, and violations of our [General Terms](https://my.nordaccount.com/legal/terms-of-service/).
Sharing your personal data, paragraph 10 · Citation strength: strong
medium90% confidence
Disclosure of limited personal data to law enforcement
The law may require disclosure of limited personal data to law enforcement authorities, particularly if a legally valid request includes specific identifiers enabling user identification, and the request meets legal standards under Panamanian law.
Why it matters: Your personal data may be disclosed to law enforcement if legally required, despite the no-logs policy, if specific identifiers allow you to be identified.
** The law may require us to disclose limited personal data to law enforcement authorities. In most cases, we have no data to share. In accordance with our strict no-logs policy, we do not record our users' internet activity or their IP addresses when using our NordVPN services. As a result, there is no link between IP addresses, websites visited, and individual users. If we receive a legally valid request that includes specific identifiers (such as an email address) enabling us to identify a particular user, we may be required to disclose the requested data (to the limited extent it is available to us and in accordance with this Privacy Policy).
Sharing your personal data, paragraph 11 · Citation strength: strong
Cancellation & Renewal
Terms related to how you can cancel services, provisions for automatic renewals, and associated billing implications.
low90% confidence
Marketing communications after subscription ends
The company may continue sending marketing emails, push notifications, and/or in-app messages for up to one (1) year after your Subscription ends, unless you opt out earlier.
Why it matters: You might continue receiving marketing communications for up to a year after your subscription ends unless you actively opt out.
**Marketing communications.** We may continue sending you marketing emails, push notifications, and/or in-app messages for up to one (1) year after your Subscription ends, unless you opt out earlier.
Information retained until your Account is deleted, paragraph 4 · Citation strength: strong
Gotchas
Potentially tricky clauses that might be against your interest but aren't severe enough for a 'risk flag.'
low95% confidence
Agreement to Privacy Policy by using services
By using their Services and/or visiting their Websites, you confirm that you have read this Privacy Policy and agree to be bound by it.
Why it matters: Your continued use of the services or websites implies your agreement to the Privacy Policy, even if you haven't explicitly clicked an 'Accept' button.
By using our Services and/or visiting our Websites, you confirm that you have read this Privacy Policy and agree to be bound by it. If you do not agree with any part of this Privacy Policy, please refrain from accessing/using our Services and Websites.
User-favorable clauses that provide you with control, refunds, or promise transparency and data security.
Protection95% confidence
You have the right to access your personal data
You have the right to know about your personal data being processed for the purposes listed in this Privacy Policy and can ask for a copy of it.
Why it helps: You can request and receive a copy of your personal data being processed, giving you transparency into what information the company holds about you.
**Right to access.** You have the right to know about your personal data being processed for the purposes listed in this Privacy Policy. You can ask us about your personal data that we process and have us send you a copy of it.
Your privacy rights, paragraph 2 · Citation strength: strong
Protection95% confidence
You have the right to rectify inaccurate or incomplete personal data
You have the right to ask the company to rectify personal data you think is inaccurate or incomplete.
Why it helps: You can correct any personal data that you believe is inaccurate or incomplete, ensuring the information held about you is correct.
**Right to rectification.** You have the right to ask us to rectify personal data you think is inaccurate or incomplete. If you'd like to edit your Nord Account information, please contact our support team at [support@nordaccount.com](mailto:support@nordaccount.com).
Your privacy rights, paragraph 2 · Citation strength: strong
Protection95% confidence
You have the right to request deletion of personal data
You have the right to request the deletion of personal data that has been collected from or about you (also known as the right to be forgotten), though this right is not absolute.
Why it helps: You can request that your personal data be deleted, which helps protect your privacy by removing information you no longer wish to be held.
**Right to deletion.** You have the right to request the deletion of personal data that we have collected from or about you (also known as the right to be forgotten). However, please note that this right isn't absolute — for example, it does not cover situations where data is needed for us to comply with a legal obligation.
Your privacy rights, paragraph 2 · Citation strength: strong
Protection95% confidence
You have the right to restrict processing of personal data
You have the right to request that the company restrict the processing of your personal data if you believe it is inaccurate or being processed without valid legal reason.
Why it helps: You can limit how your personal data is used if you have concerns about its accuracy or the lawfulness of its processing.
**Right to restrict processing.** If you believe that your personal data is inaccurate or that we are processing it without valid legal reason, you have the right to request that we restrict the processing of such personal data.
Your privacy rights, paragraph 2 · Citation strength: strong
Protection95% confidence
You have the right to object to processing based on legitimate interests
In cases where personal data is processed in pursuit of legitimate interests, you have the right to object to this processing by referencing your personal circumstances.
Why it helps: You can object to your data being processed based on the company's legitimate interests if you feel it negatively impacts your personal situation.
**Right to object to processing.** In cases where we are processing your personal data in pursuit of our legitimate interests, you have the right to object to this processing by referencing your personal circumstances.
Your privacy rights, paragraph 2 · Citation strength: strong
Protection95% confidence
You have the right to withdraw consent for data processing
You have the right to withdraw your consent to the processing of your data for a specific purpose at any time.
Why it helps: You can revoke your permission for data processing, giving you ongoing control over how your information is used, although it only affects future operations.
**Right to withdraw consent.** Even if you had previously given your consent to the processing of your data for a specific purpose, you have the right to withdraw that consent.
Your privacy rights, paragraph 2 · Citation strength: strong
Protection95% confidence
You can delete your account at any time
You can delete your Account at any time through the Nord Account settings or via applications.
Why it helps: You have direct control over your account and can permanently delete it and associated data whenever you choose.
You can delete your Account at any time. Log in to your [Nord Account](https://nordaccount.com/login/password?challenge=4%7C9bc9008c507f43648e747b6b3ae51b96), navigate to "Account settings," go to the "Account deletion" section, and click the "Delete account" button. You will have to verify this request via email. Alternatively, you can delete your Account using our applications by following the instructions provided in corresponding [support guides](https://support.nordvpn.com/hc/en-us/articles/19477434542865-How-to-delete-my-NordVPN-account).
You can opt out of marketing emails by updating preferences or clicking unsubscribe links and turn off marketing in-app messages and push notifications via Nord Account settings or device settings.
Why it helps: You have control over receiving marketing communications and can easily opt out of emails, in-app messages, and push notifications.
ays disable all push notifications in your device simply by adjusting your device settings or our applications settings (if available) – this will turn off all push notifications (including marketing push notifications).
You can manage cookie and tracking technology consent
You can manage privacy preferences for cookies and similar tracking technologies on Websites via the "Cookie Preferences" or "Your privacy choices" link and disable analytics/advertising in application settings.
Why it helps: You have control over how cookies and other tracking technologies are used, allowing you to manage your privacy settings on both websites and applications.
You have full control and can disable analytics and advertising at first use of applications and any time later in your "Privacy Preferences" settings, located in the application settings.