How Engine115 uses data.
Engine115 is Nomad Project’s reporting and creative-production workspace. Questions and privacy requests can be sent to ben@nomadproject.agency.
Account and workspace records
Engine115 stores sign-in information, brand and team assignments, tool permissions, and records you add to the workspace: brand guidance, research sources, reference ads, ideas, briefs, assets, expenses and reports.
Connected platforms
When you approve a connection, Engine115 uses the granted read access for that brand’s reporting and research. The implemented Shopify importer reads order identifiers, dates and sales amounts; it does not import customer names, emails, phone numbers or addresses. Meta imports contain advertising performance and creative records.
Provider access credentials are encrypted on the server. Account connections and report access are separate permissions. You can disconnect a saved account in Connections; previously imported records remain until they are removed through a separate request.
Research and AI
When an authorized team member starts a configured AI job, relevant workspace evidence, instructions and approved assets may be sent to the configured model provider to produce the requested research, tags, concepts or images. Opening the workspace does not start a paid AI job. Research may also read assigned public sources or configured competitor-ad services.
Workspace records are stored using Supabase. AI and optional research providers depend on the connections enabled for the application. The owner controls access, usage limits and the enabled services.
Access, retention and removal
Brand and tool permissions restrict who can see workspace records. Revenue access is controlled separately. Assigning a reference library to the creative system does not make it visible to clients.
Records are retained for workspace operation until removed or handled through a verified privacy request. Removing live records also requires review of backups and previously downloaded copies. If any records must be retained, we explain the scope and reason when responding to the request.
Request access, correction or removal of your data. We may need to verify your identity or authority before releasing or removing records.
Updated October 8, 2026.