Legal

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: [Mese Anno — aggiorna ogni volta che modifichi il documento]

1. Data controller

[Ragione sociale], with registered office at [Indirizzo completo], VAT [Partita IVA], is the data controller for all personal data collected through this service. For any data-related request, write to [email privacy — es. privacy@noemie.ai].

2. Data we collect

Account data: your email address, collected when you request an invite or sign in.

Usage data: interactions with the assistant, habits and preferences you configure, and activity logs generated during use.

Technical data: IP address, browser type, and session identifiers — collected automatically for security and performance.

3. Purpose and legal basis

Providing the service (Art. 6(1)(b) GDPR): we process your data to deliver the Noemie assistant and maintain your account.

Legitimate interest (Art. 6(1)(f) GDPR): security monitoring, abuse prevention, and service reliability.

Legal obligation (Art. 6(1)(c) GDPR): where required by applicable EU or Italian law.

We do not use your data to train AI models — not ours, not third parties'.

4. Data retention

Account and usage data is retained for the duration of your subscription plus [X mesi/anni — specifica il periodo]. You may request earlier deletion at any time (see Section 6). Technical logs are retained for a maximum of [X giorni].

5. Data transfers

All data is stored and processed on servers within the European Union. We do not transfer personal data outside the EU/EEA. Our infrastructure is hosted on [nome provider — es. Hetzner, OVH, AWS EU] in [regione — es. Frankfurt, Milan].

6. Your rights

Access: you may request a copy of all personal data we hold about you.

Rectification: you may correct inaccurate data at any time from your dashboard.

Erasure: you may request deletion of your account and all associated data. We will purge all records within 72 hours of the request.

Portability: you may export your data in machine-readable format on request.

Objection: you may object to processing based on legitimate interest.

To exercise any of these rights, contact [email privacy].

7. Complaints

If you believe your data is being processed unlawfully, you may lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) at garanteprivacy.it, or with the authority of your EU member state of residence.