who is responsible
The data controller is ND HOLD, SASU, SIREN 953 878 402, 9 boulevard de Boissy, 95130 Le Plessis-Bouchard, France. Contact for anything related to your data: nicolas@nicolasfinance.com.
what we collect
| When | Data |
|---|---|
| You join the waitlist | Work email; company and number of agents if you fill them in; language; the page you signed up from; approximate country, derived from your IP address by our host (we do not store the IP address itself). |
| You create a sandbox | Work email; company if you fill it in; language; your sandbox usage: workspace, agents and keys created, policies, simulated payments, and logs of the API and MCP calls made with your keys. |
| You browse the site | Audience statistics through Vercel Web Analytics: pages viewed, referrer, country, device and browser type, aggregated. No cookies, no cross-site tracking. |
| Technical operation | Our host keeps short-lived technical logs (IP address, user agent, requested URL) for security and operation. |
| You write to us | Your email address and the content of your message. |
We do not collect payment data. No real money is handled during the private preview.
why, and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Manage the waitlist, send you a confirmation and contact you when early access opens | Your consent, given when you submit the form (art. 6.1.a). You can withdraw it at any time. |
| Provide the sandbox you request and send you your access details | Steps taken at your request to provide the service (art. 6.1.b) |
| Secure the service, prevent abuse, rate-limit requests | Our legitimate interest in keeping the service safe (art. 6.1.f) |
| Measure audience in aggregate to improve the site | Our legitimate interest (art. 6.1.f), with a cookieless tool |
We do not sell your data, we do not share it for advertising, and we do not make automated decisions that produce legal effects on you.
how long
- Waitlist: 24 months after our last contact with you, then deleted.
- Sandbox: 24 months after your last activity, then deleted. Sandboxes may also be reset during the preview.
- Emails you send us: as long as needed to handle your request, and at most 24 months.
- Audience statistics: aggregated, with no data that identifies you.
- Hosting logs: according to Vercel's retention periods, which are short.
You can ask us to delete your data earlier at any time.
who processes it
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Website hosting, serverless functions, audience statistics | USA, global edge network |
| Supabase | Database (waitlist, sandbox) | EU region (Paris) |
| Resend | Transactional emails (confirmation, sandbox access) | EU sending region |
| Google Fonts, cdnjs (Cloudflare) | Delivery of fonts and of a 3D library used on the home page; they receive your IP address to serve the file | Global networks |
Each provider acts on our instructions. Where a provider is established outside the European Union, transfers are framed by the EU-U.S. Data Privacy Framework or by the European Commission's standard contractual clauses.
your rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, to withdraw your consent at any time, and to give instructions about what happens to your data after your death.
To exercise these rights, email nicolas@nicolasfinance.com from the address concerned. We answer within one month.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
security
Data is encrypted in transit (HTTPS). Access is limited to the people who need it. The public form can only add a row to the waitlist: it cannot read, change or delete any entry.
changes
We may update this policy as the service evolves. The date at the top of this page shows the latest version. See also our cookie policy and legal notice.