Your visitors’ data stays yours.
What Nudge does with your visitors’ data, and what it does not, in plain words. The legal detail is in our privacy policy.
Six commitments.
You decide, we process
For your visitors’ data, your company is the controller and Nudge is its processor, under article 28 of the GDPR. We process it on your instructions, to provide the service, and for nothing else.
The detail →No resale, no training
We sell no data, we do not use it for our own prospecting, and it is never used to train artificial intelligence models.
The detail →Your data in Europe, masked
Personal data is stored in the European Union, and masked before it is sent to the language model. Providers based in the United States are covered by the European Commission’s standard contractual clauses.
The detail →Security
Encryption in transit and at rest, data partitioned by organisation with rules enforced in the database itself, sensitive actions logged, internal access restricted.
The detail →Consent first
Audience measurement never starts without the visitor’s consent. Advertising tags are off by default: you decide whether to turn them on.
The detail →AI disclosed
The “AI-generated answers” notice always stays visible to your visitors, as the AI Act requires.
The detail →
Who does what, and where.
The main providers of the service. The full list, including those that receive nothing until you turn them on, is in the privacy policy.
- SupabaseDatabase and server processingEuropean Union (Ireland, files in Frankfurt)
- VercelHosting of the website and the applicationUnited States
- AnthropicLanguage model, personal information maskedUnited States
- ResendService emailsUnited States
- SentryTechnical errors, with no personal dataEuropean Union (Germany)
Frequently asked questions
Who is responsible for my visitors’ data?
Your company, as the controller. Nudge is your processor under article 28 of the GDPR: we process this data on your instructions, to provide the service.
Where is the data hosted?
Personal data is stored in the European Union (Ireland, with files in Frankfurt), and masked before it is sent to the language model. Some providers are based in the United States: these transfers rely on the European Commission’s standard contractual clauses.
Is my data used to train an AI?
No. Neither your visitors’ data nor their conversations are used to train artificial intelligence models.
How does a visitor exercise their rights?
They contact your company first, as the controller. If they no longer know whom to write to, they can write to us: we pass it on.
What happens in case of a data breach?
We inform you without delay, so that you can make the notifications that fall to you as the controller.
A question about your data?
Write to us: we answer, and we look with you at what Nudge would process on your website.
Write to us