Privacy Policy

Nanoscale Studio — sole proprietorship — SIRET 878 082 320 00010, 65 rue du Village, 13006 Marseille, France. Contact: contact@nanoscale-studio.com.

We collect only the data needed to run the Service:

• Contract performance (Art. 6(1)(b) GDPR): providing the Service, managing your account, processing payments.
• Legitimate interest (Art. 6(1)(f) GDPR): security (IP hashing), aggregated analytics for the document owner.
• Legal obligation (Art. 6(1)(c) GDPR): keeping invoices and accounting records.
• Consent (Art. 6(1)(a) GDPR): non-essential cookies (analytics), if any are activated.

We rely on the following processors to operate the Service. All are contractually bound to GDPR-equivalent data-protection standards. Transfers outside the EU are framed by EU Standard Contractual Clauses (SCC) and, where applicable, the EU-U.S. Data Privacy Framework (DPF).

• Account data: for the lifetime of your account, deleted within 30 days of a deletion request.
• Viewer analytics: kept until the underlying document is deleted.
• Billing records: 10 years (French accounting and tax obligations).

Under the EU GDPR and the UK GDPR, you have the following rights regarding your data:

• Access: obtain a copy of your data.
• Rectification: correct inaccurate data.
• Erasure: delete your account and associated data.
• Restriction: limit certain processing.
• Portability: receive your data in a structured format.
• Objection: object to processing based on legitimate interest.

To exercise these rights, email contact@nanoscale-studio.com with your request and the email associated with your account. We reply within 30 days.

You may also lodge a complaint with the CNIL (France) or your local data-protection authority (e.g. the ICO in the UK).

If you reside in California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• Right to know what personal information we collect and how we use it (see “Data we collect” above).
• Right to request deletion of your personal information.
• Right to correct inaccurate personal information.
• Right to non-discrimination for exercising these rights.

We do not sell or share your personal information.

To exercise your CCPA rights, email contact@nanoscale-studio.com with “CCPA Request” in the subject line.

We aim to handle personal data to a standard at least equivalent to the EU GDPR worldwide. If your local law (e.g. Brazil’s LGPD, Canada’s PIPEDA, Australia’s Privacy Act) grants you additional rights, you may exercise them by writing to contact@nanoscale-studio.com.

We use:

• Essential cookies (no consent required): Supabase authentication session, password-protected viewer unlock token. Without them, the Service cannot operate.
• Audience-measurement cookies (consent required): if enabled, we use an analytics tool to understand how the Service is used. You can accept or refuse via the banner at the bottom of the page.

Account and document passwords are hashed with bcrypt. IP addresses are stored as non-reversible hashes. All communications use HTTPS. Database access is restricted by Row-Level Security (RLS).

The Service is not intended for children under 16. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us to request deletion.