Legal notice and privacy

Who publishes this site

Legal name: [à valider]. Legal form: [à valider]. Registered office: [à valider]. Tax identification number: [à valider]. Company register: [à valider].

Responsible for publication: [à valider].

Contact for anything on this page, including exercising your rights: contact@nalto.io.

Where the site is hosted

The site and the diagnostic API are hosted by Vercel Inc. (United States), vercel.com. Postal address: [à valider].

Completed diagnostics are stored in a Supabase database, supabase.com. Hosting region: [à valider].

What we collect, and when

Browsing this site: nothing. No cookies, no analytics, no tracking pixels. There is no cookie banner because there is no cookie to accept.

At the end of the free diagnostic, and only if you fill in the form: your first name, your email, your company name and, optionally, your phone number. Stored alongside them is what you told us during the conversation — the process you described and the transcript — because that is the diagnostic itself.

On the tech community form, and only if you send it: your first and last name, your email, the role you're after, your years of experience, where you're based, your availability and a link to your public profile — plus your phone number if you choose to give it, since that field is optional. Nothing is stored without the box ticked at the bottom of the form.

On every request to the server: your IP address, held in memory to curb abuse. It is not written to our database. Vercel, as the host, keeps its own access logs.

What we use it for

To hand you back your diagnostic, to discuss what comes out of it, and to prepare a call if you ask for one. Nothing else.

If you join the tech community: to write to you when a mission matches your profile. Nothing else.

There is no mailing list, and we neither sell nor pass this data to anyone for commercial purposes.

Legal basis: your consent, given when you submit the form, and our legitimate interest in answering a request for contact.

Who else sees it

Anthropic (anthropic.com) — the model that runs the interview and writes the diagnostic. What you type during the conversation goes through its API.

Supabase — the database where the finished diagnostic is stored.

Notion (notion.so) — a copy of the contact and the diagnostic for our sales follow-up, and the tech community waiting list.

Vercel — hosting for the site and the API.

Google — the site's fonts load from its servers, which see your IP address; and the booking link leads to Google Calendar.

These providers may process data outside the European Union. Applicable safeguards and exact regions: [à valider].

How long we keep it

Retention period for diagnostics and contact details: [à valider].

Retention period for community applications: [à valider].

A diagnostic's share link does not expire today. Whoever holds the link can read the diagnostic — not the contact details, not the transcript. If you want it switched off, say so and it is done.

Your rights

You can ask us to access your data, correct it, delete it, restrict its use, object to it, or receive it in a reusable format. An email to contact@nalto.io is enough, with no need to justify yourself.

If our answer does not satisfy you, you can complain to the Spanish data protection authority (aepd.es) or, in France, to the CNIL (cnil.fr).

Site content

The text, design and code of this site are ours. Third-party trademarks and logos shown here belong to their owners and appear for reference.

What we deliver to a client is a different matter: it belongs to them. That is a house rule, not a negotiated exception.