Privacy Policy

1. Introduction

At Nanno Digital, we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information when you use our services or visit our website.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, and other contact details you provide.
• Business Information: Company name, role, and business requirements.
• Project Information: Details related to your website development project.
• Technical Information: Browser type, device information, referrer URLs (the page you came from), and usage data. We infer approximate location (country/city) from IP addresses and may receive ISP information from our geolocation provider, but we do not store raw IPs.
• Analytics Identifiers: An anonymous ID stored in localStorage and a session ID plus location cache stored in sessionStorage for first-party analytics. When analytics consent allows it, Google tag may also use analytics cookies or identifiers to measure site visits and campaign performance.
• AI Guide Interaction Data: When analytics consent allows it, we may store redacted and truncated previews of website guide questions and responses, guide actions, selected plans or templates, response source, page path, and session ID. We do not intentionally store raw guide prompts in analytics.
• Communication Data: Records of our correspondence and interactions.
• Communication Preferences: Your preferred methods of contact and communication history.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and personalize our services
• To communicate about your project
• To process payments and maintain records
• To improve our services and website
• To operate, test, and improve the website AI guide and quote recommendations
• To send relevant marketing communications (with your consent)
• To comply with legal obligations
• To send SMS text messages regarding your projects and services
• To make phone calls for consultation, clarification, or project updates

4. Data Security

We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. We use industry-standard encryption, secure servers, and regular security assessments to ensure data protection.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the data.

6. Third-Party Services

We may use third-party services to support our operations, such as hosting providers, payment processors, email delivery partners, and an IP-based geolocation provider (ipapi.co) to infer approximate location (country/city). We also use Firebase/Firestore to store first-party analytics and Google tag/Google Analytics for website and campaign measurement. For security, we use Firebase App Check with Google reCAPTCHA to protect our services from abuse; App Check/reCAPTCHA may load before consent in order to secure the site. When the website AI guide is enabled, guide messages may be processed by OpenAI to generate bounded responses from approved website-service context. Where supported, guide requests are configured not to be stored by the AI provider. We do not store raw IP addresses. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access to your personal information
• Correction of inaccurate data
• Deletion of your information
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent

You can also opt out of analytics by declining the consent banner where available or by clearing localStorage for this site. You may also use the Privacy Settings link in the footer to withdraw consent. You may contact us to request deletion of analytics records associated with your anonymous ID.

8. Communication Preferences

You have the right to control how we communicate with you:

• You can opt out of SMS messages by replying "STOP" to any message
• You can request to be placed on our "do not call" list for phone communications
• You can contact us to update your communication preferences at any time
• You may specify your preferred communication method for project updates

Please note that even if you opt out of certain communications, we may still need to contact you regarding critical account or service information.

9. Cookies, Local Storage, and Analytics

Our website uses cookies to remember preferences and support core site functionality. We also collect first-party analytics (such as page views, device type, and approximate location) and store them in our own Firebase/Firestore environment. We use localStorage to store an anonymous analytics ID and your consent choice, and sessionStorage to store a session ID and location cache. We record referrer URLs to understand how visitors arrive at our pages. When analytics consent allows it, Google tag may send page-view and campaign measurement data to Google Analytics or Google Ads measurement services. We do not store raw IP addresses. We load Firebase SDKs from Google as a service provider to deliver this first-party analytics, and App Check with reCAPTCHA may load before consent as a strictly necessary security measure.

If you use the website AI guide and analytics consent is allowed, we may record redacted and truncated previews of guide questions and responses plus non-sensitive guide metadata, such as whether the answer came from the AI model, fallback logic, or safety handling. This helps us review guide quality, fix bad answers, and improve quote routing. Please do not enter sensitive personal, legal, medical, financial, or confidential business information into the guide.

In regions that require consent (for example EU/EEA/UK/CH), analytics runs only after you opt in. In other regions, analytics may run by default. Google tag is configured with denied defaults for analytics and advertising storage until the site consent state is available. Advertising storage, ad personalization, and ad user data remain denied unless a separate marketing consent experience is added. You can control storage preferences through your browser settings, and you can withdraw consent at any time.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes through our website or direct communication when appropriate.

12. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@ashurnanno.com.

13. Legal Basis for Processing (for EU/EEA Users)

If you are in the European Union or European Economic Area, we process your personal data based on one or more of the following legal grounds:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Protection of vital interests
• Public interest
• Legitimate interests

For analytics in the EU/EEA/UK/CH, we rely on consent where required. For other regions, we may rely on legitimate interests to understand site usage and improve our services.