Legal
Privacy policy.
Last updated: [date]
This policy explains what data Nolio collects, why, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR).
Data controller
[Name or company name], [full address], reachable at [email address].
Data we collect
Account: name, email address and password, stored hashed and never in plain text.
Content: the information you enter to create your ebooks (brief, outlines, texts, layout choices) and the exported files.
Subscription: chosen plan and billing history. Payment details are handled directly by our payment provider and are not kept by Nolio.
Technical data: connection logs and the information needed to keep the service secure.
Purposes and legal bases
Providing the service and managing your account: performance of the contract.
Billing subscriptions: performance of the contract and legal obligations.
Keeping the service secure and improving it: legitimate interest.
Sending you news about Nolio: your consent, which you can withdraw at any time.
Generation with artificial intelligence
To write and lay out your ebooks, the content you provide is sent to [AI model provider], only to produce your ebook. [State whether this content may be used to train models, according to the chosen provider's terms.]
Recipients and processors
Your data is only accessible to authorized staff of [name or company name] and to our technical processors: hosting ([name]), authentication ([name]), payment ([name]), AI generation ([name]) and email delivery ([name]).
When data is transferred outside the European Union, the transfer is covered by the European Commission's standard contractual clauses or an equivalent safeguard.
Retention periods
Account data: for as long as the account exists, then [period] after its deletion.
Content and files: until you delete them or close your account.
Billing data: 10 years, as required by accounting law.
Technical logs: [period, for example 12 months].
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death.
To exercise these rights, write to [email address]. We reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Cookies
Nolio only uses cookies that the website needs to work: remembering the language you chose and, once accounts open, keeping you signed in. They do not require your consent. If audience measurement or marketing cookies are added, a banner will let you accept or refuse them.