Privacy Policy

This privacy policy describes how Nymaia (hereinafter "we") collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

Data Controller

Yannis Mesbah and Imane Benazzouz — Nymaia
Email: contact@nymaia.com
Paris, France

Data Collected

We only collect data that you voluntarily provide through:

• The contact form (name, email, phone number, project type, estimated budget and message)
• Communication by email or phone
• Client-account data required for the customer area, or to link a contact request to your account when you are signed in
• The conversational assistant available on the site: the content of your exchanges with it, together with any contact details you choose to leave (name, email, phone number, description of your need). If you use voice input, the recording is transcribed to text on our own server and the audio is then deleted
• The application form on the careers page (name, email, phone number, role applied for, LinkedIn profile, link to your CV, message)

Purpose of Processing

Your data is used exclusively to:

• Respond to your contact requests
• Prepare quotes and commercial proposals
• Ensure follow-up on our services
• Link contact requests to your customer area when you are authenticated
• Answer your questions through the conversational assistant and, if you leave us your contact details there, get back to you
• Review your application when you apply through the careers page

Legal Basis

The processing of your data is based on your consent (Article 6.1.a of the GDPR) and/or on the performance of pre-contractual measures (Article 6.1.b). You may withdraw your consent at any time, without affecting the lawfulness of processing already carried out.

Data Retention Period

• Contact requests and commercial exchanges: 3 years after the last contact
• Conversations with the assistant: 12 months
• Unsuccessful applications: 2 years after the last exchange, in line with the CNIL recommendation
• Customer-area account data: until you delete your account

Data Recipients

Your data is never sold or shared with third parties for commercial purposes. It may only be communicated to:

• Our hosting provider and strictly necessary technical providers involved in operating the website and customer area
• Telegram: contact requests and job applications are notified to us through an internal Telegram channel, which therefore receives the content of your message
• Google (Gemini): the content of your exchanges with the conversational assistant is sent to this language-model provider to generate the answers
• Brevo: sending of transactional emails (confirmations, notifications). Provider established in the European Union
• Competent authorities in case of legal obligation

Transfers Outside the European Union

Two of the recipients listed above may process your data outside the European Union: Google, for exchanges with the conversational assistant, and Telegram, for internal contact and application notifications. These transfers are covered by the European Commission's standard contractual clauses and by those providers' own safeguards. If you would rather not be concerned, write to us directly at contact@nymaia.com instead of using the assistant or the form.

Cookies

This website only uses strictly necessary technical storage and cookies: language preference on the homepage, light/dark theme preference, and technical elements related to the customer area. No analytics, advertising or third-party tracking cookies are currently used.

Your Rights

Under the GDPR, you have the following rights:

• Right of access: obtain confirmation of the processing of your data and receive a copy
• Right to rectification: have inaccurate data corrected
• Right to erasure: request the deletion of your data
• Right to restriction of processing
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to withdraw your consent: at any time, by a simple email

To exercise these rights, contact us at: contact@nymaia.com

Complaints

You may file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

Last updated: August 2026