Privacy Policy

Last updated: January 2025

This Privacy Policy explains how NimasLab collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data We Collect

When you use our website, we may collect:

• Account information — Name and email address when you sign in with Google
• Session data — Authentication tokens to keep you logged in
• Technical data — Browser type, device information, and IP address

2. How We Use Your Data

We use your data to:

• Authenticate your account and provide access to the platform
• Improve website functionality and user experience
• Ensure security and prevent abuse

3. Third-Party Services

We use the following third-party services:

• Google OAuth — For authentication (Google's privacy policy applies)
• Supabase — For data storage (hosted in EU)

4. Data Retention

We retain your account data for as long as your account is active. Session data is automatically deleted when you log out or after expiration. You may request deletion of your data at any time.

5. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate or incomplete data
• Erasure — Request deletion of your data
• Withdraw consent — Revoke consent at any time
• Portability — Receive your data in a portable format

6. Cookies

We use essential cookies for authentication and session management. These are necessary for the website to function. You can disable cookies in your browser settings, but this may affect functionality.

We may update this policy from time to time. Continued use of the website constitutes acceptance of any changes.