This policy explains what personal data the website usenudge.app collects, why, who receives it and what your rights are. It adapts the privacy policy Addvocate has published since 14 August 2024 to this website.
Who is responsible
The data controller is SAS Addvocate, 10 rue Edmond Guillout, 75015 Paris, France. For any question about your data, write to contact@addvocate.ai.
This policy covers the website usenudge.app. The Nudge product, used by customers who connect their own tools, is governed by the agreement signed with each customer. The commitments that apply to it are summarised below under "The Nudge product".
What we collect on this website, and why
| What | Why | Legal basis | How long |
|---|---|---|---|
| The review form: your work email, the date of your next board meeting if you give it, the page language and the button you used | To reply to you and organise the review you asked for | Steps taken at your request before a contract, and our legitimate interest in answering business enquiries | Up to three years after our last contact with you |
| Visit measurement: a random visit identifier, the pages viewed during the visit, active reading time, the kind of site that sent you (for example a search engine or LinkedIn), your country and device family | To understand which pages are useful and where visits come from | Our legitimate interest in running and improving the website | The visit identifier is deleted when you close the tab. The resulting notification is kept in our internal workspace and deleted on request. |
| Tracked links: some links we send by email or direct message carry an opaque code | To know that the person we wrote to opened our link | Our legitimate interest in business-to-business prospecting | As long as the prospecting relationship lasts, and never beyond three years after our last contact |
| Technical logs kept by our host (IP address, browser, pages requested) | To deliver the website and protect it from abuse | Our legitimate interest in operating a secure website | According to the host's own retention |
About visit measurement. We use no third-party analytics service. Our own endpoint receives a short message per notable event (for example, opening the review form or playing a video) and turns it into one line in our internal Slack workspace. It stores nothing itself. The visit identifier lives in your browser's session storage and disappears when you close the tab.
About tracked links. The code in a tracked link is random and means nothing on its own. It is removed from your address bar as soon as the page loads. Only our prospecting tool, which knows to whom it sent each link, can match it to a person; this website never learns your name from it.
Cookies
usenudge.app sets no cookies and does not use your browser's local storage. It only uses session storage, which your browser clears when you close the tab. This is why the website shows no cookie banner.
Videos. The films on usenudge.app are hosted on YouTube. Until you press play, the page shows our own poster image and loads nothing from YouTube. When you press play, the player is loaded from youtube-nocookie.com, Google's privacy-enhanced mode. From that moment Google receives your IP address and may store data in your browser, under its own privacy policy.
Who receives your data
We never sell your personal data. We share it only with the service providers that run this website for us, each bound to use it only on our instructions:
- Vercel Inc. (United States), which hosts the website;
- Web3Forms, which delivers the review form to our mailbox;
- Google (Google Workspace for our email; Google Fonts, which receives your IP address when your browser downloads the site's fonts; YouTube, which serves a video's player once you press play);
- Slack, where our internal notifications arrive;
- unpkg.com, a public code delivery network that receives your IP address when your browser downloads the site's scripts.
Some of these providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses.
The Nudge product
When a company connects its tools to Nudge, its data is processed under its agreement with Addvocate. Four public commitments apply in every case:
- We don't train AI models on customer data. No customer content is used to train or fine-tune any model, ours or a model provider's.
- Each connection reads only until the customer's administrator allows writing, and every message to a buyer is a draft a person approves before it goes.
- The companies that process customer data for us are named to the customer before anything is connected, and again whenever that list changes.
- On written request, customer data is deleted within thirty days, except where the law requires us to keep it.
The security page describes each connection in detail.
Your rights
Under the General Data Protection Regulation and the French Data Protection Act, you can ask to access, correct or erase your data, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to contact@addvocate.ai; we answer within one month.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Security
We protect personal data with technical and organisational measures suited to what we hold: encrypted connections, access limited to the people who need it, and as little data as possible in the first place.
Changes
When this policy changes, we update it here and change the date at the top of the page. The legal notice gives the full details of the publisher and the host.