Privacy Policy

1. Data controller

2. Data we collect

During this early access phase we only collect: your email address; and basic technical data generated when you visit the site (IP address, browser type, pages visited and usage metrics), gathered through analytics tools.

3. Purpose and legal basis

We use your email to inform you about the launch of naun, product news and the opening of early access. The legal basis is your consent (Art. 6(1)(a) GDPR), given by ticking the relevant box on the form.

We use technical and usage data to measure interest, improve the site and understand how it is used. The legal basis is your consent for non-essential cookies and, where applicable, our legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR).

4. Data retention

We keep your email while you remain subscribed to the early access list or until you unsubscribe. Analytics data is retained for 14 months.

5. Recipients and processors

To run the service we work with providers who process data on our behalf (processors), such as: our email platform Resend, our analytics tool (PostHog) and our payment processor (Lemon Squeezy). Each acts under a data processing agreement.

6. AI processing

naun includes a feature that turns your goal into a suggested set of next steps. To generate it, the text you write —your goal and any context you add— is sent to OpenRouter, the AI gateway we use, and to Anthropic, the provider of the model that generates the plan. Both process it on our behalf (as processors) solely to return the plan. That content may include sensitive information if you choose to share it (for example, about your finances, relationships or wellbeing); we recommend including only what you need.

OpenRouter and Anthropicare located in the United States, outside the European Economic Area. This international transfer relies on the mechanisms recognised by the GDPR —in particular, the European Commission's Standard Contractual Clauses and the data processing agreements (DPAs) signed with each provider—, as described in the International transfers section.

7. International transfers

Some providers are located outside the European Economic Area (for example, in the United States). In those cases, transfers rely on mechanisms recognised by the GDPR, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

8. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw your consent at any time without affecting the lawfulness of prior processing. Exercise these rights by writing to hola@naun.ai. You can also unsubscribe at any time via the link in every email.

If you reside in the EU, you may lodge a complaint with a supervisory authority. In Italy this is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it). In the UK, the ICO (ico.org.uk).

9. Minors

naun is not directed to people under 18 and we do not knowingly collect their data. If you believe a minor has provided us with data, contact us to delete it.

10. Changes to this policy

We may update this Policy. The current version will be posted on naun.ai with its update date.