Privacy policy
What we collect
The information you enter on your card (professional identity, contact details, services and FAQs), your photo and, if enabled, a voice sample. We also retain your card's scan statistics.
Biometric data
Your photo and voice are used only to produce your video avatar and audio messages. This processing only takes place after your explicit consent, which you can withdraw at any time from your account. Withdrawal deletes the video, cloned voice and related files held by our technical providers.
Card visitors
We never store a visitor's raw IP address. We use it to infer a city and country, then discard it. Assistant conversations are retained anonymously to improve responses.
Retention and deletion
Statistics are retained for 24 months. Your card data is deleted within 30 days after your account is closed. You may request an export or deletion of your data at any time at manager@gonzaqueboissy.com.
Service providers
Hosting and database services, speech synthesis (ElevenLabs), and language models for the assistant. Each provider only accesses strictly necessary data.
Payments (Paddle)
Our sales are handled by Paddle.com, the Merchant of Record for all our orders. When you buy a subscription or a catalogue, Paddle collects and processes, as an independent controller, the data required for the transaction: name, email address, country, billing address, payment data and tax information. We neither receive nor store your card details; we only receive the order identifier, the associated email and the subscription status, in order to activate your access, manage renewals, handle refunds and meet our accounting and tax obligations. See Paddle's privacy policy: https://www.paddle.com/legal/privacy.
Data controller
Goldenseal OÜ (Tallinn, Estonia) is the data controller for the NUYU service. When a company onboards its staff, it is responsible for the professional data it provides, and NUYU acts as its processor for that part. Contact: manager@gonzaqueboissy.com.
Legal bases and consent
Performance of the contract covers account and card creation. Explicit consent covers the video avatar, voice cloning and publication in the public showcase: it is collected separately in your account and can be withdrawn at any time, with no impact on the rest of the service. Legitimate interest covers security and abuse prevention.
Your rights
Access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Write to manager@gonzaqueboissy.com: we reply within 30 days. You may also lodge a complaint with your country's data protection authority.
Transfers outside the EU
Some AI providers are located outside the European Union. These transfers rely on the European Commission's standard contractual clauses and are limited to the data required for the requested generation.
Cookies
Details of cookies and how to change your choice are set out in the cookie policy. See the cookie policy